last executing test programs: 3.669192526s ago: executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x87}, @timestamp={0x44, 0x4}]}}}], 0x18}, 0x0) 3.502157831s ago: executing program 4: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x82, &(0x7f0000006640)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c00000000ffffffffff7f303000001100"/29], 0x1, 0x6092, &(0x7f0000006680)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.044849771s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x22, &(0x7f00000000c0)={@multicast, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}}, 0x0) 2.849541162s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x280, 0x110, 0xa, 0xa, 0x0, 0x0, 0x1e8, 0x230, 0x230, 0x1e8, 0x223, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_vlan\x00', 'veth1_to_hsr\x00', {}, {}, 0x73}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x6}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'ipvlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) 2.554271998s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x20000400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0x60}, {0xc}}}]}]}, 0x70}}, 0x0) 2.536785229s ago: executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 2.368855288s ago: executing program 1: r0 = eventfd(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000080), 0x8) 2.311039218s ago: executing program 3: munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000004100), 0x109242) write$FUSE_INIT(r0, &(0x7f0000002100)={0x50}, 0x50) 2.207531579s ago: executing program 2: setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/106) 2.205584554s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x22, &(0x7f00000000c0)={@multicast, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}}, 0x0) 2.176674027s ago: executing program 3: sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={0x140, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x139}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}, @NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x0, 0x0, 0x0, 0x3]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x401}]}, @NL80211_ATTR_CQM={0x4}]}, 0x140}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x806}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 2.085823588s ago: executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000440)={0x80, "421ae375378525f149154c9422ad0644f47d3bd7aaa45d6bb4823ab4c98100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"e50d1af8899401000000010000007ea261dd00ff000000000000000000170020", r4}) dup3(r4, r1, 0x0) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000ec0)=@generic={0x8}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0xb, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r11, r10, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r11, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r8}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xc3ff}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.00579031s ago: executing program 3: syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000000100)='./file3\x00', 0x18040, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYBLOB="5798ee04c328f3ad2002dc000000000000000000"], 0x1, 0x5b80, &(0x7f000000b6c0)="$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") unlink(&(0x7f0000000000)='./file3\x00') 1.795976227s ago: executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000640)=ANY=[], 0xd0) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e21, 0x80000, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="11"], 0x18}, 0x0) 1.624000767s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x280, 0x110, 0xa, 0xa, 0x0, 0x0, 0x1e8, 0x230, 0x230, 0x1e8, 0x223, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_vlan\x00', 'veth1_to_hsr\x00', {}, {}, 0x73}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x6}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'ipvlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) 1.610459655s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x5, 0x26}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000014007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000680)='jbd2_handle_stats\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x1c00000000000000) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYRESOCT=r1], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = dup(0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a40)={{0x14}, [], {0x14}}, 0x28}}, 0x0) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f0000000240)={0x2, 0x0, 0x1c, 0x11, 0x26, &(0x7f0000000a40)="a4d1e48101e3ad03a25e40da91493f5c769ed2ed09640ac973fbe03ed7493bbc9761ffd459a85d80dc0b4a4a69a88d5c3c1070ca4545c46abe63240027fb466377bb7a3a734b09485acced3d065b9b67bfec0a45f489c58cbb079eade31f3421dae69c11abcec34170ea18e731587b07ab97cbad32a44e023e59a5841217024fc99777b3cdb057733a86f8827ae06af8a57f33f045269eedf16c661274dfe7f2951d640c7360baee412f8ce2b1a048782100b1c75c62d548ef6dfc36a8361ddee0ffec4aefd9e2683225674c7d1ac15cffa0304b466ea5f3f3640b1a6e9260c201498a3f0b596872596062b8662543088d226af5378a20109baa9b87342f239a61b97b772498387678430940b56374400510317296b9b8fd9b66c9421016efba5bed6752d8a95fc91a49b28441fdd9c25092eccefaa82240fee28ec8198b08de274df9d28ad0aadced8efd5755f6dcb58a21b4874c84f6dd98e2546948d9328358c12552aaa0fa9a43d88859e247392bab156d803666b1a5cc78eb98deaf954fb4b2bed7c5ad8ebead7b72d616f97b8f404754942649d836cadf7daacdc00827bfc3e4c64fd4a6555f480d283ff931e9fe98ab7150be881f2be7d94269541d85d7c45e570547bb8ae61aadac8499f0cbfbaedca238742e111dced8cb508769b34a858b51c2fa2d3f7f8dd6899dc13064e800714c6a4989691be803198d3c38579412555550f12c8556fa87d1a57c65377a022f7cbcadd7170e7b4fe98f6ccbcbec3fa1ad3118cfc4459c645280b841cbe19af7264719441a82f76b5ddbd795e659091a6d5c77dc736e004c8361365ad8a10f8ca62135c0a2ac56fb7d068a0881876ea2b66bf987983cd9bde6b28735a8222baf2eb7b5696d9524165fa21e04d18caae9c72894e68db116c354416b0cd15f257c031d8a174d22d17b9ad25d5df24bbb82c8e02f913202b81c84056828c713c909d94f1560625cfdf5f048731b0bcf9aaa57401300f90a44ce0a9be55cc81da37191fc5349fae38b9ec0c386e8b9627362aa528fe86898165153abbb800e337d76d07761e81face5a04a6885b3c5814c0de5ac2537cb99a7cab4b9d5b4595746dab2b726391bf252302f08c35a4537674c1e559f16093d76c8cc0351c9ca6b1d8ae81bd60bc22950b6d3e5e17a42146cd9027fb08b9d7be4b0d1831fe02208c4ff51f87d88781e098780b385d1bc911d86b03e59ab38e6b596b1e07acb0d92b9e1396f23f722fe051ccefca2429095897e88d8167e84b748a8575d7be054637979e46f4ad4e5703fdfdde0494a341e58f807d4c76705dc1f29d090af13e8140042cf4cd70d2a155721655d37ec8089391cb3794aafa33ae457d838819ec7203d1ae0bdf2b9cc72f5ddacba3134107adb7b373f8b11f6755662b4ba3f162800b70888f32bc5b34715c01e14b4e23f"}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d418000000000000002900000002000000", 0xfe60) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000005c0)={0x3, 0x0, [{}, {0x9cf, 0x0, 0x80000000}, {0xafb, 0x0, 0x8}]}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(r8, 0x0, 0x0) 1.53940088s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x20000400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0x60}, {0xc}}}]}]}, 0x70}}, 0x0) 1.429819706s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB=',', @ANYRESHEX=r0, @ANYBLOB=',\x00']) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000440)={0x2, {0x2, 0x0, 0x2}}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r3, 0xa, 0x0, @void}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendto$packet(r1, &(0x7f0000000180)="0b3bb1000011000088ca1a000000000200"/26, 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x1a, r4, 0x1, 0x0, 0x6, @random="b7956ed85b54"}, 0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', r4, 0xffffffffffffffff, 0x5, 0x3}, 0x48) 1.301803082s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) socket(0x25, 0x2, 0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000a40)={@in={{0x2, 0x4e21, @private=0xa010101}}, 0x0, 0x0, 0x18, 0x0, "34dbd84f05363827e94f6ae0c9302fa7c6a211639120f6e770c61dc0172f31cd2feb187a5d8402c808f778c3b5eb62001f58d77d360ae1114806d379e567caa04a1b212acb492b419e9c88dc96306c53"}, 0xd8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x50) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@private2, @loopback, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x706002a}) setsockopt$inet6_int(r3, 0x29, 0x12, &(0x7f0000000080)=0x9732, 0x4) read(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240), 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600), 0x88c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x80, 0x80, 0xffff8001, 0x64, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, 0x700, 0x8, 0x8, 0x5}}) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 1.207629869s ago: executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0xb, 0x1, 0x0, "3137775225960900"}) 1.14590898s ago: executing program 1: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.048476337s ago: executing program 1: setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/106) 1.00719935s ago: executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 1.004418298s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000005c0)={0x0, 0xea60}, 0x10) write$tun(r1, 0x0, 0x34) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) write$binfmt_misc(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="73690300"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x8b}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 963.464985ms ago: executing program 1: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="71756f74612c696f636861727365743d63703433372c6e6f71756f74612c6572726f72733d636f6e74696e75652c646973636172643d3078303030303030303030303030303030342c6572726f72733d636f6e74696e75652c71756f74612c646973636172642c67727071756f74612c00c3d84870246dc3becfab69b4075f904b9bef947155d6ebf50650a827c77ae173d1756577bee42c59b5b2011929f2d770f53f4e632263c558d4f3db2e47780628eb2efd0270953ea796da26e737b18ba46d95cbe959f171ba6a4254f9fb302bc7616b6125b27cc6ac23a0162d7fc6e876bed163c581a39926cb8412f8e8ff6b60"], 0x1, 0x60b9, &(0x7f0000013cc0)="$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") setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) 803.800142ms ago: executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000640)=ANY=[], 0xd0) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e21, 0x80000, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="11"], 0x18}, 0x0) 655.874457ms ago: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 354.966139ms ago: executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 327.123696ms ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000580)=[@text16={0x10, &(0x7f0000000780)="6766c7442400660000006766c7442402050000006766c744240600000000670f011c24ba2100ecba6100ecbaf80c66b8684b258a66efbafc0c66b87400000066efea17939d00660f0d9e0a0065660fe460700f0017baf80c66b8ce395c8a66efbafc0cec0f32", 0x66}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001900010000e40000000000001c140000fe"], 0x30}}, 0x0) kernel console output (not intermixed with test programs): Releasing backup interface [ 147.449986][ T6619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.501582][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.768294][ T47] bond0 (unregistering): Released all slaves [ 148.541363][ T6622] loop0: detected capacity change from 0 to 2048 [ 148.577457][ T6622] NILFS (loop0): invalid segment: Magic number mismatch [ 148.589684][ T6622] NILFS (loop0): trying rollback from an earlier position [ 148.611340][ T6622] NILFS (loop0): recovery complete [ 148.631003][ T6629] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.695822][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.709710][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.717208][ T6548] bridge_slave_0: entered allmulticast mode [ 148.719280][ T6604] loop4: detected capacity change from 0 to 32768 [ 148.754618][ T53] Bluetooth: hci4: command tx timeout [ 148.763224][ T6548] bridge_slave_0: entered promiscuous mode [ 148.825857][ T6604] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 148.973476][ T6604] XFS (loop4): Ending clean mount [ 148.989005][ T6642] loop0: detected capacity change from 0 to 512 [ 148.997945][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.025919][ T6642] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 149.028217][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.034483][ T6642] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 149.052753][ T6642] EXT4-fs (loop0): orphan cleanup on readonly fs [ 149.070360][ T6642] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 149.086660][ T6548] bridge_slave_1: entered allmulticast mode [ 149.096137][ T6642] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 149.110234][ T6548] bridge_slave_1: entered promiscuous mode [ 149.126148][ T29] audit: type=1804 audit(1717145214.821:257): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir119299547/syzkaller.8WgV2x/98/file0/file1" dev="loop4" ino=1062 res=1 errno=0 [ 149.155680][ T6642] EXT4-fs (loop0): 1 truncate cleaned up [ 149.196298][ T6642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 149.264744][ T6642] EXT4-fs warning (device loop0): dx_probe:892: inode #2: comm syz-executor.0: dx entry: limit 65535 != root limit 120 [ 149.296049][ T5119] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 149.325301][ T6642] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 149.414529][ T5120] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.493868][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.657224][ T47] hsr_slave_0: left promiscuous mode [ 149.672539][ T47] hsr_slave_1: left promiscuous mode [ 149.703470][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.736758][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.758507][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.776169][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.833152][ T47] veth1_macvtap: left promiscuous mode [ 149.839811][ T47] veth0_macvtap: left promiscuous mode [ 149.845760][ T47] veth1_vlan: left promiscuous mode [ 149.853273][ T47] veth0_vlan: left promiscuous mode [ 150.647737][ T6647] loop4: detected capacity change from 0 to 32768 [ 150.720453][ T6647] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 150.813484][ T6656] loop0: detected capacity change from 0 to 32768 [ 150.820182][ T53] Bluetooth: hci4: command tx timeout [ 150.858136][ T6647] XFS (loop4): Ending clean mount [ 150.908456][ T6656] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 150.985679][ T29] audit: type=1804 audit(1717145216.691:258): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir119299547/syzkaller.8WgV2x/99/file0/file1" dev="loop4" ino=1062 res=1 errno=0 [ 151.026656][ T6656] XFS (loop0): Ending clean mount [ 151.070407][ T5119] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 151.159276][ T29] audit: type=1804 audit(1717145216.861:259): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2873557658/syzkaller.FVqJwG/105/file0/file1" dev="loop0" ino=1062 res=1 errno=0 [ 151.283678][ T5120] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 151.358896][ T47] team0 (unregistering): Port device team_slave_1 removed [ 151.570641][ T47] team0 (unregistering): Port device team_slave_0 removed [ 151.898372][ T6682] loop1: detected capacity change from 0 to 512 [ 151.943029][ T6682] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 151.951922][ T6682] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 151.966820][ T6682] EXT4-fs (loop1): orphan cleanup on readonly fs [ 152.008901][ T6682] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 152.022493][ T6685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.041872][ T6682] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 152.061592][ T6682] EXT4-fs (loop1): 1 truncate cleaned up [ 152.197978][ T6682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 152.903955][ T6682] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz-executor.1: dx entry: limit 65535 != root limit 120 [ 152.929863][ T6682] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 153.038357][ T5121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.140973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 153.150077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 153.648820][ T6678] loop4: detected capacity change from 0 to 32768 [ 153.746998][ T6678] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 153.835122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 153.913805][ T6678] XFS (loop4): Ending clean mount [ 153.939321][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.036208][ T29] audit: type=1804 audit(1717145219.731:260): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir119299547/syzkaller.8WgV2x/102/file0/file1" dev="loop4" ino=1062 res=1 errno=0 [ 154.137157][ T5119] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 154.234026][ T6703] loop2: detected capacity change from 0 to 512 [ 154.278946][ T6701] loop0: detected capacity change from 0 to 2048 [ 154.280768][ T6548] team0: Port device team_slave_0 added [ 154.340176][ T6703] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz-executor.2: bad orphan inode 13 [ 154.354433][ T6548] team0: Port device team_slave_1 added [ 154.374958][ T6706] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.403254][ T6691] loop1: detected capacity change from 0 to 32768 [ 154.429498][ T6703] ext4_test_bit(bit=12, block=4) = 1 [ 154.447502][ T6703] is_bad_inode(inode)=0 [ 154.466712][ T6703] NEXT_ORPHAN(inode)=0 [ 154.485789][ T6691] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 154.488707][ T6703] max_ino=32 [ 154.514355][ T6703] i_nlink=1 [ 154.518935][ T6703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.538201][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.581622][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.611361][ T6703] EXT4-fs warning (device loop2): dx_probe:832: inode #2: comm syz-executor.2: Unrecognised inode hash code 20 [ 154.613810][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.637471][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.649535][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.676030][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.696500][ T6703] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 154.718809][ T6703] EXT4-fs warning (device loop2): dx_probe:832: inode #2: comm syz-executor.2: Unrecognised inode hash code 20 [ 154.739481][ T6703] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 154.762055][ T6691] XFS (loop1): Ending clean mount [ 154.791347][ T6691] XFS (loop1): Quotacheck needed: Please wait. [ 154.803906][ T6703] syz-executor.2 (pid 6703) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 154.875739][ T6691] XFS (loop1): Quotacheck: Done. [ 154.895244][ T6548] hsr_slave_0: entered promiscuous mode [ 154.911790][ T6548] hsr_slave_1: entered promiscuous mode [ 154.917548][ T6703] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 154.937145][ T6548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.956419][ T6548] Cannot create hsr debugfs directory [ 154.972829][ T6691] sctp: [Deprecated]: syz-executor.1 (pid 6691) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.972829][ T6691] Use struct sctp_sack_info instead [ 155.043152][ T6720] sp0: Synchronizing with TNC [ 155.054683][ T5118] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.110766][ T5121] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 155.489813][ T5174] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 155.633809][ T29] audit: type=1804 audit(1717145221.331:261): pid=6727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir119299547/syzkaller.8WgV2x/106/bus" dev="sda1" ino=1954 res=1 errno=0 [ 155.655334][ T6729] fscrypt (sda1, inode 1959): Unsupported log2_data_unit_size in encryption policy: 133 [ 155.675797][ T6727] Invalid ELF header magic: != ELF [ 155.711893][ T5174] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 155.724586][ T5174] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.769710][ T5174] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.792511][ T5174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.820585][ T6723] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 156.018737][ T6718] loop0: detected capacity change from 0 to 32768 [ 156.295743][ T6718] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 157.234935][ T6548] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 157.281607][ T6718] XFS (loop0): Ending clean mount [ 157.307840][ T6548] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 157.351172][ T6548] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 157.384223][ T29] audit: type=1804 audit(1717145223.081:262): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2873557658/syzkaller.FVqJwG/109/file0/file1" dev="loop0" ino=1062 res=1 errno=0 [ 157.414633][ T6548] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 157.535252][ T5120] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 157.788486][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.873330][ T6548] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.905026][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.912364][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.962864][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.970174][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.107106][ T6733] loop4: detected capacity change from 0 to 32768 [ 158.131767][ T6733] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6733) [ 158.201732][ T6733] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.229599][ T6733] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 158.245328][ T6733] BTRFS info (device loop4): using free-space-tree [ 158.246135][ T6761] sp0: Synchronizing with TNC [ 158.402417][ T5173] usb 3-1: USB disconnect, device number 5 [ 158.689418][ T6548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.786229][ T5119] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.853137][ T29] audit: type=1804 audit(1717145224.511:263): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1681925308/syzkaller.p9aa15/104/bus" dev="sda1" ino=1957 res=1 errno=0 [ 158.888781][ T6789] Invalid ELF header magic: != ELF [ 159.787388][ T6548] veth0_vlan: entered promiscuous mode [ 159.922385][ T6548] veth1_vlan: entered promiscuous mode [ 160.074600][ T6797] loop0: detected capacity change from 0 to 2048 [ 160.090124][ T6548] veth0_macvtap: entered promiscuous mode [ 160.123922][ T6548] veth1_macvtap: entered promiscuous mode [ 160.151773][ T6803] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.221267][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.264355][ T6808] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.274701][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.297793][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.303055][ T6810] loop1: detected capacity change from 0 to 256 [ 160.326613][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.337613][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.348478][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.359653][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.371517][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.386854][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.418214][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.448675][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.464240][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.475011][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.485145][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.495707][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.505807][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.518661][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.533877][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.550005][ T6548] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.558864][ T6548] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.587085][ T6548] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.604960][ T6548] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.625860][ T6810] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.673099][ T6810] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.710558][ T6810] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.847565][ T6821] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 160.876530][ T6821] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 160.937572][ T6824] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 160.968335][ T6824] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 161.046680][ T2849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.075181][ T2849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.144568][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.158517][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.375573][ T29] audit: type=1326 audit(1717145228.071:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5ba7cee9 code=0x7ffc0000 [ 162.435855][ T29] audit: type=1326 audit(1717145228.071:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5ba7cee9 code=0x7ffc0000 [ 162.486244][ T29] audit: type=1326 audit(1717145228.071:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c5ba7cee9 code=0x7ffc0000 [ 162.510478][ T29] audit: type=1326 audit(1717145228.071:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5ba7cee9 code=0x7ffc0000 [ 162.534437][ T29] audit: type=1326 audit(1717145228.071:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5ba7cee9 code=0x7ffc0000 [ 162.557688][ T29] audit: type=1326 audit(1717145228.071:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c5ba7cee9 code=0x7ffc0000 [ 162.612609][ T29] audit: type=1326 audit(1717145228.101:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5ba7cee9 code=0x7ffc0000 [ 162.674077][ T29] audit: type=1326 audit(1717145228.101:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4c5ba7a667 code=0x7ffc0000 [ 162.743526][ T6859] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 162.755663][ T6859] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 162.764915][ T29] audit: type=1326 audit(1717145228.101:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c5ba40329 code=0x7ffc0000 [ 162.828160][ T29] audit: type=1326 audit(1717145228.101:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4c5ba7a667 code=0x7ffc0000 [ 162.859832][ T6858] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 162.901187][ T6858] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 162.958432][ T6860] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 163.014468][ T6860] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 163.164961][ T6878] loop0: detected capacity change from 0 to 256 [ 164.604759][ T6898] loop2: detected capacity change from 0 to 256 [ 164.635831][ T6898] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 164.689506][ T6898] exFAT-fs (loop2): failed to load upcase table [ 164.695860][ T6898] exFAT-fs (loop2): failed to recognize exfat type [ 165.044662][ T6915] loop1: detected capacity change from 0 to 64 [ 166.143718][ T6934] loop0: detected capacity change from 0 to 512 [ 166.148300][ T6937] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.178690][ T6936] validate_nla: 6 callbacks suppressed [ 166.178712][ T6936] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 166.194294][ T6934] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 166.211674][ T6934] UDF-fs: Scanning with blocksize 512 failed [ 166.227592][ T6934] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 166.236397][ T6934] UDF-fs: Scanning with blocksize 1024 failed [ 166.249148][ T6936] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 166.257976][ T6934] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 166.275925][ T6934] UDF-fs: Scanning with blocksize 2048 failed [ 166.289157][ T6934] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 166.291081][ T6940] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 166.299199][ T6941] loop2: detected capacity change from 0 to 256 [ 166.320365][ T6940] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 166.328710][ T6934] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.375146][ T6941] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 166.428906][ T6941] exFAT-fs (loop2): failed to load upcase table [ 166.440243][ T6941] exFAT-fs (loop2): failed to recognize exfat type [ 166.611100][ T6953] loop4: detected capacity change from 0 to 256 [ 166.647490][ T6954] loop0: detected capacity change from 0 to 256 [ 166.794855][ T6954] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.828925][ T6954] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.860193][ T6964] loop3: detected capacity change from 0 to 256 [ 166.861786][ T6954] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.936394][ T6964] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 167.220496][ T6979] loop2: detected capacity change from 0 to 256 [ 167.246695][ T6982] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 167.266577][ T6979] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 167.299477][ T6979] exFAT-fs (loop2): failed to load upcase table [ 167.321102][ T6979] exFAT-fs (loop2): failed to recognize exfat type [ 167.447920][ T6990] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 167.789055][ T7000] loop4: detected capacity change from 0 to 256 [ 168.037002][ T7011] loop0: detected capacity change from 0 to 1024 [ 168.052031][ T7013] loop1: detected capacity change from 0 to 64 [ 168.135642][ T7015] loop3: detected capacity change from 0 to 2048 [ 168.963853][ T7048] loop1: detected capacity change from 0 to 1024 [ 169.070915][ T7052] loop3: detected capacity change from 0 to 256 [ 169.106384][ T7052] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 169.225066][ T1053] hfsplus: b-tree write err: -5, ino 4 [ 169.378443][ T7059] loop4: detected capacity change from 0 to 512 [ 169.384488][ T7061] loop1: detected capacity change from 0 to 256 [ 169.403287][ T7059] EXT4-fs: Ignoring removed nobh option [ 169.434257][ T7059] EXT4-fs (loop4): inodes count not valid: 0 vs 32 [ 169.754418][ T7073] loop3: detected capacity change from 0 to 1764 [ 169.932394][ T7083] loop4: detected capacity change from 0 to 256 [ 170.031835][ T7083] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 170.142708][ T7092] loop2: detected capacity change from 0 to 128 [ 170.159447][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 170.159466][ T29] audit: type=1800 audit(1717145747.858:413): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048631 res=0 errno=0 [ 170.290807][ T7092] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 170.296409][ T7083] loop4: detected capacity change from 256 to 0 [ 170.363349][ C0] I/O error, dev loop4, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.382298][ T7092] syz-executor.2: attempt to access beyond end of device [ 170.382298][ T7092] loop2: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 170.405148][ T7094] exFAT-fs (loop4): error, failed to access to FAT (entry 0x0000000b, err:-5) [ 170.419544][ T7094] exFAT-fs (loop4): Filesystem has been set read-only [ 170.482231][ T5119] syz-executor.4: attempt to access beyond end of device [ 170.482231][ T5119] loop4: rw=0, sector=128, nr_sectors = 1 limit=0 [ 170.507247][ T5118] sysv_free_block: trying to free block not in datazone [ 170.518056][ T5119] exFAT-fs (loop4): error, failed to access to FAT (entry 0x00000005, err:-5) [ 170.538810][ T5119] syz-executor.4: attempt to access beyond end of device [ 170.538810][ T5119] loop4: rw=0, sector=128, nr_sectors = 1 limit=0 [ 170.538855][ T5119] exFAT-fs (loop4): error, failed to access to FAT (entry 0x00000005, err:-5) [ 170.544535][ T5118] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 170.786785][ T7111] syz-executor.2 (7111): /proc/7109/oom_adj is deprecated, please use /proc/7109/oom_score_adj instead. [ 170.985192][ T7116] loop3: detected capacity change from 0 to 1764 [ 170.997121][ T7122] loop1: detected capacity change from 0 to 256 [ 171.093987][ T7124] loop2: detected capacity change from 0 to 256 [ 171.187615][ T7124] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 171.359461][ T29] audit: type=1800 audit(1717145749.058:414): pid=7124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048640 res=0 errno=0 [ 171.872934][ T7119] loop4: detected capacity change from 0 to 32768 [ 171.881177][ T7124] loop2: detected capacity change from 256 to 0 [ 171.902314][ T62] loop: Write error at byte offset 9223372036854845439, length 512. [ 171.919501][ C0] I/O error, dev loop2, sector 136 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 171.929554][ C0] Buffer I/O error on dev loop2, logical block 136, lost sync page write [ 171.945150][ T7125] syz-executor.2: attempt to access beyond end of device [ 171.945150][ T7125] loop2: rw=2049, sector=160, nr_sectors = 1 limit=0 [ 171.964417][ T7125] Buffer I/O error on dev loop2, logical block 160, lost sync page write [ 171.990676][ T7119] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 171.990676][ T7119] [ 172.022809][ T7125] syz-executor.2: attempt to access beyond end of device [ 172.022809][ T7125] loop2: rw=2049, sector=161, nr_sectors = 1 limit=0 [ 172.045678][ T7125] Buffer I/O error on dev loop2, logical block 161, lost sync page write [ 172.118470][ T5118] syz-executor.2: attempt to access beyond end of device [ 172.118470][ T5118] loop2: rw=524288, sector=160, nr_sectors = 1 limit=0 [ 172.159909][ T5118] syz-executor.2: attempt to access beyond end of device [ 172.159909][ T5118] loop2: rw=524288, sector=161, nr_sectors = 1 limit=0 [ 172.220194][ T5118] syz-executor.2: attempt to access beyond end of device [ 172.220194][ T5118] loop2: rw=0, sector=160, nr_sectors = 1 limit=0 [ 172.234480][ T5118] syz-executor.2: attempt to access beyond end of device [ 172.234480][ T5118] loop2: rw=0, sector=161, nr_sectors = 1 limit=0 [ 172.239827][ T7136] trusted_key: syz-executor.3 sent an empty control message without MSG_MORE. [ 172.321844][ T5118] syz-executor.2: attempt to access beyond end of device [ 172.321844][ T5118] loop2: rw=395265, sector=0, nr_sectors = 1 limit=0 [ 172.365864][ T5118] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 172.781173][ T7145] netlink: 'syz-executor.4': attribute type 33 has an invalid length. [ 172.802914][ T7145] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.884769][ T47] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.123840][ T47] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.314001][ T47] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.359671][ T7162] loop0: detected capacity change from 0 to 64 [ 173.374661][ T7131] loop1: detected capacity change from 0 to 32768 [ 173.421515][ T7131] bcachefs (/dev/loop1): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 0) [ 173.490851][ T47] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.847000][ T7170] loop4: detected capacity change from 0 to 64 [ 173.872803][ T47] bridge_slave_1: left allmulticast mode [ 173.896405][ T47] bridge_slave_1: left promiscuous mode [ 173.917791][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.034713][ T47] bridge_slave_0: left allmulticast mode [ 174.076559][ T47] bridge_slave_0: left promiscuous mode [ 174.078714][ T5127] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.096260][ T5127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.096442][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.113414][ T5127] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.124296][ T5127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.134604][ T5127] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 174.145285][ T5127] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.514956][ T7182] loop0: detected capacity change from 0 to 64 [ 174.629218][ T7158] loop3: detected capacity change from 0 to 32768 [ 174.731000][ T7158] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 174.753020][ T7195] loop0: detected capacity change from 0 to 512 [ 174.761681][ T7195] EXT4-fs: Ignoring removed nobh option [ 174.773790][ T7195] EXT4-fs (loop0): inodes count not valid: 0 vs 32 [ 174.821677][ T7158] XFS (loop3): Ending clean mount [ 174.832653][ T7158] XFS (loop3): Quotacheck needed: Please wait. [ 174.917127][ T7158] XFS (loop3): Quotacheck: Done. [ 175.096710][ T7204] loop0: detected capacity change from 0 to 64 [ 175.151936][ T6548] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 175.657958][ T7185] loop4: detected capacity change from 0 to 32768 [ 175.721517][ T7185] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7185) [ 175.763751][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.765345][ T7185] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 175.785337][ T7185] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 175.802723][ T7185] BTRFS info (device loop4): using free-space-tree [ 175.820141][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.844974][ T47] bond0 (unregistering): Released all slaves [ 176.144514][ T7172] chnl_net:caif_netlink_parms(): no params data found [ 176.193961][ T7231] loop1: detected capacity change from 0 to 4096 [ 176.208222][ T7231] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 176.259897][ T5127] Bluetooth: hci1: command tx timeout [ 176.318448][ T5119] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.631261][ T7207] loop0: detected capacity change from 0 to 32768 [ 176.670769][ T7207] bcachefs (/dev/loop0): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 0) [ 176.766502][ T7244] QAT: Device 0 not found [ 176.903140][ T47] hsr_slave_0: left promiscuous mode [ 176.934523][ T47] hsr_slave_1: left promiscuous mode [ 176.942041][ T7248] binder: BINDER_SET_CONTEXT_MGR already set [ 176.966556][ T7248] binder: 7247:7248 ioctl 4018620d 20000100 returned -16 [ 176.979513][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.988865][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.005619][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.020081][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.044333][ T7248] binder: BINDER_SET_CONTEXT_MGR already set [ 177.067315][ T7248] binder: 7247:7248 ioctl 4018620d 20000040 returned -16 [ 177.078202][ T47] veth1_macvtap: left promiscuous mode [ 177.085128][ T47] veth0_macvtap: left promiscuous mode [ 177.103832][ T47] veth1_vlan: left promiscuous mode [ 177.116148][ T47] veth0_vlan: left promiscuous mode [ 177.132265][ T7252] loop4: detected capacity change from 0 to 64 [ 177.589673][ T7268] QAT: Device 0 not found [ 177.644239][ T7262] loop1: detected capacity change from 0 to 4096 [ 177.705178][ T7262] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 177.738090][ T7272] loop0: detected capacity change from 0 to 64 [ 178.085299][ T29] audit: type=1326 audit(1717145755.788:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d087cee9 code=0x7ffc0000 [ 178.144140][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.175939][ T29] audit: type=1326 audit(1717145755.788:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d087cee9 code=0x7ffc0000 [ 178.200667][ T29] audit: type=1326 audit(1717145755.818:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94d087cee9 code=0x7ffc0000 [ 178.252341][ T7284] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.263111][ T29] audit: type=1326 audit(1717145755.818:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d087cee9 code=0x7ffc0000 [ 178.342261][ T29] audit: type=1326 audit(1717145755.818:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d087cee9 code=0x7ffc0000 [ 178.349935][ T5127] Bluetooth: hci1: command tx timeout [ 178.368750][ T29] audit: type=1326 audit(1717145755.818:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94d087cee9 code=0x7ffc0000 [ 178.428906][ T29] audit: type=1326 audit(1717145755.818:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d087cee9 code=0x7ffc0000 [ 178.456744][ T29] audit: type=1326 audit(1717145755.818:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f94d087a667 code=0x7ffc0000 [ 178.482214][ T29] audit: type=1326 audit(1717145755.818:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f94d0840329 code=0x7ffc0000 [ 178.507735][ T29] audit: type=1326 audit(1717145755.818:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f94d087cee9 code=0x7ffc0000 [ 178.694271][ T7293] netlink: 'syz-executor.4': attribute type 33 has an invalid length. [ 178.702775][ T7293] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.776070][ T7296] QAT: Device 0 not found [ 178.849852][ T7298] loop3: detected capacity change from 0 to 128 [ 178.911794][ T47] team0 (unregistering): Port device team_slave_1 removed [ 178.971236][ T47] team0 (unregistering): Port device team_slave_0 removed [ 179.033078][ T7300] loop3: detected capacity change from 0 to 64 [ 179.293046][ T7302] loop3: detected capacity change from 0 to 16 [ 179.314993][ T7302] erofs: Unknown parameter ')|' [ 179.379295][ T7304] binder: BINDER_SET_CONTEXT_MGR already set [ 179.392310][ T7304] binder: 7303:7304 ioctl 4018620d 20000100 returned -16 [ 179.424013][ T7304] binder: BINDER_SET_CONTEXT_MGR already set [ 179.437777][ T7304] binder: 7303:7304 ioctl 4018620d 20000040 returned -16 [ 179.623635][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.900140][ T7172] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.907301][ T7172] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.929611][ T7172] bridge_slave_0: entered allmulticast mode [ 179.937229][ T7172] bridge_slave_0: entered promiscuous mode [ 179.965641][ T7172] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.979737][ T7172] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.988702][ T7172] bridge_slave_1: entered allmulticast mode [ 180.002275][ T7172] bridge_slave_1: entered promiscuous mode [ 180.118187][ T7172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.145513][ T7323] loop4: detected capacity change from 0 to 128 [ 180.163942][ T7172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.285713][ T7325] team0: entered promiscuous mode [ 180.298194][ T7325] team_slave_0: entered promiscuous mode [ 180.315572][ T7325] team_slave_1: entered promiscuous mode [ 180.334760][ T7172] team0: Port device team_slave_0 added [ 180.420265][ T5127] Bluetooth: hci1: command tx timeout [ 180.424936][ T7325] macvlan1: entered promiscuous mode [ 180.452433][ T7325] team0: Port device macvlan1 added [ 180.484785][ T7172] team0: Port device team_slave_1 added [ 180.556934][ T7324] team0: left promiscuous mode [ 180.565968][ T7324] team_slave_0: left promiscuous mode [ 180.580340][ T7324] team_slave_1: left promiscuous mode [ 180.593426][ T7324] macvlan1: left promiscuous mode [ 180.631172][ T7172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.657654][ T7172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.712587][ T7316] loop0: detected capacity change from 0 to 40427 [ 180.719499][ T7172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.745388][ T7172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.756044][ T7172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.784386][ T7172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.797787][ T7316] F2FS-fs (loop0): Found nat_bits in checkpoint [ 180.839138][ T7339] loop1: detected capacity change from 0 to 16 [ 180.860162][ T7339] erofs: Unknown parameter ')|' [ 180.942806][ T7316] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 180.966900][ T7172] hsr_slave_0: entered promiscuous mode [ 181.000435][ T7172] hsr_slave_1: entered promiscuous mode [ 181.019687][ T7172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.027602][ T7172] Cannot create hsr debugfs directory [ 181.055896][ T5120] syz-executor.0: attempt to access beyond end of device [ 181.055896][ T5120] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.079096][ T7342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.094888][ T5120] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 181.306002][ T7348] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.433743][ T7352] netlink: 'syz-executor.4': attribute type 33 has an invalid length. [ 181.467795][ T7352] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.476976][ T7354] loop3: detected capacity change from 0 to 128 [ 181.651550][ T7358] team0: entered promiscuous mode [ 181.659895][ T7358] team_slave_0: entered promiscuous mode [ 181.679649][ T7358] team_slave_1: entered promiscuous mode [ 181.765580][ T7358] macvlan1: entered promiscuous mode [ 181.781345][ T7358] team0: Port device macvlan1 added [ 181.877836][ T7357] team0: left promiscuous mode [ 181.893723][ T7357] team_slave_0: left promiscuous mode [ 181.912899][ T7357] team_slave_1: left promiscuous mode [ 181.918532][ T7357] macvlan1: left promiscuous mode [ 182.225004][ T7172] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 182.253698][ T7172] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 182.273212][ T7172] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 182.295850][ T7172] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 182.515612][ T5127] Bluetooth: hci1: command tx timeout [ 182.544178][ T7172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.655194][ T7172] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.719144][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.726428][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.733827][ T7370] loop3: detected capacity change from 0 to 32768 [ 182.794731][ T7370] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 182.801817][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.810630][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.920864][ T7370] XFS (loop3): Ending clean mount [ 182.962247][ T7370] XFS (loop3): Quotacheck needed: Please wait. [ 182.998641][ T7370] XFS (loop3): Quotacheck: Done. [ 183.109507][ T6548] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 183.430072][ T7172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.571911][ T7172] veth0_vlan: entered promiscuous mode [ 183.615455][ T7172] veth1_vlan: entered promiscuous mode [ 183.721612][ T7172] veth0_macvtap: entered promiscuous mode [ 183.748574][ T7172] veth1_macvtap: entered promiscuous mode [ 183.761309][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 183.761330][ T29] audit: type=1326 audit(1717145761.448:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8de7cee9 code=0x7ffc0000 [ 183.829031][ T29] audit: type=1326 audit(1717145761.458:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8de7cee9 code=0x7ffc0000 [ 183.856921][ T7428] vlan2: entered promiscuous mode [ 183.882605][ T7428] dummy0: entered promiscuous mode [ 183.885969][ T29] audit: type=1326 audit(1717145761.508:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a8de7cee9 code=0x7ffc0000 [ 183.918010][ T7428] vlan2: entered allmulticast mode [ 183.924292][ T7428] dummy0: entered allmulticast mode [ 183.924795][ T7430] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.941262][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.952721][ T7430] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 183.961020][ T29] audit: type=1326 audit(1717145761.508:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8de7cee9 code=0x7ffc0000 [ 183.986009][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.010782][ T29] audit: type=1326 audit(1717145761.508:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8de7cee9 code=0x7ffc0000 [ 184.033803][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.044456][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.058659][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.070593][ T29] audit: type=1326 audit(1717145761.518:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a8de7cee9 code=0x7ffc0000 [ 184.095441][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.108099][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.122541][ T29] audit: type=1326 audit(1717145761.518:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8de7cee9 code=0x7ffc0000 [ 184.145799][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.181641][ T7172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.199845][ T29] audit: type=1326 audit(1717145761.518:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3a8de7a667 code=0x7ffc0000 [ 184.296535][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.307007][ T29] audit: type=1326 audit(1717145761.518:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3a8de40329 code=0x7ffc0000 [ 184.307062][ T29] audit: type=1326 audit(1717145761.518:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3a8de7a667 code=0x7ffc0000 [ 184.356306][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.369019][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.380401][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.385650][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 184.392128][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.417485][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.429256][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.456525][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.475928][ T7172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.498741][ T7172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.498784][ T7172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.498815][ T7172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.498846][ T7172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.729169][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.750995][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.804531][ T7452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.839100][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.859765][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.969584][ T5174] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 184.975743][ T7459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.028134][ T7457] vlan2: entered promiscuous mode [ 185.038598][ T7457] dummy0: entered promiscuous mode [ 185.045697][ T7457] vlan2: entered allmulticast mode [ 185.055795][ T7457] dummy0: entered allmulticast mode [ 185.182345][ T5174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 185.197094][ T5174] usb 4-1: New USB device found, idVendor=1ae7, idProduct=9004, bcdDevice=c6.97 [ 185.206884][ T5174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.216980][ T5174] usb 4-1: Product: syz [ 185.221822][ T5174] usb 4-1: Manufacturer: syz [ 185.226839][ T5174] usb 4-1: SerialNumber: syz [ 185.237227][ T5174] usb 4-1: config 0 descriptor?? [ 185.529049][ T45] usb 4-1: USB disconnect, device number 4 [ 186.675332][ T7479] loop3: detected capacity change from 0 to 764 [ 186.683753][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.707047][ T7479] rock: directory entry would overflow storage [ 186.714637][ T7479] rock: sig=0x4654, size=5, remaining=4 [ 186.815117][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 186.835498][ T7465] loop1: detected capacity change from 0 to 40427 [ 186.894955][ T7465] F2FS-fs (loop1): Found nat_bits in checkpoint [ 187.016300][ T7496] vlan2: entered promiscuous mode [ 187.048643][ T7496] dummy0: entered promiscuous mode [ 187.076713][ T7496] vlan2: entered allmulticast mode [ 187.085174][ T7496] dummy0: entered allmulticast mode [ 187.123535][ T7465] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 187.207262][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 187.220987][ T5121] syz-executor.1: attempt to access beyond end of device [ 187.220987][ T5121] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 187.249462][ T5121] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 187.349434][ T5174] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 187.745906][ T5174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 188.510753][ T5174] usb 1-1: New USB device found, idVendor=1ae7, idProduct=9004, bcdDevice=c6.97 [ 188.534166][ T5174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.580108][ T5174] usb 1-1: Product: syz [ 188.647800][ T5174] usb 1-1: Manufacturer: syz [ 188.669423][ T5174] usb 1-1: SerialNumber: syz [ 188.691787][ T5174] usb 1-1: config 0 descriptor?? [ 188.756328][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.260073][ T5174] usb 1-1: USB disconnect, device number 3 [ 190.883801][ T5127] Bluetooth: hci1: command tx timeout [ 191.343335][ T7546] loop2: detected capacity change from 0 to 512 [ 191.377132][ T7546] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.413167][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.475842][ T7546] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 191.574433][ T7546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 191.594386][ T7546] System zones: 1-12 [ 191.681918][ T7546] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: e_value size too large [ 191.770781][ T7546] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 191.799906][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.857144][ T7546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.910031][ T7569] loop1: detected capacity change from 0 to 1024 [ 192.980644][ T7572] loop4: detected capacity change from 0 to 1024 [ 193.088250][ T7569] EXT4-fs: Ignoring removed orlov option [ 193.110314][ T7172] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.152565][ T7572] EXT4-fs: Ignoring removed orlov option [ 193.165427][ T7572] EXT4-fs (loop4): Test dummy encryption mode enabled [ 193.177174][ T7572] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 194.449335][ C1] sched: RT throttling activated [ 194.466486][ T7569] EXT4-fs (loop1): Test dummy encryption mode enabled [ 195.276347][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.284054][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.367889][ T7569] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 195.441325][ T7569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.441404][ T7572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.615886][ T7572] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 195.741407][ T7593] loop2: detected capacity change from 0 to 2048 [ 195.796760][ T7593] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.827762][ T7572] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 195.905029][ T5121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.916745][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 195.916767][ T29] audit: type=1804 audit(1717145773.618:652): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3926608196/syzkaller.WAvsDr/10/file0/bus" dev="loop2" ino=1367 res=1 errno=0 [ 195.978528][ T5119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.978985][ T29] audit: type=1326 audit(1717145773.678:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94d087cee9 code=0x0 [ 196.022964][ T29] audit: type=1804 audit(1717145773.698:654): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3926608196/syzkaller.WAvsDr/10/file0/bus" dev="loop2" ino=1367 res=1 errno=0 [ 196.066871][ T29] audit: type=1804 audit(1717145773.728:655): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3926608196/syzkaller.WAvsDr/10/file0/bus" dev="loop2" ino=1367 res=1 errno=0 [ 196.133862][ T7611] loop0: detected capacity change from 0 to 8 [ 196.163695][ T7613] loop1: detected capacity change from 0 to 8 [ 196.548165][ T7618] loop2: detected capacity change from 0 to 512 [ 197.290243][ T7618] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.302344][ T5135] Bluetooth: hci3: command 0x0406 tx timeout [ 197.308560][ T5135] Bluetooth: hci0: command 0x0406 tx timeout [ 197.318540][ T5135] Bluetooth: hci2: command 0x0406 tx timeout [ 197.431182][ T7618] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 197.488168][ T7618] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 197.503243][ T7618] System zones: 1-12 [ 197.515687][ T7625] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.516034][ T7618] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: e_value size too large [ 197.525365][ T7625] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.525491][ T7625] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.525657][ T7625] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.611179][ T7629] Driver unsupported XDP return value 0 on prog (id 186) dev N/A, expect packet loss! [ 197.621458][ T7618] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 197.654224][ T7618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.966124][ T7172] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.985177][ T7638] loop3: detected capacity change from 0 to 1024 [ 198.011894][ T7638] EXT4-fs: Ignoring removed orlov option [ 198.040231][ T7638] EXT4-fs (loop3): Test dummy encryption mode enabled [ 198.082340][ T7638] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 198.147719][ T7638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.338993][ T7646] loop2: detected capacity change from 0 to 2048 [ 198.388633][ T6548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.411720][ T7646] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.538485][ T29] audit: type=1804 audit(1717145776.238:656): pid=7646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3926608196/syzkaller.WAvsDr/12/file0/bus" dev="loop2" ino=1367 res=1 errno=0 [ 198.586880][ T7650] loop0: detected capacity change from 0 to 8 [ 198.606293][ T29] audit: type=1804 audit(1717145776.238:657): pid=7646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3926608196/syzkaller.WAvsDr/12/file0/bus" dev="loop2" ino=1367 res=1 errno=0 [ 198.680497][ T29] audit: type=1804 audit(1717145776.238:658): pid=7646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3926608196/syzkaller.WAvsDr/12/file0/bus" dev="loop2" ino=1367 res=1 errno=0 [ 198.714192][ T7652] loop3: detected capacity change from 0 to 1024 [ 198.727660][ T7652] EXT4-fs: Ignoring removed orlov option [ 198.752236][ T7652] EXT4-fs (loop3): Test dummy encryption mode enabled [ 198.752605][ T7626] loop1: detected capacity change from 0 to 32768 [ 198.771562][ T7652] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 198.789061][ T7626] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7626) [ 198.823168][ T7652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.848236][ T7626] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 198.887227][ T7632] loop4: detected capacity change from 0 to 32768 [ 198.889528][ T7626] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 198.957732][ T7632] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 199.085494][ T7632] XFS (loop4): Ending clean mount [ 199.097625][ T6548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.172614][ T7626] BTRFS info (device loop1): rebuilding free space tree [ 199.194975][ T5119] XFS (loop4): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 199.481298][ T7687] loop3: detected capacity change from 0 to 512 [ 199.514205][ T7687] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.544948][ T7687] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 199.603586][ T7687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 199.649001][ T7626] BTRFS info (device loop1): disabling free space tree [ 199.656561][ T7687] System zones: 1-12 [ 199.661641][ T7687] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: e_value size too large [ 199.676810][ T7687] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 199.689416][ T7626] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 199.700349][ T7687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.701757][ T7626] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 199.750217][ T58] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 199.973250][ T6548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.001178][ T58] usb 1-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=6b.3f [ 200.034259][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.072254][ T58] usb 1-1: config 0 descriptor?? [ 200.085795][ T58] usb 1-1: unsupported MDLM descriptors [ 200.123745][ T5127] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.134884][ T5127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.151952][ T5127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.164001][ T5127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.172107][ T5127] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.175696][ T7626] BTRFS info (device loop1 state M): max_inline set to 0 [ 200.186612][ T5127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.192662][ T7659] loop2: detected capacity change from 0 to 32768 [ 200.230308][ T7659] BTRFS: device /dev/loop2 (7:2) using temp-fsid e102422f-f04a-4a74-9520-e9695a8cb96a [ 200.264182][ T7659] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7659) [ 200.294732][ T7659] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 200.322201][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.323538][ T5121] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 200.341040][ T7659] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 200.384022][ T7686] loop0: detected capacity change from 0 to 256 [ 200.385887][ T5129] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 200.514782][ T1168] usb 1-1: USB disconnect, device number 4 [ 200.573860][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.618556][ T7659] BTRFS info (device loop2): rebuilding free space tree [ 200.729255][ T7659] BTRFS info (device loop2): disabling free space tree [ 200.754313][ T7659] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 200.768272][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.779499][ T7659] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 200.972846][ T7659] BTRFS info (device loop2 state M): max_inline set to 0 [ 200.995169][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.124437][ T7172] BTRFS info (device loop2): last unmount of filesystem e102422f-f04a-4a74-9520-e9695a8cb96a [ 201.348131][ T7719] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 201.610752][ T7728] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 201.646679][ T12] bridge_slave_1: left allmulticast mode [ 201.665347][ T12] bridge_slave_1: left promiscuous mode [ 201.673279][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.712128][ T12] bridge_slave_0: left allmulticast mode [ 201.723040][ T12] bridge_slave_0: left promiscuous mode [ 201.746518][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.762820][ T7723] loop3: detected capacity change from 0 to 256 [ 201.829112][ T7723] FAT-fs (loop3): Directory bread(block 64) failed [ 201.837133][ T7732] loop1: detected capacity change from 0 to 512 [ 201.853281][ T7723] FAT-fs (loop3): Directory bread(block 65) failed [ 201.881942][ T7723] FAT-fs (loop3): Directory bread(block 66) failed [ 201.891484][ T7732] EXT4-fs (loop1): Unsupported encryption level 5 [ 201.906034][ T7723] FAT-fs (loop3): Directory bread(block 67) failed [ 201.921026][ T7723] FAT-fs (loop3): Directory bread(block 68) failed [ 201.935139][ T7723] FAT-fs (loop3): Directory bread(block 69) failed [ 201.957849][ T7723] FAT-fs (loop3): Directory bread(block 70) failed [ 201.979222][ T7723] FAT-fs (loop3): Directory bread(block 71) failed [ 202.014332][ T7723] FAT-fs (loop3): Directory bread(block 72) failed [ 202.057819][ T7723] FAT-fs (loop3): Directory bread(block 73) failed [ 202.260102][ T5129] Bluetooth: hci0: command tx timeout [ 202.487302][ T7747] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 202.928118][ T7759] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 203.224681][ T7766] Zero length message leads to an empty skb [ 203.437579][ T7769] blktrace: Concurrent blktraces are not allowed on loop7 [ 203.457384][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.489085][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.512405][ T12] bond0 (unregistering): Released all slaves [ 203.594669][ T7689] chnl_net:caif_netlink_parms(): no params data found [ 203.601362][ T7770] loop3: detected capacity change from 0 to 256 [ 203.759440][ T7770] FAT-fs (loop3): Directory bread(block 64) failed [ 203.766279][ T7770] FAT-fs (loop3): Directory bread(block 65) failed [ 203.773364][ T7770] FAT-fs (loop3): Directory bread(block 66) failed [ 203.791788][ T7770] FAT-fs (loop3): Directory bread(block 67) failed [ 203.798588][ T7770] FAT-fs (loop3): Directory bread(block 68) failed [ 203.807530][ T7770] FAT-fs (loop3): Directory bread(block 69) failed [ 203.816418][ T7770] FAT-fs (loop3): Directory bread(block 70) failed [ 203.823159][ T7770] FAT-fs (loop3): Directory bread(block 71) failed [ 203.829944][ T7770] FAT-fs (loop3): Directory bread(block 72) failed [ 203.836613][ T7770] FAT-fs (loop3): Directory bread(block 73) failed [ 203.904364][ T7774] loop0: detected capacity change from 0 to 256 [ 203.976368][ T7774] FAT-fs (loop0): Directory bread(block 64) failed [ 204.011579][ T7774] FAT-fs (loop0): Directory bread(block 65) failed [ 204.043117][ T7778] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 204.072763][ T7774] FAT-fs (loop0): Directory bread(block 66) failed [ 204.111055][ T7774] FAT-fs (loop0): Directory bread(block 67) failed [ 204.117821][ T7774] FAT-fs (loop0): Directory bread(block 68) failed [ 204.179432][ T7774] FAT-fs (loop0): Directory bread(block 69) failed [ 204.197509][ T7774] FAT-fs (loop0): Directory bread(block 70) failed [ 204.215946][ T7782] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 204.216609][ T7774] FAT-fs (loop0): Directory bread(block 71) failed [ 204.269526][ T7774] FAT-fs (loop0): Directory bread(block 72) failed [ 204.292426][ T7774] FAT-fs (loop0): Directory bread(block 73) failed [ 204.327284][ T7689] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.340066][ T5129] Bluetooth: hci0: command tx timeout [ 204.357336][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.386499][ T7689] bridge_slave_0: entered allmulticast mode [ 204.412060][ T7763] loop1: detected capacity change from 0 to 40427 [ 204.422856][ T5129] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 204.426515][ T7689] bridge_slave_0: entered promiscuous mode [ 204.433307][ T5129] Bluetooth: hci2: Injecting HCI hardware error event [ 204.453124][ T5129] Bluetooth: hci2: hardware error 0x00 [ 204.543720][ T12] hsr_slave_0: left promiscuous mode [ 204.572234][ T12] hsr_slave_1: left promiscuous mode [ 204.618007][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.649636][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.689662][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.719707][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.753302][ T7789] loop2: detected capacity change from 0 to 1024 [ 204.790401][ T7791] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 204.797537][ T12] dummy0: left allmulticast mode [ 204.829456][ T12] dummy0: left promiscuous mode [ 204.834796][ T12] veth1_macvtap: left promiscuous mode [ 204.849988][ T12] veth0_macvtap: left promiscuous mode [ 204.857748][ T12] veth1_vlan: left promiscuous mode [ 204.889607][ T12] veth0_vlan: left promiscuous mode [ 205.704448][ T12] team0 (unregistering): Port device macvlan1 removed [ 206.227086][ T12] team0 (unregistering): Port device team_slave_1 removed [ 206.280834][ T12] team0 (unregistering): Port device team_slave_0 removed [ 206.419414][ T5127] Bluetooth: hci0: command tx timeout [ 206.505297][ T5129] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 206.915520][ T7689] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.925357][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.933113][ T7689] bridge_slave_1: entered allmulticast mode [ 206.941700][ T7689] bridge_slave_1: entered promiscuous mode [ 206.984540][ T7801] : renamed from pim6reg1 [ 207.105593][ T7689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.144593][ T7689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.182709][ T7817] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 207.199986][ T7818] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 207.376717][ T7689] team0: Port device team_slave_0 added [ 207.392292][ T7689] team0: Port device team_slave_1 added [ 207.421757][ T7820] loop1: detected capacity change from 0 to 1024 [ 207.457248][ T7823] loop2: detected capacity change from 0 to 256 [ 207.514411][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.536043][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.581019][ T7689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.586938][ T7823] FAT-fs (loop2): Directory bread(block 64) failed [ 207.617228][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.620059][ T7823] FAT-fs (loop2): Directory bread(block 65) failed [ 207.627666][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.651918][ T7823] FAT-fs (loop2): Directory bread(block 66) failed [ 207.676159][ T7823] FAT-fs (loop2): Directory bread(block 67) failed [ 207.695008][ T7823] FAT-fs (loop2): Directory bread(block 68) failed [ 207.705354][ T7689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.712709][ T7823] FAT-fs (loop2): Directory bread(block 69) failed [ 207.734051][ T7823] FAT-fs (loop2): Directory bread(block 70) failed [ 207.754165][ T7823] FAT-fs (loop2): Directory bread(block 71) failed [ 207.778312][ T7823] FAT-fs (loop2): Directory bread(block 72) failed [ 207.796132][ T7823] FAT-fs (loop2): Directory bread(block 73) failed [ 207.894200][ T7689] hsr_slave_0: entered promiscuous mode [ 207.905605][ T7689] hsr_slave_1: entered promiscuous mode [ 207.917257][ T7689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.935867][ T7689] Cannot create hsr debugfs directory [ 208.500260][ T5129] Bluetooth: hci0: command tx timeout [ 208.603610][ T7837] : renamed from pim6reg1 [ 208.832333][ T7826] loop1: detected capacity change from 0 to 32768 [ 208.861560][ T7826] btrfs: Deprecated parameter 'usebackuproot' [ 208.902019][ T7826] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 208.907350][ T7840] : renamed from pim6reg1 [ 208.939756][ T7826] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7826) [ 208.957369][ T7826] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 208.973559][ T7844] : renamed from pim6reg1 [ 208.988098][ T7826] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 209.008551][ T7826] BTRFS info (device loop1): using free-space-tree [ 209.026228][ T7846] loop3: detected capacity change from 0 to 1024 [ 209.134367][ T7689] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 209.174007][ T7689] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 209.213057][ T7826] BTRFS info (device loop1): rebuilding free space tree [ 209.228350][ T7689] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 209.263176][ T7866] ERROR: device name not specified. [ 209.270171][ T7867] loop3: detected capacity change from 0 to 1024 [ 209.281736][ T7689] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 209.287951][ T7867] hfsplus: invalid btree extent records (0 size) [ 209.301548][ T7867] hfsplus: failed to load catalog file [ 209.622366][ T7689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.717847][ T7689] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.763896][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.771197][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.817300][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.824571][ T5174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.976357][ T7689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.986020][ T5121] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 210.182527][ T7884] blktrace: Concurrent blktraces are not allowed on loop7 [ 210.246570][ T7884] loop3: detected capacity change from 0 to 256 [ 210.307594][ T7884] FAT-fs (loop3): Directory bread(block 64) failed [ 210.318090][ T7884] FAT-fs (loop3): Directory bread(block 65) failed [ 210.325048][ T7884] FAT-fs (loop3): Directory bread(block 66) failed [ 210.333515][ T7884] FAT-fs (loop3): Directory bread(block 67) failed [ 210.341149][ T7884] FAT-fs (loop3): Directory bread(block 68) failed [ 210.348235][ T7884] FAT-fs (loop3): Directory bread(block 69) failed [ 210.356904][ T7884] FAT-fs (loop3): Directory bread(block 70) failed [ 210.364164][ T7884] FAT-fs (loop3): Directory bread(block 71) failed [ 210.364688][ T7887] loop0: detected capacity change from 0 to 1024 [ 210.371125][ T7884] FAT-fs (loop3): Directory bread(block 72) failed [ 210.385173][ T7884] FAT-fs (loop3): Directory bread(block 73) failed [ 210.648780][ T7689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.944717][ T7911] ipt_REJECT: TCP_RESET invalid for non-tcp [ 210.965178][ T7908] loop3: detected capacity change from 0 to 128 [ 210.992752][ T7908] befs: Unrecognized mount option "gid=00000000000000000000000'/~xl9m:D42N^t*le2̅7ȵ!6t" or missing value [ 211.315309][ T7689] veth0_vlan: entered promiscuous mode [ 211.357102][ T7689] veth1_vlan: entered promiscuous mode [ 211.514324][ T7689] veth0_macvtap: entered promiscuous mode [ 211.545378][ T7689] veth1_macvtap: entered promiscuous mode [ 211.616319][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.623402][ T7925] blktrace: Concurrent blktraces are not allowed on loop7 [ 211.659537][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.675379][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.713196][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.745049][ T7926] loop3: detected capacity change from 0 to 256 [ 211.749572][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.775688][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.805139][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.805997][ T7926] FAT-fs (loop3): Directory bread(block 64) failed [ 211.826196][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.859967][ T7926] FAT-fs (loop3): Directory bread(block 65) failed [ 211.866681][ T7926] FAT-fs (loop3): Directory bread(block 66) failed [ 211.875631][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.929611][ T7926] FAT-fs (loop3): Directory bread(block 67) failed [ 211.947934][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.969586][ T7926] FAT-fs (loop3): Directory bread(block 68) failed [ 211.976193][ T7926] FAT-fs (loop3): Directory bread(block 69) failed [ 211.989521][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.019407][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.030277][ T7926] FAT-fs (loop3): Directory bread(block 70) failed [ 212.038294][ T7926] FAT-fs (loop3): Directory bread(block 71) failed [ 212.059413][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.069303][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.079530][ T7926] FAT-fs (loop3): Directory bread(block 72) failed [ 212.096685][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.117599][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.140048][ T7926] FAT-fs (loop3): Directory bread(block 73) failed [ 212.149420][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.180877][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.198783][ T7909] loop0: detected capacity change from 0 to 32768 [ 212.209735][ T7689] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.218494][ T7689] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.228966][ T7909] btrfs: Deprecated parameter 'usebackuproot' [ 212.239498][ T7689] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.250248][ T7909] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 212.260347][ T7689] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.271088][ T7909] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (7909) [ 212.361197][ T7909] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 212.378802][ T7909] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 212.388196][ T7909] BTRFS info (device loop0): using free-space-tree [ 212.476374][ T7914] loop2: detected capacity change from 0 to 32768 [ 212.501141][ T7931] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 212.517233][ T7914] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.538090][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.546232][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 212.596263][ T7909] BTRFS info (device loop0): rebuilding free space tree [ 212.618135][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.758813][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.783434][ T7914] XFS (loop2): Ending clean mount [ 212.786097][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.807023][ T7914] XFS (loop2): Quotacheck needed: Please wait. [ 212.961965][ T7914] XFS (loop2): Quotacheck: Done. [ 213.066125][ T5120] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 213.208962][ T7964] evm: overlay not supported [ 213.246504][ T7968] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.316911][ T7172] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.425033][ T7972] loop3: detected capacity change from 0 to 512 [ 213.456196][ T7972] EXT4-fs (loop3): Unsupported encryption level 5 [ 214.029013][ T7990] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 214.538864][ T2849] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.833390][ T2849] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.949847][ T8020] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 215.162248][ T2849] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.263431][ T7995] loop2: detected capacity change from 0 to 32768 [ 215.346727][ T7995] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 215.428962][ T2849] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.654272][ T5127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.665669][ T5127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.679193][ T5127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.688837][ T5127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.734542][ T7995] XFS (loop2): Ending clean mount [ 215.747427][ T5127] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.755079][ T5127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.811800][ T7995] XFS (loop2): Quotacheck needed: Please wait. [ 216.063388][ T7995] XFS (loop2): Quotacheck: Done. [ 216.073062][ T2849] bridge_slave_0: left allmulticast mode [ 216.078758][ T2849] bridge_slave_0: left promiscuous mode [ 216.095156][ T2849] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.239891][ T7172] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 216.305280][ T5172] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 216.509512][ T5172] usb 1-1: Using ep0 maxpacket: 32 [ 216.526443][ T5172] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 216.546681][ T5172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.576492][ T5172] usb 1-1: Product: syz [ 216.584614][ T5172] usb 1-1: Manufacturer: syz [ 216.598439][ T5172] usb 1-1: SerialNumber: syz [ 216.617476][ T5172] usb 1-1: config 0 descriptor?? [ 216.784360][ T5127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.798361][ T5127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.809673][ T5127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.824955][ T5127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.848156][ T5127] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.860468][ T5127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.866151][ T5172] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate [ 216.892682][ T5172] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 216.914249][ T5172] usb 1-1: USB disconnect, device number 5 [ 217.239041][ T2849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.255827][ T2849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.273882][ T2849] bond0 (unregistering): Released all slaves [ 217.860050][ T5127] Bluetooth: hci3: command tx timeout [ 218.028614][ T8093] loop0: detected capacity change from 0 to 2048 [ 218.166401][ T2849] hsr_slave_0: left promiscuous mode [ 218.185817][ T2849] hsr_slave_1: left promiscuous mode [ 218.209531][ T2849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.237111][ T2849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.267160][ T2849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.308846][ T2849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.362227][ T8096] loop2: detected capacity change from 0 to 2048 [ 218.416354][ T2849] dummy0: left allmulticast mode [ 218.422443][ T2849] dummy0: left promiscuous mode [ 218.427977][ T2849] veth1_macvtap: left promiscuous mode [ 218.433940][ T2849] veth0_macvtap: left promiscuous mode [ 218.440101][ T2849] veth1_vlan: left promiscuous mode [ 218.446156][ T2849] veth0_vlan: left promiscuous mode [ 218.900475][ T5127] Bluetooth: hci4: command tx timeout [ 218.914920][ T8096] loop2: p1 < > p4 [ 219.045850][ T8096] loop2: p4 size 8388608 extends beyond EOD, truncated [ 219.176182][ T8080] loop4: detected capacity change from 0 to 32768 [ 219.260256][ T8080] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 219.416485][ T8080] XFS (loop4): Ending clean mount [ 219.449274][ T8080] XFS (loop4): Quotacheck needed: Please wait. [ 219.565758][ T8080] XFS (loop4): Quotacheck: Done. [ 219.611041][ T2849] team0 (unregistering): Port device macvlan1 removed [ 219.687450][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 219.725047][ T7689] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 219.909942][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 219.931291][ T45] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 219.941202][ T5127] Bluetooth: hci3: command tx timeout [ 219.947051][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.957926][ T45] usb 1-1: Product: syz [ 219.963041][ T45] usb 1-1: Manufacturer: syz [ 219.967909][ T45] usb 1-1: SerialNumber: syz [ 219.975969][ T45] usb 1-1: config 0 descriptor?? [ 220.194786][ T45] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate [ 220.222917][ T45] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 220.251028][ T45] usb 1-1: USB disconnect, device number 6 [ 220.325920][ T2849] team0 (unregistering): Port device team_slave_1 removed [ 220.396411][ T2849] team0 (unregistering): Port device team_slave_0 removed [ 220.992206][ T5127] Bluetooth: hci4: command tx timeout [ 221.134232][ T8039] chnl_net:caif_netlink_parms(): no params data found [ 221.306033][ T8132] loop4: detected capacity change from 0 to 128 [ 221.323454][ T8132] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 221.331494][ T8056] chnl_net:caif_netlink_parms(): no params data found [ 221.351685][ T8132] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 221.374844][ T8136] loop2: detected capacity change from 0 to 2048 [ 221.404200][ T7689] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.430165][ T8134] loop0: detected capacity change from 0 to 2048 [ 221.503066][ T8134] loop0: p1 < > p4 [ 221.514745][ T8134] loop0: p4 size 8388608 extends beyond EOD, truncated [ 221.537434][ T8039] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.569659][ T8039] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.577087][ T8039] bridge_slave_0: entered allmulticast mode [ 221.585027][ T8039] bridge_slave_0: entered promiscuous mode [ 221.735061][ T8039] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.785974][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.793655][ T8039] bridge_slave_1: entered allmulticast mode [ 221.801339][ T8039] bridge_slave_1: entered promiscuous mode [ 222.202231][ T5127] Bluetooth: hci3: command tx timeout [ 222.454915][ T8039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.709078][ T8039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.848772][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.869548][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.876869][ T8056] bridge_slave_0: entered allmulticast mode [ 222.884594][ T8056] bridge_slave_0: entered promiscuous mode [ 222.911256][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.919625][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.926912][ T8056] bridge_slave_1: entered allmulticast mode [ 222.942888][ T8056] bridge_slave_1: entered promiscuous mode [ 222.985545][ T8039] team0: Port device team_slave_0 added [ 223.024758][ T8039] team0: Port device team_slave_1 added [ 223.059685][ T5127] Bluetooth: hci4: command tx timeout [ 223.229217][ T8039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.239161][ T8169] overlayfs: missing 'lowerdir' [ 223.249406][ T8039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.281476][ T8039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.314489][ T8056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.344438][ T8056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.532197][ T2849] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.545664][ T8157] loop0: detected capacity change from 0 to 32768 [ 223.612605][ T8039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.637945][ T8039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.689201][ T8039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.753712][ T8180] loop2: detected capacity change from 0 to 2048 [ 223.815686][ T2849] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.048084][ T8056] team0: Port device team_slave_0 added [ 224.112239][ T8056] team0: Port device team_slave_1 added [ 224.495544][ T5127] Bluetooth: hci3: command tx timeout [ 224.800852][ T8039] hsr_slave_0: entered promiscuous mode [ 224.835127][ T8039] hsr_slave_1: entered promiscuous mode [ 224.942297][ T2849] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.046460][ T8192] loop0: detected capacity change from 0 to 2048 [ 225.061388][ T8192] EXT4-fs: Ignoring removed mblk_io_submit option [ 225.109255][ T8192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.139521][ T5127] Bluetooth: hci4: command tx timeout [ 225.286144][ T8192] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 234: padding at end of block bitmap is not set [ 225.311935][ T2849] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.329148][ T8192] EXT4-fs (loop0): Remounting filesystem read-only [ 225.337860][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.350619][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.407099][ T8056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.465745][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.479150][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.519451][ T8056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.537742][ T5120] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.656763][ T8206] loop2: detected capacity change from 0 to 512 [ 225.683282][ T8206] EXT4-fs (loop2): blocks per group (7872) and clusters per group (32768) inconsistent [ 225.715194][ T8056] hsr_slave_0: entered promiscuous mode [ 225.726746][ T8056] hsr_slave_1: entered promiscuous mode [ 225.738107][ T8056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.746076][ T8056] Cannot create hsr debugfs directory [ 225.799648][ T8208] overlayfs: missing 'lowerdir' [ 225.992539][ T8206] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 226.100407][ T8211] loop0: detected capacity change from 0 to 512 [ 226.136780][ T8211] EXT4-fs (loop0): blocks per group (7872) and clusters per group (32768) inconsistent [ 226.218265][ T2849] bridge_slave_1: left allmulticast mode [ 226.229617][ T2849] bridge_slave_1: left promiscuous mode [ 226.243009][ T2849] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.264054][ T2849] bridge_slave_0: left allmulticast mode [ 226.275647][ T2849] bridge_slave_0: left promiscuous mode [ 226.291144][ T2849] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.852539][ T8228] loop2: detected capacity change from 0 to 2048 [ 226.887957][ T8228] loop2: p1 < > p4 [ 226.897225][ T8228] loop2: p4 size 8388608 extends beyond EOD, truncated [ 227.008867][ T8228] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 227.229940][ T2849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.258318][ T2849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.285740][ T2849] bond0 (unregistering): Released all slaves [ 227.494098][ T8217] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 228.068323][ T2849] hsr_slave_0: left promiscuous mode [ 228.084420][ T2849] hsr_slave_1: left promiscuous mode [ 228.108386][ T2849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.131837][ T2849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.176497][ T2849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.184185][ T2849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.254894][ T2849] dummy0: left allmulticast mode [ 228.267133][ T8231] loop2: detected capacity change from 0 to 32768 [ 228.277581][ T2849] dummy0: left promiscuous mode [ 228.284164][ T2849] veth1_macvtap: left promiscuous mode [ 228.292774][ T2849] veth0_macvtap: left promiscuous mode [ 228.315988][ T2849] veth1_vlan: left promiscuous mode [ 228.332710][ T2849] veth0_vlan: left promiscuous mode [ 228.401431][ T8234] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=45, index = 1 [ 228.401431][ T8234] [ 228.441446][ T8234] ERROR: (device loop2): remounting filesystem as read-only [ 228.652793][ T8233] loop0: detected capacity change from 0 to 32768 [ 228.752343][ T8233] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=45, index = 1 [ 228.752343][ T8233] [ 228.789700][ T8233] ERROR: (device loop0): remounting filesystem as read-only [ 228.894041][ T8236] overlayfs: missing 'lowerdir' [ 229.202510][ T8238] loop2: detected capacity change from 0 to 512 [ 229.225836][ T8238] EXT4-fs (loop2): blocks per group (7872) and clusters per group (32768) inconsistent [ 229.852110][ T2849] team0 (unregistering): Port device team_slave_1 removed [ 229.975319][ T2849] team0 (unregistering): Port device team_slave_0 removed [ 230.850136][ T8251] loop0: detected capacity change from 0 to 32768 [ 230.987731][ T8251] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 230.998356][ T8251] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 231.028935][ T8239] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 231.039734][ T8253] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 231.061898][ T8253] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 231.145906][ T8251] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 231.186217][ T45] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 231.197824][ T45] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 231.301235][ T8259] loop4: detected capacity change from 0 to 512 [ 231.334532][ T8259] EXT4-fs (loop4): blocks per group (7872) and clusters per group (32768) inconsistent [ 231.370810][ T8261] vxcan1 speed is unknown, defaulting to 1000 [ 231.386218][ T8261] vxcan1 speed is unknown, defaulting to 1000 [ 231.416492][ T8261] vxcan1 speed is unknown, defaulting to 1000 [ 231.450209][ T45] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 252ms [ 231.463851][ T45] gfs2: fsid=syz:syz.0: jid=0: Done [ 231.473772][ T8251] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 231.615528][ T8039] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 231.696285][ T8259] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 231.736120][ T8039] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 231.841647][ T8039] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 231.875808][ T8039] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 232.000807][ T8266] overlayfs: missing 'lowerdir' [ 232.178948][ T8261] infiniband syz2: set active [ 232.192614][ T8261] infiniband syz2: added vxcan1 [ 232.207467][ T8261] syz2: rxe_create_cq: returned err = -12 [ 232.216266][ T8261] infiniband syz2: Couldn't create ib_mad CQ [ 232.227643][ T8261] infiniband syz2: Couldn't open port 1 [ 232.259755][ T58] vxcan1 speed is unknown, defaulting to 1000 [ 232.308932][ T8261] RDS/IB: syz2: added [ 232.324552][ T8261] smc: adding ib device syz2 with port count 1 [ 232.332673][ T8261] smc: ib device syz2 port 1 has pnetid [ 232.353767][ T58] vxcan1 speed is unknown, defaulting to 1000 [ 232.364353][ T8056] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 232.407802][ T8039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.421897][ T8056] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 232.429917][ T8261] vxcan1 speed is unknown, defaulting to 1000 [ 232.446983][ T8056] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 232.488330][ T8056] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 232.601707][ T8039] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.654425][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.661848][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.701994][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.709466][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.893160][ T8039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.970364][ T8261] vxcan1 speed is unknown, defaulting to 1000 [ 233.008186][ T8056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.033834][ T8265] loop0: detected capacity change from 0 to 32768 [ 233.087026][ T8056] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.134473][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.141835][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.152158][ T8265] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=45, index = 1 [ 233.152158][ T8265] [ 233.183011][ T8265] ERROR: (device loop0): remounting filesystem as read-only [ 233.228156][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.235429][ T5174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.357476][ T8056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.457653][ T8039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.605941][ T8039] veth0_vlan: entered promiscuous mode [ 233.666102][ T8261] vxcan1 speed is unknown, defaulting to 1000 [ 233.673028][ T8039] veth1_vlan: entered promiscuous mode [ 233.762948][ T8270] loop4: detected capacity change from 0 to 32768 [ 233.783554][ T8039] veth0_macvtap: entered promiscuous mode [ 233.843061][ T8039] veth1_macvtap: entered promiscuous mode [ 233.916959][ T8056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.932237][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.953113][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.968429][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.980592][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.990728][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.012311][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.037068][ T8039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.088207][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.115748][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.149956][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.180609][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.224545][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.250547][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.275053][ T8039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.338636][ T8039] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.354721][ T8039] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.369577][ T8039] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.378597][ T8039] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.398867][ T8261] vxcan1 speed is unknown, defaulting to 1000 [ 234.494655][ T8056] veth0_vlan: entered promiscuous mode [ 234.560152][ T8056] veth1_vlan: entered promiscuous mode [ 234.738364][ T2802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.766286][ T2802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.861899][ T8056] veth0_macvtap: entered promiscuous mode [ 234.887919][ T8056] veth1_macvtap: entered promiscuous mode [ 234.925509][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.940774][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.950396][ T8261] vxcan1 speed is unknown, defaulting to 1000 [ 235.069865][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.094679][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.117608][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.147782][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.168383][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.194165][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.227185][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.252976][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.284996][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.338949][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.356530][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.398493][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.424847][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.453220][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.482814][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.514815][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.526975][ T8280] loop0: detected capacity change from 0 to 40427 [ 235.544449][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.581142][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.611546][ T8280] F2FS-fs (loop0): invalid crc value [ 235.621702][ T8056] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.655796][ T8056] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.674001][ T8280] F2FS-fs (loop0): Found nat_bits in checkpoint [ 235.679484][ T8056] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.703669][ T8056] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.924270][ T8280] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 235.966766][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.002307][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.091629][ T2802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.104500][ T2802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.172701][ T8280] syz-executor.0: attempt to access beyond end of device [ 236.172701][ T8280] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 236.296408][ T5120] syz-executor.0: attempt to access beyond end of device [ 236.296408][ T5120] loop0: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 236.341898][ T5120] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 236.349272][ T5120] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 237.583551][ T8300] loop2: detected capacity change from 0 to 32768 [ 237.665580][ T8300] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 237.693021][ T8300] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 237.769730][ T8300] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 237.812045][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 237.819075][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 238.006436][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 187ms [ 238.027611][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 238.042067][ T8300] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 238.398383][ T8309] loop3: detected capacity change from 0 to 32768 [ 238.418323][ T8309] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 238.469530][ T8309] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 238.570641][ T8309] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 238.588251][ T5173] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 238.595378][ T5173] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 238.705480][ T5173] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 110ms [ 238.740358][ T5173] gfs2: fsid=syz:syz.0: jid=0: Done [ 238.746351][ T8309] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 239.182799][ T8320] loop0: detected capacity change from 0 to 32768 [ 239.211251][ T8320] XFS: noikeep mount option is deprecated. [ 239.224336][ T8321] loop1: detected capacity change from 0 to 32768 [ 239.270550][ T8321] XFS: noikeep mount option is deprecated. [ 239.293058][ T8320] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 239.351849][ T8321] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 239.463425][ T8321] XFS (loop1): Ending clean mount [ 239.485594][ T8320] XFS (loop0): Ending clean mount [ 239.491869][ T8321] XFS (loop1): Quotacheck needed: Please wait. [ 239.511537][ T8320] XFS (loop0): Quotacheck needed: Please wait. [ 239.639746][ T8321] XFS (loop1): Quotacheck: Done. [ 239.647291][ T8320] XFS (loop0): Quotacheck: Done. [ 240.392196][ T5120] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 240.436815][ T8039] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 241.029757][ T8351] loop2: detected capacity change from 0 to 40427 [ 241.065930][ T8351] F2FS-fs (loop2): invalid crc value [ 241.122094][ T8351] F2FS-fs (loop2): Found nat_bits in checkpoint [ 241.136001][ T8354] loop3: detected capacity change from 0 to 40427 [ 241.215894][ T8354] F2FS-fs (loop3): invalid crc value [ 241.223313][ T8365] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 241.262100][ T8354] F2FS-fs (loop3): Found nat_bits in checkpoint [ 241.393972][ T8351] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 241.462057][ T8354] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 241.560576][ T8351] syz-executor.2: attempt to access beyond end of device [ 241.560576][ T8351] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 241.587085][ T8354] syz-executor.3: attempt to access beyond end of device [ 241.587085][ T8354] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 241.685625][ T8382] loop1: detected capacity change from 0 to 1024 [ 241.698402][ T8382] ext4: Unknown parameter 'appraise_type' [ 241.706700][ T8380] vxcan1 speed is unknown, defaulting to 1000 [ 241.719042][ T8056] syz-executor.3: attempt to access beyond end of device [ 241.719042][ T8056] loop3: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 241.719687][ T7172] syz-executor.2: attempt to access beyond end of device [ 241.719687][ T7172] loop2: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 241.772933][ T7172] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 241.774598][ T8056] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 241.789530][ T7172] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 241.819515][ T8056] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 242.344687][ T8394] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.842094][ T8403] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.253813][ T8408] loop2: detected capacity change from 0 to 4096 [ 244.536425][ T8441] loop0: detected capacity change from 0 to 4096 [ 244.707647][ T8414] loop4: detected capacity change from 0 to 40427 [ 244.755275][ T8414] F2FS-fs (loop4): invalid crc value [ 244.818484][ T8414] F2FS-fs (loop4): Found nat_bits in checkpoint [ 244.854689][ T8451] vxcan1 speed is unknown, defaulting to 1000 [ 244.945363][ T8452] loop1: detected capacity change from 0 to 1024 [ 244.985239][ T8452] ext4: Unknown parameter 'appraise_type' [ 245.016445][ T8414] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 245.127292][ T8421] loop2: detected capacity change from 0 to 32768 [ 245.188347][ T8421] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 245.199183][ T8414] syz-executor.4: attempt to access beyond end of device [ 245.199183][ T8414] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 245.294493][ T7689] syz-executor.4: attempt to access beyond end of device [ 245.294493][ T7689] loop4: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 245.294581][ T7689] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 245.294620][ T7689] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 245.332632][ T8421] XFS (loop2): Ending clean mount [ 245.336000][ T8421] XFS (loop2): Quotacheck needed: Please wait. [ 245.440428][ T8421] XFS (loop2): Quotacheck: Done. [ 245.465318][ T8437] loop3: detected capacity change from 0 to 32768 [ 245.563928][ T7172] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 245.575047][ T8437] XFS: noikeep mount option is deprecated. [ 245.607468][ T8437] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 245.837612][ T8437] XFS (loop3): Ending clean mount [ 245.848127][ T8437] XFS (loop3): Quotacheck needed: Please wait. [ 245.981717][ T8437] XFS (loop3): Quotacheck: Done. [ 246.563089][ T8056] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 246.671970][ T8500] loop4: detected capacity change from 0 to 256 [ 246.718778][ T8500] process 'syz-executor.4' launched './file1' with NULL argv: empty string added [ 247.288631][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.316962][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.338115][ T8510] loop4: detected capacity change from 0 to 4096 [ 247.344986][ T8512] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.400574][ T29] audit: type=1326 audit(1717145825.108:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf6887cee9 code=0x0 [ 247.604822][ T8522] vxcan1 speed is unknown, defaulting to 1000 [ 247.663947][ T8523] loop3: detected capacity change from 0 to 1024 [ 247.684385][ T8523] ext4: Unknown parameter 'appraise_type' [ 247.700560][ T8510] ntfs3: loop4: failed to convert "0080" to koi8-u [ 247.707733][ T8510] ntfs3: loop4: failed to convert name for inode 1e. [ 247.906799][ T8527] loop1: detected capacity change from 0 to 256 [ 248.119200][ T8505] loop0: detected capacity change from 0 to 32768 [ 249.107446][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 249.132932][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 249.146823][ T8547] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 249.336495][ T8558] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 249.427871][ T8554] loop0: detected capacity change from 0 to 4096 [ 249.451994][ T29] audit: type=1326 audit(1717145827.158:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c4f07cee9 code=0x0 [ 249.697476][ T8554] ntfs3: loop0: failed to convert "0080" to koi8-u [ 249.722162][ T8554] ntfs3: loop0: failed to convert name for inode 1e. [ 249.837755][ T8569] loop4: detected capacity change from 0 to 256 [ 249.879120][ T8545] loop2: detected capacity change from 0 to 32768 [ 249.909155][ T8545] XFS: noikeep mount option is deprecated. [ 249.918643][ T8569] FAT-fs (loop4): Directory bread(block 64) failed [ 249.959536][ T8569] FAT-fs (loop4): Directory bread(block 65) failed [ 249.980781][ T8573] vxcan1 speed is unknown, defaulting to 1000 [ 249.990801][ T8569] FAT-fs (loop4): Directory bread(block 66) failed [ 250.003954][ T8545] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 250.016880][ T8569] FAT-fs (loop4): Directory bread(block 67) failed [ 250.046216][ T8569] FAT-fs (loop4): Directory bread(block 68) failed [ 250.071789][ T8569] FAT-fs (loop4): Directory bread(block 69) failed [ 250.094855][ T8569] FAT-fs (loop4): Directory bread(block 70) failed [ 250.095427][ T8545] XFS (loop2): Ending clean mount [ 250.116865][ T8569] FAT-fs (loop4): Directory bread(block 71) failed [ 250.120085][ T8545] XFS (loop2): Quotacheck needed: Please wait. [ 250.131030][ T8577] loop0: detected capacity change from 0 to 1024 [ 250.143561][ T8569] FAT-fs (loop4): Directory bread(block 72) failed [ 250.157303][ T8569] FAT-fs (loop4): Directory bread(block 73) failed [ 250.182725][ T8577] ext4: Unknown parameter 'appraise_type' [ 250.224310][ T8545] XFS (loop2): Quotacheck: Done. [ 250.372609][ T2849] kworker/u8:10: attempt to access beyond end of device [ 250.372609][ T2849] loop4: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 250.389252][ T8561] loop3: detected capacity change from 0 to 32768 [ 250.695940][ T7172] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 251.594589][ T29] audit: type=1326 audit(1717145829.298:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf6887cee9 code=0x0 [ 251.616955][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.659287][ T29] audit: type=1326 audit(1717145829.348:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94d087cee9 code=0x0 [ 251.833209][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.876197][ T8614] usb usb9: usbfs: process 8614 (syz-executor.4) did not claim interface 0 before use [ 252.345379][ T8599] loop3: detected capacity change from 0 to 32768 [ 252.373661][ T8599] XFS: noikeep mount option is deprecated. [ 252.452936][ T8611] loop1: detected capacity change from 0 to 32768 [ 252.472334][ T8599] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 252.602950][ T8599] XFS (loop3): Ending clean mount [ 252.631049][ T8599] XFS (loop3): Quotacheck needed: Please wait. [ 252.654866][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.691916][ T8634] usb usb9: usbfs: process 8634 (syz-executor.4) did not claim interface 0 before use [ 252.715939][ T8599] XFS (loop3): Quotacheck: Done. [ 253.092572][ T8642] bridge0: port 3(syz_tun) entered blocking state [ 253.108341][ T8642] bridge0: port 3(syz_tun) entered disabled state [ 253.122105][ T8642] syz_tun: entered allmulticast mode [ 253.133298][ T8642] syz_tun: entered promiscuous mode [ 253.142336][ T8642] bridge0: port 3(syz_tun) entered blocking state [ 253.149558][ T8642] bridge0: port 3(syz_tun) entered forwarding state [ 253.183772][ T8637] loop4: detected capacity change from 0 to 4096 [ 253.312426][ T8056] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 253.416509][ T8647] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 253.506750][ T8637] ntfs3: loop4: failed to convert "0080" to koi8-u [ 253.556257][ T8637] ntfs3: loop4: failed to convert name for inode 1e. [ 253.628675][ T8630] loop0: detected capacity change from 0 to 32768 [ 253.631563][ T8649] loop1: detected capacity change from 0 to 4096 [ 253.900485][ T8630] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 253.931827][ T8630] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 253.972297][ T8630] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 253.972297][ T8630] running recovery passes: check_allocations [ 254.022753][ T8649] ntfs3: loop1: failed to convert "0080" to koi8-u [ 254.048174][ T8649] ntfs3: loop1: failed to convert name for inode 1e. [ 254.102129][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 254.128975][ T8668] usb usb9: usbfs: process 8668 (syz-executor.2) did not claim interface 0 before use [ 254.155760][ T8630] bcachefs (loop0): accounting_read... done [ 254.194142][ T8630] bcachefs (loop0): alloc_read... done [ 254.209398][ T8630] bcachefs (loop0): stripes_read... done [ 254.215179][ T8630] bcachefs (loop0): snapshots_read... done [ 254.262825][ T8630] bcachefs (loop0): check_allocations... [ 254.274122][ T8630] btree ptr not marked in member info btree allocated bitmap [ 254.274147][ T8630] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a22d880bb51b703b written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, shutting down [ 254.373515][ T8677] bridge0: port 3(syz_tun) entered blocking state [ 254.373765][ T8677] bridge0: port 3(syz_tun) entered disabled state [ 254.373978][ T8677] syz_tun: entered allmulticast mode [ 254.383999][ T8677] syz_tun: entered promiscuous mode [ 254.389625][ T8677] bridge0: port 3(syz_tun) entered blocking state [ 254.389793][ T8677] bridge0: port 3(syz_tun) entered forwarding state [ 254.495247][ T8630] bcachefs (loop0): inconsistency detected - emergency read only at journal seq 10 [ 254.529538][ T8630] bcachefs (loop0): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 254.569432][ T8630] bcachefs (loop0): bch2_gc_btrees(): error fsck_errors_not_fixed [ 254.588248][ T8630] bucket 0:26 gen 0 has wrong data_type: got btree, should be need_discard, shutting down [ 254.621365][ T8630] bcachefs (loop0): bch2_gc_alloc_done(): error fsck_errors_not_fixed [ 254.662937][ T8630] bcachefs (loop0): bch2_check_allocations(): error fsck_errors_not_fixed [ 254.691166][ T8684] xt_CT: No such helper "pptp" [ 254.694555][ T8630] bcachefs (loop0): bch2_fs_recovery(): error fsck_errors_not_fixed [ 254.716125][ T8630] bcachefs (loop0): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 254.739772][ T8630] bcachefs (loop0): shutting down [ 254.830819][ T8630] bcachefs (loop0): shutdown complete [ 254.863511][ T8694] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 254.889869][ T8694] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 254.935942][ T8663] loop4: detected capacity change from 0 to 32768 [ 255.240315][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 255.596266][ T8713] bridge0: port 3(syz_tun) entered blocking state [ 255.609575][ T8713] bridge0: port 3(syz_tun) entered disabled state [ 255.624394][ T8713] syz_tun: entered allmulticast mode [ 255.643803][ T8713] syz_tun: entered promiscuous mode [ 255.668324][ T8713] bridge0: port 3(syz_tun) entered blocking state [ 255.675003][ T8713] bridge0: port 3(syz_tun) entered forwarding state [ 255.922930][ T8721] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 255.970944][ T8721] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 255.986519][ T8718] xt_CT: No such helper "pptp" [ 256.102558][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.109159][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.508155][ T8711] loop3: detected capacity change from 0 to 32768 [ 256.630582][ T8711] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 256.679547][ T8711] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 256.689886][ T8711] bcachefs (loop3): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 256.689886][ T8711] running recovery passes: check_allocations [ 256.784288][ T8752] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 256.811626][ T8711] bcachefs (loop3): accounting_read... done [ 256.812057][ T8752] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.817631][ T8711] bcachefs (loop3): alloc_read... done [ 256.817708][ T8711] bcachefs (loop3): stripes_read... done [ 256.852820][ T8711] bcachefs (loop3): snapshots_read... done [ 256.854943][ T8752] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 256.866875][ T8711] bcachefs (loop3): check_allocations... [ 256.885369][ T8711] bucket 0:27 data type btree ptr gen 0 missing in alloc btree [ 256.885451][ T8711] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee356 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, shutting down [ 256.893229][ T8752] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.043273][ T8711] bcachefs (loop3): inconsistency detected - emergency read only at journal seq 8 [ 257.064618][ T8711] bcachefs (loop3): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 257.087156][ T8711] bcachefs (loop3): bch2_gc_btrees(): error fsck_errors_not_fixed [ 257.121920][ T8711] bucket 0:0 gen 0 has wrong data_type: got free, should be sb, shutting down [ 257.149972][ T8711] bcachefs (loop3): bch2_gc_alloc_done(): error fsck_errors_not_fixed [ 257.189661][ T8711] bcachefs (loop3): bch2_check_allocations(): error fsck_errors_not_fixed [ 257.213783][ T8711] bcachefs (loop3): bch2_fs_recovery(): error fsck_errors_not_fixed [ 257.243529][ T8711] bcachefs (loop3): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 257.273612][ T8711] bcachefs (loop3): shutting down [ 257.339100][ T8711] ------------[ cut here ]------------ [ 257.345032][ T8711] kernel BUG at fs/bcachefs/super.c:647! 2024/05/31 08:57:15 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 257.378140][ T8711] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 257.378178][ T8711] CPU: 1 PID: 8711 Comm: syz-executor.3 Not tainted 6.10.0-rc1-next-20240531-syzkaller #0 [ 257.378203][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 257.378218][ T8711] RIP: 0010:bch2_fs_free+0x3b1/0x3c0 [ 257.378250][ T8711] Code: e8 54 7b b8 fd e9 1a fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 72 ff ff ff 48 89 df e8 3a 7b b8 fd e9 65 ff ff ff e8 40 8e 52 fd 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 [ 257.378269][ T8711] RSP: 0018:ffffc9000d0e7560 EFLAGS: 00010246 [ 257.378290][ T8711] RAX: ffffffff8443edb0 RBX: ffff88801fc16000 RCX: 0000000000040000 [ 257.378308][ T8711] RDX: ffffc900092d9000 RSI: 000000000003ffff RDI: 0000000000040000 [ 257.378324][ T8711] RBP: 0000000000000002 R08: ffffffff8443ec58 R09: 1ffff11003f82c08 [ 257.378341][ T8711] R10: dffffc0000000000 R11: ffffed1003f82c09 R12: ffff8880545003d0 [ 257.378358][ T8711] R13: 0000000000000000 R14: ffff8880545007a6 R15: 1ffff1100a8a00f4 [ 257.378374][ T8711] FS: 00007f0eb54396c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 257.378393][ T8711] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.378409][ T8711] CR2: 0000001b2bd24000 CR3: 0000000055b26000 CR4: 00000000003506f0 [ 257.378429][ T8711] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.378442][ T8711] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.378457][ T8711] Call Trace: [ 257.378471][ T8711] [ 257.378479][ T8711] ? __die_body+0x88/0xe0 [ 257.378515][ T8711] ? die+0xcf/0x110 [ 257.378548][ T8711] ? do_trap+0x15a/0x3a0 [ 257.378577][ T8711] ? bch2_fs_free+0x3b1/0x3c0 [ 257.378599][ T8711] ? do_error_trap+0x1dc/0x2c0 [ 257.378625][ T8711] ? bch2_fs_free+0x3b1/0x3c0 [ 257.378649][ T8711] ? __pfx_do_error_trap+0x10/0x10 [ 257.378676][ T8711] ? report_bug+0x3e8/0x500 [ 257.378711][ T8711] ? handle_invalid_op+0x34/0x40 [ 257.378745][ T8711] ? bch2_fs_free+0x3b1/0x3c0 [ 257.378763][ T8711] ? exc_invalid_op+0x38/0x50 [ 257.378790][ T8711] ? asm_exc_invalid_op+0x1a/0x20 [ 257.378823][ T8711] ? bch2_fs_free+0x258/0x3c0 [ 257.378842][ T8711] ? bch2_fs_free+0x3b0/0x3c0 [ 257.378863][ T8711] ? bch2_fs_free+0x3b1/0x3c0 [ 257.378886][ T8711] bch2_fs_open+0xb57/0xdf0 [ 257.378921][ T8711] ? __pfx_bch2_fs_open+0x10/0x10 [ 257.378956][ T8711] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 257.378995][ T8711] ? __pfx_bch2_test_super+0x10/0x10 [ 257.379025][ T8711] ? sget+0x2b8/0x620 [ 257.379055][ T8711] ? __pfx_bch2_noset_super+0x10/0x10 [ 257.379085][ T8711] bch2_fs_get_tree+0x75e/0x14d0 [ 257.379123][ T8711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.379159][ T8711] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 257.379186][ T8711] ? bch2_parse_one_mount_opt+0x1fb/0x5e0 [ 257.379250][ T8711] ? __pfx_generic_parse_monolithic+0x10/0x10 [ 257.379287][ T8711] ? apparmor_capable+0x138/0x1b0 [ 257.379314][ T8711] ? bpf_lsm_capable+0x9/0x10 [ 257.379349][ T8711] vfs_get_tree+0x90/0x2a0 [ 257.379385][ T8711] do_new_mount+0x2be/0xb40 [ 257.379421][ T8711] ? __pfx_do_new_mount+0x10/0x10 [ 257.379461][ T8711] __se_sys_mount+0x2d9/0x3c0 [ 257.379499][ T8711] ? __pfx___se_sys_mount+0x10/0x10 [ 257.379533][ T8711] ? exc_page_fault+0x590/0x8c0 [ 257.379559][ T8711] ? __x64_sys_mount+0x20/0xc0 [ 257.379594][ T8711] do_syscall_64+0xf3/0x230 [ 257.379621][ T8711] ? clear_bhb_loop+0x35/0x90 [ 257.379653][ T8711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.379682][ T8711] RIP: 0033:0x7f0eb467e5ea [ 257.379709][ T8711] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 257.379737][ T8711] RSP: 002b:00007f0eb5438ef8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 257.379761][ T8711] RAX: ffffffffffffffda RBX: 00007f0eb5438f80 RCX: 00007f0eb467e5ea [ 257.379778][ T8711] RDX: 0000000020005b00 RSI: 0000000020000100 RDI: 00007f0eb5438f40 [ 257.379793][ T8711] RBP: 0000000020005b00 R08: 00007f0eb5438f80 R09: 0000000000018040 [ 257.379809][ T8711] R10: 0000000000018040 R11: 0000000000000206 R12: 0000000020000100 [ 257.379823][ T8711] R13: 00007f0eb5438f40 R14: 0000000000005b80 R15: 0000000020000080 [ 257.379849][ T8711] [ 257.379856][ T8711] Modules linked in: [ 257.380176][ T8711] ---[ end trace 0000000000000000 ]--- [ 257.433847][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.980210][ T8711] RIP: 0010:bch2_fs_free+0x3b1/0x3c0 [ 257.985584][ T8711] Code: e8 54 7b b8 fd e9 1a fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 72 ff ff ff 48 89 df e8 3a 7b b8 fd e9 65 ff ff ff e8 40 8e 52 fd 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 [ 258.106001][ T8711] RSP: 0018:ffffc9000d0e7560 EFLAGS: 00010246 [ 258.185794][ T8711] RAX: ffffffff8443edb0 RBX: ffff88801fc16000 RCX: 0000000000040000 [ 258.193923][ T8711] RDX: ffffc900092d9000 RSI: 000000000003ffff RDI: 0000000000040000 [ 258.202202][ T8711] RBP: 0000000000000002 R08: ffffffff8443ec58 R09: 1ffff11003f82c08 [ 258.210263][ T8711] R10: dffffc0000000000 R11: ffffed1003f82c09 R12: ffff8880545003d0 [ 258.218324][ T8711] R13: 0000000000000000 R14: ffff8880545007a6 R15: 1ffff1100a8a00f4 [ 258.234742][ T8711] FS: 00007f0eb54396c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 258.244030][ T8711] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.275399][ T8711] CR2: 00007fd7e8080440 CR3: 0000000055b26000 CR4: 00000000003506f0 [ 258.299489][ T8711] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 258.307652][ T8711] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 258.341562][ T8711] Kernel panic - not syncing: Fatal exception [ 258.347985][ T8711] Kernel Offset: disabled [ 258.352314][ T8711] Rebooting in 86400 seconds..