last executing test programs: 1m16.201576867s ago: executing program 2 (id=272): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m16.096062514s ago: executing program 2 (id=273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m12.984051372s ago: executing program 2 (id=278): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 49.156743784s ago: executing program 2 (id=278): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 30.436567292s ago: executing program 2 (id=278): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 9.85558575s ago: executing program 2 (id=278): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 6.075475584s ago: executing program 4 (id=708): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, &(0x7f00000000c0)) 5.992754675s ago: executing program 4 (id=709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000500000000000000000000950000710000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) lsetxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@sha1={0x1, "b12787ba0071a634344b38452a088d027a2fbe1d"}, 0x15, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee00) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2315}, 0x1c) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600), 0x106}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="41000400010007", 0x7) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=cp874,discard,fmask=0000000000000000000377\x00,uid=', @ANYRESOCT, @ANYRES64, @ANYBLOB="b71fe84fda50cf6fbefac5a5891d03a05027c0e6658ea94f09636160112a47b688552b72051bf0111daffbe0a9ef82589ee2fac726c31d20f98aa1f9761873cd604d4b00000000000000e018b51e52342814e4c33a094807781862b524b303c604203d95ef2f4feb698f5a4f3983ca0adeae004caae16969e9000a6a9d85bf9d4ee333cfeb763ad6506f66797f154f0923a63f106d908d1cf2a884e57ab63950b9883c40449a94847df80ca39e9394f8de077bfd7f0c81e733fe8ad33c339a0f92997d172adcde0c53c97cce8a0f42c862a0c88c9a25ccf6799b85dadc245f608d00000000", @ANYRES16], 0xfe, 0x150c, &(0x7f0000002880)="$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") 5.985122847s ago: executing program 3 (id=710): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 5.831172415s ago: executing program 3 (id=713): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 5.602465703s ago: executing program 1 (id=714): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600006, 0x9) 4.937236811s ago: executing program 3 (id=715): socket(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}]}, 0x24}}, 0x0) 4.933271109s ago: executing program 4 (id=716): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 4.825427273s ago: executing program 1 (id=718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 4.686670787s ago: executing program 3 (id=720): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f0000000880)={[{@utf8}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fat=@nocase}, {@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@rodir}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_lower}, {@shortname_mixed}]}, 0x25, 0x351, &(0x7f0000001980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000e00)={'#! ', '', [{0x20, 'cp932Y\xe4\x00\x01mi@\xa9\x04\xa6c\xe3\x80ox\xfc\xe0\x94R\x81a\xbb\x924\xfe\xac\\\xef\xb5E\xfb\xf1@\v2\xca\x9eQ-I\a\xb2\x84\x9b\xea\x82}lB\xdc@(th*\xe0\v\xba\xe6iP\xd8\xfb\x11\x86\x99\x94\xc12\x9fj\xefP\x9c\xc2\xc8\xb1-d\xb3\xb3\xbc \\\x11V%\x87\xd5\x16\xf1\x89|\xfc!\xa1\xda,\xbd\xd0\xedw\x8c\xee\xc3\xe5Ii\x81K\x1b{\xc6b;d+&i\xab\b\xbd\xbd\x8d|d\x8f+\xad\x83\x18\x81\x87(\x1e\x12\x1b\xfe\xc9 bW\xffx\xc0\x868\b!\xd7\x1d-\xaa\xdd\xa3\xe5\x19\xbbA\xa4p\x16\xbc`\xc7\xb4z\b\xb8H\v\x15\xbdD\x17c\xda\xbd?\'t\x10\xf6\xb1l\xb71\x011\xda\xce`\x16\xc7#\x1f\xa4\xfan&\xdaH\xd0\x88\xbf\x01\x13\x80n.\xc5N\a\xeb\xb1\xec|\xf5\xfe\xd0F\xbb\xa9(\xe5 \xb7Ws\xbdu\xca\xc0\a\xb3Z\xa9@\xff\x04\x8c\xbeN\x8c\x98\xb1\xe0\x84\xfa\xca\xc8'}]}, 0x105) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) 4.560658721s ago: executing program 1 (id=721): futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x2fffffe) 4.542841918s ago: executing program 4 (id=722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00810000000800451400580000000000019078ffffffff6401010005019078000000004f000000000000000288000100000000ac141400070300072304ac1414bb00000000e0000001000000007f0000017f000001ac1414aae00000020000"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={0xffffffffffffffff, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) syz_open_procfs(0x0, 0x0) r4 = gettid() sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x1, 0x654, &(0x7f0000000a40)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc6004001c050a000200053582c137153e37000c0480fc0b10000300", 0x33fe0}], 0x1}, 0x0) tkill(r4, 0x21) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 4.229076577s ago: executing program 3 (id=725): syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000200)={[{@compress}]}, 0x1, 0x50ed, &(0x7f0000005180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file1\x00', 0x40942, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0xfea7) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f00000030c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000f40)=ANY=[@ANYRES64=r4, @ANYRES8, @ANYRES64=r5, @ANYRES64=r4, @ANYRES32, @ANYRESDEC, @ANYRES64, @ANYRESOCT=r6, @ANYRES8, @ANYRES64=r7], 0x0, 0x0, &(0x7f0000000000)) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e45c, 0x700000000000000) 3.931360013s ago: executing program 4 (id=727): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000500000000000000000000950000710000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) lsetxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@sha1={0x1, "b12787ba0071a634344b38452a088d027a2fbe1d"}, 0x15, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee00) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2315}, 0x1c) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600), 0x106}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="41000400010007", 0x7) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=cp874,discard,fmask=0000000000000000000377\x00,uid=', @ANYRESOCT, @ANYRES64, @ANYBLOB="b71fe84fda50cf6fbefac5a5891d03a05027c0e6658ea94f09636160112a47b688552b72051bf0111daffbe0a9ef82589ee2fac726c31d20f98aa1f9761873cd604d4b00000000000000e018b51e52342814e4c33a094807781862b524b303c604203d95ef2f4feb698f5a4f3983ca0adeae004caae16969e9000a6a9d85bf9d4ee333cfeb763ad6506f66797f154f0923a63f106d908d1cf2a884e57ab63950b9883c40449a94847df80ca39e9394f8de077bfd7f0c81e733fe8ad33c339a0f92997d172adcde0c53c97cce8a0f42c862a0c88c9a25ccf6799b85dadc245f608d00000000", @ANYRES16], 0xfe, 0x150c, &(0x7f0000002880)="$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") 2.945842158s ago: executing program 1 (id=730): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000280)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 2.847327658s ago: executing program 4 (id=731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 2.779495484s ago: executing program 3 (id=732): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 2.731077096s ago: executing program 1 (id=733): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1, &(0x7f0000000140)=@raw=[@func], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x30, &(0x7f0000000280), 0x8}, 0x90) 2.57612708s ago: executing program 1 (id=734): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b020000586500"/32, 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) 2.184380513s ago: executing program 0 (id=736): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x75, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @empty}}}}, &(0x7f0000000400)=0xb0) 2.027128911s ago: executing program 0 (id=737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00810000000800451400580000000000019078ffffffff6401010005019078000000004f000000000000000288000100000000ac141400070300072304ac1414bb00000000e0000001000000007f0000017f000001ac1414aae00000020000"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={0xffffffffffffffff, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) syz_open_procfs(0x0, 0x0) r4 = gettid() sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x1, 0x654, &(0x7f0000000a40)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc6004001c050a000200053582c137153e37000c0480fc0b10000300", 0x33fe0}], 0x1}, 0x0) tkill(r4, 0x21) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.668511162s ago: executing program 0 (id=738): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 1.405457517s ago: executing program 0 (id=739): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000b40), 0x6db6e559) sendfile(r1, r2, 0x0, 0x80000000000f0) sendmmsg$alg(r1, &(0x7f0000000a00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 947.277914ms ago: executing program 0 (id=740): futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x2fffffe) 0s ago: executing program 0 (id=741): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000240)={[{@part={'part', 0x3d, 0x4}}, {@nls={'nls', 0x3d, 'macromanian'}}, {@gid}, {@type={'type', 0x3d, "883a7f38"}}, {@creator={'creator', 0x3d, "ddf2bd6c"}}, {@umask={'umask', 0x3d, 0x9}}, {@uid}, {@nodecompose}, {@umask={'umask', 0x3d, 0x7f}}]}, 0x1, 0x6da, &(0x7f0000000580)="$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") chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001fc0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) kernel console output (not intermixed with test programs): oop3: detected capacity change from 0 to 64 [ 50.979756][ T43] team0 (unregistering): Port device team_slave_1 removed [ 51.557519][ T43] team0 (unregistering): Port device team_slave_0 removed [ 51.696349][ T6285] syz-executor: attempt to access beyond end of device [ 51.696349][ T6285] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 51.701958][ T6285] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 51.704148][ T6285] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 51.955014][ T6799] loop3: detected capacity change from 0 to 40427 [ 52.004385][ T6799] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.016924][ T6799] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 52.065143][ T6283] syz-executor: attempt to access beyond end of device [ 52.065143][ T6283] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 52.069330][ T6283] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 52.090025][ T6801] loop4: detected capacity change from 0 to 32768 [ 52.228663][ T6801] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nocow [ 52.231944][ T6801] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 52.278698][ T6801] bcachefs (loop4): alloc_read... done [ 52.280275][ T6801] bcachefs (loop4): stripes_read... done [ 52.281813][ T6801] bcachefs (loop4): snapshots_read... done [ 52.284457][ T6801] bcachefs (loop4): journal_replay... done [ 52.285004][ T6815] loop3: detected capacity change from 0 to 4096 [ 52.286288][ T6801] bcachefs (loop4): resume_logged_ops... done [ 52.289471][ T6801] bcachefs (loop4): going read-write [ 52.293621][ T6801] bcachefs (loop4): done starting filesystem [ 52.334700][ T6815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.352949][ T6815] EXT4-fs error (device loop3): ext4_empty_dir:3104: inode #12: block 80: comm syz.3.130: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 52.359157][ T6815] EXT4-fs warning (device loop3): ext4_empty_dir:3106: inode #12: comm syz.3.130: directory missing '..' [ 52.392485][ T6283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.084690][ T6285] bcachefs (loop4): shutting down [ 53.086348][ T6285] bcachefs (loop4): going read-only [ 53.088445][ T6285] bcachefs (loop4): finished waiting for writes to stop [ 53.349397][ T6285] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 53.407849][ T6285] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 12 [ 53.456937][ T6285] bcachefs (loop4): shutdown complete, journal seq 13 [ 53.494423][ T6285] bcachefs (loop4): marking filesystem clean [ 53.718855][ T6285] bcachefs (loop4): shutdown complete [ 53.967205][ T6829] loop3: detected capacity change from 0 to 128 [ 54.065100][ T6829] loop3: detected capacity change from 0 to 64 [ 54.076717][ T6829] minix: Unknown parameter 'ÿ00000000000000000003ÿÿÿÿÿÿÿÿ0177777777777777777777701777777777777777777777' [ 54.232957][ T6834] loop3: detected capacity change from 0 to 64 [ 54.874604][ T6849] loop4: detected capacity change from 0 to 40427 [ 54.888743][ T6850] loop3: detected capacity change from 0 to 40427 [ 54.921652][ T6849] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 54.926249][ T6849] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 54.930314][ T6850] F2FS-fs (loop3): Found nat_bits in checkpoint [ 54.932492][ T6849] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 54.942822][ T6849] F2FS-fs (loop4): Found nat_bits in checkpoint [ 54.970928][ T6850] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 55.015600][ T6849] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 55.017482][ T6849] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 55.080794][ T6866] loop2: detected capacity change from 0 to 128 [ 55.108470][ T6283] syz-executor: attempt to access beyond end of device [ 55.108470][ T6283] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 55.118326][ T6283] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 55.155142][ T6866] loop2: detected capacity change from 0 to 64 [ 55.172078][ T6866] minix: Unknown parameter 'ÿ00000000000000000003ÿÿÿÿÿÿÿÿ0177777777777777777777701777777777777777777777' [ 55.211481][ T6858] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 55.480195][ T6884] loop4: detected capacity change from 0 to 2048 [ 55.536325][ T6890] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 55.659437][ T6586] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.671614][ T6586] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.687231][ T6586] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.709560][ T6586] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.790758][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'. [ 55.868489][ T6586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.909309][ T6586] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.917415][ T1738] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.919296][ T1738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.922001][ T1738] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.924502][ T1738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.983463][ T6586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.064989][ T6920] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.148979][ T6586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.240530][ T6586] veth0_vlan: entered promiscuous mode [ 56.259387][ T6586] veth1_vlan: entered promiscuous mode [ 56.309542][ T6586] veth0_macvtap: entered promiscuous mode [ 56.313056][ T6586] veth1_macvtap: entered promiscuous mode [ 56.331304][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.344840][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.350148][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.352813][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.355384][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.376664][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.379364][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.382050][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.401191][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.411396][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.420529][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.426669][ T6913] loop4: detected capacity change from 0 to 32768 [ 56.438224][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.441122][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.458280][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.462423][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.470188][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.481498][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.490862][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.494866][ T6586] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.508118][ T6586] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.511836][ T6586] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.519306][ T6586] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.529486][ T6911] loop3: detected capacity change from 0 to 40427 [ 56.554434][ T6911] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 56.559690][ T6911] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 56.595122][ T6911] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 56.599686][ T6911] F2FS-fs (loop3): Found nat_bits in checkpoint [ 56.658586][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.660713][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.695467][ T6911] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 56.697396][ T6911] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 56.703578][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.710569][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.843927][ T6939] loop2: detected capacity change from 0 to 32768 [ 56.875647][ T6939] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.161 (6939) [ 56.905605][ T6939] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 56.908414][ T6939] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 56.911215][ T6939] BTRFS info (device loop2): using free-space-tree [ 57.157220][ T6284] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 57.331545][ T6958] loop0: detected capacity change from 0 to 32768 [ 57.381527][ T6958] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 57.471154][ T7016] loop4: detected capacity change from 0 to 1024 [ 57.478553][ T6958] XFS (loop0): Ending clean mount [ 57.524589][ T7016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.550700][ T7016] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2786: inode #2: comm syz.4.170: corrupted in-inode xattr: bad magic number in in-inode xattr [ 57.558414][ T7016] EXT4-fs (loop4): Remounting filesystem read-only [ 57.560169][ T7016] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2856: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 57.615050][ T6290] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 57.647529][ T6285] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.924110][ T7039] loop0: detected capacity change from 0 to 64 [ 58.093014][ T7042] syz.1.179 (pid 7042) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 58.122862][ T7042] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 58.252856][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 58.329262][ T7040] loop2: detected capacity change from 0 to 40427 [ 58.340084][ T7040] F2FS-fs (loop2): Found nat_bits in checkpoint [ 58.384459][ T7040] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 58.575932][ T7064] binder: BINDER_SET_CONTEXT_MGR already set [ 58.585377][ T7064] binder: 7059:7064 ioctl 4018620d 20000040 returned -16 [ 58.884325][ T7064] binder: tried to use weak ref as strong ref [ 58.897144][ T7065] loop3: detected capacity change from 0 to 2048 [ 58.899579][ T7064] binder: 7059:7064 Acquire 1 refcount change on invalid ref 0 ret -22 [ 58.903164][ T7064] binder: 7059:7064 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 59.023977][ T7067] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.096756][ T7058] loop0: detected capacity change from 0 to 32768 [ 59.173392][ T7058] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 59.208898][ T6284] syz-executor: attempt to access beyond end of device [ 59.208898][ T6284] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 59.214700][ T6284] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 59.217218][ T7058] XFS (loop0): Ending clean mount [ 59.218423][ T6284] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 59.317533][ T6290] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 59.348893][ T7084] input: syz1 as /devices/virtual/input/input2 [ 59.514311][ T7085] loop1: detected capacity change from 0 to 32768 [ 59.628268][ T7085] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nocow [ 59.631494][ T7085] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 59.673379][ T7085] bcachefs (loop1): alloc_read... done [ 59.674884][ T7085] bcachefs (loop1): stripes_read... done [ 59.676530][ T7085] bcachefs (loop1): snapshots_read... done [ 59.679039][ T7085] bcachefs (loop1): journal_replay... done [ 59.680611][ T7085] bcachefs (loop1): resume_logged_ops... done [ 59.682334][ T7085] bcachefs (loop1): going read-write [ 59.695382][ T7085] bcachefs (loop1): done starting filesystem [ 59.871765][ T7106] loop2: detected capacity change from 0 to 4096 [ 60.298096][ T7110] loop3: detected capacity change from 0 to 1024 [ 60.437656][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.438978][ T7110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.443611][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.447997][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.450571][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.452758][ T5858] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.454801][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.481061][ T7110] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2786: inode #2: comm syz.3.199: corrupted in-inode xattr: bad magic number in in-inode xattr [ 60.494750][ T6586] bcachefs (loop1): shutting down [ 60.496024][ T7110] EXT4-fs (loop3): Remounting filesystem read-only [ 60.502519][ T6586] bcachefs (loop1): going read-only [ 60.513657][ T6586] bcachefs (loop1): finished waiting for writes to stop [ 60.542011][ T6283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.552614][ T6586] bcachefs (loop1): flushing journal and stopping allocators, journal seq 12 [ 60.557837][ T6586] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 12 [ 60.563645][ T1970] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.567770][ T6586] bcachefs (loop1): shutdown complete, journal seq 13 [ 60.569988][ T6586] bcachefs (loop1): marking filesystem clean [ 60.600605][ T6586] bcachefs (loop1): shutdown complete [ 60.748445][ T1970] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.888228][ T1970] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.037643][ T1970] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.055942][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 61.164615][ T7133] loop1: detected capacity change from 0 to 256 [ 61.183156][ T7113] chnl_net:caif_netlink_parms(): no params data found [ 61.191432][ T7125] loop0: detected capacity change from 0 to 40427 [ 61.222096][ T7125] F2FS-fs (loop0): Found nat_bits in checkpoint [ 61.229469][ T7133] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 61.234263][ T7133] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 61.281598][ T7125] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 61.321805][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.323687][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.330004][ T7113] bridge_slave_0: entered allmulticast mode [ 61.332344][ T7113] bridge_slave_0: entered promiscuous mode [ 61.345994][ T7113] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.350351][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.352794][ T7113] bridge_slave_1: entered allmulticast mode [ 61.383201][ T7113] bridge_slave_1: entered promiscuous mode [ 61.392650][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 61.452812][ T7113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.506585][ T7113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.521534][ T1970] bridge_slave_1: left allmulticast mode [ 61.523004][ T1970] bridge_slave_1: left promiscuous mode [ 61.524583][ T1970] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.532354][ T1970] bridge_slave_0: left allmulticast mode [ 61.543703][ T1970] bridge_slave_0: left promiscuous mode [ 61.546806][ T1970] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.981911][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.002587][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.011775][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.022652][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.028274][ T5858] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.030475][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.074150][ T7159] loop2: detected capacity change from 0 to 1024 [ 62.162097][ T7159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.165879][ T6290] syz-executor: attempt to access beyond end of device [ 62.165879][ T6290] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 62.169581][ T6290] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 62.171578][ T6290] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 62.199790][ T7159] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2786: inode #2: comm syz.2.212: corrupted in-inode xattr: bad magic number in in-inode xattr [ 62.215796][ T7159] EXT4-fs (loop2): Remounting filesystem read-only [ 62.285708][ T6284] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.368686][ T7154] loop1: detected capacity change from 0 to 40427 [ 62.401463][ T7154] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 62.403631][ T7154] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 62.446217][ T7154] F2FS-fs (loop1): Found nat_bits in checkpoint [ 62.467421][ T7154] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 62.469314][ T7154] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 62.485789][ T5858] Bluetooth: hci3: command tx timeout [ 62.514311][ T7154] syz.1.211: attempt to access beyond end of device [ 62.514311][ T7154] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 62.578286][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 62.595341][ T6586] syz-executor: attempt to access beyond end of device [ 62.595341][ T6586] loop1: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 62.610720][ T6586] F2FS-fs (loop1): Issue discard(5637, 5637, 1) failed, ret: -5 [ 63.508642][ T1970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.550174][ T1970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.597733][ T1970] bond0 (unregistering): Released all slaves [ 63.611938][ T7113] team0: Port device team_slave_0 added [ 63.751254][ T7113] team0: Port device team_slave_1 added [ 63.946979][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.950142][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.962247][ T7113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.014828][ T6295] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.019072][ T6295] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.023056][ T6295] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.027348][ T6295] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.032564][ T6295] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.033549][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.034667][ T6295] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.045140][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.053059][ T7113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.085669][ T5858] Bluetooth: hci0: command tx timeout [ 64.537521][ T2306] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.543424][ T2306] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.573455][ T7113] hsr_slave_0: entered promiscuous mode [ 64.608099][ T5858] Bluetooth: hci3: command tx timeout [ 64.722077][ T7113] hsr_slave_1: entered promiscuous mode [ 64.825925][ T7113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.852490][ T7113] Cannot create hsr debugfs directory [ 64.899871][ T7202] netlink: 32 bytes leftover after parsing attributes in process `syz.0.224'. [ 64.951220][ T1970] hsr_slave_0: left promiscuous mode [ 64.971889][ T7198] loop2: detected capacity change from 0 to 32768 [ 64.977126][ T1970] hsr_slave_1: left promiscuous mode [ 65.018810][ T7198] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 65.051477][ T7198] XFS (loop2): Ending clean mount [ 65.055643][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.061156][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.064561][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.073548][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.097553][ T1970] veth1_macvtap: left promiscuous mode [ 65.101346][ T1970] veth0_macvtap: left promiscuous mode [ 65.103630][ T1970] veth1_vlan: left promiscuous mode [ 65.105372][ T1970] veth0_vlan: left promiscuous mode [ 65.150881][ T6284] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 65.507260][ T7238] input: syz0 as /devices/virtual/input/input3 [ 66.087066][ T5858] Bluetooth: hci2: command tx timeout [ 66.166970][ T5858] Bluetooth: hci0: command tx timeout [ 66.649671][ T5858] Bluetooth: hci3: command tx timeout [ 67.329422][ T1970] team0 (unregistering): Port device team_slave_1 removed [ 67.517949][ T1970] team0 (unregistering): Port device team_slave_0 removed [ 68.165523][ T5858] Bluetooth: hci2: command tx timeout [ 68.246592][ T5858] Bluetooth: hci0: command tx timeout [ 68.725564][ T5858] Bluetooth: hci3: command tx timeout [ 69.634473][ T27] cfg80211: failed to load regulatory.db [ 69.721862][ T7246] netlink: 32 bytes leftover after parsing attributes in process `syz.0.233'. [ 70.044896][ T7193] chnl_net:caif_netlink_parms(): no params data found [ 70.113936][ T7153] chnl_net:caif_netlink_parms(): no params data found [ 70.246564][ T5858] Bluetooth: hci2: command tx timeout [ 70.325624][ T5858] Bluetooth: hci0: command tx timeout [ 70.421621][ T7193] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.425100][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.431761][ T7193] bridge_slave_0: entered allmulticast mode [ 70.440783][ T7193] bridge_slave_0: entered promiscuous mode [ 70.450760][ T7153] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.452659][ T7153] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.458442][ T7153] bridge_slave_0: entered allmulticast mode [ 70.460868][ T7153] bridge_slave_0: entered promiscuous mode [ 70.540758][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.544597][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.554823][ T7193] bridge_slave_1: entered allmulticast mode [ 70.560594][ T7193] bridge_slave_1: entered promiscuous mode [ 70.565083][ T7153] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.567729][ T7153] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.570625][ T7153] bridge_slave_1: entered allmulticast mode [ 70.573606][ T7153] bridge_slave_1: entered promiscuous mode [ 70.634760][ T7153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.648592][ T7153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.652718][ T7193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.688088][ T7193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.175512][ T7153] team0: Port device team_slave_0 added [ 71.196284][ T7193] team0: Port device team_slave_0 added [ 71.222775][ T7303] warning: `syz.0.245' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.261862][ T7316] loop2: detected capacity change from 0 to 1024 [ 71.309474][ T1970] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.335897][ T7153] team0: Port device team_slave_1 added [ 71.367321][ T13] hfsplus: b-tree write err: -5, ino 4 [ 71.383243][ T7193] team0: Port device team_slave_1 added [ 71.447304][ T1970] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.472836][ T7153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.485365][ T7153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.496681][ T7153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.502862][ T7153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.504753][ T7153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.514859][ T7153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.520751][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.522713][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.530817][ T7193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.598474][ T1970] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.603682][ T7113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.623929][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.626055][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.643284][ T7193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.650221][ T7113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.718495][ T7153] hsr_slave_0: entered promiscuous mode [ 71.764779][ T7153] hsr_slave_1: entered promiscuous mode [ 71.786327][ T7153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.788422][ T7153] Cannot create hsr debugfs directory [ 71.880390][ T1970] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.958903][ T7113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.979697][ T7113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.325576][ T5858] Bluetooth: hci2: command tx timeout [ 72.677577][ T7193] hsr_slave_0: entered promiscuous mode [ 72.726540][ T7193] hsr_slave_1: entered promiscuous mode [ 72.777575][ T7193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.779677][ T7193] Cannot create hsr debugfs directory [ 72.948624][ T7153] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.038008][ T7153] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.123771][ T7389] Bluetooth: MGMT ver 1.22 [ 73.187819][ T7153] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.208574][ T7113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.233712][ T7113] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.262121][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.264096][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.317261][ T7405] loop0: detected capacity change from 0 to 2048 [ 73.339791][ T7405] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.347302][ T7153] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.387323][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.389374][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.423455][ T7113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.427293][ T30] audit: type=1326 audit(73.410:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7400 comm="syz.0.268" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87342328 code=0x0 [ 73.427438][ T7113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.565973][ T1970] bridge_slave_1: left allmulticast mode [ 73.567650][ T1970] bridge_slave_1: left promiscuous mode [ 73.569268][ T1970] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.577657][ T1970] bridge_slave_0: left allmulticast mode [ 73.579533][ T1970] bridge_slave_0: left promiscuous mode [ 73.581297][ T1970] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.586690][ T1970] bridge_slave_1: left allmulticast mode [ 73.588552][ T1970] bridge_slave_1: left promiscuous mode [ 73.590445][ T1970] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.593993][ T1970] bridge_slave_0: left allmulticast mode [ 73.600945][ T1970] bridge_slave_0: left promiscuous mode [ 73.602940][ T1970] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.838339][ T1970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.883793][ T1970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.937825][ T1970] bond0 (unregistering): Released all slaves [ 76.618348][ T1970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.658044][ T1970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.698175][ T1970] bond0 (unregistering): Released all slaves [ 76.803843][ T7113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.070206][ T6295] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.074405][ T6295] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.085235][ T6295] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.091457][ T6295] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.100829][ T6295] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.103100][ T6295] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.500354][ T7113] veth0_vlan: entered promiscuous mode [ 77.509130][ T7113] veth1_vlan: entered promiscuous mode [ 77.552085][ T7113] veth0_macvtap: entered promiscuous mode [ 77.591971][ T7113] veth1_macvtap: entered promiscuous mode [ 77.605970][ T7153] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.609424][ T7477] loop0: detected capacity change from 0 to 1024 [ 77.612895][ T7448] chnl_net:caif_netlink_parms(): no params data found [ 77.624270][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.628127][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.630985][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.633836][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.637799][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.640634][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.643271][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.648115][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.654438][ T7113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.666150][ T7153] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.670830][ T7153] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.795109][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.801355][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.804240][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.808666][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.814798][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.822503][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.825390][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.829132][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.832840][ T7113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.859726][ T7153] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.875214][ T7113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.878004][ T7113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.880429][ T7113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.882699][ T7113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.138589][ T7193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.147815][ T7193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.156718][ T7448] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.159560][ T7448] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.161936][ T7448] bridge_slave_0: entered allmulticast mode [ 78.164532][ T7448] bridge_slave_0: entered promiscuous mode [ 78.175732][ T7448] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.177693][ T7448] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.179709][ T7448] bridge_slave_1: entered allmulticast mode [ 78.181998][ T7448] bridge_slave_1: entered promiscuous mode [ 78.236863][ T7516] loop0: detected capacity change from 0 to 16 [ 78.255902][ T7193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.264671][ T7193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.268558][ T7516] erofs: (device loop0): mounted with root inode @ nid 36. [ 78.285576][ T7516] syz.0.290: attempt to access beyond end of device [ 78.285576][ T7516] loop0: rw=0, sector=1049272, nr_sectors = 32 limit=16 [ 78.290009][ T1970] hsr_slave_0: left promiscuous mode [ 78.292435][ T7516] syz.0.290: attempt to access beyond end of device [ 78.292435][ T7516] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 78.302297][ T7516] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 16 of nid 36 [ 78.304960][ T7516] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 78.314774][ T7516] syz.0.290: attempt to access beyond end of device [ 78.314774][ T7516] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 78.326388][ T1970] hsr_slave_1: left promiscuous mode [ 78.407322][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.409339][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.412852][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.415318][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.425021][ T1970] hsr_slave_0: left promiscuous mode [ 78.456345][ T1970] hsr_slave_1: left promiscuous mode [ 78.546134][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.548289][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.551548][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.553830][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.570425][ T7522] loop0: detected capacity change from 0 to 1024 [ 78.601363][ T1970] veth1_macvtap: left promiscuous mode [ 78.603008][ T1970] veth0_macvtap: left promiscuous mode [ 78.606338][ T1970] veth1_vlan: left promiscuous mode [ 78.607846][ T1970] veth0_vlan: left promiscuous mode [ 78.610389][ T1970] veth1_macvtap: left promiscuous mode [ 78.611893][ T1970] veth0_macvtap: left promiscuous mode [ 78.613487][ T1970] veth1_vlan: left promiscuous mode [ 78.614939][ T1970] veth0_vlan: left promiscuous mode [ 79.125607][ T6295] Bluetooth: hci1: command tx timeout [ 79.989120][ T7536] loop0: detected capacity change from 0 to 256 [ 80.001258][ T7536] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 80.004530][ T7536] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 81.205618][ T6295] Bluetooth: hci1: command tx timeout [ 81.212310][ T1970] team0 (unregistering): Port device team_slave_1 removed [ 81.400563][ T1970] team0 (unregistering): Port device team_slave_0 removed [ 83.285592][ T6295] Bluetooth: hci1: command tx timeout [ 85.365593][ T6295] Bluetooth: hci1: command tx timeout [ 85.372804][ T1970] team0 (unregistering): Port device team_slave_1 removed [ 85.609185][ T1970] team0 (unregistering): Port device team_slave_0 removed [ 87.944502][ T7448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.957974][ T7448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.966127][ T267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.968923][ T267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.026361][ T7448] team0: Port device team_slave_0 added [ 88.030736][ T7153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.039693][ T7448] team0: Port device team_slave_1 added [ 88.105136][ T7153] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.105270][ T7539] loop0: detected capacity change from 0 to 16 [ 88.111936][ T7539] erofs: (device loop0): mounted with root inode @ nid 36. [ 88.118312][ T7539] syz.0.298: attempt to access beyond end of device [ 88.118312][ T7539] loop0: rw=0, sector=1049272, nr_sectors = 32 limit=16 [ 88.122095][ T7539] syz.0.298: attempt to access beyond end of device [ 88.122095][ T7539] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 88.126243][ T7539] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 16 of nid 36 [ 88.128900][ T7539] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 88.133019][ T7539] syz.0.298: attempt to access beyond end of device [ 88.133019][ T7539] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 88.133638][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.144742][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.152504][ T7448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.166652][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.168928][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.176386][ T7448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.176749][ T1992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.184850][ T1992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.202239][ T6294] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.204149][ T6294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.218822][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.220814][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.287322][ T7448] hsr_slave_0: entered promiscuous mode [ 88.338950][ T7448] hsr_slave_1: entered promiscuous mode [ 88.376998][ T7448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.379148][ T7448] Cannot create hsr debugfs directory [ 88.469858][ T7193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.505295][ T7193] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.521011][ T7549] loop0: detected capacity change from 0 to 1024 [ 88.526152][ T6294] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.527981][ T6294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.540539][ T6294] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.542483][ T6294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.649748][ T7448] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.683429][ T7153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.829542][ T7448] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.838665][ T7193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.977443][ T7153] veth0_vlan: entered promiscuous mode [ 89.004562][ T7566] loop4: detected capacity change from 0 to 16 [ 89.010968][ T7566] erofs: (device loop4): mounted with root inode @ nid 36. [ 89.015278][ T7566] syz.4.306: attempt to access beyond end of device [ 89.015278][ T7566] loop4: rw=0, sector=1049272, nr_sectors = 32 limit=16 [ 89.019366][ T7566] syz.4.306: attempt to access beyond end of device [ 89.019366][ T7566] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 89.022632][ T7566] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 16 of nid 36 [ 89.024931][ T7566] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 89.030805][ T7566] syz.4.306: attempt to access beyond end of device [ 89.030805][ T7566] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 89.037561][ T7448] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.067317][ T7153] veth1_vlan: entered promiscuous mode [ 89.088080][ T7153] veth0_macvtap: entered promiscuous mode [ 89.107158][ T7153] veth1_macvtap: entered promiscuous mode [ 89.163691][ T7564] loop0: detected capacity change from 0 to 32768 [ 89.174637][ T7448] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.189056][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.191798][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.195163][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.198818][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.201348][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.204149][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.210607][ T7153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.220170][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.222983][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.227896][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.228141][ T7564] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 89.230829][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.236020][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.238956][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.242749][ T7153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.256868][ T7153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.261262][ T7153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.263704][ T7153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.266424][ T7153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.313515][ T7564] XFS (loop0): Ending clean mount [ 89.332174][ T7564] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x2a4/0xe18, inode 0x2443 dinode [ 89.335249][ T7564] XFS (loop0): Unmount and run xfs_repair [ 89.337142][ T7564] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 89.339174][ T7564] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 89.341457][ T7564] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 89.344008][ T7564] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 89.346778][ T7564] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 89.349351][ T7564] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 89.351693][ T7564] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 54 01 7a fc ............T.z. [ 89.354055][ T7564] 00000060: ff ff ff ff 4c 7b c2 21 00 00 00 00 00 00 00 04 ....L{.!........ [ 89.356760][ T7564] 00000070: 00 00 00 01 00 00 00 80 18 00 00 00 00 00 00 08 ................ [ 89.377869][ T6290] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 89.540814][ T7193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.580848][ T1970] bridge_slave_1: left allmulticast mode [ 89.582447][ T1970] bridge_slave_1: left promiscuous mode [ 89.584102][ T1970] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.601018][ T1970] bridge_slave_0: left allmulticast mode [ 89.602647][ T1970] bridge_slave_0: left promiscuous mode [ 89.604200][ T1970] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.813399][ T7591] x_tables: duplicate underflow at hook 4 [ 90.534515][ T7602] loop0: detected capacity change from 0 to 32768 [ 90.544038][ T7602] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.318 (7602) [ 90.553765][ T7602] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.564676][ T7602] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 90.570652][ T7602] BTRFS info (device loop0): using free-space-tree [ 90.665330][ T6290] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.095143][ T1970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.152933][ T1970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.187946][ T1970] bond0 (unregistering): Released all slaves [ 91.197947][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.200122][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.234179][ T7193] veth0_vlan: entered promiscuous mode [ 91.283506][ T7193] veth1_vlan: entered promiscuous mode [ 91.292459][ T7448] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.324167][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.332493][ T7448] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.334537][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.477276][ T7630] loop4: detected capacity change from 0 to 1024 [ 91.491400][ T7630] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.509913][ T7193] veth0_macvtap: entered promiscuous mode [ 91.519025][ T7448] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.522641][ T7448] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.543406][ T7193] veth1_macvtap: entered promiscuous mode [ 92.310127][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.312710][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.315184][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.333614][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.336675][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.339421][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.341890][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.344565][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.356590][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.375213][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.379529][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.382824][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.385884][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.388525][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.391562][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.394317][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.397158][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.400766][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.411746][ T1970] hsr_slave_0: left promiscuous mode [ 92.445869][ T1970] hsr_slave_1: left promiscuous mode [ 92.517593][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.519569][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.525356][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.529174][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.544051][ T1970] veth1_macvtap: left promiscuous mode [ 92.548210][ T1970] veth0_macvtap: left promiscuous mode [ 92.549746][ T1970] veth1_vlan: left promiscuous mode [ 92.551225][ T1970] veth0_vlan: left promiscuous mode [ 92.565895][ T10] atkbd serio0: keyboard reset failed on [ 93.729970][ T7658] loop0: detected capacity change from 0 to 32768 [ 93.742705][ T7658] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.332 (7658) [ 93.765970][ T7658] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.771054][ T7658] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 93.774400][ T7658] BTRFS info (device loop0): using free-space-tree [ 93.808498][ T7660] loop3: detected capacity change from 0 to 32768 [ 93.975280][ T6290] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.980996][ T1970] team0 (unregistering): Port device team_slave_1 removed [ 95.153382][ T1970] team0 (unregistering): Port device team_slave_0 removed [ 97.233098][ T7193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.235614][ T7193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.238318][ T7193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.240509][ T7193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.341888][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.343939][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.369579][ T267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.371667][ T267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.399537][ T7448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.437089][ T7448] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.449393][ T7181] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.451253][ T7181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.471578][ T7181] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.473589][ T7181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.676725][ T7693] loop1: detected capacity change from 0 to 4096 [ 97.723072][ T7448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.816963][ T7448] veth0_vlan: entered promiscuous mode [ 97.874286][ T7688] loop3: detected capacity change from 0 to 32768 [ 97.901575][ T7688] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.338 (7688) [ 97.911510][ T7448] veth1_vlan: entered promiscuous mode [ 97.932371][ T7688] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.935157][ T7688] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 97.950881][ T7448] veth0_macvtap: entered promiscuous mode [ 97.954288][ T7448] veth1_macvtap: entered promiscuous mode [ 97.957713][ T7688] BTRFS info (device loop3): using free-space-tree [ 97.984805][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.989124][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.991738][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.994505][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.997999][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.000946][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.003803][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.011254][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.016939][ T7448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.021406][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.024180][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.027838][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.031210][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.034210][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.037480][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.040040][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.043158][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.048107][ T7448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.053209][ T7448] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.055993][ T7448] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.058318][ T7448] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.060667][ T7448] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.177147][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.186238][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.199966][ T7695] loop4: detected capacity change from 0 to 32768 [ 98.209850][ T7637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.212102][ T7637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.229498][ T7695] XFS (loop4): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 98.254613][ T7695] XFS (loop4): Ending clean mount [ 98.443617][ T7153] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.515100][ T7113] XFS (loop4): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 98.933249][ T7755] loop3: detected capacity change from 0 to 764 [ 98.953604][ T7755] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 99.054825][ T7760] loop1: detected capacity change from 0 to 512 [ 99.080607][ T7760] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 99.084683][ T7760] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.101992][ T7760] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.357: invalid indirect mapped block 83886080 (level 1) [ 99.115927][ T7760] EXT4-fs (loop1): Remounting filesystem read-only [ 99.118674][ T7760] EXT4-fs (loop1): 1 orphan inode deleted [ 99.120268][ T7760] EXT4-fs (loop1): 1 truncate cleaned up [ 99.123288][ T7760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.283343][ T7193] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.517225][ T7780] loop3: detected capacity change from 0 to 512 [ 99.573132][ T7780] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.366: bg 0: block 248: padding at end of block bitmap is not set [ 99.581856][ T7780] Quota error (device loop3): write_blk: dquota write failed [ 99.584896][ T7780] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 99.592622][ T7780] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz.3.366: Failed to acquire dquot type 1 [ 99.614890][ T7780] EXT4-fs (loop3): 1 truncate cleaned up [ 99.630114][ T7780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.630549][ T7787] loop1: detected capacity change from 0 to 1024 [ 99.662327][ T7787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.676927][ T7780] Quota error (device loop3): write_blk: dquota write failed [ 99.686907][ T7780] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 99.690219][ T7780] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz.3.366: Failed to acquire dquot type 1 [ 99.788170][ T7153] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.826051][ T1970] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 99.829741][ T1970] EXT4-fs error (device loop3): ext4_release_dquot:6883: comm kworker/u8:6: Failed to release dquot type 1 [ 100.578371][ T7788] loop4: detected capacity change from 0 to 32768 [ 100.593674][ T7788] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.369 (7788) [ 100.603852][ T7788] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.606881][ T7788] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 100.609377][ T7788] BTRFS info (device loop4): using free-space-tree [ 100.738894][ T7816] loop1: detected capacity change from 0 to 512 [ 100.764549][ T7816] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.774071][ T7793] loop0: detected capacity change from 0 to 32768 [ 100.818140][ T7816] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.373: invalid indirect mapped block 83886080 (level 1) [ 100.833358][ T7816] EXT4-fs (loop1): Remounting filesystem read-only [ 100.833568][ T7793] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.835246][ T7816] EXT4-fs (loop1): 1 orphan inode deleted [ 100.851016][ T7816] EXT4-fs (loop1): 1 truncate cleaned up [ 100.856332][ T7816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.918205][ T7193] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.921117][ T7113] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.942120][ T7793] XFS (loop0): Ending clean mount [ 100.967115][ T7793] XFS (loop0): Quotacheck needed: Please wait. [ 101.048851][ T7793] XFS (loop0): Quotacheck: Done. [ 101.085990][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.089626][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.095939][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.103635][ T1970] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.106901][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.113879][ T5858] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 101.116209][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.202445][ T7828] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 101.218970][ T6290] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.381638][ T7831] chnl_net:caif_netlink_parms(): no params data found [ 101.413342][ T7846] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 101.506789][ T7841] loop4: detected capacity change from 0 to 32768 [ 101.525582][ T7831] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.535401][ T7831] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.548022][ T7831] bridge_slave_0: entered allmulticast mode [ 101.552337][ T7831] bridge_slave_0: entered promiscuous mode [ 101.571072][ T7831] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.572862][ T7831] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.580456][ T7831] bridge_slave_1: entered allmulticast mode [ 101.587525][ T7831] bridge_slave_1: entered promiscuous mode [ 101.598258][ T7858] loop1: detected capacity change from 0 to 64 [ 101.644196][ T7841] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 101.648049][ T7841] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 101.659963][ T7831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.672091][ T7831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.694436][ T7831] team0: Port device team_slave_0 added [ 101.702780][ T7831] team0: Port device team_slave_1 added [ 101.714291][ T7841] bcachefs (loop4): alloc_read... done [ 101.724854][ T7841] bcachefs (loop4): stripes_read... done [ 101.731332][ T7841] bcachefs (loop4): snapshots_read... done [ 101.733879][ T7841] bcachefs (loop4): journal_replay... done [ 101.735411][ T7841] bcachefs (loop4): resume_logged_ops... done [ 101.751914][ T7841] bcachefs (loop4): going read-write [ 101.771654][ T7841] bcachefs (loop4): done starting filesystem [ 101.796526][ T7831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.798426][ T7831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.805270][ T7831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.837441][ T7831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.839298][ T7831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.876422][ T7869] loop3: detected capacity change from 0 to 512 [ 101.881487][ T7831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.948237][ T7869] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.383: bg 0: block 248: padding at end of block bitmap is not set [ 101.954975][ T7869] Quota error (device loop3): write_blk: dquota write failed [ 101.966292][ T7869] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 101.969029][ T7869] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz.3.383: Failed to acquire dquot type 1 [ 101.978089][ T7831] hsr_slave_0: entered promiscuous mode [ 102.015898][ T7831] hsr_slave_1: entered promiscuous mode [ 102.019389][ T7869] EXT4-fs (loop3): 1 truncate cleaned up [ 102.021233][ T7869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.054877][ T7869] Quota error (device loop3): write_blk: dquota write failed [ 102.059842][ T7869] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 102.062468][ T7869] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz.3.383: Failed to acquire dquot type 1 [ 102.153494][ T7153] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.173661][ T43] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 102.184089][ T7113] bcachefs (loop4): shutting down [ 102.185638][ T43] EXT4-fs error (device loop3): ext4_release_dquot:6883: comm kworker/u8:3: Failed to release dquot type 1 [ 102.189569][ T7113] bcachefs (loop4): going read-only [ 102.191000][ T7113] bcachefs (loop4): finished waiting for writes to stop [ 102.208616][ T7877] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 102.216462][ T7113] bcachefs (loop4): flushing journal and stopping allocators, journal seq 17 [ 102.248391][ T7113] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 18 [ 102.267596][ T7113] bcachefs (loop4): shutdown complete, journal seq 19 [ 102.271184][ T7113] bcachefs (loop4): marking filesystem clean [ 102.288696][ T7113] bcachefs (loop4): shutdown complete [ 102.396920][ T7879] loop3: detected capacity change from 0 to 2048 [ 102.432985][ T7879] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.552609][ T7885] netlink: zone id is out of range [ 102.596071][ T7886] loop1: detected capacity change from 0 to 2048 [ 102.619478][ T7886] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 102.623554][ T7886] UDF-fs: Scanning with blocksize 512 failed [ 102.656578][ T7886] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.048974][ T7890] loop4: detected capacity change from 0 to 32768 [ 103.078597][ T7890] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.147825][ T7910] loop1: detected capacity change from 0 to 1024 [ 103.159767][ T7890] XFS (loop4): Ending clean mount [ 103.170519][ T7910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.184135][ T7890] XFS (loop4): Quotacheck needed: Please wait. [ 103.206174][ T5858] Bluetooth: hci1: command tx timeout [ 103.226896][ T7890] XFS (loop4): Quotacheck: Done. [ 103.311239][ T7113] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.422417][ T1970] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.041099][ T1970] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.043794][ T7918] netlink: zone id is out of range [ 104.157507][ T1970] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.340886][ T7923] loop0: detected capacity change from 0 to 2048 [ 104.405999][ T1970] bridge_slave_1: left allmulticast mode [ 104.407507][ T1970] bridge_slave_1: left promiscuous mode [ 104.413370][ T1970] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.419236][ T7923] loop0: p1 < > p2 p3 < p5 > [ 104.424980][ T7923] loop0: p2 start 16908804 is beyond EOD, truncated [ 104.448028][ T7917] loop3: detected capacity change from 0 to 40427 [ 104.448424][ T1970] bridge_slave_0: left allmulticast mode [ 104.451598][ T7923] loop0: p5 start 16908804 is beyond EOD, truncated [ 104.455960][ T1970] bridge_slave_0: left promiscuous mode [ 104.461489][ T1970] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.464986][ T7917] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 104.469682][ T7917] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 104.490804][ T5899] loop0: p1 < > p2 p3 < p5 > [ 104.493917][ T5899] loop0: p2 start 16908804 is beyond EOD, truncated [ 104.498448][ T7917] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.505411][ T5899] loop0: p5 start 16908804 is beyond EOD, truncated [ 104.527281][ T7917] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 104.535387][ T7917] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 104.613120][ T7917] syz.3.400: attempt to access beyond end of device [ 104.613120][ T7917] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 104.687093][ T7583] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 104.705332][ T7583] udevd[7583]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 104.705407][ T7603] udevd[7603]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 104.932293][ T7948] loop0: detected capacity change from 0 to 256 [ 104.998081][ T7952] netlink: zone id is out of range [ 105.042406][ T7948] syz.0.413: attempt to access beyond end of device [ 105.042406][ T7948] loop0: rw=2049, sector=256, nr_sectors = 128 limit=256 [ 105.127490][ T7956] loop1: detected capacity change from 0 to 1024 [ 105.192611][ T7583] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 105.315664][ T5858] Bluetooth: hci1: command tx timeout [ 105.526166][ T7963] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.417' resets device [ 106.005309][ T7967] loop4: detected capacity change from 0 to 512 [ 106.028926][ T7967] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 106.031886][ T7967] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 106.055871][ T7967] EXT4-fs (loop4): 1 truncate cleaned up [ 106.057914][ T7967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.121903][ T7113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.202772][ T7961] loop0: detected capacity change from 0 to 32768 [ 107.009575][ T7971] loop4: detected capacity change from 0 to 32768 [ 107.025904][ T7971] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 107.066770][ T7971] XFS (loop4): Ending clean mount [ 107.085841][ T7971] XFS (loop4): Quotacheck needed: Please wait. [ 107.145088][ T7971] XFS (loop4): Quotacheck: Done. [ 107.182830][ T1970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.204431][ T7113] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 107.233004][ T1970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.275394][ T1970] bond0 (unregistering): Released all slaves [ 107.361533][ T7962] netlink: 'syz.1.417': attribute type 3 has an invalid length. [ 107.363693][ T7962] netlink: 'syz.1.417': attribute type 3 has an invalid length. [ 107.365816][ T5858] Bluetooth: hci1: command tx timeout [ 107.476930][ T7153] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 107.479000][ T7153] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 107.484811][ T7153] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 107.490014][ T7153] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 107.492086][ T7153] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 107.494460][ T7153] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 107.504979][ T7153] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 107.725258][ T8010] loop0: detected capacity change from 0 to 256 [ 107.814901][ T8010] syz.0.429: attempt to access beyond end of device [ 107.814901][ T8010] loop0: rw=2049, sector=256, nr_sectors = 128 limit=256 [ 107.897276][ T8014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.007732][ T8018] netlink: zone id is out of range [ 108.062856][ T1970] hsr_slave_0: left promiscuous mode [ 108.095939][ T1970] hsr_slave_1: left promiscuous mode [ 108.165811][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.168127][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.172089][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.174151][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.195232][ T1970] veth1_macvtap: left promiscuous mode [ 108.205573][ T1970] veth0_macvtap: left promiscuous mode [ 108.207045][ T1970] veth1_vlan: left promiscuous mode [ 108.208401][ T1970] veth0_vlan: left promiscuous mode [ 108.254336][ T8038] loop0: detected capacity change from 0 to 1024 [ 108.312570][ T7583] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 108.501167][ T8034] loop3: detected capacity change from 0 to 32768 [ 108.680113][ T8043] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.436' resets device [ 109.121916][ T8034] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.161771][ T8034] XFS (loop3): Ending clean mount [ 109.170051][ T8034] XFS (loop3): Quotacheck needed: Please wait. [ 109.219331][ T8034] XFS (loop3): Quotacheck: Done. [ 109.270484][ T7153] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.369995][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 109.370009][ T30] audit: type=1326 audit(109.350:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8056 comm="syz.4.440" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3142328 code=0x0 [ 109.445602][ T5858] Bluetooth: hci1: command tx timeout [ 109.861472][ T8063] loop3: detected capacity change from 0 to 32768 [ 109.886951][ T8063] gfs2: fsid=enospc_debug: Trying to join cluster "lock_nolock", "enospc_debug" [ 109.889522][ T8063] gfs2: fsid=enospc_debug: Now mounting FS (format 1801)... [ 109.919608][ T8063] gfs2: fsid=enospc_debug.s: journal 0 mapped with 18 extents in 0ms [ 109.923436][ T8063] syz.3.441: attempt to access beyond end of device [ 109.923436][ T8063] loop3: rw=0, sector=268436480, nr_sectors = 8 limit=32768 [ 109.950175][ T8063] gfs2: fsid=enospc_debug.s: Error parsing journal for spectator mount. [ 110.316626][ T8069] loop4: detected capacity change from 0 to 256 [ 110.368276][ T8069] syz.4.443: attempt to access beyond end of device [ 110.368276][ T8069] loop4: rw=2049, sector=256, nr_sectors = 128 limit=256 [ 110.540707][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.991845][ T1970] team0 (unregistering): Port device team_slave_1 removed [ 111.123910][ T8083] loop4: detected capacity change from 0 to 32768 [ 111.164188][ T8083] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.199095][ T8083] XFS (loop4): Ending clean mount [ 111.199168][ T1970] team0 (unregistering): Port device team_slave_0 removed [ 111.201513][ T8083] XFS (loop4): Quotacheck needed: Please wait. [ 111.252800][ T8083] XFS (loop4): Quotacheck: Done. [ 111.317182][ T8096] loop3: detected capacity change from 0 to 128 [ 111.348642][ T7113] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.370849][ T7583] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 111.651078][ T8096] loop3: detected capacity change from 0 to 40427 [ 111.658202][ T30] audit: type=1326 audit(111.640:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8099 comm="syz.4.454" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3142328 code=0x0 [ 111.677640][ T8096] F2FS-fs (loop3): Unrecognized mount option "disable_roll_forwar" or missing value [ 111.723775][ T8096] loop3: detected capacity change from 0 to 4096 [ 111.730602][ T8096] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 111.740261][ T8096] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 111.856353][ T7965] ntfs3: loop3: ino=5, ntfs3_write_inode failed, -22. [ 112.038980][ T8105] sock: sock_timestamping_bind_phc: sock not bind to device [ 113.602284][ T8042] netlink: 'syz.0.436': attribute type 3 has an invalid length. [ 113.604374][ T8042] netlink: 'syz.0.436': attribute type 3 has an invalid length. [ 113.648575][ T8129] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 113.711774][ T7831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.717067][ T7831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.721312][ T7831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.737232][ T7831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.830715][ T7831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.832895][ T8137] loop4: detected capacity change from 0 to 1024 [ 113.852117][ T7831] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.883830][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.885754][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.889559][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.889927][ T8137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.891529][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.911857][ T7831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.017977][ T7831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.077885][ T7831] veth0_vlan: entered promiscuous mode [ 114.084486][ T7831] veth1_vlan: entered promiscuous mode [ 114.125590][ T30] audit: type=1326 audit(114.100:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8148 comm="syz.1.472" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff80d42328 code=0x0 [ 114.131734][ T7831] veth0_macvtap: entered promiscuous mode [ 114.135239][ T7831] veth1_macvtap: entered promiscuous mode [ 114.157745][ T7831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.160645][ T7831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.163202][ T7831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.168903][ T7831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.171570][ T7831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.185469][ T7831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.188084][ T7831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.191106][ T7831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.199007][ T7113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.202251][ T7831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.247431][ T7831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.250357][ T7831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.253241][ T7831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.260285][ T7831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.262863][ T7831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.265901][ T7831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.268413][ T7831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.270923][ T7831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.274415][ T7831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.285962][ T7831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.288272][ T7831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.290585][ T7831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.292855][ T7831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.351382][ T8159] loop0: detected capacity change from 0 to 128 [ 114.403401][ T8160] loop4: detected capacity change from 0 to 1024 [ 114.411268][ T1992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.435575][ T1992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.464963][ T8160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.470606][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.472706][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.576185][ T7113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.678426][ T8164] loop3: detected capacity change from 0 to 32768 [ 114.867644][ T8159] loop0: detected capacity change from 0 to 40427 [ 114.881496][ T8159] F2FS-fs (loop0): Unrecognized mount option "disable_roll_forwar" or missing value [ 114.950156][ T8159] loop0: detected capacity change from 0 to 4096 [ 114.959552][ T8159] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 114.993482][ T8159] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 115.167494][ T1970] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [ 116.565921][ T8185] sched: RT throttling activated [ 117.644743][ T8195] loop3: detected capacity change from 0 to 32768 [ 117.647323][ T30] audit: type=1326 audit(117.630:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8200 comm="syz.0.493" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87342328 code=0x0 [ 117.728277][ T8195] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 117.732154][ T8195] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 117.759279][ T8195] bcachefs (loop3): alloc_read... done [ 117.760856][ T8195] bcachefs (loop3): stripes_read... done [ 117.762404][ T8195] bcachefs (loop3): snapshots_read... done [ 117.765153][ T8195] bcachefs (loop3): journal_replay... done [ 117.767630][ T8195] bcachefs (loop3): resume_logged_ops... done [ 117.770085][ T8195] bcachefs (loop3): going read-write [ 117.774684][ T8195] bcachefs (loop3): done starting filesystem [ 117.883267][ T7153] bcachefs (loop3): shutting down [ 117.884778][ T7153] bcachefs (loop3): going read-only [ 117.887103][ T7153] bcachefs (loop3): finished waiting for writes to stop [ 117.928528][ T7153] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 117.942787][ T7153] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13 [ 117.957242][ T7153] bcachefs (loop3): shutdown complete, journal seq 14 [ 117.960178][ T7153] bcachefs (loop3): marking filesystem clean [ 117.970456][ T7153] bcachefs (loop3): shutdown complete [ 118.045293][ T8227] loop4: detected capacity change from 0 to 512 [ 118.094251][ T8227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.191451][ T7113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.471494][ T8233] loop1: detected capacity change from 0 to 32768 [ 118.501704][ T8233] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.503 (8233) [ 118.516155][ T8233] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.518849][ T8233] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 118.525644][ T8233] BTRFS info (device loop1): using free-space-tree [ 118.754915][ T7193] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.799196][ T8257] loop3: detected capacity change from 0 to 1024 [ 118.838490][ T8259] netlink: 'syz.0.508': attribute type 30 has an invalid length. [ 118.860696][ T8257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.944905][ T8235] loop4: detected capacity change from 0 to 65536 [ 118.959261][ T8235] XFS (loop4): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af [ 118.973999][ T8235] XFS (loop4): Ending clean mount [ 119.029592][ T7153] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.097255][ T8273] binder: 8272:8273 ioctl 4018620d 0 returned -22 [ 119.105057][ T8273] binder: 8273 RLIMIT_NICE not set [ 119.112610][ T7113] XFS (loop4): Unmounting Filesystem e4654a66-62e5-4963-a81e-012d9d4871af [ 119.532122][ T8278] loop3: detected capacity change from 0 to 32768 [ 119.731526][ T8285] Bluetooth: MGMT ver 1.22 [ 119.767145][ T8285] loop0: detected capacity change from 0 to 256 [ 119.882340][ T8285] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd82bb37b, utbl_chksum : 0xe619d30d) [ 120.173399][ T6287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.182023][ T6287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.185955][ T6287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.193412][ T6287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.196314][ T6287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 120.198762][ T6287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.210999][ T8278] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 120.215153][ T8278] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 120.292452][ T1992] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.301563][ T8278] bcachefs (loop3): alloc_read... done [ 120.304652][ T8278] bcachefs (loop3): stripes_read... done [ 120.307420][ T8278] bcachefs (loop3): snapshots_read... done [ 120.310001][ T8278] bcachefs (loop3): journal_replay... done [ 120.311652][ T8278] bcachefs (loop3): resume_logged_ops... done [ 120.313399][ T8278] bcachefs (loop3): going read-write [ 120.323476][ T8278] bcachefs (loop3): done starting filesystem [ 120.352160][ T30] audit: type=1326 audit(120.320:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.1.515" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff80d42328 code=0x0 [ 120.397369][ T8302] loop0: detected capacity change from 0 to 512 [ 120.451138][ T8302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.529012][ T8293] chnl_net:caif_netlink_parms(): no params data found [ 120.536971][ T6290] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.545279][ T7153] bcachefs (loop3): shutting down [ 120.547162][ T7153] bcachefs (loop3): going read-only [ 120.548818][ T7153] bcachefs (loop3): finished waiting for writes to stop [ 120.581968][ T7153] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 120.583085][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.595967][ T7153] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14 [ 120.597405][ T8293] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.602803][ T8293] bridge_slave_0: entered allmulticast mode [ 120.609018][ T7153] bcachefs (loop3): shutdown complete, journal seq 15 [ 120.610081][ T8293] bridge_slave_0: entered promiscuous mode [ 120.611324][ T7153] bcachefs (loop3): marking filesystem clean [ 120.613975][ T8293] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.619538][ T8293] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.621611][ T8293] bridge_slave_1: entered allmulticast mode [ 120.624135][ T8293] bridge_slave_1: entered promiscuous mode [ 120.630407][ T7153] bcachefs (loop3): shutdown complete [ 120.673598][ T8293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.683686][ T8293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.730243][ T8293] team0: Port device team_slave_0 added [ 120.731275][ T8317] netlink: 'syz.0.519': attribute type 30 has an invalid length. [ 120.733158][ T8293] team0: Port device team_slave_1 added [ 120.773361][ T8293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.775593][ T8293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.783136][ T8293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.788961][ T8293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.791462][ T8293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.799375][ T8293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.833326][ T8313] loop4: detected capacity change from 0 to 32768 [ 120.864219][ T8313] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.517 (8313) [ 120.872061][ T8313] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.877774][ T8313] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 120.880105][ T8313] BTRFS info (device loop4): using free-space-tree [ 120.887257][ T8293] hsr_slave_0: entered promiscuous mode [ 120.935118][ T8293] hsr_slave_1: entered promiscuous mode [ 120.983765][ T7113] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.987045][ T8293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.991480][ T8293] Cannot create hsr debugfs directory [ 121.463526][ T8351] loop3: detected capacity change from 0 to 1024 [ 121.516224][ T7583] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 121.778019][ T8361] netlink: 'syz.3.527': attribute type 3 has an invalid length. [ 121.780194][ T8361] netlink: 'syz.3.527': attribute type 3 has an invalid length. [ 121.826197][ T8361] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.527' resets device [ 122.246950][ T5858] Bluetooth: hci1: command tx timeout [ 122.377706][ T8355] loop0: detected capacity change from 0 to 32768 [ 122.512553][ T8355] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 122.520980][ T8355] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 122.546539][ T8376] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.564557][ T8355] bcachefs (loop0): alloc_read... done [ 122.569559][ T8355] bcachefs (loop0): stripes_read... done [ 122.571214][ T8355] bcachefs (loop0): snapshots_read... done [ 122.573903][ T8355] bcachefs (loop0): journal_replay... done [ 122.576086][ T8355] bcachefs (loop0): resume_logged_ops... done [ 122.583123][ T6286] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.585109][ T6286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.585607][ T8355] bcachefs (loop0): going read-write [ 122.592668][ T8355] bcachefs (loop0): done starting filesystem [ 122.724332][ T6290] bcachefs (loop0): shutting down [ 122.727770][ T6290] bcachefs (loop0): going read-only [ 122.729280][ T6290] bcachefs (loop0): finished waiting for writes to stop [ 122.786704][ T6290] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13 [ 122.803926][ T6290] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 14 [ 122.811976][ T6290] bcachefs (loop0): shutdown complete, journal seq 15 [ 122.824936][ T6290] bcachefs (loop0): marking filesystem clean [ 122.853331][ T8390] input: syz1 as /devices/virtual/input/input5 [ 122.869402][ T6290] bcachefs (loop0): shutdown complete [ 123.197840][ T1992] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.368448][ T1992] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.487431][ T1992] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.617265][ T8401] loop3: detected capacity change from 0 to 32768 [ 123.651479][ T8401] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 123.657396][ T8401] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 123.740655][ T8401] XFS (loop3): Ending clean mount [ 123.758437][ T8401] XFS (loop3): Quotacheck needed: Please wait. [ 123.795329][ T1992] bridge_slave_1: left allmulticast mode [ 123.801844][ T1992] bridge_slave_1: left promiscuous mode [ 123.803483][ T1992] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.821312][ T1992] bridge_slave_0: left allmulticast mode [ 123.822840][ T1992] bridge_slave_0: left promiscuous mode [ 123.824343][ T1992] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.840475][ T8401] XFS (loop3): Quotacheck: Done. [ 123.931219][ T8429] input: syz1 as /devices/virtual/input/input6 [ 123.953840][ T7153] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 124.039442][ T8418] loop4: detected capacity change from 0 to 32768 [ 124.234263][ T8418] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 124.243472][ T8418] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 124.325569][ T5858] Bluetooth: hci1: command tx timeout [ 124.341298][ T8418] bcachefs (loop4): alloc_read... done [ 124.342903][ T8418] bcachefs (loop4): stripes_read... done [ 124.344400][ T8418] bcachefs (loop4): snapshots_read... done [ 124.348945][ T8418] bcachefs (loop4): journal_replay... done [ 124.350887][ T8418] bcachefs (loop4): resume_logged_ops... done [ 124.352753][ T8418] bcachefs (loop4): going read-write [ 124.356938][ T8418] bcachefs (loop4): done starting filesystem [ 124.551660][ T7113] bcachefs (loop4): shutting down [ 124.553217][ T7113] bcachefs (loop4): going read-only [ 124.554704][ T7113] bcachefs (loop4): finished waiting for writes to stop [ 124.633279][ T8452] loop1: detected capacity change from 0 to 32768 [ 124.636941][ T7113] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13 [ 124.659213][ T8452] bcachefs (/dev/loop1): error reading default superblock: checksum error, type crc32c_nonzero: got 2859f616 should be 29d2fb78 [ 124.676837][ T7113] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 15 [ 124.681421][ T7113] bcachefs (loop4): shutdown complete, journal seq 16 [ 124.683822][ T7113] bcachefs (loop4): marking filesystem clean [ 124.694853][ T7113] bcachefs (loop4): shutdown complete [ 124.956291][ T8452] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 124.967626][ T8452] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 125.028169][ T8452] bcachefs (loop1): alloc_read... done [ 125.032044][ T8452] bcachefs (loop1): stripes_read... done [ 125.045745][ T8452] bcachefs (loop1): snapshots_read... done [ 125.070826][ T8452] bcachefs (loop1): going read-write [ 125.073870][ T8452] bcachefs (loop1): journal_replay... [ 125.113599][ T8472] input: syz1 as /devices/virtual/input/input7 [ 125.143404][ T8452] done [ 125.156116][ T8452] bcachefs (loop1): resume_logged_ops... done [ 125.165320][ T8452] bcachefs (loop1): delete_dead_inodes... done [ 125.182263][ T8452] bcachefs (loop1): done starting filesystem [ 125.259899][ T7193] bcachefs (loop1): shutting down [ 125.261890][ T7193] bcachefs (loop1): going read-only [ 125.267251][ T7193] bcachefs (loop1): finished waiting for writes to stop [ 125.303414][ T7193] bcachefs (loop1): flushing journal and stopping allocators, journal seq 12 [ 125.319831][ T7193] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13 [ 125.324789][ T7193] bcachefs (loop1): shutdown complete, journal seq 14 [ 125.329604][ T7193] bcachefs (loop1): marking filesystem clean [ 125.356203][ T7193] bcachefs (loop1): shutdown complete [ 125.485538][ T8479] loop3: detected capacity change from 0 to 32768 [ 125.514553][ T8479] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.614962][ T8479] XFS (loop3): Ending clean mount [ 125.617883][ T8479] XFS (loop3): Quotacheck needed: Please wait. [ 125.675247][ T8479] XFS (loop3): Quotacheck: Done. [ 125.726801][ T7153] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.781199][ T1992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.821326][ T1992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.859054][ T1992] bond0 (unregistering): Released all slaves [ 126.065113][ T2306] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.066905][ T2306] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.118549][ T8495] loop1: detected capacity change from 0 to 512 [ 126.164951][ T8495] ext3: Unknown parameter 'fsname' [ 126.405729][ T6295] Bluetooth: hci1: command tx timeout [ 126.606903][ T8500] loop0: detected capacity change from 0 to 128 [ 126.901542][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 126.904206][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 127.052666][ T8293] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 127.076953][ T8293] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 127.085266][ T8293] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 127.092557][ T8293] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 127.172169][ T1992] hsr_slave_0: left promiscuous mode [ 127.199890][ T1992] hsr_slave_1: left promiscuous mode [ 127.255683][ T1992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.257769][ T1992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.264873][ T1992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.268335][ T1992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.283351][ T1992] veth1_macvtap: left promiscuous mode [ 127.284815][ T1992] veth0_macvtap: left promiscuous mode [ 127.289693][ T1992] veth1_vlan: left promiscuous mode [ 127.291495][ T1992] veth0_vlan: left promiscuous mode [ 127.374215][ T8531] loop4: detected capacity change from 0 to 32768 [ 127.392652][ T8531] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 127.473324][ T8531] XFS (loop4): Ending clean mount [ 127.477269][ T8531] XFS (loop4): Quotacheck needed: Please wait. [ 127.504358][ T8531] XFS (loop4): Quotacheck: Done. [ 127.546840][ T7113] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 127.719005][ T8550] loop4: detected capacity change from 0 to 128 [ 128.131482][ T8557] loop4: detected capacity change from 0 to 512 [ 128.146301][ T8557] ext3: Unknown parameter 'fsname' [ 128.486374][ T6295] Bluetooth: hci1: command tx timeout [ 129.545056][ T8573] loop0: detected capacity change from 0 to 32768 [ 129.594748][ T8573] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.624503][ T8573] XFS (loop0): Ending clean mount [ 129.628716][ T8573] XFS (loop0): Quotacheck needed: Please wait. [ 129.662249][ T8573] XFS (loop0): Quotacheck: Done. [ 129.693761][ T6290] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.750070][ T1992] team0 (unregistering): Port device team_slave_1 removed [ 129.948476][ T1992] team0 (unregistering): Port device team_slave_0 removed [ 130.565588][ T6295] Bluetooth: hci1: command tx timeout [ 132.645524][ T6295] Bluetooth: hci1: command tx timeout [ 133.894498][ T8293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.909593][ T8293] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.917368][ T7181] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.919209][ T7181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.935212][ T8293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.947111][ T8293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.953187][ T7181] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.955108][ T7181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.069977][ T8620] netlink: 'syz.4.602': attribute type 1 has an invalid length. [ 134.111529][ T8293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.185341][ T8293] veth0_vlan: entered promiscuous mode [ 134.202729][ T8293] veth1_vlan: entered promiscuous mode [ 134.237433][ T8293] veth0_macvtap: entered promiscuous mode [ 134.240755][ T8293] veth1_macvtap: entered promiscuous mode [ 134.255371][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.259262][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.262660][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.265846][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.268583][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.275203][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.279270][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.281805][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.287828][ T8293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.305214][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.308818][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.313640][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.317027][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.320066][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.323287][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.327846][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.331065][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.350330][ T8293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.377677][ T8293] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.380383][ T8293] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.382980][ T8293] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.386610][ T8293] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.415798][ T8636] Zero length message leads to an empty skb [ 134.536887][ T7965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.539028][ T7965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.541559][ T8642] loop1: detected capacity change from 0 to 1024 [ 134.707290][ T1970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.709299][ T1970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.825412][ T8651] netlink: 'syz.1.611': attribute type 3 has an invalid length. [ 134.827653][ T8651] netlink: 'syz.1.611': attribute type 3 has an invalid length. [ 134.871031][ T8651] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.611' resets device [ 135.464180][ T8638] loop0: detected capacity change from 0 to 32768 [ 135.482321][ T8638] XFS: noikeep mount option is deprecated. [ 135.502206][ T8638] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 135.547373][ T8638] XFS (loop0): Ending clean mount [ 135.581993][ T8638] XFS (loop0): Quotacheck needed: Please wait. [ 135.644791][ T8638] XFS (loop0): Quotacheck: Done. [ 135.741163][ T6290] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 135.786860][ T8670] netlink: 'syz.3.618': attribute type 1 has an invalid length. [ 135.970064][ T8679] loop1: detected capacity change from 0 to 512 [ 135.999267][ T8679] EXT4-fs (loop1): orphan cleanup on readonly fs [ 136.010544][ T8679] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz.1.622: bad orphan inode 256 [ 136.018407][ T8679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 136.109542][ T7193] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.139106][ T8676] loop4: detected capacity change from 0 to 32768 [ 136.156567][ T8676] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 136.161236][ T8676] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.206151][ T8676] XFS (loop4): Ending clean mount [ 136.222096][ T8676] XFS (loop4): Quotacheck needed: Please wait. [ 136.261637][ T8676] XFS (loop4): Quotacheck: Done. [ 136.281839][ T8696] loop1: detected capacity change from 0 to 1024 [ 136.338729][ T7113] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.543663][ T8703] netlink: 'syz.1.625': attribute type 3 has an invalid length. [ 136.545825][ T8703] netlink: 'syz.1.625': attribute type 3 has an invalid length. [ 136.584567][ T8703] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.625' resets device [ 137.569908][ T8721] loop3: detected capacity change from 0 to 256 [ 137.620959][ T8721] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd82bb37b, utbl_chksum : 0xe619d30d) [ 138.301709][ T8728] loop4: detected capacity change from 0 to 256 [ 138.311884][ T8717] loop0: detected capacity change from 0 to 40427 [ 138.328408][ T8717] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 138.332545][ T8717] F2FS-fs (loop0): heap/no_heap options were deprecated [ 138.335326][ T8728] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 138.337916][ T8717] F2FS-fs (loop0): invalid crc value [ 138.343199][ T8717] F2FS-fs (loop0): Current segment's next free block offset is inconsistent with bitmap, logtype:1, segno:11, type:0, next_blkoff:0, blkofs:0 [ 138.369173][ T8717] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 138.631805][ T8739] loop0: detected capacity change from 0 to 512 [ 138.643591][ T8739] EXT4-fs (loop0): orphan cleanup on readonly fs [ 138.647576][ T8739] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.643: bad orphan inode 256 [ 138.651690][ T8739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 138.726446][ T8744] loop4: detected capacity change from 0 to 512 [ 138.748579][ T6290] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.752922][ T8731] loop1: detected capacity change from 0 to 32768 [ 138.772838][ T8744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.793176][ T8731] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 138.796938][ T8731] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 138.824868][ T7113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.891874][ T8731] XFS (loop1): Ending clean mount [ 138.912194][ T8731] XFS (loop1): Quotacheck needed: Please wait. [ 138.970240][ T8731] XFS (loop1): Quotacheck: Done. [ 139.023539][ T8759] loop0: detected capacity change from 0 to 8192 [ 139.026007][ T7193] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.348990][ T8773] loop0: detected capacity change from 0 to 256 [ 139.369849][ T8773] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 139.588437][ T8780] loop4: detected capacity change from 0 to 512 [ 139.602053][ T8781] loop0: detected capacity change from 0 to 512 [ 139.602678][ T8767] loop3: detected capacity change from 0 to 40427 [ 139.635080][ T8781] EXT4-fs (loop0): orphan cleanup on readonly fs [ 139.637806][ T8781] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.657: bad orphan inode 256 [ 139.640571][ T8767] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 139.644771][ T8781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 139.648249][ T8767] F2FS-fs (loop3): heap/no_heap options were deprecated [ 139.659667][ T8767] F2FS-fs (loop3): invalid crc value [ 139.663905][ T8767] F2FS-fs (loop3): Current segment's next free block offset is inconsistent with bitmap, logtype:1, segno:11, type:0, next_blkoff:0, blkofs:0 [ 139.670920][ T8780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.677317][ T8767] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 139.702427][ T6290] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.746367][ T7113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.164652][ T8794] loop0: detected capacity change from 0 to 32768 [ 140.186758][ T8794] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 140.189254][ T8794] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.233669][ T8794] XFS (loop0): Ending clean mount [ 140.258412][ T8794] XFS (loop0): Quotacheck needed: Please wait. [ 140.277029][ T8794] XFS (loop0): Quotacheck: Done. [ 140.304342][ T43] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.313203][ T6290] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.571487][ T8817] xt_hashlimit: max too large, truncated to 1048576 [ 140.573458][ T8817] xt_hashlimit: overflow, try lower: 0/0 [ 140.634842][ T6287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 140.647591][ T6287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 140.650540][ T6287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 140.655026][ T6287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 140.658440][ T6287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 140.661479][ T6287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 140.721317][ T8825] loop3: detected capacity change from 0 to 256 [ 140.730681][ T8827] loop0: detected capacity change from 0 to 512 [ 140.751552][ T8827] EXT4-fs (loop0): orphan cleanup on readonly fs [ 140.753299][ T8827] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.671: bad orphan inode 256 [ 140.767235][ T8827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 140.810896][ T8825] FAT-fs (loop3): Directory bread(block 64) failed [ 140.813045][ T8825] FAT-fs (loop3): Directory bread(block 65) failed [ 140.832497][ T8820] chnl_net:caif_netlink_parms(): no params data found [ 140.839795][ T8825] FAT-fs (loop3): Directory bread(block 66) failed [ 140.841669][ T8825] FAT-fs (loop3): Directory bread(block 67) failed [ 140.843572][ T8825] FAT-fs (loop3): Directory bread(block 68) failed [ 140.845278][ T8825] FAT-fs (loop3): Directory bread(block 69) failed [ 140.851544][ T8833] loop1: detected capacity change from 0 to 512 [ 140.863457][ T6290] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.864319][ T8825] FAT-fs (loop3): Directory bread(block 70) failed [ 140.869013][ T8825] FAT-fs (loop3): Directory bread(block 71) failed [ 140.872706][ T8825] FAT-fs (loop3): Directory bread(block 72) failed [ 140.875645][ T8825] FAT-fs (loop3): Directory bread(block 73) failed [ 140.917239][ T8820] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.919573][ T8833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.923374][ T8820] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.925372][ T8820] bridge_slave_0: entered allmulticast mode [ 140.929848][ T8820] bridge_slave_0: entered promiscuous mode [ 140.938988][ T8820] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.941629][ T8820] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.944104][ T8820] bridge_slave_1: entered allmulticast mode [ 140.946978][ T8820] bridge_slave_1: entered promiscuous mode [ 140.972666][ T157] kworker/u8:4: attempt to access beyond end of device [ 140.972666][ T157] loop3: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 140.980943][ T8820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.988051][ T8820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.999663][ T7193] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.031342][ T8820] team0: Port device team_slave_0 added [ 141.036146][ T8820] team0: Port device team_slave_1 added [ 141.048396][ T8820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.050305][ T8820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.057593][ T8820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.063570][ T8820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.066105][ T8820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.072994][ T8820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.133495][ T8820] hsr_slave_0: entered promiscuous mode [ 141.159978][ T8820] hsr_slave_1: entered promiscuous mode [ 141.189582][ T8843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.677'. [ 141.448608][ T43] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.593730][ T43] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.661957][ T8866] loop1: detected capacity change from 0 to 256 [ 141.713377][ T8866] FAT-fs (loop1): Directory bread(block 64) failed [ 141.715318][ T8866] FAT-fs (loop1): Directory bread(block 65) failed [ 141.718193][ T8866] FAT-fs (loop1): Directory bread(block 66) failed [ 141.720282][ T8866] FAT-fs (loop1): Directory bread(block 67) failed [ 141.722177][ T8866] FAT-fs (loop1): Directory bread(block 68) failed [ 141.724068][ T8866] FAT-fs (loop1): Directory bread(block 69) failed [ 141.726588][ T8866] FAT-fs (loop1): Directory bread(block 70) failed [ 141.728430][ T8866] FAT-fs (loop1): Directory bread(block 71) failed [ 141.730516][ T8866] FAT-fs (loop1): Directory bread(block 72) failed [ 141.732355][ T8866] FAT-fs (loop1): Directory bread(block 73) failed [ 141.768652][ T43] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.831349][ T267] kworker/u8:5: attempt to access beyond end of device [ 141.831349][ T267] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 142.032988][ T43] bridge_slave_1: left allmulticast mode [ 142.034486][ T43] bridge_slave_1: left promiscuous mode [ 142.041575][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.049848][ T43] bridge_slave_0: left allmulticast mode [ 142.052236][ T43] bridge_slave_0: left promiscuous mode [ 142.053822][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.384378][ T8884] syz.1.692 uses obsolete (PF_INET,SOCK_PACKET) [ 142.715549][ T8895] loop0: detected capacity change from 0 to 256 [ 142.725680][ T6295] Bluetooth: hci1: command tx timeout [ 142.753201][ T8895] FAT-fs (loop0): Directory bread(block 64) failed [ 142.755208][ T8895] FAT-fs (loop0): Directory bread(block 65) failed [ 142.757341][ T8895] FAT-fs (loop0): Directory bread(block 66) failed [ 142.759174][ T8895] FAT-fs (loop0): Directory bread(block 67) failed [ 142.762548][ T8895] FAT-fs (loop0): Directory bread(block 68) failed [ 142.764572][ T8895] FAT-fs (loop0): Directory bread(block 69) failed [ 142.771137][ T8895] FAT-fs (loop0): Directory bread(block 70) failed [ 142.773020][ T8895] FAT-fs (loop0): Directory bread(block 71) failed [ 142.774945][ T8895] FAT-fs (loop0): Directory bread(block 72) failed [ 142.776927][ T8895] FAT-fs (loop0): Directory bread(block 73) failed [ 142.868135][ T8900] loop4: detected capacity change from 0 to 8192 [ 142.880156][ T42] kworker/u8:2: attempt to access beyond end of device [ 142.880156][ T42] loop0: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 143.562426][ T8917] loop4: detected capacity change from 0 to 40427 [ 143.575292][ T8917] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 143.589279][ T8917] F2FS-fs (loop4): heap/no_heap options were deprecated [ 143.595985][ T8917] F2FS-fs (loop4): invalid crc value [ 143.598401][ T8917] F2FS-fs (loop4): Current segment's next free block offset is inconsistent with bitmap, logtype:1, segno:11, type:0, next_blkoff:0, blkofs:0 [ 143.602749][ T8917] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 143.771077][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.808281][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.843562][ T43] bond0 (unregistering): Released all slaves [ 143.863517][ T8881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.691'. [ 144.399387][ T8945] loop4: detected capacity change from 0 to 256 [ 144.439723][ T8945] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd82bb37b, utbl_chksum : 0xe619d30d) [ 144.858421][ T6295] Bluetooth: hci1: command tx timeout [ 144.968100][ T8820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 144.973419][ T8820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 144.978877][ T8820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 144.982378][ T8820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 145.298460][ T8820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.324404][ T8970] loop3: detected capacity change from 0 to 256 [ 145.330116][ T8820] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.367765][ T8970] FAT-fs (loop3): Directory bread(block 64) failed [ 145.370736][ T8970] FAT-fs (loop3): Directory bread(block 65) failed [ 145.372938][ T8970] FAT-fs (loop3): Directory bread(block 66) failed [ 145.375207][ T8970] FAT-fs (loop3): Directory bread(block 67) failed [ 145.390946][ T8970] FAT-fs (loop3): Directory bread(block 68) failed [ 145.392757][ T8970] FAT-fs (loop3): Directory bread(block 69) failed [ 145.399471][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.401432][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.404882][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.406855][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.410359][ T8970] FAT-fs (loop3): Directory bread(block 70) failed [ 145.412117][ T8970] FAT-fs (loop3): Directory bread(block 71) failed [ 145.415396][ T8970] FAT-fs (loop3): Directory bread(block 72) failed [ 145.424558][ T8970] FAT-fs (loop3): Directory bread(block 73) failed [ 145.443773][ T43] hsr_slave_0: left promiscuous mode [ 145.487809][ T43] hsr_slave_1: left promiscuous mode [ 145.532607][ T8981] loop4: detected capacity change from 0 to 1024 [ 145.565746][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.580193][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.594806][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.604825][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.664085][ T8981] netlink: 'syz.4.722': attribute type 4 has an invalid length. [ 145.666447][ T8981] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.722'. [ 145.671570][ T43] veth1_macvtap: left promiscuous mode [ 145.672996][ T43] veth0_macvtap: left promiscuous mode [ 145.674481][ T43] veth1_vlan: left promiscuous mode [ 145.676560][ T43] veth0_vlan: left promiscuous mode [ 145.693544][ T7637] kworker/u8:9: attempt to access beyond end of device [ 145.693544][ T7637] loop3: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 145.906568][ T8988] loop0: detected capacity change from 0 to 4096 [ 145.948769][ T8988] NILFS (loop0): invalid segment: Checksum error in segment payload [ 145.954795][ T8988] NILFS (loop0): trying rollback from an earlier position [ 145.966322][ T8988] NILFS (loop0): recovery complete [ 145.968307][ T8989] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.099767][ T8987] loop3: detected capacity change from 0 to 32768 [ 146.125129][ T8987] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.725 (8987) [ 146.145898][ T8987] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.152074][ T8987] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 146.162822][ T8987] BTRFS info (device loop3): using free-space-tree [ 146.473976][ T9014] loop4: detected capacity change from 0 to 256 [ 146.583089][ T9014] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd82bb37b, utbl_chksum : 0xe619d30d) [ 146.886222][ T6295] Bluetooth: hci1: command tx timeout [ 147.117852][ T7153] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.559405][ T9027] loop0: detected capacity change from 0 to 256 [ 147.601508][ T9027] FAT-fs (loop0): Directory bread(block 64) failed [ 147.603612][ T9027] FAT-fs (loop0): Directory bread(block 65) failed [ 147.605648][ T9027] FAT-fs (loop0): Directory bread(block 66) failed [ 147.607611][ T9027] FAT-fs (loop0): Directory bread(block 67) failed [ 147.609609][ T9027] FAT-fs (loop0): Directory bread(block 68) failed [ 147.611657][ T9027] FAT-fs (loop0): Directory bread(block 69) failed [ 147.613554][ T9027] FAT-fs (loop0): Directory bread(block 70) failed [ 147.615643][ T9027] FAT-fs (loop0): Directory bread(block 71) failed [ 147.617592][ T9027] FAT-fs (loop0): Directory bread(block 72) failed [ 147.619510][ T9027] FAT-fs (loop0): Directory bread(block 73) failed [ 147.702280][ T7965] kworker/u8:10: attempt to access beyond end of device [ 147.702280][ T7965] loop0: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 147.965195][ T9032] loop0: detected capacity change from 0 to 1024 [ 148.084376][ T9032] netlink: 'syz.0.737': attribute type 4 has an invalid length. [ 148.086555][ T9032] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.737'. [ 148.443734][ T43] team0 (unregistering): Port device team_slave_1 removed [ 148.681447][ T43] team0 (unregistering): Port device team_slave_0 removed [ 148.968089][ T6295] Bluetooth: hci1: command tx timeout [ 149.928086][ T9043] loop0: detected capacity change from 0 to 1024 [ 149.949433][ T9043] [ 149.950124][ T9043] ====================================================== [ 149.951974][ T9043] WARNING: possible circular locking dependency detected [ 149.953709][ T9043] 6.10.0-rc5-syzkaller-g8fcad59bb267 #0 Not tainted [ 149.955377][ T9043] ------------------------------------------------------ [ 149.957160][ T9043] syz.0.741/9043 is trying to acquire lock: [ 149.958699][ T9043] ffff0000c2760188 (&mm->mmap_lock){++++}-{3:3}, at: __might_fault+0x9c/0x124 [ 149.961083][ T9043] [ 149.961083][ T9043] but task is already holding lock: [ 149.963027][ T9043] ffff0000d815a0b0 (&tree->tree_lock#2){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc [ 149.965570][ T9043] [ 149.965570][ T9043] which lock already depends on the new lock. [ 149.965570][ T9043] [ 149.968196][ T9043] [ 149.968196][ T9043] the existing dependency chain (in reverse order) is: [ 149.970513][ T9043] [ 149.970513][ T9043] -> #3 (&tree->tree_lock#2){+.+.}-{3:3}: [ 149.972532][ T9043] __mutex_lock_common+0x190/0x21a0 [ 149.974024][ T9043] mutex_lock_nested+0x2c/0x38 [ 149.975381][ T9043] hfsplus_file_truncate+0x62c/0x9b8 [ 149.976874][ T9043] hfsplus_write_failed+0x88/0xa4 [ 149.978330][ T9043] hfsplus_write_begin+0xe0/0xe4 [ 149.979756][ T9043] generic_perform_write+0x28c/0x588 [ 149.981307][ T9043] __generic_file_write_iter+0xfc/0x204 [ 149.982859][ T9043] generic_file_write_iter+0xb8/0x2b4 [ 149.984424][ T9043] vfs_write+0x828/0xc78 [ 149.985644][ T9043] ksys_write+0x15c/0x26c [ 149.986854][ T9043] __arm64_sys_write+0x7c/0x90 [ 149.988238][ T9043] invoke_syscall+0x98/0x2b8 [ 149.989524][ T9043] el0_svc_common+0x130/0x23c [ 149.990926][ T9043] do_el0_svc+0x48/0x58 [ 149.992148][ T9043] el0_svc+0x54/0x168 [ 149.993312][ T9043] el0t_64_sync_handler+0x84/0xfc [ 149.994841][ T9043] el0t_64_sync+0x190/0x194 [ 149.996166][ T9043] [ 149.996166][ T9043] -> #2 (&hip->extents_lock){+.+.}-{3:3}: [ 149.998247][ T9043] __mutex_lock_common+0x190/0x21a0 [ 149.999779][ T9043] mutex_lock_nested+0x2c/0x38 [ 150.001197][ T9043] hfsplus_get_block+0x2c4/0x1168 [ 150.002636][ T9043] block_read_full_folio+0x3e0/0xc6c [ 150.004141][ T9043] hfsplus_read_folio+0x28/0x38 [ 150.005564][ T9043] read_pages+0x4b8/0x694 [ 150.006899][ T9043] page_cache_ra_unbounded+0x484/0x584 [ 150.008437][ T9043] page_cache_ra_order+0x7f0/0xa10 [ 150.009895][ T9043] do_sync_mmap_readahead+0x3a8/0x834 [ 150.011430][ T9043] filemap_fault+0x5b4/0x10a0 [ 150.012800][ T9043] __do_fault+0x11c/0x374 [ 150.014052][ T9043] handle_pte_fault+0x112c/0x5714 [ 150.015448][ T9043] handle_mm_fault+0xe84/0x15cc [ 150.016812][ T9043] do_page_fault+0x38c/0xb1c [ 150.018172][ T9043] do_translation_fault+0xc4/0x114 [ 150.019631][ T9043] do_mem_abort+0x74/0x200 [ 150.020927][ T9043] el0_da+0x60/0x178 [ 150.022079][ T9043] el0t_64_sync_handler+0xcc/0xfc [ 150.023542][ T9043] el0t_64_sync+0x190/0x194 [ 150.024847][ T9043] [ 150.024847][ T9043] -> #1 (mapping.invalidate_lock#11){.+.+}-{3:3}: [ 150.027178][ T9043] down_read+0x58/0x2fc [ 150.028402][ T9043] filemap_fault+0x528/0x10a0 [ 150.029747][ T9043] __do_fault+0x11c/0x374 [ 150.031048][ T9043] handle_pte_fault+0x3160/0x5714 [ 150.032546][ T9043] handle_mm_fault+0xe84/0x15cc [ 150.034004][ T9043] do_page_fault+0x428/0xb1c [ 150.035330][ T9043] do_translation_fault+0xc4/0x114 [ 150.036734][ T9043] do_mem_abort+0x74/0x200 [ 150.037997][ T9043] el1_abort+0x3c/0x5c [ 150.039223][ T9043] el1h_64_sync_handler+0x60/0xac [ 150.040729][ T9043] el1h_64_sync+0x64/0x68 [ 150.041984][ T9043] __arch_copy_from_user+0x1b4/0x230 [ 150.043509][ T9043] netlink_sendmsg+0x598/0xa84 [ 150.044943][ T9043] ____sys_sendmsg+0x56c/0x840 [ 150.046294][ T9043] __sys_sendmsg+0x26c/0x33c [ 150.047647][ T9043] __arm64_sys_sendmsg+0x80/0x94 [ 150.049033][ T9043] invoke_syscall+0x98/0x2b8 [ 150.050302][ T9043] el0_svc_common+0x130/0x23c [ 150.051687][ T9043] do_el0_svc+0x48/0x58 [ 150.052876][ T9043] el0_svc+0x54/0x168 [ 150.054017][ T9043] el0t_64_sync_handler+0x84/0xfc [ 150.055505][ T9043] el0t_64_sync+0x190/0x194 [ 150.056801][ T9043] [ 150.056801][ T9043] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 150.058816][ T9043] __lock_acquire+0x3384/0x763c [ 150.060228][ T9043] lock_acquire+0x240/0x728 [ 150.061524][ T9043] __might_fault+0xc4/0x124 [ 150.062947][ T9043] filldir64+0x2d4/0x948 [ 150.064264][ T9043] hfsplus_readdir+0x398/0xf28 [ 150.065675][ T9043] iterate_dir+0x4b8/0x640 [ 150.067026][ T9043] __arm64_sys_getdents64+0x1c4/0x4a0 [ 150.068619][ T9043] invoke_syscall+0x98/0x2b8 [ 150.069945][ T9043] el0_svc_common+0x130/0x23c [ 150.071300][ T9043] do_el0_svc+0x48/0x58 [ 150.072500][ T9043] el0_svc+0x54/0x168 [ 150.073780][ T9043] el0t_64_sync_handler+0x84/0xfc [ 150.075238][ T9043] el0t_64_sync+0x190/0x194 [ 150.076521][ T9043] [ 150.076521][ T9043] other info that might help us debug this: [ 150.076521][ T9043] [ 150.079210][ T9043] Chain exists of: [ 150.079210][ T9043] &mm->mmap_lock --> &hip->extents_lock --> &tree->tree_lock#2 [ 150.079210][ T9043] [ 150.082809][ T9043] Possible unsafe locking scenario: [ 150.082809][ T9043] [ 150.084725][ T9043] CPU0 CPU1 [ 150.086218][ T9043] ---- ---- [ 150.087674][ T9043] lock(&tree->tree_lock#2); [ 150.088927][ T9043] lock(&hip->extents_lock); [ 150.090779][ T9043] lock(&tree->tree_lock#2); [ 150.092722][ T9043] rlock(&mm->mmap_lock); [ 150.093953][ T9043] [ 150.093953][ T9043] *** DEADLOCK *** [ 150.093953][ T9043] [ 150.096104][ T9043] 3 locks held by syz.0.741/9043: [ 150.097386][ T9043] #0: ffff0000c755d748 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x218/0x2a4 [ 150.099815][ T9043] #1: ffff0000d677c680 (&type->i_mutex_dir_key#16){++++}-{3:3}, at: iterate_dir+0x400/0x640 [ 150.102641][ T9043] #2: ffff0000d815a0b0 (&tree->tree_lock#2){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc [ 150.105234][ T9043] [ 150.105234][ T9043] stack backtrace: [ 150.106712][ T9043] CPU: 1 PID: 9043 Comm: syz.0.741 Not tainted 6.10.0-rc5-syzkaller-g8fcad59bb267 #0 [ 150.109245][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 150.111854][ T9043] Call trace: [ 150.112696][ T9043] dump_backtrace+0x1b8/0x1e4 [ 150.113985][ T9043] show_stack+0x2c/0x3c [ 150.115091][ T9043] dump_stack_lvl+0xe4/0x150 [ 150.116250][ T9043] dump_stack+0x1c/0x28 [ 150.117309][ T9043] print_circular_bug+0x150/0x1b8 [ 150.118617][ T9043] check_noncircular+0x310/0x404 [ 150.119900][ T9043] __lock_acquire+0x3384/0x763c [ 150.121203][ T9043] lock_acquire+0x240/0x728 [ 150.122415][ T9043] __might_fault+0xc4/0x124 [ 150.123595][ T9043] filldir64+0x2d4/0x948 [ 150.124660][ T9043] hfsplus_readdir+0x398/0xf28 [ 150.125822][ T9043] iterate_dir+0x4b8/0x640 [ 150.126977][ T9043] __arm64_sys_getdents64+0x1c4/0x4a0 [ 150.128413][ T9043] invoke_syscall+0x98/0x2b8 [ 150.129596][ T9043] el0_svc_common+0x130/0x23c [ 150.130788][ T9043] do_el0_svc+0x48/0x58 [ 150.131876][ T9043] el0_svc+0x54/0x168 [ 150.133004][ T9043] el0t_64_sync_handler+0x84/0xfc [ 150.134358][ T9043] el0t_64_sync+0x190/0x194 [ 150.135678][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.155159][ T1992] hfsplus: b-tree write err: -5, ino 4 [ 151.143899][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 151.222961][ T8820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.238587][ T8820] veth0_vlan: entered promiscuous mode [ 151.242234][ T8820] veth1_vlan: entered promiscuous mode [ 151.251424][ T8820] veth0_macvtap: entered promiscuous mode [ 151.254085][ T8820] veth1_macvtap: entered promiscuous mode [ 151.259326][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.262958][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.265527][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.268119][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.270507][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.273069][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.275749][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.278411][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.281649][ T8820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.286363][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.288995][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.291330][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.293925][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.296904][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.299608][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.302018][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.304578][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.308860][ T8820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.312468][ T8820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.314698][ T8820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.317290][ T8820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.319536][ T8820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.331541][ T8820] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 151.339697][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.340292][ T8820] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 151.343616][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.352059][ T267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.354453][ T267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.496650][ T1992] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.237086][ T1992] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.476797][ T1992] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.566855][ T1992] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.700925][ T1992] bridge_slave_1: left allmulticast mode [ 155.702506][ T1992] bridge_slave_1: left promiscuous mode [ 155.703996][ T1992] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.714792][ T1992] bridge_slave_0: left allmulticast mode [ 155.716841][ T1992] bridge_slave_0: left promiscuous mode [ 155.718364][ T1992] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.247834][ T1992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.287967][ T1992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.338973][ T1992] bond0 (unregistering): Released all slaves [ 158.074113][ T1992] hsr_slave_0: left promiscuous mode [ 158.127896][ T1992] hsr_slave_1: left promiscuous mode [ 158.215564][ T1992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.217516][ T1992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.220108][ T1992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.222071][ T1992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.228773][ T1992] veth1_macvtap: left promiscuous mode [ 158.230231][ T1992] veth0_macvtap: left promiscuous mode [ 158.231618][ T1992] veth1_vlan: left promiscuous mode [ 158.232920][ T1992] veth0_vlan: left promiscuous mode [ 158.725553][ T6287] Bluetooth: hci4: command 0x0406 tx timeout [ 159.876575][ T1992] team0 (unregistering): Port device team_slave_1 removed