last executing test programs: 13.589372227s ago: executing program 4 (id=1277): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 13.544902149s ago: executing program 4 (id=1281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000080ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001e0000008500000082000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 13.468754293s ago: executing program 4 (id=1282): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x11c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x48, 0x2, {{0xa, [0xb, 0x2, 0xb, 0x8c, 0xf, 0x4, 0x4, 0x6, 0xa, 0xf, 0x10, 0x2, 0xd, 0x8, 0x5, 0xc], 0x1, [0x9, 0x67ef, 0x2, 0x4, 0x4, 0x8, 0x3, 0xfff9, 0x9, 0xd4e8, 0x6, 0x200, 0x10, 0x0, 0xc73, 0x5], [0x800, 0x1, 0x7, 0x3d3e, 0xff, 0x4, 0x2, 0x50ad, 0x81, 0xc5, 0x8002, 0x3, 0x2, 0x7, 0x8, 0xce]}, [@TCA_MQPRIO_MAX_RATE64={0x70}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x9}, {0xc, 0x3, 0x8000}]}, @TCA_MQPRIO_MIN_RATE64={0x0, 0x3, 0x0, 0x1, [{0x0, 0x3, 0x6}, {0x0, 0x3, 0x9}, {0x0, 0x3, 0x4160}, {0x0, 0x3, 0x8000000000000000}, {0x0, 0x3, 0x8}, {0x0, 0x3, 0x80000000}, {0x0, 0x3, 0x8}, {0x0, 0x3, 0xb7a}, {0x0, 0x3, 0x7}, {}, {0x0, 0x3, 0x9}, {0x0, 0x3, 0x3}]}]}}}]}, 0x11c}}, 0x0) 13.368947438s ago: executing program 4 (id=1286): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000140)={[{@utf8}, {}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x6b}}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@errors_remount}, {@time_offset={'time_offset', 0x3d, 0x78}}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000000880)="$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") madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) 13.196365446s ago: executing program 4 (id=1293): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18, 0xfffffffffffffffe}, 0x9f47) 12.630906805s ago: executing program 4 (id=1304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0xb03, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8000020}, 0x4000000) 12.620276905s ago: executing program 32 (id=1304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0xb03, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8000020}, 0x4000000) 1.542879404s ago: executing program 5 (id=1314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x6) 1.249714669s ago: executing program 2 (id=1486): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 1.094717526s ago: executing program 3 (id=1491): r0 = socket$inet(0x2, 0x3, 0x5) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r0, 0x0, 0x700) 1.037006419s ago: executing program 3 (id=1492): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000040)={[{@nobarrier}, {@discard_async}, {@ref_verify}]}, 0x1, 0x559d, &(0x7f000000ac40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8000c61) 800.002001ms ago: executing program 1 (id=1495): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x890, &(0x7f0000000640)={0x0, 0xaee2, 0x800, 0x0, 0x9fdffffc}, &(0x7f0000001800)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000060, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 721.115705ms ago: executing program 1 (id=1497): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e25, 0x8}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 500.757186ms ago: executing program 1 (id=1501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x60000040) 410.8145ms ago: executing program 0 (id=1503): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x7fff, 0xfff}, 0x8) 368.513842ms ago: executing program 3 (id=1504): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20044040) 368.320102ms ago: executing program 0 (id=1505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 367.412512ms ago: executing program 2 (id=1506): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="914781cba1", 0xffe3}], 0x2}, 0x48800) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000080) 317.804585ms ago: executing program 1 (id=1507): sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000"], 0x0, 0x97, 0x0, 0x1}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0, 0xfffffffffffffe43}, 0x68) 295.201646ms ago: executing program 2 (id=1508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@setlink={0x28, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x24604, 0x420a3}, [@IFLA_MTU={0x8, 0x4, 0x5}]}, 0x28}}, 0x20040850) 293.959246ms ago: executing program 0 (id=1509): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) read$alg(r1, &(0x7f0000000000)=""/16, 0x10) 259.836798ms ago: executing program 1 (id=1510): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) r1 = epoll_create1(0x0) unshare(0x2c020400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)={0x10000000}) 251.525929ms ago: executing program 0 (id=1511): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000f80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x3, 0x20, 0x67, 0x0, 0xfe, 0x11, 0x0, @multicast1, @loopback}, {0x4a21, 0x4e24, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x9, 0x100, @void}}}}}}}, 0x0) 198.995801ms ago: executing program 3 (id=1512): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f00000000c0)="e1e4", &(0x7f0000000140)=""/85}, 0x20) 180.932341ms ago: executing program 1 (id=1513): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x78) sendfile(r0, r0, &(0x7f0000000080), 0x800006) fcntl$addseals(r0, 0x409, 0x8) 173.025062ms ago: executing program 2 (id=1514): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000840)) 144.887103ms ago: executing program 0 (id=1515): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='update default user::'], 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 113.765215ms ago: executing program 2 (id=1516): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x9004}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) 113.136885ms ago: executing program 3 (id=1517): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001540)={0x40, r0, 0x801, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1f165074906dede3518a4ea868"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 51.276748ms ago: executing program 3 (id=1518): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) 50.093458ms ago: executing program 0 (id=1519): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 0s ago: executing program 2 (id=1520): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x803441, 0x0, 0x1, 0x0, &(0x7f0000000040)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file1\x00', 0x8042, 0x0) kernel console output (not intermixed with test programs): /26/2026 [ 39.715793][ T4765] Call trace: [ 39.716313][ T4765] dump_backtrace+0x1c0/0x1ec [ 39.717101][ T4765] show_stack+0x2c/0x3c [ 39.717808][ T4765] __dump_stack+0x30/0x40 [ 39.718534][ T4765] dump_stack_lvl+0xf4/0x15c [ 39.719434][ T4765] dump_stack+0x1c/0x5c [ 39.720104][ T4765] f2fs_is_valid_blkaddr+0x9e4/0xf44 [ 39.720952][ T4765] f2fs_map_blocks+0xa18/0x2a6c [ 39.721854][ T4765] f2fs_mpage_readpages+0x8ec/0x1a24 [ 39.722769][ T4765] f2fs_readahead+0x190/0x3f4 [ 39.723622][ T4765] read_pages+0x158/0x680 [ 39.724336][ T4765] page_cache_ra_unbounded+0x490/0x574 [ 39.725190][ T4765] page_cache_ra_order+0x84c/0xa14 [ 39.725898][ T4765] ondemand_readahead+0x600/0xb0c [ 39.726629][ T4765] page_cache_sync_ra+0x350/0x3d0 [ 39.727623][ T4765] f2fs_readdir+0x390/0xc10 [ 39.728422][ T4765] iterate_dir+0x1f0/0x4cc [ 39.729112][ T4765] __arm64_sys_getdents64+0x11c/0x320 [ 39.730056][ T4765] invoke_syscall+0x98/0x2b4 [ 39.730744][ T4765] el0_svc_common+0x138/0x258 [ 39.731463][ T4765] do_el0_svc+0x58/0x130 [ 39.732137][ T4765] el0_svc+0x58/0x128 [ 39.732821][ T4765] el0t_64_sync_handler+0x84/0xf0 [ 39.733620][ T4765] el0t_64_sync+0x18c/0x190 [ 39.734346][ C1] vkms_vblank_simulate: vblank timer overrun [ 39.768115][ T4765] syz.3.117: attempt to access beyond end of device [ 39.768115][ T4765] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 39.772681][ T4765] syz.3.117: attempt to access beyond end of device [ 39.772681][ T4765] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 39.833833][ T4327] Bluetooth: hci0: command 0x0419 tx timeout [ 39.834856][ T4327] Bluetooth: hci2: command 0x0419 tx timeout [ 39.835756][ T4327] Bluetooth: hci4: command 0x0419 tx timeout [ 39.836740][ T4327] Bluetooth: hci3: command 0x0419 tx timeout [ 39.837752][ T4327] Bluetooth: hci1: command 0x0419 tx timeout [ 39.848385][ T4789] XFS (loop2): Mounting V5 Filesystem [ 39.859124][ T39] kworker/u4:2: attempt to access beyond end of device [ 39.859124][ T39] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 39.876210][ T4789] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 39.904772][ T4789] XFS (loop2): Starting recovery (logdev: internal) [ 39.910703][ T4789] XFS (loop2): Ending recovery (logdev: internal) [ 39.969993][ T4812] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 39.979637][ T4326] XFS (loop2): Unmounting Filesystem [ 39.992284][ T4325] EXT4-fs (loop4): unmounting filesystem. [ 40.229645][ T4838] set_capacity_and_notify: 16 callbacks suppressed [ 40.229656][ T4838] loop3: detected capacity change from 0 to 40427 [ 40.232565][ T4838] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 40.235984][ T4838] F2FS-fs (loop3): invalid crc value [ 40.252522][ T4838] F2FS-fs (loop3): Found nat_bits in checkpoint [ 40.269793][ T4838] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 40.287109][ T4838] syz.3.140: attempt to access beyond end of device [ 40.287109][ T4838] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 40.309280][ T4331] syz-executor: attempt to access beyond end of device [ 40.309280][ T4331] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 40.447288][ T4858] loop2: detected capacity change from 0 to 1024 [ 40.500926][ T4860] device h entered promiscuous mode [ 40.514439][ T4858] hfsplus: bad catalog file entry [ 40.545141][ T1588] hfsplus: b-tree write err: -5, ino 3 [ 40.546065][ T1588] hfsplus: bad catalog file entry [ 40.702757][ T4874] tap0: tun_chr_ioctl cmd 1074025676 [ 40.704062][ T4874] tap0: owner set to 0 [ 40.722074][ T4854] loop3: detected capacity change from 0 to 40427 [ 40.729760][ T4854] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 40.733366][ T4854] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 40.737441][ T4854] F2FS-fs (loop3): invalid crc value [ 40.756469][ T4854] F2FS-fs (loop3): Found nat_bits in checkpoint [ 40.789098][ T4854] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 40.790342][ T4854] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 40.989040][ T4876] loop2: detected capacity change from 0 to 32768 [ 41.009881][ T4893] loop1: detected capacity change from 0 to 64 [ 41.109742][ T4898] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 41.111002][ T4898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 41.112336][ T4898] IPv6: NLM_F_CREATE should be set when creating new route [ 41.275457][ T4912] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.350882][ T4892] loop3: detected capacity change from 0 to 32768 [ 41.353723][ T4916] loop4: detected capacity change from 0 to 1024 [ 41.424941][ T4892] XFS (loop3): Mounting V5 Filesystem [ 41.436337][ T4612] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.448340][ T4892] XFS (loop3): Ending clean mount [ 41.454729][ T4864] loop0: detected capacity change from 0 to 131072 [ 41.462027][ T4864] F2FS-fs (loop0): invalid crc value [ 41.465055][ T4864] F2FS-fs (loop0): Found nat_bits in checkpoint [ 41.483338][ T4864] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 41.594184][ T4331] XFS (loop3): Unmounting Filesystem [ 41.600114][ T4910] loop2: detected capacity change from 0 to 40427 [ 41.626375][ T4910] F2FS-fs (loop2): Found nat_bits in checkpoint [ 41.648233][ T4910] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 41.701347][ T4921] loop1: detected capacity change from 0 to 32768 [ 41.720672][ T4921] (syz.1.174,4921,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 41.723406][ T4326] syz-executor: attempt to access beyond end of device [ 41.723406][ T4326] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 41.726327][ T4921] (syz.1.174,4921,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 41.729342][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 41.741184][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 41.760098][ T4921] JBD2: Ignoring recovery information on journal [ 41.808258][ T4921] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 41.982327][ T4336] ocfs2: Unmounting device (7,1) on (node local) [ 42.253343][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 42.267277][ T4379] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 42.295473][ T4954] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.177 (4954) [ 42.306483][ T4954] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 42.308175][ T4954] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 42.309647][ T4954] BTRFS info (device loop3): enabling disk space caching [ 42.310770][ T4954] BTRFS info (device loop3): force clearing of disk cache [ 42.320238][ T4952] XFS (loop0): Mounting V5 Filesystem [ 42.322135][ T4954] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 42.328477][ T4954] BTRFS info (device loop3): use zstd compression, level 3 [ 42.329736][ T4954] BTRFS info (device loop3): disk space caching is enabled [ 42.389031][ T4952] XFS (loop0): Starting recovery (logdev: internal) [ 42.410321][ T4952] XFS (loop0): Ending recovery (logdev: internal) [ 42.512034][ T4321] XFS (loop0): Unmounting Filesystem [ 42.533668][ T4954] BTRFS info (device loop3): enabling ssd optimizations [ 42.535284][ T4954] BTRFS info (device loop3): rebuilding free space tree [ 42.538967][ T4954] BTRFS info (device loop3): disabling free space tree [ 42.540144][ T4954] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 42.541680][ T4954] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 42.558157][ T4947] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 42.559605][ T4947] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 42.561841][ T4947] F2FS-fs (loop4): invalid crc value [ 42.607140][ T4947] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.626525][ T4947] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 42.627762][ T4947] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 42.635077][ T4331] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 42.749316][ T5019] exfat: Deprecated parameter 'utf8' [ 42.758710][ T5019] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 43.088311][ T5037] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 43.131752][ T5043] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 43.155157][ T5049] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.179453][ T5049] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 43.190607][ T5051] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.213: inode has both inline data and extents flags [ 43.213410][ T5051] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.213: couldn't read orphan inode 15 (err -117) [ 43.237435][ T5051] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.268487][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 43.269210][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 43.333021][ T5063] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 43.358725][ T5069] process 'syz.1.220' launched '/dev/fd/3' with NULL argv: empty string added [ 43.467650][ T5083] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 43.476490][ T5085] capability: warning: `syz.1.226' uses 32-bit capabilities (legacy support in use) [ 43.487790][ T5081] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 43.588010][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 43.735934][ T5105] netlink: 'syz.1.236': attribute type 11 has an invalid length. [ 43.737341][ T5105] netlink: 36 bytes leftover after parsing attributes in process `syz.1.236'. [ 43.943800][ T5116] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 43.945131][ T5116] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 43.946568][ T5116] F2FS-fs (loop3): inline encryption not supported [ 43.960963][ T5116] F2FS-fs (loop3): invalid crc value [ 43.965755][ T5126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'. [ 43.972658][ T5116] F2FS-fs (loop3): Found nat_bits in checkpoint [ 43.996334][ T5116] F2FS-fs (loop3): Start checkpoint disabled! [ 43.998724][ T5116] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 44.041834][ T5116] F2FS-fs (loop3) : inject dquot initialize in f2fs_dquot_initialize of __f2fs_tmpfile+0x84/0x334 [ 44.121617][ T4379] kworker/u4:6: attempt to access beyond end of device [ 44.121617][ T4379] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 44.170709][ T5145] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.201858][ T5147] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.232858][ T5147] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 44.241180][ T5156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 44.303157][ T4336] EXT4-fs (loop1): unmounting filesystem. [ 44.316027][ T4327] Bluetooth: hci5: command 0x1003 tx timeout [ 44.318126][ T4332] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 44.458993][ T5176] Zero length message leads to an empty skb [ 44.539927][ T5180] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 44.612163][ T5180] ntfs3: loop2: ntfs3_write_inode r=1e failed, -22. [ 44.615569][ T5180] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 44.695121][ T5197] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 44.733773][ T4326] ntfs3: loop2: ntfs_evict_inode r=1e failed, -22. [ 44.835619][ T5205] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.906410][ T5205] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 44.911860][ T5205] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 44.913448][ T5205] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.282: Failed to acquire dquot type 0 [ 44.921738][ T5214] rock: directory entry would overflow storage [ 44.922766][ T5214] rock: sig=0x4654, size=5, remaining=4 [ 44.971142][ T4336] EXT4-fs (loop1): unmounting filesystem. [ 45.048479][ T5226] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.073463][ T5226] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 45.105009][ T4336] EXT4-fs (loop1): unmounting filesystem. [ 45.268074][ T5253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.303'. [ 45.403337][ T5245] set_capacity_and_notify: 20 callbacks suppressed [ 45.403351][ T5245] loop2: detected capacity change from 0 to 32768 [ 45.417021][ T5265] loop1: detected capacity change from 0 to 4096 [ 45.441696][ T5245] XFS (loop2): Mounting V5 Filesystem [ 45.478985][ T5245] XFS (loop2): Ending clean mount [ 45.486365][ T5245] XFS (loop2): Quotacheck needed: Please wait. [ 45.511232][ T5245] XFS (loop2): Quotacheck: Done. [ 45.559679][ T111] kernel read not supported for file /audio (pid: 111 comm: kworker/1:2) [ 45.591986][ T5261] loop4: detected capacity change from 0 to 32768 [ 45.607124][ T5261] [ 45.607124][ T5261] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 45.607124][ T5261] [ 45.615356][ T4326] XFS (loop2): Unmounting Filesystem [ 45.636289][ T5261] ERROR: (device loop4): diWrite: ixpxd invalid [ 45.636289][ T5261] [ 45.639575][ T5261] ERROR: (device loop4): remounting filesystem as read-only [ 45.641173][ T5261] ERROR: (device loop4): txAbort: [ 45.641173][ T5261] [ 45.652928][ T5261] ERROR: (device loop4): diAllocBit: iag inconsistent [ 45.652928][ T5261] [ 45.665312][ T5261] ERROR: (device loop4): remounting filesystem as read-only [ 45.669520][ T5261] ialloc: diAlloc returned -5! [ 45.840957][ T5279] loop3: detected capacity change from 0 to 32768 [ 45.860149][ T5279] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.313 (5279) [ 45.866536][ T5279] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 45.868227][ T5279] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 45.872820][ T5279] BTRFS info (device loop3): turning off barriers [ 45.879212][ T5279] BTRFS info (device loop3): enabling ssd optimizations [ 45.880408][ T5279] BTRFS info (device loop3): using spread ssd allocation scheme [ 45.881666][ T5279] BTRFS info (device loop3): enabling auto defrag [ 45.882671][ T5279] BTRFS info (device loop3): not using ssd optimizations [ 45.903605][ T5279] BTRFS info (device loop3): not using spread ssd allocation scheme [ 45.904846][ T5279] BTRFS info (device loop3): ignoring data csums [ 45.905885][ T5279] BTRFS info (device loop3): force zlib compression, level 3 [ 45.907120][ T5279] BTRFS info (device loop3): enabling ssd optimizations [ 45.908242][ T5279] BTRFS info (device loop3): using spread ssd allocation scheme [ 45.909467][ T5279] BTRFS info (device loop3): using free space tree [ 45.945449][ T5295] nbd: must specify a size in bytes for the device [ 45.962080][ T5301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.314'. [ 45.963970][ T4336] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 45.964972][ T4336] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 46.061423][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 46.066237][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 46.242975][ T4331] BTRFS info (device loop3: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 46.303747][ T5336] loop1: detected capacity change from 0 to 1764 [ 46.346005][ T4313] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by udevd (4313) [ 46.351769][ T5336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.331'. [ 46.357136][ T5322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.358658][ T5322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.376280][ T5340] loop0: detected capacity change from 0 to 8192 [ 46.380613][ T5340] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.383118][ T5340] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 46.385008][ T5340] REISERFS (device loop0): using ordered data mode [ 46.386274][ T5340] reiserfs: using flush barriers [ 46.387926][ T5340] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.390586][ T5340] REISERFS (device loop0): checking transaction log (loop0) [ 46.414347][ T5340] REISERFS (device loop0): Using r5 hash to sort names [ 46.415797][ T5340] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 46.507645][ T5361] Injecting memory failure for pfn 0x13c10c at process virtual address 0x20000000 [ 46.510726][ T5361] Memory failure: 0x13c10c: recovery action for dirty LRU page: Recovered [ 46.621161][ T5374] netlink: 64 bytes leftover after parsing attributes in process `syz.3.348'. [ 46.625853][ T5367] loop4: detected capacity change from 0 to 8192 [ 46.646698][ T5367] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.649044][ T5367] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 46.650538][ T5367] REISERFS (device loop4): using ordered data mode [ 46.651840][ T5367] reiserfs: using flush barriers [ 46.653033][ T5367] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.660228][ T5367] REISERFS (device loop4): checking transaction log (loop4) [ 46.669261][ T5367] REISERFS (device loop4): Using r5 hash to sort names [ 46.670529][ T5367] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 46.720772][ T5380] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 46.810550][ T5387] loop0: detected capacity change from 0 to 2048 [ 46.831077][ T5387] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 46.850251][ T5387] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 46.967849][ T5389] loop1: detected capacity change from 0 to 32768 [ 47.050900][ T5389] XFS (loop1): Mounting V5 Filesystem [ 47.099524][ T5389] XFS (loop1): Ending clean mount [ 47.152626][ T5414] Bluetooth: MGMT ver 1.22 [ 47.174243][ T4336] XFS (loop1): Unmounting Filesystem [ 47.189524][ T5416] loop0: detected capacity change from 0 to 1024 [ 47.255687][ T5416] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 47.331375][ T5416] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3850: comm syz.0.365: Allocating blocks 497-513 which overlap fs metadata [ 47.361522][ T5416] EXT4-fs (loop0): pa 0000000017febb41: logic 256, phys. 385, len 8 [ 47.362941][ T5416] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1 [ 47.396060][ T5395] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 47.401269][ T5395] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 47.414131][ T5395] F2FS-fs (loop2): invalid crc value [ 47.446855][ T5395] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 47.482005][ T5395] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 47.483290][ T5395] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 47.519111][ T5395] syz.2.359: attempt to access beyond end of device [ 47.519111][ T5395] loop2: rw=2049, sector=53248, nr_sectors = 96 limit=40427 [ 47.534314][ T5395] syz.2.359: attempt to access beyond end of device [ 47.534314][ T5395] loop2: rw=2049, sector=53344, nr_sectors = 128 limit=40427 [ 47.606417][ T4326] syz-executor: attempt to access beyond end of device [ 47.606417][ T4326] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 47.617761][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 47.845169][ T5453] mkiss: ax0: crc mode is auto. [ 47.861649][ T5458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 47.992988][ T5472] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.994996][ T5472] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.996369][ T5472] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.997767][ T5472] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.027304][ T5476] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 48.062684][ T5476] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 48.100354][ T5478] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.389: Invalid block bitmap block 0 in block_group 0 [ 48.109032][ T5478] Quota error (device loop0): write_blk: dquota write failed [ 48.110431][ T5478] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 48.112003][ T5478] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.389: Failed to acquire dquot type 0 [ 48.114948][ T5481] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 48.139247][ T5478] EXT4-fs error (device loop0): ext4_free_blocks:6219: comm syz.0.389: Freeing blocks not in datazone - block = 0, count = 4096 [ 48.146703][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 48.165240][ T5478] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.389: Invalid inode bitmap blk 0 in block_group 0 [ 48.178626][ T5478] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 48.180647][ T5478] EXT4-fs (loop0): 1 orphan inode deleted [ 48.181795][ T5478] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.184277][ T5481] EXT2-fs (loop4): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 48.192758][ T5481] EXT2-fs (loop4): error: ext2_new_blocks: Allocating block in system zone - blocks from 4, length 1 [ 48.199904][ T5481] EXT2-fs (loop4): error: ext2_new_blocks: Allocating block in system zone - blocks from 5, length 1 [ 48.202591][ T5481] EXT2-fs (loop4): error: ext2_new_blocks: Allocating block in system zone - blocks from 6, length 1 [ 48.216678][ T39] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 48.218309][ T39] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:2: Failed to release dquot type 0 [ 48.221223][ T5481] EXT2-fs (loop4): error: ext2_new_blocks: Allocating block in system zone - blocks from 7, length 1 [ 48.223237][ T5481] EXT2-fs (loop4): error: ext2_new_blocks: Allocating block in system zone - blocks from 8, length 1 [ 48.233205][ T5481] EXT2-fs (loop4): error: ext2_new_blocks: Allocating block in system zone - blocks from 9, length 1 [ 48.238761][ T5484] JFS: Invalid stbl[0] = -1 for inode 2, block = 0 [ 48.274757][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 48.276039][ T1571] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 48.286079][ T1571] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:3: Failed to release dquot type 0 [ 48.397575][ T5502] device bond1 entered promiscuous mode [ 48.518828][ T5513] exfat: Deprecated parameter 'utf8' [ 48.519745][ T5513] exfat: Deprecated parameter 'utf8' [ 48.520691][ T5513] exfat: Deprecated parameter 'utf8' [ 48.528060][ T5513] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 48.557081][ T5519] sctp: [Deprecated]: syz.1.398 (pid 5519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 48.557081][ T5519] Use struct sctp_sack_info instead [ 48.588126][ T5499] XFS (loop2): Mounting V5 Filesystem [ 48.608910][ T5522] exfat: Deprecated parameter 'utf8' [ 48.617331][ T5522] exfat: Deprecated parameter 'utf8' [ 48.641834][ T5522] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x71b7c27b, utbl_chksum : 0xe619d30d) [ 48.678567][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 48.688971][ T5499] XFS (loop2): Ending clean mount [ 48.691148][ T5499] XFS (loop2): Quotacheck needed: Please wait. [ 48.718650][ T5499] XFS (loop2): Quotacheck: Done. [ 48.769929][ T4326] XFS (loop2): Unmounting Filesystem [ 48.899159][ T5536] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 48.917516][ T5516] xfs: Unknown parameter 'func' [ 48.920241][ T5536] EXT2-fs (loop1): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 48.922407][ T5536] EXT2-fs (loop1): error: ext2_new_blocks: Allocating block in system zone - blocks from 4, length 1 [ 48.929631][ T5536] EXT2-fs (loop1): error: ext2_new_blocks: Allocating block in system zone - blocks from 5, length 1 [ 48.933934][ T5536] EXT2-fs (loop1): error: ext2_new_blocks: Allocating block in system zone - blocks from 6, length 1 [ 48.937997][ T5536] EXT2-fs (loop1): error: ext2_new_blocks: Allocating block in system zone - blocks from 7, length 1 [ 48.940658][ T5536] EXT2-fs (loop1): error: ext2_new_blocks: Allocating block in system zone - blocks from 8, length 1 [ 48.953001][ T5536] EXT2-fs (loop1): error: ext2_new_blocks: Allocating block in system zone - blocks from 9, length 1 [ 48.973774][ T4311] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.170822][ T5532] XFS (loop4): Mounting V5 Filesystem [ 49.175401][ T5557] __nla_validate_parse: 1 callbacks suppressed [ 49.175410][ T5557] netlink: 75 bytes leftover after parsing attributes in process `syz.3.420'. [ 49.191988][ T5559] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 49.207215][ T5532] XFS (loop4): Ending clean mount [ 49.322786][ T4325] XFS (loop4): Unmounting Filesystem [ 49.329785][ T5548] XFS (loop0): Mounting V5 Filesystem [ 49.361935][ T5548] XFS (loop0): Ending clean mount [ 49.370472][ T5548] XFS (loop0): Quotacheck needed: Please wait. [ 49.392475][ T5548] XFS (loop0): Quotacheck: Done. [ 49.473873][ T4321] XFS (loop0): Unmounting Filesystem [ 49.620502][ T5580] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.426 (5580) [ 49.626596][ T5580] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 49.628213][ T5580] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 49.629697][ T5580] BTRFS info (device loop2): using free space tree [ 49.692257][ T5580] BTRFS info (device loop2): enabling ssd optimizations [ 49.741083][ T5580] BTRFS info (device loop2): scrub: started on devid 1 [ 49.765947][ T5580] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [ 49.812409][ T4326] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 49.885694][ T4313] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop2 scanned by udevd (4313) [ 50.383982][ T5627] XFS (loop4): Mounting V5 Filesystem [ 50.419622][ T5627] XFS (loop4): Ending clean mount [ 50.421303][ T5627] XFS (loop4): Quotacheck needed: Please wait. [ 50.445612][ T5627] XFS (loop4): Quotacheck: Done. [ 50.673679][ T5658] set_capacity_and_notify: 15 callbacks suppressed [ 50.673696][ T5658] loop1: detected capacity change from 0 to 40427 [ 50.684600][ T5658] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 50.686207][ T5658] F2FS-fs (loop1): invalid crc value [ 50.689148][ T5658] F2FS-fs (loop1): Found nat_bits in checkpoint [ 50.705157][ T4325] XFS (loop4): Unmounting Filesystem [ 50.706321][ T5658] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 50.746134][ T4336] syz-executor: attempt to access beyond end of device [ 50.746134][ T4336] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 51.272659][ T5666] loop2: detected capacity change from 0 to 32768 [ 51.300646][ T5640] loop3: detected capacity change from 0 to 131072 [ 51.321154][ T5682] loop1: detected capacity change from 0 to 32768 [ 51.322407][ T5640] F2FS-fs (loop3): invalid crc value [ 51.331590][ T5640] F2FS-fs (loop3): Found nat_bits in checkpoint [ 51.345746][ T5640] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 51.356719][ T5682] XFS (loop1): Mounting V5 Filesystem [ 51.405916][ T5682] XFS (loop1): Ending clean mount [ 51.407425][ T5682] XFS (loop1): Quotacheck needed: Please wait. [ 51.462637][ T5682] XFS (loop1): Quotacheck: Done. [ 51.550455][ T5666] XFS (loop2): Mounting V5 Filesystem [ 51.558892][ T4336] XFS (loop1): Unmounting Filesystem [ 51.653443][ T5666] XFS (loop2): Ending clean mount [ 51.670454][ T5666] XFS (loop2): Quotacheck needed: Please wait. [ 51.708759][ T5726] loop0: detected capacity change from 0 to 512 [ 51.722546][ T5666] XFS (loop2): Quotacheck: Done. [ 51.787365][ T5726] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 51.789203][ T5726] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 51.790678][ T5726] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.472: Failed to acquire dquot type 0 [ 51.804014][ T5726] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 51.805557][ T5726] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 51.811495][ T5726] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.472: Failed to acquire dquot type 0 [ 51.816883][ T5726] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 51.819808][ T5726] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 51.821285][ T5726] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.472: Failed to acquire dquot type 0 [ 51.834540][ T5726] EXT4-fs (loop0): 1 orphan inode deleted [ 51.835168][ T4326] XFS (loop2): Unmounting Filesystem [ 51.835448][ T5726] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 51.949303][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 52.374477][ T4553] hid-generic 0005:0458:0000.0001: item fetching failed at offset 0/1 [ 52.376038][ T4553] hid-generic: probe of 0005:0458:0000.0001 failed with error -22 [ 52.478453][ T5789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.498'. [ 52.531906][ T5796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 52.748168][ T5793] loop4: detected capacity change from 0 to 40427 [ 52.755938][ T5793] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x3ffff [ 52.760665][ T5793] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xe4 [ 52.762402][ T5801] loop0: detected capacity change from 0 to 40427 [ 52.768982][ T5793] F2FS-fs (loop4): invalid crc value [ 52.778386][ T5801] F2FS-fs (loop0): build fault injection attr: rate: 693, type: 0x3ffff [ 52.786073][ T5801] F2FS-fs (loop0): invalid crc value [ 52.787535][ T5793] F2FS-fs (loop4): Found nat_bits in checkpoint [ 52.795085][ T5793] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x54c/0x884 [ 52.808522][ T5801] F2FS-fs (loop0): Found nat_bits in checkpoint [ 52.809852][ T5793] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 52.815568][ T5793] F2FS-fs (loop4) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x64c/0x1b9c [ 52.820440][ T5801] F2FS-fs (loop0): Start checkpoint disabled! [ 52.824616][ T5793] F2FS-fs (loop4) : inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0xe4/0x9c0 [ 52.833114][ T5801] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 52.848989][ T5801] syz.0.504: attempt to access beyond end of device [ 52.848989][ T5801] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 52.854348][ T5803] loop1: detected capacity change from 0 to 32768 [ 52.859420][ T5801] F2FS-fs (loop0) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xaac/0x11d4 [ 52.861436][ T5801] syz.0.504: attempt to access beyond end of device [ 52.861436][ T5801] loop0: rw=2049, sector=77824, nr_sectors = 96 limit=40427 [ 52.894530][ T5801] syz.0.504: attempt to access beyond end of device [ 52.894530][ T5801] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 52.930078][ T5803] XFS (loop1): Mounting V5 Filesystem [ 52.960641][ T5803] XFS (loop1): Ending clean mount [ 53.033701][ T5829] loop3: detected capacity change from 0 to 128 [ 53.058236][ T4336] XFS (loop1): Unmounting Filesystem [ 53.156939][ T5836] loop2: detected capacity change from 0 to 64 [ 53.199540][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 53.598478][ T5844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.600238][ T5844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.602373][ T5844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.603842][ T5844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.605699][ T4332] Bluetooth: hci1: adv larger than maximum supported [ 53.605737][ T4332] Bluetooth: hci1: Malformed LE Event: 0x0d [ 53.677856][ T5840] F2FS-fs (loop2): Test dummy encryption mode enabled [ 53.699135][ T5840] F2FS-fs (loop2): Found nat_bits in checkpoint [ 53.715872][ T5840] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 53.731490][ T5840] fscrypt (loop2, inode 3): Unsupported encryption flags (0x10) [ 53.834496][ T5831] F2FS-fs (loop0): Test dummy encryption mode enabled [ 53.836024][ T5831] F2FS-fs (loop0): invalid crc value [ 53.856335][ T5831] F2FS-fs (loop0): Found nat_bits in checkpoint [ 53.867396][ T5831] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 53.875954][ T5831] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 54.168140][ T5858] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 54.169727][ T5858] XFS (loop3): Mounting V5 Filesystem [ 54.190245][ T5863] XFS (loop1): Mounting V5 Filesystem [ 54.219603][ T5858] XFS (loop3): Ending clean mount [ 54.221708][ T5858] XFS (loop3): Quotacheck needed: Please wait. [ 54.225859][ T4664] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x10 [ 54.227743][ T4664] XFS (loop3): Unmount and run xfs_repair [ 54.228636][ T4664] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 54.229752][ T4664] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 54.231292][ T4664] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 54.232750][ T4664] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 54.247296][ T4664] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 54.248686][ T4664] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 54.250182][ T4664] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 54.251592][ T4664] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 54.252908][ T4664] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 54.271502][ T1571] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x184/0x290" at daddr 0x10 len 8 error 74 [ 54.278806][ T5858] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 54.297719][ T5863] XFS (loop1): Ending clean mount [ 54.315663][ T5863] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x50/0x108, xfs_finobt block 0x10 [ 54.317995][ T5863] XFS (loop1): Unmount and run xfs_repair [ 54.319037][ T5863] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 54.333206][ T5863] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 54.337437][ T5863] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 54.338810][ T5863] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 54.340180][ T5863] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 54.341678][ T5863] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 54.374200][ T5863] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 54.375653][ T5863] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 54.377063][ T5863] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 54.378601][ T5863] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x184/0x290" at daddr 0x10 len 4 error 74 [ 54.380660][ T5863] XFS (loop1): Failed to initialize disk quotas. [ 54.385796][ T5858] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x10 [ 54.387622][ T5858] XFS (loop3): Unmount and run xfs_repair [ 54.388536][ T5858] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 54.389675][ T5858] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 54.391224][ T5858] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 54.392638][ T5858] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 54.404456][ T5858] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 54.405854][ T5858] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 54.407204][ T5858] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 54.408625][ T5858] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 54.410090][ T5858] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 54.416446][ T5858] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x184/0x290" at daddr 0x10 len 8 error 74 [ 54.418477][ T5858] XFS (loop3): page discard on page 000000001628c49d, inode 0x1146, pos 134217728. [ 54.472264][ T4336] XFS (loop1): Unmounting Filesystem [ 54.480850][ T4331] XFS (loop3): Unmounting Filesystem [ 54.846743][ T5940] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.550: inode #1: comm syz.2.550: iget: illegal inode # [ 54.850103][ T5940] EXT4-fs (loop2): Remounting filesystem read-only [ 54.852920][ T5931] XFS (loop4): Mounting V5 Filesystem [ 54.857630][ T5940] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.550: error while reading EA inode 1 err=-117 [ 54.863769][ T5940] EXT4-fs (loop2): Remounting filesystem read-only [ 54.864926][ T5940] EXT4-fs (loop2): 1 orphan inode deleted [ 54.865897][ T5940] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 54.913451][ T5931] XFS (loop4): Ending clean mount [ 54.938841][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 54.968374][ T4325] XFS (loop4): Unmounting Filesystem [ 55.253231][ T5972] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 55.255486][ T5972] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 55.256975][ T5972] REISERFS (device loop2): using ordered data mode [ 55.257996][ T5972] reiserfs: using flush barriers [ 55.264512][ T5972] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 55.267171][ T5972] REISERFS (device loop2): checking transaction log (loop2) [ 55.268714][ T5922] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 55.270044][ T5922] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 55.272253][ T5922] F2FS-fs (loop0): invalid crc value [ 55.274026][ T5972] REISERFS (device loop2): Using rupasov hash to sort names [ 55.275192][ T5972] REISERFS (device loop2): using 3.5.x disk format [ 55.276375][ T5972] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 55.278409][ T5972] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 55.280753][ T5972] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 55.282548][ T5972] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 55.285740][ T5972] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 55.289511][ T5972] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 55.291956][ T5972] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 55.302717][ T5922] F2FS-fs (loop0): Found nat_bits in checkpoint [ 55.337254][ T5922] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 55.338427][ T5922] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 55.346797][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 55.686656][ T6016] set_capacity_and_notify: 12 callbacks suppressed [ 55.686664][ T6016] loop3: detected capacity change from 0 to 256 [ 55.707469][ T6016] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 55.831248][ T6026] netlink: 'syz.3.582': attribute type 10 has an invalid length. [ 55.832663][ T6026] netlink: 256 bytes leftover after parsing attributes in process `syz.3.582'. [ 55.986830][ T4367] kernel read not supported for file /dsp (pid: 4367 comm: kworker/0:4) [ 56.076754][ T1571] wlan1: Trigger new scan to find an IBSS to join [ 56.133285][ T6050] overlayfs: conflicting lowerdir path [ 56.280045][ T6041] loop1: detected capacity change from 0 to 40427 [ 56.288429][ T6041] F2FS-fs (loop1): build fault injection attr: rate: 7, type: 0x3ffff [ 56.290885][ T6041] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x2ac [ 56.306351][ T6041] F2FS-fs (loop1): invalid crc value [ 56.326113][ T6041] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x54c/0x884 [ 56.328417][ T6041] F2FS-fs (loop1): Found nat_bits in checkpoint [ 56.344015][ T6041] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x54c/0x884 [ 56.363626][ T6041] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 56.553190][ T6085] overlayfs: conflicting lowerdir path [ 56.692656][ T4336] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x70/0x218 [ 57.182998][ T6135] loop4: detected capacity change from 0 to 256 [ 57.204970][ T6135] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 57.252091][ T6139] loop3: detected capacity change from 0 to 512 [ 57.268043][ T6117] loop1: detected capacity change from 0 to 32768 [ 57.277277][ T6117] (syz.1.623,6117,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 57.280667][ T6117] (syz.1.623,6117,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 57.291679][ T6139] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 57.302325][ T6139] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.634: path /137/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=60882946, rec_len=0, size=2048 fake=1 [ 57.330445][ T6117] JBD2: Ignoring recovery information on journal [ 57.355268][ T6081] loop2: detected capacity change from 0 to 131072 [ 57.359210][ T6081] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 57.360255][ T6081] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 57.363029][ T6081] F2FS-fs (loop2): invalid crc value [ 57.370902][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 57.383233][ T6117] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 57.391694][ T6081] F2FS-fs (loop2): Found nat_bits in checkpoint [ 57.422396][ T6081] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 57.423718][ T6081] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 57.512903][ T4336] ocfs2: Unmounting device (7,1) on (node local) [ 57.556408][ T6165] loop3: detected capacity change from 0 to 1024 [ 57.657698][ T9] hfsplus: bad catalog file entry [ 57.658649][ T9] hfsplus: b-tree write err: -5, ino 3 [ 57.935354][ T6201] netlink: 'syz.4.660': attribute type 6 has an invalid length. [ 58.007182][ T6208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.664'. [ 58.179223][ T6198] loop3: detected capacity change from 0 to 32768 [ 58.183419][ T6198] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.659 (6198) [ 58.197175][ T6218] loop0: detected capacity change from 0 to 8192 [ 58.202588][ T6198] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 58.204830][ T6198] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 58.206344][ T6198] BTRFS info (device loop3): enabling disk space caching [ 58.207561][ T6198] BTRFS info (device loop3): force clearing of disk cache [ 58.208746][ T6198] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 58.210247][ T6198] BTRFS info (device loop3): use zstd compression, level 3 [ 58.225382][ T6218] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 58.227582][ T6218] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 58.229127][ T6218] REISERFS (device loop0): using ordered data mode [ 58.230282][ T6218] reiserfs: using flush barriers [ 58.236339][ T6198] BTRFS info (device loop3): disk space caching is enabled [ 58.245695][ T6218] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.248462][ T6218] REISERFS (device loop0): checking transaction log (loop0) [ 58.250339][ T6218] REISERFS (device loop0): Using rupasov hash to sort names [ 58.256484][ T6218] REISERFS (device loop0): using 3.5.x disk format [ 58.264814][ T6218] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 58.266723][ T6218] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 58.268711][ T6218] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 58.277608][ T6218] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 58.279963][ T6218] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 58.308838][ T6218] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 58.310557][ T6218] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 58.413639][ T6198] BTRFS info (device loop3): enabling ssd optimizations [ 58.415242][ T6198] BTRFS info (device loop3): rebuilding free space tree [ 58.419577][ T6198] BTRFS info (device loop3): disabling free space tree [ 58.420707][ T6198] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 58.422241][ T6198] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 58.445900][ T6223] loop2: detected capacity change from 0 to 32768 [ 58.493259][ T6223] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 58.497979][ T4331] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 58.498172][ T6223] XFS (loop2): Mounting V5 Filesystem [ 58.543114][ T6244] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.672 (6244) [ 58.597744][ T6244] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 58.599589][ T6244] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 58.601198][ T6244] BTRFS info (device loop4): using free space tree [ 58.612981][ T6223] XFS (loop2): Ending clean mount [ 58.625533][ T6223] XFS (loop2): Quotacheck needed: Please wait. [ 58.631676][ T4311] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop3 scanned by udevd (4311) [ 58.646925][ T6223] XFS (loop2): Quotacheck: Done. [ 58.756736][ T4326] XFS (loop2): Unmounting Filesystem [ 58.817867][ T6244] BTRFS info (device loop4): enabling ssd optimizations [ 58.901529][ T4325] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 59.014521][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.681'. [ 59.034504][ T1571] wlan1: Trigger new scan to find an IBSS to join [ 59.078365][ T6310] IPv6: NLM_F_CREATE should be specified when creating new route [ 59.174748][ T6317] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 59.197702][ T6317] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.691: path /146/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=60882946, rec_len=0, size=2048 fake=1 [ 59.241806][ T4336] EXT4-fs (loop1): unmounting filesystem. [ 59.521743][ T4553] kernel read not supported for file /dsp (pid: 4553 comm: kworker/0:14) [ 59.550050][ T6338] netlink: 'syz.1.698': attribute type 6 has an invalid length. [ 59.601449][ T9] hfsplus: bad catalog file entry [ 59.602360][ T9] hfsplus: b-tree write err: -5, ino 3 [ 59.751827][ T6346] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.702 (6346) [ 59.755658][ T6346] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 59.757645][ T6346] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 59.759492][ T6346] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 59.761248][ T6346] BTRFS info (device loop2): use zstd compression, level 3 [ 59.762605][ T6346] BTRFS info (device loop2): using free space tree [ 59.776476][ T6353] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 59.795166][ T6353] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.704: path /142/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=60882946, rec_len=0, size=2048 fake=1 [ 59.812556][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 59.838474][ T6346] BTRFS info (device loop2): enabling ssd optimizations [ 59.899151][ T4326] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 59.986204][ T1571] wlan1: Creating new IBSS network, BSSID 2e:82:e5:d7:b0:20 [ 60.531381][ T6399] F2FS-fs (loop2): build fault injection attr: rate: 7, type: 0x3ffff [ 60.533850][ T6399] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2ac [ 60.537127][ T6399] F2FS-fs (loop2): invalid crc value [ 60.551506][ T6399] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x54c/0x884 [ 60.554195][ T6399] F2FS-fs (loop2): Found nat_bits in checkpoint [ 60.559718][ T6399] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x54c/0x884 [ 60.571527][ T6399] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 60.616317][ T6410] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 60.618612][ T4368] kernel read not supported for file /dsp (pid: 4368 comm: kworker/0:5) [ 60.641389][ T6410] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.658073][ T6410] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 60.662969][ T6412] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.720: inode #1: comm syz.3.720: iget: illegal inode # [ 60.671884][ T6410] EXT4-fs (loop4): 1 truncate cleaned up [ 60.672794][ T6410] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 60.677173][ T6412] EXT4-fs (loop3): Remounting filesystem read-only [ 60.678279][ T6412] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.720: error while reading EA inode 1 err=-117 [ 60.698538][ T6412] EXT4-fs (loop3): Remounting filesystem read-only [ 60.699636][ T6412] EXT4-fs (loop3): 1 orphan inode deleted [ 60.700520][ T6412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 60.730216][ T4325] EXT4-fs (loop4): unmounting filesystem. [ 60.779205][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 60.858501][ T4326] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x70/0x218 [ 61.052067][ T6422] set_capacity_and_notify: 9 callbacks suppressed [ 61.052077][ T6422] loop3: detected capacity change from 0 to 32768 [ 61.059395][ T6422] (syz.3.724,6422,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 61.062619][ T6422] (syz.3.724,6422,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 61.096054][ T6422] JBD2: Ignoring recovery information on journal [ 61.138319][ T6426] loop0: detected capacity change from 0 to 32768 [ 61.143050][ T6426] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.738 (6426) [ 61.166329][ T6426] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 61.170641][ T6426] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 61.173159][ T6426] BTRFS info (device loop0): using free space tree [ 61.177682][ T6422] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 61.246141][ T6426] BTRFS info (device loop0): enabling ssd optimizations [ 61.253461][ T4331] ocfs2: Unmounting device (7,3) on (node local) [ 61.350687][ T4321] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 61.461418][ T6476] netlink: 52 bytes leftover after parsing attributes in process `syz.0.741'. [ 61.497708][ T4612] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (4612) [ 61.580339][ T6484] input: syz0 as /devices/virtual/input/input3 [ 61.599140][ T6466] loop2: detected capacity change from 0 to 32768 [ 61.602753][ T6466] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 61.697238][ T6492] loop7: detected capacity change from 0 to 7 [ 61.705469][ T6492] Dev loop7: unable to read RDB block 7 [ 61.708492][ T6492] loop7: unable to read partition table [ 61.716388][ T6492] loop7: partition table beyond EOD, truncated [ 61.717401][ T6492] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 61.839844][ T4314] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 62.209927][ T6514] loop3: detected capacity change from 0 to 1024 [ 62.219093][ T6514] EXT4-fs: inline encryption not supported [ 62.221267][ T6514] EXT4-fs: Ignoring removed i_version option [ 62.224973][ T6514] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.242699][ T6514] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 62.254524][ T6514] EXT4-fs: old and new quota format mixing [ 62.270903][ T6478] loop1: detected capacity change from 0 to 131072 [ 62.279196][ T6478] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 62.281694][ T6478] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 62.284448][ T6478] F2FS-fs (loop1): invalid crc value [ 62.286329][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 62.297878][ T6512] loop0: detected capacity change from 0 to 32768 [ 62.306793][ T6512] XFS: attr2 mount option is deprecated. [ 62.319058][ T6478] F2FS-fs (loop1): Found nat_bits in checkpoint [ 62.350245][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.759'. [ 62.356516][ T6512] XFS (loop0): Mounting V5 Filesystem [ 62.357827][ T6478] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 62.358916][ T6478] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 62.433195][ T6512] XFS (loop0): Ending clean mount [ 62.436772][ T6512] XFS (loop0): Quotacheck needed: Please wait. [ 62.481228][ T6539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.765'. [ 62.492790][ T6512] XFS (loop0): Quotacheck: Done. [ 62.529366][ T6542] loop3: detected capacity change from 0 to 512 [ 62.537900][ T4321] XFS (loop0): Unmounting Filesystem [ 62.539675][ T6542] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.552287][ T6542] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.556606][ T6542] EXT4-fs (loop3): 1 truncate cleaned up [ 62.557493][ T6542] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 62.592638][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 62.756769][ T6550] loop3: detected capacity change from 0 to 32768 [ 62.858202][ T6562] loop1: detected capacity change from 0 to 512 [ 62.860899][ T6562] EXT4-fs: Ignoring removed nobh option [ 62.873453][ T6562] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 62.878161][ T6562] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 62.890574][ T6562] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.773: inode has both inline data and extents flags [ 62.902266][ T6562] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.773: couldn't read orphan inode 13 (err -117) [ 62.926972][ T6562] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 62.931257][ T6562] EXT4-fs (loop1): shut down requested (2) [ 62.932573][ T6562] fscrypt (loop1, inode 2): Error -5 getting encryption context [ 62.944647][ T4336] EXT4-fs (loop1): unmounting filesystem. [ 63.374528][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.785'. [ 63.376084][ T6586] netlink: 32 bytes leftover after parsing attributes in process `syz.1.785'. [ 63.572328][ T6603] netlink: 'syz.1.793': attribute type 11 has an invalid length. [ 63.651367][ T6570] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 63.652527][ T6570] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 63.659364][ T6570] F2FS-fs (loop0): invalid crc value [ 63.681388][ T6570] F2FS-fs (loop0): Found nat_bits in checkpoint [ 63.702853][ T6570] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 63.706612][ T6570] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 63.948410][ T6631] jfs_strtoUCS: char2uni returned -22. [ 63.949323][ T6631] charset = cp932, char = 0xec [ 64.228427][ T6649] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.295501][ T6653] Injecting memory failure for pfn 0x1435ae at process virtual address 0x20001000 [ 64.300605][ T6653] Memory failure: 0x1435ae: keeping poisoned page in swap cache [ 64.302175][ T6653] Memory failure: 0x1435ae: recovery action for clean swapcache page: Recovered [ 64.310643][ T6653] Injecting memory failure for pfn 0x1435af at process virtual address 0x20002000 [ 64.329687][ T6653] Memory failure: 0x1435af: recovery action for dirty LRU page: Recovered [ 64.331107][ T6653] Injecting memory failure for pfn 0x210ff2 at process virtual address 0x20003000 [ 64.332811][ T6653] Memory failure: 0x210ff2: recovery action for reserved kernel page: Ignored [ 64.341450][ T6655] input: syz1 as /devices/virtual/input/input4 [ 64.487082][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.488229][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.511860][ T6638] XFS (loop1): Mounting V5 Filesystem [ 64.536247][ T6638] XFS (loop1): Ending clean mount [ 64.546665][ T6647] XFS (loop3): Mounting V5 Filesystem [ 64.559831][ T4336] XFS (loop1): Unmounting Filesystem [ 64.572815][ T6647] XFS (loop3): Ending clean mount [ 64.582281][ T6647] XFS (loop3): Quotacheck needed: Please wait. [ 64.622033][ T6647] XFS (loop3): Quotacheck: Done. [ 64.688320][ T4331] XFS (loop3): Unmounting Filesystem [ 64.829452][ T6694] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 64.970375][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'. [ 65.071516][ T6707] rock: directory entry would overflow storage [ 65.073912][ T6707] rock: sig=0x4654, size=5, remaining=4 [ 65.173940][ T6659] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 65.175510][ T6659] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 65.179988][ T6659] F2FS-fs (loop4): invalid crc value [ 65.193666][ T6659] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.211798][ T6659] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 65.212984][ T6659] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 65.348767][ T6732] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 65.429766][ T6740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.431318][ T6740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.441847][ T6740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.443269][ T6740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.451337][ T4332] Bluetooth: hci2: adv larger than maximum supported [ 65.451383][ T4332] Bluetooth: hci2: Malformed LE Event: 0x0d [ 65.488621][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.847'. [ 65.596571][ T6728] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 65.598150][ T6728] XFS (loop0): Mounting V5 Filesystem [ 65.652547][ T6728] XFS (loop0): Ending clean mount [ 65.655936][ T6728] XFS (loop0): Quotacheck needed: Please wait. [ 65.680555][ T6728] XFS (loop0): Quotacheck: Done. [ 65.687565][ T6742] [ 65.687565][ T6742] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 65.687565][ T6742] [ 65.711502][ T6742] ERROR: (device loop3): diWrite: ixpxd invalid [ 65.711502][ T6742] [ 65.723630][ T6742] ERROR: (device loop3): remounting filesystem as read-only [ 65.724919][ T6742] ERROR: (device loop3): txAbort: [ 65.724919][ T6742] [ 65.745181][ T6742] ERROR: (device loop3): diAllocBit: iag inconsistent [ 65.745181][ T6742] [ 65.746650][ T6742] ERROR: (device loop3): remounting filesystem as read-only [ 65.747856][ T6742] ialloc: diAlloc returned -5! [ 65.766210][ T4321] XFS (loop0): Unmounting Filesystem [ 65.915730][ T6767] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.938628][ T4325] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 65.939706][ T4325] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 65.961218][ T6767] EXT4-fs (loop3): 1 truncate cleaned up [ 65.962278][ T6767] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 66.082321][ T6777] set_capacity_and_notify: 15 callbacks suppressed [ 66.082331][ T6777] loop2: detected capacity change from 0 to 256 [ 66.104912][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 66.120086][ T6777] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 66.280536][ T6799] loop4: detected capacity change from 0 to 512 [ 66.308063][ T6799] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 66.320629][ T6808] loop2: detected capacity change from 0 to 1024 [ 66.364642][ T6799] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 66.439282][ T4325] EXT4-fs (loop4): unmounting filesystem. [ 66.455320][ T6819] loop0: detected capacity change from 0 to 512 [ 66.500051][ T6819] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 66.517530][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.880'. [ 66.522568][ T6830] loop3: detected capacity change from 0 to 64 [ 66.549824][ T6819] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 66.557481][ T6834] IPv6: NLM_F_CREATE should be specified when creating new route [ 66.623373][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 66.700250][ T6847] loop2: detected capacity change from 0 to 1024 [ 66.730348][ T6847] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 66.786428][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.891'. [ 66.838347][ T6847] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3850: comm syz.2.887: Allocating blocks 497-513 which overlap fs metadata [ 66.847634][ T6847] EXT4-fs (loop2): pa 0000000017febb41: logic 256, phys. 385, len 8 [ 66.848998][ T6847] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1 [ 66.849982][ T6839] loop3: detected capacity change from 0 to 32768 [ 66.856274][ T6839] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 66.882965][ T6860] loop4: detected capacity change from 0 to 512 [ 66.956079][ T4313] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 66.961086][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 67.044579][ T6874] netlink: 52 bytes leftover after parsing attributes in process `syz.3.903'. [ 67.209812][ T6889] mkiss: ax0: crc mode is auto. [ 67.350558][ T6909] netlink: 11522 bytes leftover after parsing attributes in process `syz.0.920'. [ 67.358609][ T6908] loop2: detected capacity change from 0 to 1024 [ 67.363029][ T6910] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.364648][ T6910] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.365943][ T6910] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.367252][ T6910] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.388495][ T6908] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.918: Invalid block bitmap block 0 in block_group 0 [ 67.403469][ T6908] Quota error (device loop2): write_blk: dquota write failed [ 67.405201][ T6908] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 67.406791][ T6908] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.918: Failed to acquire dquot type 0 [ 67.409395][ T6908] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz.2.918: Freeing blocks not in datazone - block = 0, count = 4096 [ 67.432483][ T6908] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.918: Invalid inode bitmap blk 0 in block_group 0 [ 67.450192][ T9] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7 [ 67.451649][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 67.459875][ T6908] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 67.482087][ T6908] EXT4-fs (loop2): 1 orphan inode deleted [ 67.483122][ T6908] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 67.498744][ T6921] netlink: 75 bytes leftover after parsing attributes in process `syz.4.925'. [ 67.536514][ T6925] loop3: detected capacity change from 0 to 16 [ 67.551901][ T6925] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 67.603187][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 67.607123][ T1588] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7 [ 67.608531][ T1588] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:4: Failed to release dquot type 0 [ 67.702835][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 67.723334][ T6917] XFS (loop0): Mounting V5 Filesystem [ 67.769251][ T6917] XFS (loop0): Ending clean mount [ 67.771027][ T6917] XFS (loop0): Quotacheck needed: Please wait. [ 67.800333][ T6917] XFS (loop0): Quotacheck: Done. [ 67.841683][ T6931] XFS (loop1): Mounting V5 Filesystem [ 67.888384][ T4321] XFS (loop0): Unmounting Filesystem [ 67.913457][ T6931] XFS (loop1): Ending clean mount [ 67.920840][ T6931] XFS (loop1): Quotacheck needed: Please wait. [ 67.942298][ T6931] XFS (loop1): Quotacheck: Done. [ 68.024210][ T6947] XFS (loop2): Mounting V5 Filesystem [ 68.024674][ T4336] XFS (loop1): Unmounting Filesystem [ 68.062938][ T6947] XFS (loop2): Ending clean mount [ 68.072366][ T4666] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x50/0x108, xfs_finobt block 0x10 [ 68.074851][ T4666] XFS (loop2): Unmount and run xfs_repair [ 68.075786][ T4666] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 68.077079][ T4666] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 68.078513][ T4666] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 68.079929][ T4666] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 68.081933][ T4666] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 68.083362][ T4666] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 68.090265][ T4666] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 68.091630][ T4666] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 68.093174][ T4666] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 68.094734][ T6947] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x184/0x290" at daddr 0x10 len 4 error 74 [ 68.096659][ T6947] XFS (loop2): Failed to initialize disk quotas. [ 68.161357][ T4326] XFS (loop2): Unmounting Filesystem [ 68.278151][ T6986] netlink: 52 bytes leftover after parsing attributes in process `syz.1.940'. [ 68.886666][ T7007] XFS (loop0): Mounting V5 Filesystem [ 68.915361][ T7007] XFS (loop0): Ending clean mount [ 68.924321][ T4401] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x50/0x108, xfs_finobt block 0x10 [ 68.926386][ T4401] XFS (loop0): Unmount and run xfs_repair [ 68.927307][ T4401] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 68.928493][ T4401] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 68.929934][ T4401] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 68.931294][ T4401] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 68.932854][ T4401] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 68.936785][ T4401] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 68.938162][ T4401] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 68.939584][ T4401] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 68.941086][ T4401] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 68.942588][ T7007] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x184/0x290" at daddr 0x10 len 4 error 74 [ 68.945728][ T7007] XFS (loop0): Failed to initialize disk quotas. [ 69.008273][ T4321] XFS (loop0): Unmounting Filesystem [ 69.043229][ T7035] netlink: 52 bytes leftover after parsing attributes in process `syz.2.964'. [ 69.321186][ T7060] exfat: Deprecated parameter 'utf8' [ 69.322137][ T7060] exfat: Deprecated parameter 'utf8' [ 69.323096][ T7060] exfat: Deprecated parameter 'utf8' [ 69.352665][ T7060] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 69.595446][ T3438] cfg80211: failed to load regulatory.db [ 69.711171][ T7079] netlink: 52 bytes leftover after parsing attributes in process `syz.4.983'. [ 69.804254][ T7073] F2FS-fs (loop0): Test dummy encryption mode enabled [ 69.864523][ T7073] F2FS-fs (loop0): Found nat_bits in checkpoint [ 69.881695][ T7073] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 69.895142][ T7073] fscrypt (loop0, inode 3): Unsupported encryption flags (0x10) [ 70.047852][ T7067] F2FS-fs (loop2): invalid crc value [ 70.061701][ T7067] F2FS-fs (loop2): Found nat_bits in checkpoint [ 70.089402][ T7067] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 70.458183][ T7119] exfat: Deprecated parameter 'utf8' [ 70.459093][ T7119] exfat: Deprecated parameter 'utf8' [ 70.475899][ T7119] exfat: Deprecated parameter 'utf8' [ 70.486303][ T7119] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 70.718327][ T7117] XFS (loop4): Mounting V5 Filesystem [ 70.741766][ T7121] F2FS-fs (loop3): build fault injection attr: rate: 693, type: 0x3ffff [ 70.767616][ T7121] F2FS-fs (loop3): invalid crc value [ 70.769068][ T7117] XFS (loop4): Ending clean mount [ 70.786723][ T7121] F2FS-fs (loop3): Found nat_bits in checkpoint [ 70.790080][ T7124] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 70.796992][ T7124] XFS (loop2): Mounting V5 Filesystem [ 70.810533][ T7121] F2FS-fs (loop3): Start checkpoint disabled! [ 70.822720][ T7124] XFS (loop2): Ending clean mount [ 70.825564][ T7124] XFS (loop2): Quotacheck needed: Please wait. [ 70.831314][ T4401] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x10 [ 70.837222][ T4401] XFS (loop2): Unmount and run xfs_repair [ 70.838169][ T4401] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 70.839367][ T4401] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 70.840851][ T4401] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 70.842275][ T4401] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 70.846591][ T4401] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 70.848166][ T4401] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 70.850178][ T4401] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 70.851617][ T4401] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.853232][ T4401] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.855348][ T7121] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 70.865777][ T1588] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x184/0x290" at daddr 0x10 len 8 error 74 [ 70.871496][ T7121] syz.3.997: attempt to access beyond end of device [ 70.871496][ T7121] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 70.876376][ T7121] F2FS-fs (loop3) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xaac/0x11d4 [ 70.878150][ T7121] syz.3.997: attempt to access beyond end of device [ 70.878150][ T7121] loop3: rw=2049, sector=77824, nr_sectors = 96 limit=40427 [ 70.880416][ T4325] XFS (loop4): Unmounting Filesystem [ 70.883971][ T7124] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 70.892570][ T7121] syz.3.997: attempt to access beyond end of device [ 70.892570][ T7121] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 70.921554][ T7124] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x10 [ 70.925272][ T7124] XFS (loop2): Unmount and run xfs_repair [ 70.926262][ T7124] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 70.927396][ T7124] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 70.928767][ T7124] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 70.931688][ T7124] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 70.933200][ T7124] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 70.936043][ T7124] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 70.939980][ T7124] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 70.941340][ T7124] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.942778][ T7124] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.944763][ T7124] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x184/0x290" at daddr 0x10 len 8 error 74 [ 70.947045][ T7124] XFS (loop2): page discard on page 00000000b272dfc8, inode 0x1146, pos 134217728. [ 70.962873][ T4326] XFS (loop2): Unmounting Filesystem [ 71.050726][ T7156] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.093334][ T7156] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1009: iget: bogus i_mode (3355) [ 71.104142][ T7156] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1009: couldn't read orphan inode 15 (err -117) [ 71.108031][ T7156] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 71.186803][ T4336] EXT4-fs (loop1): unmounting filesystem. [ 71.260238][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1002'. [ 71.328410][ T7172] set_capacity_and_notify: 14 callbacks suppressed [ 71.328419][ T7172] loop4: detected capacity change from 0 to 2048 [ 71.353536][ T7178] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.396404][ T7162] loop0: detected capacity change from 0 to 32768 [ 71.408796][ T7162] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1010 (7162) [ 71.427252][ T7162] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 71.429029][ T7162] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 71.430538][ T7162] BTRFS info (device loop0): setting nodatacow, compression disabled [ 71.440335][ T7162] BTRFS info (device loop0): enabling auto defrag [ 71.441452][ T7162] BTRFS info (device loop0): max_inline at 0 [ 71.442426][ T7162] BTRFS info (device loop0): using free space tree [ 71.554087][ T7211] loop2: detected capacity change from 0 to 256 [ 71.590788][ T7211] FAT-fs (loop2): Directory bread(block 64) failed [ 71.594287][ T7211] FAT-fs (loop2): Directory bread(block 65) failed [ 71.597315][ T7211] FAT-fs (loop2): Directory bread(block 66) failed [ 71.598676][ T7211] FAT-fs (loop2): Directory bread(block 67) failed [ 71.601013][ T4321] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 71.601026][ T7211] FAT-fs (loop2): Directory bread(block 68) failed [ 71.604096][ T7211] FAT-fs (loop2): Directory bread(block 69) failed [ 71.605240][ T7211] FAT-fs (loop2): Directory bread(block 70) failed [ 71.606423][ T7211] FAT-fs (loop2): Directory bread(block 71) failed [ 71.607566][ T7211] FAT-fs (loop2): Directory bread(block 72) failed [ 71.608723][ T7211] FAT-fs (loop2): Directory bread(block 73) failed [ 71.805695][ T7226] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1029'. [ 72.008005][ T7241] loop0: detected capacity change from 0 to 256 [ 72.035511][ T7241] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 72.045718][ T7233] loop2: detected capacity change from 0 to 32768 [ 72.130080][ T7233] XFS (loop2): Mounting V5 Filesystem [ 72.167493][ T7233] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 72.190018][ T7233] XFS (loop2): Ending clean mount [ 72.231801][ T7239] loop4: detected capacity change from 0 to 40427 [ 72.250987][ T7239] F2FS-fs (loop4): invalid crc value [ 72.253143][ T7239] F2FS-fs (loop4): Found nat_bits in checkpoint [ 72.257832][ T7233] XFS (loop2): User initiated shutdown received. [ 72.259070][ T7233] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x80/0x15c (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 72.272684][ T7233] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 72.279929][ T7239] F2FS-fs (loop4): Start checkpoint disabled! [ 72.281468][ T7233] XFS (loop2): Error -5 reserving per-AG metadata reserve pool. [ 72.321608][ T7239] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 72.381177][ T4326] XFS (loop2): Unmounting Filesystem [ 72.390310][ T9] kworker/u4:0: attempt to access beyond end of device [ 72.390310][ T9] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 72.395823][ T9] kworker/u4:0: attempt to access beyond end of device [ 72.395823][ T9] loop4: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 72.445064][ T7277] loop3: detected capacity change from 0 to 256 [ 72.743719][ T7298] loop4: detected capacity change from 0 to 1024 [ 73.107785][ T7331] loop4: detected capacity change from 0 to 256 [ 73.120410][ T7331] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 73.128509][ T7329] loop0: detected capacity change from 0 to 4096 [ 73.138172][ T7329] EXT4-fs (loop0): Test dummy encryption mode enabled [ 73.166697][ T7329] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 73.208714][ T7329] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 73.365211][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 73.460526][ T7366] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1088'. [ 73.489171][ T7368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1090'. [ 73.490593][ T7368] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1090'. [ 73.647096][ T7383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1099'. [ 73.656736][ T7383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1099'. [ 73.709575][ T7386] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 73.740654][ T7392] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.812589][ T7360] XFS (loop0): Mounting V5 Filesystem [ 73.898490][ T7360] XFS (loop0): Ending clean mount [ 74.062049][ T7397] XFS (loop3): Mounting V5 Filesystem [ 74.087010][ T7397] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 74.119740][ T4321] XFS (loop0): Unmounting Filesystem [ 74.124113][ T7397] XFS (loop3): Starting recovery (logdev: internal) [ 74.141801][ T7397] XFS (loop3): Ending recovery (logdev: internal) [ 74.167865][ T4331] XFS (loop3): Unmounting Filesystem [ 74.348169][ T7437] binder: 7436:7437 ioctl c0306201 20000100 returned -14 [ 74.349121][ T4326] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 74.350386][ T4326] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 74.641839][ T7466] hfs: uid requires an argument [ 74.669798][ T7466] hfs: unable to parse mount options [ 74.916431][ T7485] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 74.947380][ T7491] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.966078][ T7462] XFS (loop1): Mounting V5 Filesystem [ 74.994340][ T7495] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.041347][ T7495] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1141: iget: bogus i_mode (3355) [ 75.047240][ T7495] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1141: couldn't read orphan inode 15 (err -117) [ 75.047258][ T7462] XFS (loop1): Ending clean mount [ 75.052558][ T7495] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 75.094822][ T4336] XFS (loop1): Unmounting Filesystem [ 75.125147][ T7504] binder: 7503:7504 got transaction to invalid handle, 1 [ 75.126526][ T7504] binder: 7504:7503 cannot find target node [ 75.127487][ T7504] binder: 7503:7504 transaction async to 0:0 failed 1/29201/-22, size 0-0 line 3045 [ 75.129561][ T4325] EXT4-fs (loop4): unmounting filesystem. [ 75.145513][ T5341] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.333213][ T7506] FAT-fs (loop3): Directory bread(block 64) failed [ 75.334634][ T7506] FAT-fs (loop3): Directory bread(block 65) failed [ 75.335772][ T7506] FAT-fs (loop3): Directory bread(block 66) failed [ 75.337060][ T7506] FAT-fs (loop3): Directory bread(block 67) failed [ 75.338327][ T7506] FAT-fs (loop3): Directory bread(block 68) failed [ 75.339433][ T7506] FAT-fs (loop3): Directory bread(block 69) failed [ 75.340536][ T7506] FAT-fs (loop3): Directory bread(block 70) failed [ 75.341675][ T7506] FAT-fs (loop3): Directory bread(block 71) failed [ 75.342950][ T7506] FAT-fs (loop3): Directory bread(block 72) failed [ 75.352370][ T7506] FAT-fs (loop3): Directory bread(block 73) failed [ 75.547510][ T7522] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 75.620567][ T5341] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.628024][ T5341] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.676778][ T7529] fido_id[7529]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 75.702993][ T7514] XFS (loop3): Mounting V5 Filesystem [ 75.753024][ T7514] XFS (loop3): Ending clean mount [ 75.811870][ T4331] XFS (loop3): Unmounting Filesystem [ 75.826669][ T7543] FAT-fs (loop0): Directory bread(block 64) failed [ 75.827956][ T7543] FAT-fs (loop0): Directory bread(block 65) failed [ 75.830286][ T7543] FAT-fs (loop0): Directory bread(block 66) failed [ 75.840365][ T7543] FAT-fs (loop0): Directory bread(block 67) failed [ 75.848785][ T7543] FAT-fs (loop0): Directory bread(block 68) failed [ 75.856627][ T7543] FAT-fs (loop0): Directory bread(block 69) failed [ 75.863348][ T7543] FAT-fs (loop0): Directory bread(block 70) failed [ 75.874487][ T7543] FAT-fs (loop0): Directory bread(block 71) failed [ 75.880251][ T7543] FAT-fs (loop0): Directory bread(block 72) failed [ 75.887638][ T7543] FAT-fs (loop0): Directory bread(block 73) failed [ 76.279825][ T7579] Dev loop7: unable to read RDB block 7 [ 76.280850][ T7579] loop7: unable to read partition table [ 76.281831][ T7579] loop7: partition table beyond EOD, truncated [ 76.282921][ T7579] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 76.344598][ T7586] set_capacity_and_notify: 23 callbacks suppressed [ 76.344608][ T7586] loop1: detected capacity change from 0 to 256 [ 76.366989][ T7586] FAT-fs (loop1): Directory bread(block 64) failed [ 76.369617][ T7586] FAT-fs (loop1): Directory bread(block 65) failed [ 76.370746][ T7586] FAT-fs (loop1): Directory bread(block 66) failed [ 76.375222][ T7586] FAT-fs (loop1): Directory bread(block 67) failed [ 76.382114][ T7586] FAT-fs (loop1): Directory bread(block 68) failed [ 76.383227][ T7586] FAT-fs (loop1): Directory bread(block 69) failed [ 76.390746][ T7586] FAT-fs (loop1): Directory bread(block 70) failed [ 76.391805][ T7586] FAT-fs (loop1): Directory bread(block 71) failed [ 76.396437][ T7586] FAT-fs (loop1): Directory bread(block 72) failed [ 76.397440][ T7586] FAT-fs (loop1): Directory bread(block 73) failed [ 76.445659][ T7590] loop6: detected capacity change from 0 to 524287999 [ 76.560378][ T7572] loop4: detected capacity change from 0 to 32768 [ 76.589233][ T7572] XFS (loop4): Mounting V5 Filesystem [ 76.602120][ T7575] loop0: detected capacity change from 0 to 32768 [ 76.665747][ T7572] XFS (loop4): Ending clean mount [ 76.756063][ T7604] loop1: detected capacity change from 0 to 4096 [ 76.775121][ T4325] XFS (loop4): Unmounting Filesystem [ 76.775179][ T7604] ntfs3: loop1: ino=3, Correct links count -> 2. [ 77.078959][ T7648] loop2: detected capacity change from 0 to 128 [ 77.091906][ T7648] omfs: sysblock size (-58445445) is out of range [ 77.196464][ T7660] loop4: detected capacity change from 0 to 2048 [ 77.201959][ T7665] loop0: detected capacity change from 0 to 128 [ 77.208797][ T7666] mmap: syz.1.1214 (7666) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.214937][ T7660] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.216801][ T7665] FAT-fs (loop0): bogus number of FAT sectors [ 77.217853][ T7665] FAT-fs (loop0): Can't find a valid FAT filesystem [ 77.286207][ T7675] loop3: detected capacity change from 0 to 256 [ 77.294809][ T7672] loop4: detected capacity change from 0 to 64 [ 77.299037][ T7675] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.324099][ T7672] hfs: request for non-existent node 131072 in B*Tree [ 77.325387][ T7672] hfs: request for non-existent node 131072 in B*Tree [ 77.342511][ T7680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1223'. [ 77.377168][ T7684] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1226'. [ 77.443286][ T7694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1230'. [ 77.451323][ T7694] device ip6gre1 entered promiscuous mode [ 77.570600][ T7703] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 77.572803][ T7703] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 77.590974][ T7703] REISERFS (device loop0): using ordered data mode [ 77.599157][ T7703] reiserfs: using flush barriers [ 77.621479][ T7703] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.636207][ T7703] REISERFS (device loop0): checking transaction log (loop0) [ 77.638055][ T7703] REISERFS (device loop0): Using r5 hash to sort names [ 77.639259][ T7703] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 77.689501][ T7692] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1229 (7692) [ 77.696076][ T7692] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 77.698091][ T7692] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 77.699604][ T7692] BTRFS info (device loop3): using free space tree [ 77.780989][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1236'. [ 77.783403][ T7720] netlink: 'syz.0.1236': attribute type 21 has an invalid length. [ 77.792777][ T7698] F2FS-fs (loop1): Found nat_bits in checkpoint [ 77.812154][ T7698] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 77.874626][ T4336] syz-executor: attempt to access beyond end of device [ 77.874626][ T4336] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 77.900353][ T7692] BTRFS info (device loop3): enabling ssd optimizations [ 78.028209][ T7746] netlink: 'syz.0.1243': attribute type 1 has an invalid length. [ 78.052472][ T4331] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 78.088989][ T7751] EXT4-fs: Ignoring removed nobh option [ 78.133848][ T7751] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 78.135260][ T7751] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 78.136643][ T7751] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #13: comm syz.0.1246: inode has both inline data and extents flags [ 78.140609][ T7751] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1246: couldn't read orphan inode 13 (err -117) [ 78.143130][ T7756] EXT4-fs: inline encryption not supported [ 78.144294][ T7751] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 78.152448][ T7756] EXT4-fs: Ignoring removed i_version option [ 78.155582][ T7756] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.157666][ T7751] EXT4-fs (loop0): shut down requested (2) [ 78.159050][ T7751] fscrypt (loop0, inode 2): Error -5 getting encryption context [ 78.210945][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 78.239512][ T7756] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 78.281233][ T7756] EXT4-fs: old and new quota format mixing [ 78.327355][ T4325] EXT4-fs (loop4): unmounting filesystem. [ 78.369916][ T4313] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (4313) [ 78.436990][ T7755] [ 78.436990][ T7755] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.436990][ T7755] [ 78.457447][ T7755] ERROR: (device loop2): diWrite: ixpxd invalid [ 78.457447][ T7755] [ 78.461220][ T7755] ERROR: (device loop2): remounting filesystem as read-only [ 78.462499][ T7755] ERROR: (device loop2): txAbort: [ 78.462499][ T7755] [ 78.473883][ T7755] ERROR: (device loop2): diAllocBit: iag inconsistent [ 78.473883][ T7755] [ 78.477666][ T7755] ERROR: (device loop2): remounting filesystem as read-only [ 78.479936][ T7755] ialloc: diAlloc returned -5! [ 78.505926][ T7762] XFS: attr2 mount option is deprecated. [ 78.548509][ T7762] XFS (loop1): Mounting V5 Filesystem [ 78.567454][ T7762] XFS (loop1): Ending clean mount [ 78.582047][ T7762] XFS (loop1): Quotacheck needed: Please wait. [ 78.616853][ T7762] XFS (loop1): Quotacheck: Done. [ 78.688869][ T7793] binder: 7792 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 78.688888][ T7793] binder: 7792:7793 ioctl c018620c 20000000 returned -22 [ 78.735621][ T4336] XFS (loop1): Unmounting Filesystem [ 78.826435][ T7803] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 78.910657][ T4313] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 78.942219][ T7819] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 78.984040][ T7824] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.011867][ T7826] Injecting memory failure for pfn 0x140881 at process virtual address 0x20000000 [ 79.013589][ T7826] Memory failure: 0x140881: recovery action for dirty LRU page: Recovered [ 79.042799][ T7828] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 79.044962][ T7828] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 79.046424][ T7828] REISERFS (device loop0): using ordered data mode [ 79.047458][ T7828] reiserfs: using flush barriers [ 79.070690][ T7828] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.073390][ T7828] REISERFS (device loop0): checking transaction log (loop0) [ 79.079858][ T7828] REISERFS (device loop0): Using r5 hash to sort names [ 79.081143][ T7828] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 79.105912][ T7836] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1282'. [ 79.172445][ T5341] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.177337][ T5341] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.232046][ T7847] exfat: Deprecated parameter 'utf8' [ 79.242420][ T7847] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 79.276761][ T7853] netlink: 'syz.1.1288': attribute type 4 has an invalid length. [ 79.531553][ T7866] fido_id[7866]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 79.615888][ T7863] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1292 (7863) [ 79.620174][ T7863] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 79.624852][ T7863] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 79.627975][ T7863] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 79.629521][ T7863] BTRFS info (device loop0): use zstd compression, level 3 [ 79.630761][ T7863] BTRFS info (device loop0): using free space tree [ 79.638110][ T7859] JBD2: Ignoring recovery information on journal [ 79.678414][ T7861] bridge0: port 3(syz_tun) entered disabled state [ 79.707098][ T7859] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 79.712848][ T7863] BTRFS info (device loop0): enabling ssd optimizations [ 79.739943][ T7861] device syz_tun left promiscuous mode [ 79.741360][ T7861] bridge0: port 3(syz_tun) entered disabled state [ 79.765185][ T4321] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 79.792808][ T4314] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 79.843752][ T7873] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 79.850240][ T4331] ocfs2: Unmounting device (7,3) on (node local) [ 79.928041][ T7900] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 79.929596][ T7900] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 79.982412][ T7909] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1306'. [ 80.051258][ T4612] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop0 scanned by udevd (4612) [ 80.063414][ T4330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.072073][ T4330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.074065][ T4330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.075827][ T4330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.077391][ T4330] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.078631][ T4330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.326352][ T39] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.328343][ T39] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.351862][ T7942] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1321'. [ 80.405439][ T39] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.407291][ T39] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.428791][ T7950] mkiss: ax0: crc mode is auto. [ 80.496390][ T39] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.498051][ T39] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.516310][ T7956] netlink: 11522 bytes leftover after parsing attributes in process `syz.3.1326'. [ 80.520043][ T7913] chnl_net:caif_netlink_parms(): no params data found [ 80.659413][ T39] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.661054][ T39] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.692475][ T7913] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.695165][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.722335][ T7913] device bridge_slave_0 entered promiscuous mode [ 80.733884][ T7913] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.735206][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.745295][ T7913] device bridge_slave_1 entered promiscuous mode [ 80.745974][ T7975] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 80.763680][ T7975] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 80.772478][ T7913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.797005][ T7913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.821857][ T7913] team0: Port device team_slave_0 added [ 80.865115][ T7913] team0: Port device team_slave_1 added [ 80.909569][ T7964] [ 80.909569][ T7964] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.909569][ T7964] [ 80.941481][ T7990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1341'. [ 80.944422][ T7964] ERROR: (device loop3): diWrite: ixpxd invalid [ 80.944422][ T7964] [ 80.949764][ T7964] ERROR: (device loop3): txAbort: [ 80.949764][ T7964] [ 80.958800][ T7913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.959944][ T7913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.964158][ T7913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.966571][ T7913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.967627][ T7913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.977158][ T7964] [ 80.977158][ T7964] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.977158][ T7964] [ 80.984120][ T7964] [ 80.984120][ T7964] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.984120][ T7964] [ 81.003374][ T7913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.006435][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1341'. [ 81.074308][ T8001] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 81.115736][ T7913] device hsr_slave_0 entered promiscuous mode [ 81.176418][ T7913] device hsr_slave_1 entered promiscuous mode [ 81.203879][ T7913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.205189][ T7913] Cannot create hsr debugfs directory [ 81.362396][ T7994] set_capacity_and_notify: 19 callbacks suppressed [ 81.362406][ T7994] loop0: detected capacity change from 0 to 40427 [ 81.383116][ T7994] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 81.385530][ T7994] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 81.401985][ T7994] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.421711][ T7994] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 81.422918][ T7994] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 81.562589][ T8007] loop1: detected capacity change from 0 to 65536 [ 81.642834][ T8007] XFS (loop1): Mounting V5 Filesystem [ 81.697870][ T8007] XFS (loop1): Ending clean mount [ 81.758217][ T8064] loop3: detected capacity change from 0 to 512 [ 81.759564][ T8064] EXT4-fs: Ignoring removed nobh option [ 81.760595][ T8064] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.767441][ T4336] XFS (loop1): Unmounting Filesystem [ 81.789907][ T7913] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 81.827681][ T7913] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 81.840390][ T8064] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 81.911148][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 81.985874][ T8078] loop6: detected capacity change from 0 to 524287999 [ 82.001779][ T7913] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.084611][ T7913] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 82.153583][ T4330] Bluetooth: hci1: command 0x0409 tx timeout [ 82.200357][ T8063] loop2: detected capacity change from 0 to 32768 [ 82.219653][ T8063] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 82.220965][ T8063] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 82.276226][ T8063] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 82.291473][ T4401] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 82.292640][ T4401] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 82.348148][ T8093] loop1: detected capacity change from 0 to 128 [ 82.350890][ T4401] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 58ms [ 82.357583][ T4401] gfs2: fsid=syz:syz.0: jid=0: Done [ 82.359499][ T8063] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 82.376518][ T8093] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 82.402306][ T7913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.460834][ T4336] EXT4-fs (loop1): unmounting filesystem. [ 82.557373][ T8086] loop3: detected capacity change from 0 to 32768 [ 82.569834][ T7913] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.577662][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.579115][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.580617][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.582212][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.585098][ T4382] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.586243][ T4382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.603262][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.605363][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.607309][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.608836][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.609884][ T4382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.611312][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.612936][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.627486][ T7913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.629101][ T7913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.632030][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.634556][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.636436][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.638128][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.639793][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.641573][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.643095][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.647933][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.669523][ T8086] XFS (loop3): Mounting V5 Filesystem [ 82.688601][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.690271][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.761944][ T8086] XFS (loop3): Starting recovery (logdev: internal) [ 82.808764][ T8086] XFS (loop3): Ending recovery (logdev: internal) [ 82.814435][ T8074] loop0: detected capacity change from 0 to 131072 [ 82.816324][ T8074] F2FS-fs (loop0): invalid crc value [ 82.855256][ T8074] F2FS-fs (loop0): Found nat_bits in checkpoint [ 82.887084][ T8074] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 82.893879][ T8074] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 82.927914][ T4331] XFS (loop3): Unmounting Filesystem [ 83.004281][ T8121] kernel profiling enabled (shift: 6) [ 83.018761][ T8101] loop1: detected capacity change from 0 to 32768 [ 83.103179][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1373'. [ 83.128373][ T8101] XFS (loop1): Mounting V5 Filesystem [ 83.168056][ T8134] team_slave_1: mtu greater than device maximum [ 83.169186][ T8134] team0: Device team_slave_1 failed to change mtu [ 83.174258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.176463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.178938][ T7913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.216534][ T8101] XFS (loop1): Ending clean mount [ 83.324264][ T4336] XFS (loop1): Unmounting Filesystem [ 83.680709][ T8170] loop0: detected capacity change from 0 to 1024 [ 83.699908][ T39] device hsr_slave_0 left promiscuous mode [ 83.727022][ T39] device hsr_slave_1 left promiscuous mode [ 83.777539][ T8170] hfsplus: b-tree write err: -5, ino 3 [ 83.783898][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.785254][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.787691][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.788889][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.790397][ T39] device bridge_slave_1 left promiscuous mode [ 83.792653][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.804848][ T4382] hfsplus: bad catalog file entry [ 83.831129][ T39] device bridge_slave_0 left promiscuous mode [ 83.832365][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.864687][ T8183] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1384: invalid indirect mapped block 4294967295 (level 1) [ 83.871871][ T8183] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1384: invalid indirect mapped block 4294967295 (level 1) [ 83.890803][ T8183] EXT4-fs (loop0): 2 truncates cleaned up [ 83.892009][ T8183] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.918332][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 83.984238][ T39] device veth1_macvtap left promiscuous mode [ 83.985587][ T39] device veth0_macvtap left promiscuous mode [ 83.987592][ T39] device veth1_vlan left promiscuous mode [ 83.988681][ T39] device veth0_vlan left promiscuous mode [ 84.097675][ T8193] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1388 (8193) [ 84.103055][ T8193] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 84.105450][ T8193] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 84.106971][ T8193] BTRFS info (device loop2): using free space tree [ 84.118318][ T8193] BTRFS info (device loop2): enabling ssd optimizations [ 84.132847][ T8193] BTRFS warning (device loop2): can't clear the free_space_tree,verity,compat_ro:4,compat_ro:6,compat_ro:10,compat_ro:12,compat_ro:14,compat_ro:19,compat_ro:20,compat_ro:23,compat_ro:24,compat_ro:25,compat_ro:26,compat_ro:28,compat_ro:29,compat_ro:32,compat_ro:33,compat_ro:35,compat_ro:37,compat_ro:38,compat_ro:39,compat_ro:41,compat_ro:42,compat_ro:43,compat_ro:44,compat_ro:45,compat_ro:46,compat_ro:52,compat_ro:55,compat_ro:57,compat_ro:61,compat_ro:63 feature bits while mounted [ 84.151639][ T4326] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 84.243642][ T4330] Bluetooth: hci1: command 0x041b tx timeout [ 84.558135][ T8215] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.560703][ T8215] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 84.562975][ T8215] REISERFS (device loop1): using ordered data mode [ 84.564949][ T8215] reiserfs: using flush barriers [ 84.566132][ T8215] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.569129][ T8215] REISERFS (device loop1): checking transaction log (loop1) [ 84.570877][ T8215] REISERFS (device loop1): Using r5 hash to sort names [ 84.572349][ T8215] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 86.146992][ T39] team0 (unregistering): Port device team_slave_1 removed [ 86.323771][ T4330] Bluetooth: hci1: command 0x040f tx timeout [ 86.327849][ T39] team0 (unregistering): Port device team_slave_0 removed [ 86.494344][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.704236][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.714507][ T4330] Bluetooth: hci4: command 0x2020 tx timeout [ 88.264707][ T39] bond0 (unregistering): Released all slaves [ 88.393546][ T4332] Bluetooth: hci1: command 0x0419 tx timeout [ 88.593211][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'. [ 88.618100][ T8230] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.664494][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.666313][ T8237] autofs4:pid:8237:autofs_fill_super: pipe file descriptor does not contain proper ops [ 88.667457][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.680473][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.682257][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.684918][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.697389][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.705367][ T7913] device veth0_vlan entered promiscuous mode [ 88.710886][ T7913] device veth1_vlan entered promiscuous mode [ 88.743082][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.745466][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.747013][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.748748][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.757542][ T7913] device veth0_macvtap entered promiscuous mode [ 88.760625][ T7913] device veth1_macvtap entered promiscuous mode [ 88.795001][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.796619][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.798130][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.799549][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.801062][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.802625][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.836599][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.838230][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.865307][ T7913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.872106][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.873998][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.875525][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.877044][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.882562][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.893528][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.897658][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.899337][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.900872][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.906915][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.908721][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.926041][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.928304][ T7913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.931652][ T7913] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.932967][ T7913] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.943539][ T7913] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.944973][ T7913] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.947413][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.949027][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.163112][ T8271] set_capacity_and_notify: 3 callbacks suppressed [ 89.163121][ T8271] loop0: detected capacity change from 0 to 4096 [ 89.170335][ T8271] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 89.177797][ T8248] loop2: detected capacity change from 0 to 32768 [ 89.207756][ T8248] XFS (loop2): Mounting V5 Filesystem [ 89.233138][ T8248] XFS (loop2): Ending clean mount [ 89.237843][ T8248] XFS (loop2): Quotacheck needed: Please wait. [ 89.271409][ T8248] XFS (loop2): Quotacheck: Done. [ 89.320817][ T4321] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 89.322026][ T4321] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 89.326107][ T4321] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 89.354179][ T4326] XFS (loop2): Unmounting Filesystem [ 89.477912][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1421'. [ 89.755348][ T8339] loop2: detected capacity change from 0 to 128 [ 90.082154][ T8374] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1442'. [ 90.282060][ T8399] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1451'. [ 90.321776][ T8402] mmap: syz.1.1452 (8402): VmData 41684992 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 90.331433][ T8396] loop3: detected capacity change from 0 to 8192 [ 90.364038][ T8396] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 90.366197][ T8396] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 90.369373][ T8406] netlink: 'syz.0.1453': attribute type 10 has an invalid length. [ 90.370709][ T8406] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1453'. [ 90.381480][ T8396] REISERFS (device loop3): using ordered data mode [ 90.382474][ T8396] reiserfs: using flush barriers [ 90.389455][ T8406] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 90.404821][ T8396] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.407579][ T8396] REISERFS (device loop3): checking transaction log (loop3) [ 90.431803][ T8396] REISERFS (device loop3): Using r5 hash to sort names [ 90.606051][ T8436] loop2: detected capacity change from 0 to 512 [ 90.646783][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1463'. [ 90.924901][ T8435] loop0: detected capacity change from 0 to 40427 [ 90.928214][ T8435] F2FS-fs (loop0): invalid crc value [ 90.962865][ T8435] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.004543][ T8435] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 91.022465][ T8474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.039403][ T8474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.040896][ T8474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.042387][ T8474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.053175][ T8474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.062148][ T8474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.064184][ T8474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.065793][ T8474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.067337][ T8474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.068909][ T8474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.073433][ T4321] syz-executor: attempt to access beyond end of device [ 91.073433][ T4321] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 91.097047][ T8474] batman_adv: batadv0: Adding interface: ipvlan2 [ 91.098217][ T8474] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.114772][ T8474] batman_adv: batadv0: Interface activated: ipvlan2 [ 91.220727][ T4330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.227381][ T4330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.233751][ T4330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.240241][ T4330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.243251][ T4330] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.244744][ T4330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.457427][ T4379] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.672756][ T8506] loop0: detected capacity change from 0 to 40427 [ 91.678403][ T8506] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.687640][ T8506] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 91.701469][ T8486] chnl_net:caif_netlink_parms(): no params data found [ 91.722913][ T8486] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.724415][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.725978][ T8486] device bridge_slave_0 entered promiscuous mode [ 91.728140][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.729289][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.730914][ T8486] device bridge_slave_1 entered promiscuous mode [ 91.738629][ T8486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.740503][ T8531] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1494'. [ 91.741657][ T8486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.752669][ T8486] team0: Port device team_slave_0 added [ 91.765194][ T8486] team0: Port device team_slave_1 added [ 91.776899][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.778483][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.784920][ T8486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.787394][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.788612][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.798763][ T8486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.798780][ T4321] syz-executor: attempt to access beyond end of device [ 91.798780][ T4321] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 91.838183][ T8486] device hsr_slave_0 entered promiscuous mode [ 91.866427][ T8518] loop3: detected capacity change from 0 to 32768 [ 91.876491][ T8486] device hsr_slave_1 entered promiscuous mode [ 91.878590][ T8518] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1492 (8518) [ 91.888696][ T8518] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 91.890950][ T8539] loop0: detected capacity change from 0 to 128 [ 91.891607][ T8518] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 91.899826][ T8518] BTRFS info (device loop3): turning off barriers [ 91.903230][ T8518] BTRFS info (device loop3): turning on async discard [ 91.906811][ T8518] BTRFS info (device loop3): doing ref verification [ 91.910351][ T8518] BTRFS info (device loop3): using free space tree [ 91.917689][ T8486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.918894][ T8486] Cannot create hsr debugfs directory [ 92.079129][ T8518] BTRFS info (device loop3): enabling ssd optimizations [ 92.096290][ T4379] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.212742][ T4331] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 92.216774][ T4379] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.326976][ T4379] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.638924][ T1612] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 92.641004][ T1612] ------------[ cut here ]------------ [ 92.641968][ T1612] WARNING: CPU: 0 PID: 1612 at net/mac80211/scan.c:1225 ieee80211_request_ibss_scan+0x558/0x5e8 [ 92.643620][ T1612] Modules linked in: [ 92.644264][ T1612] CPU: 0 PID: 1612 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 92.645388][ T1612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 92.647004][ T1612] Workqueue: events_unbound cfg80211_wiphy_work [ 92.648059][ T1612] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 92.649359][ T1612] pc : ieee80211_request_ibss_scan+0x558/0x5e8 [ 92.650365][ T1612] lr : ieee80211_request_ibss_scan+0x558/0x5e8 [ 92.651386][ T1612] sp : ffff800025407880 [ 92.652084][ T1612] x29: ffff8000254078c0 x28: ffff0000f62f0930 x27: ffff0000f62f0ee0 [ 92.653251][ T1612] x26: 0000000000000006 x25: ffff0000f62f2b70 x24: 0000000000000000 [ 92.654409][ T1612] x23: 0000000000000c80 x22: 1fffe0001ec5e1dc x21: ffff0000f62f5eb8 [ 92.655547][ T1612] x20: 0000000000000000 x19: dfff800000000000 x18: ffff800011b8bf60 [ 92.656686][ T1612] x17: 6f7774656e205353 x16: ffff8000082d0ff8 x15: 0000000000000000 [ 92.657850][ T1612] x14: 0000000000000001 x13: 1ffff00004a80ec0 x12: 0000000000ff0100 [ 92.658965][ T1612] x11: ff00800011261778 x10: 0000000000000000 x9 : ffff800011261778 [ 92.660085][ T1612] x8 : ffff0000cfc0b780 x7 : ffff800011261298 x6 : 0000000000000000 [ 92.661387][ T1612] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082d0490 [ 92.662678][ T1612] x2 : ffff0000cfc0b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 92.663960][ T1612] Call trace: [ 92.664483][ T1612] ieee80211_request_ibss_scan+0x558/0x5e8 [ 92.665371][ T1612] ieee80211_ibss_work+0xac0/0xd68 [ 92.666248][ T1612] ieee80211_iface_work+0x9bc/0xa34 [ 92.667165][ T1612] cfg80211_wiphy_work+0x1d8/0x218 [ 92.668017][ T1612] process_one_work+0x7f8/0x13a4 [ 92.668826][ T1612] worker_thread+0x8c4/0xfec [ 92.669632][ T1612] kthread+0x250/0x2d8 [ 92.669700][ T8611] loop3: detected capacity change from 0 to 256 [ 92.670282][ T1612] ret_from_fork+0x10/0x20 [ 92.672015][ T1612] irq event stamp: 1080100 [ 92.672737][ T1612] hardirqs last enabled at (1080099): [] __up_console_sem+0xb4/0xfc [ 92.674331][ T1612] hardirqs last disabled at (1080100): [] el1_dbg+0x24/0x80 [ 92.675824][ T1612] softirqs last enabled at (1080082): [] ieee80211_ibss_work+0x2a8/0xd68 [ 92.677412][ T1612] softirqs last disabled at (1080080): [] ieee80211_ibss_work+0xdc/0xd68 [ 92.679019][ T1612] ---[ end trace 0000000000000000 ]--- [ 92.741613][ T8606] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 92.748191][ T8606] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 92.750997][ T8606] REISERFS (device loop2): using ordered data mode [ 92.753324][ T8606] reiserfs: using flush barriers [ 92.766685][ T8606] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.769426][ T8606] REISERFS (device loop2): checking transaction log (loop2) [ 92.773227][ T8606] REISERFS (device loop2): Using r5 hash to sort names [ 92.782489][ T8606] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 93.275300][ T4330] Bluetooth: hci1: command 0x0409 tx timeout [ 93.656364][ T8486] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.694769][ T8486] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.770083][ T8486] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.814994][ T8486] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.128047][ T8486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.132146][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.137014][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.140161][ T8486] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.142868][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.144988][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.146543][ T1612] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.148793][ T1612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.150296][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.153273][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.160214][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.161634][ T1612] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.162820][ T1612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.205524][ T4379] device hsr_slave_0 left promiscuous mode [ 94.244355][ T4379] device hsr_slave_1 left promiscuous mode [ 94.323832][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.325129][ T4379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.326649][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.327806][ T4379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.329203][ T4379] device bridge_slave_1 left promiscuous mode [ 94.330291][ T4379] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.384298][ T4379] device bridge_slave_0 left promiscuous mode [ 94.385405][ T4379] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.503693][ T4379] device veth1_macvtap left promiscuous mode [ 94.504722][ T4379] device veth0_macvtap left promiscuous mode [ 94.505800][ T4379] device veth1_vlan left promiscuous mode [ 94.506753][ T4379] device veth0_vlan left promiscuous mode [ 95.354968][ T4330] Bluetooth: hci1: command 0x041b tx timeout [ 96.657506][ T4379] team0 (unregistering): Port device team_slave_1 removed [ 96.834874][ T4379] team0 (unregistering): Port device team_slave_0 removed [ 97.007403][ T4379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.184461][ T4379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.433619][ T4330] Bluetooth: hci1: command 0x040f tx timeout [ 98.635427][ T4379] bond0 (unregistering): Released all slaves [ 98.928090][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.929973][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.931680][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.934595][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.936412][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.940013][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.941609][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.946444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.948072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.952018][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.954256][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.956798][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.014701][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.016236][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.019763][ T8486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.101251][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.103026][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.112450][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.114610][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.116127][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.117391][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.119774][ T8486] device veth0_vlan entered promiscuous mode [ 99.123101][ T8486] device veth1_vlan entered promiscuous mode [ 99.131536][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.133171][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.145499][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.147069][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.150715][ T8486] device veth0_macvtap entered promiscuous mode [ 99.153290][ T8486] device veth1_macvtap entered promiscuous mode [ 99.160526][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.162144][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.164048][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.165884][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.167456][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.169102][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.170585][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.172310][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.175479][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.177415][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.179002][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.180519][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.182338][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.187086][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.188757][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.190313][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.191863][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.193283][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.195414][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.197003][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.198737][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.200317][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 99.201983][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.204726][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.205837][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.208724][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.211786][ T8486] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.213197][ T8486] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.215121][ T8486] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.216429][ T8486] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.167227][ T39] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0