last executing test programs: 13.15282227s ago: executing program 1: write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x118, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}, @TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {0x18, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x118}}, 0x0) 12.046771308s ago: executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x2}, 0x20) 12.002023062s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x7, 0x0, 0x0, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000003c0)=0x2, 0x4) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000040), 0x7, 0x4d6, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x240, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "31eacb679f3f4fd24dab671ab3445ed5"}) 10.764396442s ago: executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 10.708540451s ago: executing program 1: symlink(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0/../file0\x00', &(0x7f00000002c0), 0x18) 10.229569275s ago: executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x4, @random}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 10.130035903s ago: executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x401) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x1) 10.030753559s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x7, 0x0, 0x0, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000003c0)=0x2, 0x4) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000040), 0x7, 0x4d6, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x240, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "31eacb679f3f4fd24dab671ab3445ed5"}) 9.749577646s ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0d", 0xe) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="9a", 0x1}], 0x1}}], 0x1, 0x400ccd5) sendto$isdn(r1, &(0x7f0000000340), 0x8, 0x0, 0x0, 0x0) 9.63352092s ago: executing program 0: write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x118, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}, @TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {0x18, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x118}}, 0x0) 9.509073187s ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) 9.506095021s ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000340)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x1}) close_range(r1, r1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() r2 = eventfd2(0x0, 0x0) r3 = dup2(r2, r2) write$char_usb(r3, &(0x7f0000000180)="e060b207f5d720f1", 0x8) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6574706369b032"], 0xa) 8.885256649s ago: executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x4, @random}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 8.513632214s ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x401) rt_sigreturn() r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup2(r2, r1) r3 = msgget(0x2, 0x0) msgctl$IPC_SET(r3, 0x3, 0x0) r4 = accept$unix(r1, 0x0, 0x0) getsockopt$SO_COOKIE(r4, 0x1, 0x10, &(0x7f0000000040), &(0x7f0000000100)=0x3f) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) r5 = memfd_create(&(0x7f0000000080)='}\xa4-}{\x00\xaa\x81\xde\xac\xc0\xe8\xf1v\xbd\xd2\xd4\x03[t\xe8\x92\x9d\xc2\xdep\x11y\xf7\xb0\x90\v\xb9\x9f\x12\xfc\x8c\x19\xf7v\xdb\r\xf4\xce\xdb\xf8Cw\xe6c\xd1\xe9\xe1\x8e\x1bKn\x9c{[\xbe|\x13\x97{\x12z\xea(\xb8\xc7\xca\x9a\x17)\xfcl\xe9\x87\xe7\xf5U\xc9@\xeb\x02\x90\'\x8d\xccd\x05\xf7zJ\x8f+\\\x16\x9e\x10t^\xb7\x90\xa7\x8f \xc0#\xeb&s\xc6\x11\xfb\xc3\x1fp\xeb^\x82\x8a\x1d\xe3\x93\xfdt\x86-\b*c2\xe6\xd4\xc6\xf9\x172\xf7', 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) dup3(r8, r7, 0x0) mkdirat$cgroup(r7, &(0x7f0000000000)='syz1\x00', 0x1ff) r9 = dup(r5) fallocate(r5, 0x0, 0x0, 0x8002006) ftruncate(r9, 0x0) 7.030233811s ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x7, 0x0, 0x0, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000003c0)=0x2, 0x4) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000040), 0x7, 0x4d6, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x240, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "31eacb679f3f4fd24dab671ab3445ed5"}) 6.618443962s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe70, 0x0, 0x0, 0x0, 0x40000004}, 0x90) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)) 5.798813333s ago: executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x140, 0x0) close(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce943f895dd4c2e9dd7393543d89b00dc6b3a25045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bd", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46) sendmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)='D', 0x1}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffff0e}}], 0x1, 0x0, 0x0) rt_sigreturn() clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {r4, r5+60000000}}, 0x0) r6 = eventfd(0xe466) write$eventfd(r6, &(0x7f0000000040)=0xfffffffffffffffc, 0x8) getsockopt$inet_mreqsrc(r0, 0x0, 0x2, &(0x7f0000000080)={@broadcast, @multicast1, @initdev}, &(0x7f0000000040)=0xc) 5.586209466s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x4, @random}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 4.158979594s ago: executing program 3: pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) fcntl$lock(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.795315473s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}}, 0x0) 2.524332695s ago: executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 2.388541583s ago: executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000180905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.301035348s ago: executing program 4: bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f1ff2dbd7000fddbdf250e0f000008003900360c006008000300", @ANYRES32=r2], 0x24}, 0x1, 0x14}, 0x0) 2.084422177s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x0, 0x0, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x1c, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.905186898s ago: executing program 4: r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[], 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 1.787405914s ago: executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x0, 0x840000088}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0xc0605345, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0xc08c5335, &(0x7f0000000180)) tkill(r0, 0x7) 1.362910701s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x7, 0x0, 0x0, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000003c0)=0x2, 0x4) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000040), 0x7, 0x4d6, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x240, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "31eacb679f3f4fd24dab671ab3445ed5"}) 1.052364252s ago: executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000005dc0)='./file1\x00', 0x400, &(0x7f0000005e00)=ANY=[], 0x1, 0x5e05, &(0x7f00000119c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmod(r0, 0x0) 165.924076ms ago: executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='E', 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) 0s ago: executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x540d, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): mode [ 61.826913][ T5117] bridge_slave_1: entered promiscuous mode [ 61.857811][ T5112] team0: Port device team_slave_0 added [ 61.907522][ T5112] team0: Port device team_slave_1 added [ 61.925034][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.932714][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.940123][ T5111] bridge_slave_0: entered allmulticast mode [ 61.948213][ T5111] bridge_slave_0: entered promiscuous mode [ 61.957585][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.970598][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.010861][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.018207][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.026155][ T5111] bridge_slave_1: entered allmulticast mode [ 62.032856][ T5111] bridge_slave_1: entered promiscuous mode [ 62.050897][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.058051][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.065184][ T5114] bridge_slave_0: entered allmulticast mode [ 62.072560][ T5114] bridge_slave_0: entered promiscuous mode [ 62.081368][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.088650][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.096260][ T5114] bridge_slave_1: entered allmulticast mode [ 62.103153][ T5114] bridge_slave_1: entered promiscuous mode [ 62.121200][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.128377][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.136103][ T5118] bridge_slave_0: entered allmulticast mode [ 62.142778][ T5118] bridge_slave_0: entered promiscuous mode [ 62.182472][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.189544][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.216025][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.227722][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.235047][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.242650][ T5118] bridge_slave_1: entered allmulticast mode [ 62.249627][ T5118] bridge_slave_1: entered promiscuous mode [ 62.269672][ T5117] team0: Port device team_slave_0 added [ 62.284149][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.291399][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.319176][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.370112][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.384278][ T5117] team0: Port device team_slave_1 added [ 62.392176][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.404057][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.435711][ T5112] hsr_slave_0: entered promiscuous mode [ 62.441958][ T5112] hsr_slave_1: entered promiscuous mode [ 62.452088][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.463460][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.514401][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.567797][ T5114] team0: Port device team_slave_0 added [ 62.586915][ T5111] team0: Port device team_slave_0 added [ 62.593425][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.600693][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.627428][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.645933][ T5114] team0: Port device team_slave_1 added [ 62.654446][ T5118] team0: Port device team_slave_0 added [ 62.663264][ T5118] team0: Port device team_slave_1 added [ 62.670931][ T5111] team0: Port device team_slave_1 added [ 62.677772][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.684701][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.711011][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.784536][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.791734][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.818817][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.826902][ T5115] Bluetooth: hci0: command tx timeout [ 62.829531][ T5128] Bluetooth: hci3: command tx timeout [ 62.834984][ T5115] Bluetooth: hci1: command tx timeout [ 62.840864][ T5128] Bluetooth: hci4: command tx timeout [ 62.846663][ T5122] Bluetooth: hci2: command tx timeout [ 62.890095][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.897630][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.923609][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.946985][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.953939][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.981224][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.995450][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.002403][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.028401][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.040066][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.047437][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.073415][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.101788][ T5117] hsr_slave_0: entered promiscuous mode [ 63.108340][ T5117] hsr_slave_1: entered promiscuous mode [ 63.114400][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.122899][ T5117] Cannot create hsr debugfs directory [ 63.146953][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.153907][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.180624][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.290284][ T5111] hsr_slave_0: entered promiscuous mode [ 63.297032][ T5111] hsr_slave_1: entered promiscuous mode [ 63.303093][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.311364][ T5111] Cannot create hsr debugfs directory [ 63.334796][ T5114] hsr_slave_0: entered promiscuous mode [ 63.341131][ T5114] hsr_slave_1: entered promiscuous mode [ 63.347861][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.356147][ T5114] Cannot create hsr debugfs directory [ 63.464599][ T5118] hsr_slave_0: entered promiscuous mode [ 63.471048][ T5118] hsr_slave_1: entered promiscuous mode [ 63.478233][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.487107][ T5118] Cannot create hsr debugfs directory [ 63.631993][ T5112] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.670527][ T5112] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.698435][ T5112] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.769058][ T5112] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.906225][ T5114] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.918145][ T5114] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.929737][ T5114] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.941925][ T5114] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.013075][ T5111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.024742][ T5111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.034378][ T5111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.045242][ T5111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.177448][ T5118] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.189655][ T5118] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.213603][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.232273][ T5118] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.261508][ T5118] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.290714][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.321494][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.328784][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.358339][ T5117] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.377388][ T5117] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.388478][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.395638][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.429619][ T5117] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.440493][ T5117] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.468420][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.511398][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.552052][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.561461][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.568585][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.608466][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.615647][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.660521][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.727362][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.734475][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.745477][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.752571][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.819025][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.838410][ T5114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.876210][ T5122] Bluetooth: hci4: command tx timeout [ 64.886881][ T5122] Bluetooth: hci2: command tx timeout [ 64.888783][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.892294][ T5122] Bluetooth: hci1: command tx timeout [ 64.906432][ T5115] Bluetooth: hci3: command tx timeout [ 64.908371][ T5128] Bluetooth: hci0: command tx timeout [ 64.992302][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.999420][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.030202][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.037407][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.167685][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.178617][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.263789][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.345891][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.354196][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.406944][ T5112] veth0_vlan: entered promiscuous mode [ 65.472926][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.480221][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.499350][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.506537][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.537630][ T5114] veth0_vlan: entered promiscuous mode [ 65.563816][ T5112] veth1_vlan: entered promiscuous mode [ 65.639229][ T5114] veth1_vlan: entered promiscuous mode [ 65.699083][ T5112] veth0_macvtap: entered promiscuous mode [ 65.749735][ T5112] veth1_macvtap: entered promiscuous mode [ 65.774650][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.823041][ T5114] veth0_macvtap: entered promiscuous mode [ 65.854384][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.897936][ T5114] veth1_macvtap: entered promiscuous mode [ 65.909650][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.958101][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.969304][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.980506][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.991984][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.004724][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.017095][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.029415][ T5114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.039934][ T5114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.049914][ T5114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.061097][ T5114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.080313][ T5112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.089269][ T5112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.098385][ T5112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.107397][ T5112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.152014][ T5111] veth0_vlan: entered promiscuous mode [ 66.179981][ T5118] veth0_vlan: entered promiscuous mode [ 66.192965][ T5111] veth1_vlan: entered promiscuous mode [ 66.204151][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.268830][ T5118] veth1_vlan: entered promiscuous mode [ 66.346893][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.354911][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.360524][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.374402][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.428083][ T5111] veth0_macvtap: entered promiscuous mode [ 66.466817][ T5118] veth0_macvtap: entered promiscuous mode [ 66.492970][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.496169][ T5118] veth1_macvtap: entered promiscuous mode [ 66.502164][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.511657][ T5111] veth1_macvtap: entered promiscuous mode [ 66.541782][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.549906][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.551912][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.578331][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.588293][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.603067][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.616929][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.652967][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.663619][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.674546][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.685964][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.697905][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.717132][ T5111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.726728][ T5111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.735502][ T5111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.744201][ T5111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.760321][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.772249][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.786033][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.797872][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.808919][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.819771][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.832770][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.861752][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.880413][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.890551][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.908778][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.920971][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.935069][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.956520][ T5128] Bluetooth: hci0: command tx timeout [ 66.961954][ T5128] Bluetooth: hci1: command tx timeout [ 66.964269][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.967942][ T5120] Bluetooth: hci3: command tx timeout [ 66.974862][ T5122] Bluetooth: hci2: command tx timeout [ 66.980372][ T5120] Bluetooth: hci4: command tx timeout [ 67.005003][ T5118] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.031859][ T5118] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.041968][ T5118] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.051434][ T5118] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.111438][ T5197] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 67.141546][ T5117] veth0_vlan: entered promiscuous mode [ 67.201526][ T5117] veth1_vlan: entered promiscuous mode [ 67.407721][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.433736][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.482125][ T5117] veth0_macvtap: entered promiscuous mode [ 67.506246][ T5117] veth1_macvtap: entered promiscuous mode [ 67.534989][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.543437][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.578991][ T5215] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.587611][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.606219][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.621098][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.632334][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.642766][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.653477][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.663790][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.674369][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.688693][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.703990][ T5215] Κό: entered promiscuous mode [ 67.721380][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.731983][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.740516][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.748210][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.759031][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.769595][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.779441][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.789961][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.800862][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.811426][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.827523][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.863045][ T5117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.871893][ T5117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.881039][ T5117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.889901][ T5117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.957675][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.980219][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.099039][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.120049][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.215502][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.234430][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.548197][ T5238] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 69.035712][ T5128] Bluetooth: hci1: command tx timeout [ 69.041420][ T5128] Bluetooth: hci4: command tx timeout [ 69.047071][ T5128] Bluetooth: hci2: command tx timeout [ 69.053561][ T5128] Bluetooth: hci3: command tx timeout [ 69.060013][ T5128] Bluetooth: hci0: command tx timeout [ 69.856554][ T5251] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 69.910332][ T5251] Κό: entered promiscuous mode [ 70.556311][ T5278] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 70.699150][ T5229] loop0: detected capacity change from 0 to 40427 [ 70.745969][ T5229] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 70.780133][ T5229] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 70.836353][ T5229] F2FS-fs (loop0): invalid crc value [ 70.883629][ T5229] F2FS-fs (loop0): Found nat_bits in checkpoint [ 70.963307][ T5255] loop3: detected capacity change from 0 to 32768 [ 71.065433][ T5229] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 71.072725][ T5229] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 71.089028][ T5255] [ 71.089028][ T5255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 71.089028][ T5255] [ 71.178252][ T5229] syz-executor.0: attempt to access beyond end of device [ 71.178252][ T5229] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 71.224638][ T5255] find_entry called with index = 0 [ 71.240549][ T5255] read_mapping_page failed! [ 71.256222][ T5296] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 71.266592][ T5255] ERROR: (device loop3): txCommit: [ 71.266592][ T5255] [ 71.309205][ T5255] ERROR: (device loop3): remounting filesystem as read-only [ 71.328661][ T5296] Κό: entered promiscuous mode [ 71.332335][ T5299] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.663271][ T5314] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 71.685024][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.691687][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.335052][ T5337] Zero length message leads to an empty skb [ 72.651676][ T5341] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.705499][ T5341] Κό: entered promiscuous mode [ 73.219023][ T5355] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 73.442915][ T5333] loop4: detected capacity change from 0 to 32768 [ 73.469124][ T5333] [ 73.469124][ T5333] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 73.469124][ T5333] [ 73.530983][ T5333] find_entry called with index = 0 [ 73.566544][ T5333] read_mapping_page failed! [ 73.571822][ T5333] ERROR: (device loop4): txCommit: [ 73.571822][ T5333] [ 73.602137][ T5333] ERROR: (device loop4): remounting filesystem as read-only [ 74.209693][ T5346] loop3: detected capacity change from 0 to 40427 [ 74.225786][ T5346] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 74.234779][ T5346] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 74.287997][ T5346] F2FS-fs (loop3): invalid crc value [ 74.315177][ T5346] F2FS-fs (loop3): Found nat_bits in checkpoint [ 74.358115][ T5394] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 74.440954][ T5346] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 74.456811][ T5346] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 74.522196][ T5346] syz-executor.3: attempt to access beyond end of device [ 74.522196][ T5346] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 75.224181][ T5423] pim6reg1: entered promiscuous mode [ 75.244526][ T5423] pim6reg1: entered allmulticast mode [ 75.576601][ T5428] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 75.983754][ T5164] libceph: connect (1)[c::]:6789 error -101 [ 76.006876][ T5164] libceph: mon0 (1)[c::]:6789 connect error [ 76.041713][ T5164] libceph: connect (1)[c::]:6789 error -101 [ 76.054801][ T5164] libceph: mon0 (1)[c::]:6789 connect error [ 76.070413][ T5442] ceph: No mds server is up or the cluster is laggy [ 76.172483][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.582774][ T5468] loop2: detected capacity change from 0 to 4096 [ 76.604011][ T5468] ======================================================= [ 76.604011][ T5468] WARNING: The mand mount option has been deprecated and [ 76.604011][ T5468] and is ignored by this kernel. Remove the mand [ 76.604011][ T5468] option from the mount to silence this warning. [ 76.604011][ T5468] ======================================================= [ 76.812258][ T9] cfg80211: failed to load regulatory.db [ 77.068042][ T5446] loop1: detected capacity change from 0 to 32768 [ 77.154654][ T5446] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 77.376256][ T5487] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 77.382226][ T5464] loop4: detected capacity change from 0 to 32768 [ 77.472960][ T5464] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (5464) [ 77.481500][ T5446] XFS (loop1): Ending clean mount [ 77.565591][ T5446] XFS (loop1): Quotacheck needed: Please wait. [ 77.567834][ T5464] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 77.638772][ T5464] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 77.692327][ T5446] XFS (loop1): Quotacheck: Done. [ 77.710057][ T5464] BTRFS info (device loop4): using free-space-tree [ 77.738360][ T5466] loop0: detected capacity change from 0 to 32768 [ 77.792381][ T5466] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 77.801674][ T5466] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 77.886674][ T5112] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 78.072781][ T5466] XFS (loop0): Ending clean mount [ 78.115977][ T5466] XFS (loop0): Quotacheck needed: Please wait. [ 78.134808][ T5521] loop3: detected capacity change from 0 to 2048 [ 78.145636][ T29] audit: type=1800 audit(1717368801.952:2): pid=5522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 78.232405][ T29] audit: type=1800 audit(1717368801.962:3): pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 78.305233][ T5466] XFS (loop0): Quotacheck: Done. [ 78.381897][ T5523] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.408948][ T5111] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 78.474669][ T5118] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 78.672746][ T5523] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 78.725162][ T5523] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 78.775080][ T5523] Remounting filesystem read-only [ 78.820379][ T5114] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 78.849923][ T5114] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 78.876613][ T5114] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.926601][ T5114] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.966605][ T5492] loop2: detected capacity change from 0 to 32768 [ 78.968652][ T5114] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.045898][ T5114] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 79.075560][ T5114] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 79.098664][ T5114] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.108530][ T5114] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.117898][ T5114] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.338370][ T5492] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 79.383870][ T5492] bcachefs (loop2): recovering from clean shutdown, journal seq 8 [ 79.405891][ T5492] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 79.405891][ T5492] running recovery passes: check_allocations [ 79.503969][ T5492] bcachefs (loop2): accounting_read... done [ 79.535060][ T5492] bcachefs (loop2): alloc_read... done [ 79.559731][ T5492] bcachefs (loop2): stripes_read... done [ 79.579041][ T5554] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 79.584048][ T5492] bcachefs (loop2): snapshots_read... done [ 79.617617][ T5492] bcachefs (loop2): check_allocations... [ 79.641327][ T5492] btree ptr not marked in member info btree allocated bitmap [ 79.641382][ T5492] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq efdd7a26d7396dd5 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, shutting down [ 79.717116][ T5492] bcachefs (loop2): inconsistency detected - emergency read only at journal seq 8 [ 79.742550][ T5525] loop1: detected capacity change from 0 to 32768 [ 79.780413][ T5492] bcachefs (loop2): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 79.811180][ T5525] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 79.825553][ T5492] bcachefs (loop2): bch2_gc_btrees(): error fsck_errors_not_fixed [ 79.879903][ T5492] bucket 0:26 gen 0 has wrong data_type: got btree, should be need_discard, shutting down [ 79.923516][ T5525] XFS (loop1): Starting recovery (logdev: internal) [ 79.971700][ T5525] XFS (loop1): Ending recovery (logdev: internal) [ 80.003765][ T5492] bcachefs (loop2): bch2_gc_alloc_done(): error fsck_errors_not_fixed [ 80.035085][ T5492] bcachefs (loop2): bch2_check_allocations(): error fsck_errors_not_fixed [ 80.045784][ T5112] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 80.056631][ T5492] bcachefs (loop2): bch2_fs_recovery(): error fsck_errors_not_fixed [ 80.083481][ T5492] bcachefs (loop2): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 80.137287][ T5492] bcachefs (loop2): shutting down [ 80.244872][ T5492] bcachefs (loop2): shutdown complete [ 80.930676][ T5559] loop4: detected capacity change from 0 to 32768 [ 80.953308][ T5492] syz-executor.2 (5492) used greatest stack depth: 15696 bytes left [ 80.997975][ T5559] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (5559) [ 81.138106][ T5559] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 81.158372][ T5571] loop0: detected capacity change from 0 to 32768 [ 81.184734][ T5559] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 81.214726][ T5559] BTRFS info (device loop4): using free-space-tree [ 81.245866][ T5571] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 81.469925][ T5571] XFS (loop0): Ending clean mount [ 81.495763][ T5571] XFS (loop0): Quotacheck needed: Please wait. [ 81.587433][ T5571] XFS (loop0): Quotacheck: Done. [ 81.709135][ T5111] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 81.795646][ T5118] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 81.874088][ T5573] loop3: detected capacity change from 0 to 40427 [ 81.901442][ T5573] F2FS-fs (loop3): invalid crc value [ 81.931017][ T5573] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.061844][ T5575] loop1: detected capacity change from 0 to 32768 [ 82.145661][ T5575] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 82.197312][ T5573] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.234302][ T29] audit: type=1800 audit(1717368806.052:4): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=10 res=0 errno=0 [ 82.356692][ T5114] syz-executor.3: attempt to access beyond end of device [ 82.356692][ T5114] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 82.407049][ T5114] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 82.414127][ T5114] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 82.462062][ T5601] loop2: detected capacity change from 0 to 32768 [ 82.507275][ T5601] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5601) [ 82.538346][ T5575] XFS (loop1): Ending clean mount [ 82.573820][ T5575] XFS (loop1): Quotacheck needed: Please wait. [ 82.605688][ T5601] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.640107][ T5601] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 82.689954][ T5601] BTRFS info (device loop2): using free-space-tree [ 82.700357][ T5575] XFS (loop1): Quotacheck: Done. [ 82.712169][ T5620] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 82.845924][ T5112] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 83.218308][ T5601] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 83.447791][ T5117] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.519463][ T5646] syz-executor.0: attempt to access beyond end of device [ 83.519463][ T5646] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 83.545487][ T5646] FAT-fs (loop1): unable to read boot sector [ 83.824459][ T5616] loop4: detected capacity change from 0 to 32768 [ 83.929966][ T5616] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 84.188878][ T5678] loop1: detected capacity change from 0 to 256 [ 84.196494][ T5616] XFS (loop4): Ending clean mount [ 84.223935][ T5616] XFS (loop4): Quotacheck needed: Please wait. [ 84.344878][ T5616] XFS (loop4): Quotacheck: Done. [ 84.391842][ T29] audit: type=1800 audit(1717368808.212:5): pid=5616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=9292 res=0 errno=0 [ 84.486980][ T5111] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 86.687242][ T5757] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.220302][ T5772] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 87.250285][ T5772] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 87.253313][ T5749] loop1: detected capacity change from 0 to 32768 [ 87.280785][ T5774] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 87.316759][ T5772] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 87.375763][ T5749] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.661591][ T5749] XFS (loop1): Ending clean mount [ 87.711998][ T5749] XFS (loop1): Quotacheck needed: Please wait. [ 87.774954][ T5749] XFS (loop1): Quotacheck: Done. [ 87.907048][ T5112] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 88.328129][ T5790] loop4: detected capacity change from 0 to 256 [ 89.891888][ T5784] loop3: detected capacity change from 0 to 40427 [ 89.928770][ T5784] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 89.954220][ T5786] loop0: detected capacity change from 0 to 32768 [ 89.973970][ T5784] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 89.978170][ T5786] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (5786) [ 90.018881][ T5786] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 90.062756][ T5784] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.079338][ T5786] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 90.081855][ T5788] loop2: detected capacity change from 0 to 32768 [ 90.208977][ T5819] loop1: detected capacity change from 0 to 64 [ 90.302190][ T5786] BTRFS info (device loop0): rebuilding free space tree [ 90.361584][ T5784] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 90.369001][ T5784] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.446858][ T5788] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 90.477861][ T5788] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 90.478646][ T5786] BTRFS info (device loop0): disabling free space tree [ 90.498471][ T5783] dccp_close: ABORT with 28 bytes unread [ 90.516371][ T5786] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.527152][ T5788] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 90.527152][ T5788] running recovery passes: check_allocations [ 90.545336][ T5786] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 90.669581][ T5788] bcachefs (loop2): accounting_read... done [ 90.697941][ T5788] bcachefs (loop2): alloc_read... done [ 90.703557][ T5788] bcachefs (loop2): stripes_read... done [ 90.738336][ T5788] bcachefs (loop2): snapshots_read... done [ 90.776551][ T5788] bcachefs (loop2): check_allocations... [ 90.795176][ T5788] btree ptr not marked in member info btree allocated bitmap [ 90.795197][ T5788] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a22d880bb51b703b written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, shutting down [ 90.943945][ T5788] bcachefs (loop2): inconsistency detected - emergency read only at journal seq 10 [ 90.960205][ T5788] bcachefs (loop2): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 90.984271][ T5788] bcachefs (loop2): bch2_gc_btrees(): error fsck_errors_not_fixed [ 91.020207][ T5118] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 91.037458][ T5788] bucket 0:26 gen 0 has wrong data_type: got btree, should be need_discard, shutting down [ 91.054461][ T5788] bcachefs (loop2): bch2_gc_alloc_done(): error fsck_errors_not_fixed [ 91.095792][ T5799] loop4: detected capacity change from 0 to 32768 [ 91.117058][ T5799] btrfs: Deprecated parameter 'usebackuproot' [ 91.127220][ T5788] bcachefs (loop2): bch2_check_allocations(): error fsck_errors_not_fixed [ 91.158215][ T5799] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 91.171226][ T5788] bcachefs (loop2): bch2_fs_recovery(): error fsck_errors_not_fixed [ 91.197697][ T5788] bcachefs (loop2): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 91.216121][ T5799] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (5799) [ 91.255095][ T5788] bcachefs (loop2): shutting down [ 91.325134][ T5788] bcachefs (loop2): shutdown complete [ 91.357878][ T5799] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 91.428347][ T5799] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 91.478963][ T5799] BTRFS info (device loop4): using free-space-tree [ 91.706070][ T11] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 91.722349][ T5799] BTRFS warning (device loop4): couldn't read tree root [ 91.776226][ T5799] BTRFS warning (device loop4): try to load backup roots slot 1 [ 91.843717][ T11] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 91.862257][ T5799] BTRFS warning (device loop4): couldn't read tree root [ 91.875410][ T5799] BTRFS warning (device loop4): try to load backup roots slot 2 [ 91.918014][ T1047] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 91.922677][ T5862] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 91.955389][ T5799] BTRFS warning (device loop4): couldn't read tree root [ 91.962375][ T5799] BTRFS warning (device loop4): try to load backup roots slot 3 [ 92.047841][ T5799] BTRFS info (device loop4): rebuilding free space tree [ 92.134950][ T5799] BTRFS info (device loop4): checking UUID tree [ 92.214637][ T5835] loop1: detected capacity change from 0 to 32768 [ 92.247431][ T5835] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (5835) [ 92.259633][ T5876] loop0: detected capacity change from 0 to 256 [ 92.320483][ T5835] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 92.405496][ T5835] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 92.480280][ T5835] BTRFS info (device loop1): using free-space-tree [ 92.654873][ T5111] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.858285][ T5112] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 94.094969][ T5921] loop4: detected capacity change from 0 to 512 [ 94.113838][ T5918] loop2: detected capacity change from 0 to 1024 [ 94.166822][ T5921] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 94.197668][ T5921] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 94.210075][ T5921] EXT4-fs (loop4): 1 truncate cleaned up [ 94.217209][ T5921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.254297][ T5918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.497403][ T5918] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 94.540356][ T5111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.606905][ T5918] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 94.682607][ T5918] EXT4-fs (loop2): This should not happen!! Data will be lost [ 94.682607][ T5918] [ 94.707808][ T5931] loop1: detected capacity change from 0 to 40427 [ 94.722039][ T5931] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 94.729813][ T5931] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 94.748311][ T5918] EXT4-fs (loop2): Total free blocks count 0 [ 94.755107][ T5931] F2FS-fs (loop1): invalid crc value [ 94.761927][ T5918] EXT4-fs (loop2): Free/Dirty block details [ 94.768668][ T5918] EXT4-fs (loop2): free_blocks=68451041280 [ 94.774812][ T5918] EXT4-fs (loop2): dirty_blocks=32 [ 94.780666][ T5918] EXT4-fs (loop2): Block reservation details [ 94.787878][ T5918] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 94.799250][ T5931] F2FS-fs (loop1): Found nat_bits in checkpoint [ 94.874670][ T5931] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 94.882068][ T5931] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 94.941466][ T2826] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 95.717721][ T29] audit: type=1800 audit(1717368819.152:6): pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 96.113779][ T5112] syz-executor.1: attempt to access beyond end of device [ 96.113779][ T5112] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.144805][ T5112] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 96.236867][ T5911] loop0: detected capacity change from 0 to 40427 [ 96.267825][ T5911] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 96.308537][ T5911] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 96.384861][ T5911] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.600784][ T5911] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 96.616762][ T5911] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.675041][ T5909] dccp_close: ABORT with 28 bytes unread [ 96.965037][ T5941] loop4: detected capacity change from 0 to 32768 [ 97.081741][ T5941] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 97.184274][ T5941] XFS (loop4): Ending clean mount [ 97.192358][ T5941] XFS (loop4): Quotacheck needed: Please wait. [ 97.296713][ T5941] XFS (loop4): Quotacheck: Done. [ 97.336445][ T5976] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 97.456944][ T5111] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 97.775726][ T5217] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.985435][ T5217] usb 1-1: Using ep0 maxpacket: 16 [ 98.006458][ T5217] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.050365][ T5217] usb 1-1: config 0 has no interface number 0 [ 98.086844][ T5217] usb 1-1: New USB device found, idVendor=22b7, idProduct=150d, bcdDevice=27.77 [ 98.116707][ T5217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.179134][ T5217] usb 1-1: Product: syz [ 98.206871][ T5217] usb 1-1: Manufacturer: syz [ 98.238712][ T5217] usb 1-1: SerialNumber: syz [ 98.301048][ T5996] loop3: detected capacity change from 0 to 40427 [ 98.309615][ T5996] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 98.316387][ T5217] usb 1-1: config 0 descriptor?? [ 98.317327][ T5996] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 98.343937][ T5996] F2FS-fs (loop3): invalid crc value [ 98.373640][ T5996] F2FS-fs (loop3): Found nat_bits in checkpoint [ 98.393839][ T5217] ftdi_sio 1-1:0.1: FTDI USB Serial Device converter detected [ 98.449109][ T5996] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 98.456389][ T5996] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 98.496440][ T5217] ftdi_sio ttyUSB0: unknown device type: 0x2777 [ 98.693141][ T929] usb 1-1: USB disconnect, device number 2 [ 98.783338][ T929] ftdi_sio 1-1:0.1: device disconnected [ 98.924829][ T29] audit: type=1800 audit(1717368822.692:7): pid=6013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 99.289518][ T6015] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 99.500387][ T5114] syz-executor.3: attempt to access beyond end of device [ 99.500387][ T5114] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.526124][ T5114] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 99.876471][ T6023] loop2: detected capacity change from 0 to 4096 [ 99.941864][ T6023] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 100.131221][ T6032] loop0: detected capacity change from 0 to 256 [ 100.216673][ T6032] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 100.234620][ T5998] loop1: detected capacity change from 0 to 40427 [ 100.277680][ T5998] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 100.305687][ T5998] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 100.344766][ T5998] F2FS-fs (loop1): Found nat_bits in checkpoint [ 100.511571][ T5998] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 100.540215][ T5998] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 100.868592][ T6046] loop4: detected capacity change from 0 to 256 [ 100.946295][ T6048] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 101.495592][ T5119] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.595349][ T5128] Bluetooth: hci0: command tx timeout [ 102.095658][ T5119] usb 3-1: Using ep0 maxpacket: 16 [ 102.117967][ T5119] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.145689][ T5119] usb 3-1: config 0 has no interface number 0 [ 102.164668][ T5119] usb 3-1: New USB device found, idVendor=22b7, idProduct=150d, bcdDevice=27.77 [ 102.192079][ T5119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.237871][ T5119] usb 3-1: Product: syz [ 102.244406][ T5119] usb 3-1: Manufacturer: syz [ 102.261563][ T5119] usb 3-1: SerialNumber: syz [ 102.301753][ T5119] usb 3-1: config 0 descriptor?? [ 102.334536][ T5119] ftdi_sio 3-1:0.1: FTDI USB Serial Device converter detected [ 102.371267][ T5119] ftdi_sio ttyUSB0: unknown device type: 0x2777 [ 102.596580][ T5119] usb 3-1: USB disconnect, device number 2 [ 102.619059][ T5119] ftdi_sio 3-1:0.1: device disconnected [ 102.900586][ T6058] loop3: detected capacity change from 0 to 32768 [ 102.920004][ T6058] btrfs: Deprecated parameter 'usebackuproot' [ 102.936243][ T6058] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 102.961377][ T6058] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6058) [ 102.985628][ T6058] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.004011][ T6058] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 103.013320][ T929] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.090897][ T6058] BTRFS info (device loop3): rebuilding free space tree [ 103.142070][ T6058] BTRFS info (device loop3): disabling free space tree [ 103.161810][ T6058] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.186231][ T6058] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.205965][ T929] usb 5-1: Using ep0 maxpacket: 8 [ 103.220620][ T929] usb 5-1: New USB device found, idVendor=0742, idProduct=2008, bcdDevice=3c.8b [ 103.249981][ T929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.284080][ T929] usb 5-1: Product: syz [ 103.301993][ T929] usb 5-1: Manufacturer: syz [ 103.316821][ T929] usb 5-1: SerialNumber: syz [ 103.346020][ T929] usb 5-1: config 0 descriptor?? [ 103.389478][ T929] HFC-S_USB 5-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 103.399155][ T6066] loop1: detected capacity change from 0 to 32768 [ 103.416658][ T6066] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6066) [ 103.464695][ T6066] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.517073][ T6066] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 103.543727][ T6066] BTRFS info (device loop1): using free-space-tree [ 103.597883][ T929] usb 5-1: USB disconnect, device number 2 [ 103.664670][ T5114] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.684897][ T6099] loop0: detected capacity change from 0 to 2048 [ 103.770136][ T29] audit: type=1800 audit(1717368827.592:8): pid=6066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 103.840349][ T6099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.910658][ T6099] ext4 filesystem being mounted at /root/syzkaller-testdir3876189217/syzkaller.gIutpy/50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.022758][ T6099] fs-verity: sha256 using implementation "sha256-avx2" [ 104.033481][ T5112] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.064573][ T6099] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 345: padding at end of block bitmap is not set [ 104.146282][ T6099] fs-verity (loop0, inode 13): Error -117 writing Merkle tree block 0 [ 104.201580][ T6099] fs-verity (loop0, inode 13): Error -117 building Merkle tree [ 104.391079][ T5118] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.690233][ T6139] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 104.705734][ T6139] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 104.721562][ T6140] loop1: detected capacity change from 0 to 128 [ 104.812371][ T6140] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 104.905103][ T6140] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.984735][ T6137] loop0: detected capacity change from 0 to 32768 [ 105.027920][ T29] audit: type=1800 audit(1717368828.852:9): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=5 res=0 errno=0 [ 105.137684][ T29] audit: type=1804 audit(1717368828.902:10): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3876189217/syzkaller.gIutpy/51/file2/file2" dev="loop0" ino=5 res=1 errno=0 [ 105.502800][ T6125] loop2: detected capacity change from 0 to 32768 [ 105.524369][ T6125] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6125) [ 105.589371][ T6125] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 105.604755][ T6125] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 105.618716][ T6125] BTRFS info (device loop2): using free-space-tree [ 105.805498][ T5119] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.826663][ T5117] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 106.006765][ T5119] usb 1-1: Using ep0 maxpacket: 8 [ 106.055576][ T5119] usb 1-1: New USB device found, idVendor=0742, idProduct=2008, bcdDevice=3c.8b [ 106.064660][ T5119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.095516][ T5119] usb 1-1: Product: syz [ 106.101517][ T5119] usb 1-1: Manufacturer: syz [ 106.135332][ T5119] usb 1-1: SerialNumber: syz [ 106.176685][ T5119] usb 1-1: config 0 descriptor?? [ 106.199488][ T5119] HFC-S_USB 1-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 106.456178][ T5119] usb 1-1: USB disconnect, device number 3 [ 107.584917][ T6205] loop3: detected capacity change from 0 to 32768 [ 107.627535][ T6205] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6205) [ 107.699890][ T6205] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 107.754327][ T6205] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 107.797468][ T6205] BTRFS info (device loop3): using free-space-tree [ 108.199431][ T5114] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 108.881836][ T6252] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 108.958944][ T6214] loop0: detected capacity change from 0 to 40427 [ 108.996411][ T6214] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 109.015504][ T6214] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 109.101921][ T6259] loop3: detected capacity change from 0 to 2048 [ 109.107244][ T6214] F2FS-fs (loop0): Found nat_bits in checkpoint [ 109.212143][ T6214] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 109.213296][ T6259] Alternate GPT is invalid, using primary GPT. [ 109.225382][ T6214] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 109.226445][ T6259] loop3: p2 p3 p7 [ 109.295437][ T6214] syz-executor.0[6214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.295634][ T6214] syz-executor.0[6214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.357084][ T6214] syz-executor.0: attempt to access beyond end of device [ 109.357084][ T6214] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 110.837419][ T6281] loop0: detected capacity change from 0 to 32768 [ 110.850765][ T6281] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6281) [ 110.878859][ T6281] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 110.894755][ T6281] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 111.036115][ T6281] BTRFS info (device loop0): rebuilding free space tree [ 111.101899][ T6281] BTRFS info (device loop0): disabling free space tree [ 111.130346][ T6281] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.155406][ T6281] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.557434][ T5118] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 111.953336][ T6310] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 112.266927][ T6323] fuse: Bad value for 'fd' [ 112.374323][ T6325] evm: overlay not supported [ 112.573479][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.704690][ T6329] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.872974][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.100753][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.298587][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 113.343666][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.422015][ T45] usb 2-1: config 0 descriptor?? [ 113.725373][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.740170][ T6317] loop0: detected capacity change from 0 to 40427 [ 113.765350][ T6317] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 113.773120][ T6317] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 113.819247][ T6317] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.859152][ T6343] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 113.924426][ T45] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 113.925480][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 113.939397][ T45] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 113.949161][ T6317] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 113.952067][ T45] wacom 0003:056A:00D0.0001: item fetching failed at offset 3/5 [ 113.964346][ T9] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 113.973693][ T45] wacom 0003:056A:00D0.0001: parse failed [ 113.974791][ T6317] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 113.984921][ T45] wacom 0003:056A:00D0.0001: probe with driver wacom failed with error -22 [ 113.992533][ T9] usb 3-1: config 0 has no interface number 0 [ 114.004713][ T9] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 114.044271][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= f.88 [ 114.060263][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.079509][ T9] usb 3-1: Product: syz [ 114.094783][ T9] usb 3-1: Manufacturer: syz [ 114.105920][ T9] usb 3-1: SerialNumber: syz [ 114.118455][ T6317] syz-executor.0[6317] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.118728][ T6317] syz-executor.0[6317] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.130319][ T45] usb 2-1: USB disconnect, device number 2 [ 114.152988][ T9] usb 3-1: config 0 descriptor?? [ 114.164871][ T6333] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 114.190653][ T6317] syz-executor.0: attempt to access beyond end of device [ 114.190653][ T6317] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 115.105495][ T929] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.320523][ T6361] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 115.341595][ T929] usb 4-1: Using ep0 maxpacket: 32 [ 115.377724][ T929] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 115.442298][ T929] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 115.517894][ T929] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 115.591587][ T929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.627895][ T929] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.674377][ T929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 115.712229][ T929] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 115.729229][ T929] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.787367][ T929] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 115.819879][ T929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.840400][ T929] usb 4-1: config 0 descriptor?? [ 115.851660][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.924257][ C0] hrtimer: interrupt took 43948 ns [ 116.125150][ T929] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 116.167292][ T930] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.198451][ T929] usb 4-1: USB disconnect, device number 2 [ 116.230996][ T929] usblp0: removed [ 116.389437][ T930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.409347][ T930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.421278][ T930] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 116.431139][ T930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.443129][ T930] usb 5-1: config 0 descriptor?? [ 116.576515][ T29] audit: type=1800 audit(1717368840.402:11): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 116.629403][ T29] audit: type=1800 audit(1717368840.422:12): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 116.649531][ T9] usb 3-1: invalid MIDI in EP 0 [ 116.919475][ T9] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 116.967126][ T930] wacom 0003:056A:00D0.0002: unknown main item tag 0x0 [ 116.975924][ T9] usb 3-1: USB disconnect, device number 3 [ 117.000802][ T930] wacom 0003:056A:00D0.0002: unknown main item tag 0x0 [ 117.033229][ T930] wacom 0003:056A:00D0.0002: item fetching failed at offset 3/5 [ 117.064385][ T5096] udevd[5096]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.094380][ T930] wacom 0003:056A:00D0.0002: parse failed [ 117.119292][ T930] wacom 0003:056A:00D0.0002: probe with driver wacom failed with error -22 [ 117.176252][ T930] usb 5-1: USB disconnect, device number 3 [ 117.683506][ T6423] loop2: detected capacity change from 0 to 256 [ 117.695485][ T6424] loop3: detected capacity change from 0 to 64 [ 117.892837][ T6429] loop4: detected capacity change from 0 to 256 [ 117.903244][ T6429] exfat: Deprecated parameter 'utf8' [ 117.908959][ T6429] exfat: Deprecated parameter 'utf8' [ 117.956901][ T6429] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 118.451523][ T6432] dccp_close: ABORT with 28 bytes unread [ 118.745874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.754430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.763039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.802267][ T6439] bond0: entered promiscuous mode [ 118.843515][ T6439] bond_slave_0: entered promiscuous mode [ 118.883496][ T6439] bond_slave_1: entered promiscuous mode [ 118.980391][ T6439] team0: entered promiscuous mode [ 119.028697][ T6439] team_slave_0: entered promiscuous mode [ 119.117464][ T6439] team_slave_1: entered promiscuous mode [ 119.765452][ T5119] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 119.802911][ T6463] loop4: detected capacity change from 0 to 512 [ 119.900527][ T6463] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 119.957411][ T6463] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 119.989612][ T5119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.008793][ T6463] System zones: 0-1, 15-15, 18-18, 34-34 [ 120.014954][ T6463] EXT4-fs (loop4): orphan cleanup on readonly fs [ 120.032886][ T6463] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 120.041996][ T5119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.068428][ T6463] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 120.101734][ T5119] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 120.134921][ T5119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.141086][ T6463] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 120.167006][ T6463] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 16 [ 120.185872][ T5119] usb 2-1: config 0 descriptor?? [ 120.212314][ T6463] ext4_test_bit(bit=15, block=18) = 1 [ 120.231765][ T6463] is_bad_inode(inode)=0 [ 120.243573][ T6473] loop0: detected capacity change from 0 to 1024 [ 120.244473][ T6463] NEXT_ORPHAN(inode)=0 [ 120.278518][ T6463] max_ino=32 [ 120.290497][ T6463] i_nlink=2 [ 120.310164][ T6463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.344957][ T6463] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 120.415850][ T5111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.577867][ T81] hfsplus: b-tree write err: -5, ino 4 [ 120.653013][ T5119] wacom 0003:056A:00D0.0003: unknown main item tag 0x0 [ 120.692966][ T5119] wacom 0003:056A:00D0.0003: unknown main item tag 0x0 [ 120.703054][ T5119] wacom 0003:056A:00D0.0003: item fetching failed at offset 3/5 [ 120.714084][ T5119] wacom 0003:056A:00D0.0003: parse failed [ 120.720170][ T5119] wacom 0003:056A:00D0.0003: probe with driver wacom failed with error -22 [ 120.736119][ T6479] loop4: detected capacity change from 0 to 512 [ 120.763129][ T6479] EXT4-fs: Ignoring removed bh option [ 120.812277][ T6479] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 120.873814][ T9] usb 2-1: USB disconnect, device number 3 [ 120.881882][ T6479] EXT4-fs (loop4): 1 truncate cleaned up [ 120.936323][ T6479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.947913][ T6459] loop2: detected capacity change from 0 to 32768 [ 121.086004][ T6479] loop4: detected capacity change from 512 to 64 [ 121.151010][ T6459] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,background_compression=zstd,str_hash=crc32c,nojournal_transaction_names [ 121.173272][ T6479] syz-executor.4: attempt to access beyond end of device [ 121.173272][ T6479] loop4: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 121.174064][ T6459] bcachefs (loop2): recovering from clean shutdown, journal seq 8 [ 121.196007][ T6459] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 121.196007][ T6459] running recovery passes: check_allocations [ 121.282122][ T6459] bcachefs (loop2): accounting_read... done [ 121.319802][ T6459] bcachefs (loop2): alloc_read... done [ 121.343742][ T6459] bcachefs (loop2): stripes_read... done [ 121.366039][ T5111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.377038][ T6459] bcachefs (loop2): snapshots_read... done [ 121.387777][ T6459] bcachefs (loop2): check_allocations... [ 121.407260][ T6459] btree ptr not marked in member info btree allocated bitmap [ 121.407282][ T6459] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq efdd7a26d7396dd5 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, shutting down [ 121.461221][ T6459] bcachefs (loop2): inconsistency detected - emergency read only at journal seq 8 [ 121.471295][ T6459] bcachefs (loop2): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 121.505404][ T6459] bcachefs (loop2): bch2_gc_btrees(): error fsck_errors_not_fixed [ 121.564177][ T6501] loop4: detected capacity change from 0 to 512 [ 121.585585][ T6459] bucket 0:26 gen 0 has wrong data_type: got btree, should be need_discard, shutting down [ 121.612070][ T6459] bcachefs (loop2): bch2_gc_alloc_done(): error fsck_errors_not_fixed [ 121.641836][ T6459] bcachefs (loop2): bch2_check_allocations(): error fsck_errors_not_fixed [ 121.667887][ T6459] bcachefs (loop2): bch2_fs_recovery(): error fsck_errors_not_fixed [ 121.691922][ T6501] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz-executor.4: bg 0: block 5: invalid block bitmap [ 121.706690][ T6459] bcachefs (loop2): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 121.716643][ T6501] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 121.727786][ T6501] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 3 (level 2) [ 121.753217][ T6501] EXT4-fs (loop4): 1 orphan inode deleted [ 121.759847][ T6501] EXT4-fs (loop4): 1 truncate cleaned up [ 121.767659][ T6501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.778580][ T6459] bcachefs (loop2): shutting down [ 121.835375][ T6501] loop4: detected capacity change from 512 to 0 [ 121.861098][ T6506] syz-executor.4: attempt to access beyond end of device [ 121.861098][ T6506] loop4: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 121.880284][ T6506] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 121.891000][ T6459] bcachefs (loop2): shutdown complete [ 121.895359][ T6506] EXT4-fs error (device loop4) in ext4_update_primary_sb:90: IO failure [ 121.906451][ T6506] EXT4-fs (loop4): previous I/O error to superblock detected [ 121.918739][ T6506] syz-executor.4: attempt to access beyond end of device [ 121.918739][ T6506] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 121.955378][ T6506] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 121.973275][ T6506] EXT4-fs (loop4): I/O error while writing superblock [ 121.982137][ T6508] loop1: detected capacity change from 0 to 16 [ 122.005788][ T6506] EXT4-fs (loop4): Failed to update primary superblock [ 122.014457][ T6508] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 122.110446][ T5111] syz-executor.4: attempt to access beyond end of device [ 122.110446][ T5111] loop4: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 122.124489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 122.133136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 122.195874][ T5111] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor.4: error -5 reading directory block [ 122.212325][ T6484] loop0: detected capacity change from 0 to 32768 [ 122.249471][ T5111] syz-executor.4: attempt to access beyond end of device [ 122.249471][ T5111] loop4: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 122.266402][ T6484] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6484) [ 122.294965][ T5111] syz-executor.4: attempt to access beyond end of device [ 122.294965][ T5111] loop4: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 122.297626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.372841][ T5111] syz-executor.4: attempt to access beyond end of device [ 122.372841][ T5111] loop4: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 122.443830][ T5111] syz-executor.4: attempt to access beyond end of device [ 122.443830][ T5111] loop4: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 122.458303][ T6484] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 122.488993][ T5111] syz-executor.4: attempt to access beyond end of device [ 122.488993][ T5111] loop4: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 122.509422][ T6484] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 122.545722][ T6484] BTRFS info (device loop0): using free-space-tree [ 122.581762][ T5111] syz-executor.4: attempt to access beyond end of device [ 122.581762][ T5111] loop4: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 122.620520][ T5111] EXT4-fs error (device loop4): ext4_get_inode_loc:4495: inode #2: block 5: comm syz-executor.4: unable to read itable block [ 122.633807][ T5111] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 122.642430][ T5111] EXT4-fs (loop4): I/O error while writing superblock [ 122.649401][ T5111] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5731: IO failure [ 122.660596][ T5111] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 122.686726][ T5111] EXT4-fs (loop4): I/O error while writing superblock [ 122.699205][ T5111] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz-executor.4: mark_inode_dirty error [ 122.718013][ T5111] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 122.731317][ T5111] EXT4-fs (loop4): I/O error while writing superblock [ 122.799016][ T81] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4480: inode #2: block 5: comm kworker/u8:4: unable to read itable block [ 122.818179][ T6507] ALSA: mixer_oss: invalid OSS volume '' [ 122.887346][ T81] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 122.926782][ T81] EXT4-fs (loop4): I/O error while writing superblock [ 122.980311][ T5118] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 123.004170][ T6498] loop3: detected capacity change from 0 to 40427 [ 123.048857][ T5111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.082856][ T5111] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 123.104126][ T5111] EXT4-fs (loop4): I/O error while writing superblock [ 123.113446][ T6498] F2FS-fs (loop3): Found nat_bits in checkpoint [ 123.371488][ T6498] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 123.880628][ T29] audit: type=1800 audit(1717368847.562:13): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 124.287342][ T6543] loop1: detected capacity change from 0 to 1024 [ 124.328608][ T5114] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 124.449394][ T1047] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.652493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 124.661677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.704687][ T1047] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.739126][ T11] hfsplus: b-tree write err: -5, ino 4 [ 124.754920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 124.796472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 124.818174][ T6548] loop0: detected capacity change from 0 to 2048 [ 124.895381][ T6548] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 124.917906][ T1047] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.957995][ T6548] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.239913][ T1047] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.514047][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.541946][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.551151][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.566230][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.574055][ T5120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 126.582313][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.808817][ T1047] bridge_slave_1: left allmulticast mode [ 126.826062][ T1047] bridge_slave_1: left promiscuous mode [ 126.837891][ T1047] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.890291][ T1047] bridge_slave_0: left allmulticast mode [ 126.915604][ T1047] bridge_slave_0: left promiscuous mode [ 126.941530][ T1047] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.419931][ T6568] loop3: detected capacity change from 0 to 40427 [ 127.443080][ T6568] F2FS-fs (loop3): invalid crc value [ 127.477234][ T6568] F2FS-fs (loop3): Found nat_bits in checkpoint [ 127.650098][ T6568] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 127.751599][ T6568] syz-executor.3[6568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.751746][ T6568] syz-executor.3[6568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.821431][ T6571] loop1: detected capacity change from 0 to 40427 [ 127.837230][ T6568] bio_check_eod: 20 callbacks suppressed [ 127.837247][ T6568] syz-executor.3: attempt to access beyond end of device [ 127.837247][ T6568] loop3: rw=2049, sector=53248, nr_sectors = 128 limit=40427 [ 127.913031][ T6571] F2FS-fs (loop1): Found nat_bits in checkpoint [ 127.992479][ T5114] syz-executor.3: attempt to access beyond end of device [ 127.992479][ T5114] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.011394][ T5114] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 128.051680][ T6571] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 128.082897][ T1047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.230611][ T1047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.274928][ T1047] bond0 (unregistering): Released all slaves [ 128.485320][ T6596] syz-executor.1: attempt to access beyond end of device [ 128.485320][ T6596] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 128.508172][ T6596] syz-executor.1: attempt to access beyond end of device [ 128.508172][ T6596] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 128.636490][ T5120] Bluetooth: hci0: command tx timeout [ 128.883202][ T29] audit: type=1800 audit(1717368852.272:14): pid=6596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 129.116179][ T5112] syz-executor.1: attempt to access beyond end of device [ 129.116179][ T5112] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.174691][ T5112] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 129.207849][ T1047] Κό: left promiscuous mode [ 129.789713][ T6616] loop3: detected capacity change from 0 to 2048 [ 129.824530][ T6616] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 129.881934][ T6616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.195672][ T6569] chnl_net:caif_netlink_parms(): no params data found [ 130.206779][ T930] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.803236][ T5128] Bluetooth: hci0: command tx timeout [ 131.374703][ T1047] hsr_slave_0: left promiscuous mode [ 131.381646][ T1047] hsr_slave_1: left promiscuous mode [ 131.385551][ T930] usb 3-1: device descriptor read/64, error -71 [ 131.393815][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.426665][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.456662][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.479504][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.555607][ T1047] veth1_macvtap: left promiscuous mode [ 131.561749][ T1047] veth0_macvtap: left promiscuous mode [ 131.571225][ T1047] veth1_vlan: left promiscuous mode [ 131.583008][ T1047] veth0_vlan: left promiscuous mode [ 131.675954][ T930] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.847784][ T930] usb 3-1: device descriptor read/64, error -71 [ 131.968562][ T930] usb usb3-port1: attempt power cycle [ 132.182264][ T1047] team0 (unregistering): Port device team_slave_1 removed [ 132.234499][ T1047] team0 (unregistering): Port device team_slave_0 removed [ 132.389606][ T930] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.435936][ T930] usb 3-1: device descriptor read/8, error -71 [ 132.704971][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.725581][ T930] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.765835][ T930] usb 3-1: device descriptor read/8, error -71 [ 132.775666][ T6638] team1: Mode changed to "loadbalance" [ 132.796682][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.876898][ T5128] Bluetooth: hci0: command 0x040f tx timeout [ 132.888892][ T6649] vlan2: entered promiscuous mode [ 132.893923][ T6649] team_slave_1: entered promiscuous mode [ 132.900551][ T930] usb usb3-port1: unable to enumerate USB device [ 132.944060][ T6649] team_slave_1: left promiscuous mode [ 133.023822][ T6569] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.037348][ T6569] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.069544][ T6569] bridge_slave_0: entered allmulticast mode [ 133.099105][ T6569] bridge_slave_0: entered promiscuous mode [ 133.122133][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.128662][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.160675][ T6569] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.177059][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.184294][ T6569] bridge_slave_1: entered allmulticast mode [ 133.213815][ T6569] bridge_slave_1: entered promiscuous mode [ 133.442223][ T6569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.488461][ T6569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.788148][ T6569] team0: Port device team_slave_0 added [ 133.965942][ T6569] team0: Port device team_slave_1 added [ 134.131737][ T6569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.147229][ T6569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.205622][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.244453][ T6569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.289995][ T6569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.315034][ T6569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.319423][ T6654] loop0: detected capacity change from 0 to 40427 [ 134.386093][ T9] usb 2-1: device descriptor read/64, error -71 [ 134.416915][ T6569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.504080][ T6654] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.665715][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.690084][ T6654] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 134.740748][ T6569] hsr_slave_0: entered promiscuous mode [ 134.825380][ T9] usb 2-1: device descriptor read/64, error -71 [ 134.956866][ T6569] hsr_slave_1: entered promiscuous mode [ 134.963325][ T9] usb usb2-port1: attempt power cycle [ 134.975064][ T5120] Bluetooth: hci0: command 0x040f tx timeout [ 135.011630][ T6569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.159497][ T6716] syz-executor.0: attempt to access beyond end of device [ 135.159497][ T6716] loop0: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 135.182106][ T6716] syz-executor.0: attempt to access beyond end of device [ 135.182106][ T6716] loop0: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 135.256829][ T29] audit: type=1800 audit(1717368858.952:15): pid=6716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 135.277726][ T6569] Cannot create hsr debugfs directory [ 135.758413][ T5118] syz-executor.0: attempt to access beyond end of device [ 135.758413][ T5118] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.807918][ T5118] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 136.015390][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 136.084241][ T9] usb 2-1: device descriptor read/8, error -71 [ 136.371692][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.436556][ T9] usb 2-1: device descriptor read/8, error -71 [ 136.562164][ T9] usb usb2-port1: unable to enumerate USB device [ 137.034476][ T6741] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 137.052013][ T5120] Bluetooth: hci0: command 0x040f tx timeout [ 137.391735][ T6569] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 137.418452][ T6569] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 137.495453][ T6569] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 137.531098][ T6569] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 137.777889][ T6763] loop1: detected capacity change from 0 to 2048 [ 137.841618][ T6767] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.001803][ T6569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.025483][ T5164] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.195647][ T5164] usb 4-1: device descriptor read/64, error -71 [ 138.224592][ T6569] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.321536][ T6767] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 138.343899][ T6767] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 138.346937][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.360206][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.399904][ T6767] Remounting filesystem read-only [ 138.414300][ T11] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 138.421659][ T11] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 138.429410][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 138.439167][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 138.449577][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 138.454815][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.459355][ T11] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 138.465653][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.475447][ T11] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 138.515798][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 138.550396][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 138.559721][ T5164] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.610482][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 138.615194][ T5112] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 138.616721][ T5112] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 138.616743][ T5112] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 138.616759][ T5112] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 138.616772][ T5112] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 138.616787][ T5112] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 138.618129][ T5112] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 138.618150][ T5112] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 138.618166][ T5112] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 138.618184][ T5112] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 138.618201][ T5112] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 138.631520][ T5112] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 138.631543][ T5112] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 138.631560][ T5112] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 138.631576][ T5112] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 138.631592][ T5112] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 138.631859][ T5112] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 138.631878][ T5112] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 138.631901][ T5112] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 138.631917][ T5112] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 138.631932][ T5112] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 138.631953][ T5112] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 138.631968][ T5112] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 138.631984][ T5112] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 138.631998][ T5112] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 138.632013][ T5112] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 138.745951][ T5164] usb 4-1: device descriptor read/64, error -71 [ 138.865944][ T5164] usb usb4-port1: attempt power cycle [ 139.218753][ T6802] loop0: detected capacity change from 0 to 512 [ 139.245045][ T6802] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 139.245856][ T6802] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 139.245987][ T6802] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 139.246876][ T6802] EXT4-fs (loop0): 1 truncate cleaned up [ 139.248214][ T6802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.293707][ T6569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.463966][ T5164] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 139.470307][ T5118] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.502642][ T5164] usb 4-1: device descriptor read/8, error -71 [ 139.696687][ T29] audit: type=1800 audit(1717368863.522:16): pid=6819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 139.817184][ T5164] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 139.835010][ T6823] loop1: detected capacity change from 0 to 2048 [ 139.857395][ T5195] libceph: connect (1)[c::]:6789 error -101 [ 139.863456][ T5195] libceph: mon0 (1)[c::]:6789 connect error [ 139.873267][ T5164] usb 4-1: device descriptor read/8, error -71 [ 139.928183][ T6823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.997156][ T5164] usb usb4-port1: unable to enumerate USB device [ 140.021669][ T6827] ceph: No mds server is up or the cluster is laggy [ 140.025025][ T6569] veth0_vlan: entered promiscuous mode [ 140.085711][ T6823] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 140.090760][ T6569] veth1_vlan: entered promiscuous mode [ 140.129055][ T6823] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 201 with error 28 [ 140.186735][ T6823] EXT4-fs (loop1): This should not happen!! Data will be lost [ 140.186735][ T6823] [ 140.223249][ T6569] veth0_macvtap: entered promiscuous mode [ 140.235551][ T6823] EXT4-fs (loop1): Total free blocks count 0 [ 140.242173][ T6823] EXT4-fs (loop1): Free/Dirty block details [ 140.257814][ T6823] EXT4-fs (loop1): free_blocks=2415919104 [ 140.266772][ T6569] veth1_macvtap: entered promiscuous mode [ 140.280364][ T6823] EXT4-fs (loop1): dirty_blocks=224 [ 140.312082][ T6823] EXT4-fs (loop1): Block reservation details [ 140.318829][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.339352][ T6843] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 140.352590][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.364522][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.365656][ T6843] EXT4-fs (loop1): This should not happen!! Data will be lost [ 140.365656][ T6843] [ 140.383773][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.396154][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.410565][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.422544][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.451468][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.473530][ T6569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.508755][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.553294][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.606692][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.628367][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.668476][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.694774][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.710470][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.741086][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.768778][ T6569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.815647][ T6569] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.824388][ T6569] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.864254][ T6569] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.895328][ T6569] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.227958][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.277732][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.331529][ T6872] loop1: detected capacity change from 0 to 4096 [ 141.395773][ T2876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.438227][ T6872] NILFS (loop1): invalid segment: Checksum error in segment payload [ 141.440474][ T2876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.489155][ T6872] NILFS (loop1): trying rollback from an earlier position [ 141.570370][ T6872] NILFS (loop1): recovery complete [ 141.620190][ T6889] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.779763][ T6866] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 143.676800][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.836510][ T5195] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 144.006189][ T6717] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 144.045333][ T5195] usb 4-1: Using ep0 maxpacket: 32 [ 144.058575][ T5195] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 144.081228][ T6905] loop4: detected capacity change from 0 to 32768 [ 144.087836][ T5195] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 144.114896][ T6905] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6905) [ 144.129704][ T5195] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 144.147881][ T5195] usb 4-1: config 1 has no interface number 0 [ 144.166704][ T5195] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.193145][ T6905] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.195706][ T6717] usb 2-1: Using ep0 maxpacket: 16 [ 144.209212][ T5195] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 144.234227][ T6905] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 144.251997][ T5195] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 144.264012][ T6905] BTRFS info (device loop4): using free-space-tree [ 144.281506][ T5195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.296041][ T6717] usb 2-1: New USB device found, idVendor=22b7, idProduct=150d, bcdDevice=27.77 [ 144.305106][ T6717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.319678][ T5195] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 144.345783][ T6717] usb 2-1: Product: syz [ 144.365496][ T6717] usb 2-1: Manufacturer: syz [ 144.370136][ T6717] usb 2-1: SerialNumber: syz [ 144.388088][ T6717] usb 2-1: config 0 descriptor?? [ 144.572324][ T5195] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 144.601355][ T8] usb 2-1: USB disconnect, device number 8 [ 144.700922][ T6936] loop2: detected capacity change from 0 to 32768 [ 144.792957][ T6569] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.915203][ T5195] usb 4-1: USB disconnect, device number 7 [ 144.942174][ T5195] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 146.767766][ T6989] loop4: detected capacity change from 0 to 4096 [ 146.845685][ T6989] NILFS (loop4): invalid segment: Checksum error in segment payload [ 146.845924][ T929] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 146.853694][ T6989] NILFS (loop4): trying rollback from an earlier position [ 146.905659][ T6989] NILFS (loop4): recovery complete [ 146.955929][ T6991] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.057569][ T929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.079598][ T929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.126815][ T929] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 147.158719][ T929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.203907][ T929] usb 1-1: config 0 descriptor?? [ 147.568951][ T6982] loop3: detected capacity change from 0 to 32768 [ 147.615480][ T6982] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6982) [ 147.660787][ T929] itetech 0003:06CB:73F5.0004: unknown main item tag 0x0 [ 147.704283][ T6982] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.707794][ T929] itetech 0003:06CB:73F5.0004: hidraw0: USB HID v0.00 Device [HID 06cb:73f5] on usb-dummy_hcd.0-1/input0 [ 147.751840][ T6982] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 147.826445][ T6982] BTRFS info (device loop3): using free-space-tree [ 147.868103][ T929] usb 1-1: USB disconnect, device number 4 [ 147.885764][ T6990] loop1: detected capacity change from 0 to 32768 [ 148.212729][ T5114] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 148.385702][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 148.626011][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 148.632892][ T8] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 148.660333][ T7016] loop0: detected capacity change from 0 to 2048 [ 148.675421][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.701841][ T7016] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 148.715640][ T8] usb 5-1: config 0 descriptor?? [ 148.744571][ T5195] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 148.769664][ T7016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.075411][ T5195] usb 2-1: Using ep0 maxpacket: 16 [ 149.097621][ T5195] usb 2-1: New USB device found, idVendor=22b7, idProduct=150d, bcdDevice=27.77 [ 149.112251][ T5195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.488676][ T5195] usb 2-1: Product: syz [ 150.497025][ T5195] usb 2-1: Manufacturer: syz [ 150.502047][ T5195] usb 2-1: SerialNumber: syz [ 150.510023][ T5195] usb 2-1: config 0 descriptor?? [ 150.725322][ T5195] usb 2-1: USB disconnect, device number 9 [ 151.107441][ T7036] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 151.117017][ T7036] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.201602][ T7057] loop2: detected capacity change from 0 to 4096 [ 152.217305][ T8] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 152.866010][ T8] asix 5-1:0.0: probe with driver asix failed with error -71 [ 152.877366][ T8] usb 5-1: USB disconnect, device number 4 [ 152.938268][ T7057] NILFS (loop2): invalid segment: Checksum error in segment payload [ 152.992828][ T7057] NILFS (loop2): trying rollback from an earlier position [ 153.055689][ T7057] NILFS (loop2): recovery complete [ 153.070648][ T7067] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.645490][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 153.837854][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 153.879491][ T8] usb 5-1: New USB device found, idVendor=22b7, idProduct=150d, bcdDevice=27.77 [ 153.907823][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.941089][ T8] usb 5-1: Product: syz [ 153.952820][ T8] usb 5-1: Manufacturer: syz [ 153.968938][ T8] usb 5-1: SerialNumber: syz [ 153.991455][ T8] usb 5-1: config 0 descriptor?? [ 153.997656][ T7090] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.061221][ T7090] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.214416][ T8] usb 5-1: USB disconnect, device number 5 [ 154.444396][ T7061] loop1: detected capacity change from 0 to 40427 [ 154.477451][ T7061] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 154.502663][ T7061] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 154.566328][ T7061] F2FS-fs (loop1): Found nat_bits in checkpoint [ 154.773629][ T7061] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 154.805377][ T7061] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 156.221339][ T7131] syz-executor.1: attempt to access beyond end of device [ 156.221339][ T7131] loop1: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 159.748199][ T5195] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 159.815404][ T929] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 159.966631][ T5195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.986986][ T5195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.018815][ T5195] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 160.035298][ T5195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.042017][ T929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.068285][ T5195] usb 3-1: config 0 descriptor?? [ 160.084245][ T929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.095574][ T929] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 160.104776][ T929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.118342][ T929] usb 4-1: config 0 descriptor?? [ 160.252155][ T7183] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 160.571136][ T5195] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 160.592784][ T929] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 160.618962][ T5195] lg-g15 0003:046D:C222.0006: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 160.625616][ T929] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 160.678591][ T929] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 160.707721][ T929] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 160.745514][ T929] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 160.762095][ T5164] usb 3-1: USB disconnect, device number 8 [ 160.778379][ T929] logitech-hidpp-device 0003:046D:C086.0005: hidraw1: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0 [ 160.849437][ T929] usb 4-1: USB disconnect, device number 8 [ 161.080157][ T7202] loop1: detected capacity change from 0 to 512 [ 161.126284][ T7202] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz-executor.1: bg 0: block 5: invalid block bitmap [ 161.179466][ T7202] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 161.219871][ T7202] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 3 (level 2) [ 161.268431][ T7202] EXT4-fs (loop1): 1 orphan inode deleted [ 161.355363][ T7202] EXT4-fs (loop1): 1 truncate cleaned up [ 161.371676][ T7202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.268560][ T5112] EXT4-fs error (device loop1): ext4_lookup:1854: inode #17: comm syz-executor.1: iget: bad extended attribute block 6904 [ 162.389673][ T5112] EXT4-fs error (device loop1): ext4_lookup:1854: inode #17: comm syz-executor.1: iget: bad extended attribute block 6904 [ 162.466324][ T7216] input: syz1 as /devices/virtual/input/input5 [ 162.787450][ T5112] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.073748][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.142618][ T7239] loop2: detected capacity change from 0 to 512 [ 163.207972][ T7239] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz-executor.2: bg 0: block 5: invalid block bitmap [ 163.259339][ T7239] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 163.311251][ T7239] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 3 (level 2) [ 163.341270][ T7239] EXT4-fs (loop2): 1 orphan inode deleted [ 163.347590][ T7239] EXT4-fs (loop2): 1 truncate cleaned up [ 163.364647][ T7239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.365029][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.487938][ T5117] EXT4-fs error (device loop2): ext4_lookup:1854: inode #17: comm syz-executor.2: iget: bad extended attribute block 6904 [ 163.549417][ T5117] EXT4-fs error (device loop2): ext4_lookup:1854: inode #17: comm syz-executor.2: iget: bad extended attribute block 6904 [ 163.649555][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.970142][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.040801][ T5117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.078792][ T5128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.089036][ T5128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.100226][ T5128] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.117448][ T5128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.125699][ T5128] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 164.147407][ T5128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.427084][ T11] bridge_slave_1: left allmulticast mode [ 164.437457][ T11] bridge_slave_1: left promiscuous mode [ 164.450508][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.484458][ T11] bridge_slave_0: left allmulticast mode [ 164.511917][ T11] bridge_slave_0: left promiscuous mode [ 164.531895][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.201638][ T5128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.216910][ T5128] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.236665][ T5128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.247415][ T5128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.259195][ T5128] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 165.273137][ T5128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.839236][ T11] bond0 (unregistering): left promiscuous mode [ 165.866440][ T11] bond_slave_0: left promiscuous mode [ 165.877723][ T11] bond_slave_1: left promiscuous mode [ 165.897020][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.928430][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.985424][ T11] bond0 (unregistering): Released all slaves [ 166.083329][ T7285] loop0: detected capacity change from 0 to 512 [ 166.167543][ T7292] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 166.167543][ T7292] The task syz-executor.3 (7292) triggered the difference, watch for misbehavior. [ 166.195843][ T7285] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz-executor.0: bg 0: block 5: invalid block bitmap [ 166.201997][ T11] Κό: left promiscuous mode [ 166.218457][ T7285] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 166.237981][ T5120] Bluetooth: hci1: command tx timeout [ 166.243889][ T7285] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 3 (level 2) [ 166.258556][ T7285] EXT4-fs (loop0): 1 orphan inode deleted [ 166.264456][ T7285] EXT4-fs (loop0): 1 truncate cleaned up [ 166.272840][ T7285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.368261][ T5118] EXT4-fs error (device loop0): ext4_lookup:1854: inode #17: comm syz-executor.0: iget: bad extended attribute block 6904 [ 166.419191][ T5118] EXT4-fs error (device loop0): ext4_lookup:1854: inode #17: comm syz-executor.0: iget: bad extended attribute block 6904 [ 166.798924][ T7316] loop4: detected capacity change from 0 to 8 [ 167.092195][ T7258] chnl_net:caif_netlink_parms(): no params data found [ 167.107630][ T5118] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.355408][ T5120] Bluetooth: hci2: command tx timeout [ 167.387045][ T11] team0: left promiscuous mode [ 167.391867][ T11] team_slave_0: left promiscuous mode [ 167.398320][ T11] team_slave_1: left promiscuous mode [ 167.433920][ T11] hsr_slave_0: left promiscuous mode [ 167.453861][ T11] hsr_slave_1: left promiscuous mode [ 167.470452][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.485945][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.536325][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.554339][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.581009][ T29] audit: type=1804 audit(1717368891.402:17): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir276611310/syzkaller.mRBSTp/44/file0" dev="sda1" ino=1948 res=1 errno=0 [ 167.668417][ T11] veth1_macvtap: left promiscuous mode [ 167.674002][ T11] veth0_macvtap: left promiscuous mode [ 167.700489][ T11] veth1_vlan: left promiscuous mode [ 167.719430][ T11] veth0_vlan: left promiscuous mode [ 167.953272][ T5128] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.995593][ T5128] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 168.005501][ T5128] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 168.016541][ T5128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 168.024966][ T5128] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 168.033124][ T5128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.315728][ T5128] Bluetooth: hci1: command tx timeout [ 169.133906][ T11] team0 (unregistering): Port device team_slave_1 removed [ 169.236905][ T11] team0 (unregistering): Port device team_slave_0 removed [ 169.435393][ T5128] Bluetooth: hci2: command tx timeout [ 170.075457][ T5128] Bluetooth: hci4: command tx timeout [ 170.326639][ T7374] tipc: Started in network mode [ 170.331823][ T7374] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 170.346911][ T7374] tipc: Enabled bearer , priority 0 [ 170.395347][ T5128] Bluetooth: hci1: command tx timeout [ 170.410930][ T7258] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.426148][ T7258] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.433383][ T7258] bridge_slave_0: entered allmulticast mode [ 170.442174][ T7258] bridge_slave_0: entered promiscuous mode [ 170.450155][ T7268] chnl_net:caif_netlink_parms(): no params data found [ 170.541743][ T7258] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.577484][ T7258] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.581213][ T7369] loop4: detected capacity change from 0 to 32768 [ 170.591219][ T7258] bridge_slave_1: entered allmulticast mode [ 170.592531][ T7258] bridge_slave_1: entered promiscuous mode [ 170.854157][ T7258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.935412][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 170.944730][ T7258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.149098][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.161972][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.188346][ T7258] team0: Port device team_slave_0 added [ 171.213289][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.213558][ T7258] team0: Port device team_slave_1 added [ 171.229907][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.264000][ T9] usb 4-1: Product: syz [ 171.268762][ T9] usb 4-1: Manufacturer: syz [ 171.273463][ T9] usb 4-1: SerialNumber: syz [ 171.377590][ T7268] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.384801][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.392697][ T7268] bridge_slave_0: entered allmulticast mode [ 171.400501][ T7268] bridge_slave_0: entered promiscuous mode [ 171.416816][ T7258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.423799][ T7258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.460456][ T7258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.474204][ T7258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.475691][ T8] tipc: Node number set to 8432298 [ 171.486854][ T7258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.518481][ T7258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.530158][ T5128] Bluetooth: hci2: command tx timeout [ 171.539344][ T7268] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.547041][ T7268] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.556618][ T7268] bridge_slave_1: entered allmulticast mode [ 171.564032][ T7268] bridge_slave_1: entered promiscuous mode [ 171.732622][ T7412] loop4: detected capacity change from 0 to 512 [ 171.771420][ T7412] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz-executor.4: bg 0: block 5: invalid block bitmap [ 171.774467][ T7268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.810138][ T7412] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 171.839226][ T7412] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 3 (level 2) [ 171.857248][ T7412] EXT4-fs (loop4): 1 orphan inode deleted [ 171.863935][ T7412] EXT4-fs (loop4): 1 truncate cleaned up [ 171.873674][ T7412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.917109][ T7268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.948818][ T6569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.993943][ T7258] hsr_slave_0: entered promiscuous mode [ 172.004926][ T7258] hsr_slave_1: entered promiscuous mode [ 172.081007][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.156302][ T5128] Bluetooth: hci4: command tx timeout [ 172.187337][ T7268] team0: Port device team_slave_0 added [ 172.205402][ T7347] chnl_net:caif_netlink_parms(): no params data found [ 172.300716][ T9] cdc_ncm 4-1:1.0: bind() failure [ 172.337808][ T9] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 172.356294][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.372181][ T9] usb 4-1: USB disconnect, device number 9 [ 172.412595][ T7268] team0: Port device team_slave_1 added [ 172.485429][ T5128] Bluetooth: hci1: command tx timeout [ 172.686273][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.712213][ T7417] loop4: detected capacity change from 0 to 32768 [ 172.734217][ T7417] bcachefs (/dev/loop4): error reading default superblock: checksum error, type crc32c_nonzero: got 2859f616 should be 29d2fb78 [ 172.800092][ T7268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.815630][ T7268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.870403][ T7268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.973390][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.057781][ T7417] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 173.073425][ T7417] bcachefs (loop4): recovering from clean shutdown, journal seq 7 [ 173.073568][ T7268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.083137][ T7417] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 173.083137][ T7417] running recovery passes: check_allocations [ 173.110557][ T7268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.144815][ T7268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.180402][ T7417] bcachefs (loop4): accounting_read... done [ 173.180482][ T7417] bcachefs (loop4): alloc_read... done [ 173.180526][ T7417] bcachefs (loop4): stripes_read... done [ 173.180565][ T7417] bcachefs (loop4): snapshots_read... done [ 173.180685][ T7417] bcachefs (loop4): check_allocations... [ 173.182681][ T7417] ------------[ cut here ]------------ [ 173.182804][ T7417] kernel BUG at fs/bcachefs/buckets.h:96! [ 173.182848][ T7417] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 173.182870][ T7417] CPU: 1 PID: 7417 Comm: syz-executor.4 Not tainted 6.10.0-rc1-next-20240531-syzkaller #0 [ 173.182889][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 173.182898][ T7417] RIP: 0010:gc_bucket+0x250/0x260 [ 173.182932][ T7417] Code: 8c e8 34 e1 62 fd e9 29 ff ff ff 89 f9 80 e1 07 fe c1 38 c1 0f 8c 36 ff ff ff e8 9b 71 ec fd e9 2c ff ff ff e8 71 84 86 fd 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 [ 173.182947][ T7417] RSP: 0018:ffffc90004e3e208 EFLAGS: 00010246 [ 173.182963][ T7417] RAX: ffffffff840ff77f RBX: 000000000001007c RCX: 0000000000040000 [ 173.182977][ T7417] RDX: ffffc90012800000 RSI: 000000000003ffff RDI: 0000000000040000 [ 173.182997][ T7417] RBP: ffff888054094000 R08: ffffffff840ff6e1 R09: 0000000000000000 [ 173.183008][ T7417] R10: ffffc90004e3efd0 R11: fffff520009c7dfc R12: ffff88802c3ed130 [ 173.183024][ T7417] R13: ffff88802c3ed118 R14: 000000000001007c R15: 0000000000000080 [ 173.183035][ T7417] FS: 00007f58508926c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 173.183052][ T7417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.183064][ T7417] CR2: 0000000000000000 CR3: 000000007e94a000 CR4: 00000000003506f0 [ 173.183080][ T7417] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.183091][ T7417] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 173.183103][ T7417] Call Trace: [ 173.183113][ T7417] [ 173.183120][ T7417] ? __die_body+0x88/0xe0 [ 173.183146][ T7417] ? die+0xcf/0x110 [ 173.183171][ T7417] ? do_trap+0x15a/0x3a0 [ 173.183193][ T7417] ? gc_bucket+0x250/0x260 [ 173.183217][ T7417] ? do_error_trap+0x1dc/0x2c0 [ 173.183237][ T7417] ? gc_bucket+0x250/0x260 [ 173.183262][ T7417] ? __pfx_do_error_trap+0x10/0x10 [ 173.183289][ T7417] ? handle_invalid_op+0x34/0x40 [ 173.183309][ T7417] ? gc_bucket+0x250/0x260 [ 173.183330][ T7417] ? exc_invalid_op+0x38/0x50 [ 173.183357][ T7417] ? asm_exc_invalid_op+0x1a/0x20 [ 173.183382][ T7417] ? gc_bucket+0x1b1/0x260 [ 173.183403][ T7417] ? gc_bucket+0x24f/0x260 [ 173.183427][ T7417] ? gc_bucket+0x250/0x260 [ 173.183450][ T7417] ? gc_bucket+0x24f/0x260 [ 173.183474][ T7417] bch2_check_allocations+0xc63/0xb9d0 [ 173.183498][ T7417] ? bch2_check_allocations+0x67e/0xb9d0 [ 173.183519][ T7417] ? validate_chain+0x11e/0x5920 [ 173.183538][ T7417] ? bch2_btree_node_iter_init+0x36bb/0x4280 [ 173.183562][ T7417] ? __lock_acquire+0x1359/0x2000 [ 173.183595][ T7417] ? bch2_btree_path_verify_level+0x369/0x1950 [ 173.183614][ T7417] ? __bch2_journal_key_search+0x9c2/0x10e0 [ 173.183639][ T7417] ? __bch2_btree_node_iter_advance+0x577/0xaa0 [ 173.183663][ T7417] ? __pfx_bch2_btree_path_verify_level+0x10/0x10 [ 173.183683][ T7417] ? __pfx___bch2_journal_key_search+0x10/0x10 [ 173.183706][ T7417] ? bch2_btree_node_iter_advance+0x3c8/0xc70 [ 173.183726][ T7417] ? __pfx_bch2_check_allocations+0x10/0x10 [ 173.183748][ T7417] ? __asan_memset+0x23/0x50 [ 173.183769][ T7417] ? bch2_btree_path_verify_level+0x369/0x1950 [ 173.183788][ T7417] ? bch2_journal_keys_peek_upto+0x23c/0x1410 [ 173.183813][ T7417] ? bch2_journal_keys_peek_upto+0x13cd/0x1410 [ 173.183841][ T7417] ? __asan_memset+0x23/0x50 [ 173.183859][ T7417] ? bch2_btree_iter_verify_ret+0x156/0x1450 [ 173.183882][ T7417] ? __pfx_bch2_journal_keys_peek_upto+0x10/0x10 [ 173.183909][ T7417] ? __pfx_bch2_btree_iter_verify_ret+0x10/0x10 [ 173.183933][ T7417] ? validate_chain+0x11e/0x5920 [ 173.183956][ T7417] ? data_push_tail+0x716/0x730 [ 173.183983][ T7417] ? __pfx_data_push_tail+0x10/0x10 [ 173.184006][ T7417] ? prb_first_seq+0x131/0x210 [ 173.184026][ T7417] ? __pfx_validate_chain+0x10/0x10 [ 173.184047][ T7417] ? __pfx_prb_first_seq+0x10/0x10 [ 173.184066][ T7417] ? validate_chain+0x11e/0x5920 [ 173.184093][ T7417] ? __pfx_data_alloc+0x10/0x10 [ 173.184112][ T7417] ? format_decode+0x6bc/0x1bb0 [ 173.184135][ T7417] ? space_used+0x183/0x4f0 [ 173.184158][ T7417] ? __pfx_validate_chain+0x10/0x10 [ 173.184180][ T7417] ? mark_lock+0x9a/0x360 [ 173.184202][ T7417] ? __lock_acquire+0x1359/0x2000 [ 173.184237][ T7417] ? mark_lock+0x9a/0x360 [ 173.184257][ T7417] ? down_trylock+0x57/0xa0 [ 173.184278][ T7417] ? __lock_acquire+0x1359/0x2000 [ 173.184314][ T7417] ? mark_lock+0x9a/0x360 [ 173.184337][ T7417] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 173.184358][ T7417] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 173.184380][ T7417] ? irq_work_queue+0xd1/0x150 [ 173.184402][ T7417] ? __wake_up_klogd+0x112/0x140 [ 173.184420][ T7417] ? vprintk_emit+0x7ce/0x900 [ 173.184455][ T7417] ? bch2_check_allocations+0x67e/0xb9d0 [ 173.184479][ T7417] ? __bch2_print+0x17a/0x220 [ 173.184508][ T7417] ? __pfx___bch2_print+0x10/0x10 [ 173.184539][ T7417] bch2_run_recovery_pass+0xf0/0x1e0 [ 173.184564][ T7417] bch2_run_recovery_passes+0x19e/0x820 [ 173.184601][ T7417] bch2_fs_recovery+0x238b/0x3730 [ 173.184630][ T7417] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 173.184665][ T7417] ? __pfx_lock_release+0x10/0x10 [ 173.184685][ T7417] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 173.184704][ T7417] ? __pfx_lock_release+0x10/0x10 [ 173.184730][ T7417] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 173.184749][ T7417] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 173.184767][ T7417] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 173.184787][ T7417] ? llist_reverse_order+0x72/0x90 [ 173.184815][ T7417] bch2_fs_start+0x356/0x5b0 [ 173.184836][ T7417] bch2_fs_open+0xa8d/0xdf0 [ 173.184867][ T7417] ? __pfx_bch2_fs_open+0x10/0x10 [ 173.184896][ T7417] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 173.184926][ T7417] ? __pfx_bch2_test_super+0x10/0x10 [ 173.184949][ T7417] ? sget+0x2b8/0x620 [ 173.184972][ T7417] ? __pfx_bch2_noset_super+0x10/0x10 [ 173.184995][ T7417] bch2_fs_get_tree+0x75e/0x14d0 [ 173.185024][ T7417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.185054][ T7417] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 173.185101][ T7417] ? __pfx_generic_parse_monolithic+0x10/0x10 [ 173.185129][ T7417] ? apparmor_capable+0x138/0x1b0 [ 173.185152][ T7417] ? bpf_lsm_capable+0x9/0x10 [ 173.185179][ T7417] vfs_get_tree+0x90/0x2a0 [ 173.185206][ T7417] do_new_mount+0x2be/0xb40 [ 173.185231][ T7417] ? __pfx_do_new_mount+0x10/0x10 [ 173.185259][ T7417] __se_sys_mount+0x2d9/0x3c0 [ 173.185285][ T7417] ? __pfx___se_sys_mount+0x10/0x10 [ 173.185310][ T7417] ? exc_page_fault+0x590/0x8c0 [ 173.185331][ T7417] ? __x64_sys_mount+0x20/0xc0 [ 173.185357][ T7417] do_syscall_64+0xf3/0x230 [ 173.185378][ T7417] ? clear_bhb_loop+0x35/0x90 [ 173.185402][ T7417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.185425][ T7417] RIP: 0033:0x7f584fa7e5ea [ 173.185448][ T7417] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 173.185462][ T7417] RSP: 002b:00007f5850891ef8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 173.185482][ T7417] RAX: ffffffffffffffda RBX: 00007f5850891f80 RCX: 00007f584fa7e5ea [ 173.185495][ T7417] RDX: 0000000020005d80 RSI: 0000000020005dc0 RDI: 00007f5850891f40 [ 173.185506][ T7417] RBP: 0000000020005d80 R08: 00007f5850891f80 R09: 0000000000000400 [ 173.185517][ T7417] R10: 0000000000000400 R11: 0000000000000206 R12: 0000000020005dc0 [ 173.185529][ T7417] R13: 00007f5850891f40 R14: 0000000000005e05 R15: 0000000020005e00 [ 173.185548][ T7417] [ 173.185555][ T7417] Modules linked in: [ 173.185869][ T7417] ---[ end trace 0000000000000000 ]--- [ 173.219025][ T7417] RIP: 0010:gc_bucket+0x250/0x260 [ 173.219065][ T7417] Code: 8c e8 34 e1 62 fd e9 29 ff ff ff 89 f9 80 e1 07 fe c1 38 c1 0f 8c 36 ff ff ff e8 9b 71 ec fd e9 2c ff ff ff e8 71 84 86 fd 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 [ 173.219081][ T7417] RSP: 0018:ffffc90004e3e208 EFLAGS: 00010246 [ 173.219100][ T7417] RAX: ffffffff840ff77f RBX: 000000000001007c RCX: 0000000000040000 [ 173.219114][ T7417] RDX: ffffc90012800000 RSI: 000000000003ffff RDI: 0000000000040000 [ 173.219127][ T7417] RBP: ffff888054094000 R08: ffffffff840ff6e1 R09: 0000000000000000 [ 173.219141][ T7417] R10: ffffc90004e3efd0 R11: fffff520009c7dfc R12: ffff88802c3ed130 [ 173.219155][ T7417] R13: ffff88802c3ed118 R14: 000000000001007c R15: 0000000000000080 [ 173.219167][ T7417] FS: 00007f58508926c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 173.219184][ T7417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.219198][ T7417] CR2: 0000000000000000 CR3: 000000007e94a000 CR4: 00000000003506f0 [ 173.219215][ T7417] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.219228][ T7417] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 173.219242][ T7417] Kernel panic - not syncing: Fatal exception [ 173.219359][ T7417] Kernel Offset: disabled