last executing test programs: 13.182809504s ago: executing program 2 (id=1859): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 13.028525405s ago: executing program 2 (id=1862): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_mreq(r1, 0x29, 0x7, &(0x7f0000000000)={@empty}, 0x14) 12.904741214s ago: executing program 2 (id=1864): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0xa70, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0xa60, 0x2e8, 0x2e8, 0xa60, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x888, 0x8b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@u32={{0x7e0}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xad0) 12.833284869s ago: executing program 2 (id=1865): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x109802, 0x0) write$dsp(r0, &(0x7f00000010c0)="ab29f3", 0x3) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) 12.221252613s ago: executing program 2 (id=1883): syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080)={[{@nobh}]}, 0x1, 0x498, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000240)) 12.080063783s ago: executing program 2 (id=1887): syz_open_dev$video4linux(&(0x7f0000001380), 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080), &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 707.908209ms ago: executing program 1 (id=2109): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0) 662.162032ms ago: executing program 3 (id=2110): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) r1 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r1, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000144140d"], 0x28}}], 0x1, 0x0) 643.718464ms ago: executing program 0 (id=2111): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/140, 0x8c) preadv(r0, &(0x7f0000002480)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x74d67edb, 0x0) read$hiddev(r0, &(0x7f0000000080)=""/163, 0xa3) 642.536974ms ago: executing program 4 (id=2112): syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 567.214869ms ago: executing program 3 (id=2113): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x6, 0x0, 0xfffffffffffffffd}) 566.063999ms ago: executing program 0 (id=2122): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703380000001f00000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 517.061793ms ago: executing program 1 (id=2114): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x0, {@in6_addr=@loopback, 0x800}}}]}, 0x38}}, 0x0) 516.968073ms ago: executing program 3 (id=2115): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000900040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 459.137147ms ago: executing program 3 (id=2116): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0xf01, &(0x7f0000001540), &(0x7f0000000100)=0x0, &(0x7f0000001500)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 432.283089ms ago: executing program 4 (id=2117): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setuid(0xee01) setns(r1, 0x2000000) 419.35051ms ago: executing program 1 (id=2118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000200)={0xfffffbff, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140), &(0x7f0000000180), 0x0}) 415.58752ms ago: executing program 0 (id=2119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000100)) 349.026125ms ago: executing program 4 (id=2120): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), 0x0, 0x0}) 329.430386ms ago: executing program 0 (id=2121): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x0, "fc03000000000000000000edffffff00"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x8, {"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", 0x101c}}, 0x1006) 296.606988ms ago: executing program 3 (id=2123): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}]]}}}]}, 0x38}}, 0x0) 271.16564ms ago: executing program 1 (id=2124): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x4008662c, 0x0) 256.059241ms ago: executing program 4 (id=2125): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="342d300aee"], 0x31) 236.606123ms ago: executing program 0 (id=2126): syz_mount_image$cramfs(&(0x7f0000000240), &(0x7f00000001c0)='./file0\x00', 0x8, &(0x7f0000000000)=ANY=[], 0x1, 0x14b, &(0x7f0000000280)="$eJzszjFLAmEcx/HfdadEaRYYWJAJDR2JaSfWFKSRJGQHhUuTYBcFipFQjka0NQStDpbQJL4Fy1oshbA30eIWOBaPZ4TQ0v77LMd9n//9n9tYbanwAF0HetazmeMTI5cz9j07ejy6+1GrhUW3AhgeODfnH8LAoXgqQOccEPnJDhwcpY3FVDYt3jthQAUQGcWa6AGYsyOiOc3ZpX5T54D6pNm0P1qw36YVIOIwm9j3dQvMi30Tv/s+AeSL3mrlZbvZiPkW7mdkXMa8sxbz1/HT3caVFp0q21wyEsbzHSKS+O7d3/C9+auVdqsZ39LjeiuoacsSUAiE2vprMxYqXEPZtJ0Ce9LgPVa43EoCuJCAm95Z51GyA6iXunpmbKXUv79wJnsAKV9MJV2WctI5PgRZhQQiIiIiIiIiIiIiIiIiIqL/+g4AAP//nptkmQ==") chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 155.722849ms ago: executing program 0 (id=2127): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_io_uring_setup(0x231b, &(0x7f0000000440), &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000340)=@rc={0x1f, @fixed, 0x5}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 155.534938ms ago: executing program 4 (id=2128): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r1}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'blake2b-160-generic\x00'}}) 142.858929ms ago: executing program 3 (id=2129): r0 = syz_io_uring_setup(0x3e6d, &(0x7f00000001c0), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 124.688941ms ago: executing program 1 (id=2130): socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, 0xffffffffffffffff) 1.0166ms ago: executing program 1 (id=2131): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000040)=0x3, 0x4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x119212}}, 0x50) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 0s ago: executing program 4 (id=2132): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) kernel console output (not intermixed with test programs): 71488][ T5445] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.367 (5445) [ 69.677722][ T5445] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 69.680638][ T5445] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 69.682962][ T5445] BTRFS info (device loop1): using free space tree [ 69.786208][ T5485] loop2: detected capacity change from 0 to 1024 [ 69.845706][ T5445] BTRFS info (device loop1): enabling ssd optimizations [ 69.845951][ T5442] BTRFS info (device loop4): enabling ssd optimizations [ 69.860171][ T5442] BTRFS info (device loop4): rebuilding free space tree [ 69.874465][ T5485] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 69.939740][ T5442] BTRFS info (device loop4): disabling free space tree [ 69.942089][ T5442] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 69.955730][ T5442] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 69.989971][ T4823] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 70.152035][ T4301] EXT4-fs (loop2): unmounting filesystem. [ 70.180698][ T5442] BTRFS info (device loop4): balance: start -sprofiles=metadata|raid0|raid1|dup|0xa0600000000,vrange=125775574759525..3493237995807506441 [ 70.213933][ T5442] BTRFS info (device loop4): balance: ended with status: 0 [ 70.322572][ T4294] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 70.375314][ T5514] netlink: 'syz.1.378': attribute type 11 has an invalid length. [ 70.408323][ T4307] Bluetooth: hci5: command tx timeout [ 70.563892][ T4307] Bluetooth: hci3: command tx timeout [ 71.429835][ T55] team0 (unregistering): Port device team_slave_1 removed [ 71.617239][ T55] team0 (unregistering): Port device team_slave_0 removed [ 71.824585][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.024490][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.483741][ T4307] Bluetooth: hci5: command tx timeout [ 72.643707][ T4310] Bluetooth: hci3: command tx timeout [ 74.347360][ T55] bond0 (unregistering): Released all slaves [ 74.598914][ T5511] netlink: 'syz.2.376': attribute type 3 has an invalid length. [ 74.727243][ T4310] Bluetooth: hci3: command tx timeout [ 74.823126][ T5213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.833448][ T5213] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.838304][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.840689][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.843523][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.852861][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.861493][ T5529] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.866739][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.870793][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.897086][ T5418] chnl_net:caif_netlink_parms(): no params data found [ 74.912116][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.916885][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.933333][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.940192][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.942111][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.965304][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.973221][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.990698][ T5213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.004603][ T5213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.011449][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.016712][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.019652][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.037608][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.044681][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.054183][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.057029][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.064284][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.121965][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.126391][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.208570][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.210523][ T5418] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.213101][ T5418] device bridge_slave_0 entered promiscuous mode [ 75.222296][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.225585][ T5418] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.227998][ T5418] device bridge_slave_1 entered promiscuous mode [ 75.335171][ T5418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.346626][ T5418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.367944][ T5418] team0: Port device team_slave_0 added [ 75.372908][ T5418] team0: Port device team_slave_1 added [ 75.404828][ T5213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.466319][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.468496][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.572628][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.574623][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.581406][ T5418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.595194][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.597105][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.608105][ T5418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.622201][ T5213] device veth0_vlan entered promiscuous mode [ 75.622411][ T27] audit: type=1326 audit(2000000030.670:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz.1.399" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87d491a8 code=0x0 [ 75.634663][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.637535][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.640293][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.650505][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.665372][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.667843][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.727356][ T5213] device veth1_vlan entered promiscuous mode [ 75.795828][ T5418] device hsr_slave_0 entered promiscuous mode [ 75.854733][ T5418] device hsr_slave_1 entered promiscuous mode [ 75.884114][ T5418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.886269][ T5418] Cannot create hsr debugfs directory [ 75.921805][ T5213] device veth0_macvtap entered promiscuous mode [ 75.938758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.941581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.954724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.976039][ T5213] device veth1_macvtap entered promiscuous mode [ 76.028171][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.031102][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.049708][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.052657][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.055807][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.058624][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.061372][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.089438][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.093383][ T5213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.110330][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.112907][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.117398][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.122603][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.126727][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.129323][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.132222][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.135576][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.138520][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.141338][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.145167][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.149154][ T5213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.200295][ T5577] loop4: detected capacity change from 0 to 32768 [ 76.211626][ T5577] XFS: ikeep mount option is deprecated. [ 76.219517][ T5577] XFS (loop4): Mounting V5 Filesystem [ 76.260073][ T5577] XFS (loop4): Ending clean mount [ 76.264263][ T5577] XFS (loop4): Quotacheck needed: Please wait. [ 76.286693][ T5577] XFS (loop4): Quotacheck: Done. [ 76.332235][ T4294] XFS (loop4): Unmounting Filesystem [ 76.580493][ T5593] loop1: detected capacity change from 0 to 4096 [ 76.586744][ T5593] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 76.760586][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.766458][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.782284][ T5213] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.800947][ T5213] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.803294][ T5213] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.806051][ T4310] Bluetooth: hci3: command tx timeout [ 76.811790][ T5213] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.219054][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.248725][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.251120][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.268107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.337087][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.379473][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.381816][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.477742][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.493475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.594903][ T4310] Bluetooth: hci4: sending frame failed (-49) [ 77.598153][ T4307] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 77.608846][ T5614] loop4: detected capacity change from 0 to 32768 [ 77.617283][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.622014][ T5614] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.416 (5614) [ 77.637439][ T5614] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 77.646332][ T5614] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 77.657781][ T5614] BTRFS info (device loop4): using free space tree [ 77.770121][ T5647] loop2: detected capacity change from 0 to 512 [ 77.836639][ T5647] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 78.024475][ T4301] EXT4-fs (loop2): unmounting filesystem. [ 78.055162][ T5614] BTRFS info (device loop4): enabling ssd optimizations [ 78.222323][ T4294] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 78.393187][ T5648] loop1: detected capacity change from 0 to 32768 [ 78.492003][ T5648] XFS (loop1): Mounting V5 Filesystem [ 78.633057][ T5648] XFS (loop1): Ending clean mount [ 78.641554][ T5648] XFS (loop1): Quotacheck needed: Please wait. [ 78.717784][ T5648] XFS (loop1): Quotacheck: Done. [ 78.732870][ T5705] loop2: detected capacity change from 0 to 1024 [ 78.758963][ T4823] XFS (loop1): Unmounting Filesystem [ 79.401991][ T5731] input: syz0 as /devices/virtual/input/input3 [ 79.656100][ T5738] loop3: detected capacity change from 0 to 4096 [ 79.672398][ T5738] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 79.732618][ T5738] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 79.884321][ T5746] loop1: detected capacity change from 0 to 764 [ 80.089031][ T5756] Injecting memory failure for pfn 0x1c7c16 at process virtual address 0x2021c000 [ 80.127393][ T5756] Memory failure: 0x1c7c16: recovery action for dirty LRU page: Recovered [ 80.129815][ T5756] Injecting memory failure for pfn 0x1c7c17 at process virtual address 0x2021d000 [ 80.150360][ T5756] Memory failure: 0x1c7c17: recovery action for dirty LRU page: Recovered [ 80.164891][ T5756] Injecting memory failure for pfn 0x11f83e at process virtual address 0x2021e000 [ 80.210930][ T5756] Memory failure: 0x11f83e: recovery action for dirty LRU page: Recovered [ 80.376803][ T5767] loop1: detected capacity change from 0 to 256 [ 80.379278][ T5418] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.529224][ T5418] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.582676][ T5418] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.760408][ T5786] loop3: detected capacity change from 0 to 2048 [ 80.779837][ T5418] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.879679][ T5793] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.933128][ T5795] loop4: detected capacity change from 0 to 256 [ 80.954461][ T5793] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 80.957731][ T5793] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 81.002421][ T5793] Remounting filesystem read-only [ 81.005677][ T5213] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 81.007620][ T5213] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 81.009400][ T5213] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.011624][ T5213] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.025077][ T5213] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.030290][ T5213] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 81.032033][ T5213] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 81.039722][ T5213] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.042058][ T5213] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.047072][ T5213] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.077915][ T5791] loop1: detected capacity change from 0 to 8192 [ 81.092538][ T5791] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 81.120701][ T5791] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 81.135639][ T5791] REISERFS (device loop1): using ordered data mode [ 81.137357][ T5791] reiserfs: using flush barriers [ 81.170110][ T5791] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.202678][ T5791] REISERFS (device loop1): checking transaction log (loop1) [ 81.239898][ T5791] REISERFS (device loop1): Using r5 hash to sort names [ 81.242088][ T5791] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 81.390449][ T5806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 81.501454][ T5810] loop4: detected capacity change from 0 to 256 [ 81.528574][ T5418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.671845][ T5735] loop2: detected capacity change from 0 to 131072 [ 81.855483][ T5735] F2FS-fs (loop2): Test dummy encryption mode enabled [ 81.859014][ T5735] F2FS-fs (loop2): invalid crc value [ 81.877296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.879885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.887415][ T5418] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.895908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.898615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.901182][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.903033][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.923350][ T5735] F2FS-fs (loop2): Found nat_bits in checkpoint [ 81.941937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.952709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.956838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.959399][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.961352][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.975903][ T5735] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 82.008457][ T5735] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 82.035787][ T55] device hsr_slave_0 left promiscuous mode [ 82.071675][ T55] device hsr_slave_1 left promiscuous mode [ 82.155633][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.157896][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.165595][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.167795][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.183529][ T55] device bridge_slave_1 left promiscuous mode [ 82.185958][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.235422][ T55] device bridge_slave_0 left promiscuous mode [ 82.237525][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.398426][ T55] device veth1_macvtap left promiscuous mode [ 82.400030][ T55] device veth0_macvtap left promiscuous mode [ 82.401706][ T55] device veth1_vlan left promiscuous mode [ 82.403230][ T55] device veth0_vlan left promiscuous mode [ 82.656113][ T5855] loop2: detected capacity change from 0 to 4096 [ 82.670598][ T5855] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 82.695280][ T5855] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 82.839712][ T5857] loop2: detected capacity change from 0 to 2048 [ 82.850196][ T5858] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.213951][ T5870] loop2: detected capacity change from 0 to 256 [ 83.499368][ T5877] loop2: detected capacity change from 0 to 2048 [ 83.523680][ T5878] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.552120][ T5878] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 83.555539][ T5878] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 83.565741][ T5878] Remounting filesystem read-only [ 83.568441][ T4301] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 83.570217][ T4301] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 83.572534][ T4301] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.575103][ T4301] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.577550][ T4301] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.579979][ T4301] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 83.581794][ T4301] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 83.584813][ T4301] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.587134][ T4301] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.589467][ T4301] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.675752][ T5882] loop2: detected capacity change from 0 to 4096 [ 83.696875][ T5882] NILFS (loop2): invalid segment: Checksum error in segment payload [ 83.699850][ T5882] NILFS (loop2): trying rollback from an earlier position [ 83.711953][ T5882] NILFS (loop2): recovery complete [ 83.719460][ T5883] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.338929][ T55] team0 (unregistering): Port device team_slave_1 removed [ 84.536761][ T55] team0 (unregistering): Port device team_slave_0 removed [ 84.724790][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.946530][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.357403][ T55] bond0 (unregistering): Released all slaves [ 87.581598][ T5830] tun0: tun_chr_ioctl cmd 1074025677 [ 87.583085][ T5830] tun0: linktype set to 65534 [ 87.589921][ T5847] netlink: 10 bytes leftover after parsing attributes in process `syz.1.490'. [ 87.595046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.597838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.637492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.641400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.674583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.689672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.717325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.734368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.754121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.761002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.774314][ T5418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.778583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.970903][ T5905] loop2: detected capacity change from 0 to 4096 [ 87.992879][ T5905] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match. Run ntfsfix or chkdsk. [ 88.000525][ T5905] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 88.012655][ T5905] ntfs: volume version 3.1. [ 88.077633][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.079914][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.129021][ T5418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.170145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.173114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.218620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.221443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.233110][ T5418] device veth0_vlan entered promiscuous mode [ 88.242709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.247027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.253053][ T5418] device veth1_vlan entered promiscuous mode [ 88.290208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.292858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.297982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.303002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.314461][ T5418] device veth0_macvtap entered promiscuous mode [ 88.319126][ T5418] device veth1_macvtap entered promiscuous mode [ 88.356853][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.359628][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.362292][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.367079][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.369643][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.372330][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.376510][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.379267][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.384669][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.388860][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.391923][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.395367][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.398247][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.400828][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.404478][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.407061][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.410026][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.427564][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.429780][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.432544][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.437365][ T5902] loop3: detected capacity change from 0 to 40427 [ 88.447071][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.454141][ T5902] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 88.456199][ T5902] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 88.465457][ T5902] F2FS-fs (loop3): invalid crc value [ 88.470362][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.477960][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.486384][ T5902] F2FS-fs (loop3): Found nat_bits in checkpoint [ 88.503931][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.523914][ T5902] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 88.526089][ T5902] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 88.554230][ T5902] F2FS-fs (loop3): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem [ 88.575355][ T5418] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.578681][ T5418] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.594836][ T5418] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.597194][ T5418] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.605119][ T5921] loop1: detected capacity change from 0 to 512 [ 88.642944][ T5921] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 88.731884][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.762006][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.766835][ T5915] loop2: detected capacity change from 0 to 32768 [ 88.781954][ T4823] EXT4-fs (loop1): unmounting filesystem. [ 88.798420][ T5915] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.517 (5915) [ 88.808691][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.833980][ T5915] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 88.836595][ T5915] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 88.838748][ T5915] BTRFS info (device loop2): enabling auto defrag [ 88.840329][ T5915] BTRFS info (device loop2): doing ref verification [ 88.842149][ T5915] BTRFS info (device loop2): force clearing of disk cache [ 88.848218][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.850726][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.860866][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.863728][ T5915] BTRFS info (device loop2): turning on sync discard [ 88.866837][ T5915] BTRFS info (device loop2): setting nodatacow, compression disabled [ 88.869022][ T5915] BTRFS info (device loop2): using free space tree [ 89.060356][ T5915] BTRFS info (device loop2): enabling ssd optimizations [ 89.063266][ T5915] BTRFS info (device loop2): rebuilding free space tree [ 89.237610][ T5936] loop3: detected capacity change from 0 to 32768 [ 89.255136][ T5936] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.518 (5936) [ 89.264060][ T5936] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 89.267702][ T5936] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 89.274414][ T5936] BTRFS info (device loop3): using free space tree [ 89.317613][ T4301] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 89.499778][ T5924] loop1: detected capacity change from 0 to 32768 [ 89.534210][ T5936] BTRFS info (device loop3): enabling ssd optimizations [ 89.584389][ T5924] XFS (loop1): Mounting V5 Filesystem [ 89.620832][ T5983] loop2: detected capacity change from 0 to 164 [ 89.653245][ T5983] rock: directory entry would overflow storage [ 89.662576][ T5983] rock: sig=0x4f50, size=4, remaining=3 [ 89.690024][ T5983] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 89.696367][ T5924] XFS (loop1): Ending clean mount [ 89.699990][ T5924] XFS (loop1): Quotacheck needed: Please wait. [ 89.729422][ T5924] XFS (loop1): Quotacheck: Done. [ 89.804490][ T4823] XFS (loop1): Unmounting Filesystem [ 89.833294][ T5213] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 90.004471][ T4307] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 90.379770][ T6019] loop2: detected capacity change from 0 to 16 [ 90.390770][ T6019] erofs: (device loop2): mounted with root inode @ nid 36. [ 90.397324][ T6021] loop3: detected capacity change from 0 to 164 [ 90.411805][ T6019] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 90.421240][ T6019] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 90.431154][ T6019] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 90.436260][ T6021] rock: directory entry would overflow storage [ 90.438124][ T6021] rock: sig=0x4f50, size=4, remaining=3 [ 90.442340][ T6019] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 90.450743][ T6021] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 90.463688][ T6019] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 90.468035][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 90.470452][ T6019] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 90.472733][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 90.500702][ T6019] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 90.503065][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 90.512427][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 90.525650][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 90.528748][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 90.538597][ T6019] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 90.541131][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 90.548781][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 90.551368][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 90.554432][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 90.562270][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 90.589835][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 90.594424][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 90.597092][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 90.602740][ T6019] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 90.602758][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 90.602808][ T6019] syz.2.540: attempt to access beyond end of device [ 90.602808][ T6019] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 90.602856][ T6019] syz.2.540: attempt to access beyond end of device [ 90.602856][ T6019] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 90.602906][ T6019] syz.2.540: attempt to access beyond end of device [ 90.602906][ T6019] loop2: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 90.602968][ T6019] syz.2.540: attempt to access beyond end of device [ 90.602968][ T6019] loop2: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 90.603003][ T6019] syz.2.540: attempt to access beyond end of device [ 90.603003][ T6019] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 90.603042][ T6019] syz.2.540: attempt to access beyond end of device [ 90.603042][ T6019] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 90.603242][ T6019] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[4055] [ 90.611596][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 90.611619][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 90.611659][ T6019] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 90.611673][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 90.611686][ T6019] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 90.611699][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 90.611740][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 90.611754][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 90.611779][ T6019] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 90.611792][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 90.611805][ T6019] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 90.611818][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 90.611842][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 90.611943][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 90.611960][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 90.611980][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 90.612068][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 90.612674][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 90.612703][ T6019] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 90.612715][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 90.612729][ T6019] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 90.612742][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 90.612767][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 90.612792][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 90.612834][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 90.612865][ T6019] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 90.612884][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 90.612898][ T6019] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 90.612911][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 90.612931][ T6019] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 90.616728][ T6019] syz.2.540: attempt to access beyond end of device [ 90.616728][ T6019] loop2: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 90.616889][ T6019] syz.2.540: attempt to access beyond end of device [ 90.616889][ T6019] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 90.616926][ T6019] syz.2.540: attempt to access beyond end of device [ 90.616926][ T6019] loop2: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 90.617245][ T6019] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[5297] [ 90.808258][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'. [ 90.875321][ T6041] nbd: socks must be embedded in a SOCK_ITEM attr [ 91.227277][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.560'. [ 91.351344][ T6070] loop3: detected capacity change from 0 to 1024 [ 91.590456][ T6047] loop2: detected capacity change from 0 to 32768 [ 91.662434][ T6047] XFS (loop2): Mounting V5 Filesystem [ 91.762283][ T6047] XFS (loop2): Ending clean mount [ 91.808985][ T6047] XFS (loop2): Quotacheck needed: Please wait. [ 91.881593][ T6047] XFS (loop2): Quotacheck: Done. [ 91.945654][ T6078] loop1: detected capacity change from 0 to 32768 [ 91.975389][ T6078] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 91.975389][ T6078] [ 91.989098][ T6078] ERROR: (device loop1): remounting filesystem as read-only [ 91.994051][ T6078] xtLookup: xtSearch returned -5 [ 91.997753][ T6078] add_index: get/read_metapage failed! [ 92.001458][ T6078] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 92.001458][ T6078] [ 92.011660][ T6078] xtLookup: xtSearch returned -5 [ 92.013781][ T6078] free_index: error reading directory table [ 92.017786][ T6078] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 92.017786][ T6078] [ 92.023797][ T6078] xtLookup: xtSearch returned -5 [ 92.028525][ T6078] free_index: error reading directory table [ 92.032572][ T6078] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 92.032572][ T6078] [ 92.041217][ T6078] xtLookup: xtSearch returned -5 [ 92.044743][ T6078] free_index: error reading directory table [ 92.048617][ T6078] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 92.048617][ T6078] [ 92.048731][ T6047] XFS (loop2): User initiated shutdown received. [ 92.056274][ T6078] xtLookup: xtSearch returned -5 [ 92.058838][ T6078] free_index: error reading directory table [ 92.071882][ T6047] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x124/0x15c (fs/xfs/xfs_fsops.c:481). Shutting down filesystem. [ 92.074081][ T6078] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 92.074081][ T6078] [ 92.079267][ T6078] xtLookup: xtSearch returned -5 [ 92.082814][ T6078] free_index: error reading directory table [ 92.096205][ T6047] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 92.102535][ T6097] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 92.102535][ T6097] [ 92.109676][ T6097] xtLookup: xtSearch returned -5 [ 92.111078][ T6097] add_index: get/read_metapage failed! [ 92.157272][ T4301] XFS (loop2): Unmounting Filesystem [ 92.171560][ T6080] loop4: detected capacity change from 0 to 40427 [ 92.174992][ T6080] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 92.176821][ T6080] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 92.227546][ T6080] F2FS-fs (loop4): Found nat_bits in checkpoint [ 92.291276][ T6080] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 92.293314][ T6080] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 92.362058][ T4294] syz-executor: attempt to access beyond end of device [ 92.362058][ T4294] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 92.755552][ T6124] block nbd0: shutting down sockets [ 92.771583][ T6117] loop2: detected capacity change from 0 to 4096 [ 92.797515][ T6109] loop3: detected capacity change from 0 to 32768 [ 92.809348][ T6117] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 92.812332][ T6117] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 92.858638][ T6117] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 92.862374][ T6117] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 92.888345][ T6109] JFS: block map error in dbBackSplit [ 92.890026][ T6109] ERROR: (device loop3): dbDiscardAG: -EIO [ 92.890026][ T6109] [ 92.894318][ T6109] ERROR: (device loop3): remounting filesystem as read-only [ 92.896300][ T6109] JFS: sb_issue_discard(00000000013ba87a, 328704, 1024, GFP_NOFS, 0) = -5 => failed! [ 92.897609][ T6117] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 92.898710][ T6109] blkno = 50400, nblocks = 400 [ 92.898725][ T6109] ERROR: (device loop3): dbFree: block to be freed is outside the map [ 92.898725][ T6109] [ 92.903822][ T6117] ntfs: volume version 3.1. [ 92.906806][ T6117] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 92.909864][ T6117] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 93.222740][ T6147] loop1: detected capacity change from 0 to 1024 [ 93.230881][ T6147] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.237459][ T6147] EXT4-fs: Ignoring removed oldalloc option [ 93.312566][ T6147] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 93.437104][ T4823] EXT4-fs (loop1): unmounting filesystem. [ 93.558319][ T27] audit: type=1326 audit(2000000048.610:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.607" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9491a8 code=0x0 [ 93.708778][ T6185] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.831542][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.894637][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.972173][ T6162] loop4: detected capacity change from 0 to 40427 [ 93.990747][ T6162] F2FS-fs (loop4): invalid crc value [ 94.000654][ T6162] F2FS-fs (loop4): Found nat_bits in checkpoint [ 94.030348][ T6162] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 94.033203][ T6182] loop1: detected capacity change from 0 to 32768 [ 94.037209][ T6182] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.610 (6182) [ 94.055184][ T6182] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.057976][ T6182] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 94.060356][ T6182] BTRFS info (device loop1): using free space tree [ 94.111843][ T6182] BTRFS info (device loop1): enabling ssd optimizations [ 94.196893][ T4823] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.605124][ T6220] netlink: 'syz.2.619': attribute type 1 has an invalid length. [ 94.607724][ T6220] netlink: 'syz.2.619': attribute type 2 has an invalid length. [ 94.896367][ T6245] loop1: detected capacity change from 0 to 512 [ 94.942781][ T6245] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.630: bg 0: block 5: invalid block bitmap [ 94.955665][ T6245] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 94.963073][ T6245] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.630: invalid indirect mapped block 3 (level 2) [ 94.968943][ T6245] EXT4-fs (loop1): 1 orphan inode deleted [ 94.970476][ T6245] EXT4-fs (loop1): 1 truncate cleaned up [ 94.971976][ T6245] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 95.007925][ T55] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.016707][ T4823] EXT4-fs (loop1): unmounting filesystem. [ 95.146674][ T55] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.240637][ T4296] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.245468][ T4296] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.249380][ T4296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.254107][ T4296] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.269801][ T4296] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.278957][ T4296] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.283403][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.300789][ T55] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.344500][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.350125][ T4307] Bluetooth: hci1: Dropping invalid advertising data [ 95.352450][ T4307] Bluetooth: hci1: unknown advertising packet type: 0x6b [ 95.352474][ T4307] Bluetooth: hci1: Malformed LE Event: 0x02 [ 95.485377][ T55] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.696730][ T6279] netlink: 'syz.3.643': attribute type 21 has an invalid length. [ 95.698869][ T6279] netlink: 'syz.3.643': attribute type 1 has an invalid length. [ 95.850912][ T6258] chnl_net:caif_netlink_parms(): no params data found [ 95.910613][ T6286] loop2: detected capacity change from 0 to 4096 [ 95.926632][ T6286] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 96.080570][ T6286] ntfs3: loop2: failed to convert "c46c" to iso8859-13 [ 96.176702][ T6258] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.178553][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.181073][ T6258] device bridge_slave_0 entered promiscuous mode [ 96.207545][ T6258] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.210691][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.227739][ T6258] device bridge_slave_1 entered promiscuous mode [ 96.268573][ T6303] IPVS: persistence engine module ip_vs_pe_€ not found [ 96.365263][ T6308] netlink: 844 bytes leftover after parsing attributes in process `syz.2.651'. [ 96.508332][ T6258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.512812][ T6258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.610134][ T6258] team0: Port device team_slave_0 added [ 96.620608][ T6258] team0: Port device team_slave_1 added [ 96.643886][ T4307] Bluetooth: hci3: command tx timeout [ 96.778659][ T6295] loop1: detected capacity change from 0 to 32768 [ 96.782366][ T6295] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 96.785146][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.787016][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.810367][ T6295] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 96.815639][ T6258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.842037][ T6295] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 96.875538][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 96.879215][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 96.881735][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.887285][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.910089][ T6258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.033881][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 154ms [ 97.036147][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 97.037607][ T6295] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 97.086115][ T6258] device hsr_slave_0 entered promiscuous mode [ 97.135121][ T6258] device hsr_slave_1 entered promiscuous mode [ 97.208355][ T6258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.210364][ T6258] Cannot create hsr debugfs directory [ 97.279358][ T6350] team0: No ports can be present during mode change [ 97.363888][ T4296] Bluetooth: hci0: command tx timeout [ 97.371536][ T6354] loop1: detected capacity change from 0 to 64 [ 97.405737][ T6354] overlayfs: upper fs needs to support d_type. [ 97.407839][ T6354] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 97.409821][ T6354] overlayfs: failed to set xattr on upper [ 97.416245][ T6354] overlayfs: ...falling back to index=off,metacopy=off. [ 97.419670][ T6354] overlayfs: conflicting lowerdir path [ 97.490040][ T1323] bio_check_eod: 4 callbacks suppressed [ 97.490055][ T1323] kworker/u4:4: attempt to access beyond end of device [ 97.490055][ T1323] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 97.511351][ T1323] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 97.808164][ T6378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.676'. [ 98.148577][ T6396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.684'. [ 98.151018][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.684'. [ 98.276746][ T27] audit: type=1326 audit(2000000053.330:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.3.686" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f9491a8 code=0x0 [ 98.431536][ T6393] loop2: detected capacity change from 0 to 32768 [ 98.732920][ T55] device hsr_slave_0 left promiscuous mode [ 98.758062][ T55] device hsr_slave_1 left promiscuous mode [ 98.828985][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.831054][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.833778][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.837403][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.839866][ T55] device bridge_slave_1 left promiscuous mode [ 98.842793][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.905015][ T55] device bridge_slave_0 left promiscuous mode [ 98.906979][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.074536][ T55] device veth1_macvtap left promiscuous mode [ 99.076199][ T55] device veth0_macvtap left promiscuous mode [ 99.078225][ T55] device veth1_vlan left promiscuous mode [ 99.079956][ T55] device veth0_vlan left promiscuous mode [ 99.443735][ T4296] Bluetooth: hci0: command tx timeout [ 101.032312][ T55] team0 (unregistering): Port device team_slave_1 removed [ 101.205813][ T55] team0 (unregistering): Port device team_slave_0 removed [ 101.405154][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.533732][ T4296] Bluetooth: hci0: command tx timeout [ 101.606741][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.603685][ T4307] Bluetooth: hci0: command tx timeout [ 104.107514][ T55] bond0 (unregistering): Released all slaves [ 104.830111][ T6258] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.865810][ T6258] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.907965][ T6462] loop2: detected capacity change from 0 to 8192 [ 104.916566][ T6462] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 104.919934][ T6462] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 104.922373][ T6462] REISERFS (device loop2): using ordered data mode [ 104.937651][ T6258] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.983353][ T6462] reiserfs: using flush barriers [ 105.014242][ T6258] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.019320][ T6462] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 105.076035][ T6462] REISERFS (device loop2): checking transaction log (loop2) [ 105.121220][ T6462] REISERFS (device loop2): Using r5 hash to sort names [ 105.123268][ T6462] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 105.143769][ T6462] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 105.219289][ T6489] loop3: detected capacity change from 0 to 1024 [ 105.293183][ T6489] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.296882][ T6258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.312932][ T6489] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.320305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.331866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.340633][ T6258] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.344262][ T6489] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.352247][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.359542][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.362247][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.364232][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.375945][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.381041][ T6489] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 105.384564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.387227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.389697][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.391712][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.395867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.422457][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.427468][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.451700][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.468622][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.484098][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.501794][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.515516][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.532598][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.547625][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.551504][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.562198][ T6258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.693515][ T5213] EXT4-fs (loop3): unmounting filesystem. [ 105.823869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.825978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.853780][ T6258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.862767][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 106.289563][ T6547] loop3: detected capacity change from 0 to 8 [ 106.347949][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.350883][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.382282][ T6547] SQUASHFS error: Failed to read block 0x4e8: -5 [ 106.409659][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.412574][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.415714][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.422912][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.430050][ T6258] device veth0_vlan entered promiscuous mode [ 106.460823][ T6258] device veth1_vlan entered promiscuous mode [ 106.528810][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.531892][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.534938][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.541218][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.559792][ T6258] device veth0_macvtap entered promiscuous mode [ 106.566521][ T6258] device veth1_macvtap entered promiscuous mode [ 106.600630][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.608212][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.613442][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.633833][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.637294][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.640321][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.642908][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.650355][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.661726][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.677919][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.683016][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.686062][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.700597][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.703504][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.711100][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.714342][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.720277][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.723106][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.744766][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.747562][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.749513][ T6529] loop2: detected capacity change from 0 to 32768 [ 106.789452][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.796846][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.799559][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.808916][ T6258] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.811202][ T6258] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.813496][ T6258] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.840288][ T6258] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.862627][ T6570] loop1: detected capacity change from 0 to 8 [ 106.943013][ T6570] SQUASHFS error: Unable to read directory block [629:2b] [ 106.982425][ T5392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.990926][ T5392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.007525][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.036164][ T5392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.038835][ T5392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.046824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 107.573031][ T6615] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 107.790337][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'. [ 108.021384][ T6637] sctp: [Deprecated]: syz.2.759 (pid 6637) Use of int in max_burst socket option deprecated. [ 108.021384][ T6637] Use struct sctp_assoc_value instead [ 108.269914][ T6654] loop4: detected capacity change from 0 to 47 [ 108.371915][ T6659] minix_free_block (loop4:20): bit already cleared [ 108.377152][ T6659] minix_free_block (loop4:21): bit already cleared [ 108.381302][ T6659] minix_free_block (loop4:19): bit already cleared [ 108.390284][ T6658] loop3: detected capacity change from 0 to 764 [ 108.615712][ T6673] input: syz0 as /devices/virtual/input/input5 [ 108.694273][ T6679] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 108.697315][ T6681] loop2: detected capacity change from 0 to 8 [ 108.751799][ T6681] SQUASHFS error: Unable to read directory block [629:2b] [ 109.134678][ T6449] udevd[6449]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 109.470294][ T6725] loop3: detected capacity change from 0 to 47 [ 109.531627][ T6725] minix_free_block (loop3:20): bit already cleared [ 109.535994][ T6725] minix_free_block (loop3:21): bit already cleared [ 109.540050][ T6725] minix_free_block (loop3:19): bit already cleared [ 109.679490][ T6703] loop4: detected capacity change from 0 to 32768 [ 109.762345][ T6703] XFS (loop4): Mounting V5 Filesystem [ 109.840549][ T6703] XFS (loop4): Ending clean mount [ 109.843395][ T6703] XFS (loop4): Quotacheck needed: Please wait. [ 109.886573][ T6703] XFS (loop4): Quotacheck: Done. [ 109.967163][ T6258] XFS (loop4): Unmounting Filesystem [ 110.792905][ T6781] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 110.971024][ T6760] loop3: detected capacity change from 0 to 32768 [ 110.985512][ T6760] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.811 (6760) [ 111.010005][ T6760] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.012830][ T6760] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 111.020941][ T6760] BTRFS info (device loop3): using free space tree [ 111.302705][ T6760] BTRFS info (device loop3): enabling ssd optimizations [ 111.450373][ T5213] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.609859][ T6813] loop4: detected capacity change from 0 to 32768 [ 111.661965][ T6813] MetaData crosses page boundary!! [ 111.663390][ T6813] lblock = 631500, size = 28672 [ 111.671371][ T6813] CPU: 1 PID: 6813 Comm: syz.4.836 Not tainted 6.1.107-syzkaller #0 [ 111.673495][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 111.676223][ T6813] Call trace: [ 111.677120][ T6813] dump_backtrace+0x1c8/0x1f4 [ 111.678324][ T6813] show_stack+0x2c/0x3c [ 111.679352][ T6813] dump_stack_lvl+0x108/0x170 [ 111.680563][ T6813] dump_stack+0x1c/0x58 [ 111.681624][ T6813] __get_metapage+0xb48/0x1050 [ 111.682923][ T6813] dtReadFirst+0xc8/0x9bc [ 111.684093][ T6813] jfs_readdir+0x568/0x37bc [ 111.685239][ T6813] iterate_dir+0x1f4/0x4ec [ 111.686406][ T6813] __arm64_sys_getdents64+0x1c4/0x4a0 [ 111.687844][ T6813] invoke_syscall+0x98/0x2c0 [ 111.689097][ T6813] el0_svc_common+0x138/0x258 [ 111.690361][ T6813] do_el0_svc+0x64/0x218 [ 111.691515][ T6813] el0_svc+0x58/0x168 [ 111.692595][ T6813] el0t_64_sync_handler+0x84/0xf0 [ 111.693902][ T6813] el0t_64_sync+0x18c/0x190 [ 111.760362][ T6813] bread failed! [ 112.011640][ T6862] binder: 6862:6859 cannot find target node [ 112.013360][ T6862] binder: 6859:6862 transaction call to 0:0 failed 1/29189/-22, size 0-0 line 3054 [ 112.305817][ T6872] usb usb8: usbfs: process 6872 (syz.1.857) did not claim interface 0 before use [ 112.393495][ T6880] netlink: 32 bytes leftover after parsing attributes in process `syz.0.861'. [ 112.630662][ T6889] loop4: detected capacity change from 0 to 1024 [ 112.681205][ T6889] hfsplus: catalog name length corrupted [ 112.712086][ T6889] Bluetooth: MGMT ver 1.22 [ 112.842651][ T6901] loop4: detected capacity change from 0 to 512 [ 112.884860][ T6901] EXT4-fs error (device loop4): __ext4_fill_super:5399: inode #2: comm syz.4.871: casefold flag without casefold feature [ 112.894356][ T6901] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 112.906864][ T6901] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 113.049271][ T6258] EXT4-fs (loop4): unmounting filesystem. [ 113.736803][ T6920] loop3: detected capacity change from 0 to 32768 [ 113.780875][ T6920] XFS (loop3): Mounting V5 Filesystem [ 113.876655][ T6920] XFS (loop3): Ending clean mount [ 113.879585][ T6920] XFS (loop3): Quotacheck needed: Please wait. [ 113.921278][ T6920] XFS (loop3): Quotacheck: Done. [ 114.069475][ T6920] XFS (loop3): User initiated shutdown received. [ 114.071275][ T6920] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x124/0x15c (fs/xfs/xfs_fsops.c:481). Shutting down filesystem. [ 114.080355][ T6920] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 114.120804][ T5213] XFS (loop3): Unmounting Filesystem [ 115.026536][ T7012] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 115.386065][ T7018] netpci0: tun_chr_ioctl cmd 1074025677 [ 115.390170][ T7018] netpci0: linktype set to 804 [ 115.494822][ T7010] loop4: detected capacity change from 0 to 32768 [ 115.623409][ T7010] XFS (loop4): Mounting V5 Filesystem [ 115.730221][ T7010] XFS (loop4): Ending clean mount [ 115.733178][ T7010] XFS (loop4): Quotacheck needed: Please wait. [ 115.796547][ T7010] XFS (loop4): Quotacheck: Done. [ 115.869647][ T7016] loop3: detected capacity change from 0 to 32768 [ 115.872290][ T7016] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.919 (7016) [ 115.884849][ T7016] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.892235][ T7016] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 115.899347][ T7016] BTRFS info (device loop3): using free space tree [ 115.968537][ T7016] BTRFS info (device loop3): enabling ssd optimizations [ 115.977972][ T7010] XFS (loop4): User initiated shutdown received. [ 115.979835][ T7010] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x124/0x15c (fs/xfs/xfs_fsops.c:481). Shutting down filesystem. [ 115.993747][ T7010] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 116.047656][ T5213] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.063043][ T6258] XFS (loop4): Unmounting Filesystem [ 117.487459][ T7105] netlink: 'syz.4.950': attribute type 1 has an invalid length. [ 117.671000][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.954'. [ 118.042010][ T7134] netlink: 'syz.4.965': attribute type 1 has an invalid length. [ 118.046723][ T7134] netlink: 'syz.4.965': attribute type 2 has an invalid length. [ 118.523775][ T7138] loop4: detected capacity change from 0 to 32768 [ 118.566913][ T7138] XFS (loop4): Mounting V5 Filesystem [ 118.612715][ T7138] XFS (loop4): Ending clean mount [ 118.736694][ T6258] XFS (loop4): Unmounting Filesystem [ 120.345395][ T7249] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 121.013773][ T7207] loop4: detected capacity change from 0 to 131072 [ 121.032420][ T7207] F2FS-fs (loop4): Test dummy encryption mode enabled [ 121.042135][ T7207] F2FS-fs (loop4): invalid crc value [ 121.078676][ T7207] F2FS-fs (loop4): Found nat_bits in checkpoint [ 121.140378][ T7207] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 121.578511][ T7304] Injecting memory failure for pfn 0x134fc9 at process virtual address 0x20000000 [ 121.590038][ T7304] Memory failure: 0x134fc9: recovery action for dirty LRU page: Recovered [ 121.592359][ T7304] Injecting memory failure for pfn 0x1ae341 at process virtual address 0x20001000 [ 121.609035][ T7304] Memory failure: 0x1ae341: recovery action for reserved kernel page: Ignored [ 121.950060][ T7326] input: syz0 as /devices/virtual/input/input6 [ 122.163938][ T7334] sctp: [Deprecated]: syz.4.1064 (pid 7334) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.163938][ T7334] Use struct sctp_sack_info instead [ 122.231286][ T27] audit: type=1326 audit(2000000077.280:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.3.1057" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f9491a8 code=0x0 [ 122.643876][ T7359] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1067'. [ 122.972818][ T7378] loop4: detected capacity change from 0 to 512 [ 123.000558][ T7378] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.034843][ T7378] EXT4-fs (loop4): 1 truncate cleaned up [ 123.036409][ T7378] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 123.140607][ T24] kernel write not supported for file /input/event0 (pid: 24 comm: kworker/1:1) [ 123.155688][ T6258] EXT4-fs (loop4): unmounting filesystem. [ 123.421732][ T7401] loop4: detected capacity change from 0 to 1024 [ 123.438032][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1088'. [ 124.105207][ T7417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.134020][ T7417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.339324][ T7453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1112'. [ 124.501563][ T7469] netlink: 'syz.3.1121': attribute type 5 has an invalid length. [ 124.504542][ T7469] netlink: 'syz.3.1121': attribute type 4 has an invalid length. [ 124.506466][ T7469] netlink: 'syz.3.1121': attribute type 5 has an invalid length. [ 124.508847][ T7469] netlink: 'syz.3.1121': attribute type 2 has an invalid length. [ 124.510879][ T7469] netlink: 'syz.3.1121': attribute type 1 has an invalid length. [ 124.523234][ T7469] netlink: 'syz.3.1121': attribute type 1 has an invalid length. [ 124.525909][ T7469] netlink: 'syz.3.1121': attribute type 12 has an invalid length. [ 124.720010][ T7479] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1126'. [ 124.722731][ T7479] tipc: Started in network mode [ 124.733075][ T7479] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 124.741578][ T7479] tipc: Enabled bearer , priority 0 [ 125.186016][ T7483] loop4: detected capacity change from 0 to 32768 [ 125.209188][ T7483] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1127 (7483) [ 125.248611][ T7483] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.251707][ T7483] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 125.261849][ T7483] BTRFS info (device loop4): using free space tree [ 125.451947][ T7483] BTRFS info (device loop4): enabling ssd optimizations [ 125.602337][ T7483] BTRFS warning (device loop4: state M): 'nologreplay' is deprecated, use 'rescue=nologreplay' instead [ 125.624952][ T7529] netlink: 'syz.0.1142': attribute type 1 has an invalid length. [ 125.627143][ T7529] netlink: 'syz.0.1142': attribute type 2 has an invalid length. [ 125.629252][ T7529] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.1142'. [ 125.643832][ T7483] BTRFS info (device loop4: state M): disabling log replay at mount time [ 125.646120][ T7483] BTRFS error (device loop4: state M): unrecognized mount option 'order=strict' [ 125.711312][ T6258] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.875377][ T4709] tipc: Node number set to 10922666 [ 126.113386][ T7549] netpci0: tun_chr_ioctl cmd 1074025677 [ 126.123087][ T7549] netpci0: linktype set to 804 [ 126.692610][ T7587] loop4: detected capacity change from 0 to 256 [ 126.736069][ T7587] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 127.090320][ T7617] loop4: detected capacity change from 0 to 1024 [ 127.132123][ T7617] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 127.252732][ T6258] EXT4-fs (loop4): unmounting filesystem. [ 127.329095][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 127.666091][ T7662] Injecting memory failure for pfn 0x137169 at process virtual address 0x20000000 [ 127.687561][ T7662] Memory failure: 0x137169: recovery action for dirty LRU page: Recovered [ 127.690192][ T7662] Injecting memory failure for pfn 0x1ae341 at process virtual address 0x20001000 [ 127.692617][ T7662] Memory failure: 0x1ae341: already hardware poisoned [ 128.042905][ T7680] netlink: 'syz.3.1214': attribute type 11 has an invalid length. [ 128.135495][ T7663] loop4: detected capacity change from 0 to 32768 [ 128.142867][ T7663] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1203 (7663) [ 128.170288][ T7663] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.173237][ T7663] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 128.180494][ T7663] BTRFS info (device loop4): using free space tree [ 128.347324][ T7663] BTRFS info (device loop4): enabling ssd optimizations [ 128.511717][ T6258] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.932502][ T7731] loop4: detected capacity change from 0 to 1024 [ 128.979569][ T7731] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 128.982154][ T7731] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038 (0x7fffffff) [ 129.277568][ T6258] EXT4-fs (loop4): unmounting filesystem. [ 129.386262][ T7757] loop4: detected capacity change from 0 to 512 [ 129.400590][ T7757] EXT2-fs (loop4): (no)user_xattr optionsnot supported [ 129.415350][ T7757] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 129.425987][ T7757] ext2 filesystem being mounted at /88/bus supports timestamps until 2038 (0x7fffffff) [ 129.663079][ T7773] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 130.088104][ T7811] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1265'. [ 130.097667][ T7811] tipc: Started in network mode [ 130.099123][ T7811] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 130.102541][ T7811] tipc: Enabled bearer , priority 0 [ 130.293314][ T7825] rtc-efi rtc-efi.0: write status is 3 [ 130.312087][ T7827] netlink: 'syz.1.1273': attribute type 5 has an invalid length. [ 130.324837][ T7827] netlink: 'syz.1.1273': attribute type 4 has an invalid length. [ 130.326914][ T7827] netlink: 'syz.1.1273': attribute type 5 has an invalid length. [ 130.328890][ T7827] netlink: 'syz.1.1273': attribute type 2 has an invalid length. [ 130.330928][ T7827] netlink: 'syz.1.1273': attribute type 1 has an invalid length. [ 130.333129][ T7827] netlink: 'syz.1.1273': attribute type 1 has an invalid length. [ 130.363697][ T7827] netlink: 'syz.1.1273': attribute type 12 has an invalid length. [ 130.777005][ T7823] loop4: detected capacity change from 0 to 32768 [ 130.788022][ T7823] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1271 (7823) [ 130.804459][ T7823] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 130.817079][ T7823] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 130.819909][ T7823] BTRFS error (device loop4): superblock checksum mismatch [ 130.827710][ T7823] BTRFS error (device loop4): open_ctree failed [ 130.849352][ T6449] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by udevd (6449) [ 130.999676][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 131.052988][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.054967][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.106288][ T24] tipc: Node number set to 10922666 [ 131.439633][ T7872] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1297'. [ 131.632108][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1300'. [ 131.656764][ T7881] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1302'. [ 132.005303][ T7900] loop4: detected capacity change from 0 to 256 [ 132.021911][ T7900] exfat: Bad value for 'fmask' [ 132.167148][ T7913] device wg1 entered promiscuous mode [ 132.436025][ T7929] loop4: detected capacity change from 0 to 512 [ 132.448744][ T7929] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.509610][ T7929] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 132.512093][ T7929] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038 (0x7fffffff) [ 132.591663][ T6258] EXT4-fs (loop4): unmounting filesystem. [ 132.770421][ T7946] mkiss: ax0: crc mode is auto. [ 132.875800][ T7946] mkiss: ax0: crc mode is auto. [ 133.044407][ T7959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.075270][ T7959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.167205][ T7948] loop4: detected capacity change from 0 to 32768 [ 133.169895][ T7948] XFS: ikeep mount option is deprecated. [ 133.199593][ T7965] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1341'. [ 133.226932][ T7948] XFS (loop4): Mounting V5 Filesystem [ 133.277671][ T7948] XFS (loop4): Ending clean mount [ 133.280438][ T7948] XFS (loop4): Quotacheck needed: Please wait. [ 133.349004][ T7948] XFS (loop4): Quotacheck: Done. [ 133.406404][ T7985] tun1: tun_chr_ioctl cmd 2148553947 [ 133.441431][ T6258] XFS (loop4): Unmounting Filesystem [ 134.358104][ T8027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1366'. [ 134.546913][ T8037] sp0: Synchronizing with TNC [ 134.574788][ T8036] [U] è [ 134.794917][ T8056] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1380'. [ 134.903132][ T8062] IPVS: sed: SCTP 172.20.20.187:0 - no destination available [ 134.991217][ T8031] loop4: detected capacity change from 0 to 40427 [ 135.017696][ T8031] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 135.019781][ T8031] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 135.048239][ T8031] F2FS-fs (loop4): Found nat_bits in checkpoint [ 135.068222][ T8031] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 135.092809][ T8031] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 135.096360][ T8031] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 135.668135][ T8097] block device autoloading is deprecated and will be removed. [ 135.671944][ T8097] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.675318][ T8097] FAT-fs (loop3): unable to read boot sector [ 135.994542][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1406'. [ 136.079244][ T8103] loop3: detected capacity change from 0 to 32768 [ 136.092409][ T8103] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1399 (8103) [ 136.116803][ T8103] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.119831][ T8103] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 136.122399][ T8103] BTRFS info (device loop3): setting nodatacow, compression disabled [ 136.131158][ T8103] BTRFS info (device loop3): enabling auto defrag [ 136.135505][ T8103] BTRFS info (device loop3): max_inline at 0 [ 136.140645][ T8103] BTRFS info (device loop3): using free space tree [ 136.394077][ T8147] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 136.445333][ T5213] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.509705][ T8151] loop4: detected capacity change from 0 to 24 [ 136.723892][ T4296] Bluetooth: hci0: command tx timeout [ 136.943042][ T8177] No such timeout policy "syz0" [ 137.055036][ T8181] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.058429][ T8181] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.091193][ T8181] bridge0: port 3(erspan0) entered blocking state [ 137.092987][ T8181] bridge0: port 3(erspan0) entered disabled state [ 137.100753][ T8181] device erspan0 entered promiscuous mode [ 137.734874][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.737019][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.740143][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.750078][ T8204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.756857][ T8206] loop4: detected capacity change from 0 to 128 [ 137.786464][ T8206] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 137.788949][ T8206] sysv_free_block: trying to free block not in datazone [ 137.801774][ T8206] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 137.948815][ T8208] loop4: detected capacity change from 0 to 24 [ 137.962474][ T8208] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 137.978155][ T8208] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 138.101831][ T8214] loop4: detected capacity change from 0 to 256 [ 138.144988][ T8214] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 138.292143][ T8224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1450'. [ 138.295513][ T8224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1450'. [ 138.298175][ T8222] loop4: detected capacity change from 0 to 1024 [ 138.361078][ T8222] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 138.407569][ T8222] Process accounting resumed [ 138.453209][ T6258] EXT4-fs (loop4): unmounting filesystem. [ 138.597691][ T8241] Bluetooth: MGMT ver 1.22 [ 139.310793][ T8266] loop4: detected capacity change from 0 to 128 [ 139.350856][ T8266] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 139.353378][ T8266] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038 (0x7fffffff) [ 139.384069][ T8266] EXT4-fs warning (device loop4): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 139.496686][ T6258] EXT4-fs (loop4): unmounting filesystem. [ 139.661001][ T8271] tap0: tun_chr_ioctl cmd 1074025680 [ 140.000854][ T8284] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 140.084388][ T8269] loop3: detected capacity change from 0 to 40427 [ 140.098879][ T8269] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 140.100883][ T8269] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 140.166471][ T8269] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.265806][ T8269] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 140.268028][ T8269] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 140.347899][ T8301] Process accounting resumed [ 140.769021][ T8317] netlink: 'syz.4.1492': attribute type 5 has an invalid length. [ 141.277356][ T8341] loop3: detected capacity change from 0 to 512 [ 141.302970][ T8341] EXT4-fs (loop3): 1 truncate cleaned up [ 141.310200][ T8341] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 141.340112][ T8341] EXT4-fs warning (device loop3): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 141.343980][ T8341] EXT4-fs warning (device loop3): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 141.361533][ T5213] EXT4-fs (loop3): unmounting filesystem. [ 141.379005][ T8337] netem: unknown loss type 0 [ 141.380579][ T8337] netem: change failed [ 141.658056][ T8360] netlink: 'syz.2.1509': attribute type 28 has an invalid length. [ 141.949391][ T8373] loop4: detected capacity change from 0 to 4096 [ 141.965166][ T8373] ntfs: (device loop4): ntfs_read_inode_mount(): Incorrect mft record size 2048 in superblock, should be 4096. [ 141.968406][ T8373] ntfs: (device loop4): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 142.130727][ T8383] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 142.539541][ T8407] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 142.692341][ T8415] loop3: detected capacity change from 0 to 2048 [ 142.742806][ T8419] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.842202][ T8419] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 142.845730][ T8419] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 142.861599][ T8419] Remounting filesystem read-only [ 142.862957][ T11] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 142.865082][ T11] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 142.866916][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 142.869125][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 142.871355][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 142.899212][ T11] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 142.901083][ T11] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 142.902882][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 142.918792][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 142.921104][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 142.923830][ T11] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 142.928926][ T11] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 142.930877][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 142.933184][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 142.979298][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 142.981679][ T11] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 142.983920][ T11] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 142.990532][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 142.993187][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.002096][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.014307][ T5213] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 143.016931][ T5213] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 143.018713][ T5213] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 143.020203][ T8428] netlink: 'syz.4.1542': attribute type 29 has an invalid length. [ 143.020788][ T5213] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 143.023084][ T8428] netlink: 'syz.4.1542': attribute type 29 has an invalid length. [ 143.034670][ T5213] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 143.036547][ T5213] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 143.045364][ T5213] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 143.047113][ T5213] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 143.063670][ T5213] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 143.075196][ T5213] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 143.077181][ T5213] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.077391][ T8428] netlink: 'syz.4.1542': attribute type 29 has an invalid length. [ 143.079470][ T5213] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 143.083515][ T5213] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.092550][ T5213] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.097499][ T5213] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 143.099424][ T5213] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.107342][ T8428] netlink: 'syz.4.1542': attribute type 29 has an invalid length. [ 143.259615][ T8440] futex_wake_op: syz.2.1547 tries to shift op by -1; fix this program [ 143.865429][ T8437] loop3: detected capacity change from 0 to 131072 [ 143.969918][ T8437] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.997306][ T8437] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 144.311318][ T8472] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1561'. [ 144.522858][ T8476] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1563'. [ 144.741296][ T4307] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 144.746124][ T4307] Bluetooth: hci0: Injecting HCI hardware error event [ 144.749950][ T4307] Bluetooth: hci0: hardware error 0x00 [ 145.060083][ T8488] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 145.225457][ T8496] loop3: detected capacity change from 0 to 1024 [ 145.299214][ T8467] syz.4.1558 (8467): drop_caches: 2 [ 145.347690][ T8496] hfsplus: catalog searching failed [ 145.584108][ T8504] loop3: detected capacity change from 0 to 4096 [ 145.587545][ T8502] netlink: 'syz.4.1575': attribute type 2 has an invalid length. [ 145.649349][ T8504] NILFS (loop3): invalid segment: Checksum error in segment payload [ 145.651452][ T8504] NILFS (loop3): trying rollback from an earlier position [ 145.667681][ T8504] NILFS (loop3): recovery complete [ 145.693522][ T8512] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.031125][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1588'. [ 146.191964][ T8537] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1591'. [ 146.771246][ T8575] nbd: must specify a device to reconfigure [ 146.946271][ T4310] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.950126][ T4310] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.952943][ T4310] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.956553][ T4310] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.960685][ T4310] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.964201][ T4310] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.125059][ T4307] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 147.429658][ T8584] chnl_net:caif_netlink_parms(): no params data found [ 147.614774][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.616807][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.619420][ T8584] device bridge_slave_0 entered promiscuous mode [ 147.623208][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.657606][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.660287][ T8584] device bridge_slave_1 entered promiscuous mode [ 147.696199][ T8584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.711746][ T8584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.737229][ T8584] team0: Port device team_slave_0 added [ 147.740497][ T8584] team0: Port device team_slave_1 added [ 147.781930][ T8619] loop4: detected capacity change from 0 to 2048 [ 147.835915][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.837781][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.875343][ T8628] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.893701][ T8584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.914713][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.916247][ T8631] loop3: detected capacity change from 0 to 2048 [ 147.916656][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.960561][ T8634] NILFS error (device loop4): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 147.974240][ T8584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.001107][ T8634] Remounting filesystem read-only [ 148.009021][ T8631] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 148.011572][ T8631] ext4 filesystem being mounted at /263/bus supports timestamps until 2038 (0x7fffffff) [ 148.061548][ T5213] EXT4-fs (loop3): unmounting filesystem. [ 148.135114][ T6258] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 148.137705][ T6258] NILFS (loop4): discard dirty page: offset=0, ino=18 [ 148.139488][ T6258] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 148.141676][ T6258] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 148.153121][ T6258] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 148.155765][ T6258] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 148.158265][ T6258] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 148.159945][ T6258] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 148.162425][ T6258] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 148.165658][ T6258] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 148.168076][ T6258] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 148.170534][ T6258] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 148.172265][ T6258] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 148.181582][ T27] audit: type=1326 audit(2000000103.230:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9491a8 code=0x7ffc0000 [ 148.193151][ T27] audit: type=1326 audit(2000000103.230:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9491a8 code=0x7ffc0000 [ 148.201525][ T8584] device hsr_slave_0 entered promiscuous mode [ 148.203296][ T6258] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 148.206073][ T6258] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 148.208374][ T6258] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 148.210548][ T6258] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 148.220534][ T27] audit: type=1326 audit(2000000103.260:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8e9491a8 code=0x7ffc0000 [ 148.227020][ T27] audit: type=1326 audit(2000000103.260:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9491a8 code=0x7ffc0000 [ 148.229119][ T6258] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 148.232987][ T27] audit: type=1326 audit(2000000103.260:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9491a8 code=0x7ffc0000 [ 148.241128][ T27] audit: type=1326 audit(2000000103.260:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8e9491a8 code=0x7ffc0000 [ 148.247580][ T8584] device hsr_slave_1 entered promiscuous mode [ 148.248328][ T6258] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 148.250229][ T27] audit: type=1326 audit(2000000103.260:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9491a8 code=0x7ffc0000 [ 148.252016][ T6258] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 148.259989][ T27] audit: type=1326 audit(2000000103.270:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9491a8 code=0x7ffc0000 [ 148.263324][ T6258] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 148.275474][ T27] audit: type=1326 audit(2000000103.270:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8e9491a8 code=0x7ffc0000 [ 148.277129][ T6258] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 148.284065][ T6258] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 148.286145][ T6258] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 148.288143][ T8584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.288231][ T6258] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 148.290286][ T8584] Cannot create hsr debugfs directory [ 148.292104][ T6258] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 148.296296][ T6258] NILFS (loop4): discard dirty page: offset=65536, ino=3 [ 148.298139][ T8650] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1623'. [ 148.298445][ T6258] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 148.310467][ T6258] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 148.313161][ T6258] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 148.317933][ T6258] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 148.428800][ T27] audit: type=1326 audit(2000000103.480:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9491a8 code=0x7ffc0000 [ 148.534716][ T8658] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 148.668335][ T8584] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.714488][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1637'. [ 148.765351][ T8674] loop4: detected capacity change from 0 to 1024 [ 148.805515][ T8584] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.943607][ T8686] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 148.986924][ T8584] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.051819][ T4307] Bluetooth: hci4: command tx timeout [ 149.088836][ T8694] loop3: detected capacity change from 0 to 2048 [ 149.097934][ T8696] netlink: 'syz.1.1649': attribute type 29 has an invalid length. [ 149.132303][ T8694] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 149.158407][ T6449] udevd[6449]: incorrect nilfs2 checksum on /dev/loop3 [ 149.163123][ T8702] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.197714][ T8584] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.213399][ T8696] netlink: 'syz.1.1649': attribute type 29 has an invalid length. [ 149.216476][ T8701] netlink: 'syz.1.1649': attribute type 29 has an invalid length. [ 149.219455][ T8703] netlink: 'syz.1.1649': attribute type 29 has an invalid length. [ 149.459419][ T8719] loop4: detected capacity change from 0 to 256 [ 149.497913][ T8584] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.535611][ T8584] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 150.256348][ T8584] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 150.295364][ T8584] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 150.533041][ T8584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.548306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.555837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.571565][ T8584] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.587643][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.590696][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.593237][ T5499] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.595323][ T5499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.603447][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.606195][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.614512][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.629825][ T5499] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.631779][ T5499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.651042][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.656980][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.665660][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.676539][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.696062][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.701300][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.709591][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.716549][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.724739][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.733046][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.742540][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.747803][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.750595][ T8765] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1683'. [ 150.799125][ T8770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1684'. [ 151.006891][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.009208][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.054855][ T8584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.090452][ T4709] kernel read not supported for file /dsp (pid: 4709 comm: kworker/1:9) [ 151.111502][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.116913][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.123767][ T4307] Bluetooth: hci4: command tx timeout [ 151.152462][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.157449][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.165305][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.175287][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.186769][ T8584] device veth0_vlan entered promiscuous mode [ 151.196525][ T8584] device veth1_vlan entered promiscuous mode [ 151.211437][ T8798] netlink: 'syz.3.1695': attribute type 12 has an invalid length. [ 151.224551][ T8798] netlink: 'syz.3.1695': attribute type 2 has an invalid length. [ 151.226688][ T8798] netlink: 'syz.3.1695': attribute type 7 has an invalid length. [ 151.228920][ T8798] netlink: 'syz.3.1695': attribute type 5 has an invalid length. [ 151.230939][ T8798] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1695'. [ 151.260721][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.263359][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.267353][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.276218][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.290507][ T8584] device veth0_macvtap entered promiscuous mode [ 151.296033][ T8584] device veth1_macvtap entered promiscuous mode [ 151.330831][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.340963][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.345573][ T8805] loop3: detected capacity change from 0 to 512 [ 151.349287][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.352217][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.359949][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.363398][ T8805] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 151.365927][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.368871][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.371856][ T8805] UDF-fs: Scanning with blocksize 512 failed [ 151.373497][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.384661][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.387680][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.390751][ T8805] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 151.394063][ T8805] UDF-fs: Scanning with blocksize 1024 failed [ 151.398667][ T8584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.401240][ T8805] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 151.409039][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.409992][ T8805] UDF-fs: Scanning with blocksize 2048 failed [ 151.411804][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.418813][ T8805] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 151.425355][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.429444][ T8805] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.438497][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.446835][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.449757][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.452391][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.471489][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.489420][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.498801][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.507384][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.515191][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.522373][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.529208][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.535158][ T8584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.541582][ T8584] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.544246][ T8584] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.570907][ T8584] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.578916][ T8584] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.598479][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.601372][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.729473][ T5499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.731859][ T5499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.751355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.765181][ T8823] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 151.773078][ T5499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.781247][ T5499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.799971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.815856][ T8826] sctp: [Deprecated]: syz.3.1708 (pid 8826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.815856][ T8826] Use struct sctp_sack_info instead [ 151.936152][ T8834] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1712'. [ 152.783424][ T8871] netlink: 'syz.3.1727': attribute type 1 has an invalid length. [ 152.786315][ T8871] netlink: 'syz.3.1727': attribute type 2 has an invalid length. [ 152.797638][ T8871] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.1727'. [ 152.995069][ T8889] netlink: 'syz.0.1743': attribute type 11 has an invalid length. [ 153.180775][ T11] tipc: Disabling bearer [ 153.195591][ T11] tipc: Left network mode [ 153.204456][ T4310] Bluetooth: hci4: command tx timeout [ 153.801149][ T8927] loop4: detected capacity change from 0 to 1024 [ 153.971672][ T1323] hfsplus: b-tree write err: -5, ino 4 [ 154.190997][ T8954] TCP: tcp_parse_options: Illegal window scaling value 104 > 14 received [ 154.556369][ T8982] loop3: detected capacity change from 0 to 512 [ 154.593456][ T8982] EXT4-fs (loop3): 1 truncate cleaned up [ 154.595606][ T8982] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 154.658868][ T5213] EXT4-fs (loop3): unmounting filesystem. [ 155.306391][ T9031] loop3: detected capacity change from 0 to 64 [ 155.309951][ T9031] hfs: unable to parse mount options [ 155.413320][ T6449] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.676290][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1809'. [ 155.694631][ T9050] loop3: detected capacity change from 0 to 1024 [ 156.088569][ T11] device hsr_slave_0 left promiscuous mode [ 156.155093][ T11] device hsr_slave_1 left promiscuous mode [ 156.233852][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.236089][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.238408][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.240527][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.253279][ T11] device bridge_slave_1 left promiscuous mode [ 156.256084][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.300138][ T11] device bridge_slave_0 left promiscuous mode [ 156.301869][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.445218][ T11] device veth1_macvtap left promiscuous mode [ 156.447042][ T11] device veth0_macvtap left promiscuous mode [ 156.448668][ T11] device veth1_vlan left promiscuous mode [ 156.450265][ T11] device veth0_vlan left promiscuous mode [ 156.471123][ T27] audit: type=1326 audit(2000000111.520:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd1491a8 code=0x7ffc0000 [ 156.500566][ T27] audit: type=1326 audit(2000000111.550:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbd1491a8 code=0x7ffc0000 [ 156.517978][ T27] audit: type=1326 audit(2000000111.560:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd1491a8 code=0x7ffc0000 [ 156.545323][ T27] audit: type=1326 audit(2000000111.560:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd1491a8 code=0x7ffc0000 [ 156.571691][ T27] audit: type=1326 audit(2000000111.560:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbd1491a8 code=0x7ffc0000 [ 156.598283][ T27] audit: type=1326 audit(2000000111.560:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd1491a8 code=0x7ffc0000 [ 156.604922][ T27] audit: type=1326 audit(2000000111.560:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd1491a8 code=0x7ffc0000 [ 156.629014][ T27] audit: type=1326 audit(2000000111.570:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbd1491a8 code=0x7ffc0000 [ 156.742959][ T27] audit: type=1326 audit(2000000111.790:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd1491a8 code=0x7ffc0000 [ 156.773885][ T27] audit: type=1326 audit(2000000111.830:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd1491a8 code=0x7ffc0000 [ 157.182905][ T9106] binder: 9106:9105 cannot find target node [ 157.185723][ T9106] binder: 9105:9106 transaction call to 0:0 failed 2/29189/-22, size 0-0 line 3054 [ 157.763728][ T4310] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 157.766498][ T4310] Bluetooth: hci4: Injecting HCI hardware error event [ 157.770872][ T4296] Bluetooth: hci4: hardware error 0x00 [ 158.724828][ T4307] Bluetooth: hci2: command 0x0406 tx timeout [ 158.818912][ T11] team0 (unregistering): Port device team_slave_1 removed [ 159.025513][ T11] team0 (unregistering): Port device team_slave_0 removed [ 159.215211][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.455707][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.004121][ T4296] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 162.157917][ T11] bond0 (unregistering): Released all slaves [ 162.435170][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 163.232276][ T9161] sp0: Synchronizing with TNC [ 163.238669][ T9160] [U] è [ 163.397874][ T9172] loop4: detected capacity change from 0 to 1024 [ 163.461407][ T9172] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 163.571280][ T9185] IPVS: sed: SCTP 172.20.20.187:0 - no destination available [ 163.633492][ T6258] EXT4-fs (loop4): unmounting filesystem. [ 163.708932][ T9197] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1877'. [ 163.838694][ T9199] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 164.002493][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1884'. [ 164.461803][ T9228] No such timeout policy "syz0" [ 164.469721][ T9227] input: syz0 as /devices/virtual/input/input9 [ 165.097978][ T9254] netem: unknown loss type 0 [ 165.351519][ T9267] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 165.456664][ T9271] loop3: detected capacity change from 0 to 2048 [ 165.510889][ T9271] NILFS (loop3): invalid segment: Sequence number mismatch [ 165.512841][ T9271] NILFS (loop3): trying rollback from an earlier position [ 165.536727][ T9271] NILFS (loop3): recovery complete [ 165.571187][ T9272] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.631540][ T9307] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1933'. [ 167.741030][ T9356] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 168.893517][ T9419] loop4: detected capacity change from 0 to 512 [ 168.973268][ T9419] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 168.983282][ T9419] ext4 filesystem being mounted at /252/bus supports timestamps until 2038 (0x7fffffff) [ 169.114903][ T9422] loop3: detected capacity change from 0 to 4096 [ 169.291008][ T9424] syz.1.1983 (9424): drop_caches: 2 [ 169.292672][ T9424] syz.1.1983 (9424): drop_caches: 2 [ 169.299286][ T9422] ntfs: (device loop3): ntfs_read_inode_mount(): Incorrect mft record size 2048 in superblock, should be 4096. [ 169.302593][ T9422] ntfs: (device loop3): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 169.320347][ T6258] EXT4-fs (loop4): unmounting filesystem. [ 170.145466][ T9481] loop4: detected capacity change from 0 to 1024 [ 170.239859][ T9481] hfsplus: catalog searching failed [ 170.312666][ T9490] Injecting memory failure for pfn 0x1349eb at process virtual address 0x20ffe000 [ 170.329545][ T9490] Memory failure: 0x1349eb: recovery action for dirty LRU page: Recovered [ 170.343682][ T9490] Injecting memory failure for pfn 0x1ae341 at process virtual address 0x20fff000 [ 170.346210][ T9490] Memory failure: 0x1ae341: already hardware poisoned [ 170.451287][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'. [ 170.617199][ T9508] netlink: 'syz.0.2024': attribute type 16 has an invalid length. [ 170.619465][ T9508] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2024'. [ 170.703382][ T9510] mkiss: ax0: crc mode is auto. [ 170.879835][ T9515] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 170.884434][ T11] Bluetooth: hci3: Frame reassembly failed (-84) [ 170.886407][ T11] Bluetooth: hci3: Frame reassembly failed (-84) [ 171.124207][ T4310] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 171.126994][ T4310] Bluetooth: hci1: Injecting HCI hardware error event [ 171.131948][ T4310] Bluetooth: hci1: hardware error 0x00 [ 171.279304][ T9517] loop4: detected capacity change from 0 to 32768 [ 171.371851][ T9517] XFS (loop4): Mounting V5 Filesystem [ 171.419334][ T9517] XFS (loop4): Ending clean mount [ 171.504326][ T6258] XFS (loop4): Unmounting Filesystem [ 172.269302][ T9570] loop4: detected capacity change from 0 to 512 [ 172.299339][ T9570] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.302084][ T9570] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038 (0x7fffffff) [ 172.425096][ T6258] EXT4-fs (loop4): unmounting filesystem. [ 172.490139][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2051'. [ 172.883744][ T4296] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 172.993273][ T27] audit: type=1326 audit(2000000128.040:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9594 comm="syz.4.2057" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd1491a8 code=0x0 [ 173.284088][ T4310] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 173.395056][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2061'. [ 173.398492][ T9598] loop3: detected capacity change from 0 to 32768 [ 173.401279][ T9598] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2059 (9598) [ 173.412722][ T9598] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 173.416989][ T9598] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 173.419794][ T9598] BTRFS info (device loop3): using free space tree [ 173.469689][ T9598] BTRFS info (device loop3): enabling ssd optimizations [ 173.548764][ T5213] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 173.966741][ T9637] loop4: detected capacity change from 0 to 2048 [ 174.051232][ T9637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 174.054616][ T9637] ext4 filesystem being mounted at /272/bus supports timestamps until 2038 (0x7fffffff) [ 174.246702][ T6258] EXT4-fs (loop4): unmounting filesystem. [ 174.409363][ T4307] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.421352][ T4307] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.433057][ T4307] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.439440][ T4307] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.441949][ T4307] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 174.445621][ T4307] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.650693][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'. [ 174.663117][ T9669] device wlan0 entered promiscuous mode [ 174.998884][ T5392] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.021950][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2091'. [ 175.161101][ T5392] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.367229][ T5392] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.415903][ T9719] netlink: 'syz.4.2107': attribute type 1 has an invalid length. [ 175.522924][ T5995] kernel write not supported for file /input/event0 (pid: 5995 comm: kworker/1:15) [ 175.529606][ T5392] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.602626][ T9735] netlink: 'syz.0.2122': attribute type 10 has an invalid length. [ 175.621172][ T9735] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2122'. [ 175.628407][ T9735] bridge0: port 3(vlan1) entered blocking state [ 175.630247][ T9735] bridge0: port 3(vlan1) entered disabled state [ 175.635889][ T9735] device vlan1 entered promiscuous mode [ 175.637906][ T9735] bridge0: port 3(vlan1) entered blocking state [ 175.639687][ T9735] bridge0: port 3(vlan1) entered forwarding state [ 175.730656][ T9662] chnl_net:caif_netlink_parms(): no params data found [ 175.987189][ T9662] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.989267][ T9662] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.011293][ T9662] device bridge_slave_0 entered promiscuous mode [ 176.033212][ T9662] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.039138][ T9662] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.042030][ T9662] device bridge_slave_1 entered promiscuous mode [ 176.129724][ T9662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.145199][ T9662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.165519][ T9765] [ 176.166249][ T9765] ====================================================== [ 176.168148][ T9765] WARNING: possible circular locking dependency detected [ 176.170104][ T9765] 6.1.107-syzkaller #0 Not tainted [ 176.171467][ T9765] ------------------------------------------------------ [ 176.173405][ T9765] syz.0.2127/9765 is trying to acquire lock: [ 176.174996][ T9765] ffff0000c3d42130 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x60/0x2c8 [ 176.178169][ T9765] [ 176.178169][ T9765] but task is already holding lock: [ 176.180272][ T9765] ffff0000f17d3d28 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x1f8/0x600 [ 176.182693][ T9765] [ 176.182693][ T9765] which lock already depends on the new lock. [ 176.182693][ T9765] [ 176.185669][ T9765] [ 176.185669][ T9765] the existing dependency chain (in reverse order) is: [ 176.188283][ T9765] [ 176.188283][ T9765] -> #2 (&d->lock){+.+.}-{3:3}: [ 176.190303][ T9765] __mutex_lock_common+0x190/0x21a0 [ 176.191827][ T9765] mutex_lock_nested+0x38/0x44 [ 176.193312][ T9765] rfcomm_dev_ioctl+0x14d4/0x22a8 [ 176.194880][ T9765] rfcomm_sock_ioctl+0x98/0xf0 [ 176.196375][ T9765] sock_do_ioctl+0x134/0x2dc [ 176.197849][ T9765] sock_ioctl+0x4ec/0x858 [ 176.199186][ T9765] __arm64_sys_ioctl+0x14c/0x1c8 [ 176.200719][ T9765] invoke_syscall+0x98/0x2c0 [ 176.201358][ T9776] ax25_connect(): syz.1.2131 uses autobind, please contact jreuter@yaina.de [ 176.202108][ T9765] el0_svc_common+0x138/0x258 [ 176.205864][ T9765] do_el0_svc+0x64/0x218 [ 176.207196][ T9765] el0_svc+0x58/0x168 [ 176.208501][ T9765] el0t_64_sync_handler+0x84/0xf0 [ 176.210063][ T9765] el0t_64_sync+0x18c/0x190 [ 176.211407][ T9765] [ 176.211407][ T9765] -> #1 (rfcomm_dev_lock){+.+.}-{3:3}: [ 176.213587][ T9765] __mutex_lock_common+0x190/0x21a0 [ 176.215222][ T9765] mutex_lock_nested+0x38/0x44 [ 176.216677][ T9765] rfcomm_dev_get+0x8c/0x32c [ 176.218059][ T9765] rfcomm_dev_ioctl+0x514/0x22a8 [ 176.219580][ T9765] rfcomm_sock_ioctl+0x98/0xf0 [ 176.221111][ T9765] sock_do_ioctl+0x134/0x2dc [ 176.222617][ T9765] sock_ioctl+0x4ec/0x858 [ 176.223978][ T9765] __arm64_sys_ioctl+0x14c/0x1c8 [ 176.225557][ T9765] invoke_syscall+0x98/0x2c0 [ 176.226966][ T9765] el0_svc_common+0x138/0x258 [ 176.228449][ T9765] do_el0_svc+0x64/0x218 [ 176.229795][ T9765] el0_svc+0x58/0x168 [ 176.231118][ T9765] el0t_64_sync_handler+0x84/0xf0 [ 176.232722][ T9765] el0t_64_sync+0x18c/0x190 [ 176.234078][ T9765] [ 176.234078][ T9765] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 176.236742][ T9765] __lock_acquire+0x3338/0x7680 [ 176.238249][ T9765] lock_acquire+0x26c/0x7cc [ 176.239656][ T9765] lock_sock_nested+0x78/0x138 [ 176.241242][ T9765] rfcomm_sk_state_change+0x60/0x2c8 [ 176.242906][ T9765] __rfcomm_dlc_close+0x234/0x600 [ 176.244497][ T9765] rfcomm_dlc_close+0x100/0x194 [ 176.246017][ T9765] __rfcomm_sock_close+0x138/0x258 [ 176.247579][ T9765] rfcomm_sock_shutdown+0xa8/0x214 [ 176.249200][ T9765] rfcomm_sock_release+0x58/0x114 [ 176.250757][ T9765] sock_close+0xb8/0x1fc [ 176.252106][ T9765] __fput+0x1c8/0x7c8 [ 176.253409][ T9765] ____fput+0x20/0x30 [ 176.254694][ T9765] task_work_run+0x240/0x2f0 [ 176.256141][ T9765] do_exit+0x554/0x1a88 [ 176.257510][ T9765] do_group_exit+0x194/0x22c [ 176.258909][ T9765] get_signal+0x14a0/0x158c [ 176.260395][ T9765] do_notify_resume+0x3ac/0x3474 [ 176.261953][ T9765] el0_svc+0x9c/0x168 [ 176.263230][ T9765] el0t_64_sync_handler+0x84/0xf0 [ 176.264748][ T9765] el0t_64_sync+0x18c/0x190 [ 176.266172][ T9765] [ 176.266172][ T9765] other info that might help us debug this: [ 176.266172][ T9765] [ 176.268994][ T9765] Chain exists of: [ 176.268994][ T9765] sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_dev_lock --> &d->lock [ 176.268994][ T9765] [ 176.272967][ T9765] Possible unsafe locking scenario: [ 176.272967][ T9765] [ 176.275031][ T9765] CPU0 CPU1 [ 176.276546][ T9765] ---- ---- [ 176.278039][ T9765] lock(&d->lock); [ 176.279149][ T9765] lock(rfcomm_dev_lock); [ 176.281031][ T9765] lock(&d->lock); [ 176.282781][ T9765] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 176.284545][ T9765] [ 176.284545][ T9765] *** DEADLOCK *** [ 176.284545][ T9765] [ 176.286820][ T9765] 3 locks held by syz.0.2127/9765: [ 176.288310][ T9765] #0: ffff0000e16f1410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x80/0x1fc [ 176.291281][ T9765] #1: ffff800018153768 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_close+0x44/0x194 [ 176.293873][ T9765] #2: ffff0000f17d3d28 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x1f8/0x600 [ 176.296438][ T9765] [ 176.296438][ T9765] stack backtrace: [ 176.298075][ T9765] CPU: 0 PID: 9765 Comm: syz.0.2127 Not tainted 6.1.107-syzkaller #0 [ 176.300293][ T9765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 176.303031][ T9765] Call trace: [ 176.303918][ T9765] dump_backtrace+0x1c8/0x1f4 [ 176.305251][ T9765] show_stack+0x2c/0x3c [ 176.306408][ T9765] dump_stack_lvl+0x108/0x170 [ 176.307689][ T9765] dump_stack+0x1c/0x58 [ 176.308857][ T9765] print_circular_bug+0x150/0x1b8 [ 176.310303][ T9765] check_noncircular+0x2cc/0x378 [ 176.311690][ T9765] __lock_acquire+0x3338/0x7680 [ 176.313041][ T9765] lock_acquire+0x26c/0x7cc [ 176.314360][ T9765] lock_sock_nested+0x78/0x138 [ 176.315661][ T9765] rfcomm_sk_state_change+0x60/0x2c8 [ 176.317149][ T9765] __rfcomm_dlc_close+0x234/0x600 [ 176.318537][ T9765] rfcomm_dlc_close+0x100/0x194 [ 176.319982][ T9765] __rfcomm_sock_close+0x138/0x258 [ 176.321433][ T9765] rfcomm_sock_shutdown+0xa8/0x214 [ 176.322864][ T9765] rfcomm_sock_release+0x58/0x114 [ 176.324275][ T9765] sock_close+0xb8/0x1fc [ 176.325517][ T9765] __fput+0x1c8/0x7c8 [ 176.326614][ T9765] ____fput+0x20/0x30 [ 176.327693][ T9765] task_work_run+0x240/0x2f0 [ 176.329049][ T9765] do_exit+0x554/0x1a88 [ 176.330182][ T9765] do_group_exit+0x194/0x22c [ 176.331541][ T9765] get_signal+0x14a0/0x158c [ 176.332740][ T9765] do_notify_resume+0x3ac/0x3474 [ 176.334103][ T9765] el0_svc+0x9c/0x168 [ 176.335229][ T9765] el0t_64_sync_handler+0x84/0xf0 [ 176.336546][ T9765] el0t_64_sync+0x18c/0x190 [ 176.337814][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.363323][ T9662] team0: Port device team_slave_0 added [ 176.371078][ T9662] team0: Port device team_slave_1 added [ 176.408545][ T9778] loop4: detected capacity change from 0 to 8192 [ 176.442069][ T9778] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 176.446552][ T9778] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 176.449125][ T9778] REISERFS (device loop4): using ordered data mode [ 176.451107][ T9778] reiserfs: using flush barriers [ 176.452920][ T9778] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.458070][ T9662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.459994][ T9778] REISERFS (device loop4): checking transaction log (loop4) [ 176.460043][ T9662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.475927][ T9662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.484051][ T4310] Bluetooth: hci3: command tx timeout [ 176.502605][ T9662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.514030][ T9662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.520991][ T9662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.536087][ T9778] REISERFS (device loop4): Using tea hash to sort names [ 176.538063][ T9778] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 176.602652][ T9779] loop3: detected capacity change from 0 to 32768 [ 176.623001][ T9779] XFS (loop3): Mounting V5 Filesystem [ 176.626691][ T9662] device hsr_slave_0 entered promiscuous mode [ 176.646632][ T9779] XFS (loop3): Ending clean mount [ 176.649128][ T9779] XFS (loop3): Quotacheck needed: Please wait. [ 176.659102][ T9779] XFS (loop3): Quotacheck: Done. [ 176.665764][ T9662] device hsr_slave_1 entered promiscuous mode [ 176.687337][ T9779] XFS (loop3): Unmounting Filesystem [ 176.713942][ T9662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.716393][ T9662] Cannot create hsr debugfs directory [ 177.746009][ T9662] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.796273][ T9662] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.897096][ T9662] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.925377][ T9662] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 178.289618][ T9662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.333342][ T9662] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.337310][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.339716][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.344289][ T5392] device hsr_slave_0 left promiscuous mode [ 178.383796][ T5392] device hsr_slave_1 left promiscuous mode [ 178.473882][ T5392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.475992][ T5392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.478902][ T5392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.481108][ T5392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.483754][ T5392] device bridge_slave_1 left promiscuous mode [ 178.485426][ T5392] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.534400][ T5392] device bridge_slave_0 left promiscuous mode [ 178.536244][ T5392] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.563658][ T4310] Bluetooth: hci3: command tx timeout [ 178.664615][ T5392] device veth1_macvtap left promiscuous mode [ 178.666335][ T5392] device veth0_macvtap left promiscuous mode [ 178.668057][ T5392] device veth1_vlan left promiscuous mode [ 178.669671][ T5392] device veth0_vlan left promiscuous mode [ 180.355060][ T5392] team0 (unregistering): Port device team_slave_1 removed [ 180.555095][ T5392] team0 (unregistering): Port device team_slave_0 removed [ 180.643663][ T4307] Bluetooth: hci3: command tx timeout [ 180.756520][ T5392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.965429][ T5392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.723634][ T4310] Bluetooth: hci3: command tx timeout [ 183.327019][ T5392] bond0 (unregistering): Released all slaves [ 183.556295][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.559301][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.561796][ T5499] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.563739][ T5499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.566184][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.568772][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.571230][ T5499] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.573174][ T5499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.576304][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.579117][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.581786][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.586117][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.589023][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.591854][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.596921][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.599627][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.604407][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.606950][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.612045][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.615221][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.619543][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.675509][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.677519][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.682472][ T9662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.705650][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.708310][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.715236][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.717853][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.721807][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.725854][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.729231][ T9662] device veth0_vlan entered promiscuous mode [ 183.734238][ T9662] device veth1_vlan entered promiscuous mode [ 183.757777][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.760584][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 183.763043][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.765670][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.768554][ T9662] device veth0_macvtap entered promiscuous mode [ 183.772254][ T9662] device veth1_macvtap entered promiscuous mode [ 183.779637][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.782532][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.785515][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.788452][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.791201][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.795936][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.798838][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.801733][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.805776][ T9662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.807901][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.810323][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.812621][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.816879][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.820558][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.823432][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.826909][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.829760][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.832458][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.835994][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.838791][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.841670][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.845410][ T9662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.847817][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.850429][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.854618][ T9662] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.857175][ T9662] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.859505][ T9662] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.861939][ T9662] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.879507][ T9662] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 183.890938][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.891682][ T9662] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 183.908061][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.908159][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.910198][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.912196][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.918111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 184.803700][ T4307] Bluetooth: hci3: command tx timeout