last executing test programs: 5.623530197s ago: executing program 3 (id=444): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x3000002, &(0x7f0000000200), 0x2, 0x2f0, &(0x7f0000000880)="$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") r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b30bff2d050890800929fbd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"301348000000000000000000003a8500", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) recvfrom(r2, 0x0, 0x2, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) 4.689582611s ago: executing program 4 (id=315): syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, 0x0, 0x0, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r5, 0x10d, 0xfe, &(0x7f0000000000), &(0x7f0000000080)=0x4) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, 0x0, 0xffffffffffffffb9) 3.822713888s ago: executing program 3 (id=448): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0eab070004000523"], 0xfe33) 3.736400307s ago: executing program 4 (id=450): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0100000047fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB='\x00\x00\x00\x00\t'], 0x80}}, 0x0) 3.690873027s ago: executing program 3 (id=451): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x180000c, &(0x7f0000000140)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d63703933362c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dddf2bd6c2c666f7263652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723d93ad23522c747970653d1f02ae0e2c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723df5da8e942c6e6f6465636f6d706f73652c747970653dc796ae322c666f7263652c706172743d3078303030303030303030303034303030332c6e6c733d63703933362c63726561746f723da806f41d2c626172726965722c6f626a5f757365723d756d61736b2c6f626a5f757365723d245d212c00"], 0x3, 0x6da, &(0x7f0000004980)="$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") mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 3.538997349s ago: executing program 4 (id=452): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, r2+10000000}}, 0x0) clock_adjtime(0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=[@rthdr={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}}}], 0x28}}], 0x1, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, 0x0}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) r4 = socket$nl_rdma(0x10, 0x3, 0x14) openat$vcsa(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000980)={'\x00', 0x0, 0x6, 0x10000, 0x0, 0x0, 0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000000ac0)=0x4, 0x4) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r6, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}}) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x18, 0x1414, 0x211, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 3.47356862s ago: executing program 3 (id=454): syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f00000000c0)=ANY=[], 0x1, 0x5b8d, &(0x7f0000007500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$sndseq(r0, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"519f8536d6cf295557346146"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}], 0x54) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)={0x0, 0xffffffffffffffff}) 3.362414399s ago: executing program 4 (id=457): syz_mount_image$hfsplus(&(0x7f00000008c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000340)={[{@nobarrier}, {@barrier}, {}, {@gid={'gid', 0x3d, 0xee01}}, {@creator={'creator', 0x3d, "ca30c7e7"}}, {@nobarrier}]}, 0x3, 0x6ab, &(0x7f00000009c0)="$eJzs3U2InHcdB/DvM5nMZiKk2zZNowhZGijaYLKboSaC0CgiOQQJeul1STbNkklaNltJi5iJWgVPnqQHDxWJh55ERKgnsZ4FwYun3APePOSgrjzPPDM7uzvZ7CbZnW37+cCzz/+Z/9vv+fV5mXmmYQJ8Zp1/Pft7KXL+xIVb5fa9u53uvbud64NykqkkjaTZX6VoJ8XHybn0l3y+fLEernjYPK/e/6hovv9hp7/VrJeqfWOzfhuMbdlLDgw39iWZ6Rf/s4UBG+PHq5ZqnEur4z2mYhh3mbDjg8TBpK1s0FutHHdqrLX18xbYs27375sbTCcH07+7lu8DUl8dHn1lmLxNr0293YsDAAAAdsrYz/KjnnmQB7mVQ7sTDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHw6FP3fDCzqpTEoz6QY/P5/a+Q39VsTDvcJvXelWn33mUkHAgAAAAAAAABP5NiDPMitHBpsrxTVd/4vVRuHq7+fy9u5mYUs5WRuZT7LWc5S5pJMjwzUujW/vLw0t7HnL1P2XFlZuV33PD225+m1cfXWBzru/zTY0AgAAAAAAAAAPrN+lPOr3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBeUCT7+qtqOTwoT6fRTHIgSauYGTZvTTTYp+DPkw4AAAAAdl67Xh8q/tcvrBTVZ/4j1ef+A3k7N7KcxSynm4Vcrp4F9D/1N/7e63Tv3e1cL5eNA3/jX9uKoxox/WcP42eerVq8MOxxPt/O93IiM7mYpSzm+5nPchYyk29VpfkUma6fXkzfu9vOINaN8Z5bs3VxfWzHRsplfEerSNq5ksUqtpO51BqE3qjbHR2Z7Y+tZN2Md8rsFK/Vtpijy/W63KNf1Ou9Ybra8/3DjMzWuS+z8exo3jfmfpvHyfqZ5tIYPoM6vDpLubl+psfK+cF6Xeb6pzub820+Slubid7Py63B0Xdk85wnX/7HXy5ebdy4dvXKzRN75zB6TOuPic5IJl7cUia6ZSZ6T5CJA08S/9PTqrPRv4pu72r5UtX3UBbznbyZy1nImcxmLmczm6/ldDo5PZLXFzbPa3WuNbZ3rh3/Ul0o70k/G7k37Zqph1WUeX12JK+jV7rpqm70ldUsPbeFLBWtjM/SP8eG0vxCXSjn+PHIHWfy1mdibiQTz2+eiV//dyXJze6Na0tX59/a4nwv1+vytH1v7bX5N09lh7av3t3yeHmu/I+V/m1j9Ogo654f1K3LV6v+xqVZD7amrpXqfO7XPepMLUc6cmfcSP26F8fO0qnqjo7UrXmXkzfTHb4Lqe36SQrAFhx85WCrfb/9t/YH7Z+0r7YvHPjm1NmpL7ay/6/NP+37XeO3ja8Xr+SD/DCHJh0pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8Gtx8591r893uwtIeLKTxlAe8M7ZqkIr+K60xbY5lD2Tjk1GY2uyI+n2STbq3JhFzO8meSF2auzDXVMZUXRi+0k4aw3iSXNsjP3AH7IRTy9ffOnXznXe/snh9/o2FNxZunD575rUzna/O3T51ZbG7MNv/O+kogZ2w+jZg0pEAAAAAAAAAAAAAW7Ub/7xhzLRFbwL7CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwynX89+3spMjd7crbcvne30y2XQXm1ZTNJI0nxg6T4ODmX/pLpkeGKh83z6v2PfvXy+x92VsdqDto31vX7w79XVra5F716yUySffX60aa2NN6lkfF62wysrxjuYZmw44PEwaT9PwAA//+APAcg") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x9550c4, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f00000000c0)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0x2025) 3.177720297s ago: executing program 4 (id=461): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, r1, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000a5}) 2.990837344s ago: executing program 2 (id=462): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 2.869877786s ago: executing program 2 (id=464): socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000002180), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x2, 0x1, 0xc12, 0xffffffffffffffff, 0x4201, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0xc}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a0000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000180)=@req3={0x7, 0x6, 0x0, 0x2, 0x6, 0x1, 0xff}, 0x1c) r6 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000018c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x478, 0x178, 0x0, 0x240, 0x178, 0x318, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@uncond, 0x5e02, 0xb0, 0xd8, 0x0, {0xa803, 0xd003000000000000}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'wg1\x00'}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x6000}}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@ttl={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @dev}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'veth0_macvtap\x00', 'bond0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}}]}, @ECN={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) close_range(r3, 0xffffffffffffffff, 0x0) 1.900504636s ago: executing program 4 (id=470): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800], [0x0, 0x0, 0x4]}) 1.839168182s ago: executing program 1 (id=471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x34}}, 0x0) 1.723168623s ago: executing program 1 (id=474): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r0, r1, 0x0, 0x10ffff) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, "fe941600"}) 1.683860875s ago: executing program 3 (id=475): r0 = openat$vsock(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 1.551161269s ago: executing program 0 (id=476): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) 1.545372969s ago: executing program 1 (id=477): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xe9) 1.455475878s ago: executing program 2 (id=478): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @dev}, "a426119976a03eaf"}}}}}, 0x0) 1.357195236s ago: executing program 0 (id=479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc010000000000000000000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) 1.347211944s ago: executing program 2 (id=480): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10002, &(0x7f0000000300)={[{@noload}]}, 0x0, 0x639, &(0x7f0000000580)="$eJzs3c9vG1kdAPDv2PkdIGmEgHKASAhaCZo0aYsqhEQrJE5VVX4ckLhgmrQqdX+oCYKUoqZSuSAhLhxAnDhQDvwPbKWV9rT/wB72sqdVV9Fq1cuuql2vxhl7ncTj2NnY08afj+R63ryJ33eafP2en9/YAQyt+fSfUsTxiLibRMy11I1EVjm/fdzzDx5cTW9J1Go/fz+JBw+TzdbHSrL76YhIKz6eieSNiJgr7213beP+zUq1unovKy+u37q7uLZx/9SNW5Xrq9dXby9/f/n8ubPnzi+dbvmpaz/p9fyOtWxfevzb38/85fKv/vOvF8nSf9++nMSFZszpefX62PuZj/moZVr3p/+v5w+7sYKUm38nn0l279jtx30MiJ40fn+jEfHVmIlyy29zJv7800KDA/qqlkSzjwKGTSL/YUg1xgGN1/bdvQ4e6/OoBBiErYsR32nm/2hENPJ/ZHtuMCbqcwNTz5Md8zxJRJw+hPbTNt58/fLj9BZ9mocD2tt8NJ7Nge/u/5N6bs7GRL009by0I/9L2TTubDZ/+LPOzczkVczvKmftjx/0fIDubT6KiK+1G//vn/+/zu7T/b/J9vf6yiAn/wEAAAAAAIADeHoxIr7X7v2/UnP9z1ib9T/TEXHhENrf//2/0rNDaAZoY+tixA/brv8tNQ6ZLWelL9bXA4wm125UV09HxJci4mSMjqflpdYH/V/LT0fEqb/O/SOv/db1f+ktbb+xFjCL49nIrtVAK5X1yiGcOgy9rUcRXx/JX/+T9v9Jm/4/ze+7XbYx9+0nV/Lq9s9/oF9q/4440bb/T5rHJJ0/n2OxPh5YbIwK9vrGH//2/7z25T8UJ+3/pzrn/3jS+nk9a709/lhEnNkYqeXVH3T8P5b8ohwt643/UFlfv7cUMZZc2rt/ubeY4VUy0bF2tLXwp4io50MjX9L8P/mtzvN/zfF/Sx5OZp/x1Y2vfDL9Tl6d/h+Ks1WOWOnc/8/u7P9731h+MvtaXvtXIv6ZPX916P/P1vv0k9ke83/QWbcJWnScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAqKkXEFyIpLTS3S6WFhYjpiPhyTJWqd9bWv3vtzu9ur6R19e//LzW+6Xdmu5w0vv9/tqW8vKt8JiKORcTfy5P18sLVO9WVok8eAAAAAAAAAAAAAAAAAAAAXhLT23d7rv9PvVsuNDRgEEaye/kOw2ek6ACAwsh/GF7yH4ZXfv5/+KJWN9BwgAHqtv+vPexzIMDAHXD87+0COAK8/odhNdrdYRP9jgMowo7+f6m4OAAAAAAAgENx7JtP30oiYvMHk/Vbaiyra74xOFlUdEA/lfIqxmNzsJEAg2YNLwwvS39heLVf/Ds78DiA4iTNrY/aXuyfv/o/6U9AAAAAAAAAAAAAAMAeJ453cf0/cCTlXv8PHHkdrv9vd2GPjwuAI8T1/zC8xosOAChcY7Cf903/rv8HAAAAAAAAAAAAgJfAxP2blWp19d7aRtcbD3s5+PNvvBd5VT8aZBiHtbFZeSnCeBU2RiNiV1VtZvvP9mal+ssYbDyNjBlEW2MDbCtno6DnIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYI9PAwAA//+pCyTe") process_madvise(0xffffffffffffffff, &(0x7f0000002880), 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x11, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40) listen(r3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) syz_open_dev$usbfs(0x0, 0x0, 0x101301) setresuid(0x0, r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 1.223689269s ago: executing program 0 (id=481): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x3a, 0x2, 0x0, "8baadc68379dd10200e6fff749686b10ff85a510ec01000000419d6bc2cb00"}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x2b, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r3, 0x80000000, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x12, 0x0, 0x0, "f85c9913857a45a71b919361fbc64e503e29e022e3ab59f719d3d6bc4427653e8e4c0c8634826b15b593ff0d3a22026c3c8e5406243245011505195b903db466", "140dfa4105000a9e065891057633215364cb7e94d97dac692e648ae93879f3862320e1947e64f84839f1d1bd94565d1e8f269c5051b8084f732e1dd40a54db19", "49a0b73ad470907cbe7e5693e20cca9b8c6c85ec2f76a9c3e4f56ac29f9dd0d4"}}) close(r1) sendmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000000)=@phonet={0x23, 0x5, 0x9, 0xd2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000002140)}], 0x1, 0x0, 0x90}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) 1.083128272s ago: executing program 1 (id=482): syz_mount_image$erofs(&(0x7f00000005c0), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000200)=ANY=[], 0x1, 0x1ff, &(0x7f0000000600)="$eJzsmL9v00AUx793dtwaISSWDiwMVKII6tiOQF06FAmJCSG1/JogoqYqcRuUGolYYohYWGBjQGJh4B9gyJCJgY1/AAkGQEJiICOz0dmX5Bw7CUmcifcZLt+79+7H90V6g0EQxH/Lj+9/vr24vLFzAcBxrGJJrv/SAMYSzZX8r68fn3+1eeXN+y/vPh6eeNoZPk9siaL0wvKY+3UAH7Y0BP2bUruxKn93wPv6BjjOSX0LDJbU98BxU2oPDHekfqjousi3rAf7vmfdr/u7QthicMTgiqEy/L5ui2FXzqMoipgSP2qGtarvew1F6DKWE5pJ9C+rrWTqVxLv2+LYVN4nqnj7+bOWmPdqYyv1c8DhSBMVMGzL9Q0s9WqTlETxf0ofnK9l/Oe6FakiMMnkchE1yhUn12fbvlbgn9cMgdRKCYOQqOSCvKeEXqCdrLj2ry5emgAW6zQWwBzbV7qdT9nQzyIexrB479MLE2GNz1OxfAF8bif9I3rLcFbpT7rSP8rBwaPyUTNc3z+o7nl73qHrVi7ZDPZFtxw3omTM9L1Bfzbj/nRMOb80ItfgBp5Ug6DhJKPBDJgIgoYbz12l426367/vym0BrgI4k0xE2zRGvgZgRpLD41yh1rQx6QRBEARBEARBEARBEARBEFNwGiz+CjoB93qc/TcAAP//1AJp/Q==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)) 1.077202782s ago: executing program 0 (id=483): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x0) 310.915964ms ago: executing program 2 (id=484): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 294.290169ms ago: executing program 0 (id=485): r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/smackfs/load2\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f00000008c0)={'#! ', './file0', [{0x20, 'Rx\x1a)Y*c\xf2\xca\xc1\x164\xba\xcf\xac\x00S|\xa8\x8b\xae\xc8\xe9g\xc4\xa80X\xbee1\xba\xc5*\xccI]O\x1a`/3N\xeb\r\xb8\n]-0\x13\xf2H~\xa2\xe9s\xeb\x81\xd8xi\xa1Y6\xe5\xe9]w\x05:\x1f\xc2\xfc\xfb6\xe1\xcfr\xb9@\x9e\xe1b\x97\xc2\xc9=]R\xf9\x92\x18\x02\x90\x83mk\xca\xa6\xe7\xe3g\f\x01:\xae\xb6\xd0+\xc9e\x83\xa9\xf3O\x87\xab;\xfd\xeb\xcb\xf28\x93r\x86\x1a]\r\x16\xe5L)\xcbr\xa6'}]}, 0x95) 259.06566ms ago: executing program 1 (id=486): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x5e40, 0x0, 0x0, 0x0, 0x0) 198.329748ms ago: executing program 0 (id=487): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r1 = syz_open_pts(r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x20000000, 0x0, 0x0, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = fanotify_init(0x8, 0x0) fanotify_mark(r3, 0x1, 0x48001013, r2, 0x0) io_setup(0x42, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) 73.702241ms ago: executing program 1 (id=488): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) open_tree(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xec) 980.46µs ago: executing program 3 (id=489): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x4301091, 0x0) syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRES32, @ANYBLOB="ba22d05b49ec43249f741b74f9fe2c6c4b0866c339367ea8c19b64f808abf7d6a9c3c1a8ae9dd78eb266fe2c73a27a61868acbb1312e3eb9abb9519bc54fc44ca37df2d5e74a9799284701c0f81a8165864690d39e1f1f2064135a8ece55c166397ac3d53f16c2d0ee49dbbeb384e51638ab6c80c6236fe1aa5137aabb9b5ff832d812045185387c23da05190efe314b073d2d71407848e18121a1452121a9d2a9d39962e1aebbdace37ca0e6f12bf0ab782d2253cfdb6e6cdf76285b5fc5be800dd0aec3f7c3d2c712dccef606eb185ed7f04f3bf8b2deff69ca83f2156e1d4710cbfc7e69eeed01063a727d677cf91f35025aabaf42ca6", @ANYRES32, @ANYRES64, @ANYRESHEX], 0x1, 0x14b, &(0x7f0000000540)="$eJzs0LFLOmEcx/HP/U79SWkZGVhQCQ0dinWeWFODRpKQHdTWJNhFhWIklKMNbg1Bq4MhNEX/gmUtli619Re0uAWNxuNpJDQ4x+e1HPf+fnkeeNZWmgq8gAzTajZzdGzkcsaud0tPxLbfq9WI6DYA9r65uX8XAfbF1wK0zgCRH5zA3kHaWEhl0+K/FQEUPCI6bHYV5u4QgKjbbMFuU+aA2oTZtF9aqNMOi1MWIDoqmh1vANpXwLw4b+z/93kfAPIl/+3N02ajHg/4rqdlFOP+2XHpR4fLN2Oca7HJisNj7T5CZ/66WA/0woae0JshTVsKqUFVDb/oz414uHAhWdYdJ8CO1H+PDR70XHZmrXvJCaBW/tQzI8vl7qxwKnsBKV9KJT3WStLt+gdZEZcPpi0PuklERERERERERERERERERH/eVwAAAP//aL5fZg==") mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='./file0/../file0/file0\x00', 0x0, 0x2809c11, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00', 0x0, 0x2885013, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000cc0)={0x2020}, 0x2020) 0s ago: executing program 2 (id=490): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) fchownat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, r2, 0x0) kernel console output (not intermixed with test programs): e_slave_0) entered blocking state [ 36.209038][ T6387] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.211394][ T6387] bridge_slave_0: entered allmulticast mode [ 36.213556][ T6387] bridge_slave_0: entered promiscuous mode [ 36.222102][ T6392] team0: Port device team_slave_0 added [ 36.225155][ T6392] team0: Port device team_slave_1 added [ 36.227848][ T6391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.238931][ T6394] chnl_net:caif_netlink_parms(): no params data found [ 36.252921][ T6387] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.254856][ T6387] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.256879][ T6387] bridge_slave_1: entered allmulticast mode [ 36.259094][ T6387] bridge_slave_1: entered promiscuous mode [ 36.273057][ T6391] team0: Port device team_slave_0 added [ 36.275130][ T6392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.277009][ T6392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.284387][ T6392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.300118][ T6391] team0: Port device team_slave_1 added [ 36.309019][ T6392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.311050][ T6392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.318006][ T6392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.344471][ T6391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.346414][ T6391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.354002][ T6391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.358217][ T6391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.360073][ T6391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.367949][ T6391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.377423][ T6387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.432337][ T6383] hsr_slave_0: entered promiscuous mode [ 36.471167][ T6383] hsr_slave_1: entered promiscuous mode [ 36.528288][ T6387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.535178][ T6394] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.537102][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.539018][ T6394] bridge_slave_0: entered allmulticast mode [ 36.541176][ T6394] bridge_slave_0: entered promiscuous mode [ 36.559914][ T6394] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.562647][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.564619][ T6394] bridge_slave_1: entered allmulticast mode [ 36.566790][ T6394] bridge_slave_1: entered promiscuous mode [ 36.632171][ T6392] hsr_slave_0: entered promiscuous mode [ 36.680740][ T6392] hsr_slave_1: entered promiscuous mode [ 36.741117][ T6392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.743431][ T6392] Cannot create hsr debugfs directory [ 36.761040][ T6387] team0: Port device team_slave_0 added [ 36.842156][ T6391] hsr_slave_0: entered promiscuous mode [ 36.880709][ T6391] hsr_slave_1: entered promiscuous mode [ 36.920485][ T6391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.922565][ T6391] Cannot create hsr debugfs directory [ 36.928901][ T6387] team0: Port device team_slave_1 added [ 36.938265][ T6394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.977169][ T6394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.001629][ T6387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.003573][ T6387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.011527][ T6387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.045852][ T6387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.047675][ T6387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.055284][ T6387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.071688][ T6394] team0: Port device team_slave_0 added [ 37.076368][ T6394] team0: Port device team_slave_1 added [ 37.114733][ T6394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.116730][ T6394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.124125][ T6394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.129979][ T6394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.132208][ T6394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.139119][ T6394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.232488][ T6387] hsr_slave_0: entered promiscuous mode [ 37.270806][ T6387] hsr_slave_1: entered promiscuous mode [ 37.310601][ T6387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.312611][ T6387] Cannot create hsr debugfs directory [ 37.317355][ T6383] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.321860][ T6383] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.325588][ T6383] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.329711][ T6383] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.412086][ T6394] hsr_slave_0: entered promiscuous mode [ 37.450845][ T6394] hsr_slave_1: entered promiscuous mode [ 37.490882][ T6394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.493023][ T6394] Cannot create hsr debugfs directory [ 37.574958][ T6391] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.579527][ T6391] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.600078][ T6391] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.608378][ T6391] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.616577][ T6392] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.620228][ T6392] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.625095][ T6392] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.639356][ T6392] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.693348][ T6387] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.701143][ T52] Bluetooth: hci1: command tx timeout [ 37.702847][ T52] Bluetooth: hci4: command tx timeout [ 37.705263][ T5947] Bluetooth: hci3: command tx timeout [ 37.707003][ T5947] Bluetooth: hci2: command tx timeout [ 37.708738][ T5947] Bluetooth: hci0: command tx timeout [ 37.719524][ T6383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.731154][ T6387] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.735836][ T6387] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.739652][ T6387] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.763876][ T6394] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.767577][ T6394] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.787278][ T6391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.789879][ T6394] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.794216][ T6394] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.818023][ T6383] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.823783][ T6392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.851983][ T6438] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.854117][ T6438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.857568][ T6438] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.859480][ T6438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.866307][ T6391] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.878359][ T6392] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.885819][ T6383] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.888593][ T6383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.927543][ T6438] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.929573][ T6438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.932808][ T6438] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.934847][ T6438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.937831][ T6438] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.939690][ T6438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.972527][ T6438] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.974567][ T6438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.990058][ T6392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.994627][ T6392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.025628][ T6387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.049428][ T6387] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.090939][ T6438] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.092939][ T6438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.095882][ T6438] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.097764][ T6438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.129654][ T6394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.139811][ T6394] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.150117][ T6383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.167123][ T6387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.188563][ T6437] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.190621][ T6437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.193655][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.195551][ T6437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.212996][ T6392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.265112][ T6392] veth0_vlan: entered promiscuous mode [ 38.270254][ T6383] veth0_vlan: entered promiscuous mode [ 38.288149][ T6383] veth1_vlan: entered promiscuous mode [ 38.293431][ T6391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.303506][ T6387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.319447][ T6392] veth1_vlan: entered promiscuous mode [ 38.346516][ T6387] veth0_vlan: entered promiscuous mode [ 38.372740][ T6387] veth1_vlan: entered promiscuous mode [ 38.375883][ T6391] veth0_vlan: entered promiscuous mode [ 38.386792][ T6387] veth0_macvtap: entered promiscuous mode [ 38.391279][ T6387] veth1_macvtap: entered promiscuous mode [ 38.414813][ T6391] veth1_vlan: entered promiscuous mode [ 38.426122][ T6387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.439084][ T6387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.443411][ T6383] veth0_macvtap: entered promiscuous mode [ 38.448171][ T6387] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.451320][ T6387] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.453706][ T6387] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.456036][ T6387] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.467734][ T6383] veth1_macvtap: entered promiscuous mode [ 38.484108][ T6392] veth0_macvtap: entered promiscuous mode [ 38.487652][ T6392] veth1_macvtap: entered promiscuous mode [ 38.494297][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.502101][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.505663][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.524104][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.526996][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.532896][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.550539][ T6392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.553444][ T6392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.556194][ T6392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.559015][ T6392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.564895][ T6392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.570067][ T6383] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.573699][ T6383] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.576136][ T6383] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.578454][ T6383] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.584535][ T6391] veth0_macvtap: entered promiscuous mode [ 38.587883][ T6392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.591610][ T6392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.594186][ T6392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.596881][ T6392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.601769][ T6392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.606647][ T6394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.609883][ T6392] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.613072][ T6392] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.615419][ T6392] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.617688][ T6392] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.634372][ T6391] veth1_macvtap: entered promiscuous mode [ 38.654611][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.657524][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.660180][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.665268][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.668006][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.672168][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.676279][ T6391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.708330][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.712451][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.715299][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.718095][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.721487][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.724287][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.727775][ T6391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.738964][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.755476][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.768810][ T6391] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.775420][ T6391] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.777848][ T6391] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.780243][ T6391] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.804145][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.806343][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.827091][ T1996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.829318][ T1996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.841857][ T6461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.844120][ T6461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.866018][ T6394] veth0_vlan: entered promiscuous mode [ 38.889218][ T6438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.896274][ T6394] veth1_vlan: entered promiscuous mode [ 38.900890][ T6438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.938509][ T6469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.945791][ T6469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.947999][ T6469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.950069][ T6469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.982364][ T6394] veth0_macvtap: entered promiscuous mode [ 38.986181][ T6394] veth1_macvtap: entered promiscuous mode [ 39.008669][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.029611][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.037126][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.040578][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.043143][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.046243][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.048906][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.055595][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.060012][ T6394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.074256][ T1996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.077099][ T1996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.084669][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.088515][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.094196][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.097098][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.099933][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.108025][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.110998][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.113695][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.118231][ T6394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.173311][ T6394] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.175740][ T6394] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.178107][ T6394] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.189227][ T6479] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.197217][ T6394] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.314775][ T6461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.316965][ T6461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.376369][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.378559][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.455017][ T6492] mmap: syz.2.12 (6492) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.474561][ T6490] loop3: detected capacity change from 0 to 16 [ 39.513369][ T6490] erofs: (device loop3): mounted with root inode @ nid 36. [ 39.782063][ T5947] Bluetooth: hci0: command tx timeout [ 39.783569][ T5947] Bluetooth: hci4: command tx timeout [ 39.785654][ T52] Bluetooth: hci2: command tx timeout [ 39.787136][ T52] Bluetooth: hci3: command tx timeout [ 39.788633][ T52] Bluetooth: hci1: command tx timeout [ 39.804610][ T6473] loop1: detected capacity change from 0 to 32768 [ 39.872713][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 39.876396][ T6519] Bluetooth: MGMT ver 1.22 [ 39.882204][ T6473] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 39.977673][ T6473] XFS (loop1): Ending clean mount [ 40.103910][ T10] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x134/0x1f8, xfs_agfl block 0x3 [ 40.107080][ T10] XFS (loop1): Unmount and run xfs_repair [ 40.120942][ T10] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 40.122878][ T10] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 79 90 42 cb XAFL......BNy.B. [ 40.125240][ T10] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00 .... ........... [ 40.127698][ T10] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1 ................ [ 40.130191][ T10] 00000030: 00 00 0b 08 00 00 00 00 00 00 00 f4 00 00 0b f5 ................ [ 40.164096][ T10] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.166627][ T10] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.168898][ T10] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.190459][ T10] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.193042][ T6473] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x1fc/0x414" at daddr 0x3 len 1 error 74 [ 40.213815][ T6473] XFS (loop1): page discard on page 000000007e02cd46, inode 0x1809, pos 0. [ 40.217490][ T10] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x134/0x1f8, xfs_agfl block 0x3 [ 40.220679][ T10] XFS (loop1): Unmount and run xfs_repair [ 40.222294][ T10] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 40.224331][ T10] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 79 90 42 cb XAFL......BNy.B. [ 40.226899][ T10] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00 .... ........... [ 40.233809][ T10] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1 ................ [ 40.241070][ T10] 00000030: 00 00 0b 08 00 00 00 00 00 00 00 f4 00 00 0b f5 ................ [ 40.246745][ T10] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.254664][ T10] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.272128][ T10] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.288527][ T10] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.302719][ T6473] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x1fc/0x414" at daddr 0x3 len 1 error 74 [ 40.307680][ T6473] XFS (loop1): page discard on page 0000000087362764, inode 0x1809, pos 32768. [ 40.327204][ T10] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x134/0x1f8, xfs_agfl block 0x3 [ 40.330227][ T10] XFS (loop1): Unmount and run xfs_repair [ 40.335825][ T10] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 40.337809][ T10] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 79 90 42 cb XAFL......BNy.B. [ 40.340212][ T10] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00 .... ........... [ 40.357845][ T10] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1 ................ [ 40.360234][ T10] 00000030: 00 00 0b 08 00 00 00 00 00 00 00 f4 00 00 0b f5 ................ [ 40.363519][ T10] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.365994][ T10] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.368393][ T10] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.390772][ T10] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.394840][ T6473] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x1fc/0x414" at daddr 0x3 len 1 error 74 [ 40.411132][ T6473] XFS (loop1): page discard on page 000000001497d61f, inode 0x1809, pos 49152. [ 40.421712][ T6536] loop2: detected capacity change from 0 to 512 [ 40.423891][ T6536] ======================================================= [ 40.423891][ T6536] WARNING: The mand mount option has been deprecated and [ 40.423891][ T6536] and is ignored by this kernel. Remove the mand [ 40.423891][ T6536] option from the mount to silence this warning. [ 40.423891][ T6536] ======================================================= [ 40.426712][ T6508] loop4: detected capacity change from 0 to 40427 [ 40.442084][ T10] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x134/0x1f8, xfs_agfl block 0x3 [ 40.444986][ T10] XFS (loop1): Unmount and run xfs_repair [ 40.446574][ T10] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 40.448514][ T10] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 79 90 42 cb XAFL......BNy.B. [ 40.468588][ T10] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00 .... ........... [ 40.476234][ T10] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1 ................ [ 40.479417][ T10] 00000030: 00 00 0b 08 00 00 00 00 00 00 00 f4 00 00 0b f5 ................ [ 40.482435][ T6536] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.494651][ T10] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.497365][ T10] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.499807][ T10] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.509333][ T6508] F2FS-fs (loop4): Found nat_bits in checkpoint [ 40.510481][ T10] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.519388][ T6473] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x1fc/0x414" at daddr 0x3 len 1 error 74 [ 40.526171][ T6473] XFS (loop1): page discard on page 00000000e3f52e13, inode 0x1809, pos 57344. [ 40.541210][ T6536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.550561][ T6473] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x134/0x1f8, xfs_agfl block 0x3 [ 40.568368][ T6473] XFS (loop1): Unmount and run xfs_repair [ 40.570004][ T6473] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 40.583884][ T6473] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 79 90 42 cb XAFL......BNy.B. [ 40.595636][ T6526] loop3: detected capacity change from 0 to 40427 [ 40.598317][ T6473] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00 .... ........... [ 40.601426][ T6473] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1 ................ [ 40.603979][ T6473] 00000030: 00 00 0b 08 00 00 00 00 00 00 00 f4 00 00 0b f5 ................ [ 40.606314][ T6473] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.608958][ T6473] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.611716][ T6473] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.612487][ T6546] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 40.614688][ T6473] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.619692][ T6473] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x1fc/0x414" at daddr 0x3 len 1 error 74 [ 40.623097][ T6473] XFS (loop1): page discard on page 00000000ab6e0945, inode 0x1809, pos 61440. [ 40.626375][ T6526] F2FS-fs (loop3): invalid crc value [ 40.628323][ T6508] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 40.644597][ T6526] F2FS-fs (loop3): Found nat_bits in checkpoint [ 40.723718][ T6526] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 40.808415][ T6387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.862621][ T6383] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 40.866307][ T6526] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.896159][ T6383] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 40.897239][ T6394] syz-executor: attempt to access beyond end of device [ 40.897239][ T6394] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 40.949316][ T6394] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 40.976944][ T6391] syz-executor: attempt to access beyond end of device [ 40.976944][ T6391] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 41.023445][ T6391] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 41.673674][ T6564] loop2: detected capacity change from 0 to 512 [ 41.707468][ T6564] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.740614][ T6564] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.839884][ T6574] loop3: detected capacity change from 0 to 2048 [ 41.861429][ T5947] Bluetooth: hci4: command tx timeout [ 41.862938][ T5947] Bluetooth: hci1: command tx timeout [ 41.864439][ T5947] Bluetooth: hci3: command tx timeout [ 41.865905][ T5947] Bluetooth: hci2: command tx timeout [ 41.867443][ T5947] Bluetooth: hci0: command tx timeout [ 41.910565][ T6580] loop1: detected capacity change from 0 to 512 [ 41.917231][ T6574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 42.097636][ T6580] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.40: Invalid inode bitmap blk 4 in block_group 0 [ 42.163227][ T6564] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.303403][ T6580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.318619][ T6564] EXT4-fs (loop2): 1 truncate cleaned up [ 42.524575][ T6564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.533890][ T6387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.537532][ T6383] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.618010][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 43.645191][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 43.659490][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 43.674048][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 43.951541][ T6390] Bluetooth: hci2: command tx timeout [ 43.953918][ T6390] Bluetooth: hci3: command tx timeout [ 43.955934][ T6390] Bluetooth: hci1: command tx timeout [ 43.958023][ T5947] Bluetooth: hci0: command tx timeout [ 43.959662][ T52] Bluetooth: hci4: command tx timeout [ 44.235350][ T6605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.43'. [ 44.238168][ T6605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.43'. [ 44.240710][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 44.729457][ T6579] loop0: detected capacity change from 0 to 32768 [ 44.900035][ T6614] netem: incorrect gi model size [ 44.903233][ T6614] netem: change failed [ 45.004124][ T6614] loop2: detected capacity change from 0 to 256 [ 45.123948][ T6402] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 45.423064][ T6598] loop1: detected capacity change from 0 to 32768 [ 45.445489][ T6622] loop2: detected capacity change from 0 to 1024 [ 45.476686][ T6622] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 45.591985][ T6598] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 45.704613][ T6634] loop3: detected capacity change from 0 to 128 [ 45.721170][ T6598] XFS (loop1): Ending clean mount [ 45.883745][ T6638] Soft offlining pfn 0x1344e0 at process virtual address 0x202e0000 [ 45.888985][ T30] audit: type=1326 audit(45.850:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6639 comm="syz.4.58" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3459e8 code=0x0 [ 45.905108][ T6638] Memory failure: 0x1344e0: unhandlable page. [ 45.945989][ T6383] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 45.998848][ T6631] loop0: detected capacity change from 0 to 32768 [ 46.272499][ T6656] loop0: detected capacity change from 0 to 512 [ 46.278906][ T6653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.64'. [ 46.284596][ T6656] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 46.290963][ T6656] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 46.297488][ T6656] EXT4-fs (loop0): 1 truncate cleaned up [ 46.299691][ T6656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.350943][ T6392] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.428846][ T6661] loop0: detected capacity change from 0 to 256 [ 47.815998][ T6671] loop0: detected capacity change from 0 to 32768 [ 48.585758][ T6676] loop2: detected capacity change from 0 to 32768 [ 48.597935][ T6676] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.73 (6676) [ 48.629917][ T6671] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 48.644460][ T6676] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 48.647616][ T6676] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 48.654154][ T6671] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 48.670175][ T6676] BTRFS info (device loop2): using free-space-tree [ 48.688740][ T6682] loop4: detected capacity change from 0 to 32768 [ 48.723598][ T6682] BTRFS: device /dev/loop4 (7:4) using temp-fsid 771c84f4-acf9-48d2-9395-e5c4eec604c8 [ 48.727384][ T6671] bcachefs (loop0): alloc_read... done [ 48.729202][ T6671] bcachefs (loop0): stripes_read... done [ 48.740425][ T6682] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.74 (6682) [ 48.744802][ T6671] bcachefs (loop0): snapshots_read... done [ 48.748799][ T6671] bcachefs (loop0): journal_replay... done [ 48.754204][ T6671] bcachefs (loop0): resume_logged_ops... done [ 48.761212][ T6671] bcachefs (loop0): going read-write [ 48.764809][ T6682] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 48.767635][ T6682] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 48.793692][ T6671] bcachefs (loop0): done starting filesystem [ 48.803477][ T6682] BTRFS info (device loop4): using free-space-tree [ 48.906662][ T6695] loop1: detected capacity change from 0 to 32768 [ 48.908871][ T6695] XFS: noikeep mount option is deprecated. [ 48.961767][ T6695] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 49.029243][ T6695] XFS (loop1): Ending clean mount [ 49.053762][ T6695] XFS (loop1): Quotacheck needed: Please wait. [ 49.064298][ T6387] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 49.105865][ T6392] bcachefs (loop0): shutting down [ 49.107588][ T6392] bcachefs (loop0): going read-only [ 49.109468][ T6392] bcachefs (loop0): finished waiting for writes to stop [ 49.121621][ T6695] XFS (loop1): Quotacheck: Done. [ 49.134452][ T6394] BTRFS info (device loop4): last unmount of filesystem 771c84f4-acf9-48d2-9395-e5c4eec604c8 [ 49.195323][ T6392] bcachefs (loop0): flushing journal and stopping allocators, journal seq 14 [ 49.205117][ T6383] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 49.247118][ T6392] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 16 [ 49.288380][ T6392] bcachefs (loop0): shutdown complete, journal seq 17 [ 49.295820][ T6392] bcachefs (loop0): marking filesystem clean [ 49.395733][ T6392] bcachefs (loop0): shutdown complete [ 49.444669][ T6744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.447595][ T6744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.491092][ T6744] warning: `syz.4.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.671404][ T6740] loop2: detected capacity change from 0 to 32768 [ 49.699205][ T6740] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 49.815798][ T6740] XFS (loop2): Ending clean mount [ 49.856192][ T6743] loop3: detected capacity change from 0 to 40427 [ 49.870474][ T6743] F2FS-fs (loop3): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 49.873141][ T6743] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 49.927129][ T6387] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 49.936879][ T6743] F2FS-fs (loop3): invalid crc value [ 49.946489][ T6743] F2FS-fs (loop3): Found nat_bits in checkpoint [ 49.964349][ T6746] loop1: detected capacity change from 0 to 32768 [ 49.970284][ T6746] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.80 (6746) [ 49.981641][ T6746] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 49.984529][ T6746] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 49.987179][ T6746] BTRFS info (device loop1): using free-space-tree [ 49.989320][ T6743] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 49.993462][ T6743] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 50.074235][ T6391] syz-executor: attempt to access beyond end of device [ 50.074235][ T6391] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 50.080598][ T6391] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 50.097513][ T6777] loop0: detected capacity change from 0 to 1024 [ 50.170919][ T6777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.195977][ T6783] loop2: detected capacity change from 0 to 1024 [ 50.203866][ T6746] capability: warning: `syz.1.80' uses deprecated v2 capabilities in a way that may be insecure [ 50.236482][ T6783] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 50.239501][ T6783] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 50.293570][ T6783] EXT4-fs (loop2): invalid journal inode [ 50.297416][ T6783] EXT4-fs (loop2): can't get journal size [ 50.303297][ T6783] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #2: comm syz.2.82: blocks 48-48 from inode overlap system zone [ 50.340882][ T6783] EXT4-fs (loop2): failed to initialize system zone (-117) [ 50.342967][ T6783] EXT4-fs (loop2): mount failed [ 50.349679][ T6383] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 50.388937][ T6392] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.496633][ T6789] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.516912][ T6779] loop4: detected capacity change from 0 to 32768 [ 50.519364][ T6779] XFS (loop4): Invalid device [./file0], error=-15 [ 50.533280][ T6789] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.572978][ T6797] loop2: detected capacity change from 0 to 8 [ 50.617540][ T6797] SQUASHFS error: Failed to read block 0x62: -5 [ 50.619662][ T6797] squashfs image failed sanity check [ 50.753986][ T6796] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.756021][ T6796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.778834][ T6805] loop0: detected capacity change from 0 to 1024 [ 50.782005][ T6796] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.784073][ T6796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.800858][ T6804] loop2: detected capacity change from 0 to 1024 [ 50.810880][ T6805] EXT4-fs: Ignoring removed orlov option [ 50.812469][ T6805] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.870951][ T6805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.155578][ T6392] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.206258][ T6816] loop4: detected capacity change from 0 to 1024 [ 51.251724][ T6816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.293523][ T6816] tmpfs: Cannot retroactively limit inodes [ 51.364653][ T6394] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /16/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 51.412071][ T6394] EXT4-fs error (device loop4): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 51.418299][ T6394] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 51.418612][ T6394] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /16/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 51.419153][ T6394] EXT4-fs error (device loop4): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 51.430184][ T6394] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 51.430726][ T6394] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /16/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 51.442643][ T6394] EXT4-fs error (device loop4): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 51.443027][ T6394] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 51.443295][ T6394] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /16/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 51.446019][ T6394] EXT4-fs error (device loop4): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 51.446305][ T6394] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 51.446559][ T6394] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /16/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 51.447049][ T6394] EXT4-fs error (device loop4): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 51.448017][ T6394] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 51.448954][ T6394] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 51.449828][ T6394] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 51.452864][ T6394] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 51.456016][ T6394] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 51.540156][ T6394] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 51.994823][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 52.003850][ T6834] netlink: 'syz.0.103': attribute type 3 has an invalid length. [ 52.023956][ T6794] loop1: detected capacity change from 0 to 131072 [ 52.027443][ T6794] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 52.030292][ T6794] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 52.034282][ T6794] F2FS-fs (loop1): invalid crc value [ 52.037605][ T6794] F2FS-fs (loop1): Found nat_bits in checkpoint [ 52.066145][ T6794] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 52.068477][ T6794] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 52.304832][ T6394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.422879][ T6384] kernel read not supported for file /audio1 (pid: 6384 comm: kworker/0:2) [ 53.287104][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.294284][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.297554][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.305160][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.322791][ T52] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.323770][ T1962] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.335124][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.410038][ T6848] bond0: entered promiscuous mode [ 53.416249][ T6848] bond_slave_0: entered promiscuous mode [ 53.420225][ T6861] loop2: detected capacity change from 0 to 256 [ 53.440557][ T6848] bond_slave_1: entered promiscuous mode [ 53.445449][ T6861] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 53.562066][ T1962] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.680831][ T6870] loop1: detected capacity change from 0 to 4096 [ 53.820083][ T1962] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.548032][ T6879] loop2: detected capacity change from 0 to 4096 [ 54.600608][ T6879] NILFS (loop2): invalid segment: Checksum error in segment payload [ 54.610004][ T6879] NILFS (loop2): trying rollback from an earlier position [ 54.676708][ T6879] NILFS (loop2): recovery complete [ 54.733357][ T6877] loop0: detected capacity change from 0 to 40427 [ 54.745661][ T6877] F2FS-fs (loop0): invalid crc value [ 54.747590][ T6883] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.756868][ T6877] F2FS-fs (loop0): Mismatch valid blocks 2 vs. 4 [ 54.763934][ T6877] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 54.822354][ T1962] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.924181][ T6878] loop3: detected capacity change from 0 to 32768 [ 54.966318][ T6878] XFS: attr2 mount option is deprecated. [ 54.967924][ T6878] XFS: ikeep mount option is deprecated. [ 54.969498][ T6878] XFS: noikeep mount option is deprecated. [ 55.026928][ T6878] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 55.087706][ T6853] chnl_net:caif_netlink_parms(): no params data found [ 55.115150][ T6878] XFS (loop3): Ending clean mount [ 55.143719][ T6878] XFS (loop3): Quotacheck needed: Please wait. [ 55.230738][ T6878] XFS (loop3): Quotacheck: Done. [ 55.231791][ T6913] loop1: detected capacity change from 0 to 1024 [ 55.239095][ T1962] bridge_slave_1: left allmulticast mode [ 55.247192][ T1962] bridge_slave_1: left promiscuous mode [ 55.250132][ T1962] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.272394][ T6913] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 55.286309][ T1962] bridge_slave_0: left allmulticast mode [ 55.287887][ T1962] bridge_slave_0: left promiscuous mode [ 55.289530][ T1962] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.375505][ T6391] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 55.380853][ T5947] Bluetooth: hci4: command tx timeout [ 55.424495][ T6928] loop1: detected capacity change from 0 to 1024 [ 55.426667][ T6928] EXT4-fs: Ignoring removed orlov option [ 55.428203][ T6928] EXT4-fs: Ignoring removed oldalloc option [ 55.432102][ T6928] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 55.435043][ T6928] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 55.451506][ T6928] EXT4-fs (loop1): invalid journal inode [ 55.453154][ T6928] EXT4-fs (loop1): can't get journal size [ 55.471702][ T6928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.518450][ T6383] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.601344][ T6932] trusted_key: encrypted_key: master key parameter 'user' is invalid [ 55.742925][ T30] audit: type=1326 audit(55.710:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6930 comm="syz.1.135" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb07459e8 code=0x0 [ 55.832637][ T6940] loop3: detected capacity change from 0 to 1024 [ 55.842959][ T6940] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 55.846081][ T6940] EXT4-fs (loop3): required journal recovery suppressed and not mounted read-only [ 56.588871][ T6943] loop1: detected capacity change from 0 to 128 [ 56.778910][ T6943] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 56.791057][ T6943] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 56.793733][ T6943] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 56.809498][ T6943] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 56.817557][ T6943] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 56.821866][ T6943] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 56.826209][ T6943] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 56.838741][ T6943] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 56.854897][ T6943] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 56.857413][ T6943] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 57.470516][ T5947] Bluetooth: hci4: command tx timeout [ 57.534266][ T1962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.574177][ T1962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.613037][ T1962] bond0 (unregistering): Released all slaves [ 57.662936][ T6934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.135'. [ 57.801709][ T6961] x_tables: duplicate entry at hook 2 [ 57.845332][ T6962] loop1: detected capacity change from 0 to 256 [ 57.851571][ T6853] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.853681][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.855728][ T6853] bridge_slave_0: entered allmulticast mode [ 57.858135][ T6853] bridge_slave_0: entered promiscuous mode [ 57.939139][ T6960] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 57.949640][ T6960] FAT-fs (loop1): Filesystem has been set read-only [ 58.782634][ T6853] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.796552][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.798696][ T6853] bridge_slave_1: entered allmulticast mode [ 58.807306][ T6853] bridge_slave_1: entered promiscuous mode [ 58.871892][ T6988] loop2: detected capacity change from 0 to 128 [ 58.952772][ T6853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.957057][ T6853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.989370][ T6984] loop0: detected capacity change from 0 to 8192 [ 59.021102][ T6992] loop1: detected capacity change from 0 to 4096 [ 59.032963][ T6992] ntfs3: loop1: $Volume is corrupted. [ 59.223045][ T6853] team0: Port device team_slave_0 added [ 59.293310][ T6853] team0: Port device team_slave_1 added [ 59.366571][ T7011] batadv0: mtu less than device minimum [ 59.406970][ T7016] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 59.416103][ T7023] netlink: 'syz.1.163': attribute type 10 has an invalid length. [ 59.443273][ T7023] bond0: (slave netdevsim0): no link monitoring support [ 59.448434][ T7022] loop0: detected capacity change from 0 to 4096 [ 59.461598][ T7023] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 59.475762][ T7023] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 59.478377][ T7023] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 59.490115][ T6853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.505246][ T6853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.525077][ T6853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.550515][ T5947] Bluetooth: hci4: command tx timeout [ 59.561367][ T1962] hsr_slave_0: left promiscuous mode [ 59.599151][ T1962] hsr_slave_1: left promiscuous mode [ 59.710781][ T1962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.714200][ T1962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.723236][ T1962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.727809][ T1962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.765528][ T1962] veth1_macvtap: left promiscuous mode [ 59.767927][ T1962] veth0_macvtap: left promiscuous mode [ 59.769566][ T1962] veth1_vlan: left promiscuous mode [ 59.771982][ T1962] veth0_vlan: left promiscuous mode [ 59.977339][ T7042] loop3: detected capacity change from 0 to 8 [ 59.983441][ T7042] unable to read id index table [ 60.022173][ T6377] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 61.577222][ T1962] team0 (unregistering): Port device team_slave_1 removed [ 61.621695][ T5947] Bluetooth: hci4: command tx timeout [ 61.761683][ T1962] team0 (unregistering): Port device team_slave_0 removed [ 63.888871][ T6853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.897359][ T6853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.905229][ T6853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.113674][ T6853] hsr_slave_0: entered promiscuous mode [ 64.151730][ T6853] hsr_slave_1: entered promiscuous mode [ 64.190767][ T6853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.196244][ T6853] Cannot create hsr debugfs directory [ 64.206604][ T7060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 64.215565][ T7066] netlink: 'syz.2.184': attribute type 21 has an invalid length. [ 64.225738][ T7066] netlink: 132 bytes leftover after parsing attributes in process `syz.2.184'. [ 64.456385][ T7079] loop3: detected capacity change from 0 to 2048 [ 64.516480][ T2323] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.518699][ T2323] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.638550][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.644145][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.651421][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.654832][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.657683][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.659807][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.740784][ T7095] netlink: 'syz.1.195': attribute type 11 has an invalid length. [ 65.185565][ T7121] affs: No valid root block on device nbd2 [ 65.248416][ T1962] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.284877][ T7088] chnl_net:caif_netlink_parms(): no params data found [ 65.383743][ T1962] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.512284][ T1962] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.675291][ T1962] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.699894][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.704695][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.706988][ T7088] bridge_slave_0: entered allmulticast mode [ 65.711966][ T7088] bridge_slave_0: entered promiscuous mode [ 65.714759][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 65.718514][ T6853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.729371][ T6853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.742038][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.744232][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.746293][ T7088] bridge_slave_1: entered allmulticast mode [ 65.755964][ T7088] bridge_slave_1: entered promiscuous mode [ 65.775633][ T6853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.788160][ T7088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.793977][ T6853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.799165][ T7088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.826024][ T7088] team0: Port device team_slave_0 added [ 65.839134][ T7088] team0: Port device team_slave_1 added [ 65.884672][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.886674][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.894888][ T7088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.899778][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.904186][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.911837][ T7088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.967487][ T1962] bridge_slave_1: left allmulticast mode [ 65.969281][ T1962] bridge_slave_1: left promiscuous mode [ 65.971428][ T1962] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.975769][ T1962] bridge_slave_0: left allmulticast mode [ 65.977750][ T1962] bridge_slave_0: left promiscuous mode [ 65.979563][ T1962] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.474308][ T7187] loop3: detected capacity change from 0 to 32768 [ 66.476707][ T7187] XFS: noikeep mount option is deprecated. [ 66.478748][ T7187] XFS: attr2 mount option is deprecated. [ 66.482268][ T7187] XFS: noikeep mount option is deprecated. [ 66.508841][ T7187] XFS (loop3): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 66.519662][ T6589] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x50/0xf0, xfs_finobt block 0x10 [ 66.524102][ T6589] XFS (loop3): Unmount and run xfs_repair [ 66.525597][ T6589] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 66.527745][ T6589] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 66.530086][ T6589] 00000010: 00 00 00 00 00 00 00 10 00 00 00 03 00 00 00 80 ................ [ 66.540726][ T6589] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 66.543256][ T6589] 00000030: 00 00 00 00 37 43 cf 4c 00 00 24 40 00 00 40 37 ....7C.L..$@..@7 [ 66.545687][ T6589] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 66.548056][ T6589] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.550774][ T6589] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.553153][ T6589] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.556451][ T7187] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x10 len 4 error 74 [ 66.560033][ T7187] XFS (loop3): Failed to initialize disk quotas. [ 66.586646][ T6391] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 66.589602][ T6391] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 66.746439][ T52] Bluetooth: hci3: command tx timeout [ 67.553356][ T1962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.618274][ T1962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.935905][ T1962] bond0 (unregistering): Released all slaves [ 68.376326][ T7088] hsr_slave_0: entered promiscuous mode [ 68.401745][ T7088] hsr_slave_1: entered promiscuous mode [ 68.440941][ T7088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.443130][ T7088] Cannot create hsr debugfs directory [ 68.673692][ T6853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.709580][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 68.788956][ T6853] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.821564][ T52] Bluetooth: hci3: command tx timeout [ 69.773489][ T3795] cfg80211: failed to load regulatory.db [ 69.875384][ T7255] binder: 7254:7255 tried to acquire reference to desc 0, got 1 instead [ 69.879431][ T7255] binder: 7254:7255 got transaction with invalid parent offset or type [ 69.882927][ T7255] binder: 7254:7255 transaction call to 7254:0 failed 5/29201/-22, size 80-24 line 3462 [ 69.889286][ T6374] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.914968][ T6461] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.916837][ T6461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.959580][ T7241] loop2: detected capacity change from 0 to 40427 [ 69.990306][ T7241] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 69.992276][ T7241] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 70.042249][ T7241] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 70.072874][ T1962] hsr_slave_0: left promiscuous mode [ 70.118444][ T7241] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 70.120789][ T7241] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 70.140465][ T1962] hsr_slave_1: left promiscuous mode [ 70.263046][ T1962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.265124][ T1962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.273340][ T1962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.280934][ T1962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.337670][ T1962] veth1_macvtap: left promiscuous mode [ 70.339182][ T1962] veth0_macvtap: left promiscuous mode [ 70.352153][ T7250] loop3: detected capacity change from 0 to 32768 [ 70.354610][ T1962] veth1_vlan: left promiscuous mode [ 70.356114][ T1962] veth0_vlan: left promiscuous mode [ 70.360698][ T7250] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.242 (7250) [ 70.382893][ T7250] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 70.385750][ T7250] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 70.388216][ T7250] BTRFS info (device loop3): using free-space-tree [ 70.776028][ T7303] loop2: detected capacity change from 0 to 64 [ 70.901803][ T52] Bluetooth: hci3: command tx timeout [ 71.092488][ T7307] netlink: 165 bytes leftover after parsing attributes in process `syz.2.252'. [ 71.200733][ T6391] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 71.237852][ T7312] loop2: detected capacity change from 0 to 256 [ 71.266524][ T7312] FAT-fs (loop2): Directory bread(block 64) failed [ 71.268744][ T7312] FAT-fs (loop2): Directory bread(block 65) failed [ 71.288702][ T7312] FAT-fs (loop2): Directory bread(block 66) failed [ 71.293633][ T7312] FAT-fs (loop2): Directory bread(block 67) failed [ 71.295534][ T7312] FAT-fs (loop2): Directory bread(block 68) failed [ 71.297306][ T7312] FAT-fs (loop2): Directory bread(block 69) failed [ 71.308950][ T7312] FAT-fs (loop2): Directory bread(block 70) failed [ 71.316659][ T7312] FAT-fs (loop2): Directory bread(block 71) failed [ 71.318522][ T7312] FAT-fs (loop2): Directory bread(block 72) failed [ 71.320291][ T7312] FAT-fs (loop2): Directory bread(block 73) failed [ 71.592421][ T7316] loop3: detected capacity change from 0 to 32768 [ 71.689624][ T7316] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 71.694555][ T7316] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 71.754210][ T7316] bcachefs (loop3): alloc_read... done [ 71.755945][ T7316] bcachefs (loop3): stripes_read... done [ 71.757460][ T7316] bcachefs (loop3): snapshots_read... done [ 71.760156][ T7316] bcachefs (loop3): journal_replay... done [ 71.761878][ T7316] bcachefs (loop3): resume_logged_ops... done [ 71.764739][ T7316] bcachefs (loop3): going read-write [ 71.767849][ T7316] bcachefs (loop3): done starting filesystem [ 71.940689][ T6391] bcachefs (loop3): shutting down [ 71.942133][ T6391] bcachefs (loop3): going read-only [ 71.943573][ T6391] bcachefs (loop3): finished waiting for writes to stop [ 71.981225][ T6391] bcachefs (loop3): flushing journal and stopping allocators, journal seq 18 [ 71.997404][ T6391] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 21 [ 72.003993][ T6391] bcachefs (loop3): shutdown complete, journal seq 22 [ 72.006570][ T6391] bcachefs (loop3): marking filesystem clean [ 72.025663][ T6391] bcachefs (loop3): shutdown complete [ 72.462454][ T1962] team0 (unregistering): Port device team_slave_1 removed [ 72.500017][ T7335] loop2: detected capacity change from 0 to 8192 [ 72.506677][ T1962] team0 (unregistering): Port device team_slave_0 removed [ 72.520921][ T7335] loop2: p1 < > p2 [ 72.524622][ T7335] loop2: partition table partially beyond EOD, truncated [ 72.527133][ T7335] loop2: p1 start 4177526784 is beyond EOD, truncated [ 72.529382][ T7335] loop2: p2 start 163840 is beyond EOD, truncated [ 72.804389][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.806531][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.813193][ T7331] tipc: Started in network mode [ 72.814874][ T7331] tipc: Node identity f0, cluster identity 4711 [ 72.816600][ T7331] tipc: Node number set to 240 [ 72.866343][ T7338] loop1: detected capacity change from 0 to 1024 [ 72.914041][ T7340] loop3: detected capacity change from 0 to 64 [ 72.969421][ T7338] hfsplus: invalid catalog entry type in lookup [ 72.982058][ T52] Bluetooth: hci3: command tx timeout [ 73.061049][ T4365] hfsplus: b-tree write err: -5, ino 4 [ 73.128014][ T6853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.444032][ T7378] loop1: detected capacity change from 0 to 136 [ 73.487704][ T7374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.268'. [ 73.551437][ T7386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 73.553890][ T7386] IPv6: NLM_F_CREATE should be set when creating new route [ 73.555850][ T7386] IPv6: NLM_F_CREATE should be set when creating new route [ 73.557793][ T7386] IPv6: NLM_F_CREATE should be set when creating new route [ 73.662344][ T6853] veth0_vlan: entered promiscuous mode [ 73.667481][ T6853] veth1_vlan: entered promiscuous mode [ 73.699921][ T7395] input: syz1 as /devices/virtual/input/input2 [ 73.728882][ T6853] veth0_macvtap: entered promiscuous mode [ 73.749895][ T7393] loop3: detected capacity change from 0 to 4096 [ 73.752740][ T7393] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 73.763407][ T6853] veth1_macvtap: entered promiscuous mode [ 73.776360][ T7393] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 73.784530][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.787474][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.790254][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.817802][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.827475][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.830294][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.846252][ T6853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.853896][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.856749][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.859318][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.865807][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.869597][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.881524][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.895472][ T6853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.907442][ T7393] overlayfs: invalid redirect ((null)) [ 73.917132][ T6853] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.929292][ T6853] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.934115][ T6853] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.938198][ T6853] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.002080][ T7088] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.011943][ T7088] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.027960][ T7088] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.049398][ T7088] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.096536][ T6374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.098685][ T6374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.226925][ T3795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.238434][ T3795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.289742][ T7088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.318982][ T7088] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.325890][ T3795] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.327807][ T3795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.343018][ T3795] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.345003][ T3795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.454016][ T7434] loop1: detected capacity change from 0 to 128 [ 74.456354][ T7434] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.505551][ T7434] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.604607][ T7442] loop4: detected capacity change from 0 to 512 [ 74.688209][ T7046] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 74.694007][ T7442] loop4: detected capacity change from 0 to 2048 [ 74.694955][ T7046] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 74.698271][ T7046] Buffer I/O error on dev loop4, logical block 0, async page read [ 74.729068][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.732703][ T1962] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.742554][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.746765][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.749363][ T7442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.760082][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.769997][ T5947] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.773052][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.882222][ T1962] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.898911][ T7088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.022442][ T1962] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.044002][ T7461] syz.2.291 uses obsolete (PF_INET,SOCK_PACKET) [ 75.212116][ T1962] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.213816][ T7465] netlink: 188 bytes leftover after parsing attributes in process `syz.2.292'. [ 75.225992][ T7465] netlink: 56 bytes leftover after parsing attributes in process `syz.2.292'. [ 75.245665][ T7088] veth0_vlan: entered promiscuous mode [ 75.273655][ T7088] veth1_vlan: entered promiscuous mode [ 75.409684][ T7088] veth0_macvtap: entered promiscuous mode [ 75.427427][ T7088] veth1_macvtap: entered promiscuous mode [ 75.494773][ T7449] chnl_net:caif_netlink_parms(): no params data found [ 75.579054][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.594577][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.597203][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.600024][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.618098][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.630447][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.633047][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.636046][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.640294][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.645042][ T1962] bridge_slave_1: left allmulticast mode [ 75.647128][ T1962] bridge_slave_1: left promiscuous mode [ 75.648676][ T1962] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.653092][ T1962] bridge_slave_0: left allmulticast mode [ 75.654624][ T1962] bridge_slave_0: left promiscuous mode [ 75.656204][ T1962] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.948777][ T6853] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.003748][ T7487] Error parsing options; rc = [-22] [ 76.821506][ T52] Bluetooth: hci2: command tx timeout [ 77.148960][ T7497] loop4: detected capacity change from 0 to 32768 [ 77.203314][ T1962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.227495][ T7497] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,noshard_inode_numbers,noinodes_use_key_cache,gc_reserve_bytes=512 GiB,nojournal_transaction_names [ 77.237301][ T7497] bcachefs (loop4): recovering from clean shutdown, journal seq 8 [ 77.253324][ T1962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.269723][ T7497] bcachefs (loop4): alloc_read... done [ 77.271537][ T7497] bcachefs (loop4): stripes_read... done [ 77.273084][ T7497] bcachefs (loop4): snapshots_read... done [ 77.275747][ T7497] bcachefs (loop4): journal_replay... done [ 77.277425][ T7497] bcachefs (loop4): resume_logged_ops... done [ 77.279164][ T7497] bcachefs (loop4): going read-write [ 77.282088][ T7497] bcachefs (loop4): done starting filesystem [ 77.300137][ T1962] bond0 (unregistering): Released all slaves [ 77.332079][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.345741][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.348549][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.370485][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.373117][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.375936][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.378669][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.384083][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.393815][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.399355][ T7509] loop1: detected capacity change from 0 to 512 [ 77.417047][ T6853] bcachefs (loop4): shutting down [ 77.418407][ T6853] bcachefs (loop4): going read-only [ 77.419828][ T6853] bcachefs (loop4): finished waiting for writes to stop [ 77.432418][ T7509] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.448882][ T1962] tipc: Left network mode [ 77.453751][ T7509] EXT4-fs (loop1): 1 truncate cleaned up [ 77.455734][ T7509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.474698][ T6853] bcachefs (loop4): flushing journal and stopping allocators, journal seq 9 [ 77.524482][ T6853] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11 [ 77.525582][ T7088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.530700][ T7088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.533087][ T7088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.535441][ T7088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.539972][ T6853] bcachefs (loop4): shutdown complete, journal seq 12 [ 77.542596][ T6853] bcachefs (loop4): marking filesystem clean [ 77.561414][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.571857][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.573963][ T7449] bridge_slave_0: entered allmulticast mode [ 77.576338][ T7449] bridge_slave_0: entered promiscuous mode [ 77.587820][ T6383] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.607078][ T6853] bcachefs (loop4): shutdown complete [ 77.789134][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.792037][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.794331][ T7449] bridge_slave_1: entered allmulticast mode [ 77.796600][ T7449] bridge_slave_1: entered promiscuous mode [ 77.957168][ T7449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.054375][ T7541] loop4: detected capacity change from 0 to 256 [ 78.087742][ T6853] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 78.096103][ T6853] FAT-fs (loop4): Filesystem has been set read-only [ 78.102403][ T6853] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 78.165852][ T7449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.258730][ T1962] hsr_slave_0: left promiscuous mode [ 78.301040][ T1962] hsr_slave_1: left promiscuous mode [ 78.390600][ T1962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.392697][ T1962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.395367][ T1962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.397479][ T1962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.407967][ T1962] veth1_macvtap: left promiscuous mode [ 78.409533][ T1962] veth0_macvtap: left promiscuous mode [ 78.411490][ T1962] veth1_vlan: left promiscuous mode [ 78.412957][ T1962] veth0_vlan: left promiscuous mode [ 78.900568][ T52] Bluetooth: hci2: command tx timeout [ 80.196014][ T1962] team0 (unregistering): Port device team_slave_1 removed [ 80.383438][ T1962] team0 (unregistering): Port device team_slave_0 removed [ 80.980500][ T52] Bluetooth: hci2: command tx timeout [ 82.698276][ T7449] team0: Port device team_slave_0 added [ 82.836908][ T7449] team0: Port device team_slave_1 added [ 82.855109][ T440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.857142][ T440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.869976][ T7546] loop1: detected capacity change from 0 to 1024 [ 82.898324][ T7546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.898873][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.904369][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.911956][ T7449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.921409][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.923517][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.931306][ T7449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.029646][ T6384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.037664][ T6384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.062228][ T52] Bluetooth: hci2: command tx timeout [ 83.069139][ T6383] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.083397][ T7449] hsr_slave_0: entered promiscuous mode [ 83.151559][ T7563] loop2: detected capacity change from 0 to 8 [ 83.152586][ T7449] hsr_slave_1: entered promiscuous mode [ 83.182751][ T5947] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.206685][ T5947] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.211575][ T5947] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.220848][ T7449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.222920][ T7449] Cannot create hsr debugfs directory [ 83.236690][ T5947] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.243905][ T5947] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.247139][ T5947] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.834390][ T7599] hub 1-0:1.0: USB hub found [ 83.838559][ T7599] hub 1-0:1.0: 1 port detected [ 83.972444][ T7610] netlink: 'syz.2.326': attribute type 1 has an invalid length. [ 83.974539][ T7610] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.326'. [ 83.980005][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'. [ 84.035681][ T7614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.328'. [ 84.334470][ T1962] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.438365][ T7632] loop2: detected capacity change from 0 to 2048 [ 84.452278][ T7632] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 84.463575][ T7632] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.479658][ T1962] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.495348][ T7632] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 84.520579][ T7565] chnl_net:caif_netlink_parms(): no params data found [ 84.627658][ T1962] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.661358][ T7449] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.752100][ T1962] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.768784][ T7449] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.772732][ T7449] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.792107][ T7449] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.799623][ T7634] loop1: detected capacity change from 0 to 40427 [ 84.811135][ T7634] F2FS-fs (loop1): Encrypt feature is off [ 84.835869][ T7565] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.838401][ T7565] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.848589][ T7565] bridge_slave_0: entered allmulticast mode [ 84.859271][ T7565] bridge_slave_0: entered promiscuous mode [ 84.870896][ T7572] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 84.879845][ T7565] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.895156][ T7565] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.898435][ T7565] bridge_slave_1: entered allmulticast mode [ 84.908301][ T7565] bridge_slave_1: entered promiscuous mode [ 85.102379][ T7565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.108829][ T7565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.212531][ T7565] team0: Port device team_slave_0 added [ 85.215889][ T7565] team0: Port device team_slave_1 added [ 85.244259][ T1962] bridge_slave_1: left allmulticast mode [ 85.245871][ T1962] bridge_slave_1: left promiscuous mode [ 85.247554][ T1962] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.264877][ T1962] bridge_slave_0: left allmulticast mode [ 85.266472][ T1962] bridge_slave_0: left promiscuous mode [ 85.268029][ T1962] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.300513][ T52] Bluetooth: hci4: command tx timeout [ 85.888521][ T7673] loop0: detected capacity change from 0 to 128 [ 86.217905][ T7673] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.508890][ T7697] loop2: detected capacity change from 0 to 512 [ 86.522282][ T7697] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 86.599581][ T7572] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 87.380557][ T52] Bluetooth: hci4: command tx timeout [ 87.562850][ T1962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.603543][ T1962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.644475][ T1962] bond0 (unregistering): Released all slaves [ 87.659355][ T7565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.661592][ T7565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.668952][ T7565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.682391][ T7565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.684512][ T7565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.692689][ T7565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.758218][ T7088] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.759107][ T7565] hsr_slave_0: entered promiscuous mode [ 87.810624][ T7565] hsr_slave_1: entered promiscuous mode [ 87.853935][ T7565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.855957][ T7565] Cannot create hsr debugfs directory [ 88.145492][ T7449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.153838][ T7734] loop0: detected capacity change from 0 to 40427 [ 88.193808][ T7734] F2FS-fs (loop0): invalid crc value [ 88.257602][ T7734] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.295731][ T7737] loop2: detected capacity change from 0 to 32768 [ 88.314335][ T7734] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 88.343481][ T7755] loop1: detected capacity change from 0 to 64 [ 88.440225][ T7737] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 88.444708][ T7737] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 88.458012][ T7449] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.533508][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.535663][ T6374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.538568][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.540728][ T6374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.599802][ T7737] bcachefs (loop2): alloc_read... done [ 88.606293][ T7737] bcachefs (loop2): stripes_read... done [ 88.607903][ T7737] bcachefs (loop2): snapshots_read... done [ 88.981047][ T7737] bcachefs (loop2): journal_replay... done [ 88.987556][ T7737] bcachefs (loop2): resume_logged_ops... done [ 88.991069][ T7737] bcachefs (loop2): going read-write [ 89.021305][ T7737] bcachefs (loop2): done starting filesystem [ 89.107691][ T1962] hsr_slave_0: left promiscuous mode [ 89.160291][ T1962] hsr_slave_1: left promiscuous mode [ 89.213015][ T7088] syz-executor: attempt to access beyond end of device [ 89.213015][ T7088] loop0: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 89.218492][ T7088] syz-executor: attempt to access beyond end of device [ 89.218492][ T7088] loop0: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 89.226808][ T7088] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 89.228955][ T7088] F2FS-fs (loop0): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 89.270580][ T1962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.272807][ T1962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.276644][ T6387] bcachefs (loop2): shutting down [ 89.276800][ T1962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.278065][ T6387] bcachefs (loop2): going read-only [ 89.280114][ T1962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.282590][ T6387] bcachefs (loop2): finished waiting for writes to stop [ 89.300126][ T1962] veth1_macvtap: left promiscuous mode [ 89.305386][ T1962] veth0_macvtap: left promiscuous mode [ 89.306987][ T1962] veth1_vlan: left promiscuous mode [ 89.308732][ T1962] veth0_vlan: left promiscuous mode [ 89.346375][ T6387] bcachefs (loop2): flushing journal and stopping allocators, journal seq 14 [ 89.364570][ T6387] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 16 [ 89.370974][ T6387] bcachefs (loop2): shutdown complete, journal seq 17 [ 89.373746][ T6387] bcachefs (loop2): marking filesystem clean [ 89.425292][ T6387] bcachefs (loop2): shutdown complete [ 89.435418][ T7781] loop0: detected capacity change from 0 to 1024 [ 89.462407][ T6390] Bluetooth: hci4: command tx timeout [ 89.504189][ T7781] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.507329][ T7781] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.509735][ T7781] EXT4-fs (loop0): Test dummy encryption mode enabled [ 89.515231][ T7781] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003] [ 89.518796][ T7781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.553501][ T7781] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 89.587504][ T7088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.776379][ T7789] XFS (nullb0): Invalid superblock magic number [ 90.758428][ T7808] loop2: detected capacity change from 0 to 256 [ 90.817628][ T7572] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 91.540909][ T6390] Bluetooth: hci4: command tx timeout [ 91.813348][ T7812] loop0: detected capacity change from 0 to 32768 [ 92.574616][ T1962] team0 (unregistering): Port device team_slave_1 removed [ 92.804217][ T1962] team0 (unregistering): Port device team_slave_0 removed [ 95.104004][ T7772] netlink: 40 bytes leftover after parsing attributes in process `syz.1.355'. [ 95.425339][ T7834] netlink: 830 bytes leftover after parsing attributes in process `syz.1.369'. [ 95.526348][ T7449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.552877][ T7847] loop1: detected capacity change from 0 to 2048 [ 95.557608][ T7847] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.638186][ T7449] veth0_vlan: entered promiscuous mode [ 95.666639][ T7449] veth1_vlan: entered promiscuous mode [ 95.719575][ T7449] veth0_macvtap: entered promiscuous mode [ 95.723615][ T7824] loop2: detected capacity change from 0 to 32768 [ 95.745397][ T7449] veth1_macvtap: entered promiscuous mode [ 95.757481][ T7824] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 95.826358][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.844443][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.847244][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.851523][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.854271][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.857124][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.873186][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.952580][ T7824] XFS (loop2): Ending clean mount [ 95.967079][ T7824] XFS (loop2): Quotacheck needed: Please wait. [ 96.016314][ T7824] XFS (loop2): Quotacheck: Done. [ 96.044123][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.212442][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.257170][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.345503][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.418230][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.497988][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.696276][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.792427][ T7565] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.803154][ T7565] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.842297][ T7882] xt_TCPMSS: Only works on TCP SYN packets [ 96.871900][ T6387] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.915039][ T7449] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.917482][ T7449] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.922698][ T7889] loop1: detected capacity change from 0 to 8 [ 96.933698][ T7449] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.936067][ T7449] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.941893][ T7889] SQUASHFS error: xz decompression failed, data probably corrupt [ 96.943982][ T7889] SQUASHFS error: Failed to read block 0x108: -5 [ 96.945660][ T7889] SQUASHFS error: Unable to read metadata cache entry [106] [ 96.947563][ T7889] SQUASHFS error: Unable to read inode 0x11f [ 96.950658][ T7565] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.957430][ T7565] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.409783][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.488830][ T7914] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 97.509879][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.515681][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.533508][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.549984][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 97.562288][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.151594][ T1962] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.156723][ T7919] loop2: detected capacity change from 0 to 256 [ 98.284404][ T1962] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.304309][ T1996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.306483][ T1996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.404766][ T7932] loop1: detected capacity change from 0 to 164 [ 98.412479][ T7932] rock: directory entry would overflow storage [ 98.414775][ T7932] rock: sig=0x5245, size=8, remaining=3 [ 98.433130][ T1962] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.438171][ T7932] ISOFS: unable to read i-node block [ 98.464509][ T7565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.477589][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.484047][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.497841][ T7935] netlink: 'syz.2.391': attribute type 74 has an invalid length. [ 98.581500][ T1962] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.616227][ T7565] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.648857][ T3795] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.651076][ T3795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.705949][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.707969][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.873061][ T7911] chnl_net:caif_netlink_parms(): no params data found [ 98.895558][ T1962] bridge_slave_1: left allmulticast mode [ 98.897210][ T1962] bridge_slave_1: left promiscuous mode [ 98.898763][ T1962] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.954855][ T1962] bridge_slave_0: left allmulticast mode [ 98.956525][ T1962] bridge_slave_0: left promiscuous mode [ 98.958223][ T1962] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.007522][ T7962] loop3: detected capacity change from 0 to 1024 [ 99.017385][ T7962] hfsplus: xattr search failed [ 99.025124][ T7962] hfsplus: b-tree write err: -5, ino 4 [ 99.054613][ T7966] loop1: detected capacity change from 0 to 256 [ 99.060224][ T7966] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 99.158077][ T7835] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 99.568211][ T7972] loop3: detected capacity change from 0 to 4096 [ 99.607474][ T7972] ntfs3: loop3: mft corrupted [ 99.608805][ T7972] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 99.618890][ T7972] ntfs3: loop3: mft corrupted [ 99.718932][ T52] Bluetooth: hci3: command tx timeout [ 101.228618][ T8003] loop3: detected capacity change from 0 to 1024 [ 101.317273][ T8003] syz.3.411: attempt to access beyond end of device [ 101.317273][ T8003] loop3: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 101.322610][ T8003] syz.3.411: attempt to access beyond end of device [ 101.322610][ T8003] loop3: rw=1, sector=262, nr_sectors = 2048 limit=1024 [ 101.327247][ T8003] syz.3.411: attempt to access beyond end of device [ 101.327247][ T8003] loop3: rw=1, sector=2310, nr_sectors = 2048 limit=1024 [ 101.331422][ T8003] syz.3.411: attempt to access beyond end of device [ 101.331422][ T8003] loop3: rw=1, sector=4358, nr_sectors = 2048 limit=1024 [ 101.335371][ T8003] syz.3.411: attempt to access beyond end of device [ 101.335371][ T8003] loop3: rw=1, sector=6406, nr_sectors = 2048 limit=1024 [ 101.339597][ T8003] syz.3.411: attempt to access beyond end of device [ 101.339597][ T8003] loop3: rw=1, sector=8454, nr_sectors = 2048 limit=1024 [ 101.343800][ T8003] syz.3.411: attempt to access beyond end of device [ 101.343800][ T8003] loop3: rw=1, sector=10502, nr_sectors = 2048 limit=1024 [ 101.347961][ T8003] syz.3.411: attempt to access beyond end of device [ 101.347961][ T8003] loop3: rw=1, sector=12550, nr_sectors = 2048 limit=1024 [ 101.352464][ T8003] syz.3.411: attempt to access beyond end of device [ 101.352464][ T8003] loop3: rw=1, sector=14598, nr_sectors = 2048 limit=1024 [ 101.356723][ T8003] syz.3.411: attempt to access beyond end of device [ 101.356723][ T8003] loop3: rw=1, sector=16646, nr_sectors = 2048 limit=1024 [ 101.791210][ T52] Bluetooth: hci3: command tx timeout [ 102.726134][ T8009] loop3: detected capacity change from 0 to 512 [ 102.728846][ T8009] EXT4-fs (loop3): Test dummy encryption mode enabled [ 102.742064][ T8009] EXT4-fs error (device loop3): __ext4_iget:4906: inode #11: block 1: comm syz.3.413: invalid block [ 102.747519][ T8009] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.413: couldn't read orphan inode 11 (err -117) [ 102.753611][ T8009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.927677][ T1962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.963344][ T1962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.091633][ T1962] bond0 (unregistering): Released all slaves [ 103.713065][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 103.786674][ T7449] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.825043][ T7994] team0: Port device macvlan1 added [ 103.860638][ T52] Bluetooth: hci3: command tx timeout [ 103.889148][ T7911] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.898071][ T7911] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.900265][ T7911] bridge_slave_0: entered allmulticast mode [ 103.908292][ T7911] bridge_slave_0: entered promiscuous mode [ 103.942138][ T8031] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 103.955726][ T8034] loop1: detected capacity change from 0 to 8 [ 103.959151][ T8034] SQUASHFS error: lzo decompression failed, data probably corrupt [ 103.965254][ T8034] SQUASHFS error: Failed to read block 0x91: -5 [ 103.971191][ T8034] SQUASHFS error: Unable to read metadata cache entry [8f] [ 103.976558][ T8034] SQUASHFS error: Unable to read inode 0x11f [ 104.052720][ T7911] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.054913][ T7911] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.056988][ T7911] bridge_slave_1: entered allmulticast mode [ 104.079287][ T7911] bridge_slave_1: entered promiscuous mode [ 104.111904][ T7565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.159723][ T7911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.202552][ T8047] loop1: detected capacity change from 0 to 512 [ 104.207573][ T8047] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.234442][ T8047] EXT4-fs (loop1): 1 truncate cleaned up [ 104.236499][ T8047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.344016][ T6383] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.377704][ T7911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.421917][ T8038] loop3: detected capacity change from 0 to 32768 [ 104.427375][ T8038] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.420 (8038) [ 104.440046][ T7911] team0: Port device team_slave_0 added [ 104.458967][ T8038] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 104.467281][ T8038] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 104.469632][ T8038] BTRFS info (device loop3): using free-space-tree [ 104.506420][ T7911] team0: Port device team_slave_1 added [ 104.550084][ T1962] hsr_slave_0: left promiscuous mode [ 104.598351][ T1962] hsr_slave_1: left promiscuous mode [ 104.700573][ T1962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.702649][ T1962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.721009][ T1962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.723043][ T1962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.747022][ T7449] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 104.786770][ T1962] veth1_macvtap: left promiscuous mode [ 104.788641][ T1962] veth0_macvtap: left promiscuous mode [ 104.790247][ T1962] veth1_vlan: left promiscuous mode [ 104.797926][ T1962] veth0_vlan: left promiscuous mode [ 104.910548][ T8065] loop1: detected capacity change from 0 to 40427 [ 104.913284][ T8065] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 104.915337][ T8065] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 104.947045][ T8065] F2FS-fs (loop1): Found nat_bits in checkpoint [ 104.996386][ T8065] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 104.998486][ T8065] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 105.209963][ T6383] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 105.539549][ T1962] team0 (unregistering): Port device team_slave_1 removed [ 105.571179][ T1962] team0 (unregistering): Port device team_slave_0 removed [ 105.582459][ T8101] fuse: Bad value for 'fd' [ 105.940502][ T52] Bluetooth: hci3: command tx timeout [ 105.966083][ T8086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.426'. [ 105.968986][ T8086] bond0: option arp_all_targets: invalid value (18446744073709551615) [ 105.982139][ T7911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.984722][ T8094] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 105.987801][ T7911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.988285][ T8094] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 106.006298][ T7911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.012194][ T8094] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 106.017936][ T7911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.026833][ T7911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.050972][ T7911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.193541][ T7911] hsr_slave_0: entered promiscuous mode [ 106.227618][ T8108] loop1: detected capacity change from 0 to 4096 [ 106.241835][ T7911] hsr_slave_1: entered promiscuous mode [ 106.279676][ T8110] loop3: detected capacity change from 0 to 4096 [ 106.306565][ T7911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.308790][ T7911] Cannot create hsr debugfs directory [ 106.321211][ T7565] veth0_vlan: entered promiscuous mode [ 106.418437][ T7565] veth1_vlan: entered promiscuous mode [ 106.451901][ T7565] veth0_macvtap: entered promiscuous mode [ 106.478338][ T7565] veth1_macvtap: entered promiscuous mode [ 106.516639][ T8103] loop2: detected capacity change from 0 to 32768 [ 106.562546][ T7565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.577290][ T7565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.585857][ T7565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.588690][ T7565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.598026][ T7565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.601269][ T7565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.605255][ T7565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.647237][ T8103] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,metadata_target=invalid label 2559,journal_flush_delay=610,nojournal_transaction_names [ 106.693697][ T8103] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 106.719243][ T8136] loop3: detected capacity change from 0 to 256 [ 106.722505][ T7565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.725296][ T7565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.727904][ T7565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.734942][ T8136] exfat: Deprecated parameter 'namecase' [ 106.738793][ T7565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.746823][ T7565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.749862][ T7565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.763464][ T7565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.777392][ T8136] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 106.806547][ T8103] bcachefs (loop2): alloc_read... done [ 106.808216][ T8103] bcachefs (loop2): stripes_read... done [ 106.809797][ T8103] bcachefs (loop2): snapshots_read... done [ 106.821437][ T8135] Zero length message leads to an empty skb [ 106.826741][ T8103] bcachefs (loop2): journal_replay... done [ 106.828374][ T8103] bcachefs (loop2): resume_logged_ops... done [ 106.830157][ T8103] bcachefs (loop2): going read-write [ 106.838833][ T7565] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.845775][ T7565] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.848157][ T7565] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.851879][ T7565] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.863532][ T8103] bcachefs (loop2): done starting filesystem [ 106.955608][ T8145] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 106.965566][ T8145] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 107.056942][ T8150] loop3: detected capacity change from 0 to 256 [ 107.065829][ T6387] bcachefs (loop2): shutting down [ 107.067245][ T6387] bcachefs (loop2): going read-only [ 107.068793][ T6387] bcachefs (loop2): finished waiting for writes to stop [ 107.074115][ T8150] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 107.121888][ T6387] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 107.144575][ T6387] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12 [ 107.228586][ T8154] netlink: 'syz.1.443': attribute type 2 has an invalid length. [ 107.320289][ T6387] bcachefs (loop2): shutdown complete, journal seq 13 [ 107.860707][ T6387] bcachefs (loop2): marking filesystem clean [ 107.868781][ T2089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.868800][ T2089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.893371][ T6387] bcachefs (loop2): shutdown complete [ 107.918883][ T6438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.923313][ T6438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.061458][ T8164] loop3: detected capacity change from 0 to 64 [ 108.083081][ T7911] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.084547][ T8164] hfs: get root inode failed [ 108.112008][ T7911] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.142091][ T7911] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.254237][ T7911] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.344199][ T7911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.356221][ T7911] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.363083][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.365126][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.381497][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.383455][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.584840][ T7911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.657358][ T7911] veth0_vlan: entered promiscuous mode [ 108.683331][ T7911] veth1_vlan: entered promiscuous mode [ 108.713509][ T7911] veth0_macvtap: entered promiscuous mode [ 108.725421][ T7911] veth1_macvtap: entered promiscuous mode [ 108.746963][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.753317][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.758185][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.764484][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.767532][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.770753][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.773715][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.776666][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.783313][ T7911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.795497][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.798930][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.806947][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.809975][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.812783][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.815690][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.832139][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.838281][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.848981][ T7911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.856419][ T7911] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.858893][ T7911] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.877527][ T7911] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.884008][ T7911] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.042500][ T1962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.044667][ T1962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.121536][ T8222] loop3: detected capacity change from 0 to 1024 [ 109.136980][ T6436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.140825][ T6436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.288268][ T8229] 9pnet_fd: Insufficient options for proto=fd [ 109.307613][ T11] hfsplus: b-tree write err: -5, ino 4 [ 109.435653][ T8243] loop4: detected capacity change from 0 to 1024 [ 109.547640][ T8252] loop0: detected capacity change from 0 to 512 [ 109.574957][ T7565] hfsplus: bad catalog entry type [ 109.590054][ T7565] hfsplus: bad catalog entry type [ 109.618210][ T8258] loop1: detected capacity change from 0 to 64 [ 109.632832][ T8252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.667269][ T2089] hfsplus: b-tree write err: -5, ino 4 [ 109.684105][ T8252] EXT4-fs error (device loop0): ext4_get_first_dir_block:3545: inode #12: block 32: comm syz.0.459: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 109.734929][ T8252] EXT4-fs error (device loop0): ext4_get_first_dir_block:3548: inode #12: comm syz.0.459: directory missing '.' [ 109.769394][ T8258] minix_free_block (loop1:2): bit already cleared [ 109.777789][ T8258] minix_free_block (loop1:3): bit already cleared [ 109.800599][ T8258] minix_free_block (loop1:4): bit already cleared [ 109.811644][ T7911] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.822394][ T8263] binder: 8262:8263 tried to acquire reference to desc 0, got 1 instead [ 109.830249][ T8258] minix_free_block (loop1:1): bit already cleared [ 109.833408][ T8263] binder: 8262:8263 not enough space to store 5 fds in buffer [ 109.835544][ T8263] binder: 8263:8262 translate fd array failed [ 109.836584][ T8258] minix_free_block (loop1:4): bit already cleared [ 109.839345][ T8258] minix_free_block (loop1:3): bit already cleared [ 109.847708][ T8263] binder: 8262:8263 transaction call to 8262:0 failed 10/29201/-22, size 112-24 line 3509 [ 109.852293][ T8258] minix_free_block (loop1:2): bit already cleared [ 109.853999][ T8258] minix_free_block (loop1:1): bit already cleared [ 109.861317][ T6589] binder: undelivered TRANSACTION_ERROR: 29201 [ 109.881196][ T8245] loop3: detected capacity change from 0 to 32768 [ 110.215477][ T8284] xt_CONNSECMARK: invalid mode: 0 [ 110.877189][ T8285] loop0: detected capacity change from 0 to 1024 [ 110.878122][ T8245] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 110.889977][ T8285] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 110.891064][ T8245] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 110.897049][ T8285] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 110.903377][ T8285] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 110.913862][ T8285] EXT4-fs error (device loop0): ext4_get_journal_inode:5752: inode #5: comm syz.0.469: unexpected bad inode w/o EXT4_IGET_BAD [ 110.929327][ T8285] EXT4-fs (loop0): no journal found [ 110.932541][ T8285] EXT4-fs (loop0): can't get journal size [ 110.937133][ T8285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.939569][ T8245] bcachefs (loop3): alloc_read... done [ 110.942983][ T8245] bcachefs (loop3): stripes_read... done [ 110.944720][ T8245] bcachefs (loop3): snapshots_read... done [ 110.948328][ T8245] bcachefs (loop3): journal_replay... done [ 110.950119][ T8245] bcachefs (loop3): resume_logged_ops... done [ 110.952112][ T8245] bcachefs (loop3): going read-write [ 110.961806][ T8245] bcachefs (loop3): done starting filesystem [ 110.998943][ T7911] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.104908][ T7449] bcachefs (loop3): shutting down [ 111.106337][ T7449] bcachefs (loop3): going read-only [ 111.118970][ T7449] bcachefs (loop3): finished waiting for writes to stop [ 111.140985][ T6390] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.146419][ T6390] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.149511][ T6390] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.153909][ T6390] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.156601][ T6390] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 111.158687][ T6390] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.196310][ T2089] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.201533][ T7449] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 111.227005][ T7449] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12 [ 111.239878][ T7449] bcachefs (loop3): shutdown complete, journal seq 13 [ 111.243683][ T7449] bcachefs (loop3): marking filesystem clean [ 111.305590][ T8305] sp0: Synchronizing with TNC [ 111.326792][ T8308] sp0: Found TNC [ 111.340929][ T7449] bcachefs (loop3): shutdown complete [ 111.359536][ T8304] [U] è` [ 111.382520][ T2089] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.446821][ T8314] loop2: detected capacity change from 0 to 1024 [ 111.460604][ T8314] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 111.463428][ T8314] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 111.483488][ T8315] tipc: Started in network mode [ 111.484833][ T8315] tipc: Node identity , cluster identity 4711 [ 111.486409][ T8315] tipc: Failed to set node id, please configure manually [ 111.496484][ T8315] tipc: Enabling of bearer rejected, failed to enable media [ 111.673238][ T2089] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.691755][ T8321] loop1: detected capacity change from 0 to 16 [ 111.720515][ T8321] erofs: (device loop1): mounted with root inode @ nid 36. [ 112.552187][ T2089] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.573980][ T7822] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 112.675332][ T8297] chnl_net:caif_netlink_parms(): no params data found [ 112.809006][ T8341] sp0: Synchronizing with TNC [ 112.811338][ T8341] ------------[ cut here ]------------ [ 112.811691][ T8341] [ 112.811696][ T8341] ====================================================== [ 112.811700][ T8341] WARNING: possible circular locking dependency detected [ 112.811705][ T8341] 6.10.0-rc2-syzkaller-g8867bbd4a056 #0 Tainted: G W [ 112.811711][ T8341] ------------------------------------------------------ [ 112.811715][ T8341] syz.1.488/8341 is trying to acquire lock: [ 112.811721][ T8341] ffff80008f58d020 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x88/0xec [ 112.811753][ T8341] [ 112.811753][ T8341] but task is already holding lock: [ 112.811768][ T8341] ffff800094049db8 (&port_lock_key){-...}-{2:2}, at: uart_write+0x114/0x2ec [ 112.811793][ T8341] [ 112.811793][ T8341] which lock already depends on the new lock. [ 112.811793][ T8341] [ 112.811796][ T8341] [ 112.811796][ T8341] the existing dependency chain (in reverse order) is: [ 112.811800][ T8341] [ 112.811800][ T8341] -> #1 (&port_lock_key){-...}-{2:2}: [ 112.811814][ T8341] _raw_spin_lock_irqsave+0x5c/0x7c [ 112.811828][ T8341] pl011_console_write+0x148/0x724 [ 112.811841][ T8341] console_flush_all+0x5cc/0xb74 [ 112.811850][ T8341] console_unlock+0xec/0x3d4 [ 112.811859][ T8341] vprintk_emit+0x1ec/0x350 [ 112.811868][ T8341] vprintk_default+0xa0/0xe4 [ 112.811876][ T8341] vprintk+0x200/0x2d4 [ 112.811885][ T8341] _printk+0xdc/0x128 [ 112.811898][ T8341] register_console+0x700/0xa8c [ 112.811907][ T8341] serial_core_register_port+0x1428/0x1bf4 [ 112.811916][ T8341] serial_ctrl_register_port+0x28/0x38 [ 112.811926][ T8341] uart_add_one_port+0x28/0x38 [ 112.811936][ T8341] pl011_register_port+0x1b4/0x44c [ 112.811947][ T8341] sbsa_uart_probe+0x488/0x608 [ 112.811958][ T8341] platform_probe+0x148/0x1c0 [ 112.811970][ T8341] really_probe+0x38c/0x8fc [ 112.811980][ T8341] __driver_probe_device+0x194/0x374 [ 112.811991][ T8341] driver_probe_device+0x78/0x330 [ 112.812001][ T8341] __device_attach_driver+0x2a8/0x4f4 [ 112.812011][ T8341] bus_for_each_drv+0x228/0x2bc [ 112.812019][ T8341] __device_attach+0x2b4/0x434 [ 112.812029][ T8341] device_initial_probe+0x24/0x34 [ 112.812038][ T8341] bus_probe_device+0x178/0x240 [ 112.812047][ T8341] device_add+0x728/0xa6c [ 112.812058][ T8341] platform_device_add+0x3e8/0x6e8 [ 112.812069][ T8341] platform_device_register_full+0x4ec/0x604 [ 112.812081][ T8341] acpi_create_platform_device+0x5bc/0x744 [ 112.812093][ T8341] acpi_default_enumeration+0x6c/0xdc [ 112.812107][ T8341] acpi_bus_attach+0x8b8/0xaa8 [ 112.812118][ T8341] acpi_dev_for_one_check+0xa0/0xb4 [ 112.812130][ T8341] device_for_each_child+0xec/0x174 [ 112.812142][ T8341] acpi_dev_for_each_child+0xc4/0x108 [ 112.812160][ T8341] acpi_bus_attach+0x358/0xaa8 [ 112.812172][ T8341] acpi_dev_for_one_check+0xa0/0xb4 [ 112.812183][ T8341] device_for_each_child+0xec/0x174 [ 112.812195][ T8341] acpi_dev_for_each_child+0xc4/0x108 [ 112.812206][ T8341] acpi_bus_attach+0x358/0xaa8 [ 112.812218][ T8341] acpi_bus_scan+0x118/0x4f0 [ 112.812230][ T8341] acpi_scan_init+0x214/0x6b0 [ 112.812244][ T8341] acpi_init+0x190/0x254 [ 112.812256][ T8341] do_one_initcall+0x254/0x9e4 [ 112.812266][ T8341] do_initcall_level+0x154/0x214 [ 112.812276][ T8341] do_initcalls+0x58/0xac [ 112.812284][ T8341] do_basic_setup+0x8c/0xa0 [ 112.812293][ T8341] kernel_init_freeable+0x324/0x478 [ 112.812302][ T8341] kernel_init+0x24/0x2a0 [ 112.812314][ T8341] ret_from_fork+0x10/0x20 [ 112.812323][ T8341] [ 112.812323][ T8341] -> #0 (console_owner){-...}-{0:0}: [ 112.812337][ T8341] __lock_acquire+0x3384/0x763c [ 112.812350][ T8341] lock_acquire+0x248/0x73c [ 112.812362][ T8341] console_lock_spinning_enable+0xb4/0xec [ 112.812372][ T8341] console_flush_all+0x58c/0xb74 [ 112.812381][ T8341] console_unlock+0xec/0x3d4 [ 112.812390][ T8341] vprintk_emit+0x1ec/0x350 [ 112.812398][ T8341] vprintk_default+0xa0/0xe4 [ 112.812407][ T8341] vprintk+0x200/0x2d4 [ 112.812416][ T8341] _printk+0xdc/0x128 [ 112.812427][ T8341] report_bug+0x3b8/0x5b0 [ 112.812438][ T8341] bug_handler+0x50/0x1fc [ 112.812447][ T8341] brk_handler+0x17c/0x2e0 [ 112.812457][ T8341] do_debug_exception+0x1e4/0x398 [ 112.812469][ T8341] el1_dbg+0x64/0x80 [ 112.812478][ T8341] el1h_64_sync_handler+0x40/0xac [ 112.812488][ T8341] el1h_64_sync+0x64/0x68 [ 112.812496][ T8341] uart_write+0x280/0x2ec [ 112.812504][ T8341] sixpack_open+0x5d8/0x8b0 [ 112.812517][ T8341] tty_ldisc_open+0x9c/0x14c [ 112.812526][ T8341] tty_set_ldisc+0x2f8/0x4e0 [ 112.812534][ T8341] tiocsetd+0x100/0x13c [ 112.812545][ T8341] tty_ioctl+0xba0/0xd8c [ 112.812555][ T8341] __arm64_sys_ioctl+0x14c/0x1c8 [ 112.812566][ T8341] invoke_syscall+0x98/0x2b8 [ 112.812575][ T8341] el0_svc_common+0x130/0x23c [ 112.812583][ T8341] do_el0_svc+0x48/0x58 [ 112.812590][ T8341] el0_svc+0x54/0x168 [ 112.812600][ T8341] el0t_64_sync_handler+0x84/0xfc [ 112.812610][ T8341] el0t_64_sync+0x190/0x194 [ 112.812618][ T8341] [ 112.812618][ T8341] other info that might help us debug this: [ 112.812618][ T8341] [ 112.812621][ T8341] Possible unsafe locking scenario: [ 112.812621][ T8341] [ 112.812624][ T8341] CPU0 CPU1 [ 112.812627][ T8341] ---- ---- [ 112.812630][ T8341] lock(&port_lock_key); [ 112.812637][ T8341] lock(console_owner); [ 112.812644][ T8341] lock(&port_lock_key); [ 112.812651][ T8341] lock(console_owner); [ 112.812657][ T8341] [ 112.812657][ T8341] *** DEADLOCK *** [ 112.812657][ T8341] [ 112.812660][ T8341] 5 locks held by syz.1.488/8341: [ 112.812666][ T8341] #0: ffff0000ee2851c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_lock+0x78/0xc8 [ 112.812691][ T8341] #1: ffff0000ee2850a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_write+0x3c/0x4c [ 112.812716][ T8341] #2: ffff800094049db8 (&port_lock_key){-...}-{2:2}, at: uart_write+0x114/0x2ec [ 112.812739][ T8341] #3: ffff80008f474940 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0x1d0/0x350 [ 112.812768][ T8341] #4: ffff80008f474570 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire+0x10/0x4c [ 112.812793][ T8341] [ 112.812793][ T8341] stack backtrace: [ 112.812798][ T8341] CPU: 1 PID: 8341 Comm: syz.1.488 Tainted: G W 6.10.0-rc2-syzkaller-g8867bbd4a056 #0 [ 112.812810][ T8341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 112.812817][ T8341] Call trace: [ 112.812820][ T8341] dump_backtrace+0x1b8/0x1e4 [ 112.812829][ T8341] show_stack+0x2c/0x3c [ 112.812838][ T8341] dump_stack_lvl+0xe4/0x150 [ 112.812847][ T8341] dump_stack+0x1c/0x28 [ 112.812856][ T8341] print_circular_bug+0x150/0x1b8 [ 112.812865][ T8341] check_noncircular+0x310/0x404 [ 112.812873][ T8341] __lock_acquire+0x3384/0x763c [ 112.812885][ T8341] lock_acquire+0x248/0x73c [ 112.812897][ T8341] console_lock_spinning_enable+0xb4/0xec [ 112.812907][ T8341] console_flush_all+0x58c/0xb74 [ 112.812916][ T8341] console_unlock+0xec/0x3d4 [ 112.812924][ T8341] vprintk_emit+0x1ec/0x350 [ 112.812933][ T8341] vprintk_default+0xa0/0xe4 [ 112.812942][ T8341] vprintk+0x200/0x2d4 [ 112.812951][ T8341] _printk+0xdc/0x128 [ 112.812961][ T8341] report_bug+0x3b8/0x5b0 [ 112.812971][ T8341] bug_handler+0x50/0x1fc [ 112.812980][ T8341] brk_handler+0x17c/0x2e0 [ 112.812989][ T8341] do_debug_exception+0x1e4/0x398 [ 112.813001][ T8341] el1_dbg+0x64/0x80 [ 112.813010][ T8341] el1h_64_sync_handler+0x40/0xac [ 112.813020][ T8341] el1h_64_sync+0x64/0x68 [ 112.813028][ T8341] uart_write+0x280/0x2ec [ 112.813035][ T8341] sixpack_open+0x5d8/0x8b0 [ 112.813047][ T8341] tty_ldisc_open+0x9c/0x14c [ 112.813055][ T8341] tty_set_ldisc+0x2f8/0x4e0 [ 112.813063][ T8341] tiocsetd+0x100/0x13c [ 112.813074][ T8341] tty_ioctl+0xba0/0xd8c [ 112.813084][ T8341] __arm64_sys_ioctl+0x14c/0x1c8 [ 112.813094][ T8341] invoke_syscall+0x98/0x2b8 [ 112.813102][ T8341] el0_svc_common+0x130/0x23c [ 112.813110][ T8341] do_el0_svc+0x48/0x58 [ 112.813117][ T8341] el0_svc+0x54/0x168 [ 112.813127][ T8341] el0t_64_sync_handler+0x84/0xfc [ 112.813137][ T8341] el0t_64_sync+0x190/0x194 [ 112.930149][ T8343] loop3: detected capacity change from 0 to 40427 [ 112.930766][ T8341] WARNING: CPU: 1 PID: 8341 at drivers/tty/serial/serial_core.c:625 uart_write+0x280/0x2ec [ 112.930793][ T8341] Modules linked in: [ 112.930803][ T8341] CPU: 1 PID: 8341 Comm: syz.1.488 Tainted: G W 6.10.0-rc2-syzkaller-g8867bbd4a056 #0 [ 112.930816][ T8341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 112.930824][ T8341] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 112.930836][ T8341] pc : uart_write+0x280/0x2ec [ 112.930845][ T8341] lr : uart_write+0x278/0x2ec [ 112.930853][ T8341] sp : ffff8000acd97ad0 [ 112.930858][ T8341] x29: ffff8000acd97ad0 [ 112.936417][ T8343] F2FS-fs (loop3): invalid crc value [ 112.937717][ T8341] x28: 1ffff000159b2f68 x27: dfff800000000000 [ 112.937740][ T8341] x26: 0000000000000001 x25: dfff800000000000 x24: ffff0000c9168f48 [ 112.974303][ T8343] F2FS-fs (loop3): Found nat_bits in checkpoint [ 112.976150][ T8341] [ 112.976159][ T8341] x23: 0000000000000000 x22: ffff800094049da0 x21: ffff8000acd97b60 [ 112.988672][ T8343] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 113.011216][ T7449] bio_check_eod: 25 callbacks suppressed [ 113.011231][ T7449] syz-executor: attempt to access beyond end of device [ 113.011231][ T7449] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 113.012230][ T8341] x20: 0000000000000001 x19: ffff0000c9168be8 x18: ffff8000acd97780 [ 113.015179][ T7449] syz-executor: attempt to access beyond end of device [ 113.015179][ T7449] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 113.016076][ T8341] x17: 000000000003d67a x16: ffff8000803514ec x15: ffff7000159b2f40 [ 113.077192][ T8341] x14: 1ffff000159b2f40 x13: 0000000000000004 x12: ffffffffffffffff [ 113.079337][ T8341] x11: 0000000000040000 x10: 0000000000012c00 x9 : ffff8000a116a000 [ 113.081690][ T8341] x8 : 0000000000012c01 x7 : 0000000000000000 x6 : 0000000000000000 [ 113.083819][ T8341] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff80008035161c [ 113.086148][ T8341] x2 : 0000000000000001 x1 : 0000000000000000 x0 : ffff800094049da0 [ 113.088440][ T8341] Call trace: [ 113.089345][ T8341] uart_write+0x280/0x2ec [ 113.090551][ T8341] sixpack_open+0x5d8/0x8b0 [ 113.091771][ T8341] tty_ldisc_open+0x9c/0x14c [ 113.093018][ T8341] tty_set_ldisc+0x2f8/0x4e0 [ 113.094221][ T8341] tiocsetd+0x100/0x13c [ 113.095365][ T8341] tty_ioctl+0xba0/0xd8c [ 113.096496][ T8341] __arm64_sys_ioctl+0x14c/0x1c8 [ 113.097886][ T8341] invoke_syscall+0x98/0x2b8 [ 113.099143][ T8341] el0_svc_common+0x130/0x23c [ 113.100381][ T8341] do_el0_svc+0x48/0x58 [ 113.101509][ T8341] el0_svc+0x54/0x168 [ 113.102570][ T8341] el0t_64_sync_handler+0x84/0xfc [ 113.103987][ T8341] el0t_64_sync+0x190/0x194 [ 113.105225][ T8341] irq event stamp: 1808 [ 113.106448][ T8341] hardirqs last enabled at (1807): [] finish_lock_switch+0xbc/0x1e4 [ 113.109212][ T8341] hardirqs last disabled at (1808): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 113.111983][ T8341] softirqs last enabled at (1800): [] handle_softirqs+0xa60/0xc34 [ 113.114524][ T8341] softirqs last disabled at (1743): [] __do_softirq+0x14/0x20 [ 113.117014][ T8341] ---[ end trace 0000000000000000 ]--- [ 113.127955][ T7449] syz-executor: attempt to access beyond end of device [ 113.127955][ T7449] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.132197][ T7449] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 113.149966][ T8297] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.159159][ T8297] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.162016][ T8297] bridge_slave_0: entered allmulticast mode [ 113.164147][ T8297] bridge_slave_0: entered promiscuous mode [ 113.169981][ T8297] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.172246][ T8297] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.175710][ T8297] bridge_slave_1: entered allmulticast mode [ 113.178810][ T8297] bridge_slave_1: entered promiscuous mode [ 113.202873][ T8297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.228353][ T52] Bluetooth: hci4: command tx timeout [ 113.230860][ T8297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.244410][ T2089] bridge_slave_1: left allmulticast mode [ 113.246025][ T2089] bridge_slave_1: left promiscuous mode [ 113.247681][ T2089] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.250311][ T2089] bridge_slave_0: left allmulticast mode [ 113.254548][ T2089] bridge_slave_0: left promiscuous mode [ 113.256263][ T2089] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.694180][ T2089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.734749][ T2089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.773729][ T2089] bond0 (unregistering): Released all slaves [ 114.777747][ T8297] team0: Port device team_slave_0 added [ 114.780210][ T8297] team0: Port device team_slave_1 added [ 114.830272][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.834538][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.841478][ T8297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.845445][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.847393][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.856890][ T8297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.911578][ T8297] hsr_slave_0: entered promiscuous mode [ 114.950754][ T8297] hsr_slave_1: entered promiscuous mode [ 115.010649][ T8297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.012909][ T8297] Cannot create hsr debugfs directory [ 115.300428][ T52] Bluetooth: hci4: command tx timeout [ 115.526677][ T2089] hsr_slave_0: left promiscuous mode [ 115.560850][ T2089] hsr_slave_1: left promiscuous mode [ 115.630532][ T2089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.632689][ T2089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.637681][ T2089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.639725][ T2089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.644851][ T2089] veth1_macvtap: left promiscuous mode [ 115.646383][ T2089] veth0_macvtap: left promiscuous mode [ 115.647962][ T2089] veth1_vlan: left promiscuous mode [ 115.649354][ T2089] veth0_vlan: left promiscuous mode [ 117.380443][ T52] Bluetooth: hci4: command tx timeout [ 117.433320][ T2089] team0 (unregistering): Port device team_slave_1 removed [ 117.627021][ T2089] team0 (unregistering): Port device team_slave_0 removed [ 119.460464][ T52] Bluetooth: hci4: command tx timeout [ 119.989247][ T8297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.004438][ T8297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.008510][ T8297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.021488][ T8297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.061284][ T8297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.067323][ T8297] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.072541][ T6589] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.074430][ T6589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.092984][ T6589] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.095033][ T6589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.112623][ T8297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 120.115737][ T8297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.211169][ T8297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.288790][ T8297] veth0_vlan: entered promiscuous mode [ 120.341180][ T8297] veth1_vlan: entered promiscuous mode [ 120.361880][ T8297] veth0_macvtap: entered promiscuous mode [ 120.365256][ T8297] veth1_macvtap: entered promiscuous mode [ 120.373870][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.377102][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.379794][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.385072][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.387862][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.391263][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.394008][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.396743][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.403082][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.408130][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.411705][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.414489][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.417222][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.419715][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.424717][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.427375][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.430196][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.434728][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.439175][ T8297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.443507][ T8297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.445952][ T8297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.448292][ T8297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.466700][ T8297] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 120.476121][ T1996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.478152][ T1996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.482064][ T8297] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 120.490220][ T4365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.493581][ T4365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.792034][ T1996] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.871713][ T1996] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.941728][ T1996] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.021822][ T1996] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.176197][ T1996] bridge_slave_1: left allmulticast mode [ 121.178035][ T1996] bridge_slave_1: left promiscuous mode [ 121.179807][ T1996] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.188141][ T1996] bridge_slave_0: left allmulticast mode [ 121.189687][ T1996] bridge_slave_0: left promiscuous mode [ 121.197419][ T1996] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.773867][ T1996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.814647][ T1996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface