last executing test programs: 10.999553082s ago: executing program 2: sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@deltclass={0x30, 0x29, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x8}, {0xffe0, 0xa}, {0xa, 0xffff}}, [@tclass_kind_options=@c_netem={0xa}]}, 0x30}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x2df) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000028c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)={0x5c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @broadcast}, 0x0, @random, 0x0, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000440)=ANY=[@ANYRES16=r5, @ANYRES8, @ANYRES8, @ANYRESOCT=r3, @ANYRESOCT=r5, @ANYRESOCT, @ANYRES64=r6, @ANYRES32=r3, @ANYRES8=r4, @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x4, 0x9}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000780)={{}, r6, 0x10, @inherit={0x48, &(0x7f00000000c0)={0x1, 0x0, 0x3089, 0x2, {0x0, 0x7, 0x0, 0xc3, 0x9}}}, @devid=r10}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r12, 0x411, 0x70bd2c, 0x0, {{}, {}, {0x8, 0x2, 0x1}}}, 0x24}}, 0x0) 10.74307207s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r2, 0x100) listen(r1, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) listen(0xffffffffffffffff, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000140)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb08F\x00\x00\x04i}\x03\x00@\x0e\xe6\x995b\x00\x1e\xc7\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb921\xbe\x90=\xbf\xdc\r\\\xeb\xcb{\xc5\xc8\x1dyc\x9a\\\xbeP\xf7\xa5\b\xe7\xf8\'\x7f\xd3O\xee\xf9\v\xb0\x1b\x00u\r\xb4\x1d\xa0X\xf6\x80\x1dnr\x87\xf8\xf3\xc9\x9c\x1dLB\xcc\xfe\x1d\b\xac\xaay\x8c\x01\xf7i\x0e\xaea\xe7\xbc\xed\x86\x01P\xec5\xd7\x9e@NV\x1c\x1a-I\x97\x8b\xfa\xae8x\x144\xf6>\xe0>4\xd4g\xf8\x1c\x86\x90V~\x97\xeb\x8ajo\x88\xc8X\x9a', 0x0) ftruncate(r5, 0x40000) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0x4110, 0x4) sendfile(r4, r5, 0x0, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071106f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd608a96460018060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES64=r6, @ANYRES32, @ANYRES16=r3], 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 10.653584136s ago: executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000008000000b70800b3000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x54, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x7ff}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x3, &(0x7f0000000600)={r4, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2608054c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9.701878488s ago: executing program 2: syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200cc00, &(0x7f0000000580)={[{@part={'part', 0x3d, 0x3}}, {}, {@iocharset={'iocharset', 0x3d, 'cp862'}}]}, 0x1, 0x2db, &(0x7f0000000200)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30a8015, 0x0, 0x0, 0x0, &(0x7f0000000300)) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000040)='./file2\x00', 0x4000, &(0x7f0000000340)=ANY=[], 0x2, 0x210, &(0x7f0000000580)="$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") statx(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6000, &(0x7f0000000080)) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 9.542282265s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xf0ff, &(0x7f0000000000)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x2}]}, 0x3c}}, 0x0) 9.427612361s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_procfs$pagemap(r0, &(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes256, 0x0, @desc1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r6, @ANYBLOB="a0d7cbb96184f45bdb5cee4033000000000000000020001280080001006772650014000280060010000080000006000f0000000000"], 0x40}}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1c09c, &(0x7f0000000340)=ANY=[@ANYBLOB='part=0x0000000000000004,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c73657373696f6e3d3078666666666666666666666666666637662c6e6c733d63703836362c626172726965722c6e6f6465636f6d706f73652c706172743d3078303030303030303030303030303030332c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d85f194712c626172726965722c63726561746f723d65fe04c22c626172726965722c6465636f6d706f73652c666f7263652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723da90781e42c626138726965722c706172743d3078303030303030303030303030303030312c00"], 0x1, 0x6da, &(0x7f0000004980)="$eJzs3UtoHOcdAPD/rFarXRUcOfEjLYEsMaSlorZkobTqpW4pRYdQQnroebHlWHgtB0kpsimN0se9h5x6Sg+6hR5Keje054ZAyVXHQCGXnHRTmdmZ1Ur7lKzHJv39xMx8M99z/rMzsw/EBPB/a3k2ys8iieXZN7fS9d2dhebEzsJUnt2MiEpElCLKrUUka5Hl3smn+Ha6MS+f9Ovnw9Wltz//aveL1lo5n7LypUH1eqh0b9rOp6hHxES+7DbZp8VPjnZ/qL27fdsbVdLewzRgN4rAxV+eq1V4bvtdttt5H/8nmw+qfpzzFhhTSeu+2WUmYjoiqhGtu35+dSid7+hO3/ZFDwAAAACOq3b8Ki/sxV5sxaWzGA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8U+XP/0/yqVSk65EUz/+v5NsiT4+h4Q9C/GyqtXx29oMBAAAAAAAAgDP36l7sxVZcKtb3k+w3/9c6fuP/VrwXG7ES63EztqIRm7EZ6zEfETMdDVW2Gpub6/NZzYgrA2rejk971Lzdf4x3TnmfAQAAAAAAAGDMVYfkP5zs3vb7WD74/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZBEjHRWmTTlSI9E6VyRFQjopKW2474tEh/TSS9Nj47/3EAAADAc6keXk2qI9R54f3Yi624VKzvJ9ln/mvZ5+VqvBdrsRmrsRnNWIl7+Wfo9FN/aXdnobm7s/Aonbrb/emXxxp61mK0vnvo3fPLWYla3I/VbMvNuBtJ7GdKeSsv7+4spMtHvcf1QTqm5Ce5AaOZ6EjfS2fXP8nSfz78LUL5WLt4QqW+OTNZ7mQ7InP52NIal4sI9I7E0KNTHtjTfJTa3/xcGdxT75h/MLj36SOlen5zcyGORuJ2lNpH6NrgSER89x8f//pBc+3hg/sbs+OzSz29P7TE0UgsdETi+jcoEsPNZZG42l5fjl/Er2I2vpx6K9ZjNX4TjdiMlXqR38hfz+l8ZnCkPpvuXHtr2EjSc7Levn71GlM9Do0p6vHzLNWI17JjeilWI4nHEbESb2R/t2O+fTU4OMJXRzjrSyNcaTvc+F62aIcpav3L/m20Jk9LGtfLHXHtvObOZHmdWw6i9GLPKBX3utHvRx3K38kTaQt/GHh/OG9HIzHfEYmX+r1eWiH9634632iuPVx/0Hh3xP5ez5fpefSnsbpLpEf4xajmO3c5myfZOTWX5b3UvsMejlcl/8WlpdSVd7Vdr3Wm/jIex71DZ+oPYzEWYykrfS0rPdl1x0rzrrdbOnwNT/PSd1rl9g87ne+3Hkez9X4IgPE2/f3pSu2/tX/XPqr9sfag9mb1Z1M/mnqlEpP/mvxxeW7i9dIryd/jo/jdwed/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5DaePH3YaDZX1nsnSr2zksG1Gs394kFiA8ocSiT5o3JGKJxsPHm6P7TBwYmpfHgnrH6aieJpjcML189wGMn20eNVHX4siqc8jdBF0hXwtPKJx1z0fLBlcgwO5dFE/fQaLF6wHVnHf/XWeh2viYjoVXjIhWPiNK4+wEW6tfno3VsbT57+YPVR452Vd1bWJhcXl+aWFt9YuHV/tbky15p3VDiXh98C56Hz7URbJSJeHV53wINaAQAAAAAAAAAAgDN0Hv8LcdH7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHy9Lc9G+VkkMT93cy5d391ZaKZTkT4oWY6IUkQkv41I/hlxJ1pTzHQ0l/Tr58PVpbc//2r3i4O2ykX5UsR233qj2c6nqEfERL48rfbuDm+vcpCc6pGdtCOTBuxGETi4aP8LAAD//7co7JU=") 3.958504402s ago: executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@local, 0x0, r2}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r6}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaacce39067774286dd602cd5ed00102c00fc010000000000000000000000000000fe"], 0x0) 920.884076ms ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 857.947599ms ago: executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000005300)={0x2, 0x4e21, @empty}, 0x10) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000340)="b8", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440)=[@window={0x3, 0x0, 0x8}, @timestamp, @timestamp, @sack_perm, @window, @sack_perm, @window, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 844.419068ms ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a01020000000000000000010000000900020073797a320000000014000380100000800800034000000002040400800900010073797a30"], 0xe4}}, 0x0) 761.003917ms ago: executing program 4: socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f0100001c042ac5479fb4773986e89f50bd39c7f6b063"], 0x7) socket(0x0, 0x3, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, 0x0) 731.939568ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x8}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 662.857277ms ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000042, &(0x7f0000000400), 0x3, 0x4ea, &(0x7f00000006c0)="$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") 631.707262ms ago: executing program 0: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xfffc, @multicast1}}]}, 0x80}}, 0x0) 618.485693ms ago: executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0x40405515, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) 544.667762ms ago: executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@local, 0x0, r2}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r6}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaacce39067774286dd602cd5ed00102c00fc010000000000000000000000000000fe"], 0x0) 542.803609ms ago: executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCFLSH(r2, 0x541b, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000003740), 0x0, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x8901, &(0x7f0000000180)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) gettid() r6 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r6, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0xcb, 0x0}, 0x2000) close(r7) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x5452, 0x0) ioctl$TUNSETPERSIST(r5, 0x5450, 0x0) 414.231594ms ago: executing program 1: ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x180000) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000002480), 0x2002, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000004700), &(0x7f0000004740), 0x2, 0x2) 395.512285ms ago: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0x6, 0xd) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce943f895dd4c2e9dd7393543d89b00dc6b3a25045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bd", 0xfffffea5, 0xc000, 0x0, 0xfffffffffffffe1f) r1 = dup(r0) write$FUSE_DIRENTPLUS(r1, 0x0, 0xb0) 375.493655ms ago: executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}]}, 0x28}}, 0x0) 336.458507ms ago: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000fc0100000000000000000000eaff000000000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) 313.15287ms ago: executing program 3: setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc) 275.281739ms ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280), 0x10) 245.060816ms ago: executing program 1: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f00000001c0)={r2}, 0x8) 239.759333ms ago: executing program 3: socket$packet(0x11, 0x0, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'ipvlan0\x00', {0x2, 0x0, @private=0x80000000}}) 207.09929ms ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 97.405787ms ago: executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0xfffffffe}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) 54.429529ms ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/3601], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.004199ms ago: executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002440)=@newsa={0x358, 0x10, 0x0, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback}, {}, @in=@multicast2}, [@algo_crypt={0x1fc, 0x2, {{'ecb(cipher_null)\x00'}, 0xda0, "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"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x358}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@deltclass={0x34, 0x29, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x250}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@local, 0x0, r2}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r6}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaacce39067774286dd602cd5ed00102c00fc010000000000000000000000000000fe"], 0x0) kernel console output (not intermixed with test programs): avoid problems! [ 83.764285][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.766871][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.780870][ T6884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.800503][ T6269] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.890375][ T7107] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.907590][ T7252] loop4: detected capacity change from 0 to 24 [ 83.909871][ T7252] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 83.916236][ T7252] VFS: Can't find a romfs filesystem on dev loop4. [ 83.916236][ T7252] [ 83.924943][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.927784][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.943364][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.946225][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.948520][ T7252] evm: overlay not supported [ 83.948859][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.966586][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.972987][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.983296][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.983427][ T7252] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 83.987015][ T6884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.026776][ T6884] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.029071][ T6884] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.031313][ T6884] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.053048][ T6884] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.068258][ T7256] loop4: detected capacity change from 0 to 512 [ 84.075769][ T7256] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 84.079530][ T7256] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 84.090140][ T7256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.126413][ T7107] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.151191][ T7011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.188857][ T6269] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.237057][ T7011] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.303755][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.305726][ T6273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.308635][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.310550][ T6273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.331112][ T6636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.347097][ T6636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.377904][ T7255] loop1: detected capacity change from 0 to 32768 [ 84.423383][ T7255] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 84.532705][ T7255] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 84.541155][ T7011] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.549202][ T7011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.568931][ T7255] XFS (loop1): Starting recovery (logdev: internal) [ 84.580288][ T6651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.600276][ T7255] XFS (loop1): Ending recovery (logdev: internal) [ 84.603079][ T6651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.619117][ T7107] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.654665][ T7107] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.662465][ T7107] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.676182][ T7107] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.784760][ T6770] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 84.808173][ T7274] nfs4: Bad value for 'fsc' [ 84.932471][ T7011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.947886][ T7107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.001286][ T7107] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.034245][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.036240][ T6273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.039086][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.041056][ T6273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.088589][ T7107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.113074][ T7107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.176480][ T7011] veth0_vlan: entered promiscuous mode [ 85.199417][ T7011] veth1_vlan: entered promiscuous mode [ 85.254582][ T7011] veth0_macvtap: entered promiscuous mode [ 85.285358][ T7011] veth1_macvtap: entered promiscuous mode [ 85.359659][ T7291] loop2: detected capacity change from 0 to 256 [ 85.456447][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.459289][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.492952][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.495689][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.500013][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.502694][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.510577][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.514148][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.516797][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.520416][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.530670][ T7011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.566168][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.568804][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.571259][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.574449][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.583807][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.589471][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.600619][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.610084][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.620266][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.632053][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.641529][ T7011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.656417][ T7011] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.662734][ T7011] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.668689][ T7011] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.675319][ T7011] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.709509][ T7296] loop2: detected capacity change from 0 to 512 [ 85.734990][ T7107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.772877][ T7296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.831858][ T6651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.847302][ T6651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.924493][ T6654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.927540][ T7107] veth0_vlan: entered promiscuous mode [ 85.937601][ T6654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.983509][ T7107] veth1_vlan: entered promiscuous mode [ 86.008922][ T6884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.015757][ T7107] veth0_macvtap: entered promiscuous mode [ 86.041653][ T7107] veth1_macvtap: entered promiscuous mode [ 86.061405][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.072978][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.075524][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.078157][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.080850][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.084233][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.086840][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.089447][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.092025][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.103959][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.110975][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.123039][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.133600][ T7107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.151223][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.156291][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.158709][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.161259][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.199678][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.202437][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.210500][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.213518][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.216429][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.219483][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.222424][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.225763][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.229226][ T7107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.234308][ T7107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.236571][ T7107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.238708][ T7107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.243450][ T7107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.246960][ T7303] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.249688][ T7303] Zero length message leads to an empty skb [ 86.348439][ T6636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.350342][ T6636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.375589][ T7308] loop1: detected capacity change from 0 to 164 [ 86.399116][ T7308] isofs: Unable to find the ".." directory for NFS. [ 86.427646][ T6636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.429668][ T6636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.620793][ T7327] binder: 7326:7327 ioctl 4018620d 0 returned -22 [ 86.647691][ T7325] loop1: detected capacity change from 0 to 512 [ 86.671267][ T7327] loop3: detected capacity change from 0 to 128 [ 86.678322][ T7325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.889503][ T6770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.254728][ T7344] loop1: detected capacity change from 0 to 64 [ 87.384275][ T7344] block nbd1: shutting down sockets [ 87.778369][ T7353] loop2: detected capacity change from 0 to 128 [ 87.810014][ T7353] EXT4-fs error (device loop2): __ext4_fill_super:5447: inode #2: comm syz-executor.2: iget: checksum invalid [ 87.826691][ T7353] EXT4-fs (loop2): get root inode failed [ 87.831478][ T7353] EXT4-fs (loop2): mount failed [ 88.044393][ T6274] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.069756][ T6274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.073132][ T6274] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.076577][ T6274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.085617][ T6274] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.092396][ T6274] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.144565][ T7362] overlayfs: failed to resolve './file0': -2 [ 88.283271][ T6653] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.576454][ T6653] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.746446][ T7383] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.755084][ T7383] loop4: detected capacity change from 0 to 1024 [ 88.978444][ T6653] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.989066][ T7373] loop3: detected capacity change from 0 to 32768 [ 89.001888][ T7373] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7373) [ 89.030650][ T7373] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 89.046617][ T7373] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 89.048966][ T7373] BTRFS info (device loop3): using free-space-tree [ 89.053676][ T7375] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 89.068296][ T7358] chnl_net:caif_netlink_parms(): no params data found [ 89.136928][ T7373] BTRFS info (device loop3): checking UUID tree [ 89.202223][ T7407] loop2: detected capacity change from 0 to 128 [ 89.216691][ T7407] EXT4-fs error (device loop2): __ext4_fill_super:5447: inode #2: comm syz-executor.2: iget: checksum invalid [ 89.240701][ T7407] EXT4-fs (loop2): get root inode failed [ 89.242130][ T7407] EXT4-fs (loop2): mount failed [ 89.315558][ T6653] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.321945][ T7411] overlayfs: failed to resolve './file0': -2 [ 89.512459][ T7358] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.519937][ T7107] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 89.525444][ T7358] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.527412][ T7358] bridge_slave_0: entered allmulticast mode [ 89.535755][ T7358] bridge_slave_0: entered promiscuous mode [ 89.568386][ T7358] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.575124][ T7358] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.588785][ T7430] loop2: detected capacity change from 0 to 256 [ 89.596826][ T7358] bridge_slave_1: entered allmulticast mode [ 89.602035][ T7358] bridge_slave_1: entered promiscuous mode [ 89.772836][ T7358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.815910][ T7358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.831479][ T7435] loop2: detected capacity change from 0 to 512 [ 89.860675][ T7435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.985176][ T7358] team0: Port device team_slave_0 added [ 89.991207][ T7358] team0: Port device team_slave_1 added [ 90.089591][ T7358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.091399][ T7358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.130014][ T7358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.130299][ T6884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.136432][ T6653] bridge_slave_1: left allmulticast mode [ 90.139542][ T6653] bridge_slave_1: left promiscuous mode [ 90.142723][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.183323][ T6274] Bluetooth: hci5: command tx timeout [ 90.190443][ T7445] loop3: detected capacity change from 0 to 1024 [ 90.203578][ T6653] bridge_slave_0: left allmulticast mode [ 90.210987][ T6653] bridge_slave_0: left promiscuous mode [ 90.212473][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.249082][ T7375] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 90.263550][ T6274] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 90.266520][ T6274] Bluetooth: hci1: Injecting HCI hardware error event [ 90.270231][ T6276] Bluetooth: hci1: hardware error 0x00 [ 91.223126][ T6274] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 91.227063][ T6274] Bluetooth: hci4: Injecting HCI hardware error event [ 91.231124][ T6271] Bluetooth: hci4: hardware error 0x00 [ 91.264785][ T7466] loop4: detected capacity change from 0 to 128 [ 91.306684][ T7466] EXT4-fs error (device loop4): __ext4_fill_super:5447: inode #2: comm syz-executor.4: iget: checksum invalid [ 91.331189][ T7466] EXT4-fs (loop4): get root inode failed [ 91.332750][ T7466] EXT4-fs (loop4): mount failed [ 91.738191][ T7476] loop4: detected capacity change from 0 to 1024 [ 91.997778][ T7375] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 92.011534][ T7482] loop3: detected capacity change from 0 to 256 [ 92.273039][ T6274] Bluetooth: hci5: command tx timeout [ 92.503055][ T6276] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 92.556219][ T6653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.596878][ T6653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.651723][ T6653] bond0 (unregistering): Released all slaves [ 92.670004][ T7358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.671724][ T7358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.693027][ T7358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.697387][ T7457] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 92.736562][ T7472] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.824361][ T7498] loop2: detected capacity change from 0 to 128 [ 92.868529][ T7498] EXT4-fs error (device loop2): __ext4_fill_super:5447: inode #2: comm syz-executor.2: iget: checksum invalid [ 92.886345][ T7498] EXT4-fs (loop2): get root inode failed [ 92.887853][ T7498] EXT4-fs (loop2): mount failed [ 92.920433][ T7504] loop4: detected capacity change from 0 to 1024 [ 92.955383][ T7375] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 93.107715][ T7358] hsr_slave_0: entered promiscuous mode [ 93.143949][ T7358] hsr_slave_1: entered promiscuous mode [ 93.183095][ T7358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.185062][ T7358] Cannot create hsr debugfs directory [ 93.247172][ T7512] loop2: detected capacity change from 0 to 512 [ 93.334231][ T7512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.544947][ T6274] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.549008][ T6274] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.551615][ T6274] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.553057][ T6271] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 93.555649][ T6274] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.557856][ T6274] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.559787][ T6274] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.601661][ T6884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.867405][ T6653] hsr_slave_0: left promiscuous mode [ 93.903209][ T6653] hsr_slave_1: left promiscuous mode [ 93.993298][ T6653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.996562][ T6653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.000277][ T6653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.003535][ T6653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.027579][ T6653] veth1_macvtap: left promiscuous mode [ 94.029003][ T6653] veth0_macvtap: left promiscuous mode [ 94.035362][ T6653] veth1_vlan: left promiscuous mode [ 94.039072][ T6653] veth0_vlan: left promiscuous mode [ 94.314007][ T7544] loop4: detected capacity change from 0 to 1024 [ 94.343250][ T6276] Bluetooth: hci5: command tx timeout [ 94.576078][ T7375] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 95.623111][ T6276] Bluetooth: hci6: command tx timeout [ 96.183716][ T6653] team0 (unregistering): Port device team_slave_1 removed [ 96.377556][ T6653] team0 (unregistering): Port device team_slave_0 removed [ 96.423140][ T6276] Bluetooth: hci5: command tx timeout [ 97.704319][ T6276] Bluetooth: hci6: command tx timeout [ 98.901989][ T7543] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.376398][ T7528] chnl_net:caif_netlink_parms(): no params data found [ 99.407641][ T7583] loop2: detected capacity change from 0 to 1024 [ 99.469194][ T7550] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 99.564655][ T7597] loop4: detected capacity change from 0 to 1024 [ 99.647820][ T7594] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.707369][ T7528] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.709326][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.711289][ T7528] bridge_slave_0: entered allmulticast mode [ 99.732351][ T7528] bridge_slave_0: entered promiscuous mode [ 99.783354][ T6276] Bluetooth: hci6: command tx timeout [ 99.832265][ T7528] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.834805][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.839892][ T7528] bridge_slave_1: entered allmulticast mode [ 99.850420][ T7528] bridge_slave_1: entered promiscuous mode [ 99.898863][ T7528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.911214][ T7528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.958814][ T7528] team0: Port device team_slave_0 added [ 99.978381][ T7528] team0: Port device team_slave_1 added [ 100.391020][ T6653] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.413470][ T7528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.415314][ T7528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.438463][ T7528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.446581][ T7528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.448453][ T7528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.467236][ T7528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.598139][ T6653] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.650377][ T7622] loop4: detected capacity change from 0 to 128 [ 100.677090][ T7622] EXT4-fs error (device loop4): __ext4_fill_super:5447: inode #2: comm syz-executor.4: iget: checksum invalid [ 100.687237][ T7625] loop2: detected capacity change from 0 to 64 [ 100.694997][ T7622] EXT4-fs (loop4): get root inode failed [ 100.703100][ T7622] EXT4-fs (loop4): mount failed [ 100.783550][ T6653] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.909895][ T7358] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.935940][ T7528] hsr_slave_0: entered promiscuous mode [ 100.991961][ T7633] loop4: detected capacity change from 0 to 1024 [ 100.993734][ T7528] hsr_slave_1: entered promiscuous mode [ 101.033700][ T7528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.035550][ T7528] Cannot create hsr debugfs directory [ 101.049157][ T7571] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 101.089152][ T6653] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.144049][ T7358] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.148095][ T7630] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.151821][ T7358] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.161902][ T7358] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.351605][ T7358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.358367][ T6271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.367542][ T6271] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.371180][ T6271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.376478][ T6271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.379775][ T6271] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 101.381906][ T6271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.430745][ T6653] bridge_slave_1: left allmulticast mode [ 101.434532][ T6653] bridge_slave_1: left promiscuous mode [ 101.437222][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.443582][ T6653] bridge_slave_0: left allmulticast mode [ 101.446283][ T6653] bridge_slave_0: left promiscuous mode [ 101.448944][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.645423][ T7659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.863076][ T6271] Bluetooth: hci6: command tx timeout [ 103.463132][ T6271] Bluetooth: hci1: command tx timeout [ 103.482231][ T6653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.536254][ T6653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.585508][ T6653] bond0 (unregistering): Released all slaves [ 103.697583][ T7358] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.762422][ T1421] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.764331][ T1421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.916373][ T7682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.920467][ T7682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.023909][ T6321] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.025894][ T6321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.109831][ T7701] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.419129][ T7642] chnl_net:caif_netlink_parms(): no params data found [ 104.591795][ T6653] hsr_slave_0: left promiscuous mode [ 104.616340][ T7733] loop4: detected capacity change from 0 to 1024 [ 104.640204][ T6653] hsr_slave_1: left promiscuous mode [ 104.657099][ T7571] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 104.703287][ T6653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.705562][ T6653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.715902][ T6653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.722267][ T6653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.758654][ T6653] veth1_macvtap: left promiscuous mode [ 104.765186][ T6653] veth0_macvtap: left promiscuous mode [ 104.768926][ T6653] veth1_vlan: left promiscuous mode [ 104.772515][ T6653] veth0_vlan: left promiscuous mode [ 105.543130][ T6271] Bluetooth: hci1: command tx timeout [ 106.964949][ T6653] team0 (unregistering): Port device team_slave_1 removed [ 107.154918][ T6653] team0 (unregistering): Port device team_slave_0 removed [ 107.623069][ T6271] Bluetooth: hci1: command tx timeout [ 109.674277][ T7730] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.688504][ T7358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.703141][ T6271] Bluetooth: hci1: command tx timeout [ 109.791793][ T7358] veth0_vlan: entered promiscuous mode [ 109.798855][ T7358] veth1_vlan: entered promiscuous mode [ 109.818116][ T7760] loop4: detected capacity change from 0 to 512 [ 109.821095][ T7642] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.823114][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.825101][ T7642] bridge_slave_0: entered allmulticast mode [ 109.827237][ T7642] bridge_slave_0: entered promiscuous mode [ 109.830175][ T7642] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.831924][ T7642] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.842658][ T7642] bridge_slave_1: entered allmulticast mode [ 109.860597][ T7642] bridge_slave_1: entered promiscuous mode [ 109.865367][ T7760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.896776][ T7528] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.935176][ T7528] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.945680][ T7528] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.984414][ T7642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.000263][ T7528] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.015387][ T7358] veth0_macvtap: entered promiscuous mode [ 110.019994][ T6269] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.023890][ T7358] veth1_macvtap: entered promiscuous mode [ 110.027527][ T7642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.045735][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.048414][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.050763][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.063064][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.065688][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.068368][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.070762][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.083000][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.085442][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.088014][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.095270][ T7358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.159330][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.162583][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.171945][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.187772][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.190431][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.214015][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.214831][ T7772] loop4: detected capacity change from 0 to 8 [ 110.216745][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.221078][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.238402][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.241382][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.248168][ T7358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.257801][ T7642] team0: Port device team_slave_0 added [ 110.265538][ T7642] team0: Port device team_slave_1 added [ 110.335300][ T7358] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.337727][ T7358] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.339920][ T7358] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.342168][ T7358] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.351687][ T7776] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 110.406501][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.408584][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.427604][ T7642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.459119][ T7528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.471115][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.474389][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.481220][ T7642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.716675][ T7784] loop4: detected capacity change from 0 to 32768 [ 110.764745][ T7761] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 110.885227][ T6653] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.910398][ T7789] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 110.919417][ T7528] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.065861][ T6653] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.155001][ T7642] hsr_slave_0: entered promiscuous mode [ 111.164954][ T7784] loop4: detected capacity change from 0 to 32768 [ 111.190739][ T7784] JFS: block map error in dbBackSplit [ 111.192566][ T7784] ERROR: (device loop4): dbDiscardAG: -EIO [ 111.192566][ T7784] [ 111.193460][ T7642] hsr_slave_1: entered promiscuous mode [ 111.200334][ T7784] ERROR: (device loop4): remounting filesystem as read-only [ 111.202304][ T7784] syz-executor.4: attempt to access beyond end of device [ 111.202304][ T7784] loop4: rw=2051, sector=2629632, nr_sectors = 8192 limit=32768 [ 111.211940][ T7784] JFS: sb_issue_discard(00000000696241c7, 328704, 1024, GFP_NOFS, 0) = -5 => failed! [ 111.219659][ T7784] blkno = 50400, nblocks = 400 [ 111.220907][ T7784] ERROR: (device loop4): dbFree: block to be freed is outside the map [ 111.220907][ T7784] [ 111.233066][ T7642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.236310][ T7642] Cannot create hsr debugfs directory [ 111.240835][ T6318] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.242694][ T6318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.252193][ T6318] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.254154][ T6318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.327304][ T6653] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.373979][ T6656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.375970][ T6656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.535527][ T6653] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.644908][ T7528] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.647514][ T7528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.679227][ T6636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.681247][ T6636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.733855][ T7794] loop4: detected capacity change from 0 to 32768 [ 111.859414][ T7794] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=ro,metadata_checksum=none,data_checksum=none,nojournal_transaction_names,read_only [ 111.901995][ T7794] bcachefs (loop4): recovering from clean shutdown, journal seq 8 [ 111.948176][ T6653] bridge_slave_1: left allmulticast mode [ 111.949793][ T6653] bridge_slave_1: left promiscuous mode [ 111.951319][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.972102][ T6653] bridge_slave_0: left allmulticast mode [ 111.974730][ T6653] bridge_slave_0: left promiscuous mode [ 111.976615][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.989945][ T7794] bcachefs (loop4): alloc_read... done [ 111.991480][ T7794] bcachefs (loop4): stripes_read... done [ 111.996389][ T7794] bcachefs (loop4): snapshots_read... done [ 112.007879][ T7794] bcachefs (loop4): going read-write [ 112.032868][ T7794] bcachefs (loop4): journal_replay... done [ 112.087092][ T7794] bcachefs (loop4): resume_logged_ops... done [ 112.088671][ T7794] bcachefs (loop4): delete_dead_inodes... done [ 112.090497][ T7794] bcachefs (loop4): going read-only [ 112.091912][ T7794] bcachefs (loop4): finished waiting for writes to stop [ 112.104806][ T7794] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11 [ 112.107201][ T7794] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11 [ 112.135948][ T7794] bcachefs (loop4): shutdown complete, journal seq 12 [ 112.138326][ T7794] bcachefs (loop4): marking filesystem clean [ 112.146339][ T7794] bcachefs (loop4): done starting filesystem [ 112.368840][ T7824] loop1: detected capacity change from 0 to 40427 [ 112.372628][ T7824] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 112.374988][ T7824] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 112.390316][ T7824] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.442036][ T7824] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 112.444276][ T7824] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 112.611008][ T6651] kworker/u8:27: attempt to access beyond end of device [ 112.611008][ T6651] loop1: rw=1, sector=45096, nr_sectors = 128 limit=40427 [ 112.634327][ T6651] kworker/u8:27: attempt to access beyond end of device [ 112.634327][ T6651] loop1: rw=1, sector=45224, nr_sectors = 128 limit=40427 [ 113.771553][ T6653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.831069][ T6653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.875063][ T7856] overlayfs: missing 'lowerdir' [ 113.876547][ T6653] bond0 (unregistering): Released all slaves [ 113.950283][ T6269] bcachefs (loop4): shutting down [ 114.005923][ T7528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.051387][ T6269] bcachefs (loop4): shutdown complete [ 114.378703][ T7528] veth0_vlan: entered promiscuous mode [ 114.402644][ T7528] veth1_vlan: entered promiscuous mode [ 114.450383][ T7860] loop1: detected capacity change from 0 to 32768 [ 114.451268][ T7528] veth0_macvtap: entered promiscuous mode [ 114.500174][ T7860] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 114.502883][ T7860] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 114.563890][ T7860] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 3 2074, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 420 [ 114.568261][ T7860] gfs2: fsid=syz:syz.0: G: s:SH n:2/81a f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 114.571218][ T7860] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:7860 [syz-executor.1] init_inodes+0xe0/0x2d8 [ 114.610605][ T7860] gfs2: fsid=syz:syz.0: I: n:3/2074 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 114.614859][ T7860] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 114.622613][ T7860] gfs2: fsid=syz:syz.0: File system withdrawn [ 114.632728][ T7860] CPU: 1 PID: 7860 Comm: syz-executor.1 Tainted: G W 6.10.0-rc3-syzkaller-gac2193b4b460 #0 [ 114.635605][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 114.638268][ T7860] Call trace: [ 114.639217][ T7860] dump_backtrace+0x1b8/0x1e4 [ 114.640494][ T7860] show_stack+0x2c/0x3c [ 114.641577][ T7860] dump_stack_lvl+0xe4/0x150 [ 114.642838][ T7860] dump_stack+0x1c/0x28 [ 114.643937][ T7860] gfs2_withdraw+0xe00/0x133c [ 114.645216][ T7860] gfs2_consist_inode_i+0xf0/0x10c [ 114.646635][ T7860] gfs2_inode_refresh+0xa60/0xd84 [ 114.648007][ T7860] inode_go_instantiate+0x4c/0x68 [ 114.649372][ T7860] gfs2_instantiate+0x17c/0x2c8 [ 114.650652][ T7860] gfs2_glock_wait+0x1b8/0x298 [ 114.651937][ T7860] gfs2_glock_nq+0xcc8/0x169c [ 114.653215][ T7860] init_journal+0x288/0x1fb8 [ 114.654464][ T7860] init_inodes+0xe0/0x2d8 [ 114.655654][ T7860] gfs2_fill_super+0x167c/0x1f54 [ 114.656966][ T7860] get_tree_bdev+0x320/0x470 [ 114.658205][ T7860] gfs2_get_tree+0x54/0x1b4 [ 114.659458][ T7860] vfs_get_tree+0x90/0x288 [ 114.660588][ T7860] do_new_mount+0x278/0x900 [ 114.661800][ T7860] path_mount+0x590/0xe04 [ 114.662905][ T7860] __arm64_sys_mount+0x45c/0x594 [ 114.664276][ T7860] invoke_syscall+0x98/0x2b8 [ 114.665468][ T7860] el0_svc_common+0x130/0x23c [ 114.666764][ T7860] do_el0_svc+0x48/0x58 [ 114.667823][ T7860] el0_svc+0x54/0x168 [ 114.668893][ T7860] el0t_64_sync_handler+0x84/0xfc [ 114.670240][ T7860] el0t_64_sync+0x190/0x194 [ 114.683573][ T7860] gfs2: fsid=syz:syz.0: can't read journal index: -5 [ 114.773074][ T7528] veth1_macvtap: entered promiscuous mode [ 114.939902][ T6653] hsr_slave_0: left promiscuous mode [ 114.983144][ T6653] hsr_slave_1: left promiscuous mode [ 115.016474][ T7890] loop4: detected capacity change from 0 to 1024 [ 115.053309][ T6653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.055184][ T6653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.067805][ T7896] overlayfs: missing 'lowerdir' [ 115.073806][ T6653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.076017][ T6653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.082001][ T7761] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 115.146458][ T6653] veth1_macvtap: left promiscuous mode [ 115.149253][ T6653] veth0_macvtap: left promiscuous mode [ 115.150721][ T6653] veth1_vlan: left promiscuous mode [ 115.152168][ T6653] veth0_vlan: left promiscuous mode [ 115.402213][ T7898] loop1: detected capacity change from 0 to 32768 [ 115.420743][ T7898] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section replicas_v0: no devices in entry btree: 1/0 [] [ 115.420743][ T7898] replicas_v0 (size 24): [ 115.420743][ T7898] btree: 1 [0] journal: 1 [0] user: 1 [0] btree: 0 [] [ 115.420743][ T7898] [ 115.449344][ T7898] loop1: detected capacity change from 0 to 64 [ 115.523724][ T7898] Trying to free block not in datazone [ 115.791337][ T7903] loop4: detected capacity change from 0 to 128 [ 115.826490][ T7903] EXT4-fs error (device loop4): __ext4_fill_super:5447: inode #2: comm syz-executor.4: iget: checksum invalid [ 115.840864][ T7903] EXT4-fs (loop4): get root inode failed [ 115.842522][ T7903] EXT4-fs (loop4): mount failed [ 116.040787][ T7911] loop4: detected capacity change from 0 to 64 [ 117.221799][ T6653] team0 (unregistering): Port device team_slave_1 removed [ 117.427382][ T6653] team0 (unregistering): Port device team_slave_0 removed [ 120.027477][ T7911] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.111716][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.134687][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.137279][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.140601][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.153034][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.155855][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.158334][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.161099][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.166788][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.169160][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.183798][ T7528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.234723][ T7925] loop1: detected capacity change from 0 to 8 [ 120.269975][ T7925] overlayfs: missing 'lowerdir' [ 120.347849][ T7642] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 120.366967][ T7935] loop1: detected capacity change from 0 to 8 [ 120.386723][ T7934] loop4: detected capacity change from 0 to 1024 [ 120.390685][ T7642] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.399202][ T7935] squashfs: Unknown parameter 'iocharset' [ 120.405843][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.408573][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.436852][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.439572][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.442083][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.464282][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.466868][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.469554][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.488802][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.491730][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.520796][ T7528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.532985][ T7642] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 120.554498][ T7642] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 120.564381][ T7927] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 120.576589][ T7528] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.578831][ T7528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.596201][ T7528] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.598478][ T7528] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.758225][ T6651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.760102][ T6651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.802548][ T6636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.806378][ T6636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.870724][ T7642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.900209][ T7954] loop3: detected capacity change from 0 to 256 [ 120.900785][ T7642] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.956597][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.958467][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.985262][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.987105][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.020269][ T7642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.198999][ T7949] loop1: detected capacity change from 0 to 32768 [ 121.227759][ T7642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.290629][ T7642] veth0_vlan: entered promiscuous mode [ 121.300851][ T7642] veth1_vlan: entered promiscuous mode [ 121.360415][ T7642] veth0_macvtap: entered promiscuous mode [ 121.388807][ T7642] veth1_macvtap: entered promiscuous mode [ 121.390566][ T7972] loop3: detected capacity change from 0 to 8 [ 121.402254][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.402290][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.402300][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.402310][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.402319][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.402328][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.402339][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.402349][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.402359][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.402369][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.402379][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.402388][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.406428][ T7642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.414794][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.414815][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.414825][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.414834][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.414843][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.414852][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.414863][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.414872][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.414882][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.414892][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.414902][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.414911][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.428566][ T7642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.428619][ T7972] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 121.428681][ T7972] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 121.430476][ T7642] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.430537][ T7642] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.430558][ T7642] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.430577][ T7642] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.550621][ T7975] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.679524][ T7977] loop3: detected capacity change from 0 to 512 [ 121.685187][ T6653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.689965][ T7977] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.699109][ T6653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.730815][ T7977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 121.738924][ T6646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.747134][ T7977] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 121.748334][ T6646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.793818][ T7977] EXT4-fs error (device loop3): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.3: bad entry in directory: directory entry overrun - offset=60, inode=15, rec_len=46528, size=2048 fake=0 [ 121.851670][ T7977] input: syz0 as /devices/virtual/input/input4 [ 121.898702][ T7977] EXT4-fs error (device loop3): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.3: bad entry in directory: directory entry overrun - offset=60, inode=15, rec_len=46528, size=2048 fake=0 [ 121.938121][ T7949] loop1: detected capacity change from 0 to 32768 [ 121.955294][ T7949] JFS: block map error in dbBackSplit [ 121.956756][ T7949] ERROR: (device loop1): dbDiscardAG: -EIO [ 121.956756][ T7949] [ 121.964571][ T7949] ERROR: (device loop1): remounting filesystem as read-only [ 121.966536][ T7949] syz-executor.1: attempt to access beyond end of device [ 121.966536][ T7949] loop1: rw=2051, sector=2629632, nr_sectors = 8192 limit=32768 [ 121.970389][ T7949] JFS: sb_issue_discard(00000000a20b1674, 328704, 1024, GFP_NOFS, 0) = -5 => failed! [ 122.007106][ T7949] blkno = 50400, nblocks = 400 [ 122.008359][ T7949] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 122.008359][ T7949] [ 122.018790][ T7528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 122.047257][ T7986] loop2: detected capacity change from 0 to 128 [ 122.059862][ T7986] EXT4-fs error (device loop2): __ext4_fill_super:5447: inode #2: comm syz-executor.2: iget: checksum invalid [ 122.068062][ T7986] EXT4-fs (loop2): get root inode failed [ 122.069733][ T7986] EXT4-fs (loop2): mount failed [ 122.118468][ T7982] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 122.360725][ T8004] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.417588][ T8004] loop2: detected capacity change from 0 to 1024 [ 122.588853][ T8017] loop4: detected capacity change from 0 to 512 [ 122.666745][ T8022] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.682418][ T8022] loop1: detected capacity change from 0 to 1024 [ 123.217292][ T8017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.335990][ T6269] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.370828][ T8027] loop2: detected capacity change from 0 to 1024 [ 123.467899][ T8033] loop1: detected capacity change from 0 to 128 [ 123.480667][ T8033] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz-executor.1: iget: checksum invalid [ 123.496499][ T8033] EXT4-fs (loop1): get root inode failed [ 123.498109][ T8033] EXT4-fs (loop1): mount failed [ 123.508196][ T8038] loop3: detected capacity change from 0 to 8 [ 123.535751][ T8038] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 123.546117][ T8038] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 123.624619][ T8043] loop1: detected capacity change from 0 to 256 [ 123.757426][ T8050] loop1: detected capacity change from 0 to 512 [ 123.786900][ T8050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.902387][ T7358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.963600][ T8060] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.598114][ T8044] loop4: detected capacity change from 0 to 32768 [ 124.736970][ T8071] loop1: detected capacity change from 0 to 128 [ 124.775213][ T8071] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz-executor.1: iget: checksum invalid [ 124.795226][ T8071] EXT4-fs (loop1): get root inode failed [ 124.796750][ T8071] EXT4-fs (loop1): mount failed [ 124.835219][ T8076] loop2: detected capacity change from 0 to 256 [ 124.851440][ T8078] overlayfs: failed to resolve './file0': -2 [ 125.025217][ T8085] loop2: detected capacity change from 0 to 512 [ 125.062340][ T8085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.112512][ T8090] loop1: detected capacity change from 0 to 1024 [ 125.132304][ T7642] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.170228][ T6276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 125.175687][ T7982] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 125.183368][ T6276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 125.186865][ T6276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 125.191342][ T6276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 125.194794][ T6276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 125.196878][ T6276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.232552][ T8044] loop4: detected capacity change from 0 to 32768 [ 125.267905][ T8044] JFS: block map error in dbBackSplit [ 125.271464][ T8044] ERROR: (device loop4): dbDiscardAG: -EIO [ 125.271464][ T8044] [ 125.294745][ T8044] ERROR: (device loop4): remounting filesystem as read-only [ 125.296757][ T8044] syz-executor.4: attempt to access beyond end of device [ 125.296757][ T8044] loop4: rw=2051, sector=2629632, nr_sectors = 8192 limit=32768 [ 125.300411][ T8044] JFS: sb_issue_discard(000000008a609497, 328704, 1024, GFP_NOFS, 0) = -5 => failed! [ 125.328723][ T8044] blkno = 50400, nblocks = 400 [ 125.338892][ T8044] ERROR: (device loop4): dbFree: block to be freed is outside the map [ 125.338892][ T8044] [ 125.568421][ T8103] loop2: detected capacity change from 0 to 1024 [ 125.571916][ T8102] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 125.945868][ T2291] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.948038][ T2291] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.158514][ T8115] loop2: detected capacity change from 0 to 8 [ 126.166369][ T8115] overlayfs: missing 'lowerdir' [ 126.176232][ T8117] loop4: detected capacity change from 0 to 128 [ 126.201655][ T8117] EXT4-fs error (device loop4): __ext4_fill_super:5447: inode #2: comm syz-executor.4: iget: checksum invalid [ 126.207389][ T8117] EXT4-fs (loop4): get root inode failed [ 126.211137][ T8117] EXT4-fs (loop4): mount failed [ 126.293671][ T7982] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 126.309730][ T8124] loop2: detected capacity change from 0 to 256 [ 126.325137][ T8093] chnl_net:caif_netlink_parms(): no params data found [ 126.502756][ T6653] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.603310][ T8136] loop4: detected capacity change from 0 to 1024 [ 126.677020][ T7982] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 126.685777][ T6653] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.722839][ T8093] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.731126][ T8093] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.743411][ T8093] bridge_slave_0: entered allmulticast mode [ 126.777891][ T8093] bridge_slave_0: entered promiscuous mode [ 126.988818][ T8148] loop2: detected capacity change from 0 to 1024 [ 127.234749][ T6276] Bluetooth: hci4: command tx timeout [ 127.408315][ T8150] loop4: detected capacity change from 0 to 8 [ 127.431677][ T6653] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.443646][ T8150] overlayfs: missing 'lowerdir' [ 127.469332][ T8147] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.472127][ T8093] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.482818][ T8093] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.492869][ T8093] bridge_slave_1: entered allmulticast mode [ 127.495550][ T8093] bridge_slave_1: entered promiscuous mode [ 127.499290][ T8154] loop1: detected capacity change from 0 to 128 [ 127.541005][ T8154] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz-executor.1: iget: checksum invalid [ 127.566571][ T8154] EXT4-fs (loop1): get root inode failed [ 127.597442][ T8154] EXT4-fs (loop1): mount failed [ 127.641670][ T7912] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 127.656720][ T8159] loop4: detected capacity change from 0 to 512 [ 127.684686][ T6653] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.751121][ T8093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.776487][ T8093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.790067][ T8159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.849327][ T8093] team0: Port device team_slave_0 added [ 127.878443][ T6269] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.883476][ T8093] team0: Port device team_slave_1 added [ 127.935530][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.941717][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.962399][ T8093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.974895][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.981962][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.001036][ T8093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.039400][ T7982] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 128.129962][ T8166] loop4: detected capacity change from 0 to 256 [ 128.174862][ T8093] hsr_slave_0: entered promiscuous mode [ 128.234784][ T8093] hsr_slave_1: entered promiscuous mode [ 128.240424][ T7912] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 128.283199][ T8093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.290612][ T8093] Cannot create hsr debugfs directory [ 128.370752][ T6653] bridge_slave_1: left allmulticast mode [ 128.372405][ T6653] bridge_slave_1: left promiscuous mode [ 128.378529][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.386995][ T6653] bridge_slave_0: left allmulticast mode [ 128.388658][ T6653] bridge_slave_0: left promiscuous mode [ 128.390273][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.464171][ T8183] loop2: detected capacity change from 0 to 8 [ 128.496464][ T8183] overlayfs: missing 'lowerdir' [ 128.506094][ T8181] loop4: detected capacity change from 0 to 1024 [ 128.916200][ T8190] loop2: detected capacity change from 0 to 1024 [ 129.303180][ T6276] Bluetooth: hci4: command tx timeout [ 129.421664][ T8192] loop4: detected capacity change from 0 to 128 [ 129.432881][ T8194] loop1: detected capacity change from 0 to 512 [ 129.438000][ T8192] EXT4-fs error (device loop4): __ext4_fill_super:5447: inode #2: comm syz-executor.4: iget: checksum invalid [ 129.459800][ T8192] EXT4-fs (loop4): get root inode failed [ 129.465907][ T8192] EXT4-fs (loop4): mount failed [ 129.536448][ T8194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.659778][ T7358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.769463][ T8206] loop1: detected capacity change from 0 to 256 [ 129.899068][ T8212] loop4: detected capacity change from 0 to 8 [ 129.915177][ T8212] overlayfs: missing 'workdir' [ 130.216215][ T8222] loop4: detected capacity change from 0 to 128 [ 130.231924][ T8222] EXT4-fs error (device loop4): __ext4_fill_super:5447: inode #2: comm syz-executor.4: iget: checksum invalid [ 130.258410][ T8222] EXT4-fs (loop4): get root inode failed [ 130.264320][ T8222] EXT4-fs (loop4): mount failed [ 130.749438][ T8228] loop1: detected capacity change from 0 to 512 [ 130.781250][ T8228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.884392][ T7358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.074063][ T8244] loop1: detected capacity change from 0 to 8 [ 131.117334][ T8244] overlayfs: missing 'workdir' [ 131.181009][ T6653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.267968][ T6653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.282815][ T8248] loop1: detected capacity change from 0 to 128 [ 131.326099][ T6653] bond0 (unregistering): Released all slaves [ 131.333612][ T8248] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz-executor.1: iget: checksum invalid [ 131.340659][ T8248] EXT4-fs (loop1): get root inode failed [ 131.342156][ T8248] EXT4-fs (loop1): mount failed [ 131.383139][ T6276] Bluetooth: hci4: command tx timeout [ 131.810514][ T8189] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.871106][ T8255] loop1: detected capacity change from 0 to 1024 [ 131.947310][ T7982] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 132.081292][ T8268] loop2: detected capacity change from 0 to 512 [ 132.168250][ T8268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.433524][ T7642] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.434309][ T8282] loop4: detected capacity change from 0 to 8 [ 132.459386][ T8282] overlayfs: missing 'workdir' [ 132.658239][ T8292] loop2: detected capacity change from 0 to 128 [ 132.683043][ T8292] EXT4-fs error (device loop2): __ext4_fill_super:5447: inode #2: comm syz-executor.2: iget: checksum invalid [ 132.696613][ T8292] EXT4-fs (loop2): get root inode failed [ 132.698025][ T8292] EXT4-fs (loop2): mount failed [ 132.845265][ T8298] loop4: detected capacity change from 0 to 1024 [ 133.387493][ T8297] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.473112][ T6276] Bluetooth: hci4: command tx timeout [ 133.482219][ T6653] hsr_slave_0: left promiscuous mode [ 133.573145][ T6653] hsr_slave_1: left promiscuous mode [ 133.653252][ T6653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.658466][ T6653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.667344][ T6653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.674850][ T6653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.802443][ T6653] veth1_macvtap: left promiscuous mode [ 133.808579][ T6653] veth0_macvtap: left promiscuous mode [ 133.816467][ T6653] veth1_vlan: left promiscuous mode [ 133.821251][ T6653] veth0_vlan: left promiscuous mode [ 134.109222][ T8318] loop1: detected capacity change from 0 to 8 [ 134.438867][ T8336] loop1: detected capacity change from 0 to 1024 [ 134.481881][ T7982] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 134.605530][ T8342] loop4: detected capacity change from 0 to 512 [ 134.616059][ T8339] loop2: detected capacity change from 0 to 1024 [ 134.647909][ T8342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.684368][ T7982] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 134.776237][ T6269] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.882033][ T8347] loop4: detected capacity change from 0 to 8 [ 135.187325][ T8353] loop4: detected capacity change from 0 to 128 [ 135.233952][ T8353] EXT4-fs error (device loop4): __ext4_fill_super:5447: inode #2: comm syz-executor.4: iget: checksum invalid [ 135.253265][ T8353] EXT4-fs (loop4): get root inode failed [ 135.254857][ T8353] EXT4-fs (loop4): mount failed [ 136.009264][ T8372] overlayfs: failed to resolve './file0': -2 [ 136.386620][ T6653] team0 (unregistering): Port device team_slave_1 removed [ 136.575013][ T6653] team0 (unregistering): Port device team_slave_0 removed [ 136.634808][ T8392] loop4: detected capacity change from 0 to 1024 [ 136.736394][ T8394] loop2: detected capacity change from 0 to 8 [ 136.878572][ T8398] loop2: detected capacity change from 0 to 256 [ 137.175101][ T8405] loop2: detected capacity change from 0 to 128 [ 137.184198][ T8405] EXT4-fs error (device loop2): __ext4_fill_super:5447: inode #2: comm syz-executor.2: iget: checksum invalid [ 137.218681][ T8405] EXT4-fs (loop2): get root inode failed [ 137.226929][ T8405] EXT4-fs (loop2): mount failed [ 138.341415][ T8424] loop2: detected capacity change from 0 to 512 [ 138.393787][ T8424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.422255][ T8429] overlayfs: failed to resolve './file0': -2 [ 138.469609][ T7642] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.688234][ T8440] loop2: detected capacity change from 0 to 128 [ 138.705603][ T8440] EXT4-fs error (device loop2): __ext4_fill_super:5447: inode #2: comm syz-executor.2: iget: checksum invalid [ 138.708972][ T8440] EXT4-fs (loop2): get root inode failed [ 138.710476][ T8440] EXT4-fs (loop2): mount failed [ 139.199399][ T8457] loop2: detected capacity change from 0 to 32768 [ 139.509082][ T8331] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.548767][ T8460] loop1: detected capacity change from 0 to 8 [ 139.587371][ T8457] loop2: detected capacity change from 0 to 32768 [ 139.751455][ T8466] loop1: detected capacity change from 0 to 512 [ 139.838130][ T8466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.909738][ T7358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.965791][ T8482] loop2: detected capacity change from 0 to 256 [ 140.039570][ T8093] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 140.064627][ T8486] loop4: detected capacity change from 0 to 128 [ 140.069024][ T8093] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 140.079239][ T8093] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 140.087573][ T8486] EXT4-fs error (device loop4): __ext4_fill_super:5447: inode #2: comm syz-executor.4: iget: checksum invalid [ 140.118774][ T8486] EXT4-fs (loop4): get root inode failed [ 140.120343][ T8486] EXT4-fs (loop4): mount failed [ 140.126246][ T8093] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 140.281446][ T8093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.317336][ T8093] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.327990][ T2199] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.329780][ T2199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.356735][ T2199] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.358551][ T2199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.374438][ T8502] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.383283][ T8502] loop2: detected capacity change from 0 to 1024 [ 140.409157][ T8093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.433029][ T7982] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 140.468727][ T8507] loop4: detected capacity change from 0 to 8 [ 140.586810][ T8093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.645848][ T8093] veth0_vlan: entered promiscuous mode [ 140.661368][ T8093] veth1_vlan: entered promiscuous mode [ 140.698852][ T8093] veth0_macvtap: entered promiscuous mode [ 140.705907][ T8093] veth1_macvtap: entered promiscuous mode [ 140.725265][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.731291][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.736069][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.740901][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.749366][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.756567][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.764596][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.770655][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.777841][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.784929][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.790792][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.800485][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.809900][ T8093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.824736][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.829827][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.835705][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.840711][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.848838][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.859106][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.865770][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.871891][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.880133][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.890458][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.897860][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.904916][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.912151][ T8093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.934294][ T8093] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.945529][ T8093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.953459][ T8093] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.959065][ T8093] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.076165][ T8517] loop4: detected capacity change from 0 to 32768 [ 141.083463][ T8535] loop1: detected capacity change from 0 to 512 [ 141.098062][ T6655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.100561][ T6655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.122380][ T8535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.139461][ T6652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.155990][ T6652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.249656][ T7358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.306247][ T8546] loop2: detected capacity change from 0 to 256 [ 141.445387][ T8559] loop3: detected capacity change from 0 to 128 [ 141.464208][ T8559] EXT4-fs error (device loop3): __ext4_fill_super:5447: inode #2: comm syz-executor.3: iget: checksum invalid [ 141.479152][ T8559] EXT4-fs (loop3): get root inode failed [ 141.480740][ T8559] EXT4-fs (loop3): mount failed [ 141.513995][ T8564] loop2: detected capacity change from 0 to 8 [ 141.552878][ T7912] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 141.740274][ T7912] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 141.748888][ T8581] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.757343][ T8581] loop1: detected capacity change from 0 to 1024 [ 141.825028][ T7912] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 141.908603][ T8517] loop4: detected capacity change from 0 to 32768 [ 141.935120][ T8589] loop2: detected capacity change from 0 to 1024 [ 142.241276][ T8602] loop4: detected capacity change from 0 to 256 [ 142.550062][ T6271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.558456][ T6271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.566895][ T6271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.576420][ T6271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.578671][ T6271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 142.580838][ T6271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.084715][ T8622] loop3: detected capacity change from 0 to 32768 [ 143.097255][ T6655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.151971][ T7982] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 143.186504][ T6651] hfsplus: b-tree write err: -5, ino 4 [ 143.292834][ T6655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.424887][ T6655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.435053][ T8638] loop2: detected capacity change from 0 to 256 [ 143.515956][ T8622] loop3: detected capacity change from 0 to 32768 [ 143.544936][ T6655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.553332][ T7982] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 143.561646][ T8644] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.573208][ T8644] loop1: detected capacity change from 0 to 1024 [ 143.638105][ T8646] loop2: detected capacity change from 0 to 128 [ 143.642237][ T8609] chnl_net:caif_netlink_parms(): no params data found [ 143.658254][ T8646] EXT4-fs error (device loop2): __ext4_fill_super:5447: inode #2: comm syz-executor.2: iget: checksum invalid [ 143.671348][ T8646] EXT4-fs (loop2): get root inode failed [ 143.675608][ T8646] EXT4-fs (loop2): mount failed [ 143.796529][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.809993][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.820711][ T8609] bridge_slave_0: entered allmulticast mode [ 143.829769][ T8609] bridge_slave_0: entered promiscuous mode [ 143.869048][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.874199][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.888887][ T8609] bridge_slave_1: entered allmulticast mode [ 143.896278][ T8609] bridge_slave_1: entered promiscuous mode [ 143.986556][ T8609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.989876][ T6655] bridge_slave_1: left allmulticast mode [ 143.991882][ T6655] bridge_slave_1: left promiscuous mode [ 143.993544][ T8661] loop2: detected capacity change from 0 to 512 [ 143.996049][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.007987][ T6655] bridge_slave_0: left allmulticast mode [ 144.010682][ T6655] bridge_slave_0: left promiscuous mode [ 144.013309][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.028614][ T8661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.107294][ T7642] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.197470][ T8668] loop3: detected capacity change from 0 to 1024 [ 144.459831][ T8679] loop1: detected capacity change from 0 to 256 [ 144.552240][ T8685] loop1: detected capacity change from 0 to 128 [ 144.569794][ T8685] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz-executor.1: iget: checksum invalid [ 144.574491][ T8685] EXT4-fs (loop1): get root inode failed [ 144.583230][ T8685] EXT4-fs (loop1): mount failed [ 144.663445][ T6276] Bluetooth: hci0: command tx timeout [ 144.693111][ T6518] syz-executor.0: attempt to access beyond end of device [ 144.693111][ T6518] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 144.699797][ T6518] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 144.704619][ T6518] syz-executor.0: attempt to access beyond end of device [ 144.704619][ T6518] loop0: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 144.708107][ T6518] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 144.731017][ T6518] syz-executor.0: attempt to access beyond end of device [ 144.731017][ T6518] loop0: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 144.735324][ T6518] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 144.742573][ T6518] syz-executor.0: attempt to access beyond end of device [ 144.742573][ T6518] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 144.763558][ T6518] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 144.794337][ T8692] loop1: detected capacity change from 0 to 512 [ 144.801139][ T6535] syz-executor.0: attempt to access beyond end of device [ 144.801139][ T6535] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 144.819894][ T8692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.823784][ T6535] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 144.825875][ T6535] syz-executor.0: attempt to access beyond end of device [ 144.825875][ T6535] loop0: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 144.833924][ T6535] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 144.858815][ T6535] syz-executor.0: attempt to access beyond end of device [ 144.858815][ T6535] loop0: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 144.886920][ T6535] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 144.889191][ T6535] syz-executor.0: attempt to access beyond end of device [ 144.889191][ T6535] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 144.892819][ T6535] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 144.948085][ T6539] syz-executor.0: attempt to access beyond end of device [ 144.948085][ T6539] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 144.952192][ T6539] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 144.959851][ T7358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.990159][ T6539] syz-executor.0: attempt to access beyond end of device [ 144.990159][ T6539] loop0: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 145.008848][ T6539] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 145.074830][ T8683] loop2: detected capacity change from 0 to 32768 [ 145.130114][ T8659] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 145.250977][ T6653] hfsplus: b-tree write err: -5, ino 4 [ 145.385461][ T8712] loop2: detected capacity change from 0 to 256 [ 145.618861][ T8719] loop2: detected capacity change from 0 to 128 [ 145.631245][ T8719] EXT4-fs error (device loop2): __ext4_fill_super:5447: inode #2: comm syz-executor.2: iget: checksum invalid [ 145.659439][ T8719] EXT4-fs (loop2): get root inode failed [ 145.664989][ T8719] EXT4-fs (loop2): mount failed [ 146.007561][ T8726] loop1: detected capacity change from 0 to 512 [ 146.077231][ T8726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.157929][ T7358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.244824][ T8737] loop2: detected capacity change from 0 to 1024 [ 146.252705][ T6655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.332584][ T6655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.383083][ T6655] bond0 (unregistering): Released all slaves [ 146.416476][ T8609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.469611][ T8748] loop3: detected capacity change from 0 to 128 [ 146.476000][ T8705] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 146.498191][ T8748] EXT4-fs error (device loop3): __ext4_fill_super:5447: inode #2: comm syz-executor.3: iget: checksum invalid [ 146.511000][ T8748] EXT4-fs (loop3): get root inode failed [ 146.514936][ T8748] EXT4-fs (loop3): mount failed [ 146.595310][ T8609] team0: Port device team_slave_0 added [ 146.613585][ T8609] team0: Port device team_slave_1 added [ 146.744421][ T6276] Bluetooth: hci0: command tx timeout [ 146.814813][ T8741] loop1: detected capacity change from 0 to 32768 [ 146.856968][ T7982] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 146.921762][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.929946][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.950054][ T8609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.962169][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.972818][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.994863][ T8609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.033896][ T8773] loop1: detected capacity change from 0 to 512 [ 147.076901][ T8773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.187732][ T7358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.367106][ T8609] hsr_slave_0: entered promiscuous mode [ 147.421604][ T8609] hsr_slave_1: entered promiscuous mode [ 147.473066][ T8609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.475229][ T8609] Cannot create hsr debugfs directory [ 147.517075][ T8792] loop1: detected capacity change from 0 to 256 [ 147.609734][ T8790] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.618885][ T6653] hfsplus: b-tree write err: -5, ino 4 [ 147.645571][ T8797] loop1: detected capacity change from 0 to 128 [ 147.651945][ T6655] hsr_slave_0: left promiscuous mode [ 147.660076][ T8797] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz-executor.1: iget: checksum invalid [ 147.664440][ T8797] EXT4-fs (loop1): get root inode failed [ 147.665843][ T8797] EXT4-fs (loop1): mount failed [ 147.701318][ T6655] hsr_slave_1: left promiscuous mode [ 147.783029][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.792841][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.803175][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.811695][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.889610][ T6655] veth1_macvtap: left promiscuous mode [ 147.896369][ T6655] veth0_macvtap: left promiscuous mode [ 147.902225][ T6655] veth1_vlan: left promiscuous mode [ 147.909204][ T6655] veth0_vlan: left promiscuous mode [ 148.012775][ T8816] loop1: detected capacity change from 0 to 256 [ 148.213399][ T8800] loop3: detected capacity change from 0 to 32768 [ 148.244445][ T8659] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 148.331121][ T8824] loop1: detected capacity change from 0 to 1024 [ 148.448665][ T8827] loop3: detected capacity change from 0 to 128 [ 148.469330][ T8827] EXT4-fs error (device loop3): __ext4_fill_super:5447: inode #2: comm syz-executor.3: iget: checksum invalid [ 148.484530][ T8827] EXT4-fs (loop3): get root inode failed [ 148.489368][ T8827] EXT4-fs (loop3): mount failed [ 148.823260][ T6276] Bluetooth: hci0: command tx timeout [ 149.108737][ T8851] loop3: detected capacity change from 0 to 1024 [ 149.156197][ T7982] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 149.324419][ T8845] loop2: detected capacity change from 0 to 32768 [ 149.392188][ T7982] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 149.452267][ T6651] hfsplus: b-tree write err: -5, ino 4 [ 149.797778][ T8845] loop2: detected capacity change from 0 to 32768 [ 149.970377][ T8875] loop2: detected capacity change from 0 to 256 [ 150.160721][ T8883] loop2: detected capacity change from 0 to 1024 [ 150.306378][ T6655] team0 (unregistering): Port device team_slave_1 removed [ 150.528685][ T6655] team0 (unregistering): Port device team_slave_0 removed [ 150.904939][ T6276] Bluetooth: hci0: command tx timeout [ 150.982237][ T8895] loop1: detected capacity change from 0 to 32768 [ 151.257148][ T6651] hfsplus: b-tree write err: -5, ino 4 [ 151.409065][ T8895] loop1: detected capacity change from 0 to 32768 [ 151.641949][ T8921] loop1: detected capacity change from 0 to 256 [ 151.772817][ T8926] loop1: detected capacity change from 0 to 128 [ 151.775312][ T8924] autofs: Unknown parameter 'rootmode' [ 151.803752][ T8926] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz-executor.1: iget: checksum invalid [ 151.807616][ T8926] EXT4-fs (loop1): get root inode failed [ 151.809078][ T8926] EXT4-fs (loop1): mount failed [ 152.071429][ T8932] loop1: detected capacity change from 0 to 1024 [ 152.894145][ T8940] loop2: detected capacity change from 0 to 32768 [ 152.961533][ T7982] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 153.123232][ T6646] hfsplus: b-tree write err: -5, ino 4 [ 153.260019][ T8846] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.334715][ T8928] dvmrp1: entered allmulticast mode [ 153.412495][ T8948] loop3: detected capacity change from 0 to 256 [ 153.443338][ T8944] loop1: detected capacity change from 0 to 4096 [ 153.444705][ T8940] loop2: detected capacity change from 0 to 32768 [ 153.464319][ T8944] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 153.536454][ T8944] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 153.549051][ T8954] loop3: detected capacity change from 0 to 256 [ 153.579298][ T8944] ntfs3: loop1: ino=1b, "file0" The size of extended attributes must not exceed 64KiB [ 153.648894][ T8659] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 154.038032][ T8986] loop3: detected capacity change from 0 to 1024 [ 154.106684][ T8989] loop1: detected capacity change from 0 to 256 [ 154.115006][ T8976] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.142628][ T8989] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 154.347108][ T8992] loop1: detected capacity change from 0 to 256 [ 154.564723][ T8609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 154.577062][ T8609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 154.596105][ T8609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 154.625365][ T8609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 154.754724][ T8609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.780308][ T9010] loop3: detected capacity change from 0 to 128 [ 154.786525][ T8609] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.799599][ T9005] loop2: detected capacity change from 0 to 8192 [ 154.811927][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.813922][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.816895][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.819087][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.822230][ T9005] REISERFS warning (device loop2): super-6505 reiserfs_getopt: head of option "notail" is only correct [ 154.822230][ T9005] [ 154.826291][ T9010] EXT4-fs error (device loop3): __ext4_fill_super:5447: inode #2: comm syz-executor.3: iget: checksum invalid [ 154.850897][ T8609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.862009][ T9010] EXT4-fs (loop3): get root inode failed [ 154.874723][ T9010] EXT4-fs (loop3): mount failed [ 154.892999][ T8609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.971975][ T8996] loop1: detected capacity change from 0 to 32768 [ 155.132651][ T8609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.149919][ T9034] loop3: detected capacity change from 0 to 256 [ 155.346938][ T9051] loop3: detected capacity change from 0 to 256 [ 155.463287][ T8609] veth0_vlan: entered promiscuous mode [ 155.469712][ T8609] veth1_vlan: entered promiscuous mode [ 155.536519][ T8609] veth0_macvtap: entered promiscuous mode [ 155.545000][ T8609] veth1_macvtap: entered promiscuous mode [ 155.575784][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.578593][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.610083][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.620198][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.622835][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.630335][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.634098][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.637593][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.640518][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.650996][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.653842][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.656516][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.672672][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.686068][ T9059] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.694554][ T9059] loop3: detected capacity change from 0 to 1024 [ 155.706324][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.709238][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.711839][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.723547][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.726218][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.729024][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.731581][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.753064][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.755796][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.758465][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.761036][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.769086][ T8996] loop1: detected capacity change from 0 to 32768 [ 155.771404][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.776699][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.780472][ T8609] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.782779][ T8609] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.786691][ T7982] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 155.795164][ T8609] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.798882][ T8609] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.968524][ T6650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.979859][ T6650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.018857][ T6650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.027653][ T6650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.148473][ T9077] loop4: detected capacity change from 0 to 8 [ 156.243157][ T9083] loop1: detected capacity change from 0 to 128 [ 156.258066][ T9083] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz-executor.1: iget: checksum invalid [ 156.271147][ T9083] EXT4-fs (loop1): get root inode failed [ 156.278076][ T9083] EXT4-fs (loop1): mount failed [ 156.483897][ T9102] syzkaller0: entered promiscuous mode [ 156.487747][ T9102] syzkaller0: entered allmulticast mode [ 156.545000][ T9106] loop3: detected capacity change from 0 to 128 [ 156.570994][ T9106] VFS: unable to find oldfs superblock on device loop3 [ 156.653688][ T7982] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 156.848025][ T9101] loop2: detected capacity change from 0 to 32768 [ 157.218852][ T9101] loop2: detected capacity change from 0 to 32768 [ 157.225718][ T9116] loop4: detected capacity change from 0 to 2048 [ 157.279192][ T9116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.297248][ T9114] loop3: detected capacity change from 0 to 32768 [ 157.299953][ T9114] XFS (loop3): Invalid device [./file0], error=-15 [ 157.321901][ T9116] fs-verity: sha512 using implementation "sha512-arm64" [ 157.390001][ T8659] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 157.407491][ T9121] 9pnet_fd: Insufficient options for proto=fd [ 157.499422][ T8609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.721902][ T9126] loop2: detected capacity change from 0 to 1024 [ 158.753212][ T6271] Bluetooth: hci2: command 0x0406 tx timeout [ 159.317264][ T9146] loop4: detected capacity change from 0 to 32768 [ 159.361563][ T7982] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 159.637115][ T9146] loop4: detected capacity change from 0 to 32768 [ 160.195507][ T9152] loop4: detected capacity change from 0 to 1024 [ 171.935762][ T9125] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.954452][ T9151] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.079032][ T9161] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 172.090342][ T9161] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.092702][ T9161] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.126877][ T9164] loop1: detected capacity change from 0 to 128 [ 172.177536][ T9168] loop3: detected capacity change from 0 to 128 [ 172.184958][ T9164] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz-executor.1: iget: checksum invalid [ 172.206529][ T9164] EXT4-fs (loop1): get root inode failed [ 172.208029][ T9164] EXT4-fs (loop1): mount failed [ 172.223236][ T9168] EXT4-fs error (device loop3): __ext4_fill_super:5447: inode #2: comm syz-executor.3: iget: checksum invalid [ 172.232806][ T9171] loop2: detected capacity change from 0 to 256 [ 172.264884][ T9168] EXT4-fs (loop3): get root inode failed [ 172.266445][ T9168] EXT4-fs (loop3): mount failed [ 172.272458][ T9166] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 172.355385][ T9173] x_tables: duplicate underflow at hook 1 [ 172.368536][ T9173] loop4: detected capacity change from 0 to 512 [ 172.416045][ T9173] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 172.427903][ T9173] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 172.480548][ T9173] EXT4-fs (loop4): 1 orphan inode deleted [ 172.489979][ T9173] EXT4-fs (loop4): 1 truncate cleaned up [ 172.540480][ T9173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.548183][ T9187] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.557542][ T9187] loop3: detected capacity change from 0 to 1024 [ 173.256062][ T9157] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 173.297662][ T9157] EXT4-fs (loop4): Remounting filesystem read-only [ 173.307807][ T9157] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 12, error -5) [ 173.355337][ T9195] loop3: detected capacity change from 0 to 16 [ 173.380502][ T9195] erofs: (device loop3): mounted with root inode @ nid 36. [ 173.414719][ T9195] overlay: Unknown parameter '/' [ 173.553903][ T8609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.673765][ T9182] loop1: detected capacity change from 0 to 32768 [ 173.912882][ T9224] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.755152][ T9215] loop4: detected capacity change from 0 to 32768 [ 174.777398][ T9215] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 174.861251][ T9215] XFS (loop4): Ending clean mount [ 174.865299][ T9215] XFS (loop4): Quotacheck needed: Please wait. [ 174.921568][ T9182] loop1: detected capacity change from 0 to 32768 [ 174.946218][ T9215] XFS (loop4): Quotacheck: Done. [ 175.020024][ T8609] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 175.248082][ T9248] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 175.292211][ T9219] loop2: detected capacity change from 0 to 65536 [ 175.345934][ T9219] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 175.369019][ T9261] loop4: detected capacity change from 0 to 128 [ 175.413472][ T9261] EXT4-fs error (device loop4): __ext4_fill_super:5447: inode #2: comm syz-executor.4: iget: checksum invalid [ 175.428298][ T9261] EXT4-fs (loop4): get root inode failed [ 175.429729][ T9261] EXT4-fs (loop4): mount failed [ 175.475068][ T9219] XFS (loop2): Ending clean mount [ 175.509553][ T9258] loop1: detected capacity change from 0 to 8192 [ 175.549947][ T9258] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "notail" is only correct [ 175.549947][ T9258] [ 175.613048][ T9158] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 175.778481][ T9258] loop1: detected capacity change from 0 to 4096 [ 175.791899][ T7642] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 175.827432][ T9268] loop3: detected capacity change from 0 to 32768 [ 175.830547][ T9268] workqueue: name exceeds WQ_NAME_LEN. Truncating to: gfs2-delete/__Š°"_½z#²˱1 [ 175.864580][ T9268] gfs2: fsid=__Š°"_½z#²˱1Ä¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä¢ “I¡3ØÆÆåwÕÊ‚X9" [ 175.868415][ T9268] gfs2: fsid=__Š°"_½z#²˱1Ä¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 1801)... [ 175.884332][ T9172] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 175.924249][ T9268] gfs2: fsid=__Š°"_½z#²˱1Ä¢ “I¡3ØÆÆåwÕÊ‚X9.0: journal 0 mapped with 16 extents in 0ms [ 175.955587][ T6318] gfs2: fsid=__Š°"_½z#²˱1Ä¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0, already locked for use [ 175.958610][ T6318] gfs2: fsid=__Š°"_½z#²˱1Ä¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Looking at journal... [ 176.083281][ T6318] gfs2: fsid=__Š°"_½z#²˱1Ä¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Journal head lookup took 124ms [ 176.101618][ T6318] gfs2: fsid=__Š°"_½z#²˱1Ä¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Done [ 176.105493][ T9268] gfs2: fsid=__Š°"_½z#²˱1Ä¢ “I¡3ØÆÆåwÕÊ‚X9.0: first mount done, others may mount [ 176.107435][ T9277] loop1: detected capacity change from 0 to 512 [ 176.110038][ T9277] EXT4-fs: Ignoring sb option on remount [ 176.127045][ T9277] EXT4-fs: Ignoring removed orlov option [ 176.197977][ T9277] EXT4-fs (nvme0n1p2): can't enable nombcache during remount [ 176.461589][ T9280] loop4: detected capacity change from 0 to 32768 [ 176.476128][ T9280] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (9280) [ 176.493203][ T9280] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.495933][ T9280] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 176.498292][ T9280] BTRFS info (device loop4): using free-space-tree [ 176.502248][ T9285] loop1: detected capacity change from 0 to 4096 [ 176.558966][ T9158] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 176.629191][ T9304] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.020498][ T9285] loop1: detected capacity change from 0 to 32768 [ 177.177496][ T9285] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 177.181150][ T9285] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 177.224681][ T9285] bcachefs (loop1): alloc_read... done [ 177.226151][ T9285] bcachefs (loop1): stripes_read... done [ 177.227748][ T9285] bcachefs (loop1): snapshots_read... done [ 177.230550][ T9285] bcachefs (loop1): journal_replay... done [ 177.232093][ T9285] bcachefs (loop1): resume_logged_ops... done [ 177.239830][ T9285] bcachefs (loop1): going read-write [ 177.263961][ T9285] bcachefs (loop1): done starting filesystem [ 177.857879][ T9317] loop2: detected capacity change from 0 to 32768 [ 178.239628][ T7358] bcachefs (loop1): shutting down [ 178.240891][ T7358] bcachefs (loop1): going read-only [ 178.242231][ T7358] bcachefs (loop1): finished waiting for writes to stop [ 178.281404][ T9172] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 178.290531][ T7358] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10 [ 178.293219][ T7358] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 178.306317][ T7358] bcachefs (loop1): shutdown complete, journal seq 11 [ 178.308554][ T7358] bcachefs (loop1): marking filesystem clean [ 178.327704][ T8609] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.387135][ T7358] bcachefs (loop1): shutdown complete [ 178.585522][ T9330] loop4: detected capacity change from 0 to 128 [ 178.609684][ T9330] EXT4-fs error (device loop4): __ext4_fill_super:5447: inode #2: comm syz-executor.4: iget: checksum invalid [ 178.613900][ T9330] EXT4-fs (loop4): get root inode failed [ 178.615343][ T9330] EXT4-fs (loop4): mount failed [ 178.822800][ T9334] loop4: detected capacity change from 0 to 164 [ 178.919747][ T9317] loop2: detected capacity change from 0 to 32768 [ 179.026731][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.286760][ T9358] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 179.292428][ T9358] loop2: detected capacity change from 0 to 1024 [ 179.926429][ T9361] loop1: detected capacity change from 0 to 128 [ 179.938217][ T9361] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz-executor.1: iget: checksum invalid [ 179.954028][ T9361] EXT4-fs (loop1): get root inode failed [ 179.959884][ T9361] EXT4-fs (loop1): mount failed [ 180.002327][ T6652] hfsplus: b-tree write err: -5, ino 4 [ 180.082174][ T9369] loop2: detected capacity change from 0 to 1024 [ 180.186927][ T9369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.253427][ T9351] loop3: detected capacity change from 0 to 32768 [ 180.283175][ T9351] bcachefs (/dev/loop3): error reading default superblock: Not a bcachefs superblock (got magic c68573f6-4e1a-4502-8265-f57f48ba6d81) [ 180.324773][ T9380] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 180.401400][ T7642] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.531963][ T9351] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 180.543065][ T9351] bcachefs (loop3): recovering from clean shutdown, journal seq 13 [ 180.672258][ T9351] bcachefs (loop3): alloc_read... done [ 180.675442][ T9351] bcachefs (loop3): stripes_read... done [ 180.676922][ T9351] bcachefs (loop3): snapshots_read... done [ 180.685188][ T9351] bcachefs (loop3): journal_replay... done [ 180.686634][ T9351] bcachefs (loop3): resume_logged_ops... done [ 180.688154][ T9351] bcachefs (loop3): going read-write [ 180.713760][ T9351] bcachefs (loop3): done starting filesystem [ 180.732052][ T9368] loop4: detected capacity change from 0 to 32768 [ 180.754853][ T9351] 9pnet_fd: Insufficient options for proto=fd [ 180.796180][ T8093] bcachefs (loop3): shutting down [ 180.797557][ T8093] bcachefs (loop3): going read-only [ 180.803352][ T8093] bcachefs (loop3): finished waiting for writes to stop [ 180.809576][ T9158] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 180.844141][ T8093] bcachefs (loop3): flushing journal and stopping allocators, journal seq 13 [ 180.846352][ T8093] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13 [ 180.861109][ T8093] bcachefs (loop3): shutdown complete, journal seq 14 [ 180.864238][ T8093] bcachefs (loop3): marking filesystem clean [ 180.900184][ T8093] bcachefs (loop3): shutdown complete [ 181.287197][ T9368] loop4: detected capacity change from 0 to 32768 [ 181.454356][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.704284][ T9407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.706890][ T9407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.718811][ T9407] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.902803][ T9412] loop2: detected capacity change from 0 to 1024 [ 182.214029][ T9410] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 182.531099][ T6653] hfsplus: b-tree write err: -5, ino 4 [ 182.571053][ T9418] loop3: detected capacity change from 0 to 4096 [ 182.659869][ T9158] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 182.695175][ T9418] loop3: detected capacity change from 0 to 2048 [ 182.793735][ T9432] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 182.795853][ T9432] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.828006][ T9430] IPv6: NLM_F_CREATE should be specified when creating new route [ 183.724437][ T9446] gre0: entered allmulticast mode [ 183.981313][ T9453] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 184.544663][ T9434] loop2: detected capacity change from 0 to 32768 [ 184.875250][ T9447] loop3: detected capacity change from 0 to 32768 [ 184.961758][ T9447] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 184.971110][ T9447] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 184.990203][ T9447] bcachefs (loop3): alloc_read... done [ 184.991700][ T9447] bcachefs (loop3): stripes_read... done [ 184.993491][ T9447] bcachefs (loop3): snapshots_read... done [ 184.997085][ T9447] bcachefs (loop3): journal_replay... done [ 184.998590][ T9447] bcachefs (loop3): resume_logged_ops... done [ 185.009122][ T9447] bcachefs (loop3): going read-write [ 185.011619][ T9447] bcachefs (loop3): done starting filesystem [ 185.155871][ T8093] bcachefs (loop3): shutting down [ 185.157242][ T8093] bcachefs (loop3): going read-only [ 185.158532][ T8093] bcachefs (loop3): finished waiting for writes to stop [ 185.397324][ T8093] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 185.721200][ T8093] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14 [ 185.761030][ T8093] bcachefs (loop3): shutdown complete, journal seq 15 [ 185.763657][ T8093] bcachefs (loop3): marking filesystem clean [ 185.830338][ T8093] bcachefs (loop3): shutdown complete [ 185.919871][ T9488] loop2: detected capacity change from 0 to 64 [ 186.348278][ T9496] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.430606][ T9496] loop2: detected capacity change from 0 to 1024 [ 187.044613][ T6647] hfsplus: b-tree write err: -5, ino 4 [ 187.079384][ T9490] loop4: detected capacity change from 0 to 32768 [ 187.338404][ T9500] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.614480][ T2291] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.617134][ T2291] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.749415][ T9485] loop1: detected capacity change from 0 to 40427 [ 187.798648][ T9485] F2FS-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 187.878250][ T9158] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 187.928384][ T6271] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.933963][ T6271] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.936812][ T6271] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.939848][ T6271] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.973069][ T6271] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 187.983160][ T6271] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 189.031598][ T9526] No control pipe specified [ 189.039386][ T9517] loop1: detected capacity change from 0 to 32768 [ 189.122154][ T9528] loop4: detected capacity change from 0 to 512 [ 189.148541][ T9528] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 189.161819][ T9528] EXT4-fs (loop4): orphan cleanup on readonly fs [ 189.172224][ T9528] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 189.191564][ T9528] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 189.233258][ T9528] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 189.248992][ T9528] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 40: padding at end of block bitmap is not set [ 189.255089][ T9517] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 189.257905][ T9517] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 189.287656][ T6649] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.296545][ T9528] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 189.300388][ T9528] EXT4-fs (loop4): 1 truncate cleaned up [ 189.308464][ T9528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.318742][ T9502] chnl_net:caif_netlink_parms(): no params data found [ 189.328681][ T9517] bcachefs (loop1): alloc_read... done [ 189.330130][ T9517] bcachefs (loop1): stripes_read... done [ 189.331595][ T9517] bcachefs (loop1): snapshots_read... done [ 189.340957][ T9517] bcachefs (loop1): journal_replay... done [ 189.342566][ T9517] bcachefs (loop1): resume_logged_ops... done [ 189.344503][ T9517] bcachefs (loop1): going read-write [ 189.351858][ T9517] bcachefs (loop1): done starting filesystem [ 189.380923][ T7358] bcachefs (loop1): shutting down [ 189.382131][ T7358] bcachefs (loop1): going read-only [ 189.388815][ T7358] bcachefs (loop1): finished waiting for writes to stop [ 189.447856][ T7358] bcachefs (loop1): flushing journal and stopping allocators, journal seq 7 [ 189.450368][ T7358] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 7 [ 189.467324][ T7358] bcachefs (loop1): shutdown complete, journal seq 8 [ 189.472596][ T7358] bcachefs (loop1): marking filesystem clean [ 189.521090][ T7358] bcachefs (loop1): shutdown complete [ 189.750035][ T6649] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.024709][ T6271] Bluetooth: hci6: command tx timeout [ 190.134762][ T8609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.211120][ T6649] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.145735][ T6649] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.175294][ T9502] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.177121][ T9502] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.179071][ T9502] bridge_slave_0: entered allmulticast mode [ 191.181282][ T9502] bridge_slave_0: entered promiscuous mode [ 191.210289][ T9502] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.215447][ T9502] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.217502][ T9502] bridge_slave_1: entered allmulticast mode [ 191.224048][ T9502] bridge_slave_1: entered promiscuous mode [ 191.333478][ T9502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.337670][ T9502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.375108][ T9566] tipc: Started in network mode [ 191.376793][ T9566] tipc: Node identity aaaaaaaaaa4, cluster identity 4711 [ 191.380414][ T9566] tipc: Enabled bearer , priority 10 [ 191.417612][ T9502] team0: Port device team_slave_0 added [ 191.420820][ T9502] team0: Port device team_slave_1 added [ 191.522867][ T9502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.532964][ T9502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.539804][ T9502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.568566][ T9502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.570373][ T9502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.597362][ T9502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.657222][ T6649] bridge_slave_1: left allmulticast mode [ 191.658898][ T6649] bridge_slave_1: left promiscuous mode [ 191.661580][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.675044][ T6649] bridge_slave_0: left allmulticast mode [ 191.676752][ T6649] bridge_slave_0: left promiscuous mode [ 191.679542][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.612534][ T6271] Bluetooth: hci6: command tx timeout [ 192.622388][ T6273] tipc: Node number set to 15379114 [ 193.758752][ T9613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.761109][ T9613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.310849][ T9615] loop3: detected capacity change from 0 to 256 [ 194.328690][ T6649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.382874][ T6649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.428024][ T6649] bond0 (unregistering): Released all slaves [ 194.478951][ T9502] hsr_slave_0: entered promiscuous mode [ 194.552109][ T9502] hsr_slave_1: entered promiscuous mode [ 194.584739][ T9502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.586863][ T9502] Cannot create hsr debugfs directory [ 194.663108][ T6271] Bluetooth: hci6: command tx timeout [ 194.664423][ T6274] Bluetooth: hci3: command 0x0406 tx timeout [ 194.778403][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.780772][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.946785][ T9652] loop1: detected capacity change from 0 to 512 [ 194.971292][ T9652] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.008297][ T9648] syz_tun: entered promiscuous mode [ 195.063587][ T9652] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 64: padding at end of block bitmap is not set [ 195.092128][ T9652] Quota error (device loop1): write_blk: dquota write failed [ 195.103102][ T9652] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 195.105717][ T9652] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz-executor.1: Failed to acquire dquot type 0 [ 195.123776][ T9652] EXT4-fs (loop1): 1 truncate cleaned up [ 195.125745][ T9652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.170813][ T7358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.453356][ T9686] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 195.576234][ T6649] hsr_slave_0: left promiscuous mode [ 195.625379][ T6649] hsr_slave_1: left promiscuous mode [ 195.704086][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.704533][ T32] INFO: task syz-executor.0:6577 blocked for more than 143 seconds. [ 195.708520][ T32] Tainted: G W 6.10.0-rc3-syzkaller-gac2193b4b460 #0 1970/01/01 00:03:15 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 195.718525][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 195.720159][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.720883][ T32] task:syz-executor.0 state:D stack:0 pid:6577 tgid:6517 ppid:6277 flags:0x00000005 [ 195.740768][ T32] Call trace: [ 195.741621][ T32] __switch_to+0x314/0x560 [ 195.742688][ T32] __schedule+0x14ac/0x24d8 [ 195.762969][ T32] schedule+0xbc/0x238 [ 195.764158][ T32] schedule_preempt_disabled+0x18/0x2c [ 195.765559][ T32] rwsem_down_write_slowpath+0xd10/0x14c8 [ 195.766906][ T32] down_write_nested+0xc0/0xcc [ 195.768009][ T32] do_rmdir+0x1d8/0x720 [ 195.769141][ T32] __arm64_sys_unlinkat+0xe0/0xfc [ 195.770561][ T32] invoke_syscall+0x98/0x2b8 [ 195.771730][ T32] el0_svc_common+0x130/0x23c [ 195.772829][ T32] do_el0_svc+0x48/0x58 [ 195.808258][ T32] el0_svc+0x54/0x168 [ 195.809443][ T32] el0t_64_sync_handler+0x84/0xfc [ 195.810718][ T32] el0t_64_sync+0x190/0x194 [ 195.812172][ T32] INFO: task syz-executor.0:6582 blocked for more than 143 seconds. [ 195.832960][ T32] Tainted: G W 6.10.0-rc3-syzkaller-gac2193b4b460 #0 [ 195.835203][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 195.837403][ T32] task:syz-executor.0 state:D stack:0 pid:6582 tgid:6517 ppid:6277 flags:0x00000005 [ 195.840036][ T32] Call trace: [ 195.840804][ T32] __switch_to+0x314/0x560 [ 195.841882][ T32] __schedule+0x14ac/0x24d8 [ 195.872995][ T32] schedule+0xbc/0x238 [ 195.874118][ T32] schedule_preempt_disabled+0x18/0x2c [ 195.875598][ T32] rwsem_down_write_slowpath+0xd10/0x14c8 [ 195.877013][ T32] down_write+0xb4/0xc0 [ 195.878190][ T32] path_openat+0x5f0/0x285c [ 195.879286][ T32] do_filp_open+0x1bc/0x3cc [ 195.880474][ T32] do_sys_openat2+0x124/0x1b8 [ 195.881608][ T32] __arm64_sys_openat+0x1f0/0x240 [ 195.902984][ T32] invoke_syscall+0x98/0x2b8 [ 195.904237][ T32] el0_svc_common+0x130/0x23c [ 195.905450][ T32] do_el0_svc+0x48/0x58 [ 195.906555][ T32] el0_svc+0x54/0x168 [ 195.907688][ T32] el0t_64_sync_handler+0x84/0xfc [ 195.908952][ T32] el0t_64_sync+0x190/0x194 [ 195.910776][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.912735][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.916972][ T32] [ 195.916972][ T32] Showing all locks held in the system: [ 195.923043][ T32] 2 locks held by kworker/0:1/9: [ 195.924405][ T32] #0: ffff0000c0028948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x624/0x15b8 [ 195.927131][ T32] #1: ffff800093d97c20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x6a0/0x15b8 [ 195.929679][ T32] 1 lock held by khungtaskd/32: [ 195.963874][ T32] #0: ffff80008f1876a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 195.966393][ T32] 2 locks held by getty/6005: [ 195.967614][ T32] #0: ffff0000d26da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 195.970213][ T32] #1: ffff800097d0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41c/0x1228 [ 195.993045][ T32] 2 locks held by syz-fuzzer/6406: [ 195.994476][ T32] 3 locks held by kworker/0:3/6317: [ 195.995763][ T32] #0: ffff0000c0028948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x624/0x15b8 [ 195.998204][ T32] #1: ffff8000994a7c20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6a0/0x15b8 [ 196.000475][ T32] #2: ffff800091d65968 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 196.002469][ T32] 3 locks held by syz-executor.0/6539: [ 196.023677][ T32] 2 locks held by syz-executor.0/6577: