last executing test programs: 3.396776756s ago: executing program 0 (id=1245): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NHA_FDB={0x4}]}, 0x30}}, 0x0) 3.235691265s ago: executing program 0 (id=1253): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'vxcan1\x00', {0xfffffffd}}) 3.154172608s ago: executing program 0 (id=1256): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P8+d/499pzs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z319caPN9+98d2rt29++tmR5eL7E0mci+F23fp+PE6tbZKPcxuWn+5HsAFKBt0AHkmuneeNVPp/jESunfXd1Ed2tWlAn9X3RdSBjErkP2RU53dA4/i3M+3m748751sHII24q+2pVTPUOjcR+5vHJgd/TR46Mmkcbx7ezYayJy1fj4ixoaHNn/+k/fl7dGOPo4H01dfnWztq8/5P18af6DL+DHfOnf5NnfFvddP49yB+bovx72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/PDo5evlEtjrceuMb46duSV7fp/cIv4rXO2+5tfM922f5fT2l198e3nzy5vE/+F57bf/922/4GIeK/H+P+998lrW9XduZ7cbfwK2On+TyIft3uM/+K5oz/0uCoAAAAAAAAAALADafNatiQtrM2naaHQuof3f3EwLVeqteOXK/Ozk61r3g5HPu1caTXSKieN8nj7etxO+eSG8qlcO2DuQLNcKFbKkwPuOwAAAAAAAAAAAAAAAAAAADwpDm24//+3XPP+/41/Vw3sVVv/5Tew18l/yK6H8z8ZWDuA3ef7HzKrLv8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/AAAAAAAAAAAAAAAAAAAAAAAAAADoi4sXLjSm+v2VpWKjPDm0MD9defvEZKk6XZiZLxaKlbmrhalKZapcKhQrM3/1fkmlcnUsZuevjdZK1dpodWHxzZnK/GznP0VL+b73CAAAAAAAAAAAAAAAAAAAAP55hptTkhYiIm3Op2mhEPHviDicRHL5Srk0FhH/iYjvc/l9jfL4oBsNAAAAAAAAAAAAAAAAAAAAe0x1YXF6olwuzWVkZmgnK0fE8uNtRuMdd/yqfHtfPSnb0EwWZgY8MAEAAAAAAAAAAAAAAAAAQAY9uOm311f80d8GAQAAAAAAAAAAAAAAAAAAQCalPycR0ZiOjTw/vLH2X8lqrvkcEe/cuvTBtYlabW68sfzu2vLah+3lJwfRfqBXnTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQHVhcXqiXC7N9XFm0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBR/BgAA///eANcP") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001040)=ANY=[], 0x841, 0x0) 3.089095533s ago: executing program 0 (id=1260): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x4}, 0x1}) 2.952460984s ago: executing program 0 (id=1270): syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c62747265655f6e6f64655f0dcbcc28b5ef6f8b2c6a6f75726e616c5f666c7573685f64697361626c65642c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656c696d69745f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c00", @ANYRESHEX=0x0, @ANYRES64], 0x1, 0x5950, &(0x7f0000000340)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 2.070903644s ago: executing program 0 (id=1298): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000007400)=ANY=[@ANYBLOB='errors=remount-ro,noquota,nodiscard,iocharset=macturkish,errors=continue,errors=continue,nointegrity\x00iocharset=macgreek,quota,usrquota,usrquota,errors=remount-rocard,noquota,noquota,\x00\x00\x00\x00\x00'], 0x1, 0x6174, &(0x7f0000001280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 916.743213ms ago: executing program 4 (id=1365): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x200, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @cipso={0x86, 0x11, 0x3, [{0x1, 0xb, "5fcf799fc64fa2c47d"}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x200, 0xfffd, 0x5, 0x6, 0xfffffffb}}}}}, 0x0) 846.701508ms ago: executing program 4 (id=1368): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x450, &(0x7f00000069c0)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x2, 0x5573, &(0x7f0000000200)="$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") lsetxattr(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)=@known='system.advise\x00', 0x0, 0x0, 0x0) 506.500359ms ago: executing program 4 (id=1384): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x200000000000000, 0xfffffff8}, {0x3, 0x109003ff}, 0xc, 0x8}) 414.297497ms ago: executing program 1 (id=1389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x80) 384.405599ms ago: executing program 1 (id=1391): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000940000000c000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 361.007591ms ago: executing program 3 (id=1392): r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x3a) 353.447784ms ago: executing program 4 (id=1393): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0x40000000, 0x7ffb}}}, 0x118) 344.363332ms ago: executing program 1 (id=1394): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 337.98423ms ago: executing program 4 (id=1395): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota\x00quota,resize,iocharset=iso8859-5,uid=', @ANYRESDEC, @ANYBLOB="2c726573697a653d3078303030303030303030303030303030332c713a5774613f726573697a652c7533727130303030303030303000303030303030303030342c736d61636b66736861743d6574002678f9edfbac5d6325f9002c00c9cd79b9b92293ea"], 0xfe, 0x61d3, &(0x7f0000008140)="$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") mount$nfs(&(0x7f0000000040)='\x87J9I\xc3\xe1/\x13\xcc!\xda\x1dK\x85\xe2\xc1b\x17\xab\x7f\xa1\xb1\xd8\\\b\x86\xd3\x9bo\x9d\xd8\xc7\xd6\xc6\xd3E\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xfa\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000000)='./file0\x00', 0x0, 0x299000, 0x0) 292.756553ms ago: executing program 3 (id=1397): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000002280)=""/102) 278.176805ms ago: executing program 2 (id=1398): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000018000109000000000010000002200000ff0000060000000008000100ac1414"], 0x24}}, 0x0) 218.377999ms ago: executing program 2 (id=1399): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 192.014174ms ago: executing program 3 (id=1400): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.freeze\x00', 0x275a, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000640), &(0x7f0000000680)=@v2={0x3, 0x2, 0x13, 0x6}, 0x9, 0x0) 171.664137ms ago: executing program 2 (id=1401): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) 159.621539ms ago: executing program 1 (id=1402): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001f0001000000000000000000030000000c0001"], 0x114}], 0x1}, 0x0) 144.438279ms ago: executing program 2 (id=1403): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100), 0x4, 0x0) 140.817189ms ago: executing program 3 (id=1404): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) preadv(r0, &(0x7f00000021c0)=[{&(0x7f0000000080)=""/46, 0x2e}, {0x0}], 0x2, 0x5, 0xffffff61) 94.167807ms ago: executing program 1 (id=1405): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) 93.981441ms ago: executing program 2 (id=1406): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 90.185792ms ago: executing program 3 (id=1407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000010a01000000000000000000010000000900010073797a300000000040000000160a01000000000000000000050000000900010063797a30000000000900020073797a31000000001400038008000240000000020800014000000000380000001a0a0101000b000000000000010000000900020073797a3000000000090001"], 0xc0}}, 0x0) 20.743044ms ago: executing program 2 (id=1408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461"], 0x118}}, 0x0) 19.632904ms ago: executing program 3 (id=1409): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x0, 0xa0363159, 0x280, 0x4, 0x0, @discrete={0x5, 0xfffffff7}}) 1.06143ms ago: executing program 4 (id=1410): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x300, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) 0s ago: executing program 1 (id=1411): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c06e8fc55a10a0015000600142603600e120800020000000401a8000700fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 27.935139][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 27.936084][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 27.936315][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 27.936655][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 27.936859][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 27.941575][ T6563] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 27.944268][ T6563] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 27.944441][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 27.948137][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 27.948185][ T6563] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 27.948761][ T6563] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 27.948966][ T6563] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 27.949138][ T6563] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 27.949992][ T6563] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 27.950297][ T6563] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 27.950444][ T6563] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 27.951253][ T6561] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 27.958403][ T6563] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 27.960078][ T6557] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 27.963030][ T6563] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 27.964184][ T6117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 27.967802][ T6117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 28.127140][ T6547] chnl_net:caif_netlink_parms(): no params data found [ 28.143010][ T6559] chnl_net:caif_netlink_parms(): no params data found [ 28.158241][ T6548] chnl_net:caif_netlink_parms(): no params data found [ 28.191550][ T6555] chnl_net:caif_netlink_parms(): no params data found [ 28.215982][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.217456][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.218712][ T6547] bridge_slave_0: entered allmulticast mode [ 28.220129][ T6547] bridge_slave_0: entered promiscuous mode [ 28.224774][ T6547] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.226070][ T6547] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.227226][ T6547] bridge_slave_1: entered allmulticast mode [ 28.228691][ T6547] bridge_slave_1: entered promiscuous mode [ 28.230288][ T6554] chnl_net:caif_netlink_parms(): no params data found [ 28.249726][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.249805][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.249859][ T6559] bridge_slave_0: entered allmulticast mode [ 28.250264][ T6559] bridge_slave_0: entered promiscuous mode [ 28.250980][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.250995][ T6559] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.251043][ T6559] bridge_slave_1: entered allmulticast mode [ 28.251454][ T6559] bridge_slave_1: entered promiscuous mode [ 28.279519][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.279562][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.279629][ T6555] bridge_slave_0: entered allmulticast mode [ 28.280037][ T6555] bridge_slave_0: entered promiscuous mode [ 28.280781][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.280864][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.280927][ T6555] bridge_slave_1: entered allmulticast mode [ 28.281319][ T6555] bridge_slave_1: entered promiscuous mode [ 28.285185][ T6547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.286093][ T6547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.313446][ T6547] team0: Port device team_slave_0 added [ 28.315397][ T6559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.316400][ T6559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.316524][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.316581][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.316632][ T6548] bridge_slave_0: entered allmulticast mode [ 28.317175][ T6548] bridge_slave_0: entered promiscuous mode [ 28.317892][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.317907][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.317961][ T6548] bridge_slave_1: entered allmulticast mode [ 28.318393][ T6548] bridge_slave_1: entered promiscuous mode [ 28.326993][ T6555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.330261][ T6547] team0: Port device team_slave_1 added [ 28.346198][ T6555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.358376][ T6559] team0: Port device team_slave_0 added [ 28.359857][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.361065][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.369204][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.370346][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.372405][ T6547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.373449][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.373458][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.373467][ T6547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.374234][ T6559] team0: Port device team_slave_1 added [ 28.405774][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.405811][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.405828][ T6559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.413685][ T6555] team0: Port device team_slave_0 added [ 28.414159][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.414203][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.414261][ T6554] bridge_slave_0: entered allmulticast mode [ 28.414716][ T6554] bridge_slave_0: entered promiscuous mode [ 28.419638][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.419832][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.419855][ T6559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.424630][ T6548] team0: Port device team_slave_0 added [ 28.425429][ T6548] team0: Port device team_slave_1 added [ 28.427185][ T6555] team0: Port device team_slave_1 added [ 28.427342][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.427403][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.427459][ T6554] bridge_slave_1: entered allmulticast mode [ 28.427882][ T6554] bridge_slave_1: entered promiscuous mode [ 28.430265][ T6547] hsr_slave_0: entered promiscuous mode [ 28.430650][ T6547] hsr_slave_1: entered promiscuous mode [ 28.452685][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.452708][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.452722][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.465748][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.465769][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.465784][ T6555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.478655][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.478678][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.478694][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.481723][ T6559] hsr_slave_0: entered promiscuous mode [ 28.482316][ T6559] hsr_slave_1: entered promiscuous mode [ 28.482489][ T6559] debugfs: 'hsr0' already exists in 'hsr' [ 28.482525][ T6559] Cannot create hsr debugfs directory [ 28.488123][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.488135][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.488148][ T6555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.498461][ T6554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.499444][ T6554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.515051][ T6555] hsr_slave_0: entered promiscuous mode [ 28.516351][ T6555] hsr_slave_1: entered promiscuous mode [ 28.517483][ T6555] debugfs: 'hsr0' already exists in 'hsr' [ 28.518450][ T6555] Cannot create hsr debugfs directory [ 28.523341][ T6554] team0: Port device team_slave_0 added [ 28.530495][ T6548] hsr_slave_0: entered promiscuous mode [ 28.531918][ T6548] hsr_slave_1: entered promiscuous mode [ 28.533060][ T6548] debugfs: 'hsr0' already exists in 'hsr' [ 28.533968][ T6548] Cannot create hsr debugfs directory [ 28.535721][ T6554] team0: Port device team_slave_1 added [ 28.550971][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.550999][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.551013][ T6554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.565261][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.565288][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.565675][ T6554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.595452][ T6554] hsr_slave_0: entered promiscuous mode [ 28.596954][ T6554] hsr_slave_1: entered promiscuous mode [ 28.598077][ T6554] debugfs: 'hsr0' already exists in 'hsr' [ 28.599014][ T6554] Cannot create hsr debugfs directory [ 28.692049][ T6547] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.695193][ T6547] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.698764][ T6547] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.701166][ T6547] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.730021][ T6547] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.730066][ T6547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.730290][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.730320][ T6547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.736371][ T6559] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.738993][ T6559] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.741249][ T6559] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.744851][ T6559] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.765745][ T6555] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.768021][ T6555] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.771140][ T6555] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.773803][ T6555] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.788864][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.788906][ T6559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.788981][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.789011][ T6559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.813706][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.813766][ T6555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.813830][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.813852][ T6555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.825541][ T6548] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.828254][ T6548] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.832793][ T6547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.835295][ T6548] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.837439][ T6548] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.858778][ T6547] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.865772][ T1385] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.867575][ T1385] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.869469][ T1385] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.870950][ T1385] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.872988][ T1385] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.874491][ T1385] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.896097][ T6554] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.898852][ T6554] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.901469][ T6554] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.905388][ T6555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.913273][ T6554] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.916595][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.916651][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.917250][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.917266][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.927368][ T6559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.936182][ T6555] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.942499][ T6559] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.948313][ T260] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.948357][ T260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.960764][ T6559] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.962804][ T6559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.967757][ T4515] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.967789][ T4515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.968091][ T4515] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.968110][ T4515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.977347][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.977387][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.013426][ T6554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.026172][ T6555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.039547][ T6554] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.062818][ T6559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.069097][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.081112][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.081160][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.081496][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.081518][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.099436][ T6559] veth0_vlan: entered promiscuous mode [ 29.100897][ T6559] veth1_vlan: entered promiscuous mode [ 29.108026][ T6554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.108066][ T6554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.119570][ T6547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.128074][ T6548] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.135252][ T6559] veth0_macvtap: entered promiscuous mode [ 29.147309][ T260] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.147353][ T260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.151348][ T6559] veth1_macvtap: entered promiscuous mode [ 29.157338][ T6559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.168104][ T260] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.168155][ T260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.170830][ T6555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.193665][ T6559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.210957][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.212740][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.215367][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.215416][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.220454][ T6554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.228471][ T6547] veth0_vlan: entered promiscuous mode [ 29.231155][ T6554] veth0_vlan: entered promiscuous mode [ 29.233762][ T6554] veth1_vlan: entered promiscuous mode [ 29.251718][ T6547] veth1_vlan: entered promiscuous mode [ 29.273187][ T1385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.273221][ T1385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.279110][ T6554] veth0_macvtap: entered promiscuous mode [ 29.281682][ T6547] veth0_macvtap: entered promiscuous mode [ 29.286150][ T6547] veth1_macvtap: entered promiscuous mode [ 29.294713][ T6555] veth0_vlan: entered promiscuous mode [ 29.298422][ T6555] veth1_vlan: entered promiscuous mode [ 29.300598][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.303678][ T6554] veth1_macvtap: entered promiscuous mode [ 29.309584][ T6548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.311714][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.314723][ T1385] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.314780][ T1385] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.314805][ T1385] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.314822][ T1385] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.321088][ T1385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.321129][ T1385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.335076][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.335985][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.346991][ T1619] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.347344][ T1619] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.347398][ T1619] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.347451][ T1619] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.366714][ T6555] veth0_macvtap: entered promiscuous mode [ 29.368844][ T6555] veth1_macvtap: entered promiscuous mode [ 29.387619][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.404321][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.409234][ T260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.409295][ T260] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.409312][ T260] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.409324][ T260] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.415295][ T1385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.415331][ T1385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.421525][ T1385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.421565][ T1385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.432802][ T6559] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.465755][ T6548] veth0_vlan: entered promiscuous mode [ 29.469749][ T6548] veth1_vlan: entered promiscuous mode [ 29.474046][ T1385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.474079][ T1385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.484748][ T6548] veth0_macvtap: entered promiscuous mode [ 29.485737][ T6548] veth1_macvtap: entered promiscuous mode [ 29.491525][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.495244][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.499134][ T4515] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.499189][ T4515] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.499213][ T4515] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.499227][ T4515] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.518381][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.518412][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.531042][ T1619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.531154][ T1619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.548924][ T1619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.548958][ T1619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.571388][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.571424][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.618704][ T1619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.618746][ T1619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.686938][ T6679] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4'. [ 29.920084][ T6683] loop1: detected capacity change from 0 to 32768 [ 29.945313][ T6674] loop2: detected capacity change from 0 to 32768 [ 29.953329][ T6704] syz.3.18 uses obsolete (PF_INET,SOCK_PACKET) [ 29.974273][ T6541] Dev loop1 SGI disklabel: csum bad, label corrupted [ 29.984178][ T6683] Dev loop1 SGI disklabel: csum bad, label corrupted [ 29.997133][ T6711] kAFS: No cell specified [ 29.998382][ T6716] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.012580][ T6117] Bluetooth: hci2: command tx timeout [ 30.012705][ T6117] Bluetooth: hci0: command tx timeout [ 30.012777][ T6117] Bluetooth: hci3: command tx timeout [ 30.012834][ T6117] Bluetooth: hci4: command tx timeout [ 30.012888][ T6117] Bluetooth: hci1: command tx timeout [ 30.047448][ T6721] loop3: detected capacity change from 0 to 8 [ 30.085135][ T6721] SQUASHFS error: Unable to read inode 0xa7 [ 30.124335][ T6674] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 30.124373][ T6674] allowing incompatible features above 0.0: (unknown version) [ 30.129370][ T6674] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 30.129398][ T6674] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 30.129476][ T6674] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 30.129558][ T6674] bcachefs (loop2): Version upgrade required: [ 30.129558][ T6674] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 30.129558][ T6674] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 30.129558][ T6674] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 30.129723][ T6674] bcachefs (loop2): dropping and reconstructing all alloc info [ 30.151100][ T6734] loop4: detected capacity change from 0 to 1024 [ 30.168217][ T6674] bcachefs (loop2): accounting_read... done [ 30.197305][ T6674] bcachefs (loop2): alloc_read... done [ 30.197419][ T6674] bcachefs (loop2): snapshots_read... done [ 30.197736][ T6674] bcachefs (loop2): done starting filesystem [ 30.235005][ T6747] loop3: detected capacity change from 0 to 256 [ 30.272450][ T1385] hfsplus: b-tree write err: -5, ino 4 [ 30.344890][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'. [ 30.346643][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'. [ 30.349092][ T6559] bcachefs (loop2): shutting down [ 30.404181][ T6559] bcachefs (loop2): shutdown complete [ 30.459770][ T6774] loop4: detected capacity change from 0 to 512 [ 30.464805][ T6774] EXT4-fs: inline encryption not supported [ 30.467688][ T6774] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.470284][ T6774] EXT4-fs (loop4): Test dummy encryption mode enabled [ 30.534635][ T6774] EXT4-fs (loop4): orphan cleanup on readonly fs [ 30.534684][ T6774] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.39: inode #13: comm syz.4.39: iget: illegal inode # [ 30.548929][ T6774] EXT4-fs (loop4): Remounting filesystem read-only [ 30.549693][ T6774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 30.651207][ T6754] loop1: detected capacity change from 0 to 32768 [ 30.657045][ T6754] (syz.1.34,6754,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 30.659469][ T6754] (syz.1.34,6754,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 30.667482][ T6548] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.671457][ T6754] JBD2: Ignoring recovery information on journal [ 30.704060][ T6754] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 30.869120][ T6554] ocfs2: Unmounting device (7,1) on (node local) [ 30.910058][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 31.027808][ T6846] loop3: detected capacity change from 0 to 2048 [ 31.065887][ T6846] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 31.165769][ T6829] loop4: detected capacity change from 0 to 32768 [ 31.209055][ T6829] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 31.230744][ T6876] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 31.277289][ T6829] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x1 [ 31.277352][ T6829] XFS (loop4): Unmount and run xfs_repair [ 31.277371][ T6829] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 31.277379][ T6829] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 31.277385][ T6829] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 31.277391][ T6829] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 31.277396][ T6829] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 31.277401][ T6829] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 31.277406][ T6829] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 31.277410][ T6829] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 31.277415][ T6829] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 31.277482][ T6829] XFS (loop4): metadata I/O error in "xfs_read_agf+0x238/0x58c" at daddr 0x1 len 1 error 74 [ 31.277564][ T6829] XFS (loop4): Error -117 reserving per-AG metadata reserve pool. [ 31.277783][ T6829] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x204/0x248 (fs/xfs/xfs_fsops.c:566). Shutting down filesystem. [ 31.277798][ T6829] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 31.277809][ T6829] XFS (loop4): Ending clean mount [ 31.278510][ T6829] XFS (loop4): Failed to initialize disk quotas, err -5. [ 31.365797][ T6829] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 31.385014][ T6892] netlink: 'syz.1.90': attribute type 12 has an invalid length. [ 31.386314][ T6892] netlink: 132 bytes leftover after parsing attributes in process `syz.1.90'. [ 31.450614][ T6901] loop1: detected capacity change from 0 to 4096 [ 31.454380][ T6901] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 31.628089][ T6922] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 31.681420][ T6932] loop1: detected capacity change from 0 to 256 [ 31.908875][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.124'. [ 31.930875][ T6968] loop1: detected capacity change from 0 to 512 [ 31.931189][ T6968] ======================================================= [ 31.931189][ T6968] WARNING: The mand mount option has been deprecated and [ 31.931189][ T6968] and is ignored by this kernel. Remove the mand [ 31.931189][ T6968] option from the mount to silence this warning. [ 31.931189][ T6968] ======================================================= [ 31.956135][ T6947] loop0: detected capacity change from 0 to 32768 [ 31.990790][ T6968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.017964][ T6968] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 32.018087][ T6968] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 32.018115][ T6968] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.125: Failed to acquire dquot type 0 [ 32.063308][ T6947] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 32.063343][ T6947] allowing incompatible features above 0.0: (unknown version) [ 32.067008][ T6947] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 32.067055][ T6947] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 32.067241][ T6947] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 32.067297][ T6947] bcachefs (loop0): Version upgrade from 1.3: rebalance_work to 1.7: mi_btree_bitmap incomplete [ 32.067297][ T6947] Doing compatible version upgrade from 1.3: rebalance_work to 1.28: inode_has_case_insensitive [ 32.067297][ T6947] running recovery passes: check_allocations,check_extents_to_backpointers,check_subvols,check_inodes,check_dirents [ 32.084789][ T6554] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.085441][ T6947] bcachefs (loop0): accounting_read... [ 32.091977][ T6553] Bluetooth: hci1: command tx timeout [ 32.092016][ T6117] Bluetooth: hci4: command tx timeout [ 32.092050][ T6117] Bluetooth: hci3: command tx timeout [ 32.092071][ T6117] Bluetooth: hci0: command tx timeout [ 32.092088][ T6117] Bluetooth: hci2: command tx timeout [ 32.114588][ T6998] RDS: rds_bind could not find a transport for fec0:ffff::, load rds_tcp or rds_rdma? [ 32.127958][ T6947] done [ 32.127986][ T6947] bcachefs (loop0): alloc_read... done [ 32.131052][ T6947] bcachefs (loop0): snapshots_read... done [ 32.138833][ T6947] bcachefs (loop0): check_allocations... [ 32.143344][ T6947] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 32.143371][ T6947] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 32.144624][ T6947] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 32.144630][ T6947] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 32.149402][ T6947] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 32.149411][ T6947] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 32.149915][ T6947] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 32.149920][ T6947] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 32.150617][ T6947] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 32.150622][ T6947] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 32.150889][ T6947] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 32.150924][ T6947] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 32.151084][ T6947] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 32.151108][ T6947] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 32.151204][ T6947] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 32.151227][ T6947] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 32.151268][ T6947] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 32.151295][ T6947] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 32.151339][ T6947] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 32.151385][ T6947] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 32.151434][ T6947] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 32.151459][ T6947] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 32.151501][ T6947] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 32.151533][ T6947] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 32.151576][ T6947] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 32.151599][ T6947] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 32.151648][ T6947] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 32.151669][ T6947] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 32.151709][ T6947] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 32.151730][ T6947] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 32.157000][ T6947] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 32.157008][ T6947] Ratelimiting new instances of previous error [ 32.157049][ T6947] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 32.157053][ T6947] Ratelimiting new instances of previous error [ 32.179677][ T6999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.183765][ T6991] loop3: detected capacity change from 0 to 8192 [ 32.187903][ T6947] done [ 32.190512][ T6947] bcachefs (loop0): going read-write [ 32.216737][ T6999] bond0: (slave rose0): Enslaving as an active interface with an up link [ 32.239081][ T6947] bcachefs (loop0): journal_replay... done [ 32.384174][ T6947] bcachefs (loop0): check_extents_to_backpointers... [ 32.384588][ T6947] bcachefs (loop0): scanning for missing backpointers in 4/128 buckets [ 32.389079][ T6947] done [ 32.393847][ T6947] bcachefs (loop0): check_subvols... done [ 32.395507][ T6947] bcachefs (loop0): check_inodes... done [ 32.397130][ T6947] bcachefs (loop0): check_dirents... [ 32.397604][ T6947] bcachefs (loop0): dirent points to missing inode: [ 32.397615][ T6947] u64s 7 type dirent 4096:1896155912177158345:U32_MAX len 0 ver 0: file3 -> 536870913 type reg, fixing [ 32.397799][ T6947] bcachefs (loop0): dirent points to missing inode: [ 32.397807][ T6947] u64s 7 type dirent 4096:2695648408715017799:U32_MAX len 0 ver 0: file2 -> 536870913 type reg, fixing [ 32.397907][ T6947] bcachefs (loop0): hash table key at wrong offset: should be at 5178636093158006573 [ 32.397915][ T6947] u64s 8 type dirent 4096:8130059955150870709:U32_MAX len 0 ver 0: lost+foun -> 4097 type dir, fixing [ 32.398218][ T6947] bcachefs (loop0): dirent points to missing inode: [ 32.398225][ T6947] u64s 8 type dirent 4096:9097378837824744618:U32_MAX len 0 ver 0: file.cold -> 172335562754 type reg, fixing [ 32.398312][ T6947] bcachefs (loop0): fsck counted subdirectories wrong for inum 4096:4294967295: got 1 should be 2 [ 32.398361][ T6947] bcachefs (loop0): check_dirents requires second pass [ 32.412606][ T6947] done [ 32.417340][ T6947] bcachefs (loop0): resume_logged_ops... done [ 32.418099][ T6947] bcachefs (loop0): delete_dead_inodes... done [ 32.420157][ T6947] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 32.420190][ T6947] bcachefs (loop0): check_extents_to_backpointers... done [ 32.439682][ T6947] bcachefs (loop0): check_subvols... done [ 32.440042][ T6947] bcachefs (loop0): check_inodes... done [ 32.440986][ T6947] bcachefs (loop0): check_dirents... done [ 32.441354][ T6947] bcachefs (loop0): resume_logged_ops... done [ 32.441588][ T6947] bcachefs (loop0): delete_dead_inodes... done [ 32.454247][ T6947] bcachefs (loop0): done starting filesystem [ 32.461601][ T7034] loop2: detected capacity change from 0 to 4096 [ 32.586316][ T6547] bcachefs (loop0): shutting down [ 32.586350][ T6547] bcachefs (loop0): going read-only [ 32.586452][ T6547] bcachefs (loop0): finished waiting for writes to stop [ 32.654801][ T6547] bcachefs (loop0): flushing journal and stopping allocators, journal seq 19 [ 32.654964][ T6547] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 19 [ 32.665459][ T6547] bcachefs (loop0): clean shutdown complete, journal seq 20 [ 32.665965][ T6547] bcachefs (loop0): marking filesystem clean [ 32.709805][ T6547] bcachefs (loop0): shutdown complete [ 32.936322][ T7113] loop1: detected capacity change from 0 to 2048 [ 32.976677][ T7113] hpfs: hpfs_map_sector(): read error [ 32.996345][ T31] audit: type=1326 audit(32.970:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95af28 code=0x7ff00000 [ 32.996412][ T31] audit: type=1326 audit(32.970:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95af28 code=0x7ff00000 [ 32.996445][ T31] audit: type=1326 audit(32.970:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95af28 code=0x7ff00000 [ 32.996465][ T31] audit: type=1326 audit(32.970:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95af28 code=0x7ff00000 [ 32.996485][ T31] audit: type=1326 audit(32.970:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95af28 code=0x7ff00000 [ 32.996508][ T31] audit: type=1326 audit(32.970:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95af28 code=0x7ff00000 [ 32.996527][ T31] audit: type=1326 audit(32.970:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95af28 code=0x7ff00000 [ 32.996545][ T31] audit: type=1326 audit(32.970:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95af28 code=0x7ff00000 [ 33.047040][ T7133] loop4: detected capacity change from 0 to 512 [ 33.107666][ T7133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.220422][ T6548] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.237330][ T7155] loop3: detected capacity change from 0 to 256 [ 33.255137][ T7155] FAT-fs (loop3): Directory bread(block 64) failed [ 33.255175][ T7155] FAT-fs (loop3): Directory bread(block 65) failed [ 33.255198][ T7155] FAT-fs (loop3): Directory bread(block 66) failed [ 33.255208][ T7155] FAT-fs (loop3): Directory bread(block 67) failed [ 33.255228][ T7155] FAT-fs (loop3): Directory bread(block 68) failed [ 33.255238][ T7155] FAT-fs (loop3): Directory bread(block 69) failed [ 33.255265][ T7155] FAT-fs (loop3): Directory bread(block 70) failed [ 33.255275][ T7155] FAT-fs (loop3): Directory bread(block 71) failed [ 33.255294][ T7155] FAT-fs (loop3): Directory bread(block 72) failed [ 33.255304][ T7155] FAT-fs (loop3): Directory bread(block 73) failed [ 33.316881][ T7159] loop4: detected capacity change from 0 to 4096 [ 33.331232][ T7159] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 33.346074][ T7167] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.197'. [ 33.346178][ T7167] openvswitch: netlink: EtherType 0 is less than min 600 [ 33.347329][ T7159] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 33.361624][ T7171] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 33.411496][ T7159] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 33.411541][ T7159] overlayfs: missing 'lowerdir' [ 33.588406][ T7196] ieee802154 phy0 wpan0: encryption failed: -22 [ 33.672607][ T7211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 33.957933][ T7254] loop1: detected capacity change from 0 to 256 [ 33.995305][ T7254] FAT-fs (loop1): Directory bread(block 64) failed [ 33.995344][ T7254] FAT-fs (loop1): Directory bread(block 65) failed [ 33.995405][ T7254] FAT-fs (loop1): Directory bread(block 66) failed [ 33.995421][ T7254] FAT-fs (loop1): Directory bread(block 67) failed [ 33.995445][ T7254] FAT-fs (loop1): Directory bread(block 68) failed [ 33.995458][ T7254] FAT-fs (loop1): Directory bread(block 69) failed [ 33.995480][ T7254] FAT-fs (loop1): Directory bread(block 70) failed [ 33.995493][ T7254] FAT-fs (loop1): Directory bread(block 71) failed [ 33.995515][ T7254] FAT-fs (loop1): Directory bread(block 72) failed [ 33.995532][ T7254] FAT-fs (loop1): Directory bread(block 73) failed [ 34.065155][ T7229] loop2: detected capacity change from 0 to 32768 [ 34.172846][ T6553] Bluetooth: hci1: command tx timeout [ 34.174882][ T7265] netlink: 'syz.2.240': attribute type 2 has an invalid length. [ 34.181979][ T6553] Bluetooth: hci2: command tx timeout [ 34.182777][ T6553] Bluetooth: hci0: command tx timeout [ 34.182791][ T6553] Bluetooth: hci3: command tx timeout [ 34.182803][ T6553] Bluetooth: hci4: command tx timeout [ 34.388066][ T7292] netlink: 'syz.2.254': attribute type 1 has an invalid length. [ 34.388105][ T7292] netlink: 'syz.2.254': attribute type 2 has an invalid length. [ 34.399052][ T7294] binder: 7293:7294 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 34.399089][ T7294] binder: 7293:7294 ioctl c0306201 20000040 returned -22 [ 34.419384][ T7240] loop4: detected capacity change from 0 to 131072 [ 34.480992][ T7240] F2FS-fs (loop4): invalid crc value [ 34.517920][ T7240] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 34.525198][ T7240] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 34.579074][ T7324] netlink: 'syz.0.266': attribute type 1 has an invalid length. [ 34.590341][ T7326] netlink: 'syz.2.268': attribute type 1 has an invalid length. [ 34.590388][ T7326] netlink: 784 bytes leftover after parsing attributes in process `syz.2.268'. [ 34.617456][ T7330] loop1: detected capacity change from 0 to 1764 [ 34.646731][ T7334] loop2: detected capacity change from 0 to 1024 [ 34.693140][ T7330] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 34.717412][ T7334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.728266][ T7334] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #2: block 16: comm syz.2.272: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1 [ 34.728682][ T7334] EXT4-fs error (device loop2) in ext4_delete_entry:2739: Corrupt filesystem [ 34.796006][ T6559] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.869984][ T7367] Zero length message leads to an empty skb [ 34.878764][ T7363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.286'. [ 34.904245][ T7374] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 34.976777][ T7376] gre1: entered promiscuous mode [ 35.002184][ T7366] loop1: detected capacity change from 0 to 32768 [ 35.006619][ T7366] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.287 (7366) [ 35.049829][ T7366] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 35.049946][ T7366] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 35.049977][ T7366] BTRFS info (device loop1): using free-space-tree [ 35.192348][ T7393] loop0: detected capacity change from 0 to 32768 [ 35.205911][ T7393] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 35.234819][ T7415] loop2: detected capacity change from 0 to 1024 [ 35.236869][ T7393] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 35.249708][ T6554] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 35.287327][ T7393] (syz.0.298,7393,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=970662608961, rec_len=0, name_len=0 [ 35.288905][ T7393] (syz.0.298,7393,0):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2 [ 35.288934][ T7393] (syz.0.298,7393,0):ocfs2_mknod:301 ERROR: status = -2 [ 35.288950][ T7393] (syz.0.298,7393,0):ocfs2_mknod:505 ERROR: status = -2 [ 35.288963][ T7393] (syz.0.298,7393,0):ocfs2_create:678 ERROR: status = -2 [ 35.373091][ T6547] ocfs2: Unmounting device (7,0) on (node local) [ 35.520990][ T7443] sctp: [Deprecated]: syz.3.316 (pid 7443) Use of int in maxseg socket option. [ 35.520990][ T7443] Use struct sctp_assoc_value instead [ 35.534148][ T7429] loop2: detected capacity change from 0 to 32768 [ 35.592267][ T7451] netlink: 140 bytes leftover after parsing attributes in process `syz.3.320'. [ 35.593925][ T7451] netlink: 58 bytes leftover after parsing attributes in process `syz.3.320'. [ 35.618298][ T7439] loop0: detected capacity change from 0 to 32768 [ 35.621756][ T7439] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.310 (7439) [ 35.626558][ T7439] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 35.626618][ T7439] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 35.626637][ T7439] BTRFS info (device loop0): disk space caching is enabled [ 35.626705][ T7439] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 35.648253][ T7459] netlink: 'syz.3.321': attribute type 1 has an invalid length. [ 35.648619][ T7459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 35.681655][ T7431] loop4: detected capacity change from 0 to 32768 [ 35.685160][ T7439] BTRFS info (device loop0): rebuilding free space tree [ 35.705381][ T7439] BTRFS info (device loop0): disabling free space tree [ 35.705447][ T7439] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 35.705458][ T7439] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 35.721700][ T7431] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 35.734673][ T7429] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=4,compression=lz4,degraded=no,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow,no_data_io [ 35.734708][ T7429] allowing incompatible features above 0.0: (unknown version) [ 35.734718][ T7429] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 35.734733][ T7429] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 35.734783][ T7429] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 35.734840][ T7429] bcachefs (loop2): Version upgrade required: [ 35.734840][ T7429] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 35.734840][ T7429] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 35.734840][ T7429] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 35.734930][ T7429] bcachefs (loop2): dropping and reconstructing all alloc info [ 35.767885][ T7431] (syz.4.311,7431,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 35.771682][ T7429] bcachefs (loop2): accounting_read... [ 35.771726][ T7431] (syz.4.311,7431,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2 [ 35.775127][ T7431] (syz.4.311,7431,1):ocfs2_mknod:301 ERROR: status = -2 [ 35.776303][ T7431] (syz.4.311,7431,1):ocfs2_mknod:505 ERROR: status = -2 [ 35.797426][ T7429] done [ 35.797454][ T7429] bcachefs (loop2): alloc_read... done [ 35.797572][ T7429] bcachefs (loop2): snapshots_read... done [ 35.797735][ T7429] bcachefs (loop2): done starting filesystem [ 35.800564][ T6548] ocfs2: Unmounting device (7,4) on (node local) [ 35.812042][ T6547] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 35.844052][ T6559] bcachefs (loop2): shutting down [ 35.866173][ T7496] binfmt_misc: register: failed to install interpreter file ./file0 [ 35.965303][ T6559] bcachefs (loop2): shutdown complete [ 36.038692][ T7519] tc_dump_action: action bad kind [ 36.041811][ T7521] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 36.187971][ T7502] loop4: detected capacity change from 0 to 32768 [ 36.198852][ T7502] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 36.198852][ T7502] [ 36.198944][ T7502] ialloc: diAlloc returned -5! [ 36.254414][ T6563] Bluetooth: hci4: command tx timeout [ 36.254461][ T6563] Bluetooth: hci3: command tx timeout [ 36.254474][ T6563] Bluetooth: hci0: command tx timeout [ 36.254488][ T6563] Bluetooth: hci2: command tx timeout [ 36.254499][ T6563] Bluetooth: hci1: command tx timeout [ 36.351612][ T7527] loop3: detected capacity change from 0 to 32768 [ 36.375801][ T7527] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.344 (7527) [ 36.411963][ T7527] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 36.412051][ T7527] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 36.412094][ T7527] BTRFS info (device loop3): using free-space-tree [ 36.445048][ T7566] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.500317][ T7573] netlink: 'syz.1.358': attribute type 4 has an invalid length. [ 36.550645][ T7577] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 36.553970][ T6555] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 36.563904][ T7581] loop1: detected capacity change from 0 to 512 [ 36.568126][ T7581] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.570471][ T7581] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.591162][ T7581] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.362: Invalid block bitmap block 0 in block_group 0 [ 36.594863][ T7581] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 36.596649][ T7581] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.362: attempt to clear invalid blocks 983261 len 1 [ 36.598929][ T7581] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.362: Invalid inode table block 0 in block_group 0 [ 36.607408][ T7581] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 36.609739][ T7581] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 36.611370][ T7581] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.362: Invalid inode table block 0 in block_group 0 [ 36.622937][ T7581] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 36.624683][ T7581] EXT4-fs error (device loop1): ext4_truncate:4666: inode #11: comm syz.1.362: mark_inode_dirty error [ 36.626615][ T7581] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 36.628318][ T7581] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.362: Invalid inode table block 0 in block_group 0 [ 36.630646][ T7581] EXT4-fs (loop1): 1 truncate cleaned up [ 36.631111][ T7581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.646463][ T7581] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.362: Invalid inode table block 0 in block_group 0 [ 36.669301][ T6554] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.877503][ T7591] loop4: detected capacity change from 0 to 32768 [ 36.903577][ T7591] JBD2: Ignoring recovery information on journal [ 36.915885][ T7593] loop3: detected capacity change from 0 to 32768 [ 36.929300][ T7591] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 36.959618][ T7599] loop0: detected capacity change from 0 to 32768 [ 36.981500][ T7599] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 36.996176][ T6548] ocfs2: Unmounting device (7,4) on (node local) [ 37.013065][ T7599] XFS (loop0): Ending clean mount [ 37.018177][ T7599] XFS (loop0): Quotacheck needed: Please wait. [ 37.046433][ T7628] loop1: detected capacity change from 0 to 256 [ 37.047990][ T7628] exfat: Deprecated parameter 'utf8' [ 37.051011][ T7599] XFS (loop0): Quotacheck: Done. [ 37.063294][ T7628] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 37.153481][ T6547] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 37.221157][ T7593] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc [ 37.224987][ T7593] allowing incompatible features above 0.0: (unknown version) [ 37.225013][ T7593] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 37.225031][ T7593] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 37.225105][ T7593] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 37.225166][ T7593] bcachefs (loop3): Version upgrade required: [ 37.225166][ T7593] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 37.225166][ T7593] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 37.225166][ T7593] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 37.225256][ T7593] bcachefs (loop3): dropping and reconstructing all alloc info [ 37.258877][ T7593] bcachefs (loop3): accounting_read... done [ 37.281338][ T7593] bcachefs (loop3): alloc_read... done [ 37.281440][ T7593] bcachefs (loop3): snapshots_read... done [ 37.281661][ T7593] bcachefs (loop3): done starting filesystem [ 37.342531][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'. [ 37.372936][ T7663] netlink: 'syz.4.393': attribute type 16 has an invalid length. [ 37.374319][ T7663] netlink: 'syz.4.393': attribute type 17 has an invalid length. [ 37.404457][ T6555] bcachefs (loop3): shutting down [ 37.405187][ T7663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 37.426213][ T7666] warning: `syz.0.394' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 37.437052][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'. [ 37.437087][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 37.438594][ T6555] bcachefs (loop3): shutdown complete [ 37.518545][ T7658] loop1: detected capacity change from 0 to 32768 [ 37.626285][ T7689] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 37.626320][ T7689] CIFS mount error: No usable UNC path provided in device string! [ 37.626320][ T7689] [ 37.626416][ T7689] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 37.679420][ T7693] netlink: 'syz.4.409': attribute type 1 has an invalid length. [ 37.753270][ T7686] loop0: detected capacity change from 0 to 40427 [ 37.762807][ T7686] F2FS-fs: heap/no_heap options were deprecated [ 37.767738][ T7686] F2FS-fs (loop0): build fault injection rate: 19 [ 37.768102][ T7686] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 37.777594][ T7686] F2FS-fs (loop0): invalid crc value [ 37.779173][ T7686] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 37.803795][ T7686] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0 [ 37.804161][ T7705] mmap: syz.4.411 (7705) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.830317][ T7686] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 37.836152][ T7686] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 37.878626][ T7686] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x868 [ 37.879314][ T7686] syz.0.405: attempt to access beyond end of device [ 37.879314][ T7686] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 37.905500][ T7716] netlink: 'syz.2.417': attribute type 1 has an invalid length. [ 37.917911][ T6547] syz-executor: attempt to access beyond end of device [ 37.917911][ T6547] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 37.923645][ T6547] CPU: 1 UID: 0 PID: 6547 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 37.923673][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 37.923681][ T6547] Call trace: [ 37.923684][ T6547] show_stack+0x2c/0x3c (C) [ 37.923702][ T6547] __dump_stack+0x30/0x40 [ 37.923712][ T6547] dump_stack_lvl+0xd8/0x12c [ 37.923719][ T6547] dump_stack+0x1c/0x28 [ 37.923726][ T6547] f2fs_handle_critical_error+0x34c/0x4b8 [ 37.923738][ T6547] f2fs_stop_checkpoint+0x5c/0x70 [ 37.923747][ T6547] f2fs_write_end_io+0x768/0xa70 [ 37.923755][ T6547] bio_endio+0x804/0x840 [ 37.923763][ T6547] submit_bio_noacct+0x158/0x176c [ 37.923769][ T6547] submit_bio+0x3b4/0x550 [ 37.923773][ T6547] f2fs_submit_write_bio+0x13c/0x324 [ 37.923779][ T6547] __submit_merged_bio+0x254/0x704 [ 37.923785][ T6547] __submit_merged_write_cond+0x23c/0x4ac [ 37.923791][ T6547] f2fs_write_data_pages+0x1d28/0x2634 [ 37.923797][ T6547] do_writepages+0x270/0x468 [ 37.923805][ T6547] filemap_fdatawrite+0x14c/0x1f4 [ 37.923812][ T6547] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 37.923817][ T6547] f2fs_write_checkpoint+0x690/0x16a0 [ 37.923822][ T6547] kill_f2fs_super+0x21c/0x584 [ 37.923828][ T6547] deactivate_locked_super+0xc4/0x12c [ 37.923836][ T6547] deactivate_super+0xe0/0x100 [ 37.923843][ T6547] cleanup_mnt+0x31c/0x3ac [ 37.923849][ T6547] __cleanup_mnt+0x20/0x30 [ 37.923853][ T6547] task_work_run+0x1dc/0x260 [ 37.923860][ T6547] do_notify_resume+0x174/0x1f4 [ 37.923867][ T6547] el0_svc+0xb8/0x180 [ 37.923874][ T6547] el0t_64_sync_handler+0x84/0x12c [ 37.923880][ T6547] el0t_64_sync+0x198/0x19c [ 37.943646][ T6547] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 38.274250][ T7769] loop2: detected capacity change from 0 to 64 [ 38.308783][ T7773] loop1: detected capacity change from 0 to 256 [ 38.309201][ T7773] exfat: Deprecated parameter 'utf8' [ 38.311387][ T7773] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 38.428692][ T7789] netlink: 'syz.2.448': attribute type 12 has an invalid length. [ 38.428729][ T7789] netlink: 'syz.2.448': attribute type 12 has an invalid length. [ 38.428886][ T7789] netlink: 'syz.2.448': attribute type 12 has an invalid length. [ 38.479151][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 38.488135][ T7794] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 38.607516][ T7814] sctp: [Deprecated]: syz.2.462 (pid 7814) Use of int in maxseg socket option. [ 38.607516][ T7814] Use struct sctp_assoc_value instead [ 38.716478][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'. [ 38.809464][ T7850] kAFS: unparsable volume name [ 39.013009][ T7875] openvswitch: netlink: Flow key attr not present in new flow. [ 39.028615][ T7853] loop3: detected capacity change from 0 to 32768 [ 39.066966][ T7851] loop2: detected capacity change from 0 to 32768 [ 39.097383][ T7851] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 39.110164][ T7888] loop1: detected capacity change from 0 to 64 [ 39.127332][ T7853] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=xxhash,compression=lz4,background_compression=zstd,journal_flush_delay=1,journal_flush_disabled,norecovery,version_upgrade=none,nocow,no_data_io [ 39.132380][ T7853] allowing incompatible features above 0.0: (unknown version) [ 39.145284][ T7853] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 39.146135][ T7874] loop0: detected capacity change from 0 to 32768 [ 39.150713][ T7853] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 39.152765][ T7853] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 39.155084][ T7853] bcachefs (loop3): Version upgrade required: [ 39.155084][ T7853] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 39.155084][ T7853] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 39.155084][ T7853] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 39.170295][ T7851] XFS (loop2): Ending clean mount [ 39.174176][ T7851] XFS (loop2): Quotacheck needed: Please wait. [ 39.180273][ T7853] bcachefs (loop3): accounting_read... [ 39.185869][ T7874] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 39.193741][ T7853] done [ 39.193765][ T7853] bcachefs (loop3): alloc_read... done [ 39.193911][ T7853] bcachefs (loop3): snapshots_read... done [ 39.194136][ T7853] bcachefs (loop3): done starting filesystem [ 39.220627][ T7851] XFS (loop2): Quotacheck: Done. [ 39.232470][ T7853] process 'syz.3.480' launched './file2' with NULL argv: empty string added [ 39.240892][ T7874] XFS (loop0): Ending clean mount [ 39.246613][ T7874] XFS (loop0): Quotacheck needed: Please wait. [ 39.253605][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'. [ 39.256350][ T7911] vlan0: entered promiscuous mode [ 39.274048][ T6555] bcachefs (loop3): shutting down [ 39.287785][ T7874] XFS (loop0): Quotacheck: Done. [ 39.293951][ T6559] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 39.331074][ T6555] bcachefs (loop3): shutdown complete [ 39.370216][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'. [ 39.378637][ T6547] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 39.415763][ T7917] loop1: detected capacity change from 0 to 1764 [ 39.535582][ T7936] loop2: detected capacity change from 0 to 8 [ 39.555854][ T7936] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 39.632017][ T7943] Illegal XDP return value 7943 on prog (id 17) dev N/A, expect packet loss! [ 39.684093][ T7951] loop0: detected capacity change from 0 to 256 [ 39.825347][ T7959] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 40.084252][ T7985] loop0: detected capacity change from 0 to 512 [ 40.084890][ T7985] EXT4-fs: Ignoring removed bh option [ 40.085874][ T7985] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 40.090826][ T7985] EXT4-fs (loop0): 1 truncate cleaned up [ 40.091554][ T7985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.177967][ T6547] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.254187][ T8004] loop4: detected capacity change from 0 to 256 [ 40.266598][ T8003] loop1: detected capacity change from 0 to 4096 [ 40.267990][ T8004] FAT-fs (loop4): Directory bread(block 64) failed [ 40.268026][ T8004] FAT-fs (loop4): Directory bread(block 65) failed [ 40.268052][ T8004] FAT-fs (loop4): Directory bread(block 66) failed [ 40.268064][ T8004] FAT-fs (loop4): Directory bread(block 67) failed [ 40.268085][ T8004] FAT-fs (loop4): Directory bread(block 68) failed [ 40.268095][ T8004] FAT-fs (loop4): Directory bread(block 69) failed [ 40.268119][ T8004] FAT-fs (loop4): Directory bread(block 70) failed [ 40.268129][ T8004] FAT-fs (loop4): Directory bread(block 71) failed [ 40.268148][ T8004] FAT-fs (loop4): Directory bread(block 72) failed [ 40.268158][ T8004] FAT-fs (loop4): Directory bread(block 73) failed [ 40.281587][ T8003] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 40.293501][ T8003] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 40.319403][ T8007] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 40.335497][ T8003] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 40.335537][ T8003] overlayfs: missing 'lowerdir' [ 40.431428][ T8020] ieee802154 phy0 wpan0: encryption failed: -22 [ 40.651440][ T8055] loop2: detected capacity change from 0 to 256 [ 40.704437][ T8061] __nla_validate_parse: 1 callbacks suppressed [ 40.704478][ T8061] netlink: 132 bytes leftover after parsing attributes in process `syz.4.570'. [ 40.713578][ T8055] FAT-fs (loop2): Directory bread(block 64) failed [ 40.713616][ T8055] FAT-fs (loop2): Directory bread(block 65) failed [ 40.714560][ T8055] FAT-fs (loop2): Directory bread(block 66) failed [ 40.714582][ T8055] FAT-fs (loop2): Directory bread(block 67) failed [ 40.714610][ T8055] FAT-fs (loop2): Directory bread(block 68) failed [ 40.714624][ T8055] FAT-fs (loop2): Directory bread(block 69) failed [ 40.714651][ T8055] FAT-fs (loop2): Directory bread(block 70) failed [ 40.714663][ T8055] FAT-fs (loop2): Directory bread(block 71) failed [ 40.714685][ T8055] FAT-fs (loop2): Directory bread(block 72) failed [ 40.714695][ T8055] FAT-fs (loop2): Directory bread(block 73) failed [ 40.744293][ T8045] loop1: detected capacity change from 0 to 40427 [ 40.748718][ T8063] netlink: 'syz.4.571': attribute type 2 has an invalid length. [ 40.748859][ T8045] F2FS-fs (loop1): build fault injection rate: 771 [ 40.749540][ T8045] F2FS-fs (loop1): invalid crc value [ 40.786531][ T8045] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 40.793735][ T8045] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 40.897779][ T8076] loop4: detected capacity change from 0 to 512 [ 40.935496][ T8076] __quota_error: 659 callbacks suppressed [ 40.935544][ T8076] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 40.935598][ T8076] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 40.935611][ T8076] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.578: Failed to acquire dquot type 1 [ 40.940221][ T8076] EXT4-fs (loop4): 1 truncate cleaned up [ 40.940681][ T8076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.968927][ T6548] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.009728][ T8091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.583'. [ 41.012320][ T8091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.583'. [ 41.079599][ T8098] netlink: 'syz.4.587': attribute type 1 has an invalid length. [ 41.271155][ T8127] capability: warning: `syz.1.598' uses deprecated v2 capabilities in a way that may be insecure [ 41.340493][ T8134] Unsupported ieee802154 address type: 0 [ 41.484237][ T8166] loop1: detected capacity change from 0 to 512 [ 41.520451][ T8166] EXT4-fs (loop1): 1 orphan inode deleted [ 41.520926][ T8166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.536878][ T4515] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 41.536970][ T4515] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 41.540914][ T8166] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 41.557726][ T8178] RDS: rds_bind could not find a transport for ::9d:0:0:0:1, load rds_tcp or rds_rdma? [ 41.567473][ T6554] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.595157][ T8186] loop0: detected capacity change from 0 to 16 [ 41.598491][ T8186] erofs (device loop0): mounted with root inode @ nid 36. [ 41.609980][ T8187] netlink: 260 bytes leftover after parsing attributes in process `syz.2.629'. [ 41.622246][ T8186] syz.0.628: attempt to access beyond end of device [ 41.622246][ T8186] loop0: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 41.766879][ T8209] loop1: detected capacity change from 0 to 512 [ 41.769011][ T8209] EXT4-fs: inline encryption not supported [ 41.770004][ T8209] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.774149][ T8209] EXT4-fs (loop1): Test dummy encryption mode enabled [ 41.776907][ T8209] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.778099][ T8209] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.638: inode #13: comm syz.1.638: iget: illegal inode # [ 41.778335][ T8209] EXT4-fs (loop1): Remounting filesystem read-only [ 41.787252][ T8209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 41.798866][ T8193] loop0: detected capacity change from 0 to 32768 [ 41.819213][ T6554] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.879864][ T8193] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 41.890840][ T8193] allowing incompatible features above 0.0: (unknown version) [ 41.890878][ T8193] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 41.890901][ T8193] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 41.890968][ T8193] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 41.891048][ T8193] bcachefs (loop0): Version upgrade required: [ 41.891048][ T8193] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 41.891048][ T8193] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 41.891048][ T8193] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 41.891154][ T8193] bcachefs (loop0): dropping and reconstructing all alloc info [ 41.937631][ T8193] bcachefs (loop0): accounting_read... [ 41.965437][ T8218] loop2: detected capacity change from 0 to 32768 [ 41.969314][ T8218] (syz.2.642,8218,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 41.969466][ T8218] (syz.2.642,8218,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 41.976999][ T8193] done [ 41.977023][ T8193] bcachefs (loop0): alloc_read... done [ 41.977130][ T8193] bcachefs (loop0): snapshots_read... done [ 41.977346][ T8193] bcachefs (loop0): done starting filesystem [ 41.985869][ T8218] JBD2: Ignoring recovery information on journal [ 42.025657][ T6547] bcachefs (loop0): shutting down [ 42.035417][ T8218] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 42.039750][ T8243] netlink: 52 bytes leftover after parsing attributes in process `syz.3.648'. [ 42.041276][ T8243] netlink: 52 bytes leftover after parsing attributes in process `syz.3.648'. [ 42.043604][ T8243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.648'. [ 42.050943][ T6547] bcachefs (loop0): shutdown complete [ 42.089108][ T8248] loop3: detected capacity change from 0 to 256 [ 42.097742][ T8249] validate_nla: 1 callbacks suppressed [ 42.099010][ T8249] netlink: 'syz.1.650': attribute type 16 has an invalid length. [ 42.100257][ T8249] netlink: 'syz.1.650': attribute type 17 has an invalid length. [ 42.123539][ T8248] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 42.135043][ T6559] ocfs2: Unmounting device (7,2) on (node local) [ 42.142525][ T8249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.146302][ T8248] exFAT-fs (loop3): start_clu is invalid cluster(0x400) [ 42.214135][ T8257] netlink: 260 bytes leftover after parsing attributes in process `syz.4.658'. [ 42.235980][ T8259] netlink: 168 bytes leftover after parsing attributes in process `syz.1.662'. [ 42.238927][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 42.465628][ T8277] loop3: detected capacity change from 0 to 32768 [ 42.474271][ T8277] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.666 (8277) [ 42.504017][ T8277] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 42.506410][ T8277] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 42.507966][ T8277] BTRFS info (device loop3): using free-space-tree [ 42.539675][ T8315] loop2: detected capacity change from 0 to 2048 [ 42.540854][ T8315] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27485, location=27485 [ 42.557716][ T8315] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 42.609978][ T6555] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 42.935030][ T8346] loop3: detected capacity change from 0 to 32768 [ 42.940677][ T8346] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 42.944510][ T8346] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 42.980722][ T8346] XFS (loop3): Ending clean mount [ 42.984661][ T8346] XFS (loop3): Quotacheck needed: Please wait. [ 42.999626][ T8346] XFS (loop3): Quotacheck: Done. [ 43.078730][ T6555] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 43.269417][ T8384] loop2: detected capacity change from 0 to 32768 [ 43.280276][ T8405] 9pnet_fd: Insufficient options for proto=fd [ 43.285295][ T8384] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 43.321096][ T8408] ieee802154 phy0 wpan0: encryption failed: -22 [ 43.329540][ T8410] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 43.329571][ T8410] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 43.330967][ T8384] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 43.397510][ T6559] ocfs2: Unmounting device (7,2) on (node local) [ 43.519437][ T8433] ieee802154 phy0 wpan0: encryption failed: -22 [ 43.699481][ T8473] loop2: detected capacity change from 0 to 512 [ 43.728191][ T8473] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 43.730765][ T8473] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0102] [ 43.730824][ T8473] System zones: 1-12 [ 43.730994][ T8473] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.731445][ T8473] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.746: invalid indirect mapped block 12 (level 1) [ 43.739018][ T8473] EXT4-fs (loop2): Remounting filesystem read-only [ 43.739390][ T8473] EXT4-fs (loop2): 1 truncate cleaned up [ 43.739840][ T8473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 43.808086][ T6559] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 43.828805][ T8475] loop4: detected capacity change from 0 to 32768 [ 43.840591][ T8475] [ 43.840591][ T8475] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 43.840591][ T8475] [ 43.880353][ T8475] ERROR: (device loop4): diWrite: ixpxd invalid [ 43.880353][ T8475] [ 43.888727][ T8475] ERROR: (device loop4): remounting filesystem as read-only [ 43.888772][ T8475] ERROR: (device loop4): txAbort: [ 43.888772][ T8475] [ 44.034714][ T8508] dvmrp1: entered allmulticast mode [ 44.070986][ T8489] loop1: detected capacity change from 0 to 32768 [ 44.111597][ T8503] loop3: detected capacity change from 0 to 32768 [ 44.155320][ T8489] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,read_only,reconstruct_alloc [ 44.155358][ T8489] allowing incompatible features above 0.0: (unknown version) [ 44.165696][ T8489] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 44.165761][ T8489] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 44.165829][ T8489] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 44.165891][ T8489] bcachefs (loop1): Version upgrade required: [ 44.165891][ T8489] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 44.165891][ T8489] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 44.165891][ T8489] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 44.167374][ T8489] bcachefs (loop1): dropping and reconstructing all alloc info [ 44.174951][ T8489] bcachefs (loop1): accounting_read... done [ 44.204922][ T8489] bcachefs (loop1): alloc_read... done [ 44.213491][ T8489] bcachefs (loop1): done starting filesystem [ 44.241434][ T8503] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 44.241475][ T8503] allowing incompatible features above 0.0: (unknown version) [ 44.249622][ T8512] loop2: detected capacity change from 0 to 32768 [ 44.259139][ T8503] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 44.262360][ T8512] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.765 (8512) [ 44.264979][ T8503] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 44.266734][ T8503] bcachefs (loop3): initializing new filesystem [ 44.269635][ T8503] bcachefs (loop3): going read-write [ 44.271398][ T8512] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 44.271462][ T8512] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 44.271491][ T8512] BTRFS info (device loop2): disk space caching is enabled [ 44.271508][ T8512] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 44.274910][ T8489] bcachefs (loop1): error going rw: -2267 [ 44.313133][ T6554] bcachefs (loop1): shutting down [ 44.314312][ T8503] bcachefs (loop3): marking superblocks [ 44.331258][ T8503] bcachefs (loop3): initializing freespace [ 44.336081][ T6554] bcachefs (loop1): shutdown complete [ 44.359642][ T8503] bcachefs (loop3): done initializing freespace [ 44.365888][ T8512] BTRFS info (device loop2): rebuilding free space tree [ 44.367753][ T8549] netlink: 'syz.0.771': attribute type 13 has an invalid length. [ 44.369505][ T8503] bcachefs (loop3): reading snapshots table [ 44.369560][ T8503] bcachefs (loop3): reading snapshots done [ 44.370795][ T8512] BTRFS info (device loop2): disabling free space tree [ 44.371195][ T8512] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 44.371209][ T8512] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 44.382392][ T8519] loop4: detected capacity change from 0 to 32768 [ 44.385959][ T8519] [ 44.385959][ T8519] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 44.385959][ T8519] [ 44.404176][ T8519] ERROR: (device loop4): ea_get: invalid ea.flag [ 44.404176][ T8519] [ 44.410114][ T8519] ERROR: (device loop4): remounting filesystem as read-only [ 44.410199][ T8519] ERROR: (device loop4): ea_get: invalid ea.flag [ 44.410199][ T8519] [ 44.410270][ T8519] ERROR: (device loop4): ea_get: invalid ea.flag [ 44.410270][ T8519] [ 44.411992][ T6563] Bluetooth: hci1: command 0x0406 tx timeout [ 44.416614][ T8503] bcachefs (loop3): done starting filesystem [ 44.456471][ T8512] BTRFS info (device loop2): balance: start -susage=0..511,limit=2 [ 44.458387][ T8512] BTRFS info (device loop2): relocating block group 1048576 flags system [ 44.508598][ T8512] BTRFS info (device loop2): balance: ended with status: 0 [ 44.529712][ T6555] bcachefs (loop3): shutting down [ 44.529751][ T6555] bcachefs (loop3): going read-only [ 44.529793][ T6555] bcachefs (loop3): finished waiting for writes to stop [ 44.553188][ T6555] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2 [ 44.576328][ T8570] loop0: detected capacity change from 0 to 256 [ 44.596913][ T8570] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbbba8adb, utbl_chksum : 0xe619d30d) [ 44.612052][ T6559] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 44.655061][ T6555] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 44.657726][ T6555] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 44.658200][ T6555] bcachefs (loop3): marking filesystem clean [ 44.704830][ T8578] netlink: 'syz.1.786': attribute type 1 has an invalid length. [ 44.794413][ T6555] bcachefs (loop3): shutdown complete [ 44.978718][ T8614] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 45.048452][ T8629] CIFS mount error: No usable UNC path provided in device string! [ 45.048452][ T8629] [ 45.050297][ T8629] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 45.187474][ T8648] loop2: detected capacity change from 0 to 1764 [ 45.426624][ T8688] netlink: 'syz.1.835': attribute type 8 has an invalid length. [ 45.486945][ T8697] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 45.498792][ T8700] loop0: detected capacity change from 0 to 256 [ 45.511629][ T8700] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 45.667648][ T8732] loop1: detected capacity change from 0 to 512 [ 45.707391][ T8735] futex_wake_op: syz.2.853 tries to shift op by -1; fix this program [ 45.725826][ T8732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.798464][ T6554] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.801860][ T8718] loop4: detected capacity change from 0 to 32768 [ 45.875014][ T8718] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 45.909124][ T6548] ocfs2: Unmounting device (7,4) on (node local) [ 45.914422][ T8757] loop1: detected capacity change from 0 to 4096 [ 45.915016][ T8757] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 45.942239][ T8757] ntfs3(loop1): ino=19, mi_enum_attr [ 45.942290][ T8757] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 45.966098][ T8749] loop2: detected capacity change from 0 to 32768 [ 45.968024][ T8749] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.858 (8749) [ 45.991027][ T8757] ntfs3(loop1): failed to convert "c46c" to cp1251 [ 45.996846][ T8757] ntfs3(loop1): ino=20, mi_enum_attr [ 45.997759][ T8749] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 45.997835][ T8749] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 45.997863][ T8749] BTRFS info (device loop2): using free-space-tree [ 46.012082][ T6589] IPVS: starting estimator thread 0... [ 46.018768][ T8773] loop0: detected capacity change from 0 to 256 [ 46.046367][ T8773] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 46.070988][ T8773] exFAT-fs (loop0): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 46.071039][ T8773] exFAT-fs (loop0): Filesystem has been set read-only [ 46.103896][ T8770] IPVS: using max 69 ests per chain, 165600 per kthread [ 46.164552][ T6559] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 46.213595][ T8800] loop4: detected capacity change from 0 to 2048 [ 46.217213][ T8800] hpfs: hpfs_map_sector(): read error [ 46.467494][ T8841] gre1: entered promiscuous mode [ 46.517373][ T8810] loop0: detected capacity change from 0 to 32768 [ 46.534193][ T8810] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 46.537483][ T8810] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 46.589982][ T6547] ocfs2: Unmounting device (7,0) on (node local) [ 46.739622][ T8888] __nla_validate_parse: 5 callbacks suppressed [ 46.739659][ T8888] netlink: 132 bytes leftover after parsing attributes in process `syz.3.911'. [ 46.889904][ T8913] loop0: detected capacity change from 0 to 512 [ 46.923626][ T8913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.976519][ T8930] binder: 8929:8930 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 46.976557][ T8930] binder: 8929:8930 ioctl c0306201 20000040 returned -22 [ 47.017934][ T6547] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.021328][ T8938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.936'. [ 47.021380][ T8938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.936'. [ 47.083820][ T8945] netlink: 'syz.0.931': attribute type 1 has an invalid length. [ 47.083853][ T8945] netlink: 'syz.0.931': attribute type 2 has an invalid length. [ 47.113510][ T8955] No source specified [ 47.284726][ T8976] loop4: detected capacity change from 0 to 1764 [ 47.300579][ T8976] ISOFS: unable to read i-node block [ 47.300610][ T8976] isofs_fill_super: get root inode failed [ 47.395062][ T9002] netlink: 'syz.0.968': attribute type 3 has an invalid length. [ 47.518573][ T8995] loop1: detected capacity change from 0 to 32768 [ 47.536447][ T8995] (syz.1.964,8995,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 47.538880][ T8995] (syz.1.964,8995,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 47.549692][ T9019] netlink: 'syz.3.976': attribute type 1 has an invalid length. [ 47.575213][ T8995] JBD2: Ignoring recovery information on journal [ 47.620924][ T8995] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 47.688016][ T9037] RDS: rds_bind could not find a transport for ::9d:0:0:0:1, load rds_tcp or rds_rdma? [ 47.716827][ T6554] ocfs2: Unmounting device (7,1) on (node local) [ 47.717795][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 47.730204][ T9042] netlink: 'syz.2.986': attribute type 2 has an invalid length. [ 47.734247][ T9044] loop3: detected capacity change from 0 to 16 [ 47.738496][ T9044] erofs (device loop3): mounted with root inode @ nid 36. [ 47.742658][ T9044] syz.3.988: attempt to access beyond end of device [ 47.742658][ T9044] loop3: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 47.926922][ T9066] gre0: entered allmulticast mode [ 47.954312][ T9066] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 48.025714][ T9065] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 48.040625][ T9065] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 48.057919][ T9058] loop3: detected capacity change from 0 to 32768 [ 48.084435][ T9079] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1003'. [ 48.138738][ T9058] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 48.138782][ T9058] allowing incompatible features above 0.0: (unknown version) [ 48.141569][ T9058] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 48.143126][ T9058] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 48.143186][ T9058] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 48.143248][ T9058] bcachefs (loop3): Version upgrade required: [ 48.143248][ T9058] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 48.143248][ T9058] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 48.143248][ T9058] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 48.143342][ T9058] bcachefs (loop3): dropping and reconstructing all alloc info [ 48.188626][ T9097] netlink: 'syz.0.1008': attribute type 10 has an invalid length. [ 48.190550][ T9097] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.191704][ T9097] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.201309][ T9058] bcachefs (loop3): accounting_read... [ 48.202783][ T9097] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.202837][ T9097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.202936][ T9097] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.202969][ T9097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.210469][ T9097] team0: Port device bridge0 added [ 48.213708][ T9058] done [ 48.213734][ T9058] bcachefs (loop3): alloc_read... done [ 48.213831][ T9058] bcachefs (loop3): snapshots_read... done [ 48.214041][ T9058] bcachefs (loop3): done starting filesystem [ 48.278185][ T9087] loop2: detected capacity change from 0 to 32768 [ 48.284461][ T9087] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1004 (9087) [ 48.303718][ T9087] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 48.303798][ T9087] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 48.303838][ T9087] BTRFS info (device loop2): disk space caching is enabled [ 48.303853][ T9087] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 48.319058][ T6555] bcachefs (loop3): shutting down [ 48.346423][ T9120] loop1: detected capacity change from 0 to 256 [ 48.355844][ T9087] BTRFS info (device loop2): rebuilding free space tree [ 48.365897][ T6555] bcachefs (loop3): shutdown complete [ 48.368859][ T9087] BTRFS info (device loop2): disabling free space tree [ 48.368901][ T9087] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 48.368924][ T9087] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 48.376020][ T9120] FAT-fs (loop1): Directory bread(block 64) failed [ 48.376054][ T9120] FAT-fs (loop1): Directory bread(block 65) failed [ 48.376076][ T9120] FAT-fs (loop1): Directory bread(block 66) failed [ 48.376086][ T9120] FAT-fs (loop1): Directory bread(block 67) failed [ 48.376109][ T9120] FAT-fs (loop1): Directory bread(block 68) failed [ 48.376118][ T9120] FAT-fs (loop1): Directory bread(block 69) failed [ 48.376138][ T9120] FAT-fs (loop1): Directory bread(block 70) failed [ 48.376148][ T9120] FAT-fs (loop1): Directory bread(block 71) failed [ 48.376167][ T9120] FAT-fs (loop1): Directory bread(block 72) failed [ 48.376177][ T9120] FAT-fs (loop1): Directory bread(block 73) failed [ 48.430425][ T9087] BTRFS info (device loop2): balance: start -sconvert=raid0,soft,usage=255,usage=255..0,devid=0,vrange=18446744073709551614..18446744073709551612 [ 48.430530][ T9087] BTRFS info (device loop2): balance: ended with status: 0 [ 48.475910][ T6559] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 48.604975][ T9151] loop1: detected capacity change from 0 to 256 [ 48.806446][ T9184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.808569][ T9184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.829770][ T9187] openvswitch: netlink: Message has 1275 unknown bytes. [ 48.829808][ T9187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 48.891485][ T9197] loop4: detected capacity change from 0 to 256 [ 48.915737][ T9197] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 48.926591][ T9201] netlink: 'syz.1.1052': attribute type 49 has an invalid length. [ 48.950876][ T9197] exFAT-fs (loop4): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 48.950915][ T9197] exFAT-fs (loop4): Filesystem has been set read-only [ 49.068445][ T9222] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1063'. [ 49.142866][ T9233] delete_channel: no stack [ 49.230026][ T9254] loop0: detected capacity change from 0 to 128 [ 49.231072][ T9254] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 49.244632][ T9254] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 49.294740][ T9254] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 49.343676][ T6547] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.386131][ T9273] random: crng reseeded on system resumption [ 49.409342][ T9275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1089'. [ 49.443077][ T9281] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1085'. [ 49.660129][ T9314] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1106'. [ 49.674401][ T9317] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1108'. [ 49.880447][ T9347] loop1: detected capacity change from 0 to 128 [ 49.920709][ T9347] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.015960][ T9366] netlink: 'syz.0.1131': attribute type 11 has an invalid length. [ 50.032635][ T9371] loop4: detected capacity change from 0 to 64 [ 50.102294][ T6554] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.138812][ T9379] loop2: detected capacity change from 0 to 128 [ 50.160838][ T9379] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.177339][ T9379] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #2: comm syz.2.1139: Directory block failed checksum [ 50.203883][ T6559] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.416279][ T31] audit: type=1107 audit(50.390:669): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 50.488328][ T9434] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 50.586281][ T9442] loop3: detected capacity change from 0 to 256 [ 50.586649][ T9442] exfat: Deprecated parameter 'utf8' [ 50.625717][ T9442] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdf1ac56c, utbl_chksum : 0xe619d30d) [ 50.656537][ T9448] loop0: detected capacity change from 0 to 2048 [ 50.709418][ T9381] loop1: detected capacity change from 0 to 32768 [ 50.733842][ T9461] loop2: detected capacity change from 0 to 128 [ 50.738027][ T9461] FAT-fs (loop2): bogus logical sector size 256 [ 50.738071][ T9461] FAT-fs (loop2): Can't find a valid FAT filesystem [ 50.765860][ T9448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.778903][ T9465] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 50.805712][ T9468] macsec0: entered promiscuous mode [ 50.806854][ T9468] macsec0: entered allmulticast mode [ 50.807775][ T9468] veth1_macvtap: entered allmulticast mode [ 50.855009][ T6547] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.863702][ T9484] pimreg: entered allmulticast mode [ 50.893018][ T9381] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 50.893054][ T9381] allowing incompatible features above 0.0: (unknown version) [ 50.893072][ T9381] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 50.893083][ T9381] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 50.893132][ T9381] bcachefs (loop1): recovering from clean shutdown, journal seq 15 [ 50.893167][ T9381] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 50.893167][ T9381] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 50.908688][ T9381] bcachefs (loop1): accounting_read... done [ 50.925175][ T9381] bcachefs (loop1): alloc_read... done [ 50.925731][ T9381] bcachefs (loop1): snapshots_read... done [ 50.926001][ T9381] bcachefs (loop1): check_allocations... [ 50.927318][ T9381] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 50.927325][ T9381] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a64f6cc698df3452 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 50.928115][ T9381] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 50.928121][ T9381] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a4a08c15958b7fc8 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 50.928445][ T9381] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 50.928450][ T9381] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 68ba4c6599367 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 50.928858][ T9381] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 50.928862][ T9381] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a6f3a05050194d82 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 50.929182][ T9381] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 50.929187][ T9381] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b2fb6fcebb2a2f51 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 50.929542][ T9381] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 50.929548][ T9381] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7fd83409d5b7165 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 50.934029][ T9492] netlink: 'syz.3.1189': attribute type 21 has an invalid length. [ 50.934093][ T9492] netlink: 'syz.3.1189': attribute type 6 has an invalid length. [ 50.950022][ T9381] done [ 50.951386][ T9381] bcachefs (loop1): going read-write [ 50.969197][ T9381] bcachefs (loop1): journal_replay... done [ 51.036964][ T9381] bcachefs (loop1): check_extents_to_backpointers... [ 51.037681][ T9381] bcachefs (loop1): scanning for missing backpointers in 6/128 buckets [ 51.045727][ T9381] done [ 51.047558][ T9381] bcachefs (loop1): check_inodes... done [ 51.058633][ T9381] bcachefs (loop1): resume_logged_ops... done [ 51.059939][ T9381] bcachefs (loop1): delete_dead_inodes... done [ 51.073251][ T9509] netlink: 'syz.0.1197': attribute type 10 has an invalid length. [ 51.077945][ T9381] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 51.077973][ T9381] bcachefs (loop1): check_extents_to_backpointers... done [ 51.087299][ T9381] bcachefs (loop1): check_inodes... done [ 51.092291][ T9381] bcachefs (loop1): resume_logged_ops... [ 51.095393][ T6541] udevd[6541]: incorrect bcachefs checksum on /dev/loop1 [ 51.099348][ T9381] done [ 51.099399][ T9381] bcachefs (loop1): delete_dead_inodes... done [ 51.109645][ T9381] bcachefs (loop1): done starting filesystem [ 51.126795][ T6539] udevd[6539]: incorrect bcachefs checksum on /dev/loop1 [ 51.256503][ T9524] loop4: detected capacity change from 0 to 32768 [ 51.262656][ T9529] loop0: detected capacity change from 0 to 4096 [ 51.276581][ T9536] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 51.277648][ T6554] bcachefs (loop1): shutting down [ 51.277655][ T6554] bcachefs (loop1): going read-only [ 51.277668][ T6554] bcachefs (loop1): finished waiting for writes to stop [ 51.325593][ T9524] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,journal_flush_disabled,norecovery,nojournal_transaction_names,reconstruct_alloc [ 51.336213][ T6554] bcachefs (loop1): flushing journal and stopping allocators, journal seq 25 [ 51.343408][ T6554] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 25 [ 51.346897][ T6554] bcachefs (loop1): clean shutdown complete, journal seq 26 [ 51.347294][ T6554] bcachefs (loop1): marking filesystem clean [ 51.352510][ T9524] allowing incompatible features above 0.0: (unknown version) [ 51.353861][ T9524] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 51.356236][ T9524] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 51.358205][ T9524] bcachefs (loop4): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: bad nr_required in entry journal: 4/1 [0], fixing [ 51.372161][ T9524] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 51.372275][ T9524] bcachefs (loop4): Version upgrade required: [ 51.372275][ T9524] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 51.372275][ T9524] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 51.372275][ T9524] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 51.372381][ T9524] bcachefs (loop4): dropping and reconstructing all alloc info [ 51.389663][ T9524] bcachefs (loop4): invalid bkey in btree_node btree=dirents level=0: u64s 7 type dirent 4096:1896155912177158345:U32_MAX len 0 ver 0: -> 9223090562414936065 type unknown [ 51.389692][ T9524] dirent has stray data after name's NUL, deleting [ 51.402162][ T9524] bcachefs (loop4): accounting_read... done [ 51.422155][ T9524] bcachefs (loop4): alloc_read... done [ 51.422237][ T9524] bcachefs (loop4): snapshots_read... done [ 51.422345][ T9524] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean [ 51.422473][ T9524] bcachefs (loop4): done starting filesystem [ 51.424237][ T6554] bcachefs (loop1): shutdown complete [ 51.526812][ T6548] bcachefs (loop4): shutting down [ 51.576058][ T6548] bcachefs (loop4): shutdown complete [ 51.680643][ T9588] bond0: Error: Cannot enslave bond to itself. [ 51.711388][ T9565] loop0: detected capacity change from 0 to 32768 [ 51.713529][ T9565] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1213 (9565) [ 51.726698][ T9565] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 51.726751][ T9565] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 51.726781][ T9565] BTRFS info (device loop0): disk space caching is enabled [ 51.726794][ T9565] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 51.781133][ T9565] BTRFS info (device loop0): rebuilding free space tree [ 51.789222][ T9565] BTRFS info (device loop0): disabling free space tree [ 51.789257][ T9565] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 51.789278][ T9565] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 51.805180][ T9619] __nla_validate_parse: 4 callbacks suppressed [ 51.805229][ T9619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1238'. [ 51.805388][ T9619] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 51.866098][ T9565] BTRFS info (device loop0): balance: start -ssoft,usage=172,vrange=0..18446744073709551615,limit=0,stripes=0..4294967295 [ 51.868728][ T9565] BTRFS info (device loop0): balance: ended with status: 0 [ 51.897068][ T6547] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 51.951531][ T9636] loop1: detected capacity change from 0 to 256 [ 51.985901][ T9636] FAT-fs (loop1): Directory bread(block 64) failed [ 51.985937][ T9636] FAT-fs (loop1): Directory bread(block 65) failed [ 51.985962][ T9636] FAT-fs (loop1): Directory bread(block 66) failed [ 51.985973][ T9636] FAT-fs (loop1): Directory bread(block 67) failed [ 51.985996][ T9636] FAT-fs (loop1): Directory bread(block 68) failed [ 51.986006][ T9636] FAT-fs (loop1): Directory bread(block 69) failed [ 51.986026][ T9636] FAT-fs (loop1): Directory bread(block 70) failed [ 51.986036][ T9636] FAT-fs (loop1): Directory bread(block 71) failed [ 51.986062][ T9636] FAT-fs (loop1): Directory bread(block 72) failed [ 51.986071][ T9636] FAT-fs (loop1): Directory bread(block 73) failed [ 52.130246][ T9653] loop0: detected capacity change from 0 to 1024 [ 52.149873][ T9653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.182624][ T9653] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 52.185152][ T9660] loop3: detected capacity change from 0 to 8192 [ 52.199024][ T9660] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.207044][ T9660] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 52.207088][ T9660] FAT-fs (loop3): Filesystem has been set read-only [ 52.230119][ T6555] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 52.236494][ T6547] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.268319][ T9672] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1264'. [ 52.310766][ T9677] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1266'. [ 52.432541][ T9693] validate_nla: 3 callbacks suppressed [ 52.435526][ T9693] netlink: 'syz.1.1274': attribute type 10 has an invalid length. [ 52.463761][ T9693] team0: Device veth0_vlan failed to register rx_handler [ 52.480772][ T9685] loop0: detected capacity change from 0 to 32768 [ 52.581654][ T9712] loop1: detected capacity change from 0 to 64 [ 52.609822][ T9712] syz.1.1283: attempt to access beyond end of device [ 52.609822][ T9712] loop1: rw=0, sector=65534, nr_sectors = 2 limit=64 [ 52.609922][ T9712] Buffer I/O error on dev loop1, logical block 32767, async page read [ 52.654935][ T9715] netlink: 'syz.2.1285': attribute type 10 has an invalid length. [ 52.655372][ T9715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1285'. [ 52.656724][ T9715] team0: entered promiscuous mode [ 52.656733][ T9715] team_slave_0: entered promiscuous mode [ 52.656815][ T9715] team_slave_1: entered promiscuous mode [ 52.656859][ T9715] team0: entered allmulticast mode [ 52.656864][ T9715] team_slave_0: entered allmulticast mode [ 52.656870][ T9715] team_slave_1: entered allmulticast mode [ 52.657242][ T9715] bridge0: port 3(team0) entered blocking state [ 52.661935][ T9715] bridge0: port 3(team0) entered disabled state [ 52.663697][ T9715] bridge0: port 3(team0) entered blocking state [ 52.663730][ T9715] bridge0: port 3(team0) entered forwarding state [ 52.706637][ T9717] loop2: detected capacity change from 0 to 2048 [ 52.738492][ T9717] syz.2.1286: attempt to access beyond end of device [ 52.738492][ T9717] loop2: rw=524288, sector=9007199254741068, nr_sectors = 2 limit=2048 [ 52.935086][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'. [ 52.948326][ T9685] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 52.948364][ T9685] allowing incompatible features above 0.0: (unknown version) [ 52.948637][ T9685] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 52.948664][ T9685] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 52.948741][ T9685] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 52.948808][ T9685] bcachefs (loop0): Version upgrade required: [ 52.948808][ T9685] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 52.948808][ T9685] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 52.948808][ T9685] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 52.950764][ T9685] bcachefs (loop0): dropping and reconstructing all alloc info [ 52.974726][ T9685] bcachefs (loop0): accounting_read... done [ 53.051228][ T9685] bcachefs (loop0): alloc_read... done [ 53.051509][ T9685] bcachefs (loop0): snapshots_read... done [ 53.052642][ T9685] bcachefs (loop0): check_allocations... done [ 53.075732][ T9685] bcachefs (loop0): going read-write [ 53.085018][ T9685] bcachefs (loop0): done starting filesystem [ 53.123915][ T9746] loop2: detected capacity change from 0 to 512 [ 53.124297][ T9746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.144650][ T9746] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 53.144687][ T9746] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 53.144795][ T9746] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 53.144803][ T9746] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 53.145225][ T9746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 53.187170][ T9746] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 53.191495][ T9751] loop1: detected capacity change from 0 to 512 [ 53.214513][ T9751] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 53.217801][ T9751] EXT4-fs (loop1): 1 truncate cleaned up [ 53.225505][ T9751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.238896][ T6547] bcachefs (loop0): shutting down [ 53.238923][ T6547] bcachefs (loop0): going read-only [ 53.238949][ T6547] bcachefs (loop0): finished waiting for writes to stop [ 53.243716][ T6559] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.251689][ T9751] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 4: comm syz.1.1296: lblock 0 mapped to illegal pblock 4 (length 1) [ 53.364322][ T6547] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 53.392707][ T6554] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.400337][ T9762] loop2: detected capacity change from 0 to 256 [ 53.402993][ T9759] loop4: detected capacity change from 0 to 32768 [ 53.410154][ T9759] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1302 (9759) [ 53.410687][ T6547] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 11 [ 53.416663][ T9759] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 53.416717][ T9759] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 53.416748][ T9759] BTRFS info (device loop4): disk space caching is enabled [ 53.416764][ T9759] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 53.423842][ T6547] bcachefs (loop0): unclean shutdown complete, journal seq 12 [ 53.424568][ T6547] bcachefs (loop0): done going read-only, filesystem not clean [ 53.476204][ T6547] bcachefs (loop0): shutdown complete [ 53.609624][ T6548] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 53.678871][ T9809] ÿ: renamed from bond_slave_0 (while UP) [ 53.741177][ T9819] tmpfs: Bad value for 'mpol' [ 53.745733][ T9821] MTD: Couldn't look up './file0': -15 [ 53.746722][ T9821] ./file0: Can't lookup blockdev [ 54.099471][ T9886] loop3: detected capacity change from 0 to 8 [ 54.126890][ T9886] SQUASHFS error: Unable to read inode 0xe3 [ 54.304589][ T9888] loop1: detected capacity change from 0 to 32768 [ 54.321301][ T9888] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1353 (9888) [ 54.327207][ T9888] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 54.327287][ T9888] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 54.327321][ T9888] BTRFS info (device loop1): using free-space-tree [ 54.388600][ T9921] loop2: detected capacity change from 0 to 512 [ 54.389009][ T9921] EXT4-fs: Ignoring removed orlov option [ 54.408440][ T31] audit: type=1400 audit(54.380:670): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=9929 comm="syz.4.1365" saddr=172.30.0.5 daddr=172.20.20.170 netif=wpan0 [ 54.419136][ T9921] EXT4-fs (loop2): 1 orphan inode deleted [ 54.419613][ T9921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.432125][ T6554] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 54.450890][ T4515] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 54.450942][ T4515] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 54.491215][ T6559] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.504892][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1367'. [ 54.508328][ T9941] binfmt_misc: register: failed to install interpreter file ./file0 [ 54.585121][ T9937] loop4: detected capacity change from 0 to 40427 [ 54.593018][ T9937] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 54.594295][ T9937] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 54.624075][ T9937] F2FS-fs (loop4): invalid crc value [ 54.665920][ T9937] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 54.681143][ T9956] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1375'. [ 54.687874][ T9937] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 54.687907][ T9937] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 54.877043][ T9979] netlink: 'syz.2.1387': attribute type 1 has an invalid length. [ 55.162108][T10016] netlink: 'syz.1.1402': attribute type 1 has an invalid length. [ 55.163465][T10016] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1402'. [ 55.164886][T10016] NCSI netlink: No device for ifindex 0 [ 55.224194][T10023] netlink: 'syz.3.1407': attribute type 2 has an invalid length. [ 55.224229][T10023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1407'. [ 55.230149][ T9997] loop4: detected capacity change from 0 to 32768 [ 55.252877][T10005] loop0: detected capacity change from 0 to 32768 [ 55.252996][ T9997] jfs_strtoUCS: char2uni returned -36. [ 55.253004][ T9997] charset = cp932, char = 0xe1 [ 55.253363][T10019] netlink: 'syz.1.1405': attribute type 3 has an invalid length. [ 55.278331][T10005] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 55.278374][T10005] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 55.278389][T10005] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 55.304271][T10025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1408'. [ 55.309216][T10029] netlink: 'syz.1.1411': attribute type 21 has an invalid length. [ 5 ** replaying previous printk message ** [ 55.314055][ T6547] Unable to handle kernel paging request at virtual address dfff800000000006 [ 55.314091][ T6547] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 55.314100][ T6547] Mem abort info: [ 55.314105][ T6547] ESR = 0x0000000096000005 [ 55.314111][ T6547] EC = 0x25: DABT (current EL), IL = 32 bits [ 55.314119][ T6547] SET = 0, FnV = 0 [ 55.314123][ T6547] EA = 0, S1PTW = 0 [ 55.314127][ T6547] FSC = 0x05: level 1 translation fault [ 55.314131][ T6547] Data abort info: [ 55.314134][ T6547] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 55.314138][ T6547] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 55.314142][ T6547] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 55.314146][ T6547] [dfff800000000006] address between user and kernel address ranges [ 55.314202][ T6547] Internal error: Oops: 0000000096000005 [#1] SMP [ 55.326940][ T6547] Modules linked in: [ 55.327490][ T6547] CPU: 1 UID: 0 PID: 6547 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 55.329150][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 55.330725][ T6547] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 55.331925][ T6547] pc : lmLogSync+0x1e4/0x894 [ 55.332542][ T6547] lr : lmLogSync+0x1c0/0x894 [ 55.333242][ T6547] sp : ffff8000a38f79e0 [ 55.333838][ T6547] x29: ffff8000a38f7aa0 x28: 00007dfeb3155d58 x27: dfff800000000000 [ 55.335130][ T6547] x26: ffffffffffffffff x25: dfff800000000000 x24: ffff8000a38f7a00 [ 55.336350][ T6547] x23: dfff800000000000 x22: ffff70001471ef40 x21: 0000000000000030 [ 55.337608][ T6547] x20: ffff0000c9679238 x19: ffff0000c47ad800 x18: 1fffe000337a0688 [ 55.338810][ T6547] x17: ffff80008f7be000 x16: ffff80008af6de48 x15: 0000000000000006 [ 55.340094][ T6547] x14: 0000000000000000 x13: ffff70001471ef26 x12: 0000000000000000 [ 55.341293][ T6547] x11: 0000000000000000 x10: 0000000000ff0100 x9 : 0000000000000000 [ 55.342548][ T6547] x8 : 0000000000000006 x7 : 0000000000000000 x6 : 000000000000003f [ 55.343818][ T6547] x5 : 0000000000000040 x4 : fffffffffffffff0 x3 : 0000000000000030 [ 55.345073][ T6547] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 55.346389][ T6547] Call trace: [ 55.346890][ T6547] lmLogSync+0x1e4/0x894 (P) [ 55.347626][ T6547] jfs_syncpt+0x70/0x94 [ 55.348303][ T6547] jfs_sync_fs+0x8c/0xac [ 55.349029][ T6547] sync_filesystem+0xe8/0x218 [ 55.349783][ T6547] generic_shutdown_super+0x70/0x2b8 [ 55.350606][ T6547] kill_block_super+0x44/0x90 [ 55.351330][ T6547] deactivate_locked_super+0xc4/0x12c [ 55.352062][ T6547] deactivate_super+0xe0/0x100 [ 55.352785][ T6547] cleanup_mnt+0x31c/0x3ac [ 55.353520][ T6547] __cleanup_mnt+0x20/0x30 [ 55.354181][ T6547] task_work_run+0x1dc/0x260 [ 55.354915][ T6547] do_notify_resume+0x174/0x1f4 [ 55.355695][ T6547] el0_svc+0xb8/0x180 [ 55.356275][ T6547] el0t_64_sync_handler+0x84/0x12c [ 55.357046][ T6547] el0t_64_sync+0x198/0x19c [ 55.357762][ T6547] Code: 97c17537 f94002a8 9100c115 d343fea8 (387b6908) [ 55.358685][ T6547] ---[ end trace 0000000000000000 ]--- [ 55.577701][ T6547] Kernel panic - not syncing: Oops: Fatal exception [ 55.578681][ T6547] SMP: stopping secondary CPUs [ 55.579390][ T6547] Kernel Offset: disabled [ 55.580057][ T6547] CPU features: 0x40000,00007800,109c1141,5427fea7 [ 55.581068][ T6547] Memory Limit: none [ 55.798471][ T6547] Rebooting in 86400 seconds..