last executing test programs: 2.98932544s ago: executing program 4 (id=636): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x8001, 0x6, 0xfffffffd, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x7, 0x0, 0x7, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x4000002, 0xf27, 0xffff, 0x7, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) 2.937436341s ago: executing program 3 (id=637): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000dc0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x4, 0x4, 0x6, 0x5, 0x0, 0x5, 0xe, 0xf, 0x9, 0x1, 0xc6d, 0x401, 0x6c, 0x3, 0x7fffffff, 0x572, 0x1ff, 0x0, 0x7, 0x5, 0x4e, 0xfffffbcc, 0x4, 0x9, 0x7a9, 0x0, 0xb, 0x4, 0x6, 0x6, 0x80, 0xc, 0x4, 0x2, 0x80, 0x3a1, 0x1, 0x1, 0xbf9, 0x5, 0x9, 0x14e19416, 0x80000, 0x2c2f, 0x6, 0x0, 0x0, 0x324, 0x8, 0x42f6, 0x8001, 0x5, 0x9d, 0x6, 0xff, 0x7, 0x0, 0x6, 0x3, 0x5, 0x4, 0x3, 0x5, 0x9e58, 0xff, 0x38, 0x55b, 0x3, 0xfada, 0x4, 0x4, 0xc, 0xf0000000, 0x6, 0x2, 0xd2, 0x8, 0x80000001, 0x10000, 0x3ff, 0x7ff, 0x2, 0x3, 0x1, 0x6, 0x8, 0xfffffff8, 0x2, 0x30000, 0x3, 0x4, 0xcd, 0x9, 0x3, 0x3, 0x7, 0x2, 0x400, 0x13, 0x64, 0xb07, 0x7, 0x6, 0x30c, 0x10, 0x6, 0x9, 0x40, 0xffff, 0x2045, 0x6, 0x80000000, 0xf1b, 0xc16, 0x1ff, 0x9c, 0x5, 0x3, 0x1, 0x1, 0xa, 0x3, 0x46f, 0x6, 0x6, 0xffff, 0x1000, 0x0, 0xa7, 0xf8e, 0x1, 0x9, 0x4, 0x7fff, 0x2, 0x6, 0x4, 0x7, 0x10000, 0x3a273b20, 0x4, 0xff, 0xdc00, 0x7ff, 0xfffffffb, 0x6, 0x0, 0xc9, 0x8, 0x3, 0x3, 0xfffffffa, 0x3, 0x2, 0x8, 0x4, 0x2, 0x9, 0x8, 0x401, 0x10001, 0xa7, 0x6f49, 0x2, 0xfffffffc, 0x9, 0xc3d, 0x9, 0x40000000, 0x0, 0x2, 0x100, 0xae3, 0xd8, 0x9, 0x1, 0x2, 0x10000, 0x7, 0xfffffffa, 0x0, 0x0, 0x9, 0xf5e, 0x4, 0x9, 0x0, 0x8, 0x7fffffff, 0x6, 0xb3, 0x5, 0x6, 0x5, 0x4, 0x1, 0xb, 0x3, 0x8, 0xffff0c68, 0x922c, 0x5, 0x8, 0x7, 0xa9, 0x8cd, 0x5, 0x800, 0x2e72, 0x0, 0x58f1, 0xd0, 0x80000001, 0x7, 0x6, 0x0, 0x4, 0x2, 0x934c, 0x7fff, 0xffffffff, 0x7, 0xe, 0x5, 0x400, 0x0, 0x1, 0x5c, 0x2, 0x8, 0x400, 0x3, 0x6a, 0x4, 0x7fffffff, 0x1, 0x2, 0x10001, 0x4, 0xfffff8fd, 0x2, 0x4, 0x8, 0x4, 0x6, 0x5, 0x81, 0x0, 0x5, 0x3, 0x7, 0x2, 0x80000000, 0xff, 0x45319ce3]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r5, 0x1, 0xd8, 0x6, @remote}, 0x14) 2.937299812s ago: executing program 4 (id=638): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="07000000010001", 0x7) 2.914971243s ago: executing program 4 (id=639): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter, 0x48) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000000)=0x7, 0x4) connect$ax25(r0, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) 2.880465784s ago: executing program 4 (id=640): memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|=\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6Y\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\"DnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xca\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x972\x80\x1c\n\xed\xb7\x8f\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c\x96\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x00\x00\x00', 0x2) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) write(0xffffffffffffffff, 0x0, 0x0) 2.825558526s ago: executing program 4 (id=641): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) pipe2(0x0, 0x4000) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x10000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 2.651892744s ago: executing program 3 (id=646): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000c40)='./file1\x00', 0x810410, &(0x7f00000059c0)=ANY=[], 0x5, 0x1e5, &(0x7f00000001c0)="$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") ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x5, 0xff, 0xa, 0x1012, 0xc7, 0x8ea70077fdd59b28, 0x15, 'syz0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f0032"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1.782641812s ago: executing program 3 (id=651): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x34000}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) 1.736455834s ago: executing program 4 (id=654): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x3f, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x44) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.577974571s ago: executing program 3 (id=658): writev(0xffffffffffffffff, &(0x7f0000000300)=[{}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x20000050) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcff"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1004, 0x0, 0x7, 0x1}) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010300000000000000000000000014000780080012400000000005001500060000000500010006000000050005000a00000005000400000000000900020073797a30000000001100030068"], 0x60}}, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.157677869s ago: executing program 3 (id=659): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x11c}, 0x1, 0x0, 0x0, 0xa1}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) timerfd_create(0x0, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000040)) r8 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r8, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r8, &(0x7f0000000180)={0x20000005}) connect$qrtr(r1, &(0x7f0000000040), 0xc) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0xc8) writev(r1, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) 1.100803572s ago: executing program 1 (id=660): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r11, 0x21eae}}, 0x20}}, 0x0) 786.367565ms ago: executing program 2 (id=661): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000c40)='./file1\x00', 0x810410, &(0x7f00000059c0)=ANY=[], 0x5, 0x1e5, &(0x7f00000001c0)="$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") ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x5, 0xff, 0xa, 0x1012, 0xc7, 0x8ea70077fdd59b28, 0x15, 'syz0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f0032"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 700.907849ms ago: executing program 2 (id=663): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000240)="9c", 0x1}], 0x1}}], 0x1, 0x4040849) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r1}, 0x20) 656.024861ms ago: executing program 2 (id=664): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 654.279941ms ago: executing program 1 (id=665): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendto(r0, &(0x7f0000000200)="8566c3", 0x3, 0x2000, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000001c0)={r2}) 602.415173ms ago: executing program 2 (id=666): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 601.299853ms ago: executing program 0 (id=667): unshare(0x62040200) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) 549.762696ms ago: executing program 1 (id=668): syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @ssrr={0x89, 0x3, 0xd8}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x44}}, 0x0) 546.083226ms ago: executing program 1 (id=669): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x1610, 0x0, 0x1, 0x0, 0x3, 0xcc7, 0x9, 0xaab, 0x1, 0x103, 0x2, 0x1, 0x8, 0x1100004, 0x6, 0x409, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0xa, 0x4, 0x5, 0x3, 0x1, 0x3ff, 0x10000, 0xfffffff7]}) ioctl$COMEDI_UNLOCK(r0, 0x6406) 537.417336ms ago: executing program 0 (id=670): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb}, @flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x8a, 0x5}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f0000000340)="b5ecbd6dcb0d2b4a6046250f564969208fdef9729f2ebd5a9710d892ed8fd4738dbadfde10dc32c7c324d6961baee192b2740bcf4d77adf620903a4b78ae53eb52deba3791277f6302962ce825cac1e784"}) 481.672649ms ago: executing program 1 (id=672): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x5, 0x6, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x68, 0x0, 0xb6, 0x29, 0x0, @multicast1, @multicast1}}}}) 481.221878ms ago: executing program 2 (id=673): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) 480.260688ms ago: executing program 0 (id=674): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000c40)='./file1\x00', 0x810410, &(0x7f00000059c0)=ANY=[], 0x5, 0x1e5, &(0x7f00000001c0)="$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") ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x5, 0xff, 0xa, 0x1012, 0xc7, 0x8ea70077fdd59b28, 0x15, 'syz0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f0032"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 417.678091ms ago: executing program 1 (id=675): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x8f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xe0480, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) close_range(r4, 0xffffffffffffffff, 0x0) 368.358723ms ago: executing program 0 (id=676): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcm3724\x00', [0x8003, 0x6, 0x1, 0x7fe, 0x1e8, 0xcc7, 0xa, 0x7, 0xa, 0x1100, 0x2, 0x7, 0x3, 0x4, 0xaa1, 0xffffffff, 0x1, 0x1a449, 0x5, 0x3fffffff, 0x200088, 0x56, 0x50ca, 0x6, 0xb, 0x8, 0x5, 0x8, 0x2, 0x10000, 0xfffffff8]}) 347.610064ms ago: executing program 2 (id=677): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r11, 0x21eae}}, 0x20}}, 0x0) 347.435824ms ago: executing program 0 (id=678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) 2.447609ms ago: executing program 3 (id=679): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x601c}, {r0}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x4004}], 0x5, &(0x7f0000000080), &(0x7f00000000c0)={[0x5]}, 0x8) 0s ago: executing program 0 (id=689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd23, 0x2, {0x0, 0x0, 0x0, r2, {0xc, 0xfff1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.208' (ED25519) to the list of known hosts. syzkaller login: [ 29.821906][ T4310] cgroup: Unknown subsys name 'net' [ 30.059910][ T4310] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.357531][ T4310] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 31.494563][ T4324] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.496430][ T4331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.498408][ T4331] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.499649][ T4331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.500874][ T4331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.502170][ T4331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.503382][ T4331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.504907][ T4331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.505613][ T4335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.506150][ T4331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.507564][ T4335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.508836][ T4331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.510305][ T4335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.510491][ T4335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.511767][ T4331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.513264][ T4335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.513997][ T4331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.514817][ T4335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.516004][ T4331] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 31.516922][ T4335] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.518140][ T4331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.519840][ T4335] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 31.521136][ T4331] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 31.521385][ T4335] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.522600][ T4331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 31.524751][ T4331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.525352][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.526605][ T4331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.527551][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 31.529202][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.675818][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 31.687318][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 31.726495][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.727781][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.729282][ T4320] device bridge_slave_0 entered promiscuous mode [ 31.735123][ T4323] chnl_net:caif_netlink_parms(): no params data found [ 31.738910][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.740084][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.741525][ T4320] device bridge_slave_1 entered promiscuous mode [ 31.745262][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 31.764783][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.770227][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 31.776983][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.778713][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.780097][ T4326] device bridge_slave_0 entered promiscuous mode [ 31.784656][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.786145][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.789562][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.791088][ T4326] device bridge_slave_1 entered promiscuous mode [ 31.811422][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.812643][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.814301][ T4323] device bridge_slave_0 entered promiscuous mode [ 31.823771][ T4320] team0: Port device team_slave_0 added [ 31.825441][ T4320] team0: Port device team_slave_1 added [ 31.829115][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.830340][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.831823][ T4323] device bridge_slave_1 entered promiscuous mode [ 31.834330][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.846821][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.852951][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.854035][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.855391][ T4333] device bridge_slave_0 entered promiscuous mode [ 31.857575][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.858727][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.862595][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.864842][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.865846][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.867818][ T4333] device bridge_slave_1 entered promiscuous mode [ 31.873846][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.874979][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.876478][ T4328] device bridge_slave_0 entered promiscuous mode [ 31.882962][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.883994][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.889941][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.894879][ T4323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.896382][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.897524][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.898915][ T4328] device bridge_slave_1 entered promiscuous mode [ 31.901232][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.903636][ T4326] team0: Port device team_slave_0 added [ 31.906705][ T4323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.912208][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.914454][ T4326] team0: Port device team_slave_1 added [ 31.933969][ T4323] team0: Port device team_slave_0 added [ 31.935876][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.938543][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.942280][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.943361][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.947251][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.953838][ T4323] team0: Port device team_slave_1 added [ 31.960686][ T4328] team0: Port device team_slave_0 added [ 31.963298][ T4333] team0: Port device team_slave_0 added [ 31.964594][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.965673][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.969504][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.998170][ T4320] device hsr_slave_0 entered promiscuous mode [ 32.037424][ T4320] device hsr_slave_1 entered promiscuous mode [ 32.080644][ T4328] team0: Port device team_slave_1 added [ 32.083327][ T4333] team0: Port device team_slave_1 added [ 32.096424][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.097519][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.101259][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.105535][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.106551][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.110467][ T4323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.114556][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.115610][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.119504][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.123116][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.124132][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.128333][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.131650][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.132746][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.136362][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.144688][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.145693][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.151543][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.198165][ T4326] device hsr_slave_0 entered promiscuous mode [ 32.237325][ T4326] device hsr_slave_1 entered promiscuous mode [ 32.277222][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.278461][ T4326] Cannot create hsr debugfs directory [ 32.328117][ T4323] device hsr_slave_0 entered promiscuous mode [ 32.377454][ T4323] device hsr_slave_1 entered promiscuous mode [ 32.417163][ T4323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.418423][ T4323] Cannot create hsr debugfs directory [ 32.468124][ T4333] device hsr_slave_0 entered promiscuous mode [ 32.507344][ T4333] device hsr_slave_1 entered promiscuous mode [ 32.547256][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.548516][ T4333] Cannot create hsr debugfs directory [ 32.608227][ T4328] device hsr_slave_0 entered promiscuous mode [ 32.647626][ T4328] device hsr_slave_1 entered promiscuous mode [ 32.687201][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.688453][ T4328] Cannot create hsr debugfs directory [ 32.779453][ T4320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.838618][ T4320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.890152][ T4320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.928474][ T4320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.991177][ T4323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.041830][ T4323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.090560][ T4323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.129187][ T4323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.186524][ T4326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.218265][ T4326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.258324][ T4326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.301857][ T4326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.340122][ T4328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.388307][ T4328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.444286][ T4328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.468431][ T4328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.525184][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.539798][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.544570][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.546623][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.548976][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.550497][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.552110][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.553302][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.554935][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.564543][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.566152][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.568350][ T1704] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.569477][ T1704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.572824][ T4333] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.602997][ T4333] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.607492][ T4324] Bluetooth: hci4: command 0x0409 tx timeout [ 33.607627][ T4336] Bluetooth: hci0: command 0x0409 tx timeout [ 33.617241][ T4336] Bluetooth: hci3: command 0x0409 tx timeout [ 33.617254][ T4321] Bluetooth: hci1: command 0x0409 tx timeout [ 33.618165][ T4336] Bluetooth: hci2: command 0x0409 tx timeout [ 33.650239][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.653642][ T4333] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.681697][ T4333] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.711985][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.733408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.735171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.739584][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.742591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.748283][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.753796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.755436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.761471][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.765380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.766738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.775168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.776608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.781689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.783599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.784905][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.785982][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.788377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.794037][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.802979][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.804444][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.805970][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.807804][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.809113][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.810666][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.811977][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.813445][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.814785][ T269] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.815895][ T269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.818817][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.821489][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.827724][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.830266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.831984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.833476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.834876][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.835919][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.838380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.845457][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.847050][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.851268][ T269] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.852475][ T269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.853862][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.863551][ T4326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.865241][ T4326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.874244][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.875523][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.881976][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.883497][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.885177][ T269] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.886283][ T269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.889028][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.890677][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.892387][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.894067][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.895522][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.897065][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.901051][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.902540][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.904084][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.905499][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.907021][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.910916][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.912514][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.914069][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.915575][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.916999][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.918542][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.920255][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.921605][ T269] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.922632][ T269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.925738][ T4323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.927726][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.932682][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.934204][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.935509][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.936936][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.945356][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.946981][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.956073][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.959276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.960587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.963837][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.977606][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.979681][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.981509][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.983840][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.985404][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.990031][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.991539][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.993078][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.994162][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.996046][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.000832][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.002347][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.006516][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.007650][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.015165][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.022806][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.024120][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.025346][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.026835][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.028780][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.030537][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.033591][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.039610][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.041335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.042658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.046838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.052590][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.054258][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.055889][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.060388][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.065701][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.068746][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.091863][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.093500][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.094975][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.096524][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.099137][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.100572][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.106828][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.112231][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.115461][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.116713][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.126891][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.128521][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.129935][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.131443][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.139700][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.141275][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.143557][ T4320] device veth0_vlan entered promiscuous mode [ 34.152111][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.153730][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.155525][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.156771][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.158433][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.159939][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.161508][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.162879][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.164608][ T4326] device veth0_vlan entered promiscuous mode [ 34.173885][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.176738][ T4326] device veth1_vlan entered promiscuous mode [ 34.181496][ T4320] device veth1_vlan entered promiscuous mode [ 34.183587][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.185011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.186468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.190687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.192423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.193697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.194993][ T4323] device veth0_vlan entered promiscuous mode [ 34.213360][ T4323] device veth1_vlan entered promiscuous mode [ 34.224905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.226458][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.229096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.230473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.231762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.233387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.236005][ T4320] device veth0_macvtap entered promiscuous mode [ 34.241554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.243124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.244424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.245545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.246985][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.250598][ T4320] device veth1_macvtap entered promiscuous mode [ 34.253446][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.265063][ T4326] device veth0_macvtap entered promiscuous mode [ 34.267674][ T4326] device veth1_macvtap entered promiscuous mode [ 34.275805][ T4323] device veth0_macvtap entered promiscuous mode [ 34.280752][ T4323] device veth1_macvtap entered promiscuous mode [ 34.283516][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.284934][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.286490][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.290752][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.292806][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.294268][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.295732][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.298173][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.299743][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.301357][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.302693][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.304225][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.305764][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.307545][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.309331][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.313433][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.315010][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.316389][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.318553][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.320746][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.323105][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.326123][ T4326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.327723][ T4326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.329225][ T4326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.330472][ T4326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.334187][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.335835][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.339992][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.341501][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.344840][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.346437][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.349503][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.351302][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.353085][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.354451][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.356138][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.360316][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.362475][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.364033][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.365423][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.366980][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.378656][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.380242][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.382570][ T4323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.384044][ T4323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.385475][ T4323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.386696][ T4323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.391480][ T4320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.392812][ T4320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.394124][ T4320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.395444][ T4320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.411600][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.413308][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.420829][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.423793][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.429374][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.430872][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.434036][ T4333] device veth0_vlan entered promiscuous mode [ 34.449248][ T4333] device veth1_vlan entered promiscuous mode [ 34.466583][ T4328] device veth0_vlan entered promiscuous mode [ 34.471304][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.472810][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.474114][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.475568][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.486099][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.487825][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.500554][ T1704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.501026][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.501766][ T1704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.502932][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.511273][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.512847][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.514257][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.515534][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.516976][ T286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.519670][ T286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.520564][ T4328] device veth1_vlan entered promiscuous mode [ 34.525728][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.527736][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.530394][ T4333] device veth0_macvtap entered promiscuous mode [ 34.534406][ T4333] device veth1_macvtap entered promiscuous mode [ 34.544057][ T4328] device veth0_macvtap entered promiscuous mode [ 34.547255][ T4328] device veth1_macvtap entered promiscuous mode [ 34.550899][ T286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.552021][ T286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.552732][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.554659][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.555987][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.557853][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.559311][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.560833][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.562375][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.565387][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.572760][ T1704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.574092][ T1704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.576029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.582861][ T1704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.583330][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.584125][ T1704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.588484][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.589872][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.591349][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.592690][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.594203][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.596477][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.601800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.603197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.604701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.606297][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.609557][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.611110][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.612672][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.614035][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.615582][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.616927][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.618883][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.621228][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.624883][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.626480][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.630746][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.632336][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.633832][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.635362][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.637956][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.639832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.641295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.642758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.644546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.651942][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.653943][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.655634][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.657687][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.659206][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.660705][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.662086][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.666111][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.670439][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.671620][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.673747][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.679618][ T4333] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.680905][ T4333] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.682221][ T4333] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.684263][ T4333] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.709131][ T4328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.710577][ T4328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.711940][ T4328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.713290][ T4328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.774509][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.775778][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.778002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.836607][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.837930][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.839897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.845133][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.846451][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.849893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.872484][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.873833][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.875360][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.925341][ T4451] device team_slave_0 entered promiscuous mode [ 34.926629][ T4451] device team_slave_1 entered promiscuous mode [ 34.930264][ T4450] device team_slave_0 left promiscuous mode [ 34.931203][ T4450] device team_slave_1 left promiscuous mode [ 35.766500][ T4336] Bluetooth: hci2: command 0x041b tx timeout [ 35.767642][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 35.768555][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 35.769422][ T4336] Bluetooth: hci3: command 0x041b tx timeout [ 35.770286][ T4336] Bluetooth: hci4: command 0x041b tx timeout [ 35.825383][ T4456] loop1: detected capacity change from 0 to 16 [ 35.866345][ T4456] erofs: (device loop1): mounted with root inode @ nid 36. [ 35.939086][ T4461] loop3: detected capacity change from 0 to 256 [ 35.950386][ T4461] ======================================================= [ 35.950386][ T4461] WARNING: The mand mount option has been deprecated and [ 35.950386][ T4461] and is ignored by this kernel. Remove the mand [ 35.950386][ T4461] option from the mount to silence this warning. [ 35.950386][ T4461] ======================================================= [ 36.036231][ T4461] FAT-fs (loop3): Directory bread(block 64) failed [ 36.043316][ T4461] FAT-fs (loop3): Directory bread(block 65) failed [ 36.049853][ T4461] FAT-fs (loop3): Directory bread(block 66) failed [ 36.051466][ T4473] loop0: detected capacity change from 0 to 256 [ 36.055954][ T4461] FAT-fs (loop3): Directory bread(block 67) failed [ 36.058366][ T4470] loop2: detected capacity change from 0 to 512 [ 36.061430][ T4473] exfat: Deprecated parameter 'utf8' [ 36.062531][ T4461] FAT-fs (loop3): Directory bread(block 68) failed [ 36.064298][ T4470] EXT4-fs: Ignoring removed oldalloc option [ 36.066749][ T4461] FAT-fs (loop3): Directory bread(block 69) failed [ 36.075785][ T4461] FAT-fs (loop3): Directory bread(block 70) failed [ 36.082152][ T4461] FAT-fs (loop3): Directory bread(block 71) failed [ 36.086192][ T4461] FAT-fs (loop3): Directory bread(block 72) failed [ 36.117456][ T4461] FAT-fs (loop3): Directory bread(block 73) failed [ 36.130902][ T4473] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 36.137765][ T4470] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2196: inode #15: comm syz.2.12: corrupted in-inode xattr [ 36.146474][ T4470] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.12: couldn't read orphan inode 15 (err -117) [ 36.159586][ T4470] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.288398][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 36.401740][ T4501] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 36.629875][ T4512] qrtr: Invalid version 0 [ 37.847225][ T4324] Bluetooth: hci4: command 0x040f tx timeout [ 37.848208][ T4324] Bluetooth: hci3: command 0x040f tx timeout [ 37.849183][ T4324] Bluetooth: hci0: command 0x040f tx timeout [ 37.850193][ T4324] Bluetooth: hci1: command 0x040f tx timeout [ 37.851065][ T4324] Bluetooth: hci2: command 0x040f tx timeout [ 38.144937][ T4488] loop3: detected capacity change from 0 to 32768 [ 38.175879][ T4488] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 38.187252][ T4488] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 38.215897][ T4488] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 38.235815][ T3899] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 38.236862][ T3899] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 38.248128][ T3899] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 11ms [ 38.249822][ T3899] gfs2: fsid=syz:syz.0: jid=0: Done [ 38.260860][ T4488] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 38.389259][ T4488] gfs2: fsid=syz:syz.0: found 1 quota changes [ 38.605151][ T4521] device team_slave_0 entered promiscuous mode [ 38.606099][ T4521] device team_slave_1 entered promiscuous mode [ 38.614332][ T4323] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 38.614332][ T4323] inode = 11 2339 [ 38.614332][ T4323] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 38.621094][ T4520] device team_slave_0 left promiscuous mode [ 38.622054][ T4520] device team_slave_1 left promiscuous mode [ 38.623138][ T4323] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 38.624559][ T4323] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4323 [syz-executor] gfs2_quota_sync+0x2e0/0x528 [ 38.626057][ T4323] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 38.628072][ T4323] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 38.632815][ T4323] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 38.634349][ T4323] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 38.635498][ T4323] gfs2: fsid=syz:syz.0: File system withdrawn [ 38.636627][ T4323] CPU: 0 PID: 4323 Comm: syz-executor Not tainted syzkaller #0 [ 38.637832][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 38.639341][ T4323] Call trace: [ 38.639841][ T4323] dump_backtrace+0x1c8/0x1f4 [ 38.640550][ T4323] show_stack+0x2c/0x3c [ 38.641162][ T4323] __dump_stack+0x30/0x40 [ 38.641807][ T4323] dump_stack_lvl+0xf8/0x160 [ 38.642493][ T4323] dump_stack+0x1c/0x5c [ 38.643140][ T4323] gfs2_withdraw+0xf9c/0x13a8 [ 38.643807][ T4323] gfs2_consist_inode_i+0xf0/0x10c [ 38.644561][ T4323] gfs2_inode_refresh+0x920/0xd54 [ 38.645290][ T4323] inode_go_instantiate+0x4c/0x68 [ 38.646031][ T4323] gfs2_instantiate+0x17c/0x2c4 [ 38.646783][ T4323] gfs2_glock_wait+0x1b4/0x298 [ 38.647486][ T4323] gfs2_glock_nq+0x8bc/0x11d4 [ 38.648151][ T4323] do_sync+0x40c/0xa94 [ 38.648754][ T4323] gfs2_quota_sync+0x2e0/0x528 [ 38.649506][ T4323] gfs2_sync_fs+0x4c/0xc4 [ 38.650219][ T4323] sync_filesystem+0xe8/0x218 [ 38.650908][ T4323] generic_shutdown_super+0x70/0x324 [ 38.651745][ T4323] kill_block_super+0x70/0xdc [ 38.652462][ T4323] gfs2_kill_sb+0xc0/0xd4 [ 38.653102][ T4323] deactivate_locked_super+0xac/0x124 [ 38.653895][ T4323] deactivate_super+0xe8/0x108 [ 38.654623][ T4323] cleanup_mnt+0x37c/0x404 [ 38.655263][ T4323] __cleanup_mnt+0x20/0x30 [ 38.655949][ T4323] task_work_run+0x1ec/0x270 [ 38.656647][ T4323] do_notify_resume+0x2038/0x2b28 [ 38.656697][ T4535] loop1: detected capacity change from 0 to 16 [ 38.657389][ T4323] el0_svc+0x98/0x138 [ 38.657419][ T4323] el0t_64_sync_handler+0x84/0xf0 [ 38.657427][ T4323] el0t_64_sync+0x18c/0x190 [ 38.659833][ T4323] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 38.662947][ T4323] CPU: 0 PID: 4323 Comm: syz-executor Not tainted syzkaller #0 [ 38.663963][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 38.665399][ T4323] Call trace: [ 38.665877][ T4323] dump_backtrace+0x1c8/0x1f4 [ 38.666562][ T4323] show_stack+0x2c/0x3c [ 38.667145][ T4323] __dump_stack+0x30/0x40 [ 38.667775][ T4323] dump_stack_lvl+0xf8/0x160 [ 38.668439][ T4323] dump_stack+0x1c/0x5c [ 38.669014][ T4323] gfs2_assert_warn_i+0x16c/0x26c [ 38.669877][ T4323] gfs2_quota_cleanup+0x454/0x65c [ 38.670687][ T4323] gfs2_put_super+0x1f0/0x764 [ 38.671415][ T4323] generic_shutdown_super+0x130/0x324 [ 38.672205][ T4323] kill_block_super+0x70/0xdc [ 38.672881][ T4323] gfs2_kill_sb+0xc0/0xd4 [ 38.673546][ T4323] deactivate_locked_super+0xac/0x124 [ 38.674312][ T4323] deactivate_super+0xe8/0x108 [ 38.675009][ T4323] cleanup_mnt+0x37c/0x404 [ 38.675681][ T4323] __cleanup_mnt+0x20/0x30 [ 38.676462][ T4323] task_work_run+0x1ec/0x270 [ 38.677187][ T4323] do_notify_resume+0x2038/0x2b28 [ 38.677954][ T4323] el0_svc+0x98/0x138 [ 38.678581][ T4323] el0t_64_sync_handler+0x84/0xf0 [ 38.679407][ T4323] el0t_64_sync+0x18c/0x190 [ 38.747797][ T4537] loop0: detected capacity change from 0 to 256 [ 38.754208][ T4537] exfat: Deprecated parameter 'utf8' [ 38.766916][ T4537] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 38.799580][ T4535] erofs: (device loop1): mounted with root inode @ nid 36. [ 38.844552][ T4542] loop4: detected capacity change from 0 to 512 [ 38.853951][ T4542] EXT4-fs: Ignoring removed oldalloc option [ 39.759935][ T4542] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2196: inode #15: comm syz.4.27: corrupted in-inode xattr [ 39.762056][ T4542] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.27: couldn't read orphan inode 15 (err -117) [ 39.764172][ T4542] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 39.927804][ T4336] Bluetooth: hci2: command 0x0419 tx timeout [ 39.928797][ T4336] Bluetooth: hci1: command 0x0419 tx timeout [ 39.929676][ T4336] Bluetooth: hci0: command 0x0419 tx timeout [ 39.930537][ T4336] Bluetooth: hci3: command 0x0419 tx timeout [ 39.931390][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 39.964868][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 40.070977][ T4565] usb usb9: usbfs: process 4565 (syz.0.32) did not claim interface 0 before use [ 40.400585][ T4576] device team_slave_0 entered promiscuous mode [ 40.401555][ T4576] device team_slave_1 entered promiscuous mode [ 40.403307][ T4575] device team_slave_0 left promiscuous mode [ 40.404286][ T4575] device team_slave_1 left promiscuous mode [ 40.422387][ T4578] loop2: detected capacity change from 0 to 256 [ 40.424286][ T4578] exfat: Deprecated parameter 'utf8' [ 40.434748][ T4578] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 40.489247][ T4569] loop4: detected capacity change from 0 to 32768 [ 40.495492][ T4569] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 40.503438][ T4569] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 40.511572][ T4569] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 40.518582][ T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 40.519849][ T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 40.541363][ T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 21ms [ 40.545711][ T7] gfs2: fsid=syz:syz.0: jid=0: Done [ 40.547576][ T4569] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 40.975095][ T4592] loop1: detected capacity change from 0 to 16 [ 40.978535][ T4592] erofs: (device loop1): mounted with root inode @ nid 36. [ 40.985321][ T4592] netlink: 260 bytes leftover after parsing attributes in process `syz.1.42'. [ 41.013674][ T4569] gfs2: fsid=syz:syz.0: found 1 quota changes [ 41.053578][ T4596] loop1: detected capacity change from 0 to 512 [ 41.056750][ T4328] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 41.056750][ T4328] inode = 11 2339 [ 41.056750][ T4328] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 41.059915][ T4328] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 41.063535][ T4328] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4328 [syz-executor] gfs2_quota_sync+0x2e0/0x528 [ 41.065591][ T4596] EXT4-fs: Ignoring removed oldalloc option [ 41.076226][ T4328] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 41.081380][ T4328] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 41.090339][ T4596] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.44: corrupted in-inode xattr [ 41.092458][ T4596] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.44: couldn't read orphan inode 15 (err -117) [ 41.100108][ T4596] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 41.106884][ T4328] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 41.121907][ T4328] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 41.131411][ T4328] gfs2: fsid=syz:syz.0: File system withdrawn [ 41.135560][ T4328] CPU: 1 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 41.136720][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 41.138189][ T4328] Call trace: [ 41.138656][ T4328] dump_backtrace+0x1c8/0x1f4 [ 41.139336][ T4328] show_stack+0x2c/0x3c [ 41.139924][ T4328] __dump_stack+0x30/0x40 [ 41.140555][ T4328] dump_stack_lvl+0xf8/0x160 [ 41.141229][ T4328] dump_stack+0x1c/0x5c [ 41.141789][ T4328] gfs2_withdraw+0xf9c/0x13a8 [ 41.142458][ T4328] gfs2_consist_inode_i+0xf0/0x10c [ 41.143203][ T4328] gfs2_inode_refresh+0x920/0xd54 [ 41.143981][ T4328] inode_go_instantiate+0x4c/0x68 [ 41.144747][ T4328] gfs2_instantiate+0x17c/0x2c4 [ 41.145508][ T4328] gfs2_glock_wait+0x1b4/0x298 [ 41.146209][ T4328] gfs2_glock_nq+0x8bc/0x11d4 [ 41.146898][ T4328] do_sync+0x40c/0xa94 [ 41.147469][ T4328] gfs2_quota_sync+0x2e0/0x528 [ 41.148171][ T4328] gfs2_sync_fs+0x4c/0xc4 [ 41.148786][ T4328] sync_filesystem+0xe8/0x218 [ 41.149504][ T4328] generic_shutdown_super+0x70/0x324 [ 41.150254][ T4328] kill_block_super+0x70/0xdc [ 41.150921][ T4328] gfs2_kill_sb+0xc0/0xd4 [ 41.151547][ T4328] deactivate_locked_super+0xac/0x124 [ 41.152326][ T4328] deactivate_super+0xe8/0x108 [ 41.153020][ T4328] cleanup_mnt+0x37c/0x404 [ 41.153639][ T4328] __cleanup_mnt+0x20/0x30 [ 41.154315][ T4328] task_work_run+0x1ec/0x270 [ 41.155063][ T4328] do_notify_resume+0x2038/0x2b28 [ 41.155828][ T4328] el0_svc+0x98/0x138 [ 41.156493][ T4328] el0t_64_sync_handler+0x84/0xf0 [ 41.157215][ T4328] el0t_64_sync+0x18c/0x190 [ 41.202736][ T4328] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 41.205050][ T4328] CPU: 0 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 41.206258][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 41.207684][ T4328] Call trace: [ 41.208180][ T4328] dump_backtrace+0x1c8/0x1f4 [ 41.208936][ T4328] show_stack+0x2c/0x3c [ 41.209637][ T4328] __dump_stack+0x30/0x40 [ 41.210281][ T4328] dump_stack_lvl+0xf8/0x160 [ 41.210935][ T4328] dump_stack+0x1c/0x5c [ 41.211512][ T4328] gfs2_assert_warn_i+0x16c/0x26c [ 41.212257][ T4328] gfs2_quota_cleanup+0x454/0x65c [ 41.213009][ T4328] gfs2_put_super+0x1f0/0x764 [ 41.213725][ T4328] generic_shutdown_super+0x130/0x324 [ 41.214538][ T4328] kill_block_super+0x70/0xdc [ 41.215203][ T4328] gfs2_kill_sb+0xc0/0xd4 [ 41.215857][ T4328] deactivate_locked_super+0xac/0x124 [ 41.216641][ T4328] deactivate_super+0xe8/0x108 [ 41.217316][ T4328] cleanup_mnt+0x37c/0x404 [ 41.217960][ T4328] __cleanup_mnt+0x20/0x30 [ 41.218616][ T4328] task_work_run+0x1ec/0x270 [ 41.219288][ T4328] do_notify_resume+0x2038/0x2b28 [ 41.220061][ T4328] el0_svc+0x98/0x138 [ 41.220703][ T4328] el0t_64_sync_handler+0x84/0xf0 [ 41.221408][ T4328] el0t_64_sync+0x18c/0x190 [ 41.252553][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 41.276925][ T4603] device syzkaller0 entered promiscuous mode [ 41.395334][ T4614] loop4: detected capacity change from 0 to 256 [ 41.399996][ T4614] exfat: Deprecated parameter 'utf8' [ 41.419722][ T4616] loop2: detected capacity change from 0 to 256 [ 41.426250][ T4614] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 41.502578][ T4611] device team_slave_0 entered promiscuous mode [ 41.503600][ T4611] device team_slave_1 entered promiscuous mode [ 41.509797][ T4621] loop4: detected capacity change from 0 to 512 [ 41.512486][ T4610] device team_slave_0 left promiscuous mode [ 41.513551][ T4610] device team_slave_1 left promiscuous mode [ 41.811964][ T4621] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 41.868922][ T4628] loop3: detected capacity change from 0 to 16 [ 41.870817][ T4628] erofs: (device loop3): mounted with root inode @ nid 36. [ 41.906495][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 41.925887][ T4632] netlink: 260 bytes leftover after parsing attributes in process `syz.3.54'. [ 41.961472][ T4633] netlink: 'syz.1.57': attribute type 39 has an invalid length. [ 41.963116][ T4635] loop4: detected capacity change from 0 to 512 [ 41.964505][ T4635] EXT4-fs: Ignoring removed oldalloc option [ 41.992454][ T4635] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2196: inode #15: comm syz.4.56: corrupted in-inode xattr [ 41.995534][ T4635] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.56: couldn't read orphan inode 15 (err -117) [ 41.998001][ T4635] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.067202][ T4630] loop0: detected capacity change from 0 to 32768 [ 42.073870][ T4630] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 42.075453][ T4630] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 42.079456][ T4630] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 42.081266][ T4373] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 42.082570][ T4373] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 42.101510][ T4373] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 18ms [ 42.117041][ T4373] gfs2: fsid=syz:syz.0: jid=0: Done [ 42.121312][ T4630] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 42.184886][ T4630] gfs2: fsid=syz:syz.0: found 1 quota changes [ 42.221068][ T4320] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 42.221068][ T4320] inode = 11 2339 [ 42.221068][ T4320] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 42.235604][ T4320] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 42.237069][ T4320] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4320 [syz-executor] gfs2_quota_sync+0x2e0/0x528 [ 42.238560][ T4320] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 42.239682][ T4320] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 42.241237][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 42.245864][ T4320] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 42.248934][ T4320] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 42.251920][ T4320] gfs2: fsid=syz:syz.0: File system withdrawn [ 42.252882][ T4320] CPU: 1 PID: 4320 Comm: syz-executor Not tainted syzkaller #0 [ 42.254019][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 42.255395][ T4320] Call trace: [ 42.255894][ T4320] dump_backtrace+0x1c8/0x1f4 [ 42.256579][ T4320] show_stack+0x2c/0x3c [ 42.257170][ T4320] __dump_stack+0x30/0x40 [ 42.257813][ T4320] dump_stack_lvl+0xf8/0x160 [ 42.258469][ T4320] dump_stack+0x1c/0x5c [ 42.259101][ T4320] gfs2_withdraw+0xf9c/0x13a8 [ 42.259781][ T4320] gfs2_consist_inode_i+0xf0/0x10c [ 42.260546][ T4320] gfs2_inode_refresh+0x920/0xd54 [ 42.261318][ T4320] inode_go_instantiate+0x4c/0x68 [ 42.262118][ T4320] gfs2_instantiate+0x17c/0x2c4 [ 42.262854][ T4320] gfs2_glock_wait+0x1b4/0x298 [ 42.263577][ T4320] gfs2_glock_nq+0x8bc/0x11d4 [ 42.264277][ T4320] do_sync+0x40c/0xa94 [ 42.264950][ T4320] gfs2_quota_sync+0x2e0/0x528 [ 42.265712][ T4320] gfs2_sync_fs+0x4c/0xc4 [ 42.266393][ T4320] sync_filesystem+0xe8/0x218 [ 42.267132][ T4320] generic_shutdown_super+0x70/0x324 [ 42.267956][ T4320] kill_block_super+0x70/0xdc [ 42.268692][ T4320] gfs2_kill_sb+0xc0/0xd4 [ 42.269364][ T4320] deactivate_locked_super+0xac/0x124 [ 42.270167][ T4320] deactivate_super+0xe8/0x108 [ 42.270847][ T4320] cleanup_mnt+0x37c/0x404 [ 42.271545][ T4320] __cleanup_mnt+0x20/0x30 [ 42.272161][ T4320] task_work_run+0x1ec/0x270 [ 42.272835][ T4320] do_notify_resume+0x2038/0x2b28 [ 42.273588][ T4320] el0_svc+0x98/0x138 [ 42.274108][ T4320] el0t_64_sync_handler+0x84/0xf0 [ 42.274831][ T4320] el0t_64_sync+0x18c/0x190 [ 42.288763][ T4320] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 42.295662][ T4320] CPU: 1 PID: 4320 Comm: syz-executor Not tainted syzkaller #0 [ 42.296911][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 42.298484][ T4320] Call trace: [ 42.299007][ T4320] dump_backtrace+0x1c8/0x1f4 [ 42.299736][ T4320] show_stack+0x2c/0x3c [ 42.300385][ T4320] __dump_stack+0x30/0x40 [ 42.301073][ T4320] dump_stack_lvl+0xf8/0x160 [ 42.301789][ T4320] dump_stack+0x1c/0x5c [ 42.302403][ T4320] gfs2_assert_warn_i+0x16c/0x26c [ 42.303105][ T4320] gfs2_quota_cleanup+0x454/0x65c [ 42.303839][ T4320] gfs2_put_super+0x1f0/0x764 [ 42.304505][ T4320] generic_shutdown_super+0x130/0x324 [ 42.304971][ T4650] loop4: detected capacity change from 0 to 256 [ 42.305271][ T4320] kill_block_super+0x70/0xdc [ 42.307040][ T4650] exfat: Deprecated parameter 'utf8' [ 42.307041][ T4320] gfs2_kill_sb+0xc0/0xd4 [ 42.307052][ T4320] deactivate_locked_super+0xac/0x124 [ 42.309331][ T4320] deactivate_super+0xe8/0x108 [ 42.310057][ T4320] cleanup_mnt+0x37c/0x404 [ 42.310725][ T4320] __cleanup_mnt+0x20/0x30 [ 42.311392][ T4320] task_work_run+0x1ec/0x270 [ 42.311561][ T4650] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 42.312053][ T4320] do_notify_resume+0x2038/0x2b28 [ 42.314483][ T4320] el0_svc+0x98/0x138 [ 42.315085][ T4320] el0t_64_sync_handler+0x84/0xf0 [ 42.315811][ T4320] el0t_64_sync+0x18c/0x190 [ 42.327956][ T4649] device syzkaller0 entered promiscuous mode [ 42.393057][ T4652] device team_slave_0 entered promiscuous mode [ 42.394396][ T4652] device team_slave_1 entered promiscuous mode [ 42.396248][ T4651] device team_slave_0 left promiscuous mode [ 42.397247][ T4651] device team_slave_1 left promiscuous mode [ 42.405948][ T4655] loop0: detected capacity change from 0 to 512 [ 42.415720][ T4655] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 42.432174][ T4655] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 42.433344][ T4655] System zones: 1-12 [ 42.434392][ T4655] EXT4-fs (loop0): orphan cleanup on readonly fs [ 42.435752][ T4655] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.61: invalid indirect mapped block 12 (level 1) [ 42.446404][ T4655] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.61: invalid indirect mapped block 2 (level 2) [ 42.452241][ T4655] EXT4-fs (loop0): 1 truncate cleaned up [ 42.453113][ T4655] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 42.923551][ T4668] loop2: detected capacity change from 0 to 16 [ 42.947040][ T4668] erofs: (device loop2): mounted with root inode @ nid 36. [ 42.967673][ T4336] Bluetooth: hci3: command 0x2016 tx timeout [ 43.025179][ T4673] netlink: 260 bytes leftover after parsing attributes in process `syz.2.68'. [ 43.158434][ T4680] loop2: detected capacity change from 0 to 512 [ 43.159807][ T4680] EXT4-fs: Ignoring removed oldalloc option [ 43.183835][ T4683] loop3: detected capacity change from 0 to 256 [ 43.186536][ T4683] exfat: Deprecated parameter 'utf8' [ 43.198214][ T4683] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 43.247532][ T4680] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2196: inode #15: comm syz.2.72: corrupted in-inode xattr [ 43.250250][ T4680] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.72: couldn't read orphan inode 15 (err -117) [ 43.266730][ T4680] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 43.556426][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 43.575781][ T4689] device team_slave_0 entered promiscuous mode [ 43.576837][ T4689] device team_slave_1 entered promiscuous mode [ 43.579100][ T4687] device team_slave_0 left promiscuous mode [ 43.580043][ T4687] device team_slave_1 left promiscuous mode [ 43.596005][ T4691] loop0: detected capacity change from 0 to 2048 [ 43.625149][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 43.651044][ T4695] device syzkaller0 entered promiscuous mode [ 43.723095][ T4698] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 44.110541][ T4705] loop1: detected capacity change from 0 to 16 [ 44.115017][ T4705] erofs: (device loop1): mounted with root inode @ nid 36. [ 44.125595][ T4705] netlink: 260 bytes leftover after parsing attributes in process `syz.1.82'. [ 44.198432][ T4713] loop4: detected capacity change from 0 to 256 [ 44.206092][ T4713] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 44.243447][ T4715] loop1: detected capacity change from 0 to 512 [ 44.249100][ T4715] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.264942][ T4715] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 44.266339][ T4715] System zones: 1-2, 4-12, 8-8 [ 44.268478][ T4715] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.86: iget: bad i_size value: 38620345925642 [ 44.276312][ T4715] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.86: couldn't read orphan inode 15 (err -117) [ 44.282674][ T4707] loop0: detected capacity change from 0 to 32768 [ 44.284802][ T4719] device team_slave_0 entered promiscuous mode [ 44.285812][ T4719] device team_slave_1 entered promiscuous mode [ 44.287390][ T4707] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.81 (4707) [ 44.291041][ T4720] loop4: detected capacity change from 0 to 512 [ 44.292294][ T4720] EXT4-fs: Ignoring removed oldalloc option [ 44.294015][ T4715] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.296586][ T4707] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 44.297473][ T4717] device team_slave_0 left promiscuous mode [ 44.299218][ T4717] device team_slave_1 left promiscuous mode [ 44.301353][ T4707] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 44.302673][ T4707] BTRFS info (device loop0): using free space tree [ 44.305933][ T4720] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2196: inode #15: comm syz.4.88: corrupted in-inode xattr [ 44.315460][ T4720] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.88: couldn't read orphan inode 15 (err -117) [ 44.319376][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 44.353045][ T4720] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 44.440592][ T4707] BTRFS info (device loop0): enabling ssd optimizations [ 44.450520][ T4745] device syzkaller0 entered promiscuous mode [ 44.497088][ T4707] fs-verity: sha256 using implementation "sha256-ce" [ 44.508373][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 44.538727][ T4752] loop4: detected capacity change from 0 to 16 [ 44.541656][ T4752] erofs: (device loop4): mounted with root inode @ nid 36. [ 44.542931][ T4707] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4) [ 44.599833][ T4758] netlink: 260 bytes leftover after parsing attributes in process `syz.4.95'. [ 44.614845][ T4755] hub 9-0:1.0: USB hub found [ 44.623452][ T4320] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 44.626041][ T4759] loop3: detected capacity change from 0 to 256 [ 44.627494][ T4755] hub 9-0:1.0: 8 ports detected [ 44.634231][ T4759] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 44.830642][ T4772] device team_slave_0 entered promiscuous mode [ 44.831700][ T4772] device team_slave_1 entered promiscuous mode [ 44.842123][ T4771] device team_slave_0 left promiscuous mode [ 44.842968][ T4771] device team_slave_1 left promiscuous mode [ 44.882387][ T4781] device syzkaller1 entered promiscuous mode [ 44.924289][ T4786] loop1: detected capacity change from 0 to 512 [ 44.925729][ T4786] EXT4-fs: Ignoring removed oldalloc option [ 44.941286][ T4786] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.106: corrupted in-inode xattr [ 44.946121][ T4786] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.106: couldn't read orphan inode 15 (err -117) [ 44.997899][ T4786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 45.166204][ T4797] loop2: detected capacity change from 0 to 2048 [ 45.258179][ T4797] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 45.856581][ T4800] loop4: detected capacity change from 0 to 256 [ 45.874008][ T4800] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 46.429969][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 46.430679][ T4806] loop0: detected capacity change from 0 to 16 [ 46.446322][ T4806] erofs: (device loop0): mounted with root inode @ nid 36. [ 46.459622][ T4796] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 46.510820][ T4813] netlink: 260 bytes leftover after parsing attributes in process `syz.0.113'. [ 46.577344][ T4816] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.115'. [ 46.592282][ T4818] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 46.681717][ T4821] device team_slave_0 entered promiscuous mode [ 46.682740][ T4821] device team_slave_1 entered promiscuous mode [ 46.688097][ T4820] device team_slave_0 left promiscuous mode [ 46.688960][ T4820] device team_slave_1 left promiscuous mode [ 46.801668][ T4812] loop2: detected capacity change from 0 to 32768 [ 46.809051][ T4812] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.112 (4812) [ 46.825390][ T4812] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 46.827043][ T4812] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 46.834493][ T4812] BTRFS info (device loop2): setting nodatacow, compression disabled [ 46.837846][ T4825] device syzkaller0 entered promiscuous mode [ 46.838011][ T4812] BTRFS info (device loop2): disabling tree log [ 46.841352][ T4812] BTRFS info (device loop2): turning on sync discard [ 46.844295][ T4812] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 46.845865][ T4812] BTRFS info (device loop2): force zstd compression, level 3 [ 46.854316][ T4812] BTRFS info (device loop2): using free space tree [ 46.971927][ T4812] BTRFS info (device loop2): enabling ssd optimizations [ 47.016152][ T4326] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 47.114875][ T4851] loop1: detected capacity change from 0 to 256 [ 47.136555][ T4851] exfat: Deprecated parameter 'utf8' [ 47.142293][ T4851] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 47.220283][ T27] audit: type=1326 audit(47.210:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9815b9e8 code=0x7ffc0000 [ 47.225208][ T27] audit: type=1326 audit(47.210:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=41 compat=0 ip=0xffff9815b9e8 code=0x7ffc0000 [ 47.237173][ T27] audit: type=1326 audit(47.210:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9815b9e8 code=0x7ffc0000 [ 47.258841][ T4860] loop3: detected capacity change from 0 to 512 [ 47.260358][ T4860] EXT4-fs: Ignoring removed oldalloc option [ 47.283202][ T4860] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2196: inode #15: comm syz.3.125: corrupted in-inode xattr [ 47.285575][ T4860] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.125: couldn't read orphan inode 15 (err -117) [ 47.291867][ T4860] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 47.302334][ T4869] loop0: detected capacity change from 0 to 16 [ 47.304162][ T4869] erofs: (device loop0): mounted with root inode @ nid 36. [ 47.309033][ T4868] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.127'. [ 47.373023][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 47.381674][ T4874] device syzkaller0 entered promiscuous mode [ 47.535739][ T4875] loop4: detected capacity change from 0 to 32768 [ 47.558292][ T4875] XFS (loop4): Mounting V5 Filesystem [ 47.839370][ T4875] XFS (loop4): Ending clean mount [ 47.920254][ T4893] loop1: detected capacity change from 0 to 256 [ 47.925769][ T4893] exfat: Deprecated parameter 'utf8' [ 47.945370][ T4893] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 48.301522][ T4328] XFS (loop4): Unmounting Filesystem [ 48.453086][ T4908] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.142'. [ 48.568562][ T4913] loop3: detected capacity change from 0 to 16 [ 48.573839][ T4911] loop1: detected capacity change from 0 to 512 [ 48.585335][ T4913] erofs: (device loop3): mounted with root inode @ nid 36. [ 48.592930][ T4911] EXT4-fs: Ignoring removed oldalloc option [ 48.616127][ T4911] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.143: corrupted in-inode xattr [ 48.621568][ T4911] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.143: couldn't read orphan inode 15 (err -117) [ 48.628009][ T4911] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 48.744998][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 48.795208][ T4918] device syzkaller0 entered promiscuous mode [ 48.841370][ T4921] loop1: detected capacity change from 0 to 256 [ 48.852362][ T4921] exfat: Deprecated parameter 'utf8' [ 48.874255][ T4921] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 49.054086][ T4925] loop4: detected capacity change from 0 to 32768 [ 49.064462][ T4925] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 49.065800][ T4925] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 49.069659][ T4925] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 49.071480][ T4374] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 49.072567][ T4374] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 49.104379][ T4374] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 31ms [ 49.108356][ T4374] gfs2: fsid=syz:syz.0: jid=0: Done [ 49.111705][ T4925] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 49.234783][ T4925] gfs2: fsid=syz:syz.0: found 1 quota changes [ 49.448204][ T4932] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 49.448204][ T4932] inode = 11 2339 [ 49.448204][ T4932] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 49.556052][ T4932] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 49.631492][ T4932] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4932 [gfs2_quotad] gfs2_quota_sync+0x2e0/0x528 [ 49.642926][ T4932] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000201 s:0 p:0 [ 49.644185][ T4932] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 49.650196][ T4932] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 49.651510][ T4932] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 49.653572][ T4932] gfs2: fsid=syz:syz.0: File system withdrawn [ 49.654371][ T4932] CPU: 1 PID: 4932 Comm: gfs2_quotad Not tainted syzkaller #0 [ 49.655461][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 49.656824][ T4932] Call trace: [ 49.657287][ T4932] dump_backtrace+0x1c8/0x1f4 [ 49.657952][ T4932] show_stack+0x2c/0x3c [ 49.658529][ T4932] __dump_stack+0x30/0x40 [ 49.659148][ T4932] dump_stack_lvl+0xf8/0x160 [ 49.659850][ T4932] dump_stack+0x1c/0x5c [ 49.660421][ T4932] gfs2_withdraw+0xf9c/0x13a8 [ 49.661121][ T4932] gfs2_consist_inode_i+0xf0/0x10c [ 49.661888][ T4932] gfs2_inode_refresh+0x920/0xd54 [ 49.662633][ T4932] inode_go_instantiate+0x4c/0x68 [ 49.663282][ T4932] gfs2_instantiate+0x17c/0x2c4 [ 49.664023][ T4932] gfs2_glock_wait+0x1b4/0x298 [ 49.664720][ T4932] gfs2_glock_nq+0x8bc/0x11d4 [ 49.665457][ T4932] do_sync+0x40c/0xa94 [ 49.666018][ T4932] gfs2_quota_sync+0x2e0/0x528 [ 49.666698][ T4932] gfs2_quotad+0x2d8/0x4fc [ 49.667361][ T4932] kthread+0x250/0x2d8 [ 49.667923][ T4932] ret_from_fork+0x10/0x20 [ 49.761568][ T4943] loop0: detected capacity change from 0 to 128 [ 49.823040][ T4943] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 49.825188][ T4943] hpfs: filesystem error: improperly stopped [ 49.833134][ T4943] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 49.834399][ T4943] hpfs: You really don't want any checks? You are crazy... [ 49.835646][ T4943] hpfs: hpfs_map_sector(): read error [ 49.836459][ T4943] hpfs: code page support is disabled [ 49.845532][ T4328] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 49.850188][ T4328] CPU: 0 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 49.851375][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 49.852862][ T4328] Call trace: [ 49.853321][ T4328] dump_backtrace+0x1c8/0x1f4 [ 49.854066][ T4328] show_stack+0x2c/0x3c [ 49.854652][ T4328] __dump_stack+0x30/0x40 [ 49.855246][ T4328] dump_stack_lvl+0xf8/0x160 [ 49.855870][ T4328] dump_stack+0x1c/0x5c [ 49.856529][ T4328] gfs2_assert_warn_i+0x16c/0x26c [ 49.857300][ T4328] gfs2_quota_cleanup+0x454/0x65c [ 49.858030][ T4328] gfs2_put_super+0x1f0/0x764 [ 49.858745][ T4328] generic_shutdown_super+0x130/0x324 [ 49.859521][ T4328] kill_block_super+0x70/0xdc [ 49.860269][ T4328] gfs2_kill_sb+0xc0/0xd4 [ 49.860860][ T4328] deactivate_locked_super+0xac/0x124 [ 49.861695][ T4328] deactivate_super+0xe8/0x108 [ 49.862395][ T4328] cleanup_mnt+0x37c/0x404 [ 49.863011][ T4328] __cleanup_mnt+0x20/0x30 [ 49.863643][ T4328] task_work_run+0x1ec/0x270 [ 49.864247][ T4328] do_notify_resume+0x2038/0x2b28 [ 49.864931][ T4328] el0_svc+0x98/0x138 [ 49.865492][ T4328] el0t_64_sync_handler+0x84/0xf0 [ 49.866210][ T4328] el0t_64_sync+0x18c/0x190 [ 49.884639][ T4949] loop3: detected capacity change from 0 to 16 [ 49.892080][ T4946] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.153'. [ 49.894228][ T4943] hpfs: hpfs_map_4sectors(): unaligned read [ 49.895241][ T4943] hpfs: hpfs_map_4sectors(): unaligned read [ 49.896159][ T4943] hpfs: filesystem error: unable to find root dir [ 49.897681][ T4949] erofs: (device loop3): mounted with root inode @ nid 36. [ 50.099242][ T4953] Zero length message leads to an empty skb [ 50.108772][ T4953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 50.111025][ T4953] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.162686][ T4953] device bridge_slave_0 left promiscuous mode [ 50.164289][ T4953] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.233087][ T4958] loop4: detected capacity change from 0 to 512 [ 50.243815][ T4958] EXT4-fs: Ignoring removed oldalloc option [ 50.259413][ T4960] loop1: detected capacity change from 0 to 2048 [ 50.266709][ T4960] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=66359, location=66359 [ 50.269628][ T4960] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 50.283383][ T4958] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2196: inode #15: comm syz.4.156: corrupted in-inode xattr [ 50.289163][ T4958] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.156: couldn't read orphan inode 15 (err -117) [ 50.303000][ T4958] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 50.411858][ T4947] loop2: detected capacity change from 0 to 32768 [ 50.476568][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 50.530058][ T4947] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 50.596435][ T4969] loop3: detected capacity change from 0 to 32768 [ 50.615476][ T4979] device syzkaller0 entered promiscuous mode [ 50.648573][ T4969] XFS (loop3): Mounting V5 Filesystem [ 50.667783][ T4969] XFS (loop3): Ending clean mount [ 50.711584][ T4991] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.167'. [ 50.736302][ T4326] ocfs2: Unmounting device (7,2) on (node local) [ 50.741182][ T4323] XFS (loop3): Unmounting Filesystem [ 50.762977][ T4993] loop4: detected capacity change from 0 to 16 [ 50.770455][ T4993] erofs: (device loop4): mounted with root inode @ nid 36. [ 50.813201][ T4993] netlink: 180 bytes leftover after parsing attributes in process `syz.4.168'. [ 51.275474][ T5009] loop2: detected capacity change from 0 to 512 [ 51.278134][ T5009] EXT4-fs: Ignoring removed oldalloc option [ 51.285775][ T5009] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2196: inode #15: comm syz.2.174: corrupted in-inode xattr [ 51.290346][ T5009] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.174: couldn't read orphan inode 15 (err -117) [ 51.296831][ T5009] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.346187][ T5007] loop0: detected capacity change from 0 to 32768 [ 51.375380][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 51.385072][ T5007] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 51.391675][ T5007] XFS (loop0): Mounting V5 Filesystem [ 51.435387][ T5007] XFS (loop0): Ending clean mount [ 51.454201][ T5007] XFS (loop0): Quotacheck needed: Please wait. [ 51.601861][ T5007] XFS (loop0): Quotacheck: Done. [ 51.639344][ T5028] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.178'. [ 51.765744][ T5032] input: syz1 as /devices/virtual/input/input2 [ 51.828505][ T5035] loop2: detected capacity change from 0 to 512 [ 51.848172][ T5038] loop1: detected capacity change from 0 to 16 [ 51.856329][ T5038] erofs: (device loop1): mounted with root inode @ nid 36. [ 51.873643][ T5038] netlink: 180 bytes leftover after parsing attributes in process `syz.1.182'. [ 51.944340][ T5035] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.945813][ T5035] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.181: bad orphan inode 13 [ 51.947979][ T5035] ext4_test_bit(bit=12, block=18) = 1 [ 51.948796][ T5035] is_bad_inode(inode)=0 [ 51.949347][ T5035] NEXT_ORPHAN(inode)=2130706432 [ 51.950060][ T5035] max_ino=32 [ 51.950524][ T5035] i_nlink=1 [ 51.951246][ T5035] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.955930][ T5041] device syzkaller0 entered promiscuous mode [ 51.964728][ T5035] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 52.000451][ T5035] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 52.032937][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 52.085329][ T4320] XFS (loop0): Unmounting Filesystem [ 52.176854][ T5026] loop3: detected capacity change from 0 to 262144 [ 52.179798][ T5026] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.177 (5026) [ 52.183949][ T5026] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 52.185530][ T5026] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 52.186807][ T5026] BTRFS info (device loop3): enabling ssd optimizations [ 52.187928][ T5026] BTRFS info (device loop3): using free space tree [ 52.241545][ T5058] loop4: detected capacity change from 0 to 512 [ 52.243163][ T5058] EXT4-fs: Ignoring removed oldalloc option [ 52.272236][ T5058] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2196: inode #15: comm syz.4.186: corrupted in-inode xattr [ 52.274786][ T5058] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.186: couldn't read orphan inode 15 (err -117) [ 52.276766][ T5058] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.285687][ T4410] BTRFS warning (device loop3): checksum verify failed on logical 30687232 mirror 1 wanted 0x14486ff4055368ab found 0x8378cafbc11d5f11 level 0 [ 52.289428][ T5026] BTRFS info (device loop3): read error corrected: ino 0 off 30687232 (dev /dev/loop3 sector 76320) [ 52.291241][ T5026] BTRFS info (device loop3): read error corrected: ino 0 off 30691328 (dev /dev/loop3 sector 76328) [ 52.292978][ T5026] BTRFS info (device loop3): read error corrected: ino 0 off 30695424 (dev /dev/loop3 sector 76336) [ 52.294673][ T5026] BTRFS info (device loop3): read error corrected: ino 0 off 30699520 (dev /dev/loop3 sector 76344) [ 52.326696][ T4323] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 52.382279][ T4312] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 9 /dev/loop3 scanned by udevd (4312) [ 52.468500][ T5088] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.191'. [ 52.481329][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 52.589622][ T5099] loop1: detected capacity change from 0 to 16 [ 52.592844][ T5099] erofs: (device loop1): mounted with root inode @ nid 36. [ 52.605727][ T5099] netlink: 180 bytes leftover after parsing attributes in process `syz.1.194'. [ 52.778277][ T5112] loop3: detected capacity change from 0 to 512 [ 52.779783][ T5112] EXT4-fs: Ignoring removed oldalloc option [ 52.782444][ T5112] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2196: inode #15: comm syz.3.200: corrupted in-inode xattr [ 52.784756][ T5112] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.200: couldn't read orphan inode 15 (err -117) [ 52.786819][ T5112] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 52.841679][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 52.985069][ T5124] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.202'. [ 53.051913][ T5130] loop3: detected capacity change from 0 to 16 [ 53.058956][ T5130] erofs: (device loop3): mounted with root inode @ nid 36. [ 53.065784][ T5130] netlink: 172 bytes leftover after parsing attributes in process `syz.3.205'. [ 53.164346][ T27] audit: type=1326 audit(53.150:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.3.208" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa735b9e8 code=0x0 [ 53.191768][ T5075] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 53.192938][ T5075] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 53.196487][ T5075] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 53.201923][ T5075] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.202859][ T5075] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 53.205331][ T5075] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 53.206571][ T5075] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 53.210586][ T5075] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 53.213331][ T5075] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 53.221887][ T5075] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 53.222845][ T5075] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 53.224878][ T5075] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 53.226100][ T5075] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 53.230813][ T5075] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 53.239910][ T5075] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 53.297210][ T5150] loop2: detected capacity change from 0 to 512 [ 53.302284][ T5150] EXT4-fs: Ignoring removed oldalloc option [ 53.311099][ T5150] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2196: inode #15: comm syz.2.211: corrupted in-inode xattr [ 53.316634][ T5150] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.211: couldn't read orphan inode 15 (err -117) [ 53.324352][ T5153] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.214'. [ 53.336020][ T5150] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 53.357912][ T5159] loop1: detected capacity change from 0 to 16 [ 53.359724][ T5159] erofs: (device loop1): mounted with root inode @ nid 36. [ 53.378897][ T5159] netlink: 172 bytes leftover after parsing attributes in process `syz.1.217'. [ 53.448911][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 53.516232][ T5173] device syzkaller0 entered promiscuous mode [ 53.560917][ T5184] netlink: 'syz.1.229': attribute type 1 has an invalid length. [ 53.562339][ T5184] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.229'. [ 53.668638][ T5193] loop1: detected capacity change from 0 to 512 [ 53.680569][ T5193] EXT4-fs: Ignoring removed oldalloc option [ 53.688004][ T5195] loop0: detected capacity change from 0 to 16 [ 53.690013][ T5195] erofs: (device loop0): mounted with root inode @ nid 36. [ 53.699829][ T5193] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.233: corrupted in-inode xattr [ 53.703511][ T5195] netlink: 172 bytes leftover after parsing attributes in process `syz.0.234'. [ 53.706297][ T5193] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.233: couldn't read orphan inode 15 (err -117) [ 53.714313][ T5193] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 53.793770][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 53.837275][ T5208] netlink: 'syz.1.240': attribute type 1 has an invalid length. [ 53.913073][ T5218] device syzkaller0 entered promiscuous mode [ 53.928621][ T5221] loop4: detected capacity change from 0 to 16 [ 53.931932][ T5221] erofs: (device loop4): mounted with root inode @ nid 36. [ 54.058700][ T5233] loop1: detected capacity change from 0 to 512 [ 54.063645][ T5233] EXT4-fs: Ignoring removed oldalloc option [ 54.073799][ T5233] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.251: corrupted in-inode xattr [ 54.076062][ T5233] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.251: couldn't read orphan inode 15 (err -117) [ 54.079941][ T5233] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 54.136091][ T5239] netlink: 'syz.0.254': attribute type 1 has an invalid length. [ 54.140126][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 54.188646][ T5249] loop3: detected capacity change from 0 to 16 [ 54.190740][ T5249] erofs: (device loop3): mounted with root inode @ nid 36. [ 54.246104][ T5256] device syzkaller0 entered promiscuous mode [ 54.304475][ T5265] loop3: detected capacity change from 0 to 512 [ 54.316241][ T5265] EXT4-fs: Ignoring removed oldalloc option [ 54.333641][ T5265] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2196: inode #15: comm syz.3.267: corrupted in-inode xattr [ 54.343656][ T5265] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.267: couldn't read orphan inode 15 (err -117) [ 54.353460][ T5265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 54.435408][ T5281] loop4: detected capacity change from 0 to 16 [ 54.450967][ T5281] erofs: (device loop4): mounted with root inode @ nid 36. [ 54.473440][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 54.497347][ T4324] Bluetooth: hci0: command 0x0c1a tx timeout [ 54.661113][ T5308] device syzkaller0 entered promiscuous mode [ 54.676519][ T5315] loop4: detected capacity change from 0 to 16 [ 54.682172][ T5315] erofs: (device loop4): mounted with root inode @ nid 36. [ 54.695549][ T5311] loop2: detected capacity change from 0 to 512 [ 54.696931][ T5311] EXT4-fs: Ignoring removed oldalloc option [ 54.726964][ T5311] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2196: inode #15: comm syz.2.288: corrupted in-inode xattr [ 54.731468][ T5311] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.288: couldn't read orphan inode 15 (err -117) [ 54.736511][ T5311] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 54.762219][ T27] audit: type=1326 audit(54.750:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.4.293" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1d5b9e8 code=0xffff0000 [ 54.978575][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 55.014740][ T5350] loop2: detected capacity change from 0 to 16 [ 55.024185][ T5350] erofs: (device loop2): mounted with root inode @ nid 36. [ 55.105457][ T5354] device syzkaller0 entered promiscuous mode [ 55.217653][ T4336] Bluetooth: hci2: command 0x0c1a tx timeout [ 55.218702][ T4336] Bluetooth: hci1: command 0x0c1a tx timeout [ 55.222220][ T5371] loop1: detected capacity change from 0 to 512 [ 55.243851][ T5371] EXT4-fs: Ignoring removed oldalloc option [ 55.265123][ T5371] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.314: corrupted in-inode xattr [ 55.270910][ T5371] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.314: couldn't read orphan inode 15 (err -117) [ 55.273187][ T5371] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 55.287265][ T4324] Bluetooth: hci4: command 0x0c1a tx timeout [ 55.288172][ T4324] Bluetooth: hci3: command 0x0c1a tx timeout [ 55.363858][ T5382] loop0: detected capacity change from 0 to 16 [ 55.393138][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 55.398227][ T5382] erofs: (device loop0): mounted with root inode @ nid 36. [ 55.646875][ T5411] loop3: detected capacity change from 0 to 512 [ 55.650925][ T5411] EXT4-fs: Ignoring removed oldalloc option [ 55.658807][ T5411] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2196: inode #15: comm syz.3.333: corrupted in-inode xattr [ 55.660977][ T5411] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.333: couldn't read orphan inode 15 (err -117) [ 55.662918][ T5411] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 55.779132][ T5429] loop4: detected capacity change from 0 to 16 [ 55.788105][ T5429] erofs: (device loop4): mounted with root inode @ nid 36. [ 56.567197][ T4336] Bluetooth: hci0: command 0x0406 tx timeout [ 57.287229][ T4324] Bluetooth: hci1: command 0x0406 tx timeout [ 57.288261][ T4324] Bluetooth: hci2: command 0x0406 tx timeout [ 57.367202][ T4336] Bluetooth: hci3: command 0x0406 tx timeout [ 57.368209][ T4336] Bluetooth: hci4: command 0x0406 tx timeout [ 64.498542][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.499599][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.503298][ T112] cfg80211: failed to load regulatory.db [ 66.734909][ T5405] device syzkaller0 entered promiscuous mode [ 66.831134][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 66.939884][ T5463] loop0: detected capacity change from 0 to 16 [ 66.941565][ T5463] erofs: (device loop0): mounted with root inode @ nid 36. [ 66.982807][ T5467] loop2: detected capacity change from 0 to 512 [ 66.984227][ T5467] EXT4-fs: Ignoring removed oldalloc option [ 67.033126][ T5467] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2196: inode #15: comm syz.2.354: corrupted in-inode xattr [ 67.035320][ T5467] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.354: couldn't read orphan inode 15 (err -117) [ 67.037740][ T5467] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 67.088709][ T5484] device syzkaller0 entered promiscuous mode [ 67.145782][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 67.218037][ T5500] loop3: detected capacity change from 0 to 16 [ 67.224293][ T5500] erofs: (device loop3): mounted with root inode @ nid 36. [ 67.322868][ T5517] loop1: detected capacity change from 0 to 512 [ 67.324212][ T5517] EXT4-fs: Ignoring removed oldalloc option [ 67.326909][ T5517] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.374: corrupted in-inode xattr [ 67.331975][ T5517] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.374: couldn't read orphan inode 15 (err -117) [ 67.334066][ T5517] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 67.358324][ T5521] device syzkaller0 entered promiscuous mode [ 67.426735][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 67.468893][ T5534] loop0: detected capacity change from 0 to 16 [ 67.475398][ T5534] erofs: (device loop0): mounted with root inode @ nid 36. [ 67.482836][ T5534] __nla_validate_parse: 5 callbacks suppressed [ 67.482843][ T5534] netlink: 132 bytes leftover after parsing attributes in process `syz.0.383'. [ 67.621718][ T5550] loop2: detected capacity change from 0 to 512 [ 67.623029][ T5550] EXT4-fs: Ignoring removed oldalloc option [ 67.633937][ T5550] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2196: inode #15: comm syz.2.392: corrupted in-inode xattr [ 67.636003][ T5550] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.392: couldn't read orphan inode 15 (err -117) [ 67.653440][ T5550] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 67.681849][ T5564] loop3: detected capacity change from 0 to 16 [ 67.684238][ T5564] erofs: (device loop3): mounted with root inode @ nid 36. [ 67.700893][ T5564] netlink: 132 bytes leftover after parsing attributes in process `syz.3.396'. [ 67.729713][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 67.895925][ T5591] device syzkaller0 entered promiscuous mode [ 67.916686][ T5593] loop0: detected capacity change from 0 to 512 [ 67.920774][ T5593] EXT4-fs: Ignoring removed oldalloc option [ 67.921604][ T5595] loop1: detected capacity change from 0 to 16 [ 67.922212][ T5595] erofs: (device loop1): mounted with root inode @ nid 36. [ 67.938217][ T5593] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2196: inode #15: comm syz.0.411: corrupted in-inode xattr [ 67.944448][ T5593] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.411: couldn't read orphan inode 15 (err -117) [ 67.946794][ T5593] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.971329][ T5595] netlink: 132 bytes leftover after parsing attributes in process `syz.1.412'. [ 68.042385][ T5600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.414'. [ 68.062543][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 68.144413][ T5619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.144875][ T5620] loop0: detected capacity change from 0 to 16 [ 68.152529][ T5619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.153660][ T5620] erofs: (device loop0): mounted with root inode @ nid 36. [ 68.288464][ T5633] loop1: detected capacity change from 0 to 512 [ 68.289864][ T5633] EXT4-fs: Ignoring removed oldalloc option [ 68.292389][ T5633] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.429: corrupted in-inode xattr [ 68.294650][ T5633] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.429: couldn't read orphan inode 15 (err -117) [ 68.296725][ T5633] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 68.355263][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 68.359540][ T4324] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 68.523950][ T5659] loop1: detected capacity change from 0 to 16 [ 68.530390][ T5659] erofs: (device loop1): mounted with root inode @ nid 36. [ 68.709557][ T5668] netlink: 'syz.0.440': attribute type 10 has an invalid length. [ 68.714998][ T5668] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 68.780186][ T5674] loop1: detected capacity change from 0 to 512 [ 68.781525][ T5674] EXT4-fs: Ignoring removed oldalloc option [ 68.788901][ T5674] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.442: corrupted in-inode xattr [ 68.790911][ T5674] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.442: couldn't read orphan inode 15 (err -117) [ 68.792960][ T5674] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 68.849874][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 68.924128][ T5685] Bluetooth: MGMT ver 1.22 [ 68.960998][ T5689] loop2: detected capacity change from 0 to 16 [ 68.968010][ T5691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.970444][ T5689] erofs: (device loop2): mounted with root inode @ nid 36. [ 68.977436][ T5691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.019474][ T5696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.021917][ T5696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.099893][ T5702] loop0: detected capacity change from 0 to 512 [ 69.101281][ T5702] EXT4-fs: Ignoring removed oldalloc option [ 69.119574][ T5702] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2196: inode #15: comm syz.0.454: corrupted in-inode xattr [ 69.121659][ T5702] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.454: couldn't read orphan inode 15 (err -117) [ 69.126900][ T5702] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 69.149913][ T5706] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 69.151154][ T5706] vhci_hcd: default hub control req: 6003 v00e2 i0002 l0 [ 69.192354][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 69.196406][ T5715] input: syz0 as /devices/virtual/input/input3 [ 69.227581][ T5717] loop0: detected capacity change from 0 to 16 [ 69.229382][ T5717] erofs: (device loop0): mounted with root inode @ nid 36. [ 69.305592][ T5727] binder: BC_ACQUIRE_RESULT not supported [ 69.306576][ T5727] binder: 5726:5727 ioctl c0306201 20000480 returned -22 [ 69.355976][ T5735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.468'. [ 69.358871][ T5735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.468'. [ 69.462716][ T5749] loop3: detected capacity change from 0 to 512 [ 69.464177][ T5749] EXT4-fs: Ignoring removed oldalloc option [ 69.466068][ T5750] syz.1.471 uses obsolete (PF_INET,SOCK_PACKET) [ 69.475724][ T5749] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2196: inode #15: comm syz.3.472: corrupted in-inode xattr [ 69.479174][ T5749] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.472: couldn't read orphan inode 15 (err -117) [ 69.496119][ T5749] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 69.579728][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 69.610545][ T5769] loop2: detected capacity change from 0 to 16 [ 69.619793][ T5769] erofs: (device loop2): mounted with root inode @ nid 36. [ 70.072441][ T5814] loop0: detected capacity change from 0 to 512 [ 70.077011][ T5814] EXT4-fs: Ignoring removed oldalloc option [ 70.101068][ T5814] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2196: inode #15: comm syz.0.489: corrupted in-inode xattr [ 70.103029][ T5814] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.489: couldn't read orphan inode 15 (err -117) [ 70.110193][ T5814] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 70.211604][ T5825] loop3: detected capacity change from 0 to 16 [ 70.221379][ T5825] erofs: (device loop3): mounted with root inode @ nid 36. [ 70.372763][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 70.796202][ T5892] loop2: detected capacity change from 0 to 16 [ 70.808361][ T5892] erofs: (device loop2): mounted with root inode @ nid 36. [ 70.881997][ T5899] loop2: detected capacity change from 0 to 512 [ 70.883359][ T5899] EXT4-fs: Ignoring removed oldalloc option [ 70.925684][ T5899] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2196: inode #15: comm syz.2.503: corrupted in-inode xattr [ 70.929152][ T5899] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.503: couldn't read orphan inode 15 (err -117) [ 70.937899][ T5899] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 70.948626][ T5904] block device autoloading is deprecated and will be removed. [ 71.001057][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 71.199768][ T5915] netlink: 'syz.2.510': attribute type 30 has an invalid length. [ 71.202842][ T5915] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.204319][ T5915] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.205650][ T5915] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.206886][ T5915] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.257333][ T5915] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.258867][ T5915] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.260203][ T5915] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.261681][ T5915] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.368291][ T5925] loop0: detected capacity change from 0 to 16 [ 71.385883][ T5925] erofs: (device loop0): mounted with root inode @ nid 36. [ 71.394512][ T5927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.397577][ T5927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.526674][ T5937] process 'syz.3.520' launched './file1' with NULL argv: empty string added [ 71.646319][ T5951] loop3: detected capacity change from 0 to 16 [ 71.650518][ T5951] erofs: (device loop3): mounted with root inode @ nid 36. [ 71.811069][ T5956] binder: 5955:5956 tried to acquire reference to desc 0, got 1 instead [ 71.812879][ T5956] binder: 5955:5956 got transaction with fd, 4, but target does not allow fds [ 71.814401][ T5956] binder: 5956:5955 translate fd failed [ 71.815498][ T5956] binder: 5955:5956 transaction call to 5955:0 failed 5/29201/-1, size 88-24 line 3415 [ 71.818232][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.027921][ T5974] loop2: detected capacity change from 0 to 16 [ 72.032342][ T5974] erofs: (device loop2): mounted with root inode @ nid 36. [ 72.046317][ T5974] netlink: 196 bytes leftover after parsing attributes in process `syz.2.537'. [ 72.374572][ T5990] tipc: Started in network mode [ 72.375478][ T5990] tipc: Node identity faa190b71db4, cluster identity 4711 [ 72.376623][ T5990] tipc: Enabled bearer , priority 0 [ 72.378866][ T5990] device syzkaller0 entered promiscuous mode [ 72.443866][ T5990] tipc: Resetting bearer [ 72.458153][ T5989] tipc: Resetting bearer [ 72.577686][ T5989] tipc: Disabling bearer [ 72.643096][ T6001] loop2: detected capacity change from 0 to 16 [ 72.651024][ T6001] erofs: (device loop2): mounted with root inode @ nid 36. [ 72.666719][ T6001] netlink: 196 bytes leftover after parsing attributes in process `syz.2.549'. [ 72.785723][ T6009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.788299][ T6009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.039761][ T6011] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.132841][ T6011] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.210863][ T6011] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.290864][ T6011] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.442960][ T6011] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.446210][ T6011] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.463556][ T6011] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.471932][ T6011] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.592712][ T6030] loop3: detected capacity change from 0 to 16 [ 73.604378][ T6030] erofs: (device loop3): mounted with root inode @ nid 36. [ 73.614928][ T6030] netlink: 196 bytes leftover after parsing attributes in process `syz.3.560'. [ 73.700306][ T6038] binder: 6037:6038 tried to acquire reference to desc 0, got 1 instead [ 73.703207][ T112] binder: undelivered TRANSACTION_COMPLETE [ 73.713870][ T7] binder: undelivered transaction 10, process died. [ 73.839254][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.565'. [ 73.969703][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.568'. [ 74.138494][ T6052] netlink: 'syz.2.570': attribute type 2 has an invalid length. [ 74.244507][ T6058] loop2: detected capacity change from 0 to 16 [ 74.262797][ T6058] erofs: (device loop2): mounted with root inode @ nid 36. [ 74.272711][ T6058] netlink: 'syz.2.573': attribute type 72 has an invalid length. [ 74.641141][ T6080] loop0: detected capacity change from 0 to 16 [ 74.643834][ T6080] erofs: (device loop0): mounted with root inode @ nid 36. [ 74.651278][ T6080] netlink: 'syz.0.584': attribute type 72 has an invalid length. [ 74.860948][ T6098] tipc: Cannot configure node identity twice [ 74.996670][ T6112] loop0: detected capacity change from 0 to 16 [ 75.000315][ T6112] erofs: (device loop0): mounted with root inode @ nid 36. [ 75.041765][ T6112] netlink: 'syz.0.596': attribute type 72 has an invalid length. [ 75.331372][ T7] binder: undelivered death notification, 0000000000000000 [ 75.347250][ T112] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.537223][ T112] usb 1-1: Using ep0 maxpacket: 32 [ 75.542848][ T112] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 75.544437][ T112] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 75.546351][ T112] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 75.549685][ T112] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 75.552197][ T112] usb 1-1: config 0 interface 0 has no altsetting 0 [ 75.558999][ T112] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 75.560415][ T112] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 75.561802][ T112] usb 1-1: Product: syz [ 75.562818][ T112] usb 1-1: Manufacturer: syz [ 75.563539][ T112] usb 1-1: SerialNumber: syz [ 75.571409][ T112] usb 1-1: config 0 descriptor?? [ 75.581429][ T112] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 75.589187][ T112] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 75.786313][ T4381] usb 1-1: USB disconnect, device number 2 [ 75.789276][ T4381] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 75.828432][ T6147] loop3: detected capacity change from 0 to 16 [ 75.830279][ T6147] erofs: (device loop3): mounted with root inode @ nid 36. [ 75.834357][ T6147] netlink: 260 bytes leftover after parsing attributes in process `syz.3.607'. [ 76.150578][ T6157] device syzkaller1 entered promiscuous mode [ 76.167237][ T4336] Bluetooth: hci5: command 0x1003 tx timeout [ 76.167413][ T4324] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 76.334468][ T6177] loop4: detected capacity change from 0 to 16 [ 76.336038][ T6177] erofs: (device loop4): mounted with root inode @ nid 36. [ 76.351984][ T6177] netlink: 260 bytes leftover after parsing attributes in process `syz.4.619'. [ 76.644469][ T6198] binder: 6197:6198 ioctl c0306201 0 returned -14 [ 76.684291][ T6202] loop1: detected capacity change from 0 to 16 [ 76.686131][ T6202] erofs: (device loop1): mounted with root inode @ nid 36. [ 76.698411][ T6202] netlink: 260 bytes leftover after parsing attributes in process `syz.1.633'. [ 76.762247][ T6209] netlink: 'syz.1.635': attribute type 30 has an invalid length. [ 76.766954][ T6209] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.768417][ T6209] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.769670][ T6209] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.770941][ T6209] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.820158][ T6209] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.821479][ T6209] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.822694][ T6209] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.824038][ T6209] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.839923][ T6215] Bluetooth: MGMT ver 1.22 [ 76.882301][ T6217] ax25_connect(): syz.4.639 uses autobind, please contact jreuter@yaina.de [ 77.162780][ T6233] loop3: detected capacity change from 0 to 16 [ 77.166703][ T6233] erofs: (device loop3): mounted with root inode @ nid 36. [ 77.234866][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.236983][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.400909][ T6238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.403118][ T6238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.500027][ T6240] netlink: 40 bytes leftover after parsing attributes in process `syz.0.649'. [ 77.634588][ T6221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.648118][ T6221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.931175][ T6221] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.932665][ T6221] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.933948][ T6221] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.935295][ T6221] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.057371][ T6251] netlink: 'syz.4.654': attribute type 30 has an invalid length. [ 78.065551][ T6251] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.067085][ T6251] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.068755][ T6251] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.070137][ T6251] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.188193][ T6251] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.189759][ T6251] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.191107][ T6251] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.192471][ T6251] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.748896][ T6271] qrtr: Invalid version 0 [ 79.003256][ T6274] netlink: 'syz.1.660': attribute type 10 has an invalid length. [ 79.005231][ T6274] bond0: (slave wlan1): Opening slave failed [ 79.015847][ T6278] loop2: detected capacity change from 0 to 16 [ 79.038564][ T6278] erofs: (device loop2): mounted with root inode @ nid 36. [ 79.134342][ T6290] netlink: 'syz.2.664': attribute type 9 has an invalid length. [ 79.135620][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.664'. [ 79.140409][ T6290] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.141732][ T6290] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.142936][ T6290] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.144155][ T6290] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.147033][ T6290] netlink: 'syz.2.664': attribute type 9 has an invalid length. [ 79.149962][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.664'. [ 79.266530][ T6303] binder: 6301:6303 tried to acquire reference to desc 0, got 1 instead [ 79.281012][ T112] binder: undelivered TRANSACTION_COMPLETE [ 79.291588][ T112] binder: undelivered transaction 21, process died. [ 79.318636][ T6310] loop0: detected capacity change from 0 to 16 [ 79.320543][ T6308] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.323241][ T6310] erofs: (device loop0): mounted with root inode @ nid 36. [ 79.328564][ T6308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.330070][ T6308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.351013][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.352679][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.354150][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.355691][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.357603][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.359552][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.362896][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.364402][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.365795][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.368610][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.370178][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.371751][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.742130][ T6321] netlink: 'syz.2.677': attribute type 10 has an invalid length. [ 79.744263][ T6321] bond0: (slave wlan1): Opening slave failed [ 79.786163][ T6325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.797362][ T6325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.857242][ T4932] ================================================================== [ 79.858563][ T4932] BUG: KASAN: use-after-free in __lock_acquire+0xf0/0x6544 [ 79.859612][ T4932] Read of size 8 at addr ffff0000cdd04bb0 by task gfs2_quotad/4932 [ 79.860806][ T4932] [ 79.861180][ T4932] CPU: 0 PID: 4932 Comm: gfs2_quotad Not tainted syzkaller #0 [ 79.862237][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 79.863725][ T4932] Call trace: [ 79.864216][ T4932] dump_backtrace+0x1c8/0x1f4 [ 79.864868][ T4932] show_stack+0x2c/0x3c [ 79.865488][ T4932] __dump_stack+0x30/0x40 [ 79.866187][ T4932] dump_stack_lvl+0xf8/0x160 [ 79.866852][ T4932] print_address_description+0x88/0x218 [ 79.867740][ T4932] print_report+0x50/0x68 [ 79.868421][ T4932] kasan_report+0xa8/0x100 [ 79.869101][ T4932] __asan_report_load8_noabort+0x2c/0x38 [ 79.869913][ T4932] __lock_acquire+0xf0/0x6544 [ 79.870610][ T4932] lock_acquire+0x20c/0x644 [ 79.871295][ T4932] _raw_spin_lock_irqsave+0x6c/0xb4 [ 79.872022][ T4932] finish_wait+0xc8/0x1ac [ 79.872671][ T4932] gfs2_quotad+0x390/0x4fc [ 79.873411][ T4932] kthread+0x250/0x2d8 [ 79.874067][ T4932] ret_from_fork+0x10/0x20 [ 79.874733][ T4932] [ 79.875092][ T4932] Allocated by task 6052: [ 79.875744][ T4932] kasan_set_track+0x4c/0x80 [ 79.876391][ T4932] kasan_save_alloc_info+0x28/0x34 [ 79.877173][ T4932] __kasan_kmalloc+0xa0/0xb8 [ 79.877867][ T4932] __kmalloc+0xec/0x178 [ 79.878621][ T4932] cache_create_net+0x7c/0x204 [ 79.879331][ T4932] gss_svc_init_net+0x64/0x3d4 [ 79.879983][ T4932] rpcsec_gss_init_net+0x20/0x30 [ 79.880644][ T4932] ops_init+0x2b0/0x53c [ 79.881288][ T4932] setup_net+0x464/0xb28 [ 79.881925][ T4932] copy_net_ns+0x2b8/0x588 [ 79.882551][ T4932] create_new_namespaces+0x318/0x5f0 [ 79.883317][ T4932] unshare_nsproxy_namespaces+0x108/0x158 [ 79.884171][ T4932] ksys_unshare+0x3d4/0x6d0 [ 79.884806][ T4932] __arm64_sys_unshare+0x3c/0x50 [ 79.885495][ T4932] invoke_syscall+0x98/0x2bc [ 79.886163][ T4932] el0_svc_common+0x138/0x258 [ 79.886866][ T4932] do_el0_svc+0x58/0x13c [ 79.887482][ T4932] el0_svc+0x58/0x138 [ 79.888000][ T4932] el0t_64_sync_handler+0x84/0xf0 [ 79.888729][ T4932] el0t_64_sync+0x18c/0x190 [ 79.889381][ T4932] [ 79.889717][ T4932] Freed by task 286: [ 79.890305][ T4932] kasan_set_track+0x4c/0x80 [ 79.891026][ T4932] kasan_save_free_info+0x3c/0x60 [ 79.891760][ T4932] ____kasan_slab_free+0x148/0x1b0 [ 79.892516][ T4932] __kasan_slab_free+0x18/0x28 [ 79.893256][ T4932] slab_free_freelist_hook+0x16c/0x1ec [ 79.894173][ T4932] __kmem_cache_free+0xc0/0x224 [ 79.894874][ T4932] kfree+0xd0/0x1ac [ 79.895446][ T4932] cache_destroy_net+0x3c/0x54 [ 79.896148][ T4932] gss_svc_shutdown_net+0x158/0x1e8 [ 79.896964][ T4932] rpcsec_gss_exit_net+0x20/0x30 [ 79.897636][ T4932] cleanup_net+0x5c4/0xa74 [ 79.898279][ T4932] process_one_work+0x7f4/0x13a8 [ 79.899003][ T4932] worker_thread+0x8c8/0xfbc [ 79.899641][ T4932] kthread+0x250/0x2d8 [ 79.900214][ T4932] ret_from_fork+0x10/0x20 [ 79.900801][ T4932] [ 79.901160][ T4932] The buggy address belongs to the object at ffff0000cdd04000 [ 79.901160][ T4932] which belongs to the cache kmalloc-8k of size 8192 [ 79.903182][ T4932] The buggy address is located 2992 bytes inside of [ 79.903182][ T4932] 8192-byte region [ffff0000cdd04000, ffff0000cdd06000) [ 79.905057][ T4932] [ 79.905377][ T4932] The buggy address belongs to the physical page: [ 79.906285][ T4932] page:000000002bc17db2 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10dd00 [ 79.907748][ T4932] head:000000002bc17db2 order:3 compound_mapcount:0 compound_pincount:0 [ 79.908936][ T4932] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 79.910177][ T4932] raw: 05ffc00000010200 fffffc000334f600 dead000000000002 ffff0000c0002c00 [ 79.911402][ T4932] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 79.912836][ T4932] page dumped because: kasan: bad access detected [ 79.913847][ T4932] [ 79.914220][ T4932] Memory state around the buggy address: [ 79.915061][ T4932] ffff0000cdd04a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.916193][ T4932] ffff0000cdd04b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.917405][ T4932] >ffff0000cdd04b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.918584][ T4932] ^ [ 79.919459][ T4932] ffff0000cdd04c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.920615][ T4932] ffff0000cdd04c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.921793][ T4932] ================================================================== [ 79.922890][ T4932] Disabling lock debugging due to kernel taint [ 79.923789][ T4932] INFO: trying to register non-static key. [ 79.924613][ T4932] The code is fine but needs lockdep annotation, or maybe [ 79.925611][ T4932] you didn't initialize this object before use? [ 79.926484][ T4932] turning off the locking correctness validator. [ 79.927433][ T4932] CPU: 0 PID: 4932 Comm: gfs2_quotad Tainted: G B syzkaller #0 [ 79.928772][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 79.930202][ T4932] Call trace: [ 79.930610][ T4932] dump_backtrace+0x1c8/0x1f4 [ 79.931378][ T4932] show_stack+0x2c/0x3c [ 79.932050][ T4932] __dump_stack+0x30/0x40 [ 79.932737][ T4932] dump_stack_lvl+0xf8/0x160 [ 79.933355][ T4932] dump_stack+0x1c/0x5c [ 79.933961][ T4932] assign_lock_key+0x224/0x258 [ 79.934683][ T4932] register_lock_class+0x1ac/0x694 [ 79.935438][ T4932] __lock_acquire+0x150/0x6544 [ 79.936088][ T4932] lock_acquire+0x20c/0x644 [ 79.936768][ T4932] _raw_spin_lock_irqsave+0x6c/0xb4 [ 79.937502][ T4932] finish_wait+0xc8/0x1ac [ 79.938143][ T4932] gfs2_quotad+0x390/0x4fc [ 79.938798][ T4932] kthread+0x250/0x2d8 [ 79.939423][ T4932] ret_from_fork+0x10/0x20 [ 79.940102][ T4932] list_del corruption. prev->next should be ffff8000210b7d98, but was 0000000000000000. (prev=ffff0000cdd04bd8) [ 79.942045][ T4932] ------------[ cut here ]------------ [ 79.942820][ T4932] kernel BUG at lib/list_debug.c:61! [ 79.943557][ T4932] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 79.944681][ T4932] Modules linked in: [ 79.945287][ T4932] CPU: 0 PID: 4932 Comm: gfs2_quotad Tainted: G B syzkaller #0 [ 79.946615][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 79.948080][ T4932] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 79.949199][ T4932] pc : __list_del_entry_valid+0x13c/0x158 [ 79.950033][ T4932] lr : __list_del_entry_valid+0x13c/0x158 [ 79.950730][ T4932] sp : ffff8000210b7c70 [ 79.951321][ T4932] x29: ffff8000210b7c70 x28: 0000000000000000 x27: 0000000000000bb8 [ 79.952380][ T4932] x26: 0000000000001770 x25: dfff800000000000 x24: dfff800000000000 [ 79.953516][ T4932] x23: ffff0000cdd047c0 x22: dfff800000000000 x21: ffff0000cdd04bd8 [ 79.954690][ T4932] x20: ffff0000cdd04bd8 x19: ffff8000210b7d98 x18: ffff800011abbcc0 [ 79.955951][ T4932] x17: 20747562202c3839 x16: ffff8000082e7de8 x15: 0000000000000000 [ 79.957194][ T4932] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 79.958364][ T4932] x11: ff0080000830a28c x10: 0000000000000000 x9 : c18d5f4eac616e00 [ 79.959618][ T4932] x8 : c18d5f4eac616e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 79.960850][ T4932] x5 : ffff8000210b7738 x4 : ffff8000151a4920 x3 : ffff80000852e538 [ 79.962048][ T4932] x2 : 0000000000000001 x1 : 0000000100000001 x0 : 000000000000006d [ 79.963171][ T4932] Call trace: [ 79.963640][ T4932] __list_del_entry_valid+0x13c/0x158 [ 79.964447][ T4932] finish_wait+0xd4/0x1ac [ 79.965110][ T4932] gfs2_quotad+0x390/0x4fc [ 79.965747][ T4932] kthread+0x250/0x2d8 [ 79.966336][ T4932] ret_from_fork+0x10/0x20 [ 79.966967][ T4932] Code: 91028000 aa1303e1 aa1503e3 95bfbbe3 (d4210000) [ 79.967944][ T4932] ---[ end trace 0000000000000000 ]--- [ 80.271237][ T4932] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 80.272221][ T4932] SMP: stopping secondary CPUs [ 80.273077][ T4932] Kernel Offset: disabled [ 80.273724][ T4932] CPU features: 0x080000,000f0097,a65bfea7 [ 80.274642][ T4932] Memory Limit: none [ 80.574354][ T4932] Rebooting in 86400 seconds..