last executing test programs: 3m40.067877038s ago: executing program 0 (id=34): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002500)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x8851}], 0x1, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000001cc0), 0x400000000000026, 0x0) 3m39.828036377s ago: executing program 0 (id=38): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff9}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m39.648484798s ago: executing program 0 (id=42): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) 3m39.533809187s ago: executing program 0 (id=47): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file2\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3m39.185032147s ago: executing program 0 (id=55): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x30, 0x2) 3m38.414653485s ago: executing program 0 (id=68): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060200000040000018"], 0x60}], 0x1, 0x8001) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)='N', 0x1, 0x0, 0x0, 0x0) 3m38.255912314s ago: executing program 32 (id=68): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060200000040000018"], 0x60}], 0x1, 0x8001) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)='N', 0x1, 0x0, 0x0, 0x0) 3m37.863575894s ago: executing program 3 (id=78): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r2, &(0x7f00000004c0)='\x00', 0x1) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f0000000540)) close_range(r0, 0xffffffffffffffff, 0x0) 3m37.738544323s ago: executing program 3 (id=80): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000840)={'#! ', './file0', [{0x20, 'blkio.bf[.iuer_D\x16\x9a\xed$\x8f\x04Le\x00\x8e\xcc\xa6|\xc3\x94\x97\xbfl\xac\x91v-\x02\xac\xdc\xcbO\xba\x99\xddca\xaaP\x8adC\xf7\xcb\xb0\x85\xfd\xff\x00\x00\x00bw9\xde\xbe\xde\xab\xc99\xbe\x9d\x85\x15m\xf70\x84$\x96VRC\x96\x02,\x8e\":\x14\x9b&[\x94\x8dz\xe7[J\xf58\xf0\x12\\\xd8h\xbf\xda\xd2;\x86\xd0\xae\xf2U\x15\xc5\x80D\xda)\rSQ:$\xd5\x91\xe9*\xbb\xf7\x05]\x1a\x12\xcd6U\x1b\xfd\x87=&\xe1\'\x92\xc6~\b\x05\x0f\xd8\xb9j\x88!\x86\x1a\xcev\xac\x03H\xf2BzUv\x13\xcep\xda\x86E\x14\x19\xda\xa5\xc7k4d;\xa3M\x16\xc9'}, {0x20, 'hash\x00'}, {0x20, 'M\x01\x04%'}, {0x20, '\xc9+\xff\xd2\xe5\b\xc6\xae\xc8k!\xb1\xee\xdf\x99\xedeN\x90\xea\xe8\x17\r\x01:\xbf\xfe\xce\x95J\xd6\x99\xba;\xc8\xee\xc2G\xd5\xa6S\xa2\x85]\xf8\xc0-w'}]}, 0x105) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000002) 3m37.041730292s ago: executing program 3 (id=91): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x110, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0x0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x41}}]}, 0x2c}}, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3m36.848475391s ago: executing program 3 (id=96): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file2\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3m36.563643981s ago: executing program 3 (id=101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)={0x1f40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1f14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf04, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"/4096}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x1f40}}, 0x0) 3m35.672889929s ago: executing program 3 (id=112): syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) r2 = socket$inet6(0xa, 0x5, 0x0) shutdown(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x5, 0x4) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x0, 0x0) 3m35.464918388s ago: executing program 33 (id=112): syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) r2 = socket$inet6(0xa, 0x5, 0x0) shutdown(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x5, 0x4) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x0, 0x0) 2m35.494891145s ago: executing program 6 (id=726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(r0, &(0x7f0000004340)={0x2020}, 0x2020) 2m34.634577413s ago: executing program 6 (id=741): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,time_offset=0x0000000000000003,fmask=00000000000000000000005,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x1548, &(0x7f0000000380)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) 2m34.373454612s ago: executing program 6 (id=745): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syslog(0x3, &(0x7f0000000280)=""/215, 0xd7) 2m34.205470542s ago: executing program 6 (id=749): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x80141, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x40) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 2m34.163164022s ago: executing program 6 (id=750): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 2m33.902735341s ago: executing program 6 (id=752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000040)=""/18, 0x12}, {&(0x7f00000011c0)=""/4109, 0x100d}], 0x3, 0x0, 0x0) 2m18.86916128s ago: executing program 34 (id=752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000040)=""/18, 0x12}, {&(0x7f00000011c0)=""/4109, 0x100d}], 0x3, 0x0, 0x0) 2.719009936s ago: executing program 7 (id=2929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9203effbb1bc"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x3c}}, 0x0) 2.646999116s ago: executing program 7 (id=2931): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1}, 0x1c) write(r0, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b36598b8cb08591ffc2467faa14eba6144e8129396", 0x28) 2.542699795s ago: executing program 7 (id=2933): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) 1.673792924s ago: executing program 7 (id=2949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000480)=""/38, 0x26}], 0x1) 1.467006343s ago: executing program 5 (id=2953): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) sendmmsg$inet(r0, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001500)="69e77fa285", 0x5}, {0x0, 0x80000}], 0x2}}], 0x2, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) 1.397539993s ago: executing program 2 (id=2955): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000300)=[{&(0x7f0000000680)="bb", 0x1}], 0x1, 0x1000000, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x87fffa0) 1.236457013s ago: executing program 4 (id=2957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x2, 0x18}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00 '], 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000350000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000012c0004802800018008000100666962001c0002800800014000000011080003400000000e080002400000000114000000110001"], 0xdc}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000007c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e20, 0x8}}}}}, 0x0) 1.050503372s ago: executing program 4 (id=2960): syz_emit_ethernet(0x256, &(0x7f0000000000)={@multicast, @random="467b5543f090", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x220, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "8cd86ff706598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2602"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}]}}}}}}, 0x0) 979.235192ms ago: executing program 4 (id=2962): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 928.325702ms ago: executing program 2 (id=2963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 888.475632ms ago: executing program 1 (id=2964): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 887.460032ms ago: executing program 4 (id=2965): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x3, 0x12) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 808.912002ms ago: executing program 4 (id=2966): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20108c0, &(0x7f0000002ac0)=ANY=[@ANYRES8=0x0], 0xfe, 0x61e6, &(0x7f0000002b00)="$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") lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x4}, [], {0x4, 0x3}, [], {0x10, 0x1}}, 0x24, 0x3) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 771.092652ms ago: executing program 1 (id=2967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}]]}, 0x64}}, 0x0) 727.772762ms ago: executing program 5 (id=2968): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 726.899242ms ago: executing program 7 (id=2969): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x2040, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001580), 0x80000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x202, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x103800, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x5359fa85130690a9, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x149000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001480), 0x880, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x28002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 636.649902ms ago: executing program 2 (id=2970): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x44}}, 0x2) 635.561932ms ago: executing program 1 (id=2971): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x27}, @loopback, @mcast2, 0x1, 0x2, 0x100, 0x500, 0xf000, 0x10}) 589.716841ms ago: executing program 5 (id=2972): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @mcast1, 0x4}, 0x1c) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, [0x1, 0x10, 0x2, 0x3, 0x2, 0x7, 0x5, 0x45c3, 0x100, 0x1, 0xb56, 0x6, 0x3, 0x7, 0xa9]}, &(0x7f0000000240)=0x100) 589.007172ms ago: executing program 7 (id=2973): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000300)=[{&(0x7f0000000680)="bb", 0x1}], 0x1, 0x1000000, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x87fffa0) 482.814991ms ago: executing program 1 (id=2974): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x2, 0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffff74}}, 0x20) 475.232771ms ago: executing program 2 (id=2975): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10000a1, 0x0) umount2(&(0x7f0000000180)='./file0/file0/file0/file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x3, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 462.812781ms ago: executing program 5 (id=2976): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 345.196141ms ago: executing program 1 (id=2977): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 343.963301ms ago: executing program 5 (id=2978): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 258.757511ms ago: executing program 2 (id=2979): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x2, "340b7832ced6fbd887ede2bdcdf58fad9987ffe93bbabd18cf5019220100"}) 227.315821ms ago: executing program 1 (id=2980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000480)=""/38, 0x26}], 0x1) 202.974161ms ago: executing program 5 (id=2981): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read(0xffffffffffffffff, &(0x7f0000001500)=""/91, 0x5b) 118.78171ms ago: executing program 2 (id=2982): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 0s ago: executing program 4 (id=2983): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x9) kernel console output (not intermixed with test programs): ing over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.782485][ T7356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.915233][ T7356] device hsr_slave_0 entered promiscuous mode [ 127.938542][ T7356] device hsr_slave_1 entered promiscuous mode [ 127.958502][ T7356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.960408][ T7356] Cannot create hsr debugfs directory [ 127.980209][ T4310] Bluetooth: hci1: sending frame failed (-49) [ 127.983080][ T4311] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 128.168316][ T4311] Bluetooth: hci5: command 0x0409 tx timeout [ 128.546509][ T7356] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 128.614318][ T7446] loop1: detected capacity change from 0 to 32768 [ 128.659821][ T7446] XFS (loop1): Mounting V5 Filesystem [ 128.672383][ T7356] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 128.757411][ T7446] XFS (loop1): Ending clean mount [ 128.767396][ T4348] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0x108, xfs_rmapbt block 0x14 [ 128.771941][ T4348] XFS (loop1): Unmount and run xfs_repair [ 128.776368][ T4348] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 128.781216][ T4348] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 128.789426][ T4348] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 128.794582][ T4348] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 128.797111][ T4348] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 128.805940][ T4348] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 128.808042][ T4348] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 128.815153][ T4348] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 128.817145][ T4348] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 128.826009][ T7446] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x14 len 4 error 74 [ 128.833134][ T7446] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1b20/0x24c0 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 128.837643][ T7446] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 128.859265][ T7356] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 128.883235][ T4296] XFS (loop1): Unmounting Filesystem [ 128.919175][ T7356] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 129.253200][ T7494] syz.5.963 (7494): drop_caches: 2 [ 129.333606][ T7356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.470458][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.472503][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.478041][ T7356] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.514940][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.517226][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.523005][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.524496][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.530116][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.535221][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.537501][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.541976][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.543563][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.550491][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.913734][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.928762][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.932629][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.940421][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.009379][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.011898][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.014152][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.016163][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.027649][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.034479][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.040408][ T7356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.062131][ T7520] loop1: detected capacity change from 0 to 32768 [ 130.153307][ T7520] XFS (loop1): Mounting V5 Filesystem [ 130.204421][ T7520] XFS (loop1): Ending clean mount [ 130.214628][ T5888] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0x108, xfs_rmapbt block 0x14 [ 130.217681][ T5888] XFS (loop1): Unmount and run xfs_repair [ 130.225517][ T5888] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 130.227229][ T5888] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 130.231740][ T5888] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 130.236526][ T5888] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 130.239037][ T4311] Bluetooth: hci5: command 0x041b tx timeout [ 130.242854][ T5888] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 130.245361][ T5888] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 130.247346][ T5888] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 130.249971][ T5888] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 130.251967][ T5888] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 130.253870][ T7520] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x14 len 4 error 74 [ 130.262269][ T7520] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1b20/0x24c0 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 130.265868][ T7520] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 130.295080][ T4296] XFS (loop1): Unmounting Filesystem [ 130.419967][ T1588] device hsr_slave_0 left promiscuous mode [ 130.451805][ T1588] device hsr_slave_1 left promiscuous mode [ 130.648593][ T1588] device veth1_macvtap left promiscuous mode [ 130.650076][ T1588] device veth0_macvtap left promiscuous mode [ 132.067071][ T7591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.069235][ T7591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.328388][ T4311] Bluetooth: hci5: command 0x040f tx timeout [ 132.993819][ T7595] vhci_hcd: invalid port number 0 [ 133.930812][ T1588] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 134.408315][ T4310] Bluetooth: hci5: command 0x0419 tx timeout [ 135.522598][ T1588] bond0 (unregistering): Released all slaves [ 135.776635][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.778529][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.796377][ T7356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.046187][ T7639] capability: warning: `syz.2.1007' uses 32-bit capabilities (legacy support in use) [ 136.181774][ T7652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.183709][ T7652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.333384][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.335624][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.395862][ T7356] device veth0_vlan entered promiscuous mode [ 136.420318][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.422401][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.425080][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.427126][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.433474][ T7356] device veth1_vlan entered promiscuous mode [ 136.492943][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.494937][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 136.496961][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.499920][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.507657][ T7356] device veth0_macvtap entered promiscuous mode [ 136.517321][ T7356] device veth1_macvtap entered promiscuous mode [ 136.541095][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.554304][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.557554][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.563386][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.567859][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.572499][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.576776][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.582597][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.599270][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.606055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.624617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.626821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.637776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.679796][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.682147][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.684308][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.686656][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.704034][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.718674][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.724588][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.736917][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.750065][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.751709][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.756252][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.782537][ T7356] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.784310][ T7356] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.786085][ T7356] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.787885][ T7356] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.930198][ T4570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.932315][ T4570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.953665][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.010994][ T1768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.013082][ T1768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.018093][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.179924][ T7248] Bluetooth: hci1: Frame reassembly failed (-84) [ 137.748836][ T7732] syz.4.1036 (7732): drop_caches: 2 [ 138.264628][ T7740] loop7: detected capacity change from 0 to 32768 [ 138.356085][ T7740] XFS (loop7): Mounting V5 Filesystem [ 138.404402][ T7740] XFS (loop7): Ending clean mount [ 138.421972][ T112] XFS (loop7): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0x108, xfs_rmapbt block 0x14 [ 138.425479][ T112] XFS (loop7): Unmount and run xfs_repair [ 138.426913][ T112] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 138.429032][ T112] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 138.434324][ T112] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 138.441969][ T112] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 138.447301][ T112] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 138.456539][ T112] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 138.461017][ T112] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 138.463961][ T112] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 138.465907][ T112] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 138.468520][ T7740] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x14 len 4 error 74 [ 138.476088][ T7740] XFS (loop7): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1b20/0x24c0 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 138.483707][ T7740] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 138.511736][ T7356] XFS (loop7): Unmounting Filesystem [ 138.613636][ T7790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.615764][ T7790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.188829][ T7816] loop1: detected capacity change from 0 to 16 [ 139.198487][ T4311] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 139.198498][ T4310] Bluetooth: hci1: command 0x1003 tx timeout [ 139.206646][ T7816] erofs: (device loop1): mounted with root inode @ nid 36. [ 139.266150][ T7816] syz.1.1048 (7816): drop_caches: 2 [ 140.475561][ T7811] loop7: detected capacity change from 0 to 40427 [ 140.528428][ T7811] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x3ffff [ 140.532990][ T7811] F2FS-fs (loop7): invalid crc value [ 140.542067][ T7811] F2FS-fs (loop7): Found nat_bits in checkpoint [ 140.563404][ T7811] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 140.619018][ T7853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.621184][ T7853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.806029][ T7248] Bluetooth: hci1: Frame reassembly failed (-84) [ 140.915298][ T7831] loop2: detected capacity change from 0 to 32768 [ 140.954176][ T7831] XFS (loop2): Mounting V5 Filesystem [ 140.996382][ T7831] XFS (loop2): Ending clean mount [ 141.017042][ T7831] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0x108, xfs_rmapbt block 0x14 [ 141.020438][ T7831] XFS (loop2): Unmount and run xfs_repair [ 141.021853][ T7831] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 141.023404][ T7831] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 141.025309][ T7831] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 141.027440][ T7831] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 141.029788][ T7831] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 141.031990][ T7831] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 141.033894][ T7831] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 141.035793][ T7831] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 141.037884][ T7831] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 141.040030][ T7831] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x14 len 4 error 74 [ 141.044675][ T7831] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1b20/0x24c0 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 141.048116][ T7831] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 141.070248][ T4308] XFS (loop2): Unmounting Filesystem [ 141.427512][ T7876] loop2: detected capacity change from 0 to 16 [ 141.434369][ T7876] erofs: (device loop2): mounted with root inode @ nid 36. [ 141.446446][ T7876] syz.2.1062: attempt to access beyond end of device [ 141.446446][ T7876] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 141.453857][ T7876] syz.2.1062: attempt to access beyond end of device [ 141.453857][ T7876] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 141.956615][ T7896] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 142.878300][ T4311] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 142.878329][ T4310] Bluetooth: hci1: command 0x1003 tx timeout [ 144.383447][ T7932] Bluetooth: hci1: Frame reassembly failed (-84) [ 144.384766][ T7898] Bluetooth: hci1: Frame reassembly failed (-84) [ 144.717664][ T7960] loop1: detected capacity change from 0 to 4096 [ 144.723071][ T7960] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 145.553297][ T7959] loop2: detected capacity change from 0 to 32768 [ 145.560044][ T7959] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1096 (7959) [ 145.567504][ T7959] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.571508][ T7959] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 145.573340][ T7959] BTRFS info (device loop2): using free space tree [ 145.704632][ T7959] BTRFS info (device loop2): enabling ssd optimizations [ 145.773633][ T4308] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.398386][ T47] Bluetooth: hci1: command 0x1003 tx timeout [ 146.407768][ T4311] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 147.465946][ T8036] syz.5.1111 (8036): drop_caches: 2 [ 147.700566][ T47] Bluetooth: hci1: sending frame failed (-49) [ 147.703631][ T4311] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 148.001945][ T8072] syz.1.1126 (8072): drop_caches: 2 [ 148.250260][ T8070] loop7: detected capacity change from 0 to 32768 [ 148.260939][ T8070] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1125 (8070) [ 148.271541][ T8070] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.274532][ T8070] BTRFS info (device loop7): using sha256 (sha256-ce) checksum algorithm [ 148.276591][ T8070] BTRFS info (device loop7): using free space tree [ 148.340408][ T8070] BTRFS info (device loop7): enabling ssd optimizations [ 148.387109][ T7356] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.425460][ T8074] loop1: detected capacity change from 0 to 32768 [ 148.552553][ T8074] XFS (loop1): Mounting V5 Filesystem [ 148.569520][ T8100] binder: 8099:8100 ioctl c0046209 0 returned -22 [ 148.668059][ T8074] XFS (loop1): Ending clean mount [ 148.734908][ T4296] XFS (loop1): Unmounting Filesystem [ 148.799383][ T8114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.808042][ T8114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.863098][ T8118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.865332][ T8118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.908087][ T8120] syz.5.1137 (8120): drop_caches: 2 [ 149.219260][ T8122] loop4: detected capacity change from 0 to 32768 [ 149.221517][ T8122] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1138 (8122) [ 149.239407][ T8122] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.241901][ T8122] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 149.244033][ T8122] BTRFS info (device loop4): using free space tree [ 149.431813][ T8122] BTRFS info (device loop4): enabling ssd optimizations [ 149.458049][ T4306] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.990999][ T8150] loop2: detected capacity change from 0 to 32768 [ 150.015208][ T8150] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1141 (8150) [ 150.043255][ T8150] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 150.045544][ T8150] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 150.047285][ T8150] BTRFS info (device loop2): using free space tree [ 150.155095][ T8172] syz.5.1149 (8172): drop_caches: 2 [ 150.251090][ T8156] loop1: detected capacity change from 0 to 32768 [ 150.286230][ T8150] BTRFS info (device loop2): enabling ssd optimizations [ 150.303053][ T8156] XFS (loop1): Mounting V5 Filesystem [ 150.327281][ T8150] BTRFS info (device loop2): scrub: started on devid 1 [ 150.341777][ T8150] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [ 150.449708][ T8156] XFS (loop1): Ending clean mount [ 150.555506][ T4296] XFS (loop1): Unmounting Filesystem [ 150.668020][ T8198] loop5: detected capacity change from 0 to 32768 [ 150.678527][ T8198] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1152 (8198) [ 150.683904][ T8198] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.688937][ T8198] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 150.707969][ T8198] BTRFS info (device loop5): using free space tree [ 150.848313][ T8198] BTRFS info (device loop5): enabling ssd optimizations [ 150.936575][ T4308] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.066786][ T4572] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.311438][ T8236] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.372073][ T8236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.376055][ T8236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.377746][ T8236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.662524][ T8255] syz.5.1162 (8255): drop_caches: 2 [ 152.176921][ T8282] netlink: 'syz.7.1172': attribute type 10 has an invalid length. [ 152.200779][ T8282] netem: change failed [ 152.348654][ T8289] loop1: detected capacity change from 0 to 16 [ 152.354958][ T8289] erofs: (device loop1): mounted with root inode @ nid 36. [ 152.373837][ T8289] syz.1.1175: attempt to access beyond end of device [ 152.373837][ T8289] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 152.376617][ T8289] syz.1.1175: attempt to access beyond end of device [ 152.376617][ T8289] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 152.557756][ T8297] syz.7.1177 (8297): drop_caches: 2 [ 152.576903][ T8261] loop2: detected capacity change from 0 to 32768 [ 152.654256][ T8261] XFS (loop2): Mounting V5 Filesystem [ 152.737153][ T8261] XFS (loop2): Ending clean mount [ 152.780069][ T4308] XFS (loop2): Unmounting Filesystem [ 152.787832][ T8318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.792051][ T8318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.235736][ T8344] syz.5.1188 (8344): drop_caches: 2 [ 153.863469][ T8385] loop2: detected capacity change from 0 to 16 [ 153.882371][ T8385] erofs: (device loop2): mounted with root inode @ nid 36. [ 153.895345][ T8385] syz.2.1198: attempt to access beyond end of device [ 153.895345][ T8385] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 153.902080][ T8385] syz.2.1198: attempt to access beyond end of device [ 153.902080][ T8385] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 154.476149][ T8425] syz.7.1212 (8425): drop_caches: 2 [ 155.038337][ T8463] syz.7.1225 (8463): drop_caches: 2 [ 155.136351][ T8470] loop4: detected capacity change from 0 to 256 [ 155.137989][ T8470] exfat: Bad value for 'uid' [ 155.198501][ T4311] Bluetooth: hci5: command 0x0409 tx timeout [ 155.727344][ T8504] syz.4.1238 (8504): drop_caches: 2 [ 155.871281][ T8517] loop4: detected capacity change from 0 to 256 [ 155.873134][ T8517] exfat: Bad value for 'uid' [ 155.923471][ T6399] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 156.026201][ T8478] loop7: detected capacity change from 0 to 40427 [ 156.035579][ T8478] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 156.042651][ T8478] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 156.057272][ T8478] F2FS-fs (loop7): invalid crc value [ 156.116521][ T8478] F2FS-fs (loop7): Found nat_bits in checkpoint [ 156.183228][ T8478] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 156.184934][ T8478] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 156.255989][ T8478] syz.7.1230: attempt to access beyond end of device [ 156.255989][ T8478] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 156.277617][ T8478] syz.7.1230: attempt to access beyond end of device [ 156.277617][ T8478] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 156.298791][ T8543] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 156.381701][ T7356] syz-executor: attempt to access beyond end of device [ 156.381701][ T7356] loop7: rw=2051, sector=45096, nr_sectors = 16 limit=40427 [ 156.413301][ T7356] F2FS-fs (loop7): Issue discard(5637, 5637, 2) failed, ret: -5 [ 156.459435][ T8548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.463132][ T8548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.584596][ T8552] syz.5.1252 (8552): drop_caches: 2 [ 156.682877][ T8558] loop1: detected capacity change from 0 to 256 [ 156.697396][ T8558] exfat: Bad value for 'uid' [ 156.912566][ T8570] tipc: Started in network mode [ 156.914273][ T8570] tipc: Node identity 00000000004003000000000000000001, cluster identity 4711 [ 156.921551][ T8570] tipc: Enabling of bearer rejected, failed to enable media [ 157.017400][ T8577] syz.7.1263 (8577): drop_caches: 2 [ 157.090096][ T8583] loop1: detected capacity change from 0 to 256 [ 157.092659][ T8583] exfat: Bad value for 'uid' [ 157.129711][ T6399] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 157.636001][ T8612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.641771][ T8612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.651363][ T8613] loop7: detected capacity change from 0 to 256 [ 157.667099][ T8613] exfat: Bad value for 'uid' [ 157.727863][ T6399] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 157.787537][ T8619] tipc: Started in network mode [ 157.797653][ T8619] tipc: Node identity 32f60a1e4909, cluster identity 4711 [ 157.801599][ T8619] tipc: Enabled bearer , priority 0 [ 157.813769][ T8619] syzkaller0: MTU too low for tipc bearer [ 157.816215][ T8619] tipc: Disabling bearer [ 158.097644][ T8633] loop5: detected capacity change from 0 to 512 [ 158.104013][ T8633] EXT4-fs: Ignoring removed i_version option [ 158.109068][ T8633] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 158.135940][ T8633] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1290: iget: bad extra_isize 15 (inode size 256) [ 158.141514][ T8633] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1290: couldn't read orphan inode 15 (err -117) [ 158.154618][ T8633] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 158.212040][ T8642] loop1: detected capacity change from 0 to 256 [ 158.214014][ T8642] exfat: Bad value for 'uid' [ 158.259704][ T4572] EXT4-fs (loop5): unmounting filesystem. [ 158.371477][ T8649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.374470][ T8649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.763691][ T8666] tipc: Enabling of bearer rejected, failed to enable media [ 158.945134][ T8671] loop7: detected capacity change from 0 to 256 [ 158.947181][ T8671] exfat: Bad value for 'uid' [ 158.991434][ T6399] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 159.437566][ T8696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.442299][ T8696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.487285][ T8700] loop4: detected capacity change from 0 to 256 [ 159.494952][ T8700] exfat: Bad value for 'uid' [ 159.772427][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.777294][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.779968][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.784639][ T8721] net_ratelimit: 2 callbacks suppressed [ 159.784650][ T8721] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 159.800774][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.812546][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.814424][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.876826][ T8727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.879103][ T8727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.006933][ T8733] loop2: detected capacity change from 0 to 256 [ 160.025515][ T8733] exfat: Bad value for 'uid' [ 160.049708][ T8735] loop7: detected capacity change from 0 to 256 [ 160.051638][ T8735] exfat: Deprecated parameter 'utf8' [ 160.057840][ T8735] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 160.238330][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 160.329984][ T8752] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1341'. [ 160.560979][ T8765] loop5: detected capacity change from 0 to 256 [ 160.566154][ T8765] exfat: Bad value for 'uid' [ 160.702174][ T8773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.713351][ T8773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.068055][ T8795] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 161.069683][ T8795] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 161.077380][ T8795] vhci_hcd vhci_hcd.0: Device attached [ 161.084352][ T8796] vhci_hcd: connection closed [ 161.087650][ T7964] vhci_hcd: stop threads [ 161.092071][ T7964] vhci_hcd: release socket [ 161.093286][ T7964] vhci_hcd: disconnect device [ 161.275753][ T8799] loop5: detected capacity change from 0 to 256 [ 161.277947][ T8799] exfat: Bad value for 'uid' [ 161.330014][ T6399] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.826154][ T8822] loop2: detected capacity change from 0 to 256 [ 161.828015][ T8822] exfat: Bad value for 'uid' [ 162.761661][ T8850] loop5: detected capacity change from 0 to 256 [ 162.774379][ T8850] exfat: Bad value for 'uid' [ 162.798994][ T6399] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.404238][ T8874] loop5: detected capacity change from 0 to 256 [ 163.416348][ T8874] exfat: Bad value for 'uid' [ 163.475585][ T8877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.477915][ T8877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.635975][ T8883] device syzkaller0 entered promiscuous mode [ 163.838455][ T4311] Bluetooth: hci3: command 0x0406 tx timeout [ 164.692389][ T8900] netlink: 134712 bytes leftover after parsing attributes in process `syz.2.1407'. [ 164.694937][ T8900] netlink: zone id is out of range [ 164.695992][ T8900] netlink: zone id is out of range [ 164.697024][ T8900] netlink: zone id is out of range [ 164.698043][ T8900] netlink: zone id is out of range [ 164.700731][ T8900] netlink: get zone limit has 4 unknown bytes [ 164.722315][ T8901] loop7: detected capacity change from 0 to 256 [ 164.724116][ T8901] exfat: Bad value for 'uid' [ 165.142214][ T8919] loop2: detected capacity change from 0 to 128 [ 165.156535][ T8919] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 165.186185][ T8919] syz.2.1416 (pid 8919) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 165.195194][ T8919] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 165.198126][ T8919] fscrypt: key with descriptor e8dab99234bb312e is too short (got 33 bytes, need 64+ bytes) [ 165.231022][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 166.539349][ T8937] loop1: detected capacity change from 0 to 256 [ 166.541583][ T8937] exfat: Bad value for 'uid' [ 166.907845][ T8950] loop2: detected capacity change from 0 to 64 [ 166.968879][ T6399] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 166.976464][ T8950] tmpfs: Bad value for 'mpol' [ 167.174038][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.175963][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.958351][ T4311] Bluetooth: hci4: command 0x0406 tx timeout [ 168.959530][ T4311] Bluetooth: hci2: command 0x0406 tx timeout [ 170.163494][ T8963] loop2: detected capacity change from 0 to 256 [ 170.165180][ T8963] exfat: Bad value for 'uid' [ 170.189842][ T6399] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 174.803500][ T8927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.810915][ T8930] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 174.867572][ T8958] tipc: Enabling of bearer rejected, failed to enable media [ 174.878259][ T8965] device veth1_to_team entered promiscuous mode [ 174.880158][ T8967] device veth1_to_team left promiscuous mode [ 175.143843][ T8991] loop4: detected capacity change from 0 to 256 [ 175.159443][ T8991] exfat: Bad value for 'uid' [ 175.172197][ T4311] Bluetooth: hci5: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 175.205535][ T8969] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.352667][ T8999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.354741][ T8999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.422227][ T9001] tipc: Started in network mode [ 175.423375][ T9001] tipc: Node identity 1237901c9c18, cluster identity 4711 [ 175.426329][ T9001] tipc: Enabled bearer , priority 0 [ 175.435672][ T9000] tipc: Disabling bearer [ 175.445175][ T8986] loop1: detected capacity change from 0 to 32768 [ 175.459745][ T8986] XFS (loop1): Mounting V5 Filesystem [ 175.527796][ T8986] XFS (loop1): Ending clean mount [ 175.644556][ T4296] XFS (loop1): Unmounting Filesystem [ 175.673425][ T9015] loop4: detected capacity change from 0 to 256 [ 175.693498][ T9015] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 175.942216][ T9023] loop2: detected capacity change from 0 to 256 [ 175.944707][ T9023] exfat: Bad value for 'uid' [ 175.971335][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1458'. [ 176.372245][ T9054] loop4: detected capacity change from 0 to 256 [ 176.374248][ T9053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.379814][ T9053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.384206][ T9054] exfat: Bad value for 'uid' [ 176.537757][ T9064] loop2: detected capacity change from 0 to 128 [ 176.561971][ T9064] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 176.619686][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 176.732023][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1478'. [ 176.960326][ T9088] loop7: detected capacity change from 0 to 256 [ 176.962275][ T9088] exfat: Bad value for 'uid' [ 177.017467][ T9092] bridge0: port 3(syz_tun) entered blocking state [ 177.019362][ T9092] bridge0: port 3(syz_tun) entered disabled state [ 177.024313][ T9092] device syz_tun entered promiscuous mode [ 177.025856][ T9092] bridge0: port 3(syz_tun) entered blocking state [ 177.027094][ T9092] bridge0: port 3(syz_tun) entered forwarding state [ 177.037411][ T9091] input: syz1 as /devices/virtual/input/input4 [ 177.209285][ T4311] Bluetooth: hci5: command 0x0409 tx timeout [ 177.212013][ T9101] loop7: detected capacity change from 0 to 128 [ 177.238924][ T9101] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 177.393542][ T7356] EXT4-fs (loop7): unmounting filesystem. [ 177.398440][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1492'. [ 177.496699][ T9108] loop2: detected capacity change from 0 to 128 [ 178.391910][ T9133] loop1: detected capacity change from 0 to 40427 [ 178.413163][ T9133] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 178.417507][ T9133] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 178.426611][ T9133] F2FS-fs (loop1): invalid crc value [ 178.444597][ T9133] F2FS-fs (loop1): Found nat_bits in checkpoint [ 178.464338][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1507'. [ 178.473505][ T9133] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 178.475013][ T9133] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 178.871910][ T9150] tipc: Started in network mode [ 178.873043][ T9150] tipc: Node identity 5a655f164ff6, cluster identity 4711 [ 178.874559][ T9150] tipc: Enabled bearer , priority 0 [ 178.900530][ T9149] tipc: Disabling bearer [ 179.213072][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1519'. [ 179.995646][ T9182] loop5: detected capacity change from 0 to 32768 [ 180.045235][ T9182] XFS (loop5): Mounting V5 Filesystem [ 180.100488][ T9182] XFS (loop5): Ending clean mount [ 180.121251][ T9182] XFS (loop5): Quotacheck needed: Please wait. [ 180.170213][ T9182] XFS (loop5): Quotacheck: Done. [ 180.215996][ T9182] syz.5.1524 (9182): drop_caches: 2 [ 180.251431][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1536'. [ 180.278350][ T4572] XFS (loop5): Unmounting Filesystem [ 180.534798][ T9236] loop1: detected capacity change from 0 to 128 [ 180.580960][ T9236] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 180.653344][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 181.162703][ T9264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.179785][ T9264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.396595][ T9256] loop5: detected capacity change from 0 to 32768 [ 181.457947][ T9256] XFS (loop5): Mounting V5 Filesystem [ 181.527398][ T9256] XFS (loop5): Ending clean mount [ 181.530313][ T9256] XFS (loop5): Quotacheck needed: Please wait. [ 181.586519][ T9256] XFS (loop5): Quotacheck: Done. [ 181.608707][ T9256] syz.5.1551 (9256): drop_caches: 2 [ 181.666386][ T4572] XFS (loop5): Unmounting Filesystem [ 181.674166][ T9282] netlink: 134744 bytes leftover after parsing attributes in process `syz.7.1558'. [ 181.676942][ T9282] netlink: zone id is out of range [ 181.678963][ T9282] netlink: zone id is out of range [ 181.680431][ T9282] netlink: zone id is out of range [ 181.681602][ T9282] netlink: get zone limit has 4 unknown bytes [ 181.796804][ T9286] loop1: detected capacity change from 0 to 256 [ 181.799338][ T9286] exfat: Bad value for 'uid' [ 181.859975][ T8969] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 182.541383][ T9298] loop5: detected capacity change from 0 to 40427 [ 182.549943][ T9298] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 182.552884][ T9298] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 182.562780][ T9298] F2FS-fs (loop5): invalid crc value [ 182.581776][ T9298] F2FS-fs (loop5): Found nat_bits in checkpoint [ 182.615551][ T9298] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 182.617281][ T9298] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 182.662165][ T9298] syz.5.1564: attempt to access beyond end of device [ 182.662165][ T9298] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 182.732830][ T9315] netlink: 134744 bytes leftover after parsing attributes in process `syz.7.1570'. [ 182.743754][ T9315] netlink: zone id is out of range [ 182.744086][ T4572] syz-executor: attempt to access beyond end of device [ 182.744086][ T4572] loop5: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 182.747139][ T9315] netlink: zone id is out of range [ 182.749687][ T4572] F2FS-fs (loop5): Issue discard(5637, 5637, 1) failed, ret: -5 [ 182.752290][ T9315] netlink: zone id is out of range [ 182.756358][ T9315] netlink: get zone limit has 4 unknown bytes [ 182.817631][ T9309] loop4: detected capacity change from 0 to 32768 [ 182.904904][ T9319] loop7: detected capacity change from 0 to 256 [ 182.911656][ T9309] XFS (loop4): Mounting V5 Filesystem [ 182.917014][ T9319] exfat: Bad value for 'uid' [ 183.018289][ T9309] XFS (loop4): Ending clean mount [ 183.023477][ T9309] XFS (loop4): Quotacheck needed: Please wait. [ 183.083614][ T9309] XFS (loop4): Quotacheck: Done. [ 183.106722][ T9309] syz.4.1569 (9309): drop_caches: 2 [ 183.125160][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1573'. [ 183.176619][ T4306] XFS (loop4): Unmounting Filesystem [ 183.455240][ T9347] netlink: 134744 bytes leftover after parsing attributes in process `syz.5.1582'. [ 183.457279][ T9347] netlink: zone id is out of range [ 183.459280][ T9347] netlink: zone id is out of range [ 183.484669][ T9345] device team0 entered promiscuous mode [ 183.486311][ T9345] device team_slave_0 entered promiscuous mode [ 183.493668][ T9345] device team_slave_1 entered promiscuous mode [ 183.529272][ T9345] device team0 left promiscuous mode [ 183.530544][ T9345] device team_slave_0 left promiscuous mode [ 183.531901][ T9345] device team_slave_1 left promiscuous mode [ 183.916566][ T4311] Bluetooth: hci5: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 183.943832][ T9372] fuse: Bad value for 'fd' [ 184.006572][ T9376] netlink: 134744 bytes leftover after parsing attributes in process `syz.5.1593'. [ 184.318249][ T4311] Bluetooth: hci3: command 0x0409 tx timeout [ 184.337159][ T4311] Bluetooth: hci0: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 184.366938][ T9396] binder: 9392:9396 tried to acquire reference to desc 0, got 1 instead [ 184.387183][ T9396] binder: 9392:9396 got transaction with invalid offset (0, min 0 max 112) or object. [ 184.418666][ T9396] binder: 9392:9396 transaction call to 9392:0 failed 25/29201/-22, size 112-24 line 3355 [ 184.424568][ T5893] binder: undelivered TRANSACTION_ERROR: 29201 [ 184.535259][ T9409] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.1608'. [ 184.921977][ T9428] loop2: detected capacity change from 0 to 2048 [ 184.974314][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1618'. [ 185.100483][ T9428] loop2: detected capacity change from 0 to 2048 [ 185.127240][ T9438] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.1621'. [ 185.179533][ T9440] sp0: Synchronizing with TNC [ 185.202508][ T9439] [U] è [ 185.397833][ T4311] Bluetooth: hci5: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 185.562388][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1631'. [ 185.895103][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1641'. [ 185.918318][ T4311] Bluetooth: hci5: command 0x0409 tx timeout [ 186.274853][ T9503] input: syz1 as /devices/virtual/input/input5 [ 186.761308][ T9536] __nla_validate_parse: 1 callbacks suppressed [ 186.761321][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1663'. [ 186.937096][ T9549] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1671'. [ 187.068902][ T9559] net_ratelimit: 14 callbacks suppressed [ 187.068916][ T9559] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 187.222587][ T9567] binder: 9566:9567 ioctl 4018620d 0 returned -22 [ 187.336325][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1682'. [ 187.360060][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.361535][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.400036][ T9582] binder: 9581:9582 ioctl 4018620d 0 returned -22 [ 187.406759][ T9584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.415187][ T9584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.607493][ T9592] tipc: Enabling of bearer rejected, failed to enable media [ 187.992928][ T9588] loop2: detected capacity change from 0 to 40427 [ 188.005889][ T9588] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 188.008055][ T9588] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 188.021974][ T9588] F2FS-fs (loop2): invalid crc value [ 188.064484][ T9588] F2FS-fs (loop2): Found nat_bits in checkpoint [ 188.093478][ T9588] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 188.095001][ T9588] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 188.202474][ T9615] loop5: detected capacity change from 0 to 2048 [ 188.227747][ T9615] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 188.236246][ T9615] EXT4-fs (loop5): blocks per group (262144) and clusters per group (16384) inconsistent [ 188.539411][ T9604] loop1: detected capacity change from 0 to 32768 [ 188.547782][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1701'. [ 188.570423][ T9604] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1696 (9604) [ 188.586388][ T9604] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 188.596406][ T9604] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 188.605604][ T9604] BTRFS info (device loop1): enabling disk space caching [ 188.613381][ T9604] BTRFS info (device loop1): enabling auto defrag [ 188.619709][ T9604] BTRFS info (device loop1): doing ref verification [ 188.624856][ T9604] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 188.631557][ T9604] BTRFS info (device loop1): use lzo compression, level 0 [ 188.636257][ T9604] BTRFS info (device loop1): force clearing of disk cache [ 188.639127][ T9604] BTRFS info (device loop1): disabling disk space caching [ 188.768447][ T9604] BTRFS info (device loop1): enabling ssd optimizations [ 188.772975][ T9604] BTRFS info (device loop1): rebuilding free space tree [ 188.802333][ T9604] BTRFS info (device loop1): disabling free space tree [ 188.805538][ T9604] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.812454][ T9604] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 189.192647][ T9661] loop2: detected capacity change from 0 to 40427 [ 189.208336][ T9661] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 189.212288][ T9661] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 189.219573][ T9661] F2FS-fs (loop2): invalid crc value [ 189.224094][ T9661] F2FS-fs (loop2): Found nat_bits in checkpoint [ 189.260218][ T9661] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 189.261933][ T9661] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 189.299771][ T9661] syz.2.1706: attempt to access beyond end of device [ 189.299771][ T9661] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 189.361027][ T4308] syz-executor: attempt to access beyond end of device [ 189.361027][ T4308] loop2: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 189.364731][ T4308] F2FS-fs (loop2): Issue discard(5637, 5637, 1) failed, ret: -5 [ 189.582705][ T9604] BTRFS info (device loop1: state M): allowing degraded mounts [ 189.590868][ T9604] BTRFS info (device loop1: state M): not using ssd optimizations [ 189.597227][ T9604] BTRFS info (device loop1: state M): turning on sync discard [ 189.604397][ T9604] BTRFS info (device loop1: state M): enabling free space tree [ 189.606377][ T9604] BTRFS info (device loop1: state M): turning on async discard [ 189.608126][ T9604] BTRFS warning (device loop1: state M): remount supports changing free space tree only from ro to rw [ 189.660880][ T4296] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 190.078039][ T9721] binder: 9720:9721 tried to acquire reference to desc 0, got 1 instead [ 190.082220][ T9721] binder: 9720:9721 got transaction with invalid data ptr [ 190.083622][ T9721] binder: 9720:9721 transaction call to 9720:0 failed 30/29201/-14, size 12288-0 line 3574 [ 190.094044][ T4507] binder: undelivered TRANSACTION_ERROR: 29201 [ 190.333425][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1716'. [ 190.367261][ T9740] loop7: detected capacity change from 0 to 256 [ 190.397328][ T9740] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 190.786058][ T9759] loop5: detected capacity change from 0 to 2048 [ 190.793484][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1730'. [ 190.881301][ T9759] loop5: detected capacity change from 0 to 2048 [ 190.916079][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1732'. [ 190.919076][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1732'. [ 190.922476][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1732'. [ 190.996980][ T9766] loop1: detected capacity change from 0 to 8192 [ 191.106453][ T9766] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 191.118375][ T9766] FAT-fs (loop1): Filesystem has been set read-only [ 191.312156][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1743'. [ 191.467350][ T9803] netlink: 'syz.2.1748': attribute type 1 has an invalid length. [ 191.611568][ T9813] loop7: detected capacity change from 0 to 128 [ 191.906744][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1760'. [ 192.565750][ T9865] input: syz1 as /devices/virtual/input/input8 [ 192.605256][ T9836] loop7: detected capacity change from 0 to 32768 [ 192.612943][ T9836] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1763 (9836) [ 192.636048][ T9836] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.638317][ T9836] BTRFS info (device loop7): using crc32c (crc32c-generic) checksum algorithm [ 192.640330][ T9836] BTRFS info (device loop7): setting nodatasum [ 192.641699][ T9836] BTRFS info (device loop7): force zlib compression, level 3 [ 192.643299][ T9836] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 192.645259][ T9836] BTRFS info (device loop7): use lzo compression, level 0 [ 192.667204][ T9836] BTRFS info (device loop7): turning on flush-on-commit [ 192.674385][ T9836] BTRFS info (device loop7): enabling auto defrag [ 192.675968][ T9836] BTRFS info (device loop7): max_inline at 4096 [ 192.680025][ T9836] BTRFS info (device loop7): using free space tree [ 192.836135][ T9836] BTRFS info (device loop7): enabling ssd optimizations [ 192.880721][ T7356] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.313778][ T9906] loop7: detected capacity change from 0 to 2048 [ 193.384314][ T9914] input: syz1 as /devices/virtual/input/input9 [ 193.615190][ T9920] loop7: detected capacity change from 0 to 512 [ 193.692667][ T9920] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 193.706956][ T9920] Quota error (device loop7): do_check_range: Getting block 4128768 out of range 0-5 [ 193.790472][ T7356] EXT4-fs (loop7): unmounting filesystem. [ 194.017786][ T9945] input: syz1 as /devices/virtual/input/input10 [ 194.040910][ T9943] loop2: detected capacity change from 0 to 2048 [ 194.096751][ T8995] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.159713][ T9943] loop2: detected capacity change from 0 to 2048 [ 194.407607][ T9955] loop2: detected capacity change from 0 to 512 [ 194.414702][ T9955] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 194.436324][ T9955] EXT4-fs error (device loop2): __ext4_iget:5055: inode #16: block 469762080: comm syz.2.1805: invalid block [ 194.441230][ T9955] EXT4-fs (loop2): Remounting filesystem read-only [ 194.443895][ T9955] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1805: couldn't read orphan inode 16 (err -117) [ 194.455182][ T9955] EXT4-fs (loop2): Remounting filesystem read-only [ 194.456663][ T9955] EXT4-fs (loop2): 1 orphan inode deleted [ 194.457912][ T9955] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 194.629395][ T9947] loop1: detected capacity change from 0 to 40427 [ 194.631917][ T9947] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 194.633546][ T9947] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 194.633822][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 194.637558][ T9947] F2FS-fs (loop1): invalid crc value [ 194.652174][ T9947] F2FS-fs (loop1): Found nat_bits in checkpoint [ 194.665838][ T9947] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 194.667358][ T9947] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 194.844776][ T9973] input: syz1 as /devices/virtual/input/input11 [ 194.940122][ T4311] Bluetooth: hci1: sending frame failed (-49) [ 194.942812][ T47] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 194.969588][ T9978] loop5: detected capacity change from 0 to 2048 [ 195.076281][ T9978] loop5: detected capacity change from 0 to 2048 [ 195.147960][ T9987] tipc: Enabling of bearer rejected, failed to enable media [ 195.770812][ T9993] loop1: detected capacity change from 0 to 40427 [ 195.787204][ T9996] loop5: detected capacity change from 0 to 40427 [ 195.796443][ T9993] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 195.805044][ T9993] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 195.807133][ T9996] F2FS-fs (loop5): invalid crc value [ 195.810488][ T9993] F2FS-fs (loop1): invalid crc value [ 195.815266][ T9996] F2FS-fs (loop5): Found nat_bits in checkpoint [ 195.824391][ T9993] F2FS-fs (loop1): Found nat_bits in checkpoint [ 195.842546][ T9996] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 195.856776][ T9993] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 195.858450][ T9993] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 196.229215][ T9999] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 196.300236][ T7248] Bluetooth: hci1: Frame reassembly failed (-84) [ 196.354806][T10026] loop4: detected capacity change from 0 to 2048 [ 196.420313][ T8995] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.448395][T10026] loop4: detected capacity change from 0 to 2048 [ 196.495587][T10034] input: syz1 as /devices/virtual/input/input12 [ 196.748113][T10049] loop4: detected capacity change from 0 to 256 [ 196.751006][T10049] exfat: Bad value for 'uid' [ 196.779350][ T8969] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.835978][T10053] netlink: 'syz.4.1846': attribute type 4 has an invalid length. [ 196.865181][T10053] netlink: 'syz.4.1846': attribute type 4 has an invalid length. [ 197.137891][T10071] loop4: detected capacity change from 0 to 256 [ 197.139997][T10071] exfat: Bad value for 'uid' [ 197.175930][ T8969] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 197.253342][ T4310] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 197.469462][T10087] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 197.471338][T10087] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 197.999204][T10115] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1873'. [ 198.254293][T10135] loop7: detected capacity change from 0 to 2048 [ 198.254569][ T47] Bluetooth: hci0: Opcode 0x206c failed: -110 [ 198.304224][T10135] loop7: detected capacity change from 0 to 2048 [ 198.319026][ T4310] Bluetooth: hci1: command 0x1003 tx timeout [ 198.319327][ T4311] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 198.791801][T10145] loop5: detected capacity change from 0 to 32768 [ 198.822543][T10145] [ 198.822543][T10145] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.822543][T10145] [ 198.891231][T10153] loop7: detected capacity change from 0 to 2048 [ 198.907148][T10153] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 199.024121][ T7356] EXT4-fs (loop7): unmounting filesystem. [ 199.035227][T10147] loop1: detected capacity change from 0 to 40427 [ 199.060677][T10147] F2FS-fs (loop1): invalid crc value [ 199.097006][T10147] F2FS-fs (loop1): Found nat_bits in checkpoint [ 199.118079][ T4302] Bluetooth: hci1: sending frame failed (-49) [ 199.122770][ T4311] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 199.148710][T10147] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 199.199801][ T4296] syz-executor: attempt to access beyond end of device [ 199.199801][ T4296] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 199.605156][T10183] loop2: detected capacity change from 0 to 2048 [ 199.682139][T10183] loop2: detected capacity change from 0 to 2048 [ 199.852272][T10195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.856507][T10195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.981326][T10196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.984637][T10196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.030953][T10191] mmap: syz.1.1899 (10191) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 200.275874][ T1768] Bluetooth: hci1: Frame reassembly failed (-84) [ 200.318512][ T47] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 200.427325][T10206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 200.742075][T10216] loop1: detected capacity change from 0 to 2048 [ 200.792490][T10216] loop1: detected capacity change from 0 to 2048 [ 200.946986][T10212] loop7: detected capacity change from 0 to 40427 [ 200.960745][T10212] F2FS-fs (loop7): Unrecognized mount option "errors=continue" or missing value [ 201.898123][T10230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.901826][T10230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.318307][ T4311] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 202.398614][ T47] Bluetooth: hci0: Opcode 0x206c failed: -110 [ 202.777937][ T4311] Bluetooth: hci1: sending frame failed (-49) [ 202.781560][ T4302] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 202.963758][T10288] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.966058][T10288] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.018622][T10292] netlink: 'syz.2.1944': attribute type 4 has an invalid length. [ 203.061567][T10294] device veth1_to_team entered promiscuous mode [ 203.063222][T10289] netlink: 'syz.2.1944': attribute type 4 has an invalid length. [ 203.077946][T10293] device veth1_to_team left promiscuous mode [ 203.562664][T10322] device veth1_to_team entered promiscuous mode [ 203.564906][T10321] device veth1_to_team left promiscuous mode [ 203.775317][T10316] loop7: detected capacity change from 0 to 32768 [ 203.776326][T10331] netlink: 'syz.2.1963': attribute type 4 has an invalid length. [ 203.777574][T10316] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1948 (10316) [ 203.785895][T10316] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.791801][T10316] BTRFS info (device loop7): using crc32c (crc32c-generic) checksum algorithm [ 203.793696][T10316] BTRFS info (device loop7): using free space tree [ 203.808885][T10331] netlink: 'syz.2.1963': attribute type 4 has an invalid length. [ 203.885325][T10316] BTRFS info (device loop7): enabling ssd optimizations [ 204.479595][ T47] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 204.579024][T10367] loop4: detected capacity change from 0 to 32768 [ 204.586425][ T7356] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 204.598026][T10367] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.1971 (10367) [ 204.646170][T10367] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 204.648887][T10367] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 204.650607][T10367] BTRFS info (device loop4): using free space tree [ 204.819375][T10367] BTRFS info (device loop4): enabling ssd optimizations [ 204.941790][ T4306] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 205.322181][ T4312] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 205.324369][ T4312] CPU: 1 PID: 4312 Comm: kworker/u5:7 Not tainted 6.1.126-syzkaller #0 [ 205.325561][ T7932] Bluetooth: hci6: Frame reassembly failed (-84) [ 205.326123][ T4312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 205.329568][ T4312] Workqueue: hci4 hci_rx_work [ 205.330589][ T4312] Call trace: [ 205.331312][ T4312] dump_backtrace+0x1c8/0x1f4 [ 205.332293][ T4312] show_stack+0x2c/0x3c [ 205.333161][ T4312] dump_stack_lvl+0x108/0x170 [ 205.334043][ T4312] dump_stack+0x1c/0x5c [ 205.334900][ T4312] sysfs_create_dir_ns+0x278/0x318 [ 205.335961][ T4312] kobject_add_internal+0x598/0xb14 [ 205.337081][ T4312] kobject_add+0x14c/0x21c [ 205.337996][ T4312] device_add+0x400/0xef4 [ 205.338911][ T4312] hci_conn_add_sysfs+0xc4/0x1cc [ 205.339991][ T4312] le_conn_complete_evt+0xa0c/0xfe0 [ 205.341090][ T4312] hci_le_conn_complete_evt+0x114/0x404 [ 205.342228][ T4312] hci_le_meta_evt+0x2b8/0x47c [ 205.343330][ T4312] hci_event_packet+0x6f8/0x109c [ 205.344307][ T4312] hci_rx_work+0x310/0xa84 [ 205.345201][ T4312] process_one_work+0x7ac/0x1404 [ 205.346257][ T4312] worker_thread+0x8e4/0xfec [ 205.347182][ T4312] kthread+0x250/0x2d8 [ 205.347963][ T4312] ret_from_fork+0x10/0x20 [ 205.348981][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.351607][ T4312] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 205.354429][ T4312] Bluetooth: hci4: failed to register connection device [ 205.360408][ T4312] Bluetooth: hci4: link tx timeout [ 205.361772][ T4312] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 205.363643][ T4312] Bluetooth: hci4: link tx timeout [ 205.364673][ T4312] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 205.438741][ T4302] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 205.904155][T10451] loop1: detected capacity change from 0 to 256 [ 205.906034][T10451] exfat: Bad value for 'uid' [ 205.957237][ T8969] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 206.475661][T10478] netlink: 'syz.1.2013': attribute type 4 has an invalid length. [ 206.510879][T10478] netlink: 'syz.1.2013': attribute type 4 has an invalid length. [ 206.543962][T10481] loop5: detected capacity change from 0 to 256 [ 206.556404][T10481] exfat: Bad value for 'uid' [ 206.558816][ T47] Bluetooth: hci0: Opcode 0x206c failed: -110 [ 206.603577][ T8969] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 206.841314][T10495] fuse: Unknown parameter 'grou00000000000000000000' [ 207.083939][T10511] loop5: detected capacity change from 0 to 256 [ 207.085740][T10511] exfat: Bad value for 'uid' [ 207.180873][T10517] loop5: detected capacity change from 0 to 256 [ 207.182704][T10517] exfat: Deprecated parameter 'utf8' [ 207.187212][T10517] exfat: Deprecated parameter 'namecase' [ 207.190822][T10517] exfat: Deprecated parameter 'namecase' [ 207.203768][T10517] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 207.312322][T10522] fuse: Unknown parameter 'grou00000000000000000000' [ 207.358542][ T4311] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 207.436623][T10526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.438301][ T4312] Bluetooth: hci4: command 0x0406 tx timeout [ 207.448724][T10526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.623149][T10534] loop4: detected capacity change from 0 to 256 [ 207.633439][T10534] exfat: Bad value for 'uid' [ 207.676173][ T8969] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 207.868044][T10547] fuse: Unknown parameter 'grou00000000000000000000' [ 207.995353][ T7248] Bluetooth: hci1: Frame reassembly failed (-84) [ 207.997133][ T7248] Bluetooth: hci1: Frame reassembly failed (-84) [ 208.137845][T10558] netlink: 'syz.2.2050': attribute type 4 has an invalid length. [ 208.165359][T10558] netlink: 'syz.2.2050': attribute type 4 has an invalid length. [ 208.222422][T10562] loop7: detected capacity change from 0 to 256 [ 208.239979][T10562] exfat: Bad value for 'uid' [ 208.291313][ T8969] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 208.391459][T10572] fuse: Unknown parameter 'group_i00000000000000000000' [ 208.620594][T10584] netlink: 'syz.7.2063': attribute type 4 has an invalid length. [ 208.648575][ T47] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 208.657761][T10584] netlink: 'syz.7.2063': attribute type 4 has an invalid length. [ 208.720360][T10590] loop1: detected capacity change from 0 to 256 [ 208.723510][T10590] exfat: Bad value for 'uid' [ 208.789196][ T8969] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 209.074407][T10612] netlink: 'syz.5.2077': attribute type 4 has an invalid length. [ 209.119435][T10612] netlink: 'syz.5.2077': attribute type 4 has an invalid length. [ 209.233294][T10617] loop5: detected capacity change from 0 to 256 [ 209.235137][T10617] exfat: Bad value for 'uid' [ 209.279747][ T8969] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 209.506366][T10607] loop7: detected capacity change from 0 to 32768 [ 209.705411][T10614] loop2: detected capacity change from 0 to 32768 [ 209.722868][T10614] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2078 (10614) [ 209.731602][T10614] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 209.733916][T10614] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 209.735686][T10614] BTRFS info (device loop2): enabling disk space caching [ 209.745928][T10614] BTRFS info (device loop2): enabling auto defrag [ 209.764443][T10614] BTRFS info (device loop2): doing ref verification [ 209.765805][T10614] BTRFS info (device loop2): use no compression [ 209.767039][T10614] BTRFS info (device loop2): force clearing of disk cache [ 209.770928][T10614] BTRFS info (device loop2): disabling disk space caching [ 209.901376][T10614] BTRFS info (device loop2): enabling ssd optimizations [ 209.903898][T10614] BTRFS info (device loop2): rebuilding free space tree [ 209.910184][T10614] BTRFS info (device loop2): disabling free space tree [ 209.911665][T10614] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 209.913496][T10614] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 209.926170][ T4512] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 209.944485][ T4512] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 209.998775][ T4311] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 210.070643][ T4308] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 210.071404][T10664] loop7: detected capacity change from 0 to 256 [ 210.073402][T10662] netlink: 'syz.5.2090': attribute type 4 has an invalid length. [ 210.074886][T10664] exfat: Bad value for 'uid' [ 210.168825][T10667] netlink: 'syz.5.2090': attribute type 4 has an invalid length. [ 210.461452][T10683] netlink: 'syz.7.2099': attribute type 4 has an invalid length. [ 210.511055][T10683] netlink: 'syz.7.2099': attribute type 4 has an invalid length. [ 210.662994][T10692] loop7: detected capacity change from 0 to 256 [ 210.680660][T10692] exfat: Bad value for 'uid' [ 211.093496][T10680] loop4: detected capacity change from 0 to 32768 [ 211.418676][T10700] loop1: detected capacity change from 0 to 32768 [ 211.421463][T10700] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2105 (10700) [ 211.435353][T10700] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.437418][T10700] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 211.444958][T10700] BTRFS info (device loop1): using free space tree [ 211.461931][T10735] loop5: detected capacity change from 0 to 256 [ 211.473565][T10735] exfat: Bad value for 'uid' [ 211.518337][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 211.659495][T10700] BTRFS info (device loop1): enabling ssd optimizations [ 211.751460][ T4296] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 212.494085][T10766] loop5: detected capacity change from 0 to 32768 [ 212.566688][T10766] XFS (loop5): Mounting V5 Filesystem [ 212.716214][T10766] XFS (loop5): Ending clean mount [ 212.813102][ T4572] XFS (loop5): Unmounting Filesystem [ 212.965932][T10817] loop2: detected capacity change from 0 to 32768 [ 213.309335][T10854] validate_nla: 8 callbacks suppressed [ 213.309350][T10854] netlink: 'syz.1.2160': attribute type 4 has an invalid length. [ 213.842530][T10850] loop7: detected capacity change from 0 to 32768 [ 213.936832][T10850] XFS (loop7): Mounting V5 Filesystem [ 213.959429][T10889] netlink: 'syz.5.2172': attribute type 4 has an invalid length. [ 214.059065][T10850] XFS (loop7): Ending clean mount [ 214.173203][ T7356] XFS (loop7): Unmounting Filesystem [ 214.356869][T10874] loop2: detected capacity change from 0 to 32768 [ 214.630131][T10896] loop1: detected capacity change from 0 to 32768 [ 214.705029][T10896] XFS (loop1): Mounting V5 Filesystem [ 214.858623][T10930] netlink: 'syz.5.2187': attribute type 4 has an invalid length. [ 214.864435][T10896] XFS (loop1): Ending clean mount [ 214.874903][T10896] XFS (loop1): Quotacheck needed: Please wait. [ 214.967228][T10896] XFS (loop1): Quotacheck: Done. [ 215.075383][ T4296] XFS (loop1): Unmounting Filesystem [ 215.445293][T10948] netlink: 'syz.7.2197': attribute type 29 has an invalid length. [ 215.447692][T10948] netlink: 'syz.7.2197': attribute type 29 has an invalid length. [ 215.465277][T10948] netlink: 'syz.7.2197': attribute type 29 has an invalid length. [ 215.488398][T10950] netlink: 'syz.4.2198': attribute type 4 has an invalid length. [ 215.493958][T10932] loop5: detected capacity change from 0 to 32768 [ 215.565658][T10934] loop2: detected capacity change from 0 to 32768 [ 215.577139][T10932] XFS (loop5): Mounting V5 Filesystem [ 215.677594][T10932] XFS (loop5): Ending clean mount [ 215.763596][ T4572] XFS (loop5): Unmounting Filesystem [ 215.862658][T10978] loop4: detected capacity change from 0 to 128 [ 215.919263][ T8969] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 216.015846][T10983] netlink: 'syz.1.2210': attribute type 4 has an invalid length. [ 216.023850][T10983] netlink: 'syz.1.2210': attribute type 4 has an invalid length. [ 216.637074][T11013] netlink: 'syz.1.2222': attribute type 4 has an invalid length. [ 216.709915][T10985] loop4: detected capacity change from 0 to 32768 [ 216.884214][T10997] loop2: detected capacity change from 0 to 32768 [ 216.923000][T10997] XFS (loop2): Mounting V5 Filesystem [ 217.002048][ T47] Bluetooth: hci1: sending frame failed (-49) [ 217.004622][ T4311] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 217.013395][T10997] XFS (loop2): Ending clean mount [ 217.105723][ T4308] XFS (loop2): Unmounting Filesystem [ 217.476044][T11058] loop1: detected capacity change from 0 to 4096 [ 217.477978][T11058] ntfs3: Unknown parameter 'mask' [ 217.558448][ T8995] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 217.744466][T11051] loop4: detected capacity change from 0 to 32768 [ 217.806713][ T7964] Bluetooth: hci1: Frame reassembly failed (-84) [ 218.236611][T11071] loop1: detected capacity change from 0 to 32768 [ 218.281435][T11071] XFS (loop1): Mounting V5 Filesystem [ 218.303937][T11068] loop7: detected capacity change from 0 to 32768 [ 218.332182][T11068] XFS (loop7): Mounting V5 Filesystem [ 218.361175][T11071] XFS (loop1): Ending clean mount [ 218.452249][T11068] XFS (loop7): Ending clean mount [ 218.491162][ T4296] XFS (loop1): Unmounting Filesystem [ 218.505145][T11112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.507237][T11112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.512510][ T7356] XFS (loop7): Unmounting Filesystem [ 219.180081][T11114] loop7: detected capacity change from 0 to 32768 [ 219.356327][ T39] Bluetooth: hci6: Frame reassembly failed (-84) [ 219.611372][T11135] loop2: detected capacity change from 0 to 32768 [ 219.676159][T11135] XFS (loop2): Mounting V5 Filesystem [ 219.761800][T11135] XFS (loop2): Ending clean mount [ 219.821881][ T4308] XFS (loop2): Unmounting Filesystem [ 219.842279][ T4311] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 219.843962][ T4312] Bluetooth: hci1: command 0x1003 tx timeout [ 220.073017][T11170] validate_nla: 1 callbacks suppressed [ 220.073032][T11170] netlink: 'syz.4.2281': attribute type 4 has an invalid length. [ 220.105301][T11170] netlink: 'syz.4.2281': attribute type 4 has an invalid length. [ 220.235988][T11172] loop7: detected capacity change from 0 to 4096 [ 220.259312][T11172] EXT4-fs (loop7): bad geometry: block count 30064771584 exceeds size of device (512 blocks) [ 220.313331][ T8969] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 220.472116][T11184] binder: 11183:11184 tried to acquire reference to desc 0, got 1 instead [ 220.474574][T11184] binder: 11183:11184 got transaction with invalid data ptr [ 220.489367][T11184] binder: 11183:11184 transaction call to 11183:0 failed 35/29201/-14, size 96-24 line 3342 [ 220.495999][ T4347] binder: undelivered TRANSACTION_ERROR: 29201 [ 220.521240][ T4311] Bluetooth: hci1: sending frame failed (-49) [ 220.524585][ T4302] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 220.804932][T11196] netlink: 'syz.2.2294': attribute type 4 has an invalid length. [ 220.835617][T11196] netlink: 'syz.2.2294': attribute type 4 has an invalid length. [ 220.863553][T11182] loop4: detected capacity change from 0 to 32768 [ 220.959675][T11182] XFS (loop4): Mounting V5 Filesystem [ 221.062454][T11182] XFS (loop4): Ending clean mount [ 221.134187][ T4306] XFS (loop4): Unmounting Filesystem [ 221.183748][T11198] loop7: detected capacity change from 0 to 40427 [ 221.227653][T11198] F2FS-fs (loop7): Found nat_bits in checkpoint [ 221.254384][T11198] F2FS-fs (loop7): Start checkpoint disabled! [ 221.285294][T11198] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 221.342069][T11198] syz.7.2295: attempt to access beyond end of device [ 221.342069][T11198] loop7: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 221.358539][ T4302] Bluetooth: hci6: command 0xfc11 tx timeout [ 221.360376][ T47] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 221.504694][ T7248] kworker/u4:8: attempt to access beyond end of device [ 221.504694][ T7248] loop7: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 221.841716][ T7932] Bluetooth: hci1: Frame reassembly failed (-84) [ 221.936526][T11244] loop7: detected capacity change from 0 to 128 [ 221.959827][T11244] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 221.973122][T11244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.976485][T11244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.173877][T11239] loop1: detected capacity change from 0 to 32768 [ 222.193216][T11239] XFS (loop1): Mounting V5 Filesystem [ 222.247853][T11239] XFS (loop1): Ending clean mount [ 222.260769][ T4311] Bluetooth: hci6: sending frame failed (-49) [ 222.263311][ T4302] Bluetooth: hci6: Entering manufacturer mode failed (-49) [ 222.305467][ T4296] XFS (loop1): Unmounting Filesystem [ 223.103065][T11283] loop5: detected capacity change from 0 to 32768 [ 223.187896][T11285] loop7: detected capacity change from 0 to 32768 [ 223.235955][T11285] XFS (loop7): Mounting V5 Filesystem [ 223.316038][T11285] XFS (loop7): Ending clean mount [ 223.323884][ T7932] Bluetooth: hci6: Frame reassembly failed (-84) [ 223.371244][T11304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.373617][T11304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.388719][ T7356] XFS (loop7): Unmounting Filesystem [ 223.838311][ T4311] Bluetooth: hci1: command 0x1003 tx timeout [ 223.841676][ T47] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 224.197986][T11329] netlink: 'syz.4.2344': attribute type 4 has an invalid length. [ 224.233823][T11329] netlink: 'syz.4.2344': attribute type 4 has an invalid length. [ 224.598049][T11344] fuse: Bad value for 'fd' [ 224.609276][T11324] loop7: detected capacity change from 0 to 32768 [ 224.652627][T11324] XFS (loop7): Mounting V5 Filesystem [ 224.733960][T11324] XFS (loop7): Ending clean mount [ 224.846434][ T7356] XFS (loop7): Unmounting Filesystem [ 224.865556][T11362] netlink: 'syz.1.2356': attribute type 4 has an invalid length. [ 224.892562][T11362] netlink: 'syz.1.2356': attribute type 4 has an invalid length. [ 225.115820][T11372] fuse: Bad value for 'fd' [ 225.236676][T11375] loop4: detected capacity change from 0 to 4096 [ 225.240024][T11375] ntfs3: Unknown parameter 'windows_names' [ 225.313739][ T8969] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 225.358291][ T4302] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 225.358391][ T4311] Bluetooth: hci6: command 0xfc11 tx timeout [ 225.689424][T11401] fuse: Bad value for 'fd' [ 225.735109][T11403] loop7: detected capacity change from 0 to 256 [ 225.736961][T11403] exfat: Bad value for 'uid' [ 225.936521][ T1768] Bluetooth: hci1: Frame reassembly failed (-84) [ 225.976670][T11384] loop1: detected capacity change from 0 to 32768 [ 226.026947][T11384] XFS (loop1): Mounting V5 Filesystem [ 226.142788][T11384] XFS (loop1): Ending clean mount [ 226.195971][ T4296] XFS (loop1): Unmounting Filesystem [ 226.283532][T11433] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 226.285050][T11433] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 226.287712][T11433] vhci_hcd vhci_hcd.0: Device attached [ 226.308425][T11433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.310390][T11433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.317899][T11434] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 226.319770][ T7964] vhci_hcd: stop threads [ 226.320635][ T7964] vhci_hcd: release socket [ 226.321545][ T7964] vhci_hcd: disconnect device [ 226.366139][T11424] loop2: detected capacity change from 0 to 32768 [ 226.378912][T11424] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2384 (11424) [ 226.383902][T11424] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 226.385946][T11424] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 226.387760][T11424] BTRFS info (device loop2): metadata ratio 2 [ 226.399802][T11424] BTRFS info (device loop2): force zlib compression, level 3 [ 226.401512][T11424] BTRFS info (device loop2): enabling auto defrag [ 226.402872][T11424] BTRFS info (device loop2): max_inline at 0 [ 226.404142][T11424] BTRFS info (device loop2): using free space tree [ 226.635265][ T4308] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.258238][T11469] loop1: detected capacity change from 0 to 32768 [ 227.258783][T11489] loop7: detected capacity change from 0 to 4096 [ 227.307481][T11489] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 227.357404][T11469] XFS (loop1): Mounting V5 Filesystem [ 227.405214][T11489] EXT4-fs (loop7): shut down requested (1) [ 227.416785][T11469] XFS (loop1): Ending clean mount [ 227.488424][ T7356] EXT4-fs (loop7): unmounting filesystem. [ 227.512095][ T4296] XFS (loop1): Unmounting Filesystem [ 227.564320][T11515] x_tables: duplicate entry at hook 2 [ 227.759120][T11527] loop2: detected capacity change from 0 to 256 [ 227.761716][T11527] exfat: Bad value for 'uid' [ 227.818980][ T8969] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 227.998294][ T4302] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 227.998599][ T4311] Bluetooth: hci1: command 0xfc11 tx timeout [ 228.095838][T11543] netlink: 'syz.4.2427': attribute type 2 has an invalid length. [ 228.229455][T11551] loop2: detected capacity change from 0 to 2048 [ 228.256019][T11558] loop4: detected capacity change from 0 to 256 [ 228.267517][T11551] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 228.277905][T11558] exfat: Bad value for 'uid' [ 228.318564][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 228.441556][T11572] sctp: [Deprecated]: syz.5.2438 (pid 11572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.441556][T11572] Use struct sctp_sack_info instead [ 228.463897][ T39] Bluetooth: hci1: Frame reassembly failed (-84) [ 228.703654][T11584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.705739][T11584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.821275][T11589] loop2: detected capacity change from 0 to 2048 [ 228.821975][T11564] loop1: detected capacity change from 0 to 32768 [ 228.843209][T11589] NILFS (loop2): invalid segment: Inconsistency found [ 228.844960][T11589] NILFS (loop2): trying rollback from an earlier position [ 228.871104][T11589] NILFS (loop2): recovery complete [ 228.875662][T11590] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.963450][T11592] loop1: detected capacity change from 0 to 256 [ 228.965199][T11592] exfat: Bad value for 'uid' [ 229.204852][T11606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.207004][T11606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.405635][T11618] loop5: detected capacity change from 0 to 256 [ 229.415573][T11618] exfat: Bad value for 'uid' [ 229.611012][T11626] loop1: detected capacity change from 0 to 2048 [ 229.655511][T11626] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 229.662691][T11612] loop4: detected capacity change from 0 to 32768 [ 229.683953][ T4296] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /498/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 229.728462][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 229.931410][T11642] loop5: detected capacity change from 0 to 256 [ 229.933199][T11642] exfat: Bad value for 'uid' [ 230.478313][ T4302] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 230.478355][ T47] Bluetooth: hci1: command 0xfc11 tx timeout [ 230.595682][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.606305][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.619019][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.622407][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.624341][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 230.625928][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.751858][T11680] loop1: detected capacity change from 0 to 512 [ 230.804637][T11654] loop5: detected capacity change from 0 to 32768 [ 230.846142][T11680] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 230.940462][T11680] EXT4-fs error (device loop1): ext4_xattr_block_find:1828: inode #15: comm syz.1.2491: corrupted xattr block 32 [ 231.085905][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 231.097668][T11678] loop4: detected capacity change from 0 to 32768 [ 231.134790][T11673] chnl_net:caif_netlink_parms(): no params data found [ 231.138669][T11678] XFS (loop4): Mounting V5 Filesystem [ 231.203664][T11673] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.205290][T11673] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.207410][T11673] device bridge_slave_0 entered promiscuous mode [ 231.211150][T11673] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.218790][T11673] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.223797][T11673] device bridge_slave_1 entered promiscuous mode [ 231.225251][T11678] XFS (loop4): Ending clean mount [ 231.230021][T11678] XFS (loop4): Quotacheck needed: Please wait. [ 231.294358][T11673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.313849][T11673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.344410][T11678] XFS (loop4): Quotacheck: Done. [ 231.412681][T11673] team0: Port device team_slave_0 added [ 231.423656][T11673] team0: Port device team_slave_1 added [ 231.441623][ T4306] XFS (loop4): Unmounting Filesystem [ 231.493686][T11673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.495277][T11673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.516700][T11673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.543153][T11673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.544636][T11673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.550344][T11673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.674150][T11715] loop1: detected capacity change from 0 to 2048 [ 231.678675][T11673] device hsr_slave_0 entered promiscuous mode [ 231.717096][T11715] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 231.728711][T11673] device hsr_slave_1 entered promiscuous mode [ 231.771166][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 232.192505][ T7248] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.388951][T11723] loop5: detected capacity change from 0 to 32768 [ 232.501855][ T7248] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.545058][T11747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2513'. [ 232.638387][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 232.716363][ T7248] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.809911][ T7248] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.818940][T11761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.823219][T11761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.896405][T11744] loop1: detected capacity change from 0 to 40427 [ 232.927471][T11744] F2FS-fs (loop1): Found nat_bits in checkpoint [ 232.973656][T11744] F2FS-fs (loop1): Start checkpoint disabled! [ 233.004404][T11744] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 233.156211][ T7248] tipc: Left network mode [ 233.181783][T11771] loop4: detected capacity change from 0 to 2048 [ 233.538882][T11790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.549344][T11790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.874645][T11780] loop4: detected capacity change from 0 to 32768 [ 234.718926][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 235.531672][T11884] fuse: Bad value for 'rootmode' [ 235.613908][T11673] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 235.641838][T11673] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 235.662228][T11871] loop7: detected capacity change from 0 to 32768 [ 235.684451][T11871] XFS (loop7): Mounting V5 Filesystem [ 235.710204][T11673] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 235.755999][T11673] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 235.770476][T11871] XFS (loop7): Ending clean mount [ 235.986479][ T7356] XFS (loop7): Unmounting Filesystem [ 236.227140][T11915] fuse: Unknown parameter 'use00000000000000000000' [ 236.340612][ T7248] device hsr_slave_0 left promiscuous mode [ 236.369691][ T7248] device hsr_slave_1 left promiscuous mode [ 236.448786][ T7248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.450486][ T7248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.453023][ T7248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.454875][ T7248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.465224][ T7248] device bridge_slave_0 left promiscuous mode [ 236.466784][ T7248] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.593542][T11917] loop1: detected capacity change from 0 to 32768 [ 236.628467][ T7248] device veth1_macvtap left promiscuous mode [ 236.629070][T11917] ERROR: (device loop1): dbDiscardAG: -EIO [ 236.629070][T11917] [ 236.629868][ T7248] device veth0_macvtap left promiscuous mode [ 236.631875][T11917] ERROR: (device loop1): remounting filesystem as read-only [ 236.633053][ T7248] device veth1_vlan left promiscuous mode [ 236.635776][ T7248] device veth0_vlan left promiscuous mode [ 236.808284][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 237.065594][T11939] loop1: detected capacity change from 0 to 2048 [ 237.156391][T11939] loop1: detected capacity change from 0 to 2048 [ 238.823236][ T7248] team0 (unregistering): Port device team_slave_1 removed [ 238.878388][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 239.029923][ T7248] team0 (unregistering): Port device team_slave_0 removed [ 239.219547][ T7248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.448958][ T7248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.730807][ T7248] bond0 (unregistering): Released all slaves [ 242.296767][T11930] netlink: 'syz.7.2577': attribute type 12 has an invalid length. [ 242.440806][T11951] fuse: Unknown parameter 'use00000000000000000000' [ 242.442436][T11673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.479570][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.481714][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.486688][T11673] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.517531][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.520054][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.522161][ T7932] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.523595][ T7932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.526747][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.551814][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.580196][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.585899][ T7963] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.587619][ T7963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.597374][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.627345][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.630047][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.635003][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.637515][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.643658][T11959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2589'. [ 242.652398][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.659000][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.664098][T11961] loop5: detected capacity change from 0 to 2048 [ 242.666696][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.678772][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.684472][T11673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.687225][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.706636][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.725347][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.751359][T11946] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.835029][T11961] loop5: detected capacity change from 0 to 2048 [ 243.101144][ T7964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.102963][ T7964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.115722][T11673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.131907][T11983] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 243.155874][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.160701][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.219371][ T7964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.221659][ T7964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.224048][ T7964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.226465][ T7964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.236979][T11673] device veth0_vlan entered promiscuous mode [ 243.253203][T11989] fuse: Unknown parameter 'use00000000000000000000' [ 243.282788][T11673] device veth1_vlan entered promiscuous mode [ 243.312783][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 243.315454][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 243.317501][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.321858][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.340954][T11673] device veth0_macvtap entered promiscuous mode [ 243.344716][T11673] device veth1_macvtap entered promiscuous mode [ 243.380929][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.383328][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.385297][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.387366][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.394307][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.396380][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.399188][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.401468][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.409953][T11673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.415288][ T7964] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.417610][ T7964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.424938][ T7964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.435404][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.444649][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.446965][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.455141][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.457454][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.460908][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.463137][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.465522][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.468963][T11673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.471481][ T7964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.473988][ T7964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.485813][T11673] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.490251][T11673] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.493510][T11673] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.497707][T11673] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.572009][ T7964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.574667][ T7964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.584389][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 243.605990][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.608893][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.614239][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.630159][T11999] loop5: detected capacity change from 0 to 2048 [ 243.683057][T11946] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 243.723279][T11999] loop5: detected capacity change from 0 to 2048 [ 244.084354][T12003] loop2: detected capacity change from 0 to 32768 [ 244.110852][T12003] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2605 (12003) [ 244.122459][T12003] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 244.124471][T12003] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 244.126352][T12003] BTRFS info (device loop2): using free space tree [ 244.300383][T12003] BTRFS info (device loop2): enabling ssd optimizations [ 244.375539][T12040] loop5: detected capacity change from 0 to 2048 [ 244.404652][T12043] loop1: detected capacity change from 0 to 64 [ 244.411521][T11673] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 244.500175][T12040] loop5: detected capacity change from 0 to 2048 [ 244.781788][T12056] fuse: Unknown parameter 'user_i00000000000000000000' [ 245.246294][T12079] loop5: detected capacity change from 0 to 2048 [ 245.264244][T12081] fuse: Unknown parameter 'user_i00000000000000000000' [ 245.313385][T12057] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 245.356577][T12079] loop5: detected capacity change from 0 to 2048 [ 245.375508][T12043] syz.1.2614: attempt to access beyond end of device [ 245.375508][T12043] loop1: rw=0, sector=130062, nr_sectors = 2 limit=64 [ 245.395493][T12043] Buffer I/O error on dev loop1, logical block 65031, async page read [ 245.406112][T12043] syz.1.2614: attempt to access beyond end of device [ 245.406112][T12043] loop1: rw=0, sector=130062, nr_sectors = 2 limit=64 [ 245.414480][T12043] Buffer I/O error on dev loop1, logical block 65031, async page read [ 245.675507][T12101] binder: 12100:12101 ioctl 40046205 0 returned -22 [ 245.694570][T12101] binder: 12100:12101 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 245.697330][T12101] binder: 12101 RLIMIT_NICE not set [ 245.836870][T12109] loop1: detected capacity change from 0 to 2048 [ 245.864756][T12109] loop1: detected capacity change from 0 to 2048 [ 246.347072][T12114] loop7: detected capacity change from 0 to 32768 [ 246.427025][T12114] XFS (loop7): Mounting V5 Filesystem [ 246.525138][T12114] XFS (loop7): Ending clean mount [ 246.557300][T12130] loop2: detected capacity change from 0 to 32768 [ 246.563665][T12148] loop4: detected capacity change from 0 to 2048 [ 246.634781][T12130] XFS (loop2): Mounting V5 Filesystem [ 246.643703][T12148] loop4: detected capacity change from 0 to 2048 [ 246.662220][T12159] fuse: Bad value for 'fd' [ 246.673202][ T7356] XFS (loop7): Unmounting Filesystem [ 246.744099][T12130] XFS (loop2): Ending clean mount [ 246.819399][T11673] XFS (loop2): Unmounting Filesystem [ 247.127981][T12177] loop1: detected capacity change from 0 to 164 [ 247.870936][T12184] loop7: detected capacity change from 0 to 32768 [ 247.965970][T12184] XFS (loop7): Mounting V5 Filesystem [ 248.067652][T12184] XFS (loop7): Ending clean mount [ 248.213372][T12205] loop2: detected capacity change from 0 to 32768 [ 248.241376][T12193] loop5: detected capacity change from 0 to 40427 [ 248.243820][ T7356] XFS (loop7): Unmounting Filesystem [ 248.294368][T12205] XFS (loop2): Mounting V5 Filesystem [ 248.304785][T12193] F2FS-fs (loop5): Found nat_bits in checkpoint [ 248.337848][T12193] F2FS-fs (loop5): Start checkpoint disabled! [ 248.354010][T12193] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 248.386443][T12205] XFS (loop2): Ending clean mount [ 248.491347][ T7963] kworker/u4:12: attempt to access beyond end of device [ 248.491347][ T7963] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 248.526157][T11673] XFS (loop2): Unmounting Filesystem [ 248.810514][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.811795][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.080256][T12273] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2708'. [ 249.530334][T12279] loop5: detected capacity change from 0 to 32768 [ 249.579568][T12294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.581341][T12294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.587606][T12279] XFS (loop5): Mounting V5 Filesystem [ 249.597078][T12272] loop1: detected capacity change from 0 to 40427 [ 249.631927][T12279] XFS (loop5): Ending clean mount [ 249.643230][T12272] F2FS-fs (loop1): Found nat_bits in checkpoint [ 249.673641][T12272] F2FS-fs (loop1): Start checkpoint disabled! [ 249.691139][ T4572] XFS (loop5): Unmounting Filesystem [ 249.696214][T12272] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 249.803323][ T7964] kworker/u4:13: attempt to access beyond end of device [ 249.803323][ T7964] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 249.957159][T12311] netlink: 'syz.4.2723': attribute type 4 has an invalid length. [ 249.978504][T12311] netlink: 'syz.4.2723': attribute type 4 has an invalid length. [ 250.157155][T12320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2726'. [ 250.546338][T12337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.555832][T12337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.583581][T12339] netlink: 'syz.1.2735': attribute type 4 has an invalid length. [ 250.623859][T12339] netlink: 'syz.1.2735': attribute type 4 has an invalid length. [ 250.653148][T12322] loop2: detected capacity change from 0 to 32768 [ 250.696584][T12322] XFS (loop2): Mounting V5 Filesystem [ 250.744513][T12322] XFS (loop2): Ending clean mount [ 250.787794][T11673] XFS (loop2): Unmounting Filesystem [ 250.840314][T12331] loop5: detected capacity change from 0 to 40427 [ 250.857395][T12331] F2FS-fs (loop5): Found nat_bits in checkpoint [ 250.875521][T12331] F2FS-fs (loop5): Start checkpoint disabled! [ 250.878425][T12331] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 250.930985][ T7963] kworker/u4:12: attempt to access beyond end of device [ 250.930985][ T7963] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 251.377919][T12373] netlink: 'syz.7.2746': attribute type 4 has an invalid length. [ 251.516920][T12380] loop7: detected capacity change from 0 to 2048 [ 251.617046][T12380] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 251.743495][ T7356] EXT4-fs (loop7): unmounting filesystem. [ 251.841671][T12377] loop2: detected capacity change from 0 to 40427 [ 251.874954][T12377] F2FS-fs (loop2): Found nat_bits in checkpoint [ 251.921693][T12377] F2FS-fs (loop2): Start checkpoint disabled! [ 251.943993][T12377] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 252.035862][ T7898] kworker/u4:9: attempt to access beyond end of device [ 252.035862][ T7898] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 252.112283][T12410] loop5: detected capacity change from 0 to 2048 [ 252.174051][T12410] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 252.302552][ T4572] EXT4-fs (loop5): unmounting filesystem. [ 252.312714][T12421] loop1: detected capacity change from 0 to 2048 [ 252.372374][T12421] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 252.450116][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 252.842935][T12448] loop2: detected capacity change from 0 to 2048 [ 252.899357][T12448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 253.014799][T11673] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /31/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 253.015223][T12458] loop7: detected capacity change from 0 to 2048 [ 253.069953][T12458] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 253.114747][T11673] EXT4-fs (loop2): unmounting filesystem. [ 253.179590][ T7356] EXT4-fs (loop7): unmounting filesystem. [ 253.462275][T12478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.464403][T12478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.509290][T12490] loop2: detected capacity change from 0 to 2048 [ 253.554955][T12490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 253.624663][T12477] loop5: detected capacity change from 0 to 32768 [ 253.638104][T11673] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /34/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 253.714003][T12504] loop1: detected capacity change from 0 to 2048 [ 253.722581][T12477] XFS (loop5): Mounting V5 Filesystem [ 253.733978][T11673] EXT4-fs (loop2): unmounting filesystem. [ 253.807295][T12504] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 253.821523][T12477] XFS (loop5): Ending clean mount [ 253.866447][T12500] loop7: detected capacity change from 0 to 32768 [ 253.876770][T12517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.878898][T12517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.907940][T12500] XFS (loop7): Mounting V5 Filesystem [ 253.911857][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 253.990572][T12500] XFS (loop7): Ending clean mount [ 254.013880][ T4572] XFS (loop5): Unmounting Filesystem [ 254.100220][ T7356] XFS (loop7): Unmounting Filesystem [ 254.151863][T12528] loop1: detected capacity change from 0 to 1024 [ 254.197308][T12528] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 254.212584][T12528] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 254.253050][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 254.765753][T12544] loop2: detected capacity change from 0 to 2048 [ 254.795770][T12546] loop5: detected capacity change from 0 to 2048 [ 254.832233][T12544] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 254.860934][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 254.866249][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 254.872754][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 254.875951][T12546] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 254.889872][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 254.893311][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 254.895070][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 254.939420][T11673] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /37/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 254.966954][ T4572] EXT4-fs (loop5): unmounting filesystem. [ 254.981558][ T4296] bridge0: port 3(syz_tun) entered disabled state [ 255.063959][T11673] EXT4-fs (loop2): unmounting filesystem. [ 255.125791][ T4296] device syz_tun left promiscuous mode [ 255.127119][ T4296] bridge0: port 3(syz_tun) entered disabled state [ 255.463551][T12550] chnl_net:caif_netlink_parms(): no params data found [ 255.604517][T12569] loop7: detected capacity change from 0 to 40427 [ 255.618995][T12569] F2FS-fs (loop7): Unrecognized mount option "errors=continue" or missing value [ 255.629367][T12583] loop2: detected capacity change from 0 to 2048 [ 255.666840][T12583] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 255.698502][T12057] I/O error, dev loop7, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 255.802751][T11673] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /40/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 255.847124][T12550] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.848713][T12550] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.851069][T12550] device bridge_slave_0 entered promiscuous mode [ 255.862750][T12550] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.864239][T12550] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.866428][T12550] device bridge_slave_1 entered promiscuous mode [ 255.870062][T11673] EXT4-fs (loop2): unmounting filesystem. [ 255.998548][ T4302] Bluetooth: hci5: command 0x0406 tx timeout [ 256.066485][T12550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.086267][T12550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.160707][T12550] team0: Port device team_slave_0 added [ 256.171571][T12550] team0: Port device team_slave_1 added [ 256.217081][T12550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.219909][T12550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.231054][T12550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.234849][T12550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.236477][T12550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.243619][T12550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.294906][T12550] device hsr_slave_0 entered promiscuous mode [ 256.319443][T12550] device hsr_slave_1 entered promiscuous mode [ 256.321311][T12550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.322702][T12550] Cannot create hsr debugfs directory [ 256.455355][T12585] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 256.456535][T12621] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2833'. [ 256.459275][T12585] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 256.460685][T12585] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 256.462163][T12585] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 256.463436][T12585] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 256.464549][T12585] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 256.467930][T12585] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 256.473852][T12585] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 256.476515][T12585] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 256.482340][T12585] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 256.495486][T12585] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 256.501303][T12585] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 256.531319][T12585] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 256.541511][T12585] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 256.544634][T12585] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 256.555446][T12613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.557339][T12613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.582185][T12550] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.674638][T12550] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.774469][T12634] loop7: detected capacity change from 0 to 2048 [ 256.825354][T12550] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.832993][T12634] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 256.890860][ T7356] EXT4-fs error (device loop7): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /398/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 256.982362][ T7356] EXT4-fs (loop7): unmounting filesystem. [ 256.986513][T12550] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.230925][T12657] fuse: Unknown parameter 'fd0x0000000000000003' [ 257.334506][T12550] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 257.360103][T12550] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 257.362304][T12665] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2843'. [ 257.366446][T12550] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 257.371845][T12550] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 257.387220][T12666] loop7: detected capacity change from 0 to 2048 [ 257.462159][T12668] loop2: detected capacity change from 0 to 2048 [ 257.465810][T12666] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 257.487097][T12550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.495592][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.497831][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.511310][T12550] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.531041][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.533562][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.553321][ T7963] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.554943][ T7963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.576444][T12668] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 257.592227][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.594807][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.596848][ T7963] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.598477][ T7963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.613477][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.616054][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.624954][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.627262][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.649913][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.669957][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.679756][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.682082][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.684230][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.684619][T11673] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /44/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 257.687178][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.695757][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.700388][ T7356] EXT4-fs (loop7): unmounting filesystem. [ 257.701181][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.706877][T12550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 257.792795][T11673] EXT4-fs (loop2): unmounting filesystem. [ 258.006261][T12702] fuse: Unknown parameter 'fd0x0000000000000003' [ 258.083889][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.085670][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.113636][T12550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.155179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.157794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.169591][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2855'. [ 258.184628][T12710] netlink: 'syz.2.2856': attribute type 4 has an invalid length. [ 258.193681][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.195996][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.199077][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.204442][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.213982][T12550] device veth0_vlan entered promiscuous mode [ 258.232651][T12550] device veth1_vlan entered promiscuous mode [ 258.290986][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 258.293080][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 258.295085][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.297324][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.309674][T12550] device veth0_macvtap entered promiscuous mode [ 258.324769][T12550] device veth1_macvtap entered promiscuous mode [ 258.332473][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 258.334788][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 258.374902][T12717] loop7: detected capacity change from 0 to 2048 [ 258.395723][T12550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.397755][T12550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.402607][T12550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.404713][T12550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.406613][T12550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.424824][T12550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.426919][T12550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.440536][T12550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.442704][T12550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.444879][T12550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.458367][T12550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.461038][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.463684][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.468098][T12550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.475922][T12550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.476450][T12717] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 258.477824][T12550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.482017][T12550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.483995][T12550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.487449][T12550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.491328][T12550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.493794][T12550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.498678][T12550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.500884][T12550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.503865][T12550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.506881][ T7964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.511299][ T7964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.529303][T12550] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.531119][T12550] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.552785][T12550] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.563582][T12550] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.664774][ T7356] EXT4-fs (loop7): unmounting filesystem. [ 258.776314][T12746] fuse: Unknown parameter 'fd0x0000000000000003' [ 258.777334][T12742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2866'. [ 258.804416][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.806212][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.811998][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 258.873013][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.874986][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.907065][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 259.258279][T12776] loop1: detected capacity change from 0 to 512 [ 259.306808][T12776] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2878: invalid indirect mapped block 256 (level 2) [ 259.322609][T12782] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2881'. [ 259.447652][T12776] EXT4-fs (loop1): 2 truncates cleaned up [ 259.469620][T12776] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 259.602123][T12550] EXT4-fs (loop1): unmounting filesystem. [ 260.164290][T12808] loop5: detected capacity change from 0 to 32768 [ 260.217644][T12808] XFS (loop5): Mounting V5 Filesystem [ 260.261018][T12808] XFS (loop5): Ending clean mount [ 260.337673][ T4572] XFS (loop5): Unmounting Filesystem [ 261.469053][T12894] loop7: detected capacity change from 0 to 16 [ 261.476693][T12894] erofs: (device loop7): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142735) [ 261.491308][T12871] loop2: detected capacity change from 0 to 32768 [ 261.555164][T12871] XFS (loop2): Mounting V5 Filesystem [ 261.675477][T12871] XFS (loop2): Ending clean mount [ 261.745639][T12914] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 261.761308][T11673] XFS (loop2): Unmounting Filesystem [ 262.506202][T12939] loop4: detected capacity change from 0 to 32768 [ 262.558071][T12939] XFS (loop4): Mounting V5 Filesystem [ 262.645367][T12939] XFS (loop4): Ending clean mount [ 262.748088][ T4306] XFS (loop4): Unmounting Filesystem [ 263.373617][T12992] process 'syz.1.2958' launched '/dev/fd/3' with NULL argv: empty string added [ 263.518912][T12999] netlink: 'syz.1.2959': attribute type 4 has an invalid length. [ 263.538601][T12999] device veth1_macvtap left promiscuous mode [ 263.960825][T13019] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 263.962712][T13019] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 263.964712][T13019] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 263.985085][T13019] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 264.447013][T13009] loop4: detected capacity change from 0 to 32768 [ 264.507142][T13009] JFS: metapage_get_blocks failed [ 264.516702][T13009] ERROR: (device loop4): release_metapage: write_one_page() failed [ 264.516702][T13009] [ 264.522524][T13009] ERROR: (device loop4): remounting filesystem as read-only [ 264.536329][T13009] read_mapping_page failed! [ 264.561890][ T92] blkno = 5002c, nblocks = 1 [ 264.563260][ T92] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 264.563260][ T92] [ 264.565607][ T92] ERROR: (device loop4): remounting filesystem as read-only [ 264.567140][ T92] BUG: Bad page state in process jfsCommit pfn:10b314 [ 264.576272][ T92] page:000000001bd1efb3 refcount:0 mapcount:0 mapping:0000000000000000 index:0x24 pfn:0x10b314 [ 264.581465][ T92] flags: 0x5ffc00000002047(locked|referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff) [ 264.583964][ T92] raw: 05ffc00000002047 dead000000000100 dead000000000122 0000000000000000 [ 264.585809][ T92] raw: 0000000000000024 ffff0000ee1340f8 00000000ffffffff 0000000000000000 [ 264.587672][ T92] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 264.595177][ T92] Modules linked in: [ 264.596144][ T92] CPU: 0 PID: 92 Comm: jfsCommit Not tainted 6.1.126-syzkaller #0 [ 264.597679][ T92] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 264.599838][ T92] Call trace: [ 264.600436][ T92] dump_backtrace+0x1c8/0x1f4 [ 264.601422][ T92] show_stack+0x2c/0x3c [ 264.602233][ T92] dump_stack_lvl+0x108/0x170 [ 264.603164][ T92] dump_stack+0x1c/0x5c [ 264.604002][ T92] bad_page+0x1a4/0x1c4 [ 264.604822][ T92] free_unref_page_prepare+0x3a0/0x1330 [ 264.606025][ T92] free_unref_page+0x80/0x420 [ 264.607065][ T92] __folio_put+0xd0/0x12c [ 264.607974][ T92] _metapage_homeok+0x130/0x21c [ 264.608936][ T92] txUnlock+0x264/0xbb0 [ 264.609876][ T92] jfs_lazycommit+0x490/0x988 [ 264.610894][ T92] kthread+0x250/0x2d8 [ 264.611750][ T92] ret_from_fork+0x10/0x20 [ 264.616577][ T92] Disabling lock debugging due to kernel taint [ 264.617976][ T92] page:000000001bd1efb3 refcount:0 mapcount:0 mapping:0000000000000000 index:0x24 pfn:0x10b314 [ 264.620576][ T92] flags: 0x5ffc00000002047(locked|referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff) [ 264.622971][ T92] raw: 05ffc00000002047 dead000000000100 dead000000000122 0000000000000000 [ 264.624986][ T92] raw: 0000000000000024 ffff0000ee1340f8 00000000ffffffff 0000000000000000 [ 264.626781][ T92] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 264.629473][ T92] ------------[ cut here ]------------ [ 264.630569][ T92] kernel BUG at include/linux/mm.h:1135! [ 264.631759][ T92] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 264.633293][ T92] Modules linked in: [ 264.634056][ T92] CPU: 0 PID: 92 Comm: jfsCommit Tainted: G B 6.1.126-syzkaller #0 [ 264.635920][ T92] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 264.637952][ T92] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 264.639540][ T92] pc : put_metapage+0x278/0x2c4 [ 264.640546][ T92] lr : put_metapage+0x278/0x2c4 [ 264.641594][ T92] sp : ffff80001de37ba0 [ 264.642353][ T92] x29: ffff80001de37ba0 x28: dfff800000000000 x27: 1fffe0001dc26824 [ 264.644120][ T92] x26: 1fffe0001dc26831 x25: dfff800000000000 x24: 000000000000007f [ 264.645782][ T92] x23: fffffc00032cc534 x22: fffffc00032cc500 x21: ffff0000ee134120 [ 264.647454][ T92] x20: ffff0000ee134188 x19: ffff0000ee1340f8 x18: 1fffe0003679bf76 [ 264.649239][ T92] x17: ffff800015a8d000 x16: ffff800012330a64 x15: ffff0001b3cdfbbc [ 264.650961][ T92] x14: ffff0001b3cdfbb8 x13: 1fffe0003679bf76 x12: 0000000000000001 [ 264.652713][ T92] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800008835584 [ 264.654460][ T92] x8 : ffff0000c7430000 x7 : 1fffe0003679bf77 x6 : ffff800008278b14 [ 264.656119][ T92] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80000ab3392c [ 264.657751][ T92] x2 : ffff0001b3cdfcd0 x1 : 0000000100000000 x0 : 000000000000005c [ 264.659480][ T92] Call trace: [ 264.660133][ T92] put_metapage+0x278/0x2c4 [ 264.661036][ T92] txUnlock+0x3e4/0xbb0 [ 264.662003][ T92] jfs_lazycommit+0x490/0x988 [ 264.662934][ T92] kthread+0x250/0x2d8 [ 264.663978][ T92] ret_from_fork+0x10/0x20 [ 264.664921][ T92] Code: d0046d81 910b8021 aa1603e0 97b7947b (d4210000) [ 264.666242][ T92] ---[ end trace 0000000000000000 ]--- [ 265.310122][ T92] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 265.311708][ T92] SMP: stopping secondary CPUs [ 265.312667][ T92] Kernel Offset: disabled [ 265.313556][ T92] CPU features: 0x080000,02070084,26017203 [ 265.314945][ T92] Memory Limit: none [ 265.925261][ T92] Rebooting in 86400 seconds..