last executing test programs: 24.277922706s ago: executing program 3 (id=224): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f657874656e745f63616368652c6a71666d743d7666736f6c642c6e6f71756f74612c6e6f71756f74612c66617374626f6f742c6e6f696e6c696e655f64656e7472792c6a71666d743d76667376312c6673796e635f6d6f64653d7374726963742c6772706a71756f74613d278c006c6c6f635f6d6f64653d64656661756c742c696e6c696e655f78617474722c00a2b4db502b6ba8210424f7f797a6d9d50d26e73f7291615e17b58a4e3ec9b2e54b87aafbaf0036421993a261bd97b95beab3b8db73ad782b6009737439da6f1d157405f23efa22e2b774ebcf1fbf96b0f516775ed21aecaa6ba0f6d45e71292e1e3a8c4610a5fa5132e3"], 0x1, 0x5517, &(0x7f0000005840)="$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") prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) 23.725570272s ago: executing program 3 (id=227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000250000002000018008000100", @ANYRES32=r3, @ANYBLOB="140002007465616d30"], 0x34}}, 0x0) 23.592510918s ago: executing program 3 (id=228): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001580), r0) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) 23.562496586s ago: executing program 3 (id=229): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@acl}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0x1, 0x44a, &(0x7f0000000e00)="$eJzs3EtvG0UcAPD/2kn6DAmlPBpaCBRExCNp0gc9cAGBxAEkJDgUcQpJWoW6DWqCRKsIAodwRJW4I45IfAJOcEHACYkrfIFKFcqlhZPR2rup69hpnDh1G/9+0rYz3rFm/rs79uzMOgF0reH0nyRif0T8FRED1eztBYar/91cWZz6d2VxKoly+d1/kkq5GyuLU3nR/H37qplyOcvvalDv8gcRk6XSzKUsP7Zw4eOx+ctXXpq9MHlu5tzMxYnTp08cP9J3auJkW+JM47ox9Nnc4UNvvn/17akzVz/87Ye0vfuz/bVxtMtw9eg29Gy7K+uw/pp00tPBhtCSYkSkp6u30v8Hohh7VvcNxBtfdrRxwLYql8vlRt/PmaUysIMl0ekWAJ2Rf9Gn97/5dpeGHveE669Wb4DSuG9mW3VPTxSyMr1197ftNBwRZ5b++zbdYpvmIQAAav2Ujn9ebDT+K8QjNeUeyNZQBiPiwYg4EBEPRcTBiHg4olL20Yh4rMX661dI1o5/Ctc2FdgGpeO/V7K1rdvHf/noLwaLWa6/En9vcna2NHMsOyYj0bsrzY+vU8fPr//5dbN9teO/dEvrz8eCWTuu9dRN0E1PLkxuJeZa17+IGOppFH8S+TJOEhGHImKo5qC0Yvb57w8323fn+NfRhnWm8ncRz1XP/1LUxZ9Lmq5Pjr98auLk2O4ozRwby6+KtX7/Y/mdZvVvKf42SM//3obX/2r8g8nuiPnLV85X1mvnW69j+e+vmt7TbPb670veq6T7stc+nVxYuDQe0Ze8tfb1iVvvzfN5+TT+kaON+/+BuHUkHo+I9CI+EhFPRMSTWdufioinI+LoOvH/+tozH7Ue/zqz8m2Uxj99p/Mftee/9UTx/C8/th5/Lj3/JyqpkeyVjXz+bbSBWzl2AAAAcL8oVJ6BTwqjq+lCYXS0+gz/wdhbKM3NL7xwdu6Ti9PVZ+UHo7eQz3QN1MyHjmdzw3l+oi5/PJs3/qa4p5IfnZorTXc6eOhy+xr1/3yWv9jhxgHbz++1oHvp/9C99H/oXvo/dK+6/r+ph3yB+1Oj7//PO9AO4O4z/ofupf9D99L/oXvp/9CVmv42vrCln/zvqET/hv+aQDclonBPNGPnJ3q2+/Lb1XBXpz+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2uP/AAAA//+Lk+K3") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x0, 0x1) getdents64(r0, &(0x7f0000001f80)=""/70, 0x46) 23.488938659s ago: executing program 3 (id=230): syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000280)={&(0x7f000016f000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000}) 20.026515415s ago: executing program 3 (id=240): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) splice(r0, &(0x7f0000000180), r1, 0x0, 0x800, 0x0) 13.76159822s ago: executing program 4 (id=307): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x80105013, 0x0) 13.618042655s ago: executing program 4 (id=311): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket(0x80000000000000a, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 13.504749999s ago: executing program 4 (id=313): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000004300)=ANY=[@ANYBLOB="140000002f000100000000000000000801"], 0x14}}, 0x0) 13.405854439s ago: executing program 4 (id=314): ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08800, &(0x7f0000000140)=ANY=[], 0x1, 0x67b, &(0x7f0000001d00)="$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") mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x118823, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000400)=ANY=[@ANYBLOB="63726561746f723dd7f3e00c2c6e6c733d64656661756c742c73657373696f6e3d3078666666666666666666666666666637662c63726561746f723d4bbdc7d12c63726561746f723dddf2bd6c2c6e6c733d6370313235302c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030312c626172726965722c626172726965722c706172743d3078303030303030303030303030303031662c73657373696f6e3d3078303030303030303030303030303030392c666f7263652c63726561746f723d160918002c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723da9076de42c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',euid=', @ANYRESDEC=0xee00, @ANYBLOB=',appraise,smackfstransmute=umask,uid=', @ANYRESDEC=0x0, @ANYBLOB=',smackfstransmute=$*..,measure,uid>', @ANYRESDEC=0x0, @ANYBLOB='\t\x00\x00\x00=', @ANYRESDEC=0x0, @ANYBLOB=',dont_hash,\x00'], 0x1, 0x6da, &(0x7f0000004980)="$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") syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x888c22, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0) 13.109301842s ago: executing program 4 (id=318): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f00000016c0)) 12.475088803s ago: executing program 4 (id=324): r0 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'ax-^'}, {0x20, 'TlB^'}]}, 0x15) 3.1384414s ago: executing program 0 (id=377): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f0000ffffff48ffffffff73174ff4ffeb"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 3.083772292s ago: executing program 2 (id=378): r0 = mq_open(&(0x7f00000019c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') mq_notify(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) close(r0) 2.966300849s ago: executing program 2 (id=380): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x0, 0x77f, &(0x7f0000000d00)="$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") prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x2004, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002801400030020fd000000000000000000000000000114000200fc"], 0x5c}}, 0x0) 2.246093645s ago: executing program 1 (id=385): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xb, [@datasec={0x7, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x6}], '1'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], ']'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "8bec"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x61, 0x30]}}, &(0x7f00000004c0)=""/184, 0x57, 0xb8, 0x1}, 0x20) 2.158486994s ago: executing program 1 (id=386): r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000740)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\//\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x1e, 0x1e5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000000)=""/128, 0x4e, 0x80, 0x1}, 0x20) syz_clone(0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 1.458144463s ago: executing program 0 (id=388): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x0, 0xb, 0xd0e0011, 0x210, 0xc6, 0x2e8, 0x1d8, 0x190, 0x2e8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0x0, 'pim6reg1\x00', 'ip6gretap0\x00'}, 0x0, 0x1f0, 0x210, 0x2000000, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x500000000000000, 0x80000000, 0x0, 0x0, 0x0, 0x80, 0x33}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 1.440809534s ago: executing program 2 (id=389): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, 0x0, 0x0) 1.32908677s ago: executing program 1 (id=390): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r1}}, './file1\x00'}) 1.328637478s ago: executing program 0 (id=391): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed0040, &(0x7f0000000200)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@errors_remount}, {@noload}, {@nobarrier}, {@nodiscard}]}, 0xfe, 0x496, &(0x7f0000000580)="$eJzs3MtvVFUYAPDvTqcvHhYRHyBoFYzER0vLQxZuNJi40GiiC4yrOi0EKdTQmgghippgjAtD4t64NPEvcKUbo65M3OLekBDDBnR1zZ17h06HmT7stFOc3y+5cM69d+ac7545M2fOudMAutZw9k8SsSUirkbEUESUG08Yzv+7deNi5e8bFytJpOkbfyXZw+LmjYuV4imqW2ZzviNNi3x/k3Ivvx0xMT09da7Ij86deW909vyFZ0+dmTg5dXLq7PjRo4cO7uk7Mn64LXFmcd3c9eHM7p0vv3Xl1crxK+/88l1W3y3F8Voc7TScX92mnmh3YR22tS6dlDtYEVYka7feYrsaQ9ETg7ePDcVLn3S0csCaStM0bfb5XLiUAv9jSXS6BkBn1D7os++/tW2dhh4bwvUX8gmPLO5bxZYfKUepOKe34fttOw1ExPFL/3ydbbFG8xAAAPV+yMY/zzQb/5Xigbrz7inWULZFxL0RsT0i7ouIHRFxf0T13Acj4qEVlt+4QlIt/1j9ntK1BSekPSssYXHZ+O/5Ym1r4fivNvqLbT1Fbms1/t7kxKnpqQPFNdkfvf1ZfmzBQxb68djvXzbu+6KYZh+uG/9lW1b+wghL18oNE3STE3MTq488d/3jiF3lZvEnt9cBk4jYGRG7/mMZp576dnerY83ir42Fl9SGdab0m4gn8/a/FA3x1yQt1yfHnjsyfnh0IKanDozWXhV3+vW3y6+3Kn9V8bdB1v6bmr7+8/iz74jJQMTs+Qunq+u1sysv4/Ifn1WSFsd2LBn/na//yr6IvuTNarqv2PfBxNzcubFs/ytZdnDB/vH5x9bytfOz+PfvnY9/Iub7//b861n1SjwcEdmLeE9EPBIRjxZt91hEPB4Re+vq19cQ488v7nu31bVp3f6LzMq3URb/5CLtn73lZan59l95ouf0T9+3Kj9dVvsfqqb2F3uW8/633Aqu5toBAADA3aJUvQc+KY3cTpdKIyP5Pfw7YlNpemZ27ukTM++fnczvld8WvaXaTNdQ3XzoWDE3XMuPN+QPFvPGX/UMVvMjlZnpyU4HD11uc4v+n/mzvUstwEbk91rQvZbq/5+uUz2A9efzH7qX/g/dS/+HLtV4t3Lho/WuB9ARK//8H1iTegDrz/gfupf+D91L/4eu1PK38aVV/eT/bk2U1+SZeyNi9c8zuAGuT10iShuiGu1LvPZ53iWWdXLas24VKy/7j1ncmeiPiCVP7m96qNPvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO3xbwAAAP//szTgAw==") syz_open_dev$vim2m(0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) fstat(0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x48d0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080), 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000206010100000000000000000000000005000100070000000900020073797a30000000000c00078008001240000000000500050002000000050004000000000010000300686173683a6970"], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) mmap(&(0x7f000036a000/0x3000)=nil, 0x3000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) 1.192728731s ago: executing program 2 (id=392): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 1.137179603s ago: executing program 1 (id=393): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-arm64-neon\x00'}, 0x58) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x6, 0x2a3, &(0x7f0000000180)="$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") r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) writev(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0xfffffffe}]}}, 0x0, 0x26}, 0x20) socket$xdp(0x2c, 0x3, 0x0) r3 = socket(0x18, 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'geneve1\x00'}}, 0x1e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'vxcan0\x00'}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r4, &(0x7f0000000380)=[{&(0x7f00000010c0)="aabf75aa76c3ada74bf44ac8955581057e1778604df77693559ffad6cc78741642e0f21c507a79c29daba641a268ce55abe36b0fa2268a6fffbb8016b62549418cd3f951d1850854ec210ea8034faf1626e616a36c6bc0c9b4372b0e28213019e3db182fd0858a17e87ff7a5dddc89594225d78441a533082ed3e8047f12269778c40721cacf71f32543874a345938224419dce2fd44b7a62c1d0d98a0cf23c2fc16894ba549a2edfb7e300f14c30f64429d25ea9b26b9fbf839fb039e46bc8dcf12d7ce62c8cbc9f0d5ffff56a577edd86949d10e6e37e3", 0xd8}], 0x1, 0xf1, 0x5) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 890.443041ms ago: executing program 2 (id=394): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x30}}, 0x0) 259.560282ms ago: executing program 0 (id=395): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104307, 0x0) 229.771733ms ago: executing program 1 (id=396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="140004006e69637666300000000000000000000008000500060000001c00761f6106519bdf77e4bf6191787c829f2a4d94bca326e7340c670c001780040006"], 0x60}}, 0x0) 93.735548ms ago: executing program 0 (id=397): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) shutdown(r0, 0x0) connect$pptp(r0, 0x0, 0x0) 10.518071ms ago: executing program 0 (id=398): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x80000000, 0x1a) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaeaaaaaaaaa00008c96860086dd6000000000140600fe8000000000000000000000000000aafe80000000000000aa"], 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 0s ago: executing program 2 (id=399): r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000780)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000010c0)="aabf", 0x2}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): is strongly recommended to keep mac addresses unique to avoid problems! [ 41.669190][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.672453][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.678120][ T6379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.680809][ T6462] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 41.688496][ T6462] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 41.718050][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.720883][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.729890][ T6466] loop3: detected capacity change from 0 to 2048 [ 41.732482][ T6462] System zones: 0-1, 15-15, 18-18, 34-34 [ 41.736902][ T6462] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.738970][ T6462] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 41.740296][ T6466] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 41.741837][ T6462] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 41.748613][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.751901][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.762754][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.765574][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.766239][ T6462] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 41.770132][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.771966][ T6462] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz.1.2: bad orphan inode 16 [ 41.775256][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.782199][ T6462] ext4_test_bit(bit=15, block=18) = 1 [ 41.784238][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.789330][ T6462] is_bad_inode(inode)=0 [ 41.790469][ T6462] NEXT_ORPHAN(inode)=0 [ 41.791581][ T6462] max_ino=32 [ 41.792435][ T6462] i_nlink=2 [ 41.793911][ T6379] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.796198][ T6379] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.798475][ T6379] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.800761][ T6379] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.814318][ T6462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.829605][ T6376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.831968][ T6376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.836402][ T6462] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 41.842795][ T6376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.845339][ T6376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.861342][ T6374] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.881072][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.887411][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.941792][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.948953][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.988960][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.991112][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.057568][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.059858][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.066824][ T6474] loop1: detected capacity change from 0 to 512 [ 42.084495][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.086672][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.109598][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.111759][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.138181][ T6474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.179508][ T6481] loop2: detected capacity change from 0 to 512 [ 42.237325][ T6481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.320447][ T6490] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 42.383907][ T6387] Bluetooth: hci0: command tx timeout [ 42.384550][ T6380] Bluetooth: hci2: command tx timeout [ 42.433859][ T6377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.451484][ T6374] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.463139][ T6380] Bluetooth: hci3: command tx timeout [ 42.463429][ T6387] Bluetooth: hci4: command tx timeout [ 42.464673][ T6380] Bluetooth: hci1: command tx timeout [ 42.511780][ T6499] loop0: detected capacity change from 0 to 1024 [ 42.554312][ T6499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.624144][ T6504] netlink: 'syz.1.16': attribute type 20 has an invalid length. [ 42.666085][ T6510] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.764384][ T6376] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.800625][ T6515] Zero length message leads to an empty skb [ 42.978269][ T6518] Cannot find set identified by id 0 to match [ 43.045186][ T6518] loop3: detected capacity change from 0 to 512 [ 43.052251][ T6518] EXT4-fs: Ignoring removed bh option [ 43.118318][ T6518] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 43.121427][ T6518] EXT4-fs (loop3): group descriptors corrupted! [ 43.578731][ T6523] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.591593][ T6515] loop1: detected capacity change from 0 to 128 [ 43.592322][ T6523] bridge0: port 3(vlan2) entered blocking state [ 43.610979][ T6523] bridge0: port 3(vlan2) entered disabled state [ 43.613035][ T6523] vlan2: entered allmulticast mode [ 43.615175][ T6523] vlan2: entered promiscuous mode [ 43.616728][ T6523] bridge0: adding interface vlan2 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 44.463870][ T6380] Bluetooth: hci2: command tx timeout [ 44.466717][ T5944] Bluetooth: hci0: command tx timeout [ 44.585325][ T6380] Bluetooth: hci4: command tx timeout [ 44.585979][ T6387] Bluetooth: hci3: command tx timeout [ 44.587767][ T5944] Bluetooth: hci1: command tx timeout [ 44.684835][ T6538] netlink: 'syz.0.30': attribute type 4 has an invalid length. [ 44.714454][ T6538] netlink: 'syz.0.30': attribute type 4 has an invalid length. [ 44.764535][ T6538] 9pnet_fd: Insufficient options for proto=fd [ 44.783677][ T6511] loop4: detected capacity change from 0 to 32768 [ 44.801247][ T6511] ======================================================= [ 44.801247][ T6511] WARNING: The mand mount option has been deprecated and [ 44.801247][ T6511] and is ignored by this kernel. Remove the mand [ 44.801247][ T6511] option from the mount to silence this warning. [ 44.801247][ T6511] ======================================================= [ 44.865066][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 44.888631][ T6547] netlink: 'syz.2.32': attribute type 8 has an invalid length. [ 45.654350][ T6511] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,compression=gzip,str_hash=crc32c,nojournal_transaction_names,nocow [ 45.658785][ T6511] bcachefs (loop4): recovering from clean shutdown, journal seq 7 [ 45.687569][ T6569] loop1: detected capacity change from 0 to 512 [ 45.693612][ T6511] bcachefs (loop4): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 45.703303][ T6511] bcachefs (loop4): bch2_fs_recovery(): error EINTR [ 45.711949][ T6511] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR [ 45.717619][ T6511] bcachefs (loop4): shutting down [ 45.721591][ T6569] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz.1.37: bad orphan inode 15 [ 45.736731][ T6569] EXT4-fs (loop1): Remounting filesystem read-only [ 45.738865][ T6569] ext4_test_bit(bit=14, block=5) = 0 [ 45.741235][ T6569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.748347][ T6511] bcachefs (loop4): shutdown complete [ 45.777331][ T6568] loop3: detected capacity change from 0 to 4096 [ 45.788958][ T6568] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 45.956617][ T6568] ntfs3: loop3: failed to convert "c46c" to iso8859-9 [ 45.998229][ T6564] loop2: detected capacity change from 0 to 32768 [ 46.005560][ T6564] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.36 (6564) [ 46.020564][ T6564] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 46.023759][ T6564] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 46.026292][ T6564] BTRFS info (device loop2): using free-space-tree [ 46.153908][ C1] net_ratelimit: 2 callbacks suppressed [ 46.153926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 46.615920][ T6387] Bluetooth: hci0: command tx timeout [ 46.617621][ T6387] Bluetooth: hci2: command tx timeout [ 46.624158][ T6387] Bluetooth: hci3: command tx timeout [ 46.625734][ T6387] Bluetooth: hci1: command tx timeout [ 46.627724][ T6387] Bluetooth: hci4: command tx timeout [ 46.788381][ T6374] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.030338][ T6617] MPI: mpi too large (16392 bits) [ 48.109576][ T6591] loop3: detected capacity change from 0 to 40427 [ 48.135792][ T6591] F2FS-fs (loop3): invalid crc value [ 48.157486][ T6591] F2FS-fs (loop3): Found nat_bits in checkpoint [ 48.237983][ T6591] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 48.532494][ T6626] loop1: detected capacity change from 0 to 4096 [ 48.538878][ T6626] ntfs3: Unknown parameter 'mid' [ 48.867154][ T6377] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 49.391594][ T6591] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 49.959032][ T6373] syz-executor: attempt to access beyond end of device [ 49.959032][ T6373] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 49.991186][ T6373] syz-executor: attempt to access beyond end of device [ 49.991186][ T6373] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 49.991830][ T6642] loop4: detected capacity change from 0 to 16 [ 50.012170][ T6642] erofs: (device loop4): mounted with root inode @ nid 36. [ 50.082111][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 50.089231][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 84 @ nid 36 [ 50.091757][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 80 @ nid 36 [ 50.115036][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 74 @ nid 36 [ 50.123577][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 50.126167][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 50.128548][ T6642] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 62 of nid 36 [ 50.131466][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 50.140414][ T6642] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 62 of nid 36 [ 50.144591][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 62 @ nid 36 [ 50.148718][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 50.151302][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 57 @ nid 36 [ 50.154509][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 50.157164][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 53 @ nid 36 [ 50.160339][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 52 @ nid 36 [ 50.166668][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 51 @ nid 36 [ 50.171499][ T6642] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 50 of nid 36 [ 50.178371][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 50 @ nid 36 [ 50.181655][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 50.184569][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 50.187417][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 50.190017][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 50.212223][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 50.215954][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 34 @ nid 36 [ 50.218800][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 32 @ nid 36 [ 50.221452][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 30 @ nid 36 [ 50.224221][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 27 @ nid 36 [ 50.231383][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 26 @ nid 36 [ 50.234233][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 50.237093][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 50.240834][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 21 @ nid 36 [ 50.255937][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 20 @ nid 36 [ 50.259446][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 18 @ nid 36 [ 50.262123][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 12 @ nid 36 [ 50.265395][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 10 @ nid 36 [ 50.268624][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 50.276070][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 50.283290][ T6642] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 50.289104][ T6642] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 50.303096][ T6642] syz.4.58: attempt to access beyond end of device [ 50.303096][ T6642] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 50.311955][ T6642] syz.4.58: attempt to access beyond end of device [ 50.311955][ T6642] loop4: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 50.315965][ T6642] syz.4.58: attempt to access beyond end of device [ 50.315965][ T6642] loop4: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 50.321641][ T6642] syz.4.58: attempt to access beyond end of device [ 50.321641][ T6642] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 50.325825][ T6642] syz.4.58: attempt to access beyond end of device [ 50.325825][ T6642] loop4: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 50.333684][ T6642] syz.4.58: attempt to access beyond end of device [ 50.333684][ T6642] loop4: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 50.342841][ T6642] syz.4.58: attempt to access beyond end of device [ 50.342841][ T6642] loop4: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 50.347039][ T6642] syz.4.58: attempt to access beyond end of device [ 50.347039][ T6642] loop4: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 50.379077][ T6654] loop1: detected capacity change from 0 to 4096 [ 50.382223][ T6654] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 50.398847][ T6654] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 50.497594][ T6661] loop2: detected capacity change from 0 to 512 [ 50.554702][ T6661] loop2: detected capacity change from 0 to 4096 [ 50.556763][ T6661] ntfs3: Unknown parameter ' [ 50.556763][ T6661] ' [ 50.580177][ T6664] loop1: detected capacity change from 0 to 64 [ 50.587590][ T6664] hfs: file_umask requires a value [ 50.589382][ T6664] hfs: unable to parse mount options [ 50.658686][ T6666] loop4: detected capacity change from 0 to 256 [ 50.680832][ T6666] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 50.835398][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 50.837832][ T6672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.73'. [ 50.883140][ T6671] loop1: detected capacity change from 0 to 4096 [ 50.887998][ T6671] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 50.933426][ T6671] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 51.017898][ T328] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.043446][ T6387] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.051917][ T6387] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.062183][ T6387] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.069737][ T6678] netlink: 'syz.2.76': attribute type 10 has an invalid length. [ 51.080599][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.083730][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.086869][ T6385] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.091040][ T6385] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.094883][ T6385] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.097248][ T6385] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.112703][ T6387] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.114798][ T6387] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.116806][ T6387] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.120321][ T5944] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 51.122505][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.157006][ T6678] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.159109][ T6678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.162174][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.164793][ T6678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.194660][ T6678] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 51.295998][ T328] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.382909][ T6674] loop4: detected capacity change from 0 to 32768 [ 51.386260][ T6686] loop2: detected capacity change from 0 to 2048 [ 51.436002][ T6674] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 51.464739][ T6694] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 51.474410][ T328] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.521088][ T6686] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=255 [ 51.556831][ T6686] Remounting filesystem read-only [ 51.574814][ T6674] XFS (loop4): Ending clean mount [ 51.617096][ T328] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.635957][ T3793] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x8 [ 51.639440][ T3793] XFS (loop4): Unmount and run xfs_repair [ 51.640936][ T3793] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 51.648102][ T3793] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 51.650414][ T3793] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 51.654355][ T3793] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 51.656683][ T3793] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 51.658894][ T3793] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 51.661095][ T3793] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 51.684048][ T3793] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 51.692879][ T3793] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 51.696330][ T6674] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x8 len 8 error 74 [ 51.719864][ T6679] chnl_net:caif_netlink_parms(): no params data found [ 51.772724][ T6674] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x5a0/0xb24 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 51.777241][ T6674] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 51.827799][ T6379] XFS (loop4): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 51.896526][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.898555][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.900734][ T6679] bridge_slave_0: entered allmulticast mode [ 51.923544][ T6679] bridge_slave_0: entered promiscuous mode [ 51.933318][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.935337][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.937359][ T6679] bridge_slave_1: entered allmulticast mode [ 51.939464][ T6679] bridge_slave_1: entered promiscuous mode [ 52.057785][ T6702] loop2: detected capacity change from 0 to 32768 [ 52.073901][ T6702] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.80 (6702) [ 52.110018][ T6702] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 52.124610][ T6702] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 52.127005][ T6702] BTRFS info (device loop2): using free-space-tree [ 52.129747][ T6679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.155687][ T6679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.218393][ T6723] TCP segment has incorrect auth options set for [fe80::bb].0->[ff02::1].20002 [FP.] [ 52.268066][ T6679] team0: Port device team_slave_0 added [ 52.294488][ T328] bridge_slave_1: left allmulticast mode [ 52.301061][ T328] bridge_slave_1: left promiscuous mode [ 52.324148][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.378414][ T328] bridge_slave_0: left allmulticast mode [ 52.379994][ T328] bridge_slave_0: left promiscuous mode [ 52.381575][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.459086][ T6377] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 52.668093][ T6746] loop4: detected capacity change from 0 to 512 [ 52.688173][ T6746] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.691596][ T6746] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.718141][ T6746] EXT4-fs (loop4): 1 truncate cleaned up [ 52.720189][ T6746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.840828][ T6379] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.196799][ T5944] Bluetooth: hci2: command tx timeout [ 53.197127][ T6380] Bluetooth: hci0: command tx timeout [ 53.240144][ T6761] tmpfs: Bad value for 'gid' [ 53.885882][ T6753] loop2: detected capacity change from 0 to 131072 [ 53.912047][ T6753] F2FS-fs (loop2): Found nat_bits in checkpoint [ 53.933441][ T6753] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 53.985376][ T6753] F2FS-fs (loop2): lookup inode (7) has corrupted xattr [ 53.992973][ T6753] F2FS-fs (loop2): lookup inode (7) has corrupted xattr [ 53.995091][ T6753] F2FS-fs (loop2): lookup inode (7) has corrupted xattr [ 54.100694][ T328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.150167][ T328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.195121][ T328] bond0 (unregistering): Released all slaves [ 54.204375][ T6679] team0: Port device team_slave_1 added [ 54.206221][ T6681] chnl_net:caif_netlink_parms(): no params data found [ 54.305109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 54.318457][ T6771] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 54.320531][ T6771] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 54.334438][ T6771] vhci_hcd vhci_hcd.0: Device attached [ 54.343624][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.345536][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.352413][ T6679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.352982][ T6772] vhci_hcd: connection closed [ 54.372926][ T4368] vhci_hcd: stop threads [ 54.376334][ T4368] vhci_hcd: release socket [ 54.377605][ T4368] vhci_hcd: disconnect device [ 54.405495][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.407426][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.432706][ T6679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.854595][ T6679] hsr_slave_0: entered promiscuous mode [ 54.903729][ T6679] hsr_slave_1: entered promiscuous mode [ 54.945456][ T6679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.948312][ T6679] Cannot create hsr debugfs directory [ 55.262700][ T6380] Bluetooth: hci0: command tx timeout [ 55.263788][ T5944] Bluetooth: hci2: command tx timeout [ 55.303538][ T6681] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.305585][ T6681] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.307583][ T6681] bridge_slave_0: entered allmulticast mode [ 55.309807][ T6681] bridge_slave_0: entered promiscuous mode [ 55.330102][ T6681] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.332091][ T6681] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.350456][ T6681] bridge_slave_1: entered allmulticast mode [ 55.353843][ T6681] bridge_slave_1: entered promiscuous mode [ 55.429457][ T6785] loop4: detected capacity change from 0 to 40427 [ 55.455048][ T6785] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 55.463215][ T6785] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 55.476326][ T328] hsr_slave_0: left promiscuous mode [ 55.485036][ T6785] F2FS-fs (loop4): Found nat_bits in checkpoint [ 55.501743][ T6785] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 55.507410][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.102'. [ 55.512916][ T328] hsr_slave_1: left promiscuous mode [ 55.518025][ T6785] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 55.520036][ T6785] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 55.586628][ T328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.588818][ T328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.595159][ T328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.597223][ T328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.626223][ T328] veth1_macvtap: left promiscuous mode [ 55.635175][ T328] veth0_macvtap: left promiscuous mode [ 55.640171][ T328] veth1_vlan: left promiscuous mode [ 55.647433][ T328] veth0_vlan: left promiscuous mode [ 57.342711][ T5944] Bluetooth: hci0: command tx timeout [ 57.352803][ T5944] Bluetooth: hci2: command tx timeout [ 57.708496][ T328] team0 (unregistering): Port device team_slave_1 removed [ 57.929140][ T328] team0 (unregistering): Port device team_slave_0 removed [ 59.423956][ T6380] Bluetooth: hci0: command tx timeout [ 59.425577][ T5944] Bluetooth: hci2: command tx timeout [ 60.570779][ T6681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.581585][ T6681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.663651][ T6681] team0: Port device team_slave_0 added [ 60.806662][ T6681] team0: Port device team_slave_1 added [ 61.054436][ T6834] loop4: detected capacity change from 0 to 512 [ 61.066361][ T6834] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.087495][ T6834] EXT4-fs: old and new quota format mixing [ 61.114413][ T6831] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.117595][ T6831] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.120075][ T6831] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.122828][ T6831] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.221124][ T6834] loop4: detected capacity change from 0 to 1764 [ 61.331066][ T6681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.349404][ T6681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.422085][ T6681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.445189][ T6681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.447109][ T6681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.499445][ T6681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.648131][ T6380] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 61.654040][ T6380] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 61.663061][ T6380] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 61.670716][ T6380] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 61.682878][ T6380] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 61.685131][ T6380] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 61.936357][ T6681] hsr_slave_0: entered promiscuous mode [ 61.979163][ T6681] hsr_slave_1: entered promiscuous mode [ 61.989230][ T6866] netlink: 'syz.2.118': attribute type 1 has an invalid length. [ 61.991460][ T6866] netlink: 'syz.2.118': attribute type 3 has an invalid length. [ 61.994100][ T6866] netlink: 224 bytes leftover after parsing attributes in process `syz.2.118'. [ 62.022785][ T6681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.025081][ T6681] Cannot create hsr debugfs directory [ 62.216261][ T6876] openvswitch: netlink: Missing key (keys=40, expected=80) [ 62.414041][ T6882] block nbd2: shutting down sockets [ 62.429737][ T6387] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.437130][ T6387] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.440205][ T6387] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.443104][ T6387] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.446251][ T6387] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.448325][ T6387] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.687437][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'. [ 62.735990][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'. [ 62.824410][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'. [ 62.846085][ T328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.856142][ T6849] chnl_net:caif_netlink_parms(): no params data found [ 62.918779][ T6679] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.994559][ T328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.066237][ T6681] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.075056][ T6679] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.080420][ T6679] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.175663][ T328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.194669][ T6679] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.294420][ T6681] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.352516][ T6919] loop2: detected capacity change from 0 to 32768 [ 63.363074][ T328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.363347][ T6919] btrfs: Bad value for 'subvolid' [ 63.372422][ T6849] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.375753][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.378249][ T6849] bridge_slave_0: entered allmulticast mode [ 63.380929][ T6849] bridge_slave_0: entered promiscuous mode [ 63.386223][ T6849] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.388163][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.390068][ T6849] bridge_slave_1: entered allmulticast mode [ 63.392433][ T6849] bridge_slave_1: entered promiscuous mode [ 63.425082][ T6826] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 63.525397][ T6681] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.640362][ T6681] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.670636][ T6849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.681684][ T6849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.691048][ T6679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.779908][ T6883] chnl_net:caif_netlink_parms(): no params data found [ 63.790764][ T6849] team0: Port device team_slave_0 added [ 63.808915][ T6679] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.822978][ T6380] Bluetooth: hci5: command tx timeout [ 63.859248][ T6467] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.861200][ T6467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.881461][ T6849] team0: Port device team_slave_1 added [ 63.891096][ T6938] loop2: detected capacity change from 0 to 40427 [ 63.897936][ T6467] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.900223][ T6467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.908191][ T6938] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 63.910384][ T6938] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 63.934230][ T6938] F2FS-fs (loop2): Found nat_bits in checkpoint [ 63.967883][ T6938] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 63.969775][ T6938] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 64.014583][ T328] bridge_slave_1: left allmulticast mode [ 64.016194][ T328] bridge_slave_1: left promiscuous mode [ 64.017792][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.033811][ T328] bridge_slave_0: left allmulticast mode [ 64.035327][ T328] bridge_slave_0: left promiscuous mode [ 64.036871][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.055108][ T328] vlan2: left allmulticast mode [ 64.056424][ T328] vlan2: left promiscuous mode [ 64.057770][ T328] bridge0: port 3(vlan2) entered disabled state [ 64.060125][ T6520] bio_check_eod: 14 callbacks suppressed [ 64.060139][ T6520] kworker/u8:12: attempt to access beyond end of device [ 64.060139][ T6520] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 64.070001][ T328] bridge_slave_1: left allmulticast mode [ 64.071503][ T328] bridge_slave_1: left promiscuous mode [ 64.072577][ T6520] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 64.075167][ T6520] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 64.083126][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.096796][ T328] bridge_slave_0: left allmulticast mode [ 64.098975][ T328] bridge_slave_0: left promiscuous mode [ 64.101400][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.142423][ T6377] syz-executor: attempt to access beyond end of device [ 64.142423][ T6377] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 64.160335][ T6377] syz-executor: attempt to access beyond end of device [ 64.160335][ T6377] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 64.545301][ T6387] Bluetooth: hci1: command tx timeout [ 64.548070][ T2321] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.550260][ T2321] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.902766][ T6387] Bluetooth: hci5: command tx timeout [ 66.346824][ T328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.385699][ T328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.435196][ T328] bond0 (unregistering): Released all slaves [ 66.622996][ T6387] Bluetooth: hci1: command tx timeout [ 67.156796][ T328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.196545][ T328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.235266][ T328] bond0 (unregistering): Released all slaves [ 67.251361][ T6849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.253463][ T6849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.260164][ T6849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.265237][ T6849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.267072][ T6849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.274627][ T6849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.410619][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.412811][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.414857][ T6883] bridge_slave_0: entered allmulticast mode [ 67.417056][ T6883] bridge_slave_0: entered promiscuous mode [ 67.424149][ T6681] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.434865][ T6681] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.494458][ T6849] hsr_slave_0: entered promiscuous mode [ 67.543174][ T6849] hsr_slave_1: entered promiscuous mode [ 67.582874][ T6849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.585281][ T6849] Cannot create hsr debugfs directory [ 67.588129][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.590763][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.594741][ T6883] bridge_slave_1: entered allmulticast mode [ 67.597029][ T6883] bridge_slave_1: entered promiscuous mode [ 67.612103][ T6883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.616849][ T6883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.732237][ T6380] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.737491][ T6380] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.740254][ T6380] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.748721][ T6380] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.751944][ T6380] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.754516][ T6380] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.781794][ T6681] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.785660][ T6681] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.843757][ T6883] team0: Port device team_slave_0 added [ 67.914963][ T6883] team0: Port device team_slave_1 added [ 67.983183][ T6387] Bluetooth: hci5: command tx timeout [ 68.127212][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.129239][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.137664][ T6883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.168171][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.170141][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.177718][ T6883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.250798][ T6679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.346600][ T6883] hsr_slave_0: entered promiscuous mode [ 68.403762][ T6883] hsr_slave_1: entered promiscuous mode [ 68.443150][ T6883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.445326][ T6883] Cannot create hsr debugfs directory [ 68.702824][ T6387] Bluetooth: hci1: command tx timeout [ 68.961342][ T6978] chnl_net:caif_netlink_parms(): no params data found [ 68.998176][ T6681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.069992][ T6978] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.072006][ T6978] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.074889][ T6978] bridge_slave_0: entered allmulticast mode [ 69.077191][ T6978] bridge_slave_0: entered promiscuous mode [ 69.093679][ T6681] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.135079][ T6429] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.137058][ T6429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.143783][ T6429] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.145753][ T6429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.149490][ T6978] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.151474][ T6978] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.164590][ T6978] bridge_slave_1: entered allmulticast mode [ 69.166845][ T6978] bridge_slave_1: entered promiscuous mode [ 69.177125][ T328] hsr_slave_0: left promiscuous mode [ 69.224679][ T328] hsr_slave_1: left promiscuous mode [ 69.302925][ T328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.305103][ T328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.309114][ T328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.311931][ T328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.320455][ T328] hsr_slave_0: left promiscuous mode [ 69.353298][ T328] hsr_slave_1: left promiscuous mode [ 69.433086][ T328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.435361][ T328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.440649][ T328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.445863][ T328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.465488][ T328] veth1_macvtap: left promiscuous mode [ 69.466979][ T328] veth0_macvtap: left promiscuous mode [ 69.468471][ T328] veth1_vlan: left promiscuous mode [ 69.469906][ T328] veth0_vlan: left promiscuous mode [ 69.472841][ T328] veth1_macvtap: left promiscuous mode [ 69.474333][ T328] veth0_macvtap: left promiscuous mode [ 69.475806][ T328] veth1_vlan: left promiscuous mode [ 69.477268][ T328] veth0_vlan: left promiscuous mode [ 69.667653][ T1748] cfg80211: failed to load regulatory.db [ 69.822918][ T6387] Bluetooth: hci3: command tx timeout [ 70.062922][ T6387] Bluetooth: hci5: command tx timeout [ 70.782790][ T6387] Bluetooth: hci1: command tx timeout [ 71.426922][ T328] team0 (unregistering): Port device team_slave_1 removed [ 71.600858][ T328] team0 (unregistering): Port device team_slave_0 removed [ 71.903418][ T6387] Bluetooth: hci3: command tx timeout [ 73.982848][ T6387] Bluetooth: hci3: command tx timeout [ 75.656851][ T328] team0 (unregistering): Port device team_slave_1 removed [ 75.855362][ T328] team0 (unregistering): Port device team_slave_0 removed [ 76.064108][ T6387] Bluetooth: hci3: command tx timeout [ 78.078076][ T6681] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.080865][ T6681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.097895][ T6679] veth0_vlan: entered promiscuous mode [ 78.104000][ T6679] veth1_vlan: entered promiscuous mode [ 78.124636][ T6978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.138445][ T6978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.191442][ T6978] team0: Port device team_slave_0 added [ 78.201414][ T6978] team0: Port device team_slave_1 added [ 78.286230][ T6883] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.314123][ T6849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.329490][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.331444][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.338955][ T6978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.343660][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.345568][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.352288][ T6978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.358637][ T6681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.360624][ T6849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.389302][ T6679] veth0_macvtap: entered promiscuous mode [ 78.434452][ T6883] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.440163][ T6849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.494632][ T6978] hsr_slave_0: entered promiscuous mode [ 78.533416][ T6978] hsr_slave_1: entered promiscuous mode [ 78.578865][ T6849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.593469][ T6679] veth1_macvtap: entered promiscuous mode [ 78.664292][ T6883] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.764854][ T6883] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.807067][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.810568][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.813975][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.816808][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.820490][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.860065][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.871092][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.879398][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.882213][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.886334][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.892549][ T6849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.901490][ T6849] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.909480][ T6681] veth0_vlan: entered promiscuous mode [ 78.918610][ T6679] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.920954][ T6679] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.924318][ T6679] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.926750][ T6679] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.967142][ T6681] veth1_vlan: entered promiscuous mode [ 79.027295][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.029229][ T6435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.032128][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.034230][ T6435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.079322][ T6883] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.084912][ T6883] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.088577][ T6883] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.166517][ T6978] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.169806][ T6978] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.181465][ T6883] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.286701][ T6978] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.289357][ T6978] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.301741][ T6681] veth0_macvtap: entered promiscuous mode [ 79.325707][ T6681] veth1_macvtap: entered promiscuous mode [ 79.341898][ T6520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.353982][ T6520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.404490][ T6978] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.407424][ T6978] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.414513][ T6681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.417363][ T6681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.419837][ T6681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.423808][ T6681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.426571][ T6681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.429378][ T6681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.433543][ T6681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.462417][ T6681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.465746][ T6681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.468392][ T6681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.471167][ T6681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.478529][ T6681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.481414][ T6681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.485343][ T6681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.495866][ T6681] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.498356][ T6681] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.500087][ T6590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.500696][ T6681] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.505736][ T6681] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.508346][ T6590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.546965][ T6978] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.550063][ T6978] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.112386][ T6849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.150762][ T6883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.219182][ T6883] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.262852][ T6590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.264944][ T6590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.274948][ T6849] veth0_vlan: entered promiscuous mode [ 80.278056][ T4287] bridge_slave_1: left allmulticast mode [ 80.279473][ T4287] bridge_slave_1: left promiscuous mode [ 80.281164][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.323138][ T4287] bridge_slave_0: left allmulticast mode [ 80.324472][ T7065] input: syz1 as /devices/virtual/input/input3 [ 80.325455][ T4287] bridge_slave_0: left promiscuous mode [ 80.328551][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.346469][ T4287] bridge_slave_1: left allmulticast mode [ 80.347988][ T4287] bridge_slave_1: left promiscuous mode [ 80.349523][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.359654][ T4287] bridge_slave_0: left allmulticast mode [ 80.361178][ T4287] bridge_slave_0: left promiscuous mode [ 80.363239][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.415001][ T7067] loop3: detected capacity change from 0 to 8 [ 80.562007][ T7071] loop3: detected capacity change from 0 to 256 [ 80.577900][ T7071] FAT-fs (loop3): Directory bread(block 64) failed [ 80.580181][ T7071] FAT-fs (loop3): Directory bread(block 65) failed [ 80.581954][ T7071] FAT-fs (loop3): Directory bread(block 66) failed [ 80.592701][ T7071] FAT-fs (loop3): Directory bread(block 67) failed [ 80.594671][ T7071] FAT-fs (loop3): Directory bread(block 68) failed [ 80.596424][ T7071] FAT-fs (loop3): Directory bread(block 69) failed [ 80.598235][ T7071] FAT-fs (loop3): Directory bread(block 70) failed [ 80.600007][ T7071] FAT-fs (loop3): Directory bread(block 71) failed [ 80.601752][ T7071] FAT-fs (loop3): Directory bread(block 72) failed [ 80.623030][ T7071] FAT-fs (loop3): Directory bread(block 73) failed [ 81.019547][ T7077] loop3: detected capacity change from 0 to 32768 [ 81.102207][ T7077] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,noshard_inode_numbers,noinodes_use_key_cache,gc_reserve_bytes=16.0 EiB,nojournal_transaction_names [ 81.108638][ T7077] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 81.126662][ T7077] bcachefs (loop3): alloc_read... done [ 81.128503][ T7077] bcachefs (loop3): stripes_read... done [ 81.130106][ T7077] bcachefs (loop3): snapshots_read... done [ 81.136771][ T7077] bcachefs (loop3): going read-write [ 81.149079][ T7077] bcachefs (loop3): journal_replay... done [ 81.178965][ T7077] bcachefs (loop3): resume_logged_ops... done [ 81.180567][ T7077] bcachefs (loop3): delete_dead_inodes... done [ 81.189729][ T7077] bcachefs (loop3): done starting filesystem [ 81.239770][ T6679] bcachefs (loop3): shutting down [ 81.250406][ T6679] bcachefs (loop3): going read-only [ 81.252238][ T6679] bcachefs (loop3): finished waiting for writes to stop [ 81.290349][ T6679] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 81.293237][ T6679] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12 [ 81.297797][ T6679] bcachefs (loop3): shutdown complete, journal seq 13 [ 81.300387][ T6679] bcachefs (loop3): marking filesystem clean [ 81.329878][ T6679] bcachefs (loop3): shutdown complete [ 82.504881][ T4287] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 82.598822][ T7094] loop3: detected capacity change from 0 to 2048 [ 82.609003][ T7094] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 82.751428][ T7094] syz.3.147: attempt to access beyond end of device [ 82.751428][ T7094] loop3: rw=2049, sector=2048, nr_sectors = 1 limit=2048 [ 82.756232][ T7094] Buffer I/O error on dev loop3, logical block 2048, lost async page write [ 82.758790][ T7094] syz.3.147: attempt to access beyond end of device [ 82.758790][ T7094] loop3: rw=2049, sector=2048, nr_sectors = 1 limit=2048 [ 82.762715][ T7094] Buffer I/O error on dev loop3, logical block 2048, lost async page write [ 82.765289][ T7094] syz.3.147: attempt to access beyond end of device [ 82.765289][ T7094] loop3: rw=2049, sector=2048, nr_sectors = 1 limit=2048 [ 82.769173][ T7094] Buffer I/O error on dev loop3, logical block 2048, lost async page write [ 82.771647][ T7094] syz.3.147: attempt to access beyond end of device [ 82.771647][ T7094] loop3: rw=2049, sector=2049, nr_sectors = 1 limit=2048 [ 82.775589][ T7094] Buffer I/O error on dev loop3, logical block 2049, lost async page write [ 82.777907][ T7094] syz.3.147: attempt to access beyond end of device [ 82.777907][ T7094] loop3: rw=2049, sector=2049, nr_sectors = 1 limit=2048 [ 82.781614][ T7094] Buffer I/O error on dev loop3, logical block 2049, lost async page write [ 82.784089][ T7094] syz.3.147: attempt to access beyond end of device [ 82.784089][ T7094] loop3: rw=2049, sector=2050, nr_sectors = 1 limit=2048 [ 82.787714][ T7094] Buffer I/O error on dev loop3, logical block 2050, lost async page write [ 82.790075][ T7094] syz.3.147: attempt to access beyond end of device [ 82.790075][ T7094] loop3: rw=2049, sector=2050, nr_sectors = 1 limit=2048 [ 82.794538][ T7094] Buffer I/O error on dev loop3, logical block 2050, lost async page write [ 82.796885][ T7094] syz.3.147: attempt to access beyond end of device [ 82.796885][ T7094] loop3: rw=2049, sector=2051, nr_sectors = 1 limit=2048 [ 82.800535][ T7094] Buffer I/O error on dev loop3, logical block 2051, lost async page write [ 82.803104][ T7094] syz.3.147: attempt to access beyond end of device [ 82.803104][ T7094] loop3: rw=2049, sector=2051, nr_sectors = 1 limit=2048 [ 82.807138][ T7094] Buffer I/O error on dev loop3, logical block 2051, lost async page write [ 82.809452][ T7094] syz.3.147: attempt to access beyond end of device [ 82.809452][ T7094] loop3: rw=2049, sector=2051, nr_sectors = 1 limit=2048 [ 82.813160][ T7094] Buffer I/O error on dev loop3, logical block 2051, lost async page write [ 82.828998][ T7093] UDF-fs: error (device loop3): udf_truncate_tail_extent: Extent after EOF in inode 1346 [ 82.868291][ T6679] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1376 (mode 40750) has inode size 452 different from extent length 964. Filesystem need not be standards compliant. [ 83.192522][ T7097] loop3: detected capacity change from 0 to 32768 [ 83.216136][ T7097] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 83.268465][ T7097] XFS (loop3): Ending clean mount [ 83.368155][ T6679] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 83.438238][ T4287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.512948][ T4287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.559388][ T4287] bond0 (unregistering): Released all slaves [ 83.693147][ T7107] loop3: detected capacity change from 0 to 32768 [ 83.696524][ T7107] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.149 (7107) [ 83.701837][ T7107] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 83.706876][ T7107] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 83.709224][ T7107] BTRFS info (device loop3): using free-space-tree [ 83.856122][ T6679] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.265388][ T4287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.306671][ T4287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.359821][ T4287] bond0 (unregistering): Released all slaves [ 84.400323][ T348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.413889][ T348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.429868][ T6381] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.431734][ T6381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.440642][ T6381] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.442424][ T6381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.465697][ T6849] veth1_vlan: entered promiscuous mode [ 84.474883][ T6978] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.479000][ T6978] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.484050][ T6978] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.487926][ T6978] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.541487][ T6883] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.554404][ T6883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.571343][ T6849] veth0_macvtap: entered promiscuous mode [ 84.601106][ T6849] veth1_macvtap: entered promiscuous mode [ 84.737734][ T7141] syzkaller0: entered promiscuous mode [ 84.739270][ T7141] syzkaller0: entered allmulticast mode [ 84.809397][ T6849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.812468][ T6849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.816415][ T6849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.819520][ T6849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.822352][ T6849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.826782][ T6849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.829426][ T6849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.832278][ T6849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.837601][ T6849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.037443][ T6978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.051310][ T6849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.063159][ T6849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.066084][ T6849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.068817][ T6849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.071415][ T6849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.082783][ T6849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.085376][ T6849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.088060][ T6849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.093782][ T6849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.285522][ T7146] loop3: detected capacity change from 0 to 32768 [ 85.312429][ T7146] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 85.367805][ T7146] XFS (loop3): Ending clean mount [ 85.402755][ T6679] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 85.856965][ T7160] loop3: detected capacity change from 0 to 256 [ 85.958472][ T7160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.962592][ T7160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.081256][ T7169] bio_check_eod: 80 callbacks suppressed [ 89.081299][ T7169] syz.3.161: attempt to access beyond end of device [ 89.081299][ T7169] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 89.086306][ T7169] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 89.152699][ T7169] loop3: detected capacity change from 0 to 1024 [ 89.228412][ T7169] hfsplus: request for non-existent node -709361664 in B*Tree [ 89.230612][ T7169] hfsplus: request for non-existent node -709361664 in B*Tree [ 89.237686][ T7169] hfsplus: b-tree write err: -5, ino 8 [ 95.386026][ T6387] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.390735][ T6387] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.395586][ T6387] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.398790][ T6387] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.402465][ T6387] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 95.405339][ T6387] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.437722][ T6387] Bluetooth: hci4: command tx timeout [ 97.723725][ T6849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.725984][ T6849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.728203][ T6849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.730461][ T6849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.734358][ T7173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.163'. [ 97.736619][ T7173] netlink: 'syz.3.163': attribute type 7 has an invalid length. [ 97.738513][ T7173] netlink: 'syz.3.163': attribute type 8 has an invalid length. [ 97.740485][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 97.803655][ T7173] syz_tun: entered promiscuous mode [ 97.833360][ T7173] batadv_slave_1: entered promiscuous mode [ 97.874238][ T7173] syz_tun: left promiscuous mode [ 97.933025][ T7173] batadv_slave_1: left promiscuous mode [ 98.027031][ T6978] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.230211][ T3793] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.232232][ T3793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.241111][ T3793] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.243103][ T3793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.263762][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 98.402194][ T6883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.439387][ T6978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.442220][ T6978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.620305][ T7185] loop3: detected capacity change from 0 to 40427 [ 98.627040][ T7185] F2FS-fs (loop3): invalid crc value [ 98.630782][ T7185] F2FS-fs (loop3): Found nat_bits in checkpoint [ 98.650142][ T7185] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 98.700970][ T6679] syz-executor: attempt to access beyond end of device [ 98.700970][ T6679] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.715011][ T6679] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 98.789394][ T4287] hsr_slave_0: left promiscuous mode [ 98.807719][ T4287] hsr_slave_1: left promiscuous mode [ 98.893169][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.895264][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.897887][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.899817][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.910109][ T4287] hsr_slave_0: left promiscuous mode [ 98.944864][ T4287] hsr_slave_1: left promiscuous mode [ 99.022917][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.025153][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.033330][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.035402][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.056641][ T4287] veth1_macvtap: left promiscuous mode [ 99.058110][ T4287] veth0_macvtap: left promiscuous mode [ 99.059721][ T4287] veth1_vlan: left promiscuous mode [ 99.061257][ T4287] veth0_vlan: left promiscuous mode [ 99.063952][ T4287] veth1_macvtap: left promiscuous mode [ 99.065430][ T4287] veth0_macvtap: left promiscuous mode [ 99.066939][ T4287] veth1_vlan: left promiscuous mode [ 99.068352][ T4287] veth0_vlan: left promiscuous mode [ 99.171012][ T7203] loop3: detected capacity change from 0 to 32768 [ 99.180319][ T7203] XFS: noikeep mount option is deprecated. [ 99.186452][ T7203] XFS: noikeep mount option is deprecated. [ 99.225179][ T7203] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.291694][ T7203] XFS (loop3): Ending clean mount [ 99.298595][ T7203] XFS (loop3): Quotacheck needed: Please wait. [ 99.333686][ T7203] XFS (loop3): Quotacheck: Done. [ 99.348305][ T7203] tmpfs: Bad value for 'size' [ 99.364594][ T6679] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.510839][ T6387] Bluetooth: hci4: command tx timeout [ 101.021625][ T4287] team0 (unregistering): Port device team_slave_1 removed [ 101.195583][ T4287] team0 (unregistering): Port device team_slave_0 removed [ 101.592807][ T6387] Bluetooth: hci4: command tx timeout [ 103.669152][ T6387] Bluetooth: hci4: command tx timeout [ 105.327989][ T4287] team0 (unregistering): Port device team_slave_1 removed [ 105.494679][ T4287] team0 (unregistering): Port device team_slave_0 removed [ 107.775218][ T7175] chnl_net:caif_netlink_parms(): no params data found [ 107.803629][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.805719][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.871942][ T7175] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.875255][ T7175] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.877171][ T7175] bridge_slave_0: entered allmulticast mode [ 107.879472][ T7175] bridge_slave_0: entered promiscuous mode [ 107.887405][ T7227] vlan2: entered promiscuous mode [ 107.889509][ T7227] bond0: (slave vlan2): Opening slave failed [ 107.912543][ T7175] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.917028][ T7175] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.918968][ T7175] bridge_slave_1: entered allmulticast mode [ 107.921121][ T7175] bridge_slave_1: entered promiscuous mode [ 107.929224][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.933546][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.944052][ T6978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.966397][ T7175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.970814][ T7175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.015244][ T7175] team0: Port device team_slave_0 added [ 108.019829][ T7175] team0: Port device team_slave_1 added [ 108.063980][ T7175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.065901][ T7175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.080037][ T7175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.089962][ T6883] veth0_vlan: entered promiscuous mode [ 108.097833][ T6883] veth1_vlan: entered promiscuous mode [ 108.123266][ T7175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.125345][ T7175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.132368][ T7175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.173196][ T6883] veth0_macvtap: entered promiscuous mode [ 108.178040][ T6883] veth1_macvtap: entered promiscuous mode [ 108.253531][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.256419][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.259156][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.262010][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.280836][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.289471][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.300105][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.366125][ T7175] hsr_slave_0: entered promiscuous mode [ 108.413063][ T7175] hsr_slave_1: entered promiscuous mode [ 108.472796][ T7175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.475126][ T7175] Cannot create hsr debugfs directory [ 108.537185][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.539930][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.542475][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.558848][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.561597][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.564652][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.568538][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.575201][ T6978] veth0_vlan: entered promiscuous mode [ 108.580608][ T6978] veth1_vlan: entered promiscuous mode [ 108.694940][ T6883] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.697567][ T6883] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.699932][ T6883] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.702285][ T6883] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.756996][ T6978] veth0_macvtap: entered promiscuous mode [ 108.784736][ T7241] loop1: detected capacity change from 0 to 40427 [ 108.805674][ T7241] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 108.807779][ T7241] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 108.836925][ T7241] F2FS-fs (loop1): Found nat_bits in checkpoint [ 108.867271][ T7241] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 108.869226][ T7241] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 108.876200][ T6978] veth1_macvtap: entered promiscuous mode [ 109.001245][ T7247] syz.1.176: attempt to access beyond end of device [ 109.001245][ T7247] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 109.040926][ T7247] syz.1.176: attempt to access beyond end of device [ 109.040926][ T7247] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 109.099541][ T7247] syz.1.176: attempt to access beyond end of device [ 109.099541][ T7247] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 109.116897][ T7247] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 109.140532][ T7175] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.147292][ T7249] loop3: detected capacity change from 0 to 4096 [ 109.188572][ T7249] NILFS (loop3): invalid segment: Checksum error in segment payload [ 109.203074][ T7249] NILFS (loop3): trying rollback from an earlier position [ 109.240985][ T7249] NILFS (loop3): recovery complete [ 109.246011][ T7250] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.286141][ T6430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.288240][ T6430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.385354][ T7175] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.426929][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.429684][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.432333][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.453333][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.455917][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.458597][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.461300][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.464115][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.467903][ T6978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.471228][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.474213][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.476743][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.479380][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.481977][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.503186][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.506088][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.508820][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.512494][ T6978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.625013][ T7175] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.644539][ T6978] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.646783][ T6978] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.649264][ T6978] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.651535][ T6978] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.676845][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.685590][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.757091][ T7175] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.878405][ T7258] loop1: detected capacity change from 0 to 1024 [ 110.082330][ T7256] loop3: detected capacity change from 0 to 40427 [ 110.144199][ T7256] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.165489][ T4287] bridge_slave_1: left allmulticast mode [ 110.167211][ T4287] bridge_slave_1: left promiscuous mode [ 110.168929][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.181487][ T7256] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 110.184130][ T4287] bridge_slave_0: left allmulticast mode [ 110.185952][ T4287] bridge_slave_0: left promiscuous mode [ 110.193417][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.261071][ T6679] syz-executor: attempt to access beyond end of device [ 110.261071][ T6679] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 110.270415][ T6679] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 110.306884][ T7260] loop4: detected capacity change from 0 to 32768 [ 110.324837][ T7260] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.126 (7260) [ 110.344318][ T7260] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 110.347177][ T7260] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 110.352753][ T7260] BTRFS info (device loop4): using free-space-tree [ 110.471793][ T7270] loop1: detected capacity change from 0 to 32768 [ 110.568655][ T6883] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 110.685805][ T7270] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,promote_target=invalid device 127,journal_flush_delay=1311720,journal_reclaim_delay=1000,nocow [ 110.691710][ T7270] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 110.814959][ T7306] loop3: detected capacity change from 0 to 512 [ 110.819593][ T7270] bcachefs (loop1): alloc_read... done [ 110.821139][ T7270] bcachefs (loop1): stripes_read... done [ 110.827944][ T7270] bcachefs (loop1): snapshots_read... done [ 110.830678][ T7270] bcachefs (loop1): journal_replay... done [ 110.832281][ T7270] bcachefs (loop1): resume_logged_ops... done [ 110.834657][ T7306] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.851546][ T7270] bcachefs (loop1): going read-write [ 110.861057][ T7306] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2856: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 110.869317][ T7270] bcachefs (loop1): done starting filesystem [ 110.881842][ T7310] loop4: detected capacity change from 0 to 256 [ 110.932957][ T7306] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.190: invalid indirect mapped block 4294967295 (level 0) [ 110.954237][ T7306] EXT4-fs (loop3): Remounting filesystem read-only [ 110.956967][ T7306] EXT4-fs (loop3): 1 orphan inode deleted [ 110.958540][ T7306] EXT4-fs (loop3): 1 truncate cleaned up [ 110.971769][ T43] bcachefs (loop1 inum 1073741827 offset 0): data data checksum error, type chacha20_poly1305_80: got 2856dd7ad70751163e21 should be 9894d374992ac97ed273 [ 110.977012][ T7306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.981285][ T43] bcachefs (loop1 inum 1073741827 offset 0): no device to read from [ 110.993065][ T43] bcachefs (loop1 inum 1073741827 offset 0): read error 3 from btree lookup [ 111.012125][ T43] bcachefs (loop1 inum 1073741827 offset 0): data data checksum error, type chacha20_poly1305_80: got 2856dd7ad70751163e21 should be 9894d374992ac97ed273 [ 111.021608][ T43] bcachefs (loop1 inum 1073741827 offset 0): no device to read from [ 111.026051][ T43] bcachefs (loop1 inum 1073741827 offset 0): read error 3 from btree lookup [ 111.075222][ T6849] bcachefs (loop1): shutting down [ 111.077440][ T6849] bcachefs (loop1): going read-only [ 111.078881][ T6849] bcachefs (loop1): finished waiting for writes to stop [ 111.120989][ T6849] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 111.146520][ T7318] netlink: 'syz.3.190': attribute type 10 has an invalid length. [ 111.160275][ T6849] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 12 [ 111.174576][ T6849] bcachefs (loop1): shutdown complete, journal seq 13 [ 111.177029][ T6849] bcachefs (loop1): marking filesystem clean [ 111.197999][ T6849] bcachefs (loop1): shutdown complete [ 112.118376][ T4287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.166557][ T4287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.215582][ T4287] bond0 (unregistering): Released all slaves [ 112.233457][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.237992][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.272255][ T7331] veth0_to_bridge: entered promiscuous mode [ 112.297667][ T7330] veth0_to_bridge: left promiscuous mode [ 112.302156][ T6679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.335479][ T7175] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.531765][ T7175] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.547069][ T7175] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.559981][ T7175] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.586254][ T1748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.588380][ T1748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.798371][ T7342] loop4: detected capacity change from 0 to 32768 [ 112.801466][ T7342] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section members_v1: device 0: bucket size 0 smaller than block size 8 [ 112.801466][ T7342] members_v1 (size 64): [ 112.801466][ T7342] Device: 0 [ 112.801466][ T7342] Label: (none) [ 112.801466][ T7342] UUID: 87bd6f1c-e82e-46d8-bfd9-42f53008fa72 [ 112.801466][ T7342] Size: 0 [ 112.801466][ T7342] read errors: 0 [ 112.801466][ T7342] write errors: 0 [ 112.801466][ T7342] checksum errors: 0 [ 112.801466][ T7342] seqread iops: 0 [ 112.801466][ T7342] seqwrite iops: 0 [ 112.801466][ T7342] randread iops: 0 [ 112.801466][ T7342] randwrite iops: 0 [ 112.801466][ T7342] Bucket size: 0 [ 112.801466][ T7342] First bucket: 0 [ 112.801466][ T7342] Buckets: 128 [ 112.801466][ T7342] Last mount: 1714681267 [ 112.801466][ T7342] Last superblock write: 0 [ 112.801466][ T7342] State: rw [ 112.801466][ T7342] Data allowed: journal,btree,user [ 112.801466][ T7342] Has data: (none) [ 112.801466][ T7342] Btree allocated bitmap blocksize:256 [ 112.801466][ T7342] Btree allocated bitmap: 0000000000000000000000000000000000000000000000000000000000000000 [ 112.801466][ T7342] Durability: [ 112.865346][ T7340] loop3: detected capacity change from 0 to 32768 [ 112.872077][ T7220] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 112.986881][ T7340] XFS: ikeep mount option is deprecated. [ 112.988461][ T7340] XFS: ikeep mount option is deprecated. [ 113.016293][ T7340] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.141141][ T7340] XFS (loop3): Ending clean mount [ 113.151163][ T7340] XFS (loop3): Quotacheck needed: Please wait. [ 113.213352][ T7175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.227037][ T4287] hsr_slave_0: left promiscuous mode [ 113.286617][ T7340] XFS (loop3): Quotacheck: Done. [ 113.330545][ T4287] hsr_slave_1: left promiscuous mode [ 113.374164][ T7365] loop2: detected capacity change from 0 to 32768 [ 113.385280][ T7365] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.138 (7365) [ 113.404534][ T7365] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 113.407399][ T7365] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 113.409788][ T7365] BTRFS info (device loop2): disk space caching is enabled [ 113.413050][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.415364][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.431027][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.439442][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.442953][ T6679] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.479563][ T4287] veth1_macvtap: left promiscuous mode [ 113.481272][ T4287] veth0_macvtap: left promiscuous mode [ 113.528377][ T4287] veth1_vlan: left promiscuous mode [ 113.530090][ T4287] veth0_vlan: left promiscuous mode [ 113.543568][ T7365] BTRFS info (device loop2): rebuilding free space tree [ 113.705146][ T7365] BTRFS info (device loop2): disabling free space tree [ 113.712416][ T7365] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.733136][ T7365] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.938877][ T7402] netlink: 256 bytes leftover after parsing attributes in process `syz.3.214'. [ 114.055731][ T6978] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 114.439976][ T7418] loop4: detected capacity change from 0 to 512 [ 114.444049][ T7406] loop3: detected capacity change from 0 to 32768 [ 114.446551][ T7406] XFS: attr2 mount option is deprecated. [ 114.448264][ T7406] XFS: ikeep mount option is deprecated. [ 114.449982][ T7406] XFS: noikeep mount option is deprecated. [ 114.472288][ T7406] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 114.493355][ T7418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.506151][ T7406] XFS (loop3): Ending clean mount [ 114.530126][ T7406] XFS (loop3): Quotacheck needed: Please wait. [ 114.532815][ T7418] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.222: corrupted xattr block 32: invalid header [ 114.552267][ T7418] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.222: corrupted xattr block 32: invalid header [ 114.566808][ T7418] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.222: corrupted xattr block 32: invalid header [ 114.571235][ T7406] XFS (loop3): Quotacheck: Done. [ 114.604061][ T6883] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.677645][ T6679] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 115.121425][ T7434] loop3: detected capacity change from 0 to 40427 [ 115.129393][ T7434] F2FS-fs (loop3): invalid crc value [ 115.139613][ T7434] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.187104][ T7434] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.399551][ T7448] loop3: detected capacity change from 0 to 512 [ 115.401787][ T7448] EXT4-fs: Ignoring removed bh option [ 115.419389][ T7448] EXT4-fs (loop3): 1 truncate cleaned up [ 115.421376][ T7448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.456748][ T6679] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 14: comm syz-executor: path /49/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=792, inode=0, rec_len=0, size=1024 fake=0 [ 115.479849][ T6679] VFS: Lookup of '.' in ext4 loop3 would have caused loop [ 115.489058][ T6679] VFS: Lookup of '.' in ext4 loop3 would have caused loop [ 115.767244][ T4287] team0 (unregistering): Port device team_slave_1 removed [ 115.966713][ T4287] team0 (unregistering): Port device team_slave_0 removed [ 118.138654][ T7414] netlink: 28 bytes leftover after parsing attributes in process `syz.2.220'. [ 118.145739][ T7175] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.441001][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.443015][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.494075][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.496065][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.519548][ T6679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.959463][ T7175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.046763][ T7175] veth0_vlan: entered promiscuous mode [ 119.062920][ T7175] veth1_vlan: entered promiscuous mode [ 119.125590][ T7175] veth0_macvtap: entered promiscuous mode [ 119.129364][ T7175] veth1_macvtap: entered promiscuous mode [ 119.173202][ T7175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.176053][ T7175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.178628][ T7175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.181309][ T7175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.216399][ T6380] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.222163][ T6380] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.226000][ T7175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.229171][ T6380] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.235255][ T7175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.237963][ T7175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.240788][ T7175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.252297][ T7175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.261894][ T6380] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.266736][ T7175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.269507][ T7175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.272859][ T7175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.275520][ T7175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.278147][ T7175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.281221][ T7175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.285560][ T6380] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 119.287715][ T7175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.290701][ T6380] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.294473][ T7175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.299504][ T7175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.303767][ T7175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.306182][ T7175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.308628][ T7175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.310889][ T7175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.399828][ T6458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.401946][ T6458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.708124][ T7498] loop1: detected capacity change from 0 to 32768 [ 119.716040][ T7502] loop4: detected capacity change from 0 to 32768 [ 119.718689][ T7498] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.250 (7498) [ 119.729237][ T7502] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.251 (7502) [ 119.734493][ T7498] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.737110][ T7498] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 119.739395][ T7498] BTRFS info (device loop1): using free-space-tree [ 119.752030][ T7502] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.759861][ T7502] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 119.769342][ T7502] BTRFS info (device loop4): using free-space-tree [ 119.825565][ T4287] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.896442][ T7502] BTRFS error (device loop4): balance: invalid convert metadata profile raid1c4 [ 119.917870][ T3793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.920187][ T3793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.963800][ T6849] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.981734][ T6883] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.107798][ T4287] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.377347][ T4287] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.508614][ T7549] loop2: detected capacity change from 0 to 32768 [ 120.531943][ T4287] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.569095][ T7565] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 120.571439][ T7565] overlayfs: failed to set xattr on upper [ 120.587025][ T7565] overlayfs: ...falling back to redirect_dir=nofollow. [ 120.589368][ T7565] overlayfs: ...falling back to index=off. [ 120.591171][ T7565] overlayfs: ...falling back to uuid=null. [ 120.596047][ T7565] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 120.605927][ T7484] chnl_net:caif_netlink_parms(): no params data found [ 120.609061][ T7565] overlayfs: conflicting lowerdir path [ 120.711530][ T7549] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 120.736370][ T7549] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 120.830837][ T7549] bcachefs (loop2): alloc_read... done [ 120.832342][ T7549] bcachefs (loop2): stripes_read... done [ 120.838700][ T7549] bcachefs (loop2): snapshots_read... done [ 120.842063][ T7549] bcachefs (loop2): going read-write [ 120.849296][ T7549] bcachefs (loop2): journal_replay... done [ 120.908538][ T7549] bcachefs (loop2): resume_logged_ops... done [ 120.910176][ T7549] bcachefs (loop2): delete_dead_inodes... done [ 120.927325][ T7592] loop4: detected capacity change from 0 to 256 [ 120.938765][ T7549] bcachefs (loop2): done starting filesystem [ 120.969784][ T7484] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.971662][ T7484] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.136421][ T7484] bridge_slave_0: entered allmulticast mode [ 121.269188][ T7484] bridge_slave_0: entered promiscuous mode [ 121.343990][ T6387] Bluetooth: hci0: command tx timeout [ 121.528144][ T7484] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.534365][ T7592] FAT-fs (loop4): Directory bread(block 64) failed [ 121.589361][ T7484] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.655032][ T7592] FAT-fs (loop4): Directory bread(block 65) failed [ 121.657013][ T7592] FAT-fs (loop4): Directory bread(block 66) failed [ 121.658876][ T7592] FAT-fs (loop4): Directory bread(block 67) failed [ 121.660881][ T7484] bridge_slave_1: entered allmulticast mode [ 121.661516][ T7592] FAT-fs (loop4): Directory bread(block 68) failed [ 121.666198][ T6978] bcachefs (loop2): shutting down [ 121.667594][ T6978] bcachefs (loop2): going read-only [ 121.668963][ T6978] bcachefs (loop2): finished waiting for writes to stop [ 121.670939][ T7484] bridge_slave_1: entered promiscuous mode [ 121.674075][ T7592] FAT-fs (loop4): Directory bread(block 69) failed [ 121.675922][ T7592] FAT-fs (loop4): Directory bread(block 70) failed [ 121.677666][ T7592] FAT-fs (loop4): Directory bread(block 71) failed [ 121.679542][ T7592] FAT-fs (loop4): Directory bread(block 72) failed [ 121.681328][ T7592] FAT-fs (loop4): Directory bread(block 73) failed [ 121.708073][ T7599] loop1: detected capacity change from 0 to 256 [ 121.748510][ T7599] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 121.762360][ T6978] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 121.772188][ T6978] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 11 [ 121.820273][ T7484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.856725][ T7484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.863172][ T6978] bcachefs (loop2): shutdown complete, journal seq 12 [ 121.865654][ T6978] bcachefs (loop2): marking filesystem clean [ 121.935073][ T4287] bridge_slave_1: left allmulticast mode [ 121.936610][ T4287] bridge_slave_1: left promiscuous mode [ 121.938163][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.948882][ T6978] bcachefs (loop2): shutdown complete [ 122.004043][ T4287] bridge_slave_0: left allmulticast mode [ 122.005873][ T4287] bridge_slave_0: left promiscuous mode [ 122.007709][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.081744][ T7611] loop4: detected capacity change from 0 to 1024 [ 122.135024][ T7611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.377377][ T6883] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.568076][ T7634] loop4: detected capacity change from 0 to 16 [ 122.570427][ T7634] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 122.733403][ T7639] netlink: 24 bytes leftover after parsing attributes in process `syz.4.289'. [ 123.253920][ T7646] loop4: detected capacity change from 0 to 32768 [ 123.256196][ T7646] XFS: noikeep mount option is deprecated. [ 123.268564][ T7646] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 123.337180][ T7646] XFS (loop4): Ending clean mount [ 123.348371][ T7646] XFS (loop4): Quotacheck needed: Please wait. [ 123.425145][ T7646] XFS (loop4): Quotacheck: Done. [ 123.433195][ T6387] Bluetooth: hci0: command tx timeout [ 123.438942][ T7660] loop0: detected capacity change from 0 to 4096 [ 123.441153][ T7660] ntfs3: Unknown parameter '/dev/ppp' [ 123.481668][ T6883] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 123.936151][ T7669] loop4: detected capacity change from 0 to 32768 [ 123.939165][ T7669] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.296 (7669) [ 123.944894][ T7669] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.947772][ T7669] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 123.950205][ T7669] BTRFS info (device loop4): using free-space-tree [ 124.076168][ T6883] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.113350][ T4287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.163696][ T4287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.192339][ T7692] loop4: detected capacity change from 0 to 512 [ 124.198230][ T7692] EXT4-fs (loop4): orphan cleanup on readonly fs [ 124.200133][ T7692] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.301: bad orphan inode 256 [ 124.210861][ T7692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 124.216962][ T4287] bond0 (unregistering): Released all slaves [ 124.233795][ T7604] pim6reg1: entered promiscuous mode [ 124.235501][ T7604] pim6reg1: entered allmulticast mode [ 124.237739][ T6883] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.254121][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 124.271760][ T7484] team0: Port device team_slave_0 added [ 124.290407][ T7484] team0: Port device team_slave_1 added [ 124.496990][ T7704] loop4: detected capacity change from 0 to 8192 [ 124.721825][ T7704] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "fsname=" [ 125.423689][ T7484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.425689][ T7484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.452741][ T7484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.471278][ T7700] loop2: detected capacity change from 0 to 32768 [ 125.475322][ T7484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.487015][ T7484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.496587][ T7484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.501204][ T7720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.506301][ T6387] Bluetooth: hci0: command tx timeout [ 125.523472][ T7724] sch_tbf: burst 18014383 is lower than device lo mtu (2113929230) ! [ 125.613400][ T7700] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,str_hash=crc64,nojournal_transaction_names [ 125.615182][ T7745] loop4: detected capacity change from 0 to 1024 [ 125.622237][ T7700] bcachefs (loop2): recovering from clean shutdown, journal seq 8 [ 125.656041][ T7733] netlink: 'syz.1.312': attribute type 4 has an invalid length. [ 125.708221][ T7700] bcachefs (loop2): alloc_read... done [ 125.723654][ T7700] bcachefs (loop2): stripes_read... done [ 125.725260][ T7700] bcachefs (loop2): snapshots_read... done [ 125.727949][ T7700] bcachefs (loop2): journal_replay... done [ 125.729618][ T7700] bcachefs (loop2): resume_logged_ops... done [ 125.738942][ T7700] bcachefs (loop2): going read-write [ 125.749762][ T7700] bcachefs (loop2): done starting filesystem [ 125.808818][ T7745] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 125.985667][ T2321] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.987570][ T2321] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.016090][ T7484] hsr_slave_0: entered promiscuous mode [ 126.080039][ T7484] hsr_slave_1: entered promiscuous mode [ 126.121244][ T7484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.131002][ T7484] Cannot create hsr debugfs directory [ 126.197483][ T7759] loop1: detected capacity change from 0 to 32768 [ 126.202484][ T6978] bcachefs (loop2): shutting down [ 126.212700][ T6978] bcachefs (loop2): going read-only [ 126.214252][ T6978] bcachefs (loop2): finished waiting for writes to stop [ 126.237270][ T6978] bcachefs (loop2): flushing journal and stopping allocators, journal seq 8 [ 126.239961][ T6978] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 8 [ 126.252391][ T6978] bcachefs (loop2): shutdown complete, journal seq 9 [ 126.255561][ T6978] bcachefs (loop2): marking filesystem clean [ 126.272073][ T7759] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 126.277282][ T6978] bcachefs (loop2): shutdown complete [ 126.279930][ T4287] hsr_slave_0: left promiscuous mode [ 126.304262][ T4287] hsr_slave_1: left promiscuous mode [ 126.315664][ T7759] XFS (loop1): Ending clean mount [ 126.329399][ T7759] XFS (loop1): Quotacheck needed: Please wait. [ 126.359840][ T7759] XFS (loop1): Quotacheck: Done. [ 126.380800][ T6849] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 126.383181][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.383253][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.392542][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.396882][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.438543][ T4287] veth1_macvtap: left promiscuous mode [ 126.440175][ T4287] veth0_macvtap: left promiscuous mode [ 126.441948][ T4287] veth1_vlan: left promiscuous mode [ 126.449548][ T4287] veth0_vlan: left promiscuous mode [ 126.770720][ T6387] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.780491][ T6387] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.785341][ T6387] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.788280][ T6387] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.790716][ T6387] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 126.796407][ T6387] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.036170][ T7783] loop2: detected capacity change from 0 to 32768 [ 127.132685][ T7783] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 127.138981][ T7783] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 127.210888][ T7783] bcachefs (loop2): alloc_read... done [ 127.218086][ T7783] bcachefs (loop2): stripes_read... done [ 127.219757][ T7783] bcachefs (loop2): snapshots_read... done [ 127.222482][ T7783] bcachefs (loop2): journal_replay... done [ 127.226461][ T7783] bcachefs (loop2): resume_logged_ops... done [ 127.235846][ T7783] bcachefs (loop2): going read-write [ 127.251094][ T7783] bcachefs (loop2): done starting filesystem [ 127.260830][ T7783] bcachefs (): error reading superblock: error opening : ENOENT [ 127.264205][ T7783] bcachefs (loop2): bch2_dev_add(): error reading super ENOENT [ 127.266266][ T7783] bcachefs (loop2): bch2_dev_add(): error ENOENT [ 127.281117][ T6978] bcachefs (loop2): shutting down [ 127.282577][ T6978] bcachefs (loop2): going read-only [ 127.284335][ T6978] bcachefs (loop2): finished waiting for writes to stop [ 127.323476][ T6978] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 127.325777][ T6978] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 127.339541][ T6978] bcachefs (loop2): shutdown complete, journal seq 11 [ 127.341975][ T6978] bcachefs (loop2): marking filesystem clean [ 127.369771][ T6978] bcachefs (loop2): shutdown complete [ 127.495908][ T7799] loop1: detected capacity change from 0 to 32768 [ 127.505438][ T7799] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.327 (7799) [ 127.524032][ T7799] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.527071][ T7799] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 127.529441][ T7799] BTRFS info (device loop1): using free-space-tree [ 127.582789][ T6380] Bluetooth: hci0: command tx timeout [ 127.620158][ T6849] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.716447][ T7817] netlink: 'syz.1.329': attribute type 30 has an invalid length. [ 127.784218][ T7819] loop1: detected capacity change from 0 to 2048 [ 127.808910][ T7819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.270841][ T7832] loop2: detected capacity change from 0 to 32768 [ 128.427089][ T7825] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.330: bg 0: block 234: padding at end of block bitmap is not set [ 128.439688][ T7825] EXT4-fs (loop1): Remounting filesystem read-only [ 128.607226][ T6849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.688498][ T7834] netlink: 'syz.1.335': attribute type 3 has an invalid length. [ 128.690532][ T7834] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.335'. [ 128.730500][ T4287] team0 (unregistering): Port device team_slave_1 removed [ 128.872709][ T6380] Bluetooth: hci1: command tx timeout [ 129.135713][ T30] audit: type=1326 audit(128.950:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7835 comm="syz.1.336" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a1459e8 code=0x0 [ 129.328887][ T4287] team0 (unregistering): Port device team_slave_0 removed [ 129.829198][ T7847] loop1: detected capacity change from 0 to 1024 [ 129.861456][ T6520] hfsplus: b-tree write err: -5, ino 4 [ 129.940521][ T7849] loop1: detected capacity change from 0 to 256 [ 129.952076][ T7849] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 130.071888][ T7851] loop1: detected capacity change from 0 to 2048 [ 130.089288][ T7851] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.952733][ T6380] Bluetooth: hci1: command tx timeout [ 132.163315][ T7869] loop2: detected capacity change from 0 to 1024 [ 132.182300][ T7869] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 132.199974][ T7869] hfsplus: xattr searching failed [ 132.215177][ T7869] hfsplus: xattr searching failed [ 132.216854][ T7869] hfsplus: xattr searching failed [ 132.540055][ T7868] loop0: detected capacity change from 0 to 32768 [ 132.586177][ T7781] chnl_net:caif_netlink_parms(): no params data found [ 132.793890][ T7781] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.804188][ T7781] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.804897][ T7878] loop1: detected capacity change from 0 to 32768 [ 132.806464][ T7781] bridge_slave_0: entered allmulticast mode [ 132.810333][ T7781] bridge_slave_0: entered promiscuous mode [ 132.810591][ T7878] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.351 (7878) [ 132.823390][ T7878] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.828461][ T7878] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 132.831992][ T7878] BTRFS info (device loop1): using free-space-tree [ 132.844794][ T7781] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.847239][ T7781] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.849338][ T7781] bridge_slave_1: entered allmulticast mode [ 132.859560][ T7910] nfs: Unexpected value for 'acl' [ 132.866837][ T7781] bridge_slave_1: entered promiscuous mode [ 132.960320][ T7781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.968001][ T7781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.985452][ T6849] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.025491][ T6380] Bluetooth: hci1: command tx timeout [ 133.088954][ T7781] team0: Port device team_slave_0 added [ 133.113697][ T7781] team0: Port device team_slave_1 added [ 133.169475][ T7781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.171319][ T7781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.180639][ T7781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.194664][ T7781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.196914][ T7781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.204344][ T7781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.278345][ T7484] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 133.326983][ T7781] hsr_slave_0: entered promiscuous mode [ 133.356667][ T7781] hsr_slave_1: entered promiscuous mode [ 133.388116][ T7781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.390114][ T7781] Cannot create hsr debugfs directory [ 133.400225][ T7484] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 133.415476][ T7484] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 133.482756][ T7484] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 133.631331][ T7922] loop1: detected capacity change from 0 to 32768 [ 133.637286][ T7922] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.356 (7922) [ 133.652461][ T7922] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 133.662279][ T7922] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 133.669295][ T7922] BTRFS info (device loop1): using free-space-tree [ 133.787162][ T6849] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 133.947798][ T4287] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.022158][ T7975] loop1: detected capacity change from 0 to 512 [ 134.050359][ T7975] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.054371][ T7975] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 134.089202][ T7975] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 134.091432][ T7975] System zones: 0-2, 18-18, 34-34 [ 134.108639][ T4287] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.117291][ T7975] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 134.132870][ T7975] EXT4-fs (loop1): 1 truncate cleaned up [ 134.135172][ T7975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.166558][ T7975] EXT4-fs error (device loop1): ext4_generic_delete_entry:2676: inode #12: block 13: comm syz.1.360: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=4096 fake=0 [ 134.180236][ T7975] EXT4-fs error (device loop1) in ext4_delete_entry:2747: Corrupt filesystem [ 134.237625][ T7986] loop2: detected capacity change from 0 to 512 [ 134.282920][ T7986] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.364: Invalid inode bitmap blk 4 in block_group 0 [ 134.292487][ T7986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.316441][ T4287] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.334908][ T7484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.349744][ T6978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.364470][ T7484] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.374465][ T6429] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.376500][ T6429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.379738][ T6429] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.381755][ T6429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.462142][ T6849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.465448][ T4287] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.707611][ T7484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.765728][ T4287] bridge_slave_1: left allmulticast mode [ 134.765753][ T4287] bridge_slave_1: left promiscuous mode [ 134.767241][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.783755][ T4287] bridge_slave_0: left allmulticast mode [ 134.783780][ T4287] bridge_slave_0: left promiscuous mode [ 134.783892][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.103457][ T6380] Bluetooth: hci1: command tx timeout [ 135.659864][ T8010] loop1: detected capacity change from 0 to 4096 [ 135.782048][ T8019] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.983464][ T8027] loop2: detected capacity change from 0 to 2048 [ 136.021832][ T8031] netlink: del zone limit has 8 unknown bytes [ 136.027946][ T8027] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz.2.380: bad orphan inode 8192 [ 136.038192][ T8027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.345184][ T8037] loop1: detected capacity change from 0 to 32768 [ 136.348662][ T8037] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.382 (8037) [ 136.366149][ T8037] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.369382][ T8037] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 136.371966][ T8037] BTRFS info (device loop1): using free-space-tree [ 136.503003][ T11] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 136.539480][ T6849] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.300568][ T4287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.346521][ T4287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.385364][ T4287] bond0 (unregistering): Released all slaves [ 137.461609][ T8023] warning: `syz.0.377' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 137.477499][ T8064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.387'. [ 137.507538][ T6978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.548226][ T7484] veth0_vlan: entered promiscuous mode [ 137.564510][ T8070] xt_hashlimit: overflow, try lower: 360287970189639680/2147483648 [ 137.654257][ T7484] veth1_vlan: entered promiscuous mode [ 137.667485][ T8077] loop0: detected capacity change from 0 to 512 [ 137.706193][ T8077] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.391: bad orphan inode 15 [ 137.712922][ T8077] EXT4-fs (loop0): Remounting filesystem read-only [ 137.714559][ T8077] ext4_test_bit(bit=14, block=5) = 0 [ 137.716553][ T8077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.837105][ T8091] loop1: detected capacity change from 0 to 256 [ 137.970054][ T7484] veth0_macvtap: entered promiscuous mode [ 138.409350][ T7484] veth1_macvtap: entered promiscuous mode [ 138.621487][ T7484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.643711][ T7484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.646367][ T7484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.649152][ T7484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.672420][ T7484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.690042][ T7484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.696775][ T7484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.699639][ T7484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.717524][ T7484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.722427][ T7175] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.890637][ T8100] netlink: 'syz.2.394': attribute type 1 has an invalid length. [ 138.899006][ T7484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.901995][ T7484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.924899][ T7484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.927821][ T7484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.930582][ T7484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.959070][ T7484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.961793][ T7484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.972293][ T7484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.979376][ T7484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.010256][ T8110] ------------[ cut here ]------------ [ 139.010717][ T8110] [ 139.010725][ T8110] ====================================================== [ 139.010729][ T8110] WARNING: possible circular locking dependency detected [ 139.010733][ T8110] 6.10.0-rc2-syzkaller-g8867bbd4a056 #0 Tainted: G W [ 139.010741][ T8110] ------------------------------------------------------ [ 139.010744][ T8110] syz.2.399/8110 is trying to acquire lock: [ 139.010750][ T8110] ffff80008f58d020 (console_owner){..-.}-{0:0}, at: console_lock_spinning_enable+0x88/0xec [ 139.010782][ T8110] [ 139.010782][ T8110] but task is already holding lock: [ 139.010786][ T8110] ffff800094049db8 (&port_lock_key){..-.}-{2:2}, at: uart_write+0x114/0x2ec [ 139.010808][ T8110] [ 139.010808][ T8110] which lock already depends on the new lock. [ 139.010808][ T8110] [ 139.010811][ T8110] [ 139.010811][ T8110] the existing dependency chain (in reverse order) is: [ 139.010814][ T8110] [ 139.010814][ T8110] -> #1 (&port_lock_key){..-.}-{2:2}: [ 139.010828][ T8110] _raw_spin_lock_irqsave+0x5c/0x7c [ 139.010842][ T8110] pl011_console_write+0x148/0x724 [ 139.010855][ T8110] console_flush_all+0x5cc/0xb74 [ 139.010864][ T8110] console_unlock+0xec/0x3d4 [ 139.010873][ T8110] vprintk_emit+0x1ec/0x350 [ 139.010881][ T8110] vprintk_default+0xa0/0xe4 [ 139.010890][ T8110] vprintk+0x200/0x2d4 [ 139.010899][ T8110] _printk+0xdc/0x128 [ 139.010911][ T8110] register_console+0x700/0xa8c [ 139.010920][ T8110] serial_core_register_port+0x1428/0x1bf4 [ 139.010930][ T8110] serial_ctrl_register_port+0x28/0x38 [ 139.010940][ T8110] uart_add_one_port+0x28/0x38 [ 139.010949][ T8110] pl011_register_port+0x1b4/0x44c [ 139.010960][ T8110] sbsa_uart_probe+0x488/0x608 [ 139.010971][ T8110] platform_probe+0x148/0x1c0 [ 139.010984][ T8110] really_probe+0x38c/0x8fc [ 139.010993][ T8110] __driver_probe_device+0x194/0x374 [ 139.011004][ T8110] driver_probe_device+0x78/0x330 [ 139.011014][ T8110] __device_attach_driver+0x2a8/0x4f4 [ 139.011035][ T8110] bus_for_each_drv+0x228/0x2bc [ 139.011044][ T8110] __device_attach+0x2b4/0x434 [ 139.011053][ T8110] device_initial_probe+0x24/0x34 [ 139.011063][ T8110] bus_probe_device+0x178/0x240 [ 139.011072][ T8110] device_add+0x728/0xa6c [ 139.011084][ T8110] platform_device_add+0x3e8/0x6e8 [ 139.011095][ T8110] platform_device_register_full+0x4ec/0x604 [ 139.011107][ T8110] acpi_create_platform_device+0x5bc/0x744 [ 139.011119][ T8110] acpi_default_enumeration+0x6c/0xdc [ 139.011132][ T8110] acpi_bus_attach+0x8b8/0xaa8 [ 139.011144][ T8110] acpi_dev_for_one_check+0xa0/0xb4 [ 139.011156][ T8110] device_for_each_child+0xec/0x174 [ 139.011168][ T8110] acpi_dev_for_each_child+0xc4/0x108 [ 139.011179][ T8110] acpi_bus_attach+0x358/0xaa8 [ 139.011191][ T8110] acpi_dev_for_one_check+0xa0/0xb4 [ 139.011202][ T8110] device_for_each_child+0xec/0x174 [ 139.011214][ T8110] acpi_dev_for_each_child+0xc4/0x108 [ 139.011226][ T8110] acpi_bus_attach+0x358/0xaa8 [ 139.011238][ T8110] acpi_bus_scan+0x118/0x4f0 [ 139.011249][ T8110] acpi_scan_init+0x214/0x6b0 [ 139.011264][ T8110] acpi_init+0x190/0x254 [ 139.011275][ T8110] do_one_initcall+0x254/0x9e4 [ 139.011285][ T8110] do_initcall_level+0x154/0x214 [ 139.011295][ T8110] do_initcalls+0x58/0xac [ 139.011304][ T8110] do_basic_setup+0x8c/0xa0 [ 139.011312][ T8110] kernel_init_freeable+0x324/0x478 [ 139.011321][ T8110] kernel_init+0x24/0x2a0 [ 139.011333][ T8110] ret_from_fork+0x10/0x20 [ 139.011342][ T8110] [ 139.011342][ T8110] -> #0 (console_owner){..-.}-{0:0}: [ 139.011356][ T8110] __lock_acquire+0x3384/0x763c [ 139.011369][ T8110] lock_acquire+0x248/0x73c [ 139.011380][ T8110] console_lock_spinning_enable+0xb4/0xec [ 139.011391][ T8110] console_flush_all+0x58c/0xb74 [ 139.011400][ T8110] console_unlock+0xec/0x3d4 [ 139.011409][ T8110] vprintk_emit+0x1ec/0x350 [ 139.011417][ T8110] vprintk_default+0xa0/0xe4 [ 139.011426][ T8110] vprintk+0x200/0x2d4 [ 139.011435][ T8110] _printk+0xdc/0x128 [ 139.011446][ T8110] report_bug+0x3b8/0x5b0 [ 139.011457][ T8110] bug_handler+0x50/0x1fc [ 139.011466][ T8110] brk_handler+0x17c/0x2e0 [ 139.011476][ T8110] do_debug_exception+0x1e4/0x398 [ 139.011488][ T8110] el1_dbg+0x64/0x80 [ 139.011497][ T8110] el1h_64_sync_handler+0x40/0xac [ 139.011507][ T8110] el1h_64_sync+0x64/0x68 [ 139.011515][ T8110] uart_write+0x280/0x2ec [ 139.011523][ T8110] ppp_sync_push+0x20c/0x444 [ 139.011533][ T8110] ppp_sync_send+0x3fc/0x68c [ 139.011542][ T8110] __ppp_channel_push+0xe0/0x1ac [ 139.011554][ T8110] ppp_channel_push+0x17c/0x208 [ 139.011565][ T8110] ppp_write+0x288/0x374 [ 139.011577][ T8110] vfs_writev+0x6c8/0xb80 [ 139.011599][ T8110] __arm64_sys_pwritev+0x18c/0x29c [ 139.011611][ T8110] invoke_syscall+0x98/0x2b8 [ 139.011619][ T8110] el0_svc_common+0x130/0x23c [ 139.011627][ T8110] do_el0_svc+0x48/0x58 [ 139.011634][ T8110] el0_svc+0x54/0x168 [ 139.011644][ T8110] el0t_64_sync_handler+0x84/0xfc [ 139.011654][ T8110] el0t_64_sync+0x190/0x194 [ 139.011662][ T8110] [ 139.011662][ T8110] other info that might help us debug this: [ 139.011662][ T8110] [ 139.011665][ T8110] Possible unsafe locking scenario: [ 139.011665][ T8110] [ 139.011668][ T8110] CPU0 CPU1 [ 139.011671][ T8110] ---- ---- [ 139.011674][ T8110] lock(&port_lock_key); [ 139.011681][ T8110] lock(console_owner); [ 139.011688][ T8110] lock(&port_lock_key); [ 139.011695][ T8110] lock(console_owner); [ 139.011701][ T8110] [ 139.011701][ T8110] *** DEADLOCK *** [ 139.011701][ T8110] [ 139.011704][ T8110] 6 locks held by syz.2.399/8110: [ 139.011710][ T8110] #0: ffff0000d68f9a48 (&pch->upl){++..}-{2:2}, at: ppp_channel_push+0x38/0x208 [ 139.011737][ T8110] #1: ffff0000d68f99e0 (&pch->downl){+...}-{2:2}, at: __ppp_channel_push+0x3c/0x1ac [ 139.011763][ T8110] #2: ffff0000d10f9830 (&ap->xmit_lock){+...}-{2:2}, at: ppp_sync_push+0x58/0x444 [ 139.011787][ T8110] #3: ffff800094049db8 (&port_lock_key){..-.}-{2:2}, at: uart_write+0x114/0x2ec [ 139.011809][ T8110] #4: ffff80008f474940 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0x1d0/0x350 [ 139.011832][ T8110] #5: ffff80008f474570 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire+0x10/0x4c [ 139.011856][ T8110] [ 139.011856][ T8110] stack backtrace: [ 139.011861][ T8110] CPU: 0 PID: 8110 Comm: syz.2.399 Tainted: G W 6.10.0-rc2-syzkaller-g8867bbd4a056 #0 [ 139.011873][ T8110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 139.011880][ T8110] Call trace: [ 139.011883][ T8110] dump_backtrace+0x1b8/0x1e4 [ 139.011893][ T8110] show_stack+0x2c/0x3c [ 139.011901][ T8110] dump_stack_lvl+0xe4/0x150 [ 139.011910][ T8110] dump_stack+0x1c/0x28 [ 139.011919][ T8110] print_circular_bug+0x150/0x1b8 [ 139.011928][ T8110] check_noncircular+0x310/0x404 [ 139.011936][ T8110] __lock_acquire+0x3384/0x763c [ 139.011948][ T8110] lock_acquire+0x248/0x73c [ 139.011960][ T8110] console_lock_spinning_enable+0xb4/0xec [ 139.011970][ T8110] console_flush_all+0x58c/0xb74 [ 139.011979][ T8110] console_unlock+0xec/0x3d4 [ 139.011988][ T8110] vprintk_emit+0x1ec/0x350 [ 139.011996][ T8110] vprintk_default+0xa0/0xe4 [ 139.012005][ T8110] vprintk+0x200/0x2d4 [ 139.012014][ T8110] _printk+0xdc/0x128 [ 139.012033][ T8110] report_bug+0x3b8/0x5b0 [ 139.012043][ T8110] bug_handler+0x50/0x1fc [ 139.012052][ T8110] brk_handler+0x17c/0x2e0 [ 139.012061][ T8110] do_debug_exception+0x1e4/0x398 [ 139.012073][ T8110] el1_dbg+0x64/0x80 [ 139.012082][ T8110] el1h_64_sync_handler+0x40/0xac [ 139.012092][ T8110] el1h_64_sync+0x64/0x68 [ 139.012099][ T8110] uart_write+0x280/0x2ec [ 139.012107][ T8110] ppp_sync_push+0x20c/0x444 [ 139.012116][ T8110] ppp_sync_send+0x3fc/0x68c [ 139.012125][ T8110] __ppp_channel_push+0xe0/0x1ac [ 139.012136][ T8110] ppp_channel_push+0x17c/0x208 [ 139.012147][ T8110] ppp_write+0x288/0x374 [ 139.012158][ T8110] vfs_writev+0x6c8/0xb80 [ 139.012170][ T8110] __arm64_sys_pwritev+0x18c/0x29c [ 139.012181][ T8110] invoke_syscall+0x98/0x2b8 [ 139.012189][ T8110] el0_svc_common+0x130/0x23c [ 139.012197][ T8110] do_el0_svc+0x48/0x58 [ 139.012204][ T8110] el0_svc+0x54/0x168 [ 139.012214][ T8110] el0t_64_sync_handler+0x84/0xfc [ 139.012224][ T8110] el0t_64_sync+0x190/0x194 [ 139.241774][ T8110] WARNING: CPU: 0 PID: 8110 at drivers/tty/serial/serial_core.c:625 uart_write+0x280/0x2ec [ 139.244720][ T8110] Modules linked in: [ 139.245885][ T8110] CPU: 0 PID: 8110 Comm: syz.2.399 Tainted: G W 6.10.0-rc2-syzkaller-g8867bbd4a056 #0 [ 139.248938][ T8110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 139.251679][ T8110] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 139.253822][ T8110] pc : uart_write+0x280/0x2ec [ 139.255105][ T8110] lr : uart_write+0x278/0x2ec [ 139.256416][ T8110] sp : ffff800099b87820 [ 139.257569][ T8110] x29: ffff800099b87820 x28: ffff800083ce2ef8 x27: ffff0000c7abf570 [ 139.259796][ T8110] x26: 0000000000000001 x25: dfff800000000000 x24: ffff0000c9058f48 [ 139.262043][ T8110] x23: 0000000000000000 x22: ffff800094049da0 x21: ffff0000f73ec300 [ 139.264323][ T8110] x20: 0000000000000004 x19: ffff0000c9058be8 x18: ffff800099b874c0 [ 139.266632][ T8110] x17: 000000000003d5e8 x16: ffff8000803514ec x15: ffff700013370ee8 [ 139.269093][ T8110] x14: 1ffff00013370ee8 x13: 0000000000000004 x12: ffffffffffffffff [ 139.271467][ T8110] x11: 0000000000040000 x10: 0000000000000f14 x9 : ffff8000a39fb000 [ 139.273863][ T8110] x8 : 0000000000000f15 x7 : 0000000000000000 x6 : 0000000000000000 [ 139.276127][ T8110] x5 : ffff8000930dfc48 x4 : 0000000000000008 x3 : ffff80008035161c [ 139.278420][ T8110] x2 : 0000000000000001 x1 : 0000000000000000 x0 : ffff800094049da0 [ 139.280580][ T8110] Call trace: [ 139.281494][ T8110] uart_write+0x280/0x2ec [ 139.282756][ T8110] ppp_sync_push+0x20c/0x444 [ 139.284083][ T8110] ppp_sync_send+0x3fc/0x68c [ 139.285345][ T8110] __ppp_channel_push+0xe0/0x1ac [ 139.286771][ T8110] ppp_channel_push+0x17c/0x208 [ 139.288125][ T8110] ppp_write+0x288/0x374 [ 139.289307][ T8110] vfs_writev+0x6c8/0xb80 [ 139.290485][ T8110] __arm64_sys_pwritev+0x18c/0x29c [ 139.291969][ T8110] invoke_syscall+0x98/0x2b8 [ 139.293245][ T8110] el0_svc_common+0x130/0x23c [ 139.294518][ T8110] do_el0_svc+0x48/0x58 [ 139.295681][ T8110] el0_svc+0x54/0x168 [ 139.296751][ T8110] el0t_64_sync_handler+0x84/0xfc [ 139.298102][ T8110] el0t_64_sync+0x190/0x194 [ 139.299327][ T8110] irq event stamp: 1675 [ 139.300505][ T8110] hardirqs last enabled at (1674): [] __local_bh_enable_ip+0x224/0x44c [ 139.303286][ T8110] hardirqs last disabled at (1675): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 139.305981][ T8110] softirqs last enabled at (1662): [] local_bh_enable+0x10/0x34 [ 139.308533][ T8110] softirqs last disabled at (1670): [] ppp_channel_push+0x38/0x208 [ 139.311110][ T8110] ---[ end trace 0000000000000000 ]--- [ 139.317482][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 139.338828][ T7484] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.341245][ T7484] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.359943][ T7484] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.362294][ T7484] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.375457][ T4287] hsr_slave_0: left promiscuous mode [ 139.403097][ T4287] hsr_slave_1: left promiscuous mode [ 139.492873][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.495012][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.497519][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.499573][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.503625][ T4287] veth1_macvtap: left promiscuous mode [ 139.505050][ T4287] veth0_macvtap: left promiscuous mode [ 139.506554][ T4287] veth1_vlan: left promiscuous mode [ 139.508078][ T4287] veth0_vlan: left promiscuous mode [ 141.184156][ T4287] team0 (unregistering): Port device team_slave_1 removed [ 141.375303][ T4287] team0 (unregistering): Port device team_slave_0 removed [ 143.591036][ T7484] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 143.598452][ T7781] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.601540][ T7781] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.608991][ T7781] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.613897][ T7781] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.618144][ T6520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.620289][ T6520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.629627][ T7484] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 143.646499][ T328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.649039][ T328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.684999][ T7781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.692370][ T7781] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.696964][ T1748] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.698945][ T1748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.719077][ T6381] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.720944][ T6381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.794192][ T7781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.860684][ T7781] veth0_vlan: entered promiscuous mode [ 143.872222][ T7781] veth1_vlan: entered promiscuous mode [ 143.883843][ T7781] veth0_macvtap: entered promiscuous mode [ 143.887057][ T7781] veth1_macvtap: entered promiscuous mode [ 143.892910][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.895833][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.898449][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.901048][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.904526][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.907239][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.909975][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.913227][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.916667][ T7781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.961615][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.964777][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.967467][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.970279][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.973474][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.976307][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.978829][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.981495][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.985202][ T7781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.988606][ T7781] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.990936][ T7781] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.993230][ T7781] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.995430][ T7781] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.009321][ T7781] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 144.025882][ T7781] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 144.028174][ T6467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.030190][ T6467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.039754][ T328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.041973][ T328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50