last executing test programs: 27.695289536s ago: executing program 4 (id=255): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@abort}, {@errors_remount}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x9, 0x4, 0x0, 0x80000001}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x10) getdents64(r1, 0x0, 0x7e) 26.633410991s ago: executing program 4 (id=263): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000000)={r2, 0x1000, &(0x7f0000002a80)=""/4096}) 26.411664389s ago: executing program 4 (id=266): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$kcm(0xa, 0x1, 0x106) 26.286758218s ago: executing program 4 (id=267): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) ppoll(&(0x7f0000000d40)=[{r0, 0x0, 0xfdfe}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 25.596253286s ago: executing program 4 (id=279): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x79, &(0x7f0000000000)=""/121, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socket$kcm(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) 24.296289596s ago: executing program 1 (id=294): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000440)=0x97f, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x42ea, 0x4) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 23.871038775s ago: executing program 1 (id=296): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f00000001c0)={0xa0, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}}, 0xa0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0x2000, 0x0) 23.854467574s ago: executing program 1 (id=297): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0xb, &(0x7f00000010c0)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0xc0085508, 0x0) 23.2680291s ago: executing program 1 (id=301): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x448c, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5b3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "fee8a2ab78fc9797d1e00d96072000001ea89de2fbfb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 22.759574172s ago: executing program 1 (id=303): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x3f000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40240, 0x18676}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0xd}, 0x0) 21.733772774s ago: executing program 1 (id=305): sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r1, r0, &(0x7f0000002700)=0x1, 0x8) 21.427738492s ago: executing program 32 (id=305): sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r1, r0, &(0x7f0000002700)=0x1, 0x8) 8.891394168s ago: executing program 0 (id=406): r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x20, 0xf, 0xff, 0xfffff038}, {0x20, 0x1f, 0xf6, 0xfffff024}, {0x6, 0x80}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xba}}]}, 0x38}}, 0x44880) 5.892177121s ago: executing program 0 (id=424): syz_open_dev$vim2m(&(0x7f0000000000), 0xffff, 0x2) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/141, 0x8d}], 0x200000000000024e) 5.248206917s ago: executing program 0 (id=428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x38, r1, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}], @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0xc, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}}, 0x4000) 5.112424622s ago: executing program 0 (id=429): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1af, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901099, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000480)='./file0\x00', 0x1) 4.938370337s ago: executing program 0 (id=430): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f00000068c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x1, 0x553b, &(0x7f0000001380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x800003d, 0x7ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 4.760214812s ago: executing program 3 (id=431): r0 = syz_io_uring_setup(0x3813, &(0x7f00000035c0)={0x0, 0x0, 0x10100, 0x0, 0x4047}, &(0x7f00000000c0)=0x0, &(0x7f0000003580)=0x0) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0x2}, &(0x7f0000000100), &(0x7f0000000080)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) 4.647058931s ago: executing program 3 (id=432): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x8}, 'syz1\x00', 0x4}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x35, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 4.412247774s ago: executing program 0 (id=434): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000014001a80100005800c000680"], 0x34}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c0002"], 0x34}}, 0x0) 4.408928204s ago: executing program 3 (id=435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.146721715s ago: executing program 33 (id=434): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000014001a80100005800c000680"], 0x34}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c0002"], 0x34}}, 0x0) 3.98269752s ago: executing program 4 (id=279): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x79, &(0x7f0000000000)=""/121, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socket$kcm(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) 3.972157703s ago: executing program 3 (id=439): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x3}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x80000000000000, {0x2, 0xf0}}, 0x18) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}], 0xa15e75a6aefc069a, 0x24044804) 3.800970991s ago: executing program 3 (id=440): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0xefc}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) 3.363796483s ago: executing program 2 (id=442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 3.30640806s ago: executing program 2 (id=443): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)='K', 0x1}, {&(0x7f0000000680)="e30b763651634e855c051428524e04ff86d23b956e71ae3e8cc3bc2b124372b7589fe80fc38d36ec74178362c6b1a3c4cb8897c9e4175f2a88ffff249a35a5372e552fd8373d881911794c340515cfa2091d143cae2b2fb5aedfa7f89405e89717f14c9bfd3f1dbeea060dfd30e75a6eb8685e81d69c461672731f0a4605b24371fe2cfdaeab6ad7e8d4465d932aa5abc2d7a29a18b29061f33917c88ad7359de4e16a3acc908ada5d615ea17f02c4879d92e44d12771e847c85aae9b949df7a646c496c23d4c2ea170f83d2c44d1214a1b8391bd243decd61b6a2944ea20cf83869", 0xe2}, {&(0x7f0000000600)="d8fa34bdc826d6af9aa41cac16e1f9612c62d1f123f03d45e8a36cc182e90cf09cc0a4c4c5f7782fdaa6cfa48d009279a91997fce49c6bcd3b718cf290ab1a0af72eac5fb91deb4e383eb4885668cb31dec03c8757f48c2a9e0ee78f9886861055b92a55137f5f8d0f112d156da242115cf538d5467efb894d8e38", 0x7b}, {&(0x7f0000000180)="d78d0c0e1da6c66b78c9e67ab6db", 0xe}, {&(0x7f0000000000)="576e284ccce6a44a9d3907d5bd90fdbf6c31d0c2b385e8baf03db67513e9d8a07629570d4c12fb88e32117f1f5dd93048df92515cdc8a87c8d9de271d8", 0x3d}, {&(0x7f0000000440)="36bd26", 0x3}], 0x6}}], 0x1, 0x8000) 3.212172345s ago: executing program 2 (id=444): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) close(0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000080)={0x3c, 0xfffffffffffffffe, 0x3ffffffffff, 0x2, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) 3.167786786s ago: executing program 2 (id=445): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) 2.987992323s ago: executing program 2 (id=446): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000001240)="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", 0x3f1}], 0x1, &(0x7f0000003240)=ANY=[], 0x148}}], 0x1, 0x22040004) 2.624223128s ago: executing program 2 (id=448): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) 2.24025564s ago: executing program 5 (id=449): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40e00, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0}]) 2.172141322s ago: executing program 5 (id=450): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x3e, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x100, r1, &(0x7f0000000000)='e', 0x1}]) 2.018172242s ago: executing program 5 (id=451): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES8=0x0], 0x41, 0x311, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/158, 0x9e) getdents64(r0, 0x0, 0x0) 1.852196611s ago: executing program 5 (id=452): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4ed, &(0x7f00000005c0)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.612743447s ago: executing program 5 (id=453): syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf695, 0x100ff, 0x0, 0x277}, &(0x7f0000000180), 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0x40189206, &(0x7f0000000180)) 189.629195ms ago: executing program 5 (id=454): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x0}, 0x80, 0x0}}], 0x2, 0x0) 47.270226ms ago: executing program 34 (id=454): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x0}, 0x80, 0x0}}], 0x2, 0x0) 0s ago: executing program 3 (id=456): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)="a6", 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000000000000000280"]) kernel console output (not intermixed with test programs): ed: batadv_slave_1 [ 40.089466][ T6490] veth0_vlan: entered promiscuous mode [ 40.095008][ T6490] veth1_vlan: entered promiscuous mode [ 40.117694][ T6490] veth0_macvtap: entered promiscuous mode [ 40.119918][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.121542][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.122276][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.123685][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.123713][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.124233][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.125741][ T6492] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.125799][ T6492] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.125829][ T6492] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.125858][ T6492] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.156698][ T6499] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.158586][ T6499] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.158619][ T6499] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.158649][ T6499] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.166215][ T6490] veth1_macvtap: entered promiscuous mode [ 40.204410][ T6491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.206118][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.206168][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.234717][ T272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.234779][ T272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.258963][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.259030][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.259398][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.259420][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.260195][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.283784][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.283855][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.283875][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.283896][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.284448][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.285931][ T6490] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.285985][ T6490] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.286023][ T6490] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.286052][ T6490] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.351493][ T6492] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.368071][ T6503] veth0_vlan: entered promiscuous mode [ 40.396925][ T6491] veth0_vlan: entered promiscuous mode [ 40.402763][ T6491] veth1_vlan: entered promiscuous mode [ 40.409229][ T6503] veth1_vlan: entered promiscuous mode [ 40.445914][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.446001][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.522269][ T6491] veth0_macvtap: entered promiscuous mode [ 40.537908][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.537975][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.553226][ T6491] veth1_macvtap: entered promiscuous mode [ 40.576648][ T272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.576717][ T272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.593809][ T6503] veth0_macvtap: entered promiscuous mode [ 40.595823][ T6503] veth1_macvtap: entered promiscuous mode [ 40.624515][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.624586][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.626105][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.626142][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.629165][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.629190][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.629209][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.629229][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.630218][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.635189][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.635219][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.635238][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.635258][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.635276][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.635296][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.635803][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.637274][ T6491] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.637312][ T6491] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.637342][ T6491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.637372][ T6491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.713053][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.715896][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.718585][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.721824][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.721875][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.721903][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.721929][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.721962][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.723041][ T6503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.725229][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.725271][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.725298][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.725333][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.725358][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.725384][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.725409][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.725434][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.726014][ T6503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.728316][ T6503] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.728382][ T6503] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.728425][ T6503] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.728466][ T6503] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.966171][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.966239][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.980264][ T6584] loop2: detected capacity change from 0 to 512 [ 41.019293][ T6584] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.3: corrupted in-inode xattr: invalid ea_ino [ 41.026309][ T6584] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3: couldn't read orphan inode 15 (err -117) [ 41.030017][ T6584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.278996][ T2205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.282966][ T2205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.285715][ T2205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.288377][ T2205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.291878][ T534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.291927][ T534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.345545][ T6587] loop1: detected capacity change from 0 to 32768 [ 41.352636][ T6587] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2 (6587) [ 41.436351][ T6587] BTRFS info (device loop1 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 41.436506][ T6587] BTRFS info (device loop1 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 41.436552][ T6587] BTRFS info (device loop1 state S): using free-space-tree [ 41.455054][ T6499] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.621251][ T6493] Bluetooth: hci0: command tx timeout [ 41.706150][ T6493] Bluetooth: hci4: command tx timeout [ 41.706227][ T6493] Bluetooth: hci1: command tx timeout [ 41.706262][ T6493] Bluetooth: hci2: command tx timeout [ 41.706296][ T6493] Bluetooth: hci3: command tx timeout [ 41.736580][ T6490] BTRFS info (device loop1 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 41.745140][ T6617] loop4: detected capacity change from 0 to 2048 [ 41.794706][ T6624] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 41.870070][ T6626] loop0: detected capacity change from 0 to 2048 [ 41.910508][ T6626] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 42.013715][ T6630] loop3: detected capacity change from 0 to 1024 [ 42.130139][ T6636] loop4: detected capacity change from 0 to 1764 [ 42.130171][ T6630] hfsplus: catalog searching failed [ 42.193539][ T6642] loop2: detected capacity change from 0 to 1024 [ 42.211823][ T534] hfsplus: b-tree write err: -5, ino 8 [ 42.322897][ T6651] nullb0: AHDI p1 [ 42.511390][ T6642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.814955][ T6668] loop1: detected capacity change from 0 to 4096 [ 42.833315][ T6668] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 42.991369][ T6499] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.497675][ T6690] loop3: detected capacity change from 0 to 256 [ 43.518036][ T6690] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 43.533385][ T6692] loop0: detected capacity change from 0 to 64 [ 43.701276][ T6500] Bluetooth: hci0: command tx timeout [ 43.782805][ T6500] Bluetooth: hci3: command tx timeout [ 43.784435][ T6493] Bluetooth: hci2: command tx timeout [ 43.784508][ T6493] Bluetooth: hci1: command tx timeout [ 43.784560][ T6493] Bluetooth: hci4: command tx timeout [ 43.805822][ T6694] loop8: detected capacity change from 0 to 7 [ 43.814490][ T6694] Dev loop8: unable to read RDB block 7 [ 43.816417][ T6694] loop8: unable to read partition table [ 43.818150][ T6694] loop8: partition table beyond EOD, truncated [ 43.821775][ T6694] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 43.844994][ T6694] Dev loop8: unable to read RDB block 7 [ 43.845067][ T6694] loop8: unable to read partition table [ 43.845195][ T6694] loop8: partition table beyond EOD, truncated [ 44.043333][ T6670] loop4: detected capacity change from 0 to 262144 [ 44.057040][ T6670] F2FS-fs (loop4): invalid crc value [ 44.087664][ T6670] F2FS-fs (loop4): Start checkpoint disabled! [ 44.099169][ T6670] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 44.293771][ T6718] loop3: detected capacity change from 0 to 512 [ 44.294394][ T6718] EXT4-fs: Ignoring removed orlov option [ 44.337262][ T6718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.423762][ T6726] loop0: detected capacity change from 0 to 1024 [ 44.429437][ T6718] EXT4-fs (loop3): shut down requested (0) [ 44.516287][ T6732] loop2: detected capacity change from 0 to 64 [ 44.617595][ T6491] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.706593][ T6737] loop3: detected capacity change from 0 to 256 [ 44.908923][ T6742] syzkaller1: entered promiscuous mode [ 44.909007][ T6742] syzkaller1: entered allmulticast mode [ 45.138326][ T6740] loop0: detected capacity change from 0 to 32768 [ 45.151134][ T6740] ======================================================= [ 45.151134][ T6740] WARNING: The mand mount option has been deprecated and [ 45.151134][ T6740] and is ignored by this kernel. Remove the mand [ 45.151134][ T6740] option from the mount to silence this warning. [ 45.151134][ T6740] ======================================================= [ 45.267552][ T6748] loop2: detected capacity change from 0 to 1024 [ 45.310185][ T6744] loop3: detected capacity change from 0 to 32768 [ 45.314459][ T6744] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.62 (6744) [ 45.328939][ T6748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.352155][ T6752] Soft offlining pfn 0x13b476 at process virtual address 0x20276000 [ 45.370213][ T6744] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 45.370317][ T6744] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 45.370358][ T6744] BTRFS info (device loop3): using free-space-tree [ 45.453742][ T6499] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.710391][ T13] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 45.754265][ T6779] loop4: detected capacity change from 0 to 1024 [ 45.781939][ T6500] Bluetooth: hci0: command tx timeout [ 45.855296][ T6779] hfsplus: inconsistency in B*Tree (31095,1,255,1,0) [ 45.856762][ T6779] hfsplus: inconsistency in B*Tree (31095,1,255,1,0) [ 45.856797][ T6779] hfsplus: xattr search failed [ 45.862587][ T6500] Bluetooth: hci3: command tx timeout [ 45.862658][ T6500] Bluetooth: hci4: command tx timeout [ 45.862709][ T6500] Bluetooth: hci1: command tx timeout [ 45.862749][ T6500] Bluetooth: hci2: command tx timeout [ 45.978741][ T6491] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 46.218651][ T6809] loop1: detected capacity change from 0 to 22 [ 46.246618][ T6809] MTD: Couldn't look up './file0': -15 [ 46.246702][ T6809] ./file0: Can't lookup blockdev [ 46.316755][ T6815] mmap: syz.0.85 (6815) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.348907][ T6813] loop4: detected capacity change from 0 to 1024 [ 46.366442][ T6813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.379154][ T6818] loop0: detected capacity change from 0 to 256 [ 46.379711][ T6818] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 46.401070][ T6813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.643906][ T6503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.790651][ T6826] loop4: detected capacity change from 0 to 4096 [ 46.810792][ T6826] NILFS (loop4): invalid segment: Checksum error in segment payload [ 46.810890][ T6826] NILFS (loop4): trying rollback from an earlier position [ 46.823784][ T6826] NILFS (loop4): recovery complete [ 46.826653][ T6829] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 47.084881][ T6818] loop0: detected capacity change from 0 to 32768 [ 47.086071][ T6818] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.86 (6818) [ 47.114690][ T6818] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 47.114796][ T6818] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 47.114837][ T6818] BTRFS info (device loop0): using free-space-tree [ 47.147968][ T6838] loop4: detected capacity change from 0 to 1024 [ 47.190099][ T6838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.222126][ T6838] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 47.227214][ T6838] EXT4-fs (loop4): Remounting filesystem read-only [ 47.283925][ T6503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.442016][ T6492] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 47.535412][ T6869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.99'. [ 47.884984][ T6887] syz.2.107 uses obsolete (PF_INET,SOCK_PACKET) [ 47.887895][ T6887] syzkaller1: entered promiscuous mode [ 47.887968][ T6887] syzkaller1: entered allmulticast mode [ 47.924797][ T6886] loop1: detected capacity change from 0 to 8192 [ 48.034264][ T6875] loop4: detected capacity change from 0 to 40427 [ 48.048440][ T6875] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 48.048505][ T6875] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 48.149976][ T6895] loop0: detected capacity change from 0 to 2048 [ 48.150318][ T6875] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 48.150364][ T6875] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 48.210047][ T6895] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 48.217597][ T6879] loop3: detected capacity change from 0 to 32768 [ 48.259902][ T6903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.110'. [ 48.269968][ T6879] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 48.327881][ T6875] syz.4.101: attempt to access beyond end of device [ 48.327881][ T6875] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 48.404112][ T6879] XFS (loop3): Ending clean mount [ 48.418819][ T6879] XFS (loop3): Quotacheck needed: Please wait. [ 48.459711][ T6879] XFS (loop3): Quotacheck: Done. [ 48.654709][ T6491] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 48.679135][ T6916] loop2: detected capacity change from 0 to 4096 [ 48.683062][ T6920] loop1: detected capacity change from 0 to 256 [ 48.684157][ T6920] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.684208][ T6920] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 48.688272][ T6920] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 49.005283][ T6925] loop3: detected capacity change from 0 to 512 [ 49.013445][ T6925] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.013509][ T6925] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.018115][ T6912] loop0: detected capacity change from 0 to 32768 [ 49.018705][ T6912] XFS: ikeep mount option is deprecated. [ 49.018735][ T6912] XFS: ikeep mount option is deprecated. [ 49.047052][ T6925] EXT4-fs (loop3): 1 truncate cleaned up [ 49.047968][ T6925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.072296][ T6912] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 49.076106][ T6931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 49.294169][ T6912] XFS (loop0): Ending clean mount [ 49.295755][ T6912] XFS (loop0): Quotacheck needed: Please wait. [ 49.349817][ T6949] loop1: detected capacity change from 0 to 64 [ 49.354837][ T6912] XFS (loop0): Quotacheck: Done. [ 49.421277][ T6922] loop4: detected capacity change from 0 to 32768 [ 49.483928][ T6922] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 49.501331][ T6491] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.523622][ T6492] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 49.559793][ T6967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.131'. [ 49.559967][ T6967] netlink: 'syz.2.131': attribute type 7 has an invalid length. [ 49.560055][ T6967] netlink: 'syz.2.131': attribute type 8 has an invalid length. [ 49.560077][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'. [ 49.563980][ T6967] gretap0: entered promiscuous mode [ 49.564783][ T6967] batadv_slave_1: entered promiscuous mode [ 49.575958][ T6922] XFS (loop4): Ending clean mount [ 49.768530][ T6979] netlink: 68 bytes leftover after parsing attributes in process `syz.0.133'. [ 49.797244][ T6981] loop8: detected capacity change from 0 to 8 [ 49.805565][ T6981] Dev loop8: unable to read RDB block 8 [ 49.805638][ T6981] loop8: unable to read partition table [ 49.805755][ T6981] loop8: partition table beyond EOD, truncated [ 49.805787][ T6981] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 49.824679][ T6922] evm: overlay not supported [ 49.910396][ T6503] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 49.936145][ T6987] warning: `syz.3.139' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.966322][ T6989] loop9: detected capacity change from 0 to 8 [ 49.969579][ T6989] Dev loop9: unable to read RDB block 8 [ 49.969667][ T6989] loop9: unable to read partition table [ 49.969799][ T6989] loop9: partition table beyond EOD, truncated [ 49.969859][ T6989] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 50.017836][ T6992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.102906][ T6992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.483687][ T7002] loop1: detected capacity change from 0 to 8192 [ 50.659360][ T7004] loop4: detected capacity change from 0 to 2048 [ 50.716759][ T7004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.025532][ T7012] loop3: detected capacity change from 0 to 32768 [ 51.089437][ T7021] loop0: detected capacity change from 0 to 512 [ 51.090045][ T7021] EXT4-fs: Ignoring removed i_version option [ 51.090074][ T7021] EXT4-fs: Ignoring removed nobh option [ 51.091605][ T7012] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 51.097009][ T7021] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.137461][ T7021] EXT4-fs (loop0): 1 truncate cleaned up [ 51.138369][ T7021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.186001][ T7012] XFS (loop3): Ending clean mount [ 51.190099][ T7012] XFS (loop3): Quotacheck needed: Please wait. [ 51.228319][ T7012] XFS (loop3): Quotacheck: Done. [ 51.251196][ T6492] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.356416][ T7030] loop0: detected capacity change from 0 to 8 [ 51.414094][ T7010] loop2: detected capacity change from 0 to 32768 [ 51.449166][ T7030] SQUASHFS error: Failed to read block 0x2fc: -5 [ 51.451643][ T7030] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 51.451707][ T7030] SQUASHFS error: read_indexes: reading block [2fa:0] [ 51.451752][ T7030] SQUASHFS error: Failed to read block 0xfc: -5 [ 51.451986][ T7030] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 51.452011][ T7030] SQUASHFS error: read_indexes: reading block [2fa:0] [ 51.452214][ T7030] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 51.452275][ T7030] SQUASHFS error: read_indexes: reading block [2fa:0] [ 51.452395][ T7030] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 51.452416][ T7030] SQUASHFS error: read_indexes: reading block [2fa:0] [ 51.452465][ T7030] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 51.452485][ T7030] SQUASHFS error: read_indexes: reading block [2fa:0] [ 51.585481][ T6491] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 51.600210][ T7010] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 51.600210][ T7010] allowing incompatible features above 0.0: (unknown version) [ 51.633496][ T7010] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 51.636445][ T7010] bcachefs (loop2): Version upgrade required: [ 51.636445][ T7010] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 51.636445][ T7010] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 51.636445][ T7010] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 51.656783][ T7010] bcachefs (loop2): dropping and reconstructing all alloc info [ 51.700931][ T7010] bcachefs (loop2): accounting_read... done [ 51.741444][ T7010] bcachefs (loop2): alloc_read... done [ 51.741555][ T7010] bcachefs (loop2): snapshots_read... done [ 51.742283][ T7010] bcachefs (loop2): done starting filesystem [ 51.865082][ T6503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.891971][ T7042] loop0: detected capacity change from 0 to 32768 [ 51.895733][ T7042] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.155 (7042) [ 51.914026][ T6499] bcachefs (loop2): shutting down [ 51.916037][ T7042] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 51.916785][ T7042] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 51.916827][ T7042] BTRFS info (device loop0): using free-space-tree [ 52.043243][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.068389][ T26] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.073740][ T7058] loop4: detected capacity change from 0 to 1024 [ 52.078942][ T7058] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.084734][ T7058] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.098930][ T7058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.116003][ T6499] bcachefs (loop2): shutdown complete [ 52.202712][ T6503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.256655][ T6492] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 52.573204][ T7086] loop4: detected capacity change from 0 to 256 [ 52.586810][ T7085] netlink: 'syz.0.167': attribute type 4 has an invalid length. [ 52.641290][ T7086] capability: warning: `syz.4.166' uses deprecated v2 capabilities in a way that may be insecure [ 52.674173][ T31] audit: type=1400 audit(53.409:2): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="vfat" requested=w pid=7083 comm="syz.4.166" name="file0" dev="loop4" ino=7 [ 52.725377][ T7088] loop0: detected capacity change from 0 to 8 [ 52.739543][ T7088] unable to read id index table [ 52.842023][ T7090] loop1: detected capacity change from 0 to 2048 [ 52.862197][ T7090] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 52.991849][ T6490] UDF-fs: warning (device loop1): udf_evict_inode: Inode 1367 (mode 100000) has inode size 298 different from extent length 512. Filesystem need not be standards compliant. [ 53.017776][ T7088] loop0: detected capacity change from 0 to 32768 [ 53.082415][ T7088] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 53.224113][ T7088] XFS (loop0): Ending clean mount [ 53.296097][ T7111] loop3: detected capacity change from 0 to 2048 [ 53.299587][ T7111] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 53.324296][ T7111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.340324][ T6492] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 53.461936][ T6491] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.467964][ T7119] loop1: detected capacity change from 0 to 2048 [ 53.544320][ T7119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.606163][ T7124] loop4: detected capacity change from 0 to 2048 [ 53.634332][ T7124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.680210][ T7124] fs-verity: sha512 using implementation "sha512-arm64" [ 53.685923][ T6490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.767215][ T6503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.886670][ T7135] loop0: detected capacity change from 0 to 1764 [ 54.125711][ T7125] loop3: detected capacity change from 0 to 40427 [ 54.128461][ T7125] F2FS-fs (loop3): invalid crc value [ 54.207725][ T7125] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 54.222336][ T7150] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 54.354492][ T7160] loop2: detected capacity change from 0 to 2048 [ 54.372571][ T7160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 54.449814][ T6491] syz-executor: attempt to access beyond end of device [ 54.449814][ T6491] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 54.452363][ T6491] CPU: 1 UID: 0 PID: 6491 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-g66d2d510fea3 #0 PREEMPT [ 54.452385][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.452393][ T6491] Call trace: [ 54.452397][ T6491] show_stack+0x2c/0x3c (C) [ 54.452414][ T6491] __dump_stack+0x30/0x40 [ 54.452426][ T6491] dump_stack_lvl+0xd8/0x12c [ 54.452437][ T6491] dump_stack+0x1c/0x28 [ 54.452447][ T6491] f2fs_handle_critical_error+0x34c/0x4b8 [ 54.452462][ T6491] f2fs_stop_checkpoint+0x58/0x6c [ 54.452473][ T6491] f2fs_write_end_io+0x794/0xadc [ 54.452487][ T6491] bio_endio+0x81c/0x858 [ 54.452500][ T6491] submit_bio_noacct+0x158/0x176c [ 54.452511][ T6491] submit_bio+0x354/0x4d4 [ 54.452521][ T6491] f2fs_submit_write_bio+0x13c/0x324 [ 54.452534][ T6491] __submit_merged_bio+0x254/0x704 [ 54.452547][ T6491] __submit_merged_write_cond+0x23c/0x4ac [ 54.452560][ T6491] f2fs_write_data_pages+0x1e9c/0x27ac [ 54.452573][ T6491] do_writepages+0x2c0/0x6a8 [ 54.452587][ T6491] filemap_fdatawrite+0x144/0x1e8 [ 54.452602][ T6491] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 54.452614][ T6491] f2fs_write_checkpoint+0x684/0x1694 [ 54.452625][ T6491] kill_f2fs_super+0x21c/0x584 [ 54.452639][ T6491] deactivate_locked_super+0xc4/0x12c [ 54.452660][ T6491] deactivate_super+0xe0/0x100 [ 54.452671][ T6491] cleanup_mnt+0x31c/0x3ac [ 54.452684][ T6491] __cleanup_mnt+0x20/0x30 [ 54.452696][ T6491] task_work_run+0x1dc/0x260 [ 54.452708][ T6491] do_notify_resume+0x178/0x1f8 [ 54.452720][ T6491] el0_svc+0xb0/0x150 [ 54.452734][ T6491] el0t_64_sync_handler+0x78/0x108 [ 54.452746][ T6491] el0t_64_sync+0x198/0x19c [ 54.463656][ T6491] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 54.464020][ T6491] CPU: 1 UID: 0 PID: 6491 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-g66d2d510fea3 #0 PREEMPT [ 54.464038][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.464046][ T6491] Call trace: [ 54.464049][ T6491] show_stack+0x2c/0x3c (C) [ 54.464066][ T6491] __dump_stack+0x30/0x40 [ 54.464078][ T6491] dump_stack_lvl+0xd8/0x12c [ 54.464088][ T6491] dump_stack+0x1c/0x28 [ 54.464098][ T6491] f2fs_handle_critical_error+0x34c/0x4b8 [ 54.464113][ T6491] f2fs_stop_checkpoint+0x58/0x6c [ 54.464125][ T6491] f2fs_write_end_io+0x794/0xadc [ 54.464139][ T6491] bio_endio+0x81c/0x858 [ 54.464152][ T6491] submit_bio_noacct+0x158/0x176c [ 54.464163][ T6491] submit_bio+0x354/0x4d4 [ 54.464173][ T6491] f2fs_submit_write_bio+0x13c/0x324 [ 54.464186][ T6491] __submit_merged_bio+0x254/0x704 [ 54.464199][ T6491] __submit_merged_write_cond+0x23c/0x4ac [ 54.464212][ T6491] f2fs_write_data_pages+0x1e9c/0x27ac [ 54.464225][ T6491] do_writepages+0x2c0/0x6a8 [ 54.464240][ T6491] filemap_fdatawrite+0x144/0x1e8 [ 54.464255][ T6491] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 54.464266][ T6491] f2fs_write_checkpoint+0x684/0x1694 [ 54.464278][ T6491] kill_f2fs_super+0x21c/0x584 [ 54.464292][ T6491] deactivate_locked_super+0xc4/0x12c [ 54.464304][ T6491] deactivate_super+0xe0/0x100 [ 54.464315][ T6491] cleanup_mnt+0x31c/0x3ac [ 54.464328][ T6491] __cleanup_mnt+0x20/0x30 [ 54.464339][ T6491] task_work_run+0x1dc/0x260 [ 54.464351][ T6491] do_notify_resume+0x178/0x1f8 [ 54.464364][ T6491] el0_svc+0xb0/0x150 [ 54.464377][ T6491] el0t_64_sync_handler+0x78/0x108 [ 54.464389][ T6491] el0t_64_sync+0x198/0x19c [ 54.464428][ T6491] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 54.649077][ T7164] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.747532][ T7139] loop0: detected capacity change from 0 to 40427 [ 54.750160][ T7139] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(0) root(83886083) [ 54.750233][ T7139] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 54.750314][ T7139] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3fffff [ 54.750349][ T7139] F2FS-fs (loop0): heap/no_heap options were deprecated [ 54.750384][ T7139] F2FS-fs (loop0): Image doesn't support compression [ 54.757810][ T7139] F2FS-fs (loop0): invalid crc value [ 54.867052][ T7139] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 54.867121][ T7139] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 54.932392][ T7176] loop1: detected capacity change from 0 to 256 [ 54.987685][ T7139] F2FS-fs (loop0): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0xe4/0x710 [ 55.071109][ T6492] syz-executor: attempt to access beyond end of device [ 55.071109][ T6492] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 55.075493][ T6492] CPU: 0 UID: 0 PID: 6492 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-g66d2d510fea3 #0 PREEMPT [ 55.075518][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.075526][ T6492] Call trace: [ 55.075529][ T6492] show_stack+0x2c/0x3c (C) [ 55.075547][ T6492] __dump_stack+0x30/0x40 [ 55.075559][ T6492] dump_stack_lvl+0xd8/0x12c [ 55.075569][ T6492] dump_stack+0x1c/0x28 [ 55.075579][ T6492] f2fs_handle_critical_error+0x34c/0x4b8 [ 55.075593][ T6492] f2fs_stop_checkpoint+0x58/0x6c [ 55.075605][ T6492] f2fs_write_end_io+0x794/0xadc [ 55.075619][ T6492] bio_endio+0x81c/0x858 [ 55.075632][ T6492] submit_bio_noacct+0x158/0x176c [ 55.075642][ T6492] submit_bio+0x354/0x4d4 [ 55.075652][ T6492] f2fs_submit_write_bio+0x13c/0x324 [ 55.075665][ T6492] __submit_merged_bio+0x254/0x704 [ 55.075678][ T6492] __submit_merged_write_cond+0x23c/0x4ac [ 55.075691][ T6492] f2fs_write_data_pages+0x1e9c/0x27ac [ 55.075705][ T6492] do_writepages+0x2c0/0x6a8 [ 55.075720][ T6492] filemap_fdatawrite+0x144/0x1e8 [ 55.075734][ T6492] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 55.075746][ T6492] f2fs_write_checkpoint+0x684/0x1694 [ 55.075757][ T6492] kill_f2fs_super+0x21c/0x584 [ 55.075771][ T6492] deactivate_locked_super+0xc4/0x12c [ 55.075783][ T6492] deactivate_super+0xe0/0x100 [ 55.075794][ T6492] cleanup_mnt+0x31c/0x3ac [ 55.075806][ T6492] __cleanup_mnt+0x20/0x30 [ 55.075818][ T6492] task_work_run+0x1dc/0x260 [ 55.075830][ T6492] do_notify_resume+0x178/0x1f8 [ 55.075842][ T6492] el0_svc+0xb0/0x150 [ 55.075855][ T6492] el0t_64_sync_handler+0x78/0x108 [ 55.075867][ T6492] el0t_64_sync+0x198/0x19c [ 55.111864][ T6492] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 55.419006][ T7177] loop2: detected capacity change from 0 to 40427 [ 55.438479][ T7177] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 55.445254][ T7177] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 55.451321][ T7177] F2FS-fs (loop2): invalid crc value [ 55.463706][ T7187] loop3: detected capacity change from 0 to 256 [ 55.515935][ T7187] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 55.547727][ T7191] loop0: detected capacity change from 0 to 1024 [ 55.550188][ T7191] EXT4-fs: Ignoring removed orlov option [ 55.552090][ T7191] EXT4-fs: Ignoring removed oldalloc option [ 55.575370][ T7177] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 55.575436][ T7177] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 55.595644][ T7191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.601223][ T7187] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff) [ 55.712926][ T7177] syz.2.199: attempt to access beyond end of device [ 55.712926][ T7177] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 55.713861][ T7177] CPU: 1 UID: 0 PID: 7177 Comm: syz.2.199 Not tainted 6.15.0-rc4-syzkaller-g66d2d510fea3 #0 PREEMPT [ 55.713883][ T7177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.713891][ T7177] Call trace: [ 55.713895][ T7177] show_stack+0x2c/0x3c (C) [ 55.713913][ T7177] __dump_stack+0x30/0x40 [ 55.713925][ T7177] dump_stack_lvl+0xd8/0x12c [ 55.713936][ T7177] dump_stack+0x1c/0x28 [ 55.713962][ T7177] f2fs_handle_critical_error+0x34c/0x4b8 [ 55.713979][ T7177] f2fs_stop_checkpoint+0x58/0x6c [ 55.713991][ T7177] f2fs_write_end_io+0x794/0xadc [ 55.714006][ T7177] bio_endio+0x81c/0x858 [ 55.714020][ T7177] submit_bio_noacct+0x158/0x176c [ 55.714031][ T7177] submit_bio+0x354/0x4d4 [ 55.714041][ T7177] f2fs_submit_write_bio+0x13c/0x324 [ 55.714055][ T7177] __submit_merged_bio+0x254/0x704 [ 55.714068][ T7177] f2fs_submit_page_write+0xad8/0x1a64 [ 55.714081][ T7177] do_write_page+0x504/0x734 [ 55.714094][ T7177] f2fs_outplace_write_data+0x114/0x210 [ 55.714107][ T7177] f2fs_do_write_data_page+0xdb4/0x1208 [ 55.714121][ T7177] f2fs_write_single_data_page+0x828/0x1294 [ 55.714144][ T7177] f2fs_write_data_pages+0x137c/0x27ac [ 55.714159][ T7177] do_writepages+0x2c0/0x6a8 [ 55.714174][ T7177] filemap_write_and_wait_range+0x1ac/0x29c [ 55.714190][ T7177] f2fs_insert_range+0x308/0x354 [ 55.714202][ T7177] f2fs_fallocate+0x420/0x8ec [ 55.714213][ T7177] vfs_fallocate+0x5cc/0x73c [ 55.714227][ T7177] __arm64_sys_fallocate+0xbc/0x10c [ 55.714241][ T7177] invoke_syscall+0x98/0x2b8 [ 55.714251][ T7177] el0_svc_common+0x130/0x23c [ 55.714262][ T7177] do_el0_svc+0x48/0x58 [ 55.714272][ T7177] el0_svc+0x58/0x150 [ 55.714285][ T7177] el0t_64_sync_handler+0x78/0x108 [ 55.714298][ T7177] el0t_64_sync+0x198/0x19c [ 55.731667][ T7177] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 55.731928][ T7177] syz.2.199: attempt to access beyond end of device [ 55.731928][ T7177] loop2: rw=2049, sector=53280, nr_sectors = 8 limit=40427 [ 55.732886][ T7177] CPU: 1 UID: 0 PID: 7177 Comm: syz.2.199 Not tainted 6.15.0-rc4-syzkaller-g66d2d510fea3 #0 PREEMPT [ 55.732907][ T7177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.732915][ T7177] Call trace: [ 55.732919][ T7177] show_stack+0x2c/0x3c (C) [ 55.732936][ T7177] __dump_stack+0x30/0x40 [ 55.732961][ T7177] dump_stack_lvl+0xd8/0x12c [ 55.732972][ T7177] dump_stack+0x1c/0x28 [ 55.732982][ T7177] f2fs_handle_critical_error+0x34c/0x4b8 [ 55.732998][ T7177] f2fs_stop_checkpoint+0x58/0x6c [ 55.733009][ T7177] f2fs_write_end_io+0x794/0xadc [ 55.733024][ T7177] bio_endio+0x81c/0x858 [ 55.733038][ T7177] submit_bio_noacct+0x158/0x176c [ 55.733049][ T7177] submit_bio+0x354/0x4d4 [ 55.733059][ T7177] f2fs_submit_write_bio+0x13c/0x324 [ 55.733073][ T7177] __submit_merged_bio+0x254/0x704 [ 55.733086][ T7177] __submit_merged_write_cond+0x380/0x4ac [ 55.733100][ T7177] f2fs_write_single_data_page+0xd48/0x1294 [ 55.733114][ T7177] f2fs_write_data_pages+0x137c/0x27ac [ 55.733128][ T7177] do_writepages+0x2c0/0x6a8 [ 55.733150][ T7177] filemap_write_and_wait_range+0x1ac/0x29c [ 55.733166][ T7177] f2fs_insert_range+0x308/0x354 [ 55.733178][ T7177] f2fs_fallocate+0x420/0x8ec [ 55.733189][ T7177] vfs_fallocate+0x5cc/0x73c [ 55.733203][ T7177] __arm64_sys_fallocate+0xbc/0x10c [ 55.733216][ T7177] invoke_syscall+0x98/0x2b8 [ 55.733227][ T7177] el0_svc_common+0x130/0x23c [ 55.733238][ T7177] do_el0_svc+0x48/0x58 [ 55.733247][ T7177] el0_svc+0x58/0x150 [ 55.733262][ T7177] el0t_64_sync_handler+0x78/0x108 [ 55.733274][ T7177] el0t_64_sync+0x198/0x19c [ 55.733289][ T7177] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 55.810283][ T6492] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.834341][ T7183] loop4: detected capacity change from 0 to 32768 [ 55.863375][ T7183] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 55.867938][ T7179] loop1: detected capacity change from 0 to 32768 [ 55.912013][ T7179] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.200 (7179) [ 55.940463][ T7179] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 55.940573][ T7179] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 56.036317][ T7183] XFS (loop4): Ending clean mount [ 56.052230][ T7183] XFS (loop4): Quotacheck needed: Please wait. [ 56.073859][ T7179] BTRFS info (device loop1): rebuilding free space tree [ 56.112669][ T7183] XFS (loop4): Quotacheck: Done. [ 56.161590][ T7179] BTRFS info (device loop1): disabling free space tree [ 56.161690][ T7179] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 56.161817][ T7179] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 56.353160][ T6503] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 56.388192][ T7206] loop0: detected capacity change from 0 to 40427 [ 56.400380][ T7206] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 56.400443][ T7206] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 56.520757][ T7206] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 56.522805][ T7206] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 56.639079][ T7206] syz.0.206: attempt to access beyond end of device [ 56.639079][ T7206] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 56.661369][ T7206] syz.0.206: attempt to access beyond end of device [ 56.661369][ T7206] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 56.673633][ T7225] loop3: detected capacity change from 0 to 32768 [ 56.789756][ T13] kworker/u8:1: attempt to access beyond end of device [ 56.789756][ T13] loop0: rw=1, sector=77824, nr_sectors = 8 limit=40427 [ 56.814865][ T6492] syz-executor: attempt to access beyond end of device [ 56.814865][ T6492] loop0: rw=2051, sector=77832, nr_sectors = 128 limit=40427 [ 56.819472][ T6492] F2FS-fs (loop0): Issue discard(9729, 9729, 16) failed, ret: -5 [ 56.881083][ T7179] BTRFS warning (device loop1 state M): remount supports changing free space tree only from RO to RW [ 56.881224][ T7179] BTRFS info (device loop1 state M): setting nodatasum [ 56.881269][ T7179] BTRFS info (device loop1 state M): allowing degraded mounts [ 56.881299][ T7179] BTRFS info (device loop1 state M): setting nodatasum [ 56.881328][ T7179] BTRFS info (device loop1 state M): turning on flush-on-commit [ 56.881357][ T7179] BTRFS info (device loop1 state M): turning on sync discard [ 56.881386][ T7179] BTRFS info (device loop1 state M): enabling free space tree [ 56.881415][ T7179] BTRFS info (device loop1 state M): force clearing of disk cache [ 56.881444][ T7179] BTRFS info (device loop1 state M): not using ssd optimizations [ 56.935068][ T7225] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,compression=lz4,journal_flush_disabled,recovery_pass_last=trans_mark_dev_sbs,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 56.935068][ T7225] allowing incompatible features above 0.0: (unknown version) [ 56.955826][ T7225] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 56.955965][ T7225] bcachefs (loop3): Version upgrade from 1.20: directory_size to 1.7: mi_btree_bitmap incomplete [ 56.955965][ T7225] Doing compatible version upgrade from 1.20: directory_size to 1.25: extent_flags [ 56.955965][ T7225] running recovery passes: check_extents_to_backpointers [ 56.964036][ T7225] bcachefs (loop3): dropping and reconstructing all alloc info [ 56.970387][ T7225] bcachefs (loop3): bcachefs (loop3): error validating btree node on loop3 at btree extents level 0/0 [ 56.970447][ T7225] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 56.970467][ T7225] node offset 8/16 bset u64s 49: bset at wrong sector offset, shutting down [ 56.970478][ T7225] inconsistency detected - emergency read only at journal seq 10 [ 56.983706][ T7225] bcachefs (loop3): flagging btree extents lost data [ 56.983938][ T7225] bcachefs (loop3): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 56.984019][ T7225] bcachefs (loop3): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 56.984041][ T7225] bcachefs (loop3): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 57.002221][ T7225] bcachefs (loop3): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 57.020839][ T7179] BTRFS warning (device loop1 state M): remount supports changing free space tree only from RO to RW [ 57.045362][ T7225] bcachefs (loop3): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0: [ 57.045415][ T7225] mode=100755 [ 57.045443][ T7225] flags=(15300000) [ 57.045453][ T7225] journal_seq=4 [ 57.045462][ T7225] hash_seed=d483206f1ed95abf [ 57.045471][ T7225] hash_type=siphash [ 57.045480][ T7225] bi_size=100 [ 57.045489][ T7225] bi_sectors=8 [ 57.045498][ T7225] bi_version=1126999418470400 [ 57.045507][ T7225] bi_atime=0 [ 57.045516][ T7225] bi_ctime=0 [ 57.045524][ T7225] bi_mtime=0 [ 57.045533][ T7225] bi_otime=2780562352 [ 57.045542][ T7225] bi_uid=2780562352 [ 57.045551][ T7225] bi_gid=0 [ 57.045560][ T7225] bi_nlink=2780562352 [ 57.045569][ T7225] bi_generation=0 [ 57.045578][ T7225] bi_dev=16 [ 57.045587][ T7225] bi_data_checksum=18 [ 57.045596][ T7225] bi_compression=0 [ 57.045604][ T7225] bi_project=0 [ 57.045613][ T7225] bi_background_compression=0 [ 57.045622][ T7225] bi_data_replicas=0 [ 57.045631][ T7225] bi_promote_target=0 [ 57.045640][ T7225] bi_foreground_target=0 [ 57.045649][ T7225] bi_background_target=0 [ 57.045658][ T7225] bi_erasure_code=0 [ 57.045667][ T7225] bi_fields_set=0 [ 57.045676][ T7225] bi_dir=0 [ 57.045685][ T7225] bi_dir_offset=0 [ 57.045693][ T7225] bi_subvol=0 [ 57.045702][ T7225] bi_parent_subvol=0 [ 57.045711][ T7225] bi_nocow=0 [ 57.045720][ T7225] bi_depth=0 [ 57.045733][ T7225] bi_inodes_32bit=0 [ 57.045742][ T7225] bi_casefold=0 [ 57.045751][ T7225] invalid data checksum type (18 >= 5, deleting [ 57.094614][ T7225] bcachefs (loop3): scan_for_btree_nodes... [ 57.145031][ T7225] bcachefs (loop3): btree node scan found 3 nodes after overwrites [ 57.145121][ T7225] done [ 57.145142][ T7225] bcachefs (loop3): check_topology... [ 57.149160][ T6490] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 57.161466][ T7225] bcachefs (loop3): btree root extents unreadable, must recover from scan [ 57.161755][ T7225] bcachefs (loop3): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX [ 57.161859][ T7225] bcachefs (loop3): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 57.179476][ T7225] bcachefs (loop3): Topology repair: unreadable btree node at [ 57.179528][ T7225] btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 57.187896][ T7225] bcachefs (loop3): empty interior btree node at btree=extents level=1 [ 57.187942][ T7225] u64s 5 type btree_ptr SPOS_MAX len 0 ver 0, fixing [ 57.188020][ T7225] bcachefs (loop3): empty btree root extents [ 57.188109][ T7225] done [ 57.188132][ T7225] bcachefs (loop3): accounting_read... [ 57.228905][ T7248] loop4: detected capacity change from 0 to 32768 [ 57.233016][ T7248] XFS: attr2 mount option is deprecated. [ 57.234647][ T7248] XFS: noikeep mount option is deprecated. [ 57.266953][ T7225] done [ 57.267027][ T7225] bcachefs (loop3): alloc_read... done [ 57.267083][ T7225] bcachefs (loop3): snapshots_read... done [ 57.267169][ T7225] bcachefs (loop3): check_allocations... [ 57.269433][ T7225] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 57.269455][ T7225] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 57.288919][ T7225] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 57.288982][ T7225] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 57.292112][ T7225] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 57.292131][ T7225] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 57.293868][ T7225] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 57.293885][ T7225] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 57.315219][ T7248] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 57.332582][ T7225] done [ 57.343152][ T7225] bcachefs (loop3): going read-write [ 57.379140][ T7225] bcachefs (loop3): done starting filesystem [ 57.381090][ T6497] bcachefs (loop3): bch2_delete_dead_snapshots(): error journal_shutdown [ 57.444205][ T7248] XFS (loop4): Ending clean mount [ 57.454230][ T7248] XFS (loop4): Quotacheck needed: Please wait. [ 57.473671][ T7271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 57.498368][ T7248] XFS (loop4): Quotacheck: Done. [ 57.577019][ T7225] bcachefs (loop3): bch2_dev_remove(): error bch2_dev_data_drop() remove_with_metadata_missing_unimplemented [ 57.617437][ T6491] bcachefs (loop3): shutting down [ 57.617499][ T6491] bcachefs (loop3): going read-only [ 57.617673][ T6491] bcachefs (loop3): finished waiting for writes to stop [ 57.628853][ T7267] loop1: detected capacity change from 0 to 8192 [ 57.645471][ T6491] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 57.648388][ T6491] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 57.652291][ T6491] bcachefs (loop3): unclean shutdown complete, journal seq 10 [ 57.682567][ T6503] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 57.686830][ T7272] loop1: p1[EZD] p2 p4 [ 57.687545][ T7272] loop1: p1 size 1465778176 extends beyond EOD, truncated [ 57.691755][ T7272] loop1: p2 start 65535 is beyond EOD, truncated [ 57.691826][ T7272] loop1: p4 size 65536 extends beyond EOD, truncated [ 57.732213][ T6491] bcachefs (loop3): done going read-only, filesystem not clean [ 57.739349][ T7267] loop1: p1[EZD] p2 p4 [ 57.739519][ T7267] loop1: p1 size 1465778176 extends beyond EOD, truncated [ 57.752165][ T7267] loop1: p2 start 65535 is beyond EOD, truncated [ 57.754310][ T7267] loop1: p4 size 65536 extends beyond EOD, truncated [ 57.899136][ T6491] bcachefs (loop3): shutdown complete [ 57.993462][ T31] audit: type=1400 audit(58.719:3): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=7283 comm="syz.0.225" name="50" dev="tmpfs" ino=290 [ 58.221021][ T6589] udevd[6589]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 58.222243][ T7272] udevd[7272]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 58.258494][ T7272] udevd[7272]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 58.268052][ T6589] udevd[6589]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 58.390114][ T7277] loop2: detected capacity change from 0 to 65536 [ 58.460178][ T7277] XFS (loop2): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af [ 58.477443][ T7277] XFS (loop2): Ending clean mount [ 58.512115][ T7277] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x100/0x1d4, xfs_agfl block 0x3 [ 58.515736][ T7277] XFS (loop2): Unmount and run xfs_repair [ 58.515796][ T7277] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 58.515827][ T7277] 00000000: 58 41 46 4c 00 00 00 00 e4 65 4a 66 62 e5 49 63 XAFL.....eJfb.Ic [ 58.515855][ T7277] 00000010: a8 1e 01 2d 9d 48 71 af 00 00 00 00 00 00 00 00 ...-.Hq......... [ 58.515882][ T7277] 00000020: 2b a8 fe 5c ff ff ff ff 00 00 00 00 00 00 00 06 +..\............ [ 58.515909][ T7277] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 58.515935][ T7277] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.515970][ T7277] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.515996][ T7277] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.516023][ T7277] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.516223][ T7277] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x198/0x35c" at daddr 0x3 len 1 error 74 [ 58.516484][ T7277] XFS (loop2): page discard on page 000000005e24f873, inode 0x46, pos 31744. [ 58.561598][ T7277] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x100/0x1d4, xfs_agfl block 0x3 [ 58.564720][ T7277] XFS (loop2): Unmount and run xfs_repair [ 58.566878][ T7277] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 58.569139][ T7277] 00000000: 58 41 46 4c 00 00 00 00 e4 65 4a 66 62 e5 49 63 XAFL.....eJfb.Ic [ 58.570894][ T7277] 00000010: a8 1e 01 2d 9d 48 71 af 00 00 00 00 00 00 00 00 ...-.Hq......... [ 58.570919][ T7277] 00000020: 2b a8 fe 5c ff ff ff ff 00 00 00 00 00 00 00 06 +..\............ [ 58.570940][ T7277] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 58.570971][ T7277] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.571001][ T7277] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.571022][ T7277] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.571042][ T7277] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.571067][ T7277] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x198/0x35c" at daddr 0x3 len 1 error 74 [ 58.571188][ T7277] XFS (loop2): page discard on page 00000000bd8a1945, inode 0x46, pos 1024. [ 58.572568][ T7277] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x100/0x1d4, xfs_agfl block 0x3 [ 58.572608][ T7277] XFS (loop2): Unmount and run xfs_repair [ 58.572628][ T7277] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 58.572651][ T7277] 00000000: 58 41 46 4c 00 00 00 00 e4 65 4a 66 62 e5 49 63 XAFL.....eJfb.Ic [ 58.572672][ T7277] 00000010: a8 1e 01 2d 9d 48 71 af 00 00 00 00 00 00 00 00 ...-.Hq......... [ 58.572693][ T7277] 00000020: 2b a8 fe 5c ff ff ff ff 00 00 00 00 00 00 00 06 +..\............ [ 58.572713][ T7277] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 58.572734][ T7277] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.572755][ T7277] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.572775][ T7277] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.572796][ T7277] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.572818][ T7277] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x198/0x35c" at daddr 0x3 len 1 error 74 [ 58.572908][ T7277] XFS (loop2): page discard on page 00000000b64889f9, inode 0x46, pos 4096. [ 58.573162][ T7277] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x100/0x1d4, xfs_agfl block 0x3 [ 58.573199][ T7277] XFS (loop2): Unmount and run xfs_repair [ 58.573219][ T7277] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 58.573241][ T7277] 00000000: 58 41 46 4c 00 00 00 00 e4 65 4a 66 62 e5 49 63 XAFL.....eJfb.Ic [ 58.573262][ T7277] 00000010: a8 1e 01 2d 9d 48 71 af 00 00 00 00 00 00 00 00 ...-.Hq......... [ 58.573284][ T7277] 00000020: 2b a8 fe 5c ff ff ff ff 00 00 00 00 00 00 00 06 +..\............ [ 58.573304][ T7277] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 58.573325][ T7277] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.573346][ T7277] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.573367][ T7277] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.573388][ T7277] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.573410][ T7277] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x198/0x35c" at daddr 0x3 len 1 error 74 [ 58.573493][ T7277] XFS (loop2): page discard on page 0000000070015b11, inode 0x46, pos 8192. [ 58.573767][ T7277] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x100/0x1d4, xfs_agfl block 0x3 [ 58.573804][ T7277] XFS (loop2): Unmount and run xfs_repair [ 58.573824][ T7277] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 58.573845][ T7277] 00000000: 58 41 46 4c 00 00 00 00 e4 65 4a 66 62 e5 49 63 XAFL.....eJfb.Ic [ 58.573866][ T7277] 00000010: a8 1e 01 2d 9d 48 71 af 00 00 00 00 00 00 00 00 ...-.Hq......... [ 58.573887][ T7277] 00000020: 2b a8 fe 5c ff ff ff ff 00 00 00 00 00 00 00 06 +..\............ [ 58.573908][ T7277] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 58.573928][ T7277] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.573959][ T7277] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.573988][ T7277] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.574009][ T7277] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.574031][ T7277] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x198/0x35c" at daddr 0x3 len 1 error 74 [ 58.574114][ T7277] XFS (loop2): page discard on page 00000000fa17c028, inode 0x46, pos 16384. [ 58.576998][ T7277] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x100/0x1d4, xfs_agfl block 0x3 [ 58.577040][ T7277] XFS (loop2): Unmount and run xfs_repair [ 58.577060][ T7277] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 58.577083][ T7277] 00000000: 58 41 46 4c 00 00 00 00 e4 65 4a 66 62 e5 49 63 XAFL.....eJfb.Ic [ 58.577104][ T7277] 00000010: a8 1e 01 2d 9d 48 71 af 00 00 00 00 00 00 00 00 ...-.Hq......... [ 58.577125][ T7277] 00000020: 2b a8 fe 5c ff ff ff ff 00 00 00 00 00 00 00 06 +..\............ [ 58.577146][ T7277] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 58.577166][ T7277] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.577187][ T7277] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.577207][ T7277] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.577228][ T7277] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.577251][ T7277] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x198/0x35c" at daddr 0x3 len 1 error 74 [ 58.577340][ T7277] XFS (loop2): page discard on page 0000000006965648, inode 0x46, pos 20480. [ 58.586818][ T7277] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x100/0x1d4, xfs_agfl block 0x3 [ 58.586865][ T7277] XFS (loop2): Unmount and run xfs_repair [ 58.586886][ T7277] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 58.586908][ T7277] 00000000: 58 41 46 4c 00 00 00 00 e4 65 4a 66 62 e5 49 63 XAFL.....eJfb.Ic [ 58.586930][ T7277] 00000010: a8 1e 01 2d 9d 48 71 af 00 00 00 00 00 00 00 00 ...-.Hq......... [ 58.586969][ T7277] 00000020: 2b a8 fe 5c ff ff ff ff 00 00 00 00 00 00 00 06 +..\............ [ 58.586999][ T7277] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 58.587021][ T7277] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.587042][ T7277] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.587062][ T7277] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.587083][ T7277] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.587110][ T7277] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x198/0x35c" at daddr 0x3 len 1 error 74 [ 58.587201][ T7277] XFS (loop2): page discard on page 000000003d491ce4, inode 0x46, pos 24576. [ 58.587698][ T7277] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x100/0x1d4, xfs_agfl block 0x3 [ 58.587752][ T7277] XFS (loop2): Unmount and run xfs_repair [ 58.587772][ T7277] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 58.587794][ T7277] 00000000: 58 41 46 4c 00 00 00 00 e4 65 4a 66 62 e5 49 63 XAFL.....eJfb.Ic [ 58.587815][ T7277] 00000010: a8 1e 01 2d 9d 48 71 af 00 00 00 00 00 00 00 00 ...-.Hq......... [ 58.587836][ T7277] 00000020: 2b a8 fe 5c ff ff ff ff 00 00 00 00 00 00 00 06 +..\............ [ 58.587856][ T7277] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 58.587877][ T7277] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.587897][ T7277] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.587926][ T7277] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.587956][ T7277] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 58.587987][ T7277] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x198/0x35c" at daddr 0x3 len 1 error 74 [ 58.588079][ T7277] XFS (loop2): page discard on page 000000005e24f873, inode 0x46, pos 28672. [ 58.589475][ T6497] loop2: writeback error on inode 70, offset 0, sector 22 [ 58.694076][ T6499] XFS (loop2): Unmounting Filesystem e4654a66-62e5-4963-a81e-012d9d4871af [ 58.695703][ T6499] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 58.778761][ T7302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.228'. [ 58.778803][ T7302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.228'. [ 58.935771][ T7307] Bluetooth: MGMT ver 1.23 [ 58.984825][ T7313] loop4: detected capacity change from 0 to 256 [ 59.438199][ T7338] loop0: detected capacity change from 0 to 2048 [ 59.455966][ T7340] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.480435][ T7338] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 59.496875][ T7338] Remounting filesystem read-only [ 59.606867][ T7343] loop4: detected capacity change from 0 to 2048 [ 59.642471][ T7347] loop3: detected capacity change from 0 to 512 [ 59.666049][ T7343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.690209][ T7343] EXT4-fs (loop4): shut down requested (2) [ 59.696930][ T7347] EXT4-fs (loop3): 1 orphan inode deleted [ 59.699702][ T7347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.722758][ T6503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.730385][ T272] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 59.732825][ T272] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 59.783778][ T6491] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.020674][ T7361] loop4: detected capacity change from 0 to 512 [ 60.039373][ T7361] EXT4-fs (loop4): Test dummy encryption mode enabled [ 60.039437][ T7361] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.056828][ T7361] EXT4-fs (loop4): 1 truncate cleaned up [ 60.057769][ T7361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.121787][ T7361] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 60.167217][ T6503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.236685][ T7345] loop0: detected capacity change from 0 to 40427 [ 60.242425][ T7368] loop4: detected capacity change from 0 to 512 [ 60.250497][ T7364] team0 (unregistering): Port device team_slave_0 removed [ 60.260211][ T7345] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3fffff [ 60.270298][ T7358] loop3: detected capacity change from 0 to 32768 [ 60.277611][ T7345] F2FS-fs (loop0): invalid crc value [ 60.287296][ T7364] team0 (unregistering): Port device team_slave_1 removed [ 60.302458][ T7368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.340461][ T7345] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 60.363768][ T7368] EXT4-fs (loop4): shut down requested (0) [ 60.423479][ T7381] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz.4.255: path /49/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 60.446258][ T7381] EXT4-fs (loop4): Remounting filesystem read-only [ 60.459477][ T7345] F2FS-fs (loop0): inject inconsistent footer in sanity_check_node_footer of f2fs_get_inode_page+0x34/0x44 [ 60.460071][ T7345] F2FS-fs (loop0): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:10241045589465957861,blkaddr:4626] [ 60.536173][ T6492] syz-executor: attempt to access beyond end of device [ 60.536173][ T6492] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 60.540655][ T6492] CPU: 1 UID: 0 PID: 6492 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-g66d2d510fea3 #0 PREEMPT [ 60.540679][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 60.540687][ T6492] Call trace: [ 60.540691][ T6492] show_stack+0x2c/0x3c (C) [ 60.540709][ T6492] __dump_stack+0x30/0x40 [ 60.540723][ T6492] dump_stack_lvl+0xd8/0x12c [ 60.540734][ T6492] dump_stack+0x1c/0x28 [ 60.540743][ T6492] f2fs_handle_critical_error+0x34c/0x4b8 [ 60.540758][ T6492] f2fs_stop_checkpoint+0x58/0x6c [ 60.540769][ T6492] f2fs_write_end_io+0x794/0xadc [ 60.540783][ T6492] bio_endio+0x81c/0x858 [ 60.540796][ T6492] submit_bio_noacct+0x158/0x176c [ 60.540807][ T6492] submit_bio+0x354/0x4d4 [ 60.540817][ T6492] f2fs_submit_write_bio+0x13c/0x324 [ 60.540830][ T6492] __submit_merged_bio+0x254/0x704 [ 60.540843][ T6492] __submit_merged_write_cond+0x23c/0x4ac [ 60.540856][ T6492] f2fs_write_data_pages+0x1e9c/0x27ac [ 60.540869][ T6492] do_writepages+0x2c0/0x6a8 [ 60.540884][ T6492] filemap_fdatawrite+0x144/0x1e8 [ 60.540898][ T6492] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 60.540910][ T6492] f2fs_write_checkpoint+0x684/0x1694 [ 60.540922][ T6492] kill_f2fs_super+0x21c/0x584 [ 60.540935][ T6492] deactivate_locked_super+0xc4/0x12c [ 60.540968][ T6492] deactivate_super+0xe0/0x100 [ 60.540980][ T6492] cleanup_mnt+0x31c/0x3ac [ 60.540993][ T6492] __cleanup_mnt+0x20/0x30 [ 60.541005][ T6492] task_work_run+0x1dc/0x260 [ 60.541017][ T6492] do_notify_resume+0x178/0x1f8 [ 60.541029][ T6492] el0_svc+0xb0/0x150 [ 60.541043][ T6492] el0t_64_sync_handler+0x78/0x108 [ 60.541055][ T6492] el0t_64_sync+0x198/0x19c [ 60.578342][ T7358] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 60.578342][ T7358] allowing incompatible features above 0.0: (unknown version) [ 60.578415][ T7358] bcachefs (loop3): initializing new filesystem [ 60.579579][ T7358] bcachefs (loop3): going read-write [ 60.606353][ T6492] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 60.652012][ T7358] bcachefs (loop3): marking superblocks [ 60.666859][ T7358] bcachefs (loop3): initializing freespace [ 60.728554][ T7358] bcachefs (loop3): done initializing freespace [ 60.739896][ T7358] bcachefs (loop3): reading snapshots table [ 60.739995][ T7358] bcachefs (loop3): reading snapshots done [ 60.768995][ T7358] bcachefs (loop3): done starting filesystem [ 60.869582][ T7388] loop1: detected capacity change from 0 to 40427 [ 60.888941][ T7388] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 60.889018][ T7388] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 60.904980][ T7388] F2FS-fs (loop1): invalid crc value [ 61.028227][ T7388] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 61.028305][ T7388] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 61.124679][ T7393] loop2: detected capacity change from 0 to 40427 [ 61.127792][ T7393] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3fffff [ 61.132419][ T6491] bcachefs (loop3): shutting down [ 61.132482][ T6491] bcachefs (loop3): going read-only [ 61.132524][ T6491] bcachefs (loop3): finished waiting for writes to stop [ 61.137122][ T7393] F2FS-fs (loop2): invalid crc value [ 61.177093][ T7393] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 61.191216][ T6491] bcachefs (loop3): flushing journal and stopping allocators, journal seq 5 [ 61.205920][ T7402] loop0: detected capacity change from 0 to 2048 [ 61.218469][ T6503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.245972][ T7398] f2fs_ckpt-7:2: attempt to access beyond end of device [ 61.245972][ T7398] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 61.246321][ T7398] CPU: 0 UID: 0 PID: 7398 Comm: f2fs_ckpt-7:2 Not tainted 6.15.0-rc4-syzkaller-g66d2d510fea3 #0 PREEMPT [ 61.246339][ T7398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 61.246346][ T7398] Call trace: [ 61.246351][ T7398] show_stack+0x2c/0x3c (C) [ 61.246367][ T7398] __dump_stack+0x30/0x40 [ 61.246379][ T7398] dump_stack_lvl+0xd8/0x12c [ 61.246389][ T7398] dump_stack+0x1c/0x28 [ 61.246399][ T7398] f2fs_handle_critical_error+0x34c/0x4b8 [ 61.246415][ T7398] f2fs_stop_checkpoint+0x58/0x6c [ 61.246426][ T7398] f2fs_write_end_io+0x794/0xadc [ 61.246441][ T7398] bio_endio+0x81c/0x858 [ 61.246454][ T7398] submit_bio_noacct+0x158/0x176c [ 61.246465][ T7398] submit_bio+0x354/0x4d4 [ 61.246475][ T7398] f2fs_submit_write_bio+0x13c/0x324 [ 61.246488][ T7398] __submit_merged_bio+0x254/0x704 [ 61.246501][ T7398] __submit_merged_write_cond+0x23c/0x4ac [ 61.246513][ T7398] f2fs_write_data_pages+0x1e9c/0x27ac [ 61.246527][ T7398] do_writepages+0x2c0/0x6a8 [ 61.246541][ T7398] filemap_fdatawrite+0x144/0x1e8 [ 61.246556][ T7398] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 61.246567][ T7398] f2fs_write_checkpoint+0x684/0x1694 [ 61.246579][ T7398] __checkpoint_and_complete_reqs+0xe8/0x3c0 [ 61.246592][ T7398] issue_checkpoint_thread+0xcc/0x240 [ 61.246603][ T7398] kthread+0x5fc/0x75c [ 61.246616][ T7398] ret_from_fork+0x10/0x20 [ 61.246631][ T7398] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 61.298379][ T7402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.302846][ T6491] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 5 [ 61.307258][ T6491] bcachefs (loop3): clean shutdown complete, journal seq 6 [ 61.366171][ T6491] bcachefs (loop3): marking filesystem clean [ 61.417298][ T6492] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.434817][ T6491] bcachefs (loop3): shutdown complete [ 61.443246][ T6492] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.892618][ T7427] input: syz0 as /devices/virtual/input/input3 [ 62.171345][ T7426] loop2: detected capacity change from 0 to 32768 [ 62.256907][ T7426] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 62.302146][ T7426] XFS (loop2): Ending clean mount [ 62.309844][ T7426] XFS (loop2): Quotacheck needed: Please wait. [ 62.338836][ T7426] XFS (loop2): Quotacheck: Done. [ 62.386052][ T6500] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.389467][ T6500] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.393312][ T6500] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.397021][ T6500] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.399472][ T6500] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.460500][ T6499] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 62.505755][ T45] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.736463][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 62.772933][ T45] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.891340][ T45] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.930206][ T7474] loop0: detected capacity change from 0 to 1024 [ 62.968784][ T7474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.039964][ T7474] EXT4-fs error (device loop0): ext4_map_blocks:709: inode #15: block 3: comm syz.0.287: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.054508][ T7474] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 63.058084][ T7474] EXT4-fs (loop0): This should not happen!! Data will be lost [ 63.058084][ T7474] [ 63.069886][ T7474] EXT4-fs error (device loop0): ext4_map_blocks:709: inode #15: block 3: comm syz.0.287: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.080811][ T45] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.128623][ T7478] loop1: detected capacity change from 0 to 512 [ 63.166617][ T6492] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.227666][ T7478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.274105][ T7449] chnl_net:caif_netlink_parms(): no params data found [ 63.347366][ T7478] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.288: bg 0: block 248: padding at end of block bitmap is not set [ 63.532201][ T272] Bluetooth: hci5: Frame reassembly failed (-84) [ 63.566723][ T6490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.678283][ T7493] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 63.681019][ T7493] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 63.698941][ T7493] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 63.713323][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.713439][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.713568][ T7449] bridge_slave_0: entered allmulticast mode [ 63.722299][ T7449] bridge_slave_0: entered promiscuous mode [ 63.744870][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.744967][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.745093][ T7449] bridge_slave_1: entered allmulticast mode [ 63.746020][ T7449] bridge_slave_1: entered promiscuous mode [ 63.751272][ T7493] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 63.751314][ T7493] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 63.798856][ T7493] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 63.810141][ T7493] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 63.810231][ T7493] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 63.813353][ T45] bridge_slave_1: left allmulticast mode [ 63.813465][ T45] bridge_slave_1: left promiscuous mode [ 63.814487][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.820661][ T7493] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 63.827470][ T7493] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 63.827744][ T7493] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 63.831307][ T45] bridge_slave_0: left allmulticast mode [ 63.831368][ T45] bridge_slave_0: left promiscuous mode [ 63.831474][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.877210][ T7493] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 64.082765][ T7506] Bluetooth: hci6: Frame reassembly failed (-84) [ 64.086249][ T2205] Bluetooth: hci6: Frame reassembly failed (-84) [ 64.099279][ T7497] loop2: detected capacity change from 0 to 32768 [ 64.103796][ T7497] XFS: attr2 mount option is deprecated. [ 64.107231][ T7497] XFS: noikeep mount option is deprecated. [ 64.120264][ T7497] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 64.150222][ T7497] XFS (loop2): Ending clean mount [ 64.154266][ T7497] XFS (loop2): Quotacheck needed: Please wait. [ 64.194131][ T7497] XFS (loop2): Quotacheck: Done. [ 64.230333][ T6499] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 64.702043][ T7521] loop2: detected capacity change from 0 to 32768 [ 64.706035][ T7521] XFS: attr2 mount option is deprecated. [ 64.706675][ T7521] XFS: noikeep mount option is deprecated. [ 64.745557][ T2392] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.745743][ T2392] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.766225][ T7521] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 64.819514][ T7521] XFS (loop2): Ending clean mount [ 64.822064][ T7521] XFS (loop2): Quotacheck needed: Please wait. [ 64.845862][ T7521] XFS (loop2): Quotacheck: Done. [ 64.884975][ T7523] loop1: detected capacity change from 0 to 40427 [ 64.907826][ T7523] F2FS-fs (loop1): invalid crc value [ 64.928840][ T6499] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 64.934206][ T7523] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 64.982336][ T7523] syz.1.301: attempt to access beyond end of device [ 64.982336][ T7523] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 64.990135][ T7523] CPU: 1 UID: 0 PID: 7523 Comm: syz.1.301 Not tainted 6.15.0-rc4-syzkaller-g66d2d510fea3 #0 PREEMPT [ 64.990165][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 64.990173][ T7523] Call trace: [ 64.990177][ T7523] show_stack+0x2c/0x3c (C) [ 64.990194][ T7523] __dump_stack+0x30/0x40 [ 64.990206][ T7523] dump_stack_lvl+0xd8/0x12c [ 64.990217][ T7523] dump_stack+0x1c/0x28 [ 64.990227][ T7523] f2fs_handle_critical_error+0x34c/0x4b8 [ 64.990243][ T7523] f2fs_stop_checkpoint+0x58/0x6c [ 64.990255][ T7523] f2fs_write_end_io+0x794/0xadc [ 64.990270][ T7523] bio_endio+0x81c/0x858 [ 64.990284][ T7523] submit_bio_noacct+0x158/0x176c [ 64.990295][ T7523] submit_bio+0x354/0x4d4 [ 64.990306][ T7523] f2fs_submit_write_bio+0x13c/0x324 [ 64.990319][ T7523] __submit_merged_bio+0x254/0x704 [ 64.990335][ T7523] __submit_merged_write_cond+0x23c/0x4ac [ 64.990348][ T7523] f2fs_write_data_pages+0x1e9c/0x27ac [ 64.990363][ T7523] do_writepages+0x2c0/0x6a8 [ 64.990378][ T7523] filemap_fdatawrite+0x144/0x1e8 [ 64.990393][ T7523] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 64.990405][ T7523] f2fs_write_checkpoint+0x684/0x1694 [ 64.990417][ T7523] f2fs_issue_checkpoint+0x280/0x398 [ 64.990429][ T7523] f2fs_sync_fs+0x1e0/0x4f4 [ 64.990442][ T7523] f2fs_create+0x3cc/0x4fc [ 64.990454][ T7523] path_openat+0x12d8/0x2c40 [ 64.990466][ T7523] do_filp_open+0x18c/0x36c [ 64.990478][ T7523] do_sys_openat2+0x11c/0x1b4 [ 64.990492][ T7523] __arm64_sys_openat+0x120/0x158 [ 64.990506][ T7523] invoke_syscall+0x98/0x2b8 [ 64.990517][ T7523] el0_svc_common+0x130/0x23c [ 64.990528][ T7523] do_el0_svc+0x48/0x58 [ 64.990537][ T7523] el0_svc+0x58/0x150 [ 64.990551][ T7523] el0t_64_sync_handler+0x78/0x108 [ 64.990563][ T7523] el0t_64_sync+0x198/0x19c [ 64.994197][ T7523] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 65.075803][ T6490] syz-executor: attempt to access beyond end of device [ 65.075803][ T6490] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 65.076274][ T6490] syz-executor: attempt to access beyond end of device [ 65.076274][ T6490] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 65.540955][ T6502] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 65.541176][ T6493] Bluetooth: hci5: command 0x1003 tx timeout [ 65.541567][ T6493] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.547454][ T6500] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 65.569509][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.603237][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.642728][ T45] bond0 (unregistering): Released all slaves [ 65.662111][ T7449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.662509][ T7536] Zero length message leads to an empty skb [ 65.664718][ T7449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.701535][ T6500] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.782474][ T6500] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.850664][ T7449] team0: Port device team_slave_0 added [ 65.860919][ T6500] Bluetooth: hci4: command 0x041b tx timeout [ 65.860930][ T6502] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.868109][ T7449] team0: Port device team_slave_1 added [ 66.100925][ T6494] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 66.217682][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.217756][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.217803][ T7449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.352252][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.352315][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.352344][ T7449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.487553][ T7563] loop0: detected capacity change from 0 to 2048 [ 66.546732][ T7563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.580354][ T6494] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.584341][ T6494] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.590813][ T6494] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.595794][ T6494] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.598240][ T6494] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.757483][ T7449] hsr_slave_0: entered promiscuous mode [ 66.762590][ T7449] hsr_slave_1: entered promiscuous mode [ 66.762997][ T7449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.763036][ T7449] Cannot create hsr debugfs directory [ 66.781198][ T44] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 66.788513][ T44] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2048 with max blocks 245 with error 117 [ 66.788679][ T44] EXT4-fs (loop0): This should not happen!! Data will be lost [ 66.788679][ T44] [ 66.823320][ T7590] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 66.828092][ T6492] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.996616][ T45] hsr_slave_0: left promiscuous mode [ 66.998606][ T45] hsr_slave_1: left promiscuous mode [ 66.999503][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.999572][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.006328][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.006399][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.049867][ T45] veth1_macvtap: left promiscuous mode [ 67.050138][ T45] veth0_macvtap: left promiscuous mode [ 67.057618][ T45] veth1_vlan: left promiscuous mode [ 67.059363][ T45] veth0_vlan: left promiscuous mode [ 67.264750][ T7598] loop0: detected capacity change from 0 to 32768 [ 67.345112][ T7598] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 67.345112][ T7598] allowing incompatible features above 0.0: (unknown version) [ 67.353509][ T7598] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 67.353680][ T7598] bcachefs (loop0): Version upgrade required: [ 67.353680][ T7598] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 67.353680][ T7598] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 67.353680][ T7598] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 67.355581][ T7598] bcachefs (loop0): dropping and reconstructing all alloc info [ 67.362756][ T7598] bcachefs (loop0): invalid bkey in btree_node btree=snapshots level=0: u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent 268435456 children 0 0 subvol 1 tree 0 [ 67.362777][ T7598] bad parent node (268435456 <= 4294967295), deleting [ 67.369059][ T7598] bcachefs (loop0): accounting_read... done [ 67.411793][ T7598] bcachefs (loop0): alloc_read... done [ 67.411871][ T7598] bcachefs (loop0): snapshots_read... done [ 67.411922][ T7598] bcachefs (loop0): check_allocations... done [ 67.438494][ T7598] bcachefs (loop0): going read-write [ 67.497084][ T7598] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 67.499524][ T7598] bcachefs (loop0): done starting filesystem [ 67.510649][ T239] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 67.510708][ T239] u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing [ 67.554367][ T239] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 67.558333][ T239] u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing [ 67.582114][ T239] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 67.582161][ T239] u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing [ 67.584981][ T239] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 67.584998][ T239] u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing [ 67.605562][ T7598] bcachefs (loop0): requested incompat feature 1.16: reflink_p_may_update_opts currently not enabled [ 67.605562][ T7598] set version_upgrade=incompat to enable [ 67.661782][ T2205] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 67.664878][ T2205] u64s 5 type deleted 0:35:0 len 0 ver 0, , continuing [ 67.754867][ T6502] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 67.755075][ T6502] u64s 5 type deleted 0:37:0 len 0 ver 0, , continuing [ 67.759217][ T6492] bcachefs (loop0): shutting down [ 67.760283][ T6492] bcachefs (loop0): going read-only [ 67.760311][ T6492] bcachefs (loop0): finished waiting for writes to stop [ 67.781059][ T6502] Bluetooth: hci1: command 0x0c1a tx timeout [ 67.786412][ T6492] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 67.823081][ T272] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 67.823143][ T272] u64s 5 type deleted 0:39:0 len 0 ver 0, , continuing [ 67.857640][ T272] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 67.857690][ T272] u64s 5 type deleted 0:42:0 len 0 ver 0, , continuing [ 67.861150][ T6502] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.877680][ T6492] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12 [ 67.885374][ T6492] bcachefs (loop0): unclean shutdown complete, journal seq 13 [ 67.918108][ T6492] bcachefs (loop0): done going read-only, filesystem not clean [ 67.950273][ T6494] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.950353][ T6494] Bluetooth: hci4: command 0x041b tx timeout [ 67.978454][ T7622] loop3: detected capacity change from 0 to 256 [ 67.983863][ T6492] bcachefs (loop0): shutdown complete [ 68.201614][ T7629] loop2: detected capacity change from 0 to 256 [ 68.215498][ T7629] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 68.442487][ T7639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.329'. [ 68.494841][ T7643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.329'. [ 68.660962][ T6502] Bluetooth: hci0: command tx timeout [ 68.689420][ T7650] loop2: detected capacity change from 0 to 16 [ 68.715924][ T7650] erofs (device loop2): mounted with root inode @ nid 36. [ 68.727817][ T7650] erofs (device loop2): invalid de[0].nameoff 0 @ nid 36 [ 69.137414][ T45] team0 (unregistering): Port device team_slave_1 removed [ 69.317099][ T45] team0 (unregistering): Port device team_slave_0 removed [ 69.728586][ T7665] loop0: detected capacity change from 0 to 128 [ 69.767613][ T7665] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 69.805917][ T7665] FAT-fs (loop0): FAT read failed (blocknr 128) [ 69.836896][ T7665] FAT-fs (loop0): FAT read failed (blocknr 128) [ 69.863942][ T3890] cfg80211: failed to load regulatory.db [ 69.864720][ T6502] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.941203][ T6502] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.021841][ T6502] Bluetooth: hci4: command 0x041b tx timeout [ 70.021924][ T6502] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.411972][ T7670] loop0: detected capacity change from 0 to 65536 [ 70.448494][ T7670] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 70.478131][ T7670] XFS (loop0): Ending clean mount [ 70.484566][ T7670] XFS (loop0): Quotacheck needed: Please wait. [ 70.499867][ T12] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x6 [ 70.500059][ T12] XFS (loop0): Unmount and run xfs_repair [ 70.500081][ T12] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 70.500104][ T12] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 70.500125][ T12] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 70.500146][ T12] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 70.500166][ T12] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 70.500187][ T12] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 70.500207][ T12] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 70.500228][ T12] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.500248][ T12] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.500271][ T12] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x6 len 2 error 74 [ 70.506873][ T7670] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 70.588680][ T7670] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x6 [ 70.588767][ T7670] XFS (loop0): Unmount and run xfs_repair [ 70.588807][ T7670] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 70.588837][ T7670] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 70.588865][ T7670] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 70.588892][ T7670] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 70.588919][ T7670] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 70.588955][ T7670] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 70.588990][ T7670] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 70.589017][ T7670] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.589044][ T7670] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.589073][ T7670] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x6 len 2 error 74 [ 70.589188][ T7670] XFS (loop0): page discard on page 00000000cc704f40, inode 0x26, pos 3072. [ 70.589995][ T2203] loop0: writeback error on inode 38, offset 0, sector 22 [ 70.618280][ T7670] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x6 [ 70.618423][ T7670] XFS (loop0): Unmount and run xfs_repair [ 70.618444][ T7670] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 70.618467][ T7670] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 70.618489][ T7670] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 70.618510][ T7670] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 70.618531][ T7670] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 70.618552][ T7670] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 70.618573][ T7670] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 70.618593][ T7670] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.618614][ T7670] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.618638][ T7670] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x6 len 2 error 74 [ 70.618833][ T7670] XFS (loop0): page discard on page 00000000cc704f40, inode 0x26, pos 1024. [ 70.625882][ T7670] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x6 [ 70.625933][ T7670] XFS (loop0): Unmount and run xfs_repair [ 70.625963][ T7670] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 70.625992][ T7670] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 70.626014][ T7670] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 70.626035][ T7670] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 70.626056][ T7670] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 70.626076][ T7670] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 70.626097][ T7670] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 70.626118][ T7670] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.626138][ T7670] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.626162][ T7670] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x6 len 2 error 74 [ 70.626266][ T7670] XFS (loop0): page discard on page 000000005922efa0, inode 0x26, pos 4096. [ 70.626339][ T7670] loop0: writeback error on inode 38, offset 0, sector 22 [ 70.704036][ T6492] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 70.710469][ T6492] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 70.743362][ T6494] Bluetooth: hci0: command tx timeout [ 71.031047][ T7683] loop0: detected capacity change from 0 to 32768 [ 71.034905][ T7683] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.344 (7683) [ 71.043149][ T7683] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 71.046058][ T7683] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 71.048428][ T7683] BTRFS info (device loop0): disk space caching is enabled [ 71.050418][ T7683] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 71.082557][ T7683] BTRFS info (device loop0): rebuilding free space tree [ 71.091120][ T7683] BTRFS info (device loop0): disabling free space tree [ 71.093053][ T7683] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 71.096167][ T7683] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 71.188495][ T272] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 71.215055][ T6492] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 71.426698][ T7704] loop0: detected capacity change from 0 to 1764 [ 71.476688][ T7704] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 71.503169][ T7704] block device autoloading is deprecated and will be removed. [ 71.508644][ T7704] syz.0.346: attempt to access beyond end of device [ 71.508644][ T7704] loop34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 71.735733][ T7715] loop2: detected capacity change from 0 to 512 [ 71.769304][ T7715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.807575][ T7715] capability: warning: `syz.2.351' uses 32-bit capabilities (legacy support in use) [ 71.834045][ T6499] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.114208][ T6494] Bluetooth: hci4: command 0x041b tx timeout [ 72.239576][ T7733] loop0: detected capacity change from 0 to 4096 [ 72.579820][ T7722] loop2: detected capacity change from 0 to 32768 [ 72.680690][ T7722] JBD2: Ignoring recovery information on journal [ 72.779628][ T7578] chnl_net:caif_netlink_parms(): no params data found [ 72.795225][ T7722] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 72.821019][ T6502] Bluetooth: hci0: command tx timeout [ 72.893325][ T7726] loop3: detected capacity change from 0 to 65536 [ 72.925963][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 72.926046][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'. [ 72.933821][ T7726] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 73.000284][ T7726] XFS (loop3): Ending clean mount [ 73.013013][ T7726] XFS (loop3): Quotacheck needed: Please wait. [ 73.078417][ T6499] ocfs2: Unmounting device (7,2) on (node local) [ 73.092572][ T7726] XFS (loop3): Quotacheck: Done. [ 73.283124][ T7766] XFS (loop3): EXPERIMENTAL online shrink feature enabled. Use at your own risk! [ 73.375684][ T6491] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 73.387663][ T7774] loop0: detected capacity change from 0 to 256 [ 73.390477][ T7774] MINIX-fs: mounting file system with errors, running fsck is recommended [ 73.574640][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.672816][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.767330][ T7578] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.767431][ T7578] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.767556][ T7578] bridge_slave_0: entered allmulticast mode [ 73.771107][ T7578] bridge_slave_0: entered promiscuous mode [ 73.852195][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.902184][ T7578] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.902269][ T7578] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.902435][ T7578] bridge_slave_1: entered allmulticast mode [ 73.903292][ T7578] bridge_slave_1: entered promiscuous mode [ 74.033553][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.086300][ T7807] loop3: detected capacity change from 0 to 64 [ 74.171791][ T7578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.173500][ T7578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.180930][ T6502] Bluetooth: hci4: command 0x041b tx timeout [ 74.349785][ T7824] loop3: detected capacity change from 0 to 512 [ 74.394296][ T7449] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.399570][ T7449] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.412678][ T7449] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.428605][ T7824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.433680][ T7578] team0: Port device team_slave_0 added [ 74.435223][ T7578] team0: Port device team_slave_1 added [ 74.460707][ T7449] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.501709][ T7824] EXT4-fs (loop3): shut down requested (1) [ 74.541981][ T7578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.542042][ T7578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.542071][ T7578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.557841][ T6491] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.601292][ T7578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.601357][ T7578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.601402][ T7578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.788328][ T7578] hsr_slave_0: entered promiscuous mode [ 74.789013][ T7578] hsr_slave_1: entered promiscuous mode [ 74.789348][ T7578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.789377][ T7578] Cannot create hsr debugfs directory [ 74.901110][ T6502] Bluetooth: hci0: command tx timeout [ 74.973412][ T45] bridge_slave_1: left allmulticast mode [ 74.973479][ T45] bridge_slave_1: left promiscuous mode [ 74.973584][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.982504][ T45] bridge_slave_0: left allmulticast mode [ 74.982563][ T45] bridge_slave_0: left promiscuous mode [ 74.982675][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.108199][ T7880] loop2: detected capacity change from 0 to 512 [ 75.119096][ T7880] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.132493][ T7880] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 75.132590][ T7880] System zones: 1-12 [ 75.136804][ T7880] EXT4-fs (loop2): 1 truncate cleaned up [ 75.137675][ T7880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.345419][ T6499] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.792031][ T7888] loop2: detected capacity change from 0 to 40427 [ 75.861786][ T7888] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 76.260939][ T6502] Bluetooth: hci4: command 0x041b tx timeout [ 76.405110][ T6499] syz-executor: attempt to access beyond end of device [ 76.405110][ T6499] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 76.405206][ T6499] CPU: 1 UID: 0 PID: 6499 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-g66d2d510fea3 #0 PREEMPT [ 76.405223][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 76.405231][ T6499] Call trace: [ 76.405235][ T6499] show_stack+0x2c/0x3c (C) [ 76.405251][ T6499] __dump_stack+0x30/0x40 [ 76.405263][ T6499] dump_stack_lvl+0xd8/0x12c [ 76.405273][ T6499] dump_stack+0x1c/0x28 [ 76.405283][ T6499] f2fs_handle_critical_error+0x34c/0x4b8 [ 76.405299][ T6499] f2fs_stop_checkpoint+0x58/0x6c [ 76.405311][ T6499] f2fs_write_end_io+0x794/0xadc [ 76.405325][ T6499] bio_endio+0x81c/0x858 [ 76.405338][ T6499] submit_bio_noacct+0x158/0x176c [ 76.405349][ T6499] submit_bio+0x354/0x4d4 [ 76.405359][ T6499] f2fs_submit_write_bio+0x13c/0x324 [ 76.405372][ T6499] __submit_merged_bio+0x254/0x704 [ 76.405384][ T6499] __submit_merged_write_cond+0x23c/0x4ac [ 76.405397][ T6499] f2fs_write_data_pages+0x1e9c/0x27ac [ 76.405411][ T6499] do_writepages+0x2c0/0x6a8 [ 76.405425][ T6499] filemap_fdatawrite+0x144/0x1e8 [ 76.405440][ T6499] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 76.405452][ T6499] f2fs_write_checkpoint+0x684/0x1694 [ 76.405463][ T6499] kill_f2fs_super+0x21c/0x584 [ 76.405476][ T6499] deactivate_locked_super+0xc4/0x12c [ 76.405489][ T6499] deactivate_super+0xe0/0x100 [ 76.405500][ T6499] cleanup_mnt+0x31c/0x3ac [ 76.405512][ T6499] __cleanup_mnt+0x20/0x30 [ 76.405524][ T6499] task_work_run+0x1dc/0x260 [ 76.405535][ T6499] do_notify_resume+0x178/0x1f8 [ 76.405548][ T6499] el0_svc+0xb0/0x150 [ 76.405564][ T6499] el0t_64_sync_handler+0x78/0x108 [ 76.405576][ T6499] el0t_64_sync+0x198/0x19c [ 76.406024][ T6499] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 76.425636][ T7908] loop0: detected capacity change from 0 to 32768 [ 76.444983][ T7908] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.393 (7908) [ 76.465276][ T7908] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 76.465382][ T7908] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 76.465423][ T7908] BTRFS info (device loop0): disk space caching is enabled [ 76.465446][ T7908] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 76.598784][ T7908] BTRFS info (device loop0): rebuilding free space tree [ 76.610104][ T7908] BTRFS info (device loop0): disabling free space tree [ 76.610178][ T7908] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 76.610206][ T7908] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 76.683408][ T31] audit: type=1400 audit(77.419:4): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=7907 comm="syz.0.393" name="/" dev="loop0" ino=256 [ 76.719034][ T6492] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 76.810899][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.843084][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.883073][ T45] bond0 (unregistering): Released all slaves [ 77.036903][ T7933] loop2: detected capacity change from 0 to 256 [ 77.039040][ T7449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.128039][ T7933] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 77.167164][ T7929] loop0: detected capacity change from 0 to 32768 [ 77.183390][ T7929] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 77.338822][ T7929] XFS (loop0): Ending clean mount [ 77.372210][ T7449] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.383089][ T534] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.383176][ T534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.384071][ T534] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.384115][ T534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.391784][ T7929] XFS (loop0): Quotacheck needed: Please wait. [ 77.424279][ T7929] XFS (loop0): Quotacheck: Done. [ 77.542654][ T6492] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 77.799776][ T7449] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.818617][ T7449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.856461][ T7578] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 77.894967][ T7578] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.035287][ T45] hsr_slave_0: left promiscuous mode [ 78.037485][ T45] hsr_slave_1: left promiscuous mode [ 78.039667][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.044854][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.047893][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.050154][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.091515][ T45] veth1_macvtap: left promiscuous mode [ 78.093181][ T45] veth0_macvtap: left promiscuous mode [ 78.095261][ T45] veth1_vlan: left promiscuous mode [ 78.096750][ T45] veth0_vlan: left promiscuous mode [ 79.004077][ T7967] loop2: detected capacity change from 0 to 262144 [ 79.039164][ T7967] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 79.687665][ T7990] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 79.780334][ T7992] loop2: detected capacity change from 0 to 4096 [ 79.816525][ T7992] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 79.885472][ T6499] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22. [ 79.986077][ T7996] loop2: detected capacity change from 0 to 4096 [ 80.196149][ T8002] loop2: detected capacity change from 0 to 256 [ 80.197288][ T8002] vfat: Unknown parameter '' [ 81.214617][ T8009] loop2: detected capacity change from 0 to 2048 [ 81.226647][ T8009] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 81.255545][ T8010] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.802344][ T7578] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 81.885481][ T7578] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 81.963593][ T7449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.099858][ T7578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.139538][ T7578] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.212622][ T534] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.212711][ T534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.218059][ T534] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.218150][ T534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.246054][ T7578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.456403][ T7449] veth0_vlan: entered promiscuous mode [ 82.467994][ T7449] veth1_vlan: entered promiscuous mode [ 82.496421][ T7449] veth0_macvtap: entered promiscuous mode [ 82.503704][ T7449] veth1_macvtap: entered promiscuous mode [ 82.532009][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.535176][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.537963][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.545190][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.545244][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.545272][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.546093][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.585411][ T7578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.587686][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.587719][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.587739][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.587759][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.588389][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.614109][ T7449] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.614175][ T7449] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.618444][ T7449] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.618477][ T7449] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.765502][ T8031] loop2: detected capacity change from 0 to 32768 [ 82.779123][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.779191][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.779802][ T8031] btrfs: Deprecated parameter 'usebackuproot' [ 82.779863][ T8031] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 82.794110][ T8031] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.425 (8031) [ 82.805058][ T8031] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.805161][ T8031] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 82.805197][ T8031] BTRFS info (device loop2): using free-space-tree [ 82.809695][ T8065] loop0: detected capacity change from 0 to 64 [ 82.829260][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.837258][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.897737][ T534] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 82.902746][ T8031] BTRFS warning (device loop2): couldn't read tree root [ 82.902799][ T8031] BTRFS warning (device loop2): try to load backup roots slot 1 [ 82.911350][ T534] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 82.927185][ T8031] BTRFS warning (device loop2): couldn't read tree root [ 82.927248][ T8031] BTRFS warning (device loop2): try to load backup roots slot 2 [ 82.936578][ T12] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 82.946632][ T8031] BTRFS warning (device loop2): couldn't read tree root [ 82.948650][ T8031] BTRFS warning (device loop2): try to load backup roots slot 3 [ 82.987424][ T6492] Bad inode number on dev loop0: 4160749571 is out of range [ 82.988049][ T6492] Bad inode number on dev loop0: 4160749571 is out of range [ 82.997303][ T8031] BTRFS info (device loop2): rebuilding free space tree [ 83.005036][ T7578] veth0_vlan: entered promiscuous mode [ 83.023032][ T8031] BTRFS info (device loop2): checking UUID tree [ 83.043630][ T7578] veth1_vlan: entered promiscuous mode [ 83.109097][ T7578] veth0_macvtap: entered promiscuous mode [ 83.135926][ T7578] veth1_macvtap: entered promiscuous mode [ 83.157580][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.160694][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.163573][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.166407][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.169194][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.183142][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.183222][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.183250][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.186692][ T7578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.239824][ T6499] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 83.279397][ T8097] input: syz1 as /devices/virtual/input/input4 [ 83.447106][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.447169][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.447190][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.447210][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.447233][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.447253][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.448025][ T7578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.458482][ T7578] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.458526][ T7578] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.458557][ T7578] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.458586][ T7578] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.774605][ T2205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.774659][ T2205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.858873][ T6502] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.862516][ T6502] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.864839][ T6502] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.868184][ T6502] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.872585][ T6502] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.934378][ T8125] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 84.193281][ T6494] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.196709][ T6494] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.198969][ T6494] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.203700][ T6494] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.204724][ T6494] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.217875][ T44] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.274501][ T534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.276901][ T534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.383843][ T44] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.532270][ T44] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.759987][ T8168] loop5: detected capacity change from 0 to 256 [ 84.802469][ T8168] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe1843155, utbl_chksum : 0xe619d30d) [ 84.860529][ T8168] exFAT-fs (loop5): valid_size(100667392) is greater than size(4096) [ 84.972679][ T44] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.394598][ T8117] chnl_net:caif_netlink_parms(): no params data found [ 85.520168][ T44] bridge_slave_1: left allmulticast mode [ 85.521904][ T44] bridge_slave_1: left promiscuous mode [ 85.523885][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.532163][ T44] bridge_slave_0: left allmulticast mode [ 85.537836][ T44] bridge_slave_0: left promiscuous mode [ 85.538005][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.629851][ T6502] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.649121][ T6502] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.665612][ T6502] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.680011][ T6502] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.690045][ T6502] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.887816][ T8195] loop5: detected capacity change from 0 to 128 [ 85.893572][ T8195] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 85.940927][ T6502] Bluetooth: hci2: command tx timeout [ 86.008567][ T8197] loop5: detected capacity change from 0 to 512 [ 86.062010][ T8197] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.149932][ T8197] Quota error (device loop5): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 86.150271][ T8197] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.220534][ T7578] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /5/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 86.262889][ T6502] Bluetooth: hci4: command tx timeout [ 87.317776][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.344075][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.372783][ T44] bond0 (unregistering): Released all slaves [ 87.385999][ T8140] chnl_net:caif_netlink_parms(): no params data found [ 87.781280][ T6502] Bluetooth: hci3: command tx timeout [ 87.814422][ T8117] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.814508][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.814706][ T8117] bridge_slave_0: entered allmulticast mode [ 87.815579][ T8117] bridge_slave_0: entered promiscuous mode [ 87.816745][ T8117] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.816818][ T8117] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.816956][ T8117] bridge_slave_1: entered allmulticast mode [ 87.817784][ T8117] bridge_slave_1: entered promiscuous mode [ 87.858112][ T8214] loop3: detected capacity change from 0 to 2048 [ 87.868799][ T8214] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 87.881052][ T8218] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.936511][ T8214] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 87.941007][ T8214] [ 87.941652][ T8214] ====================================================== [ 87.943527][ T8214] WARNING: possible circular locking dependency detected [ 87.945412][ T8214] 6.15.0-rc4-syzkaller-g66d2d510fea3 #0 Not tainted [ 87.947159][ T8214] ------------------------------------------------------ [ 87.949055][ T8214] syz.3.456/8214 is trying to acquire lock: [ 87.950613][ T8214] ffff0000ed663090 (&nilfs->ns_sem){++++}-{4:4}, at: __nilfs_error+0x164/0x3bc [ 87.953059][ T8214] [ 87.953059][ T8214] but task is already holding lock: [ 87.955041][ T8214] ffff0000ef7cf870 (&dat_lock_key){.+.+}-{4:4}, at: nilfs_fiemap+0x2ec/0x7a8 [ 87.957424][ T8214] [ 87.957424][ T8214] which lock already depends on the new lock. [ 87.957424][ T8214] [ 87.960216][ T8214] [ 87.960216][ T8214] the existing dependency chain (in reverse order) is: [ 87.962681][ T8214] [ 87.962681][ T8214] -> #4 (&dat_lock_key){.+.+}-{4:4}: [ 87.964721][ T8214] down_read+0x58/0x2f8 [ 87.965977][ T8214] nilfs_get_block+0x170/0x7a8 [ 87.967414][ T8214] do_mpage_readpage+0x618/0x16f8 [ 87.968982][ T8214] mpage_readahead+0x2c8/0x530 [ 87.970439][ T8214] nilfs_readahead+0x28/0x38 [ 87.971854][ T8214] read_pages+0x13c/0x4c8 [ 87.972620][ T6494] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.972838][ T6494] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.973040][ T6494] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.973498][ T6494] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.973809][ T6494] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.982965][ T8214] page_cache_ra_unbounded+0x21c/0x71c [ 87.984647][ T8214] page_cache_ra_order+0x938/0xb34 [ 87.986281][ T8214] do_sync_mmap_readahead+0x2f0/0x660 [ 87.987994][ T8214] filemap_fault+0x600/0x1278 [ 87.989585][ T8214] __do_fault+0xf8/0x498 [ 87.990921][ T8214] handle_mm_fault+0x1900/0x4cec [ 87.992417][ T8214] do_page_fault+0x428/0x1554 [ 87.993867][ T8214] do_translation_fault+0xc4/0x114 [ 87.995464][ T8214] do_mem_abort+0x70/0x194 [ 87.996861][ T8214] el0_da+0x64/0x160 [ 87.998132][ T8214] el0t_64_sync_handler+0x84/0x108 [ 87.999771][ T8214] el0t_64_sync+0x198/0x19c [ 88.001193][ T8214] [ 88.001193][ T8214] -> #3 (mapping.invalidate_lock#3){.+.+}-{4:4}: [ 88.003582][ T8214] down_read+0x58/0x2f8 [ 88.004868][ T8214] filemap_fault+0x564/0x1278 [ 88.006426][ T8214] __do_fault+0xf8/0x498 [ 88.007771][ T8214] handle_mm_fault+0x1900/0x4cec [ 88.009344][ T8214] do_page_fault+0x598/0x1554 [ 88.010870][ T8214] do_translation_fault+0xc4/0x114 [ 88.012384][ T8214] do_mem_abort+0x70/0x194 [ 88.013767][ T8214] el1_abort+0x3c/0x5c [ 88.015081][ T8214] el1h_64_sync_handler+0x50/0xcc [ 88.016634][ T8214] el1h_64_sync+0x6c/0x70 [ 88.018051][ T8214] __arch_copy_to_user+0x64/0x240 [ 88.019635][ T8214] verbose+0x100/0x178 [ 88.020921][ T8214] check_subprogs+0x4f8/0x570 [ 88.022421][ T8214] bpf_check+0x2080/0x13a28 [ 88.023894][ T8214] bpf_prog_load+0xec8/0x13fc [ 88.025343][ T8214] __sys_bpf+0x43c/0x614 [ 88.026755][ T8214] __arm64_sys_bpf+0x80/0x98 [ 88.028211][ T8214] invoke_syscall+0x98/0x2b8 [ 88.029673][ T8214] el0_svc_common+0x130/0x23c [ 88.031132][ T8214] do_el0_svc+0x48/0x58 [ 88.032547][ T8214] el0_svc+0x58/0x150 [ 88.033827][ T8214] el0t_64_sync_handler+0x78/0x108 [ 88.035432][ T8214] el0t_64_sync+0x198/0x19c [ 88.036860][ T8214] [ 88.036860][ T8214] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 88.039026][ T8214] __might_fault+0xc4/0x124 [ 88.040468][ T8214] _copy_to_iter+0xe0/0x1394 [ 88.041971][ T8214] copy_page_to_iter+0x24c/0x348 [ 88.043563][ T8214] filemap_read+0x668/0xf4c [ 88.045230][ T8214] blkdev_read_iter+0x2b0/0x3dc [ 88.046758][ T8214] vfs_read+0x5fc/0x898 [ 88.048094][ T8214] ksys_read+0x120/0x210 [ 88.049472][ T8214] __arm64_sys_read+0x7c/0x90 [ 88.050924][ T8214] invoke_syscall+0x98/0x2b8 [ 88.052450][ T8214] el0_svc_common+0x130/0x23c [ 88.053973][ T8214] do_el0_svc+0x48/0x58 [ 88.055369][ T8214] el0_svc+0x58/0x150 [ 88.056576][ T8214] el0t_64_sync_handler+0x78/0x108 [ 88.058172][ T8214] el0t_64_sync+0x198/0x19c [ 88.059580][ T8214] [ 88.059580][ T8214] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{4:4}: [ 88.061956][ T8214] down_write+0x50/0xc0 [ 88.063268][ T8214] set_blocksize+0x1c4/0x440 [ 88.064700][ T8214] sb_min_blocksize+0x118/0x1fc [ 88.066237][ T8214] init_nilfs+0x4c/0x584 [ 88.067540][ T8214] nilfs_fill_super+0x94/0x568 [ 88.069122][ T8214] nilfs_get_tree+0x378/0x664 [ 88.070535][ T8214] vfs_get_tree+0x90/0x28c [ 88.071917][ T8214] do_new_mount+0x228/0x814 [ 88.073383][ T8214] path_mount+0x5b4/0xde0 [ 88.074746][ T8214] __arm64_sys_mount+0x3e8/0x468 [ 88.076243][ T8214] invoke_syscall+0x98/0x2b8 [ 88.077654][ T8214] el0_svc_common+0x130/0x23c [ 88.079106][ T8214] do_el0_svc+0x48/0x58 [ 88.080419][ T8214] el0_svc+0x58/0x150 [ 88.081667][ T8214] el0t_64_sync_handler+0x78/0x108 [ 88.083210][ T8214] el0t_64_sync+0x198/0x19c [ 88.084572][ T8214] [ 88.084572][ T8214] -> #0 (&nilfs->ns_sem){++++}-{4:4}: [ 88.086716][ T8214] __lock_acquire+0x1728/0x3058 [ 88.088206][ T8214] lock_acquire+0x14c/0x2e0 [ 88.089584][ T8214] down_write+0x50/0xc0 [ 88.091088][ T8214] __nilfs_error+0x164/0x3bc [ 88.092522][ T8214] nilfs_bmap_lookup_contig+0x114/0x13c [ 88.094178][ T8214] nilfs_fiemap+0x320/0x7a8 [ 88.095550][ T8214] do_vfs_ioctl+0x1624/0x2218 [ 88.096969][ T8214] __arm64_sys_ioctl+0xe4/0x1c4 [ 88.098416][ T8214] invoke_syscall+0x98/0x2b8 [ 88.099823][ T8214] el0_svc_common+0x130/0x23c [ 88.101261][ T8214] do_el0_svc+0x48/0x58 [ 88.102548][ T8214] el0_svc+0x58/0x150 [ 88.103784][ T8214] el0t_64_sync_handler+0x78/0x108 [ 88.105345][ T8214] el0t_64_sync+0x198/0x19c [ 88.106691][ T8214] [ 88.106691][ T8214] other info that might help us debug this: [ 88.106691][ T8214] [ 88.109480][ T8214] Chain exists of: [ 88.109480][ T8214] &nilfs->ns_sem --> mapping.invalidate_lock#3 --> &dat_lock_key [ 88.109480][ T8214] [ 88.113215][ T8214] Possible unsafe locking scenario: [ 88.113215][ T8214] [ 88.115242][ T8214] CPU0 CPU1 [ 88.116697][ T8214] ---- ---- [ 88.118176][ T8214] rlock(&dat_lock_key); [ 88.119383][ T8214] lock(mapping.invalidate_lock#3); [ 88.121549][ T8214] lock(&dat_lock_key); [ 88.123399][ T8214] lock(&nilfs->ns_sem); [ 88.124556][ T8214] [ 88.124556][ T8214] *** DEADLOCK *** [ 88.124556][ T8214] [ 88.126764][ T8214] 2 locks held by syz.3.456/8214: [ 88.128137][ T8214] #0: ffff0000f20535a0 (&sb->s_type->i_mutex_key#27){+.+.}-{4:4}, at: nilfs_fiemap+0x144/0x7a8 [ 88.131117][ T8214] #1: ffff0000ef7cf870 (&dat_lock_key){.+.+}-{4:4}, at: nilfs_fiemap+0x2ec/0x7a8 [ 88.133824][ T8214] [ 88.133824][ T8214] stack backtrace: [ 88.135455][ T8214] CPU: 0 UID: 0 PID: 8214 Comm: syz.3.456 Not tainted 6.15.0-rc4-syzkaller-g66d2d510fea3 #0 PREEMPT [ 88.138526][ T8214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.141354][ T8214] Call trace: [ 88.142246][ T8214] show_stack+0x2c/0x3c (C) [ 88.143575][ T8214] __dump_stack+0x30/0x40 [ 88.144763][ T8214] dump_stack_lvl+0xd8/0x12c [ 88.146092][ T8214] dump_stack+0x1c/0x28 [ 88.147282][ T8214] print_circular_bug+0x324/0x32c [ 88.148673][ T8214] check_noncircular+0x154/0x174 [ 88.150124][ T8214] __lock_acquire+0x1728/0x3058 [ 88.151469][ T8214] lock_acquire+0x14c/0x2e0 [ 88.152768][ T8214] down_write+0x50/0xc0 [ 88.153919][ T8214] __nilfs_error+0x164/0x3bc [ 88.155465][ T8214] nilfs_bmap_lookup_contig+0x114/0x13c [ 88.157083][ T8214] nilfs_fiemap+0x320/0x7a8 [ 88.158326][ T8214] do_vfs_ioctl+0x1624/0x2218 [ 88.159646][ T8214] __arm64_sys_ioctl+0xe4/0x1c4 [ 88.161020][ T8214] invoke_syscall+0x98/0x2b8 [ 88.162312][ T8214] el0_svc_common+0x130/0x23c [ 88.163599][ T8214] do_el0_svc+0x48/0x58 [ 88.164847][ T8214] el0_svc+0x58/0x150 [ 88.166081][ T8214] el0t_64_sync_handler+0x78/0x108 [ 88.167510][ T8214] el0t_64_sync+0x198/0x19c [ 88.168905][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.175669][ T6502] Bluetooth: hci2: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 88.194718][ T8214] Remounting filesystem read-only [ 88.341233][ T6502] Bluetooth: hci4: command tx timeout [ 88.517033][ T44] hsr_slave_0: left promiscuous mode [ 88.518694][ T44] hsr_slave_1: left promiscuous mode [ 88.519382][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.519421][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.520609][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.520641][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.528298][ T44] veth1_macvtap: left promiscuous mode [ 88.528365][ T44] veth0_macvtap: left promiscuous mode [ 88.528442][ T44] veth1_vlan: left promiscuous mode [ 88.528499][ T44] veth0_vlan: left promiscuous mode [ 89.860908][ T6502] Bluetooth: hci3: command tx timeout [ 90.362307][ T44] team0 (unregistering): Port device team_slave_1 removed [ 90.572215][ T44] team0 (unregistering): Port device team_slave_0 removed [ 91.950887][ T6502] Bluetooth: hci3: command tx timeout [ 94.164444][ T44] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.252532][ T44] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.332128][ T44] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.423324][ T44] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.563047][ T44] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.633064][ T44] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.719589][ T44] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.812534][ T44] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.952333][ T44] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.042398][ T44] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.102618][ T44] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.182520][ T44] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.318661][ T44] bridge_slave_1: left allmulticast mode [ 95.318720][ T44] bridge_slave_1: left promiscuous mode [ 95.318824][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.327076][ T44] bridge_slave_0: left allmulticast mode [ 95.327129][ T44] bridge_slave_0: left promiscuous mode [ 95.327238][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.334573][ T44] bridge_slave_1: left allmulticast mode [ 95.334624][ T44] bridge_slave_1: left promiscuous mode [ 95.334962][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.344871][ T44] bridge_slave_0: left allmulticast mode [ 95.344921][ T44] bridge_slave_0: left promiscuous mode [ 95.345054][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.353840][ T44] bridge_slave_1: left allmulticast mode [ 95.353898][ T44] bridge_slave_1: left promiscuous mode [ 95.353997][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.357359][ T44] bridge_slave_0: left allmulticast mode [ 95.357393][ T44] bridge_slave_0: left promiscuous mode [ 95.357489][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.367518][ T44] bridge_slave_1: left allmulticast mode [ 95.367572][ T44] bridge_slave_1: left promiscuous mode [ 95.367686][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.372359][ T44] bridge_slave_0: left allmulticast mode [ 95.372394][ T44] bridge_slave_0: left promiscuous mode [ 95.372488][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.932884][ T44] gretap0 (unregistering): left promiscuous mode