last executing test programs: 2m7.614101153s ago: executing program 4 (id=121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "6006b9dab4753eef166b14a804019a9f7262230af69d15b51d32eef95540a9ec1184f1c7a69b0a9dc0c4e65f60dc535d7714fd69787d8276df802b59bcfa1b50", 0x3c}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r1, r0, 0x0, 0x7ffffffd) 2m6.911494764s ago: executing program 4 (id=123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xd4) 2m6.778795121s ago: executing program 4 (id=126): r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x600002) close_range(r0, r1, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500561308005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = syz_clone(0x40800, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = fanotify_init(0x8, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup(r6) fanotify_mark(r5, 0x201, 0x20, r7, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0xa}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r8 = getpid() syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x200008, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x7f, 0x5a2d, &(0x7f00000004c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x103042, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x18400, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) sendfile(r9, r10, 0x0, 0xfffffdef) rt_tgsigqueueinfo(r8, r8, 0x4, &(0x7f0000000000)={0x27, 0x8, 0x76}) mremap(&(0x7f0000901000/0x1000)=nil, 0x1000, 0x4000, 0xe, &(0x7f00002f3000/0x4000)=nil) ptrace$poke(0x4, r4, &(0x7f0000000040), 0x4000007) 2m5.274852093s ago: executing program 4 (id=131): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) ioctl(r0, 0xabaf, &(0x7f0000000140)="5aec1372240e3c2ca80e1dfc09c48fadd2a0d4b18ae77832c710c4c08ee30f779edfa405151ee7f797608477c6c7a6ee504d20034a8a644772437fb84c8b20954ed66387d16445f57bc6cda37f44fb6a7ebe9312713ee69bf480de97d6dd1df0dd526d0515b3d73aa4ff65cd4a81f77e226c6d26036b716d1b0ced92be67ccffa68d76d15bea262fb242191aee31cdbcd3e05db01e9b3fdcdd878bc63da92b3d69edae61300c5c9026360e3e97f1e40e7c2d14d303701666c83f02291daefa70764d79ec1fe94359024c3ff97633fe63e804c5758249a5af3a06d62cb91665ad68d9e52776e37d96446470eabf027fb4fabfb4416da03fc439") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0x810c9365, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4096, 0x24000}], 0x2, 0x0, 0x0, 0x0) 2m1.275035088s ago: executing program 4 (id=157): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000000000a2c000000180a05000000000000000010020000000900010073797a30000000000c000540000000000000000214000000110001"], 0x54}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mlockall(0x7) r1 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000000)={'veth0_to_bridge\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) 2m0.498892785s ago: executing program 4 (id=160): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c1, &(0x7f0000000240)={[{@intr}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@resv_level={'resv_level', 0x3d, 0x6}}, {@acl}, {@err_cont}, {@commit={'commit', 0x3d, 0xc}}, {@resv_level={'resv_level', 0x3d, 0x5}}]}, 0x2, 0x4438, &(0x7f0000008940)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x250140) ioctl$CEC_DQEVENT(r1, 0xc0506107, &(0x7f0000000300)={0x0, 0x0, 0x0, @raw}) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e25, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001880), r2) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf2509000000080014000b00000005001300080000000500150067000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0xffff8000, 0x8, 0x400, 0xffffffffffffffff, 0x4000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xd0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x30}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c084}, 0x0) 2m0.36636444s ago: executing program 32 (id=160): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c1, &(0x7f0000000240)={[{@intr}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@resv_level={'resv_level', 0x3d, 0x6}}, {@acl}, {@err_cont}, {@commit={'commit', 0x3d, 0xc}}, {@resv_level={'resv_level', 0x3d, 0x5}}]}, 0x2, 0x4438, &(0x7f0000008940)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x250140) ioctl$CEC_DQEVENT(r1, 0xc0506107, &(0x7f0000000300)={0x0, 0x0, 0x0, @raw}) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e25, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001880), r2) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf2509000000080014000b00000005001300080000000500150067000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0xffff8000, 0x8, 0x400, 0xffffffffffffffff, 0x4000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xd0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x30}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c084}, 0x0) 55.310357585s ago: executing program 3 (id=350): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r4, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) 42.688074254s ago: executing program 3 (id=377): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000002340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 42.175109649s ago: executing program 3 (id=382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 40.822230788s ago: executing program 3 (id=384): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 37.909859943s ago: executing program 0 (id=387): r0 = dup(0xffffffffffffffff) openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000), 0x0, 0xfffffffffffffffc) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000400)={0x1, 0x0, {0x7fff, 0x8, 0x100f, 0x5, 0x7, 0x7, 0x2, 0x7}}) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) socket(0x1e, 0x4, 0x0) r6 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000003440), 0x2, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="890484", 0x3}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x5, &(0x7f0000000000)=@raw=[@func, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0xc2f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 37.818821498s ago: executing program 3 (id=388): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002800000000000000086b42e1421a4c0001a01e5e76126839145a860000000000000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x3, 0x3, 0x301, 0x0, 0x0, {0x5}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$key(0xffffffffffffffff, 0xffffffffffffffff, 0x44010) r5 = dup(0xffffffffffffffff) write$UHID_INPUT(r5, &(0x7f00000030c0)={0x765, {"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", 0x1000}}, 0x1006) socket(0x21, 0x5, 0x9) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @mcast1, @rand_addr=' \x01\x00', 0x20, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty, 0x0, 0x0, 0x1000000}}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000080)="09000000010001", 0x7) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 36.96485106s ago: executing program 0 (id=391): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x1}}, 0x10) 36.251103722s ago: executing program 0 (id=392): socket$alg(0x26, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = syz_io_uring_setup(0x49b, &(0x7f00000000c0)={0x0, 0x7079, 0x800, 0x7, 0x221}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3598, 0x0, 0x2, 0x0, 0x0) 35.410090504s ago: executing program 0 (id=396): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$netlink(0x10, 0x3, 0x15) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x4b67, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x2c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) 34.091234993s ago: executing program 3 (id=401): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700fe00"/17, @ANYRES32=0x1], 0x48) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 33.887068777s ago: executing program 5 (id=402): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000001980)={0x2, 0x1, @local}, 0x10) getpeername$inet(r0, 0x0, &(0x7f0000000300)) 33.462182836s ago: executing program 5 (id=403): r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x1, 0x2000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000002c0)={0x0, @reserved}) 33.001329114s ago: executing program 5 (id=406): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 32.383095836s ago: executing program 5 (id=408): setreuid(0xee01, 0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1], 0x60}, 0x0) 32.09080049s ago: executing program 5 (id=412): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x8, 0x8, r0, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2}]) 31.705561985s ago: executing program 1 (id=416): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f00000001c0)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x0) 30.230968593s ago: executing program 5 (id=418): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 30.184752537s ago: executing program 1 (id=419): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000019140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000040)=0x3, 0x4, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, 0x0, 0x0) 24.94796339s ago: executing program 1 (id=421): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000dc7a2240c80a2103c9a101ea02010902"], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x18) 24.786321485s ago: executing program 0 (id=422): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], &(0x7f00000000c0)=""/209, 0x2e, 0xd1, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0x3}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x81, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x8000, 0x0, 0x0, 0x300}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 24.631132708s ago: executing program 2 (id=423): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x40, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="c4139b78"]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 24.564417433s ago: executing program 2 (id=424): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000068000901fdffffff00000000020000000000000008001000ee"], 0x24}}, 0x0) 24.428607411s ago: executing program 2 (id=425): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010002104000000007cdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000280012800e00010069703667726574617000006cfd0002800600180004000000060010004e2300000a000100aa"], 0x54}}, 0x0) 24.260340546s ago: executing program 2 (id=426): r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000005500)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffe5d, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x4040000) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) 24.213534047s ago: executing program 2 (id=427): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40403, 0x8) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) fanotify_mark(r5, 0x80, 0x40000000, r5, 0x0) 23.990938512s ago: executing program 1 (id=428): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000180)={0x8ff2263ec52dc727, 0x0, {0x7, 0x2, 0x1002, 0x9, 0x5, 0x7, 0x0, 0x5}}) 23.569378799s ago: executing program 1 (id=429): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60ff040000442f00fc000000000000000000000000000000fe8000000000000000000000000000aa042022eb"], 0x0) 23.527064443s ago: executing program 1 (id=430): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r0, &(0x7f0000000080)='i', 0x1, 0x80000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/100, 0x64}, 0x7}], 0x1, 0x40012002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x23a200, 0x0) unshare(0x28000400) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 20.034737669s ago: executing program 2 (id=431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x448c0}, 0x4000000) 14.702962323s ago: executing program 0 (id=432): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e25, 0x80000, @local, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x18}, 0x4011) 0s ago: executing program 33 (id=401): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700fe00"/17, @ANYRES32=0x1], 0x48) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 34.607495][ T6477] cgroup: Unknown subsys name 'net' [ 34.824996][ T6477] cgroup: Unknown subsys name 'cpuset' [ 34.828659][ T6477] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.155830][ T6477] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 36.618487][ T6490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.619330][ T6494] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.621587][ T6494] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.623517][ T6494] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.638844][ T6490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.641895][ T6499] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.644652][ T6499] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.647879][ T6499] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.648347][ T6499] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.648510][ T6499] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.650676][ T6499] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.651750][ T6499] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.651911][ T6499] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.655688][ T6499] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.656364][ T6499] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.657330][ T6499] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.657487][ T6499] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.667815][ T6506] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.668059][ T6506] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.668578][ T6499] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.668752][ T6499] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.670169][ T6499] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.670903][ T6499] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.671328][ T6499] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.672311][ T6502] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.043109][ T6503] chnl_net:caif_netlink_parms(): no params data found [ 37.080717][ T6488] chnl_net:caif_netlink_parms(): no params data found [ 37.087614][ T6496] chnl_net:caif_netlink_parms(): no params data found [ 37.216011][ T6500] chnl_net:caif_netlink_parms(): no params data found [ 37.261803][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.262495][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.262620][ T6503] bridge_slave_0: entered allmulticast mode [ 37.263494][ T6503] bridge_slave_0: entered promiscuous mode [ 37.265368][ T6503] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.265413][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.265537][ T6503] bridge_slave_1: entered allmulticast mode [ 37.266332][ T6503] bridge_slave_1: entered promiscuous mode [ 37.266979][ T6489] chnl_net:caif_netlink_parms(): no params data found [ 37.288146][ T6496] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.288215][ T6496] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.288332][ T6496] bridge_slave_0: entered allmulticast mode [ 37.289179][ T6496] bridge_slave_0: entered promiscuous mode [ 37.338658][ T6496] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.338730][ T6496] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.338837][ T6496] bridge_slave_1: entered allmulticast mode [ 37.339652][ T6496] bridge_slave_1: entered promiscuous mode [ 37.358636][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.360681][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.362879][ T6488] bridge_slave_0: entered allmulticast mode [ 37.364396][ T6488] bridge_slave_0: entered promiscuous mode [ 37.365735][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.365779][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.365910][ T6488] bridge_slave_1: entered allmulticast mode [ 37.366772][ T6488] bridge_slave_1: entered promiscuous mode [ 37.369560][ T6503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.398853][ T6496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.400465][ T6503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.418552][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.435993][ T6496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.438802][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.440861][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.442838][ T6500] bridge_slave_0: entered allmulticast mode [ 37.443651][ T6500] bridge_slave_0: entered promiscuous mode [ 37.456032][ T6503] team0: Port device team_slave_0 added [ 37.457416][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.485691][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.485794][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.485905][ T6500] bridge_slave_1: entered allmulticast mode [ 37.486734][ T6500] bridge_slave_1: entered promiscuous mode [ 37.494402][ T6503] team0: Port device team_slave_1 added [ 37.529831][ T6500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.538968][ T6488] team0: Port device team_slave_0 added [ 37.542104][ T6496] team0: Port device team_slave_0 added [ 37.545389][ T6496] team0: Port device team_slave_1 added [ 37.547327][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.547406][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.547515][ T6489] bridge_slave_0: entered allmulticast mode [ 37.548360][ T6489] bridge_slave_0: entered promiscuous mode [ 37.549878][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.549923][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.550025][ T6489] bridge_slave_1: entered allmulticast mode [ 37.550858][ T6489] bridge_slave_1: entered promiscuous mode [ 37.553078][ T6500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.570025][ T6488] team0: Port device team_slave_1 added [ 37.616387][ T6503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.616452][ T6503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.616494][ T6503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.617990][ T6503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.618016][ T6503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.618048][ T6503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.635834][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.635864][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.635901][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.639183][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.640259][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.640284][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.640317][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.656049][ T6496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.656077][ T6496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.656110][ T6496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.657175][ T6496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.657199][ T6496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.657239][ T6496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.695476][ T6500] team0: Port device team_slave_0 added [ 37.698945][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.722856][ T6500] team0: Port device team_slave_1 added [ 37.740917][ T6496] hsr_slave_0: entered promiscuous mode [ 37.743406][ T6496] hsr_slave_1: entered promiscuous mode [ 37.747192][ T6503] hsr_slave_0: entered promiscuous mode [ 37.747674][ T6503] hsr_slave_1: entered promiscuous mode [ 37.747987][ T6503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.748051][ T6503] Cannot create hsr debugfs directory [ 37.770817][ T6489] team0: Port device team_slave_0 added [ 37.774088][ T6488] hsr_slave_0: entered promiscuous mode [ 37.774608][ T6488] hsr_slave_1: entered promiscuous mode [ 37.774900][ T6488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.774928][ T6488] Cannot create hsr debugfs directory [ 37.789077][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.789139][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.789182][ T6500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.790280][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.790304][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.790337][ T6500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.795914][ T6489] team0: Port device team_slave_1 added [ 37.868073][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.870091][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.872488][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.873635][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.873659][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.873693][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.906149][ T6500] hsr_slave_0: entered promiscuous mode [ 37.906703][ T6500] hsr_slave_1: entered promiscuous mode [ 37.906995][ T6500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.907023][ T6500] Cannot create hsr debugfs directory [ 37.974060][ T6489] hsr_slave_0: entered promiscuous mode [ 37.976477][ T6489] hsr_slave_1: entered promiscuous mode [ 37.977177][ T6489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.977219][ T6489] Cannot create hsr debugfs directory [ 38.197257][ T6488] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.205893][ T6488] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.222844][ T6488] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.231883][ T6488] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.258341][ T6503] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.278242][ T6503] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.286999][ T6503] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.290806][ T6503] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.316854][ T6500] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.323475][ T6500] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.328176][ T6500] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.361778][ T6500] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.391568][ T6496] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.395749][ T6496] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.406870][ T6496] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.410565][ T6496] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.450947][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.453745][ T6503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.463959][ T6489] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.467923][ T6489] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.481552][ T6489] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.486899][ T6489] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.515848][ T6503] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.517421][ T6496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.528377][ T6488] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.534204][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.534335][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.535546][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.535596][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.561707][ T6500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.565565][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.565635][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.578822][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.578905][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.593017][ T6500] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.599653][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.599731][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.606390][ T6496] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.626543][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.626611][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.631540][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.631602][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.637919][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.637982][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.691903][ T6503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.691977][ T6503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.698989][ T6490] Bluetooth: hci1: command tx timeout [ 38.699162][ T6490] Bluetooth: hci4: command tx timeout [ 38.699281][ T6490] Bluetooth: hci2: command tx timeout [ 38.699358][ T6490] Bluetooth: hci3: command tx timeout [ 38.702574][ T6494] Bluetooth: hci0: command tx timeout [ 38.786593][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.825482][ T6489] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.856138][ T499] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.856227][ T499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.866261][ T499] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.866352][ T499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.915608][ T6500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.939884][ T6503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.960968][ T6503] veth0_vlan: entered promiscuous mode [ 38.972202][ T6496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.979048][ T6489] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.979111][ T6489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.987990][ T6500] veth0_vlan: entered promiscuous mode [ 38.993069][ T6500] veth1_vlan: entered promiscuous mode [ 39.006193][ T6500] veth0_macvtap: entered promiscuous mode [ 39.023957][ T6500] veth1_macvtap: entered promiscuous mode [ 39.030484][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.046892][ T6503] veth1_vlan: entered promiscuous mode [ 39.057973][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.066079][ T6496] veth0_vlan: entered promiscuous mode [ 39.088234][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.105011][ T6496] veth1_vlan: entered promiscuous mode [ 39.116972][ T6500] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.117070][ T6500] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.117101][ T6500] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.117146][ T6500] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.140670][ T6496] veth0_macvtap: entered promiscuous mode [ 39.149540][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.161144][ T6488] veth0_vlan: entered promiscuous mode [ 39.193500][ T6496] veth1_macvtap: entered promiscuous mode [ 39.198616][ T6503] veth0_macvtap: entered promiscuous mode [ 39.206415][ T6488] veth1_vlan: entered promiscuous mode [ 39.224010][ T6496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.227106][ T6496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.227979][ T6503] veth1_macvtap: entered promiscuous mode [ 39.259109][ T6496] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.259196][ T6496] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.259235][ T6496] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.259265][ T6496] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.308249][ T1630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.308340][ T1630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.315136][ T6488] veth0_macvtap: entered promiscuous mode [ 39.318821][ T6488] veth1_macvtap: entered promiscuous mode [ 39.337946][ T6503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.344374][ T6503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.358191][ T6503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.358272][ T6503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.358302][ T6503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.358331][ T6503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.375966][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.383187][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.383243][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.404269][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.419110][ T6488] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.419199][ T6488] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.419237][ T6488] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.419267][ T6488] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.425272][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.425304][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.468050][ T2007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.468124][ T2007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.524079][ T6500] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.551027][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.551084][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.557935][ T6489] veth0_vlan: entered promiscuous mode [ 39.595551][ T6489] veth1_vlan: entered promiscuous mode [ 39.606669][ T6573] loop3: detected capacity change from 0 to 256 [ 39.612260][ T6573] ======================================================= [ 39.612260][ T6573] WARNING: The mand mount option has been deprecated and [ 39.612260][ T6573] and is ignored by this kernel. Remove the mand [ 39.612260][ T6573] option from the mount to silence this warning. [ 39.612260][ T6573] ======================================================= [ 39.636940][ T6573] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fd3c45, utbl_chksum : 0xe619d30d) [ 39.641995][ T6573] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 39.663202][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.663257][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.684320][ T6489] veth0_macvtap: entered promiscuous mode [ 39.718338][ T6577] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 39.721579][ T6489] veth1_macvtap: entered promiscuous mode [ 39.724686][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.724735][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.771361][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.787881][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.787942][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.810863][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.815450][ T6489] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.817903][ T6489] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.820435][ T6489] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.824322][ T6489] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.881494][ T6580] loop3: detected capacity change from 0 to 1764 [ 39.941555][ T6580] input: syz0 as /devices/virtual/input/input2 [ 39.964565][ T6575] loop2: detected capacity change from 0 to 32768 [ 39.978051][ T6575] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3 (6575) [ 40.008947][ T6575] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 40.012317][ T6575] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 40.015459][ T6575] BTRFS error (device loop2): cannot disable free-space-tree [ 40.021327][ T6575] BTRFS info (device loop2): disk space caching is enabled [ 40.023972][ T6575] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 40.029069][ T6575] BTRFS error (device loop2): open_ctree failed: -22 [ 40.031215][ T6580] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 40.076924][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.076990][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.145337][ T6586] 9pnet_fd: Insufficient options for proto=fd [ 40.160744][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.183573][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.261814][ T6590] warning: `syz.2.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 40.309480][ T6592] loop1: detected capacity change from 0 to 128 [ 40.310999][ T6590] netlink: 'syz.2.7': attribute type 10 has an invalid length. [ 40.342147][ T6592] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 40.383491][ T6594] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.475030][ T6590] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 40.500198][ T6598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9'. [ 40.504296][ T6598] Zero length message leads to an empty skb [ 40.630378][ T6605] loop0: detected capacity change from 0 to 64 [ 40.659532][ T6609] loop2: detected capacity change from 0 to 256 [ 40.685653][ T6609] MINIX-fs: mounting file system with errors, running fsck is recommended [ 40.773038][ T6494] Bluetooth: hci3: command tx timeout [ 40.773126][ T6494] Bluetooth: hci2: command tx timeout [ 40.773160][ T6494] Bluetooth: hci4: command tx timeout [ 40.773193][ T6494] Bluetooth: hci1: command tx timeout [ 40.773224][ T6494] Bluetooth: hci0: command tx timeout [ 40.934650][ T6614] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16'. [ 40.936082][ T6615] capability: warning: `syz.2.15' uses deprecated v2 capabilities in a way that may be insecure [ 41.280719][ T6619] loop2: detected capacity change from 0 to 512 [ 41.281419][ T6619] EXT4-fs: Ignoring removed orlov option [ 41.320067][ T6619] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 41.327753][ T6614] loop0: detected capacity change from 0 to 32768 [ 41.348551][ T6619] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 41.360513][ T6619] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.18: corrupted in-inode xattr: e_value size too large [ 41.361661][ T6619] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.18: couldn't read orphan inode 15 (err -117) [ 41.369372][ T6619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.379703][ T6622] loop3: detected capacity change from 0 to 512 [ 41.385443][ T6622] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 41.392596][ T6622] EXT4-fs (loop3): invalid journal inode [ 41.392683][ T6622] EXT4-fs (loop3): can't get journal size [ 41.403783][ T6614] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 41.419111][ T6622] EXT4-fs (loop3): 1 truncate cleaned up [ 41.420087][ T6622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.454740][ T6622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.459961][ T6496] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.640448][ T6614] XFS (loop0): Ending clean mount [ 41.651602][ T6614] XFS (loop0): Quotacheck needed: Please wait. [ 41.683883][ T6614] XFS (loop0): Quotacheck: Done. [ 42.382445][ T31] audit: type=1326 audit(41.990:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6633 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7fc00000 [ 42.382523][ T31] audit: type=1326 audit(41.990:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6633 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7fc00000 [ 42.382586][ T31] audit: type=1326 audit(41.990:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6633 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7fc00000 [ 42.382631][ T31] audit: type=1326 audit(41.990:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6633 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7fc00000 [ 42.382674][ T31] audit: type=1326 audit(41.990:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6633 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7fc00000 [ 42.382717][ T31] audit: type=1326 audit(41.990:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6633 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7fc00000 [ 42.427035][ T31] audit: type=1326 audit(41.990:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6633 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7fc00000 [ 42.427120][ T31] audit: type=1326 audit(42.040:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6633 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7fc00000 [ 42.427178][ T31] audit: type=1326 audit(42.040:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6633 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7fc00000 [ 42.427233][ T31] audit: type=1326 audit(42.040:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6633 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7fc00000 [ 42.457110][ T6488] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 42.518874][ T6647] loop3: detected capacity change from 0 to 512 [ 42.546447][ T6647] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.546517][ T6647] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.588412][ T6647] EXT4-fs (loop3): 1 truncate cleaned up [ 42.589326][ T6647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.692980][ T6654] loop2: detected capacity change from 0 to 128 [ 42.693584][ T6654] msdos: Bad value for 'gid' [ 42.693638][ T6654] msdos: Bad value for 'gid' [ 42.860602][ T6658] openvswitch: netlink: IPv6 tunnel dst address is zero [ 43.153405][ T6057] Bluetooth: hci0: command tx timeout [ 43.153567][ T6057] Bluetooth: hci1: command tx timeout [ 43.154048][ T6057] Bluetooth: hci4: command tx timeout [ 43.154671][ T6057] Bluetooth: hci2: command tx timeout [ 43.155095][ T6057] Bluetooth: hci3: command tx timeout [ 43.525461][ T6500] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.548902][ T6668] Injecting memory failure for pfn 0x20b68f at process virtual address 0x20162000 [ 43.552610][ T6668] Memory failure: 0x20b68f: recovery action for reserved kernel page: Ignored [ 43.709466][ T6674] netlink: 132 bytes leftover after parsing attributes in process `syz.3.28'. [ 43.869285][ T6653] loop0: detected capacity change from 0 to 40427 [ 43.876089][ T6653] F2FS-fs (loop0): build fault injection attr: rate: 27486, type: 0x3fffff [ 43.970395][ T6653] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 44.053419][ T6679] loop4: detected capacity change from 0 to 32768 [ 44.104074][ T6679] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 45.202862][ T6490] Bluetooth: hci4: command tx timeout [ 45.204908][ T6490] Bluetooth: hci1: command tx timeout [ 45.205041][ T6490] Bluetooth: hci0: command tx timeout [ 45.209006][ T6057] Bluetooth: hci2: command tx timeout [ 45.211618][ T6494] Bluetooth: hci3: command tx timeout [ 45.389425][ T6690] loop3: detected capacity change from 0 to 4096 [ 45.404273][ T6690] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 45.409669][ T6690] ntfs3(loop3): ino=0, mi_enum_attr [ 45.411917][ T6690] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 45.451092][ T6690] ntfs3(loop3): failed to replay log file. Can't mount rw! [ 45.720611][ T6489] ocfs2: Unmounting device (7,4) on (node local) [ 45.995254][ T6702] loop3: detected capacity change from 0 to 32768 [ 46.013732][ T6702] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.37 (6702) [ 46.040336][ T6702] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 46.040441][ T6702] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 46.040477][ T6702] BTRFS info (device loop3): using free-space-tree [ 46.076753][ T6711] loop4: detected capacity change from 0 to 4096 [ 46.190825][ T6729] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 46.216173][ T6711] /dev/nullb0: Can't open blockdev [ 46.219781][ T6711] NILFS error (device loop4): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 46.225027][ T6711] Remounting filesystem read-only [ 46.501186][ T6710] loop2: detected capacity change from 0 to 32768 [ 46.808354][ T6736] xt_CT: You must specify a L4 protocol and not use inversions on it [ 47.208248][ T6710] btrfs: Deprecated parameter 'usebackuproot' [ 47.208306][ T6710] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 47.283692][ T6710] BTRFS: device /dev/loop2 (7:2) using temp-fsid 5b3b6404-5bf1-4503-bf3c-e6e6eba2d02e [ 47.283760][ T6710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.40 (6710) [ 47.677052][ T6783] tipc: Can't bind to reserved service type 0 [ 47.756161][ T6783] netlink: 84 bytes leftover after parsing attributes in process `syz.1.41'. [ 47.756463][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 47.780362][ T6500] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 47.801546][ T6798] loop4: detected capacity change from 0 to 256 [ 47.847153][ T6710] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 47.847265][ T6710] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 47.847302][ T6710] BTRFS info (device loop2): using free-space-tree [ 47.966691][ T6710] BTRFS info (device loop2): rebuilding free space tree [ 48.204341][ T6496] BTRFS info (device loop2): last unmount of filesystem 5b3b6404-5bf1-4503-bf3c-e6e6eba2d02e [ 48.346797][ T6825] netlink: 56 bytes leftover after parsing attributes in process `syz.2.46'. [ 48.712482][ T6822] loop4: detected capacity change from 0 to 32768 [ 48.722640][ T6822] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.45 (6822) [ 48.737086][ T6822] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 48.740095][ T6822] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 48.742768][ T6822] BTRFS info (device loop4): disk space caching is enabled [ 48.745002][ T6822] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 48.750619][ T6820] loop3: detected capacity change from 0 to 40427 [ 48.751536][ T6820] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 48.751566][ T6820] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 48.761811][ T6820] F2FS-fs (loop3): invalid crc value [ 48.821079][ T6822] BTRFS info (device loop4): rebuilding free space tree [ 48.830625][ T6822] BTRFS info (device loop4): disabling free space tree [ 48.832904][ T6822] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 48.836245][ T6822] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 48.853843][ T6820] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 48.853905][ T6820] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 48.954974][ T6772] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 49.150493][ T6830] loop2: detected capacity change from 0 to 32768 [ 49.470056][ T6830] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 49.558011][ T6489] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 49.574447][ T6830] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 49.574447][ T6830] allowing incompatible features above 0.0: (unknown version) [ 49.574572][ T6830] bcachefs (loop2): initializing new filesystem [ 49.583555][ T6830] bcachefs (loop2): going read-write [ 49.613281][ T6830] bcachefs (loop2): marking superblocks [ 49.642198][ T6830] bcachefs (loop2): initializing freespace [ 49.693238][ T6830] bcachefs (loop2): done initializing freespace [ 49.694899][ T6830] bcachefs (loop2): reading snapshots table [ 49.695155][ T6830] bcachefs (loop2): reading snapshots done [ 49.730340][ T6830] bcachefs (loop2): done starting filesystem [ 50.129364][ T6868] loop3: detected capacity change from 0 to 32768 [ 50.176426][ T6868] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 50.302684][ T6868] XFS (loop3): Ending clean mount [ 50.339197][ T6880] loop0: detected capacity change from 0 to 32768 [ 50.362454][ T6880] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.55 (6880) [ 50.397653][ T6500] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 50.432384][ T6880] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 50.432489][ T6880] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 50.432545][ T6880] BTRFS info (device loop0): using free-space-tree [ 50.463219][ T6881] loop4: detected capacity change from 0 to 32768 [ 50.479941][ T6881] BTRFS: device /dev/loop4 (7:4) using temp-fsid 495b5269-ae21-4591-af73-8b8563db9251 [ 50.480103][ T6881] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.53 (6881) [ 50.521199][ T6881] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 50.521315][ T6881] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 50.521371][ T6881] BTRFS info (device loop4): using free-space-tree [ 50.741977][ T6488] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 52.044180][ T6496] bcachefs (loop2): shutting down [ 52.044329][ T6496] bcachefs (loop2): going read-only [ 52.050615][ T6496] bcachefs (loop2): finished waiting for writes to stop [ 52.108339][ T6489] BTRFS info (device loop4): last unmount of filesystem 495b5269-ae21-4591-af73-8b8563db9251 [ 52.174371][ T6987] loop0: detected capacity change from 0 to 4096 [ 52.226004][ T6496] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 52.303163][ T6496] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 14 [ 52.305334][ T6496] bcachefs (loop2): clean shutdown complete, journal seq 15 [ 52.365857][ T6496] bcachefs (loop2): marking filesystem clean [ 52.522723][ T7012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.525474][ T7012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.525579][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.525837][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.538196][ T6496] bcachefs (loop2): shutdown complete [ 52.866704][ T7022] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 53.351161][ T7022] loop0: detected capacity change from 0 to 32768 [ 53.368467][ T7021] loop3: detected capacity change from 0 to 32768 [ 53.383703][ T7021] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.72 (7021) [ 53.399379][ T7021] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 53.399481][ T7021] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 53.399517][ T7021] BTRFS info (device loop3): using free-space-tree [ 53.493326][ T7055] loop4: detected capacity change from 0 to 4096 [ 53.889629][ T7064] binder: 7064 RLIMIT_NICE not set [ 53.893783][ T7072] binder: 7072 RLIMIT_NICE not set [ 54.663703][ T7064] binder: 7063:7064 ioctl c0306201 20001a80 returned -14 [ 54.854141][ T31] kauditd_printk_skb: 45 callbacks suppressed [ 54.854217][ T31] audit: type=1400 audit(54.470:57): lsm=SMACK fn=smack_task_setpgid action=denied subject="y" object="_" requested=w pid=7123 comm="syz.4.83" opid=7123 ocomm="syz.4.83" [ 54.862607][ T31] audit: type=1400 audit(54.470:58): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=7123 comm="syz.4.83" name="15" dev="tmpfs" ino=98 [ 54.882202][ T6500] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 54.984104][ T7022] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 55.008771][ T7022] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 55.008771][ T7022] allowing incompatible features above 0.0: (unknown version) [ 55.017598][ T7022] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 55.019961][ T7022] bcachefs (loop0): Version upgrade required: [ 55.019961][ T7022] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 55.019961][ T7022] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 55.019961][ T7022] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 55.030753][ T7022] bcachefs (loop0): dropping and reconstructing all alloc info [ 55.096088][ T7022] bcachefs (loop0): accounting_read... done [ 55.146905][ T7022] bcachefs (loop0): alloc_read... done [ 55.146993][ T7022] bcachefs (loop0): snapshots_read... done [ 55.147505][ T7022] bcachefs (loop0): done starting filesystem [ 55.333409][ T7141] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.368952][ T6488] bcachefs (loop0): shutting down [ 55.499197][ T7143] loop2: detected capacity change from 0 to 512 [ 55.539436][ T6488] bcachefs (loop0): shutdown complete [ 55.551101][ T7135] loop4: detected capacity change from 0 to 32768 [ 55.552446][ T7143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.617126][ T7135] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 55.814837][ T7163] netlink: 76 bytes leftover after parsing attributes in process `syz.1.89'. [ 56.249127][ T7165] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.60: corrupted inode contents [ 56.257970][ T7165] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.60: mark_inode_dirty error [ 56.272193][ T7165] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.60: corrupted inode contents [ 56.277794][ T7165] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.60: mark_inode_dirty error [ 56.508715][ T7135] XFS (loop4): Ending clean mount [ 56.516609][ T7135] process 'syz.4.85' launched './file1' with NULL argv: empty string added [ 56.536224][ T7135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.536619][ T7135] batadv_slave_0: entered promiscuous mode [ 56.746309][ T6496] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.766088][ T6489] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 56.789278][ T7141] loop3: detected capacity change from 0 to 32768 [ 57.104847][ T7172] loop4: detected capacity change from 0 to 32768 [ 57.113111][ T7172] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.92 (7172) [ 57.119020][ T7172] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 57.122319][ T7172] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 57.128864][ T7172] BTRFS info (device loop4): using free-space-tree [ 58.317618][ T6489] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 58.378078][ T7141] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 58.545247][ T7141] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=gzip,norecovery,reconstruct_alloc,no_data_io [ 58.545247][ T7141] allowing incompatible features above 0.0: (unknown version) [ 58.562856][ T7141] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 58.563014][ T7141] bcachefs (loop3): Version upgrade required: [ 58.563014][ T7141] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 58.563014][ T7141] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 58.563014][ T7141] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 58.563215][ T7141] bcachefs (loop3): dropping and reconstructing all alloc info [ 58.588445][ T7141] bcachefs (loop3): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 58.588646][ T7141] bcachefs (loop3): bcachefs (loop3): error validating btree node on loop3 at btree extents level 0/0 [ 58.588678][ T7141] u64s 11 type btree_ptr_v2 18446744073707239423:U64_MAX:U32_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 58.588697][ T7141] node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX, btree topology error: [ 58.602636][ T7141] bcachefs (loop3): flagging btree extents lost data [ 58.602768][ T7141] bcachefs (loop3): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 58.629537][ T7141] bcachefs (loop3): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 58.668592][ T7141] bcachefs (loop3): scan_for_btree_nodes... [ 58.668674][ T7141] bcachefs (loop3): read_btree_nodes(): error starting kthread EINTR [ 58.668778][ T7141] bcachefs (loop3): bch2_fs_recovery(): error EINTR [ 58.668799][ T7141] bcachefs (loop3): bch2_fs_start(): error starting filesystem EINTR [ 58.668820][ T7141] bcachefs (loop3): shutting down [ 58.764078][ T7141] bcachefs (loop3): shutdown complete [ 58.918648][ T7255] loop2: detected capacity change from 0 to 32768 [ 59.723199][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 59.723273][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 59.723336][ T7269] netlink: 'syz.1.100': attribute type 12 has an invalid length. [ 59.807877][ T9] libceph: connect (1)[c::]:6789 error -101 [ 59.809900][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 59.825577][ T9] libceph: connect (1)[c::]:6789 error -101 [ 59.825728][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 59.846855][ T9] libceph: connect (1)[c::]:6789 error -101 [ 59.848640][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 59.872741][ T7258] loop4: detected capacity change from 0 to 32768 [ 60.015316][ T7255] loop2: detected capacity change from 0 to 32768 [ 60.048094][ T7255] overlay: filesystem on ./file0 not supported [ 60.057793][ T7267] loop0: detected capacity change from 0 to 32768 [ 60.062005][ T7267] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.99 (7267) [ 60.066755][ T9] libceph: connect (1)[c::]:6789 error -101 [ 60.066909][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 60.077521][ T7267] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 60.077615][ T7267] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 60.077651][ T7267] BTRFS info (device loop0): using free-space-tree [ 60.103947][ T9] libceph: connect (1)[c::]:6789 error -101 [ 60.104136][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 60.337314][ T6488] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 60.449457][ T7258] overlayfs: failed to resolve './file0/../file0': -20 [ 60.476987][ T7272] ceph: No mds server is up or the cluster is laggy [ 60.482483][ T7269] ceph: No mds server is up or the cluster is laggy [ 60.514522][ T7297] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 60.514522][ T7297] [ 60.521403][ T7297] ERROR: (device loop4): remounting filesystem as read-only [ 60.521456][ T7297] xtLookup: xtSearch returned -5 [ 60.521473][ T7297] add_index: get/read_metapage failed! [ 60.521484][ T7297] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 60.521484][ T7297] [ 60.521508][ T7297] xtLookup: xtSearch returned -5 [ 60.521517][ T7297] free_index: error reading directory table [ 60.521527][ T7297] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 60.521527][ T7297] [ 60.521544][ T7297] xtLookup: xtSearch returned -5 [ 60.521553][ T7297] free_index: error reading directory table [ 60.521562][ T7297] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 60.521562][ T7297] [ 60.521579][ T7297] xtLookup: xtSearch returned -5 [ 60.521588][ T7297] free_index: error reading directory table [ 60.521597][ T7297] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 60.521597][ T7297] [ 60.521614][ T7297] xtLookup: xtSearch returned -5 [ 60.521623][ T7297] free_index: error reading directory table [ 60.521632][ T7297] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 60.521632][ T7297] [ 60.521649][ T7297] xtLookup: xtSearch returned -5 [ 60.521658][ T7297] free_index: error reading directory table [ 60.568286][ T7298] loop0: detected capacity change from 0 to 2048 [ 60.595045][ T7298] loop0: p1 p2 < > p3 < p5 p6 > p4 [ 60.595186][ T7298] loop0: partition table partially beyond EOD, truncated [ 60.595370][ T7298] loop0: p1 size 917504 extends beyond EOD, truncated [ 60.600642][ T7298] loop0: p2 start 4278190080 is beyond EOD, truncated [ 60.613555][ T7298] loop0: p4 size 8192 extends beyond EOD, truncated [ 60.634273][ T7298] loop0: p5 size 917504 extends beyond EOD, truncated [ 60.637021][ T7298] loop0: p6 size 8192 extends beyond EOD, truncated [ 61.022245][ T7141] bcachefs: bch2_fs_get_tree() error: EINTR [ 61.454526][ T7302] loop0: detected capacity change from 0 to 32768 [ 61.482542][ T6644] udevd[6644]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 61.508205][ T6882] udevd[6882]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 61.521241][ T6482] udevd[6482]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 61.526957][ T7324] udevd[7324]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 61.545612][ T7325] udevd[7325]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 61.643357][ T7302] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 61.716765][ T7302] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,compression=lz4,journal_flush_disabled,recovery_pass_last=trans_mark_dev_sbs,read_only,reconstruct_alloc [ 61.716765][ T7302] allowing incompatible features above 0.0: (unknown version) [ 61.730305][ T7302] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 61.736655][ T7302] bcachefs (loop0): Version upgrade from 1.20: directory_size to 1.7: mi_btree_bitmap incomplete [ 61.736655][ T7302] Doing compatible version upgrade from 1.20: directory_size to 1.25: extent_flags [ 61.736655][ T7302] running recovery passes: check_extents_to_backpointers [ 61.744964][ T7302] bcachefs (loop0): dropping and reconstructing all alloc info [ 61.747908][ T7302] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree extents level 0/0 [ 61.747970][ T7302] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 61.747984][ T7302] node offset 8/16 bset u64s 49: bset at wrong sector offset, shutting down [ 61.747994][ T7302] error not marked as autofix and not in fsck [ 61.748004][ T7302] run fsck, and forward to devs so error can be marked for self-healing [ 61.748014][ T7302] inconsistency detected - emergency read only at journal seq 10 [ 61.748165][ T7302] bcachefs (loop0): flagging btree extents lost data [ 61.748196][ T7302] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 61.748221][ T7302] bcachefs (loop0): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 61.748241][ T7302] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 61.751254][ T7302] bcachefs (loop0): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 61.755169][ T7302] bcachefs (loop0): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0: [ 61.755187][ T7302] mode=100755 [ 61.755196][ T7302] flags=(15300000) [ 61.755205][ T7302] journal_seq=4 [ 61.755214][ T7302] hash_seed=d483206f1ed95abf [ 61.755224][ T7302] hash_type=siphash [ 61.755232][ T7302] bi_size=100 [ 61.755241][ T7302] bi_sectors=8 [ 61.755250][ T7302] bi_version=1126999418470400 [ 61.755259][ T7302] bi_atime=0 [ 61.755268][ T7302] bi_ctime=0 [ 61.755277][ T7302] bi_mtime=0 [ 61.755285][ T7302] bi_otime=2780562352 [ 61.755294][ T7302] bi_uid=2780562352 [ 61.755303][ T7302] bi_gid=0 [ 61.755312][ T7302] bi_nlink=2780562352 [ 61.755321][ T7302] bi_generation=0 [ 61.755330][ T7302] bi_dev=16 [ 61.755338][ T7302] bi_data_checksum=18 [ 61.755347][ T7302] bi_compression=0 [ 61.755356][ T7302] bi_project=0 [ 61.755365][ T7302] bi_background_compression=0 [ 61.755374][ T7302] bi_data_replicas=0 [ 61.755383][ T7302] bi_promote_target=0 [ 61.755392][ T7302] bi_foreground_target=0 [ 61.755401][ T7302] bi_background_target=0 [ 61.755411][ T7302] bi_erasure_code=0 [ 61.755419][ T7302] bi_fields_set=0 [ 61.755428][ T7302] bi_dir=0 [ 61.755437][ T7302] bi_dir_offset=0 [ 61.755446][ T7302] bi_subvol=0 [ 61.755455][ T7302] bi_parent_subvol=0 [ 61.755464][ T7302] bi_nocow=0 [ 61.755473][ T7302] bi_depth=0 [ 61.755481][ T7302] bi_inodes_32bit=0 [ 61.755490][ T7302] bi_casefold=0 [ 61.755499][ T7302] invalid data checksum type (18 >= 5, deleting [ 61.768455][ T7302] bcachefs (loop0): scan_for_btree_nodes... [ 61.792251][ T7302] bcachefs (loop0): btree node scan found 3 nodes after overwrites [ 61.792305][ T7302] done [ 61.792415][ T7302] bcachefs (loop0): check_topology... [ 61.802104][ T7302] bcachefs (loop0): btree root extents unreadable, must recover from scan [ 61.802302][ T7302] bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX [ 61.802485][ T7302] bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 61.808024][ T7302] bcachefs (loop0): Topology repair: unreadable btree node at [ 61.808047][ T7302] btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 61.815098][ T7302] bcachefs (loop0): empty interior btree node at btree=extents level=1 [ 61.815130][ T7302] u64s 5 type btree_ptr SPOS_MAX len 0 ver 0, fixing [ 61.815205][ T7302] bcachefs (loop0): empty btree root extents [ 61.815288][ T7302] done [ 61.815311][ T7302] bcachefs (loop0): accounting_read... done [ 61.873229][ T7302] bcachefs (loop0): alloc_read... done [ 61.873286][ T7302] bcachefs (loop0): snapshots_read... done [ 61.873357][ T7302] bcachefs (loop0): check_allocations... [ 61.875129][ T7302] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 61.875154][ T7302] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 61.907873][ T7302] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 61.907920][ T7302] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 61.913000][ T7302] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 61.913020][ T7302] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 61.917781][ T7302] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 61.917798][ T7302] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 61.938123][ T7302] done [ 61.943599][ T7302] bcachefs (loop0): going read-write [ 61.988826][ T7315] loop3: detected capacity change from 0 to 32768 [ 62.019024][ T7336] loop4: detected capacity change from 0 to 32768 [ 62.049444][ T7336] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.112 (7336) [ 62.082243][ T7302] bcachefs (loop0): going read-only [ 62.104875][ T7315] XFS (loop3): Mounting V5 filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab in no-recovery mode. Filesystem will be inconsistent. [ 62.118228][ T7336] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 62.121413][ T7336] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 62.124444][ T7336] BTRFS info (device loop4): using free-space-tree [ 62.841695][ T6500] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 62.845618][ T7302] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10 [ 62.845720][ T7302] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10 [ 62.852125][ T7302] bcachefs (loop0): unclean shutdown complete, journal seq 10 [ 63.019011][ T7302] bcachefs (loop0): finished waiting for writes to stop [ 63.078255][ T7302] bcachefs (loop0): done going read-only, filesystem not clean [ 63.078313][ T7302] bcachefs (loop0): done starting filesystem [ 63.332493][ T7428] gre1: entered promiscuous mode [ 63.332557][ T7428] gre1: entered allmulticast mode [ 63.396454][ T7425] loop2: detected capacity change from 0 to 4096 [ 63.398973][ T7425] ntfs3: Unknown parameter 'nl80211' [ 63.507724][ T7429] loop3: detected capacity change from 0 to 32768 [ 63.532854][ T6488] bcachefs (loop0): shutting down [ 63.567552][ T7429] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 63.569317][ T6489] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 63.579467][ T7429] (syz.3.117,7429,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72 [ 63.601062][ T7429] ocfs2: Unmounting device (7,3) on (node local) [ 63.949944][ T7436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.953418][ T7436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.476184][ T6488] bcachefs (loop0): shutdown complete [ 64.553945][ T7444] loop2: detected capacity change from 0 to 64 [ 64.604883][ T7444] hfs: unable to open extent tree [ 64.860040][ T2392] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.862154][ T2392] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.427670][ T7452] loop2: detected capacity change from 0 to 65536 [ 65.447755][ T7462] loop4: detected capacity change from 0 to 32768 [ 65.451557][ T7452] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 65.491342][ T7452] XFS (loop2): Ending clean mount [ 65.500472][ T7452] XFS (loop2): Quotacheck needed: Please wait. [ 65.521191][ T7117] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x6 [ 65.521354][ T7117] XFS (loop2): Unmount and run xfs_repair [ 65.521376][ T7117] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 65.521399][ T7117] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 65.521420][ T7117] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 65.521441][ T7117] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 65.521461][ T7117] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 65.521482][ T7117] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 65.521502][ T7117] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 65.521522][ T7117] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 65.521543][ T7117] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 65.521707][ T7117] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x6 len 2 error 74 [ 65.528447][ T7452] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 65.722246][ T7462] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 65.749005][ T7462] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 65.749005][ T7462] allowing incompatible features above 0.0: (unknown version) [ 65.749104][ T7462] bcachefs (loop4): initializing new filesystem [ 65.749743][ T7462] bcachefs (loop4): going read-write [ 65.786332][ T6496] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 65.796071][ T6496] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 65.814589][ T7462] bcachefs (loop4): marking superblocks [ 65.825126][ T7462] bcachefs (loop4): initializing freespace [ 65.828186][ T7462] bcachefs (loop4): done initializing freespace [ 65.842063][ T7462] bcachefs (loop4): reading snapshots table [ 65.844110][ T7462] bcachefs (loop4): reading snapshots done [ 65.873915][ T7462] bcachefs (loop4): done starting filesystem [ 66.197130][ T6489] bcachefs (loop4): shutting down [ 66.197195][ T6489] bcachefs (loop4): going read-only [ 66.197245][ T6489] bcachefs (loop4): finished waiting for writes to stop [ 66.232938][ T6489] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2 [ 66.310359][ T6489] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 66.311093][ T6489] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 66.313581][ T7484] loop0: detected capacity change from 0 to 32768 [ 66.369673][ T7484] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.130 (7484) [ 66.378140][ T6489] bcachefs (loop4): marking filesystem clean [ 66.420277][ T7490] loop2: detected capacity change from 0 to 8 [ 66.422480][ T7484] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 66.422577][ T7484] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 66.422620][ T7484] BTRFS info (device loop0): using free-space-tree [ 66.422676][ T7484] workqueue: max_active -2147483648 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 66.435385][ T7484] workqueue: max_active -2147483648 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 66.445804][ T7494] binder: 7492:7494 tried to acquire reference to desc 0, got 1 instead [ 66.449881][ T7494] binder_alloc: 7492: pid 7492 spamming oneway? 1 buffers allocated for a total size of 4096 [ 66.450675][ T7495] binder: 7492:7495 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 66.450709][ T7495] binder: 7495 RLIMIT_NICE not set [ 66.451988][ T7496] loop3: detected capacity change from 0 to 8 [ 66.460213][ T6541] binder: undelivered TRANSACTION_COMPLETE [ 66.460320][ T6541] binder: undelivered TRANSACTION_COMPLETE [ 66.479747][ T7484] workqueue: max_active -2147483648 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 66.498209][ T6541] binder: undelivered transaction 6, process died. [ 66.499547][ T7484] workqueue: max_active -2147483648 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 66.504183][ T7484] workqueue: max_active -2147483648 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 66.520001][ T7484] workqueue: max_active -2147483648 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 66.524437][ T7484] workqueue: max_active -2147483648 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 66.538245][ T6489] bcachefs (loop4): shutdown complete [ 66.631085][ T7484] BTRFS info (device loop0): rebuilding free space tree [ 66.637705][ T1630] workqueue: max_active -2147483648 requested for btrfs-cache is out of range, clamping between 1 and 2048 [ 67.441819][ T6488] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 67.519194][ T7511] loop3: detected capacity change from 0 to 32768 [ 67.524285][ T7511] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.135 (7511) [ 67.536694][ T7511] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 67.536790][ T7511] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 67.536843][ T7511] BTRFS info (device loop3): using free-space-tree [ 67.637071][ T7533] random: crng reseeded on system resumption [ 67.744084][ T7536] loop2: detected capacity change from 0 to 64 [ 67.817606][ T6500] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 67.836055][ T7538] loop0: detected capacity change from 0 to 512 [ 67.847382][ T7538] ext2: Unknown parameter 'pcr' [ 68.515376][ T7545] loop0: detected capacity change from 0 to 32768 [ 69.031403][ T7551] loop2: detected capacity change from 0 to 32768 [ 69.054759][ T7551] (syz.2.144,7551,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 69.060348][ T7551] (syz.2.144,7551,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 69.163316][ T7575] netlink: 56 bytes leftover after parsing attributes in process `syz.3.148'. [ 69.163486][ T7576] netlink: 56 bytes leftover after parsing attributes in process `syz.3.148'. [ 69.268492][ T7580] loop3: detected capacity change from 0 to 2048 [ 69.522824][ T7586] xt_l2tp: v2 sid > 0xffff: 150994944 [ 69.561737][ T7545] bcachefs (baafa011-d992-4344-aaf9-4ff0e0bec0ff): Using encoding defined by superblock: utf8-12.1.0 [ 69.617323][ T7545] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 69.617323][ T7545] allowing incompatible features above 0.0: (unknown version) [ 69.617471][ T7545] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 69.617539][ T7545] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.25: extent_flags [ 69.617539][ T7545] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 69.663681][ T7545] bcachefs (loop0): accounting_read... [ 69.675359][ T7582] loop3: detected capacity change from 0 to 40427 [ 69.687265][ T7545] done [ 69.687323][ T7545] bcachefs (loop0): alloc_read... done [ 69.687399][ T7545] bcachefs (loop0): snapshots_read... done [ 69.687494][ T7545] bcachefs (loop0): check_allocations... [ 69.689045][ T7545] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 69.689073][ T7545] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1818ce08861e3527 written 40 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 69.690851][ T7545] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 69.690867][ T7545] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2a20405ac3f40602 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 69.693155][ T7545] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 69.693170][ T7545] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 267fcf747c875937 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 69.694143][ T7545] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 69.694157][ T7545] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq d682cebdf2a7eb26 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 69.694916][ T7545] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 69.694930][ T7545] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq d771a06d670df06c written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 69.702142][ T7545] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 69.702158][ T7545] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b6c44d07df4e9bb7 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 69.711305][ T7545] done [ 69.711612][ T7582] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 69.711642][ T7582] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 69.717240][ T7545] bcachefs (loop0): going read-write [ 69.827357][ T7545] bcachefs (loop0): journal_replay... [ 69.903908][ T7582] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 69.903980][ T7582] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 69.931458][ T7582] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 69.971991][ T7545] done [ 69.980034][ T24] cfg80211: failed to load regulatory.db [ 69.989665][ T7545] bcachefs (loop0): check_extents_to_backpointers... [ 69.990955][ T7545] bcachefs (loop0): scanning for missing backpointers in 6/128 buckets [ 69.993576][ T7545] done [ 69.997994][ T7545] bcachefs (loop0): check_inodes... done [ 69.999861][ T7545] bcachefs (loop0): resume_logged_ops... done [ 69.999928][ T7545] bcachefs (loop0): delete_dead_inodes... done [ 70.011309][ T7545] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 70.011372][ T7545] bcachefs (loop0): check_extents_to_backpointers... done [ 70.012135][ T7545] bcachefs (loop0): check_inodes... done [ 70.012488][ T7545] bcachefs (loop0): resume_logged_ops... done [ 70.012532][ T7545] bcachefs (loop0): delete_dead_inodes... done [ 70.015617][ T7545] bcachefs (loop0): done starting filesystem [ 70.056530][ T7586] Non-string source [ 70.143617][ T7545] syz.0.141 (7545): drop_caches: 0 [ 70.144167][ T7545] bcachefs (loop0): going read-only [ 70.144200][ T7545] bcachefs (loop0): finished waiting for writes to stop [ 70.241749][ T7545] bcachefs (loop0): flushing journal and stopping allocators, journal seq 22 [ 70.258230][ T7545] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 22 [ 70.263220][ T7545] bcachefs (loop0): clean shutdown complete, journal seq 23 [ 70.313822][ T7545] bcachefs (loop0): marking filesystem clean [ 70.331481][ T7596] loop2: detected capacity change from 0 to 32768 [ 70.462645][ T6488] bcachefs (loop0): shutting down [ 70.545422][ T7596] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 70.566545][ T7596] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=zstd,str_hash=crc32c,norecovery,nojournal_transaction_names,version_upgrade=incompatible,nocow,no_data_io [ 70.566545][ T7596] allowing incompatible features above 0.0: (unknown version) [ 70.566695][ T7596] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 70.566817][ T7596] bcachefs (loop2): Version upgrade required: [ 70.566817][ T7596] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 70.566817][ T7596] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 70.566817][ T7596] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 70.566884][ T7596] bcachefs (loop2): Now allowing incompatible features up to 1.25: extent_flags, previously allowed up to 0.0: (unknown version) [ 70.566884][ T7596] [ 70.602885][ T7596] bcachefs (loop2): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 70.602954][ T7596] bcachefs (loop2): bcachefs (loop2): error validating btree node on loop2 at btree extents level 0/0 [ 70.602972][ T7596] u64s 11 type btree_ptr_v2 18446744073707239423:U64_MAX:U32_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 70.602991][ T7596] node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX, btree topology error: [ 70.603060][ T7596] bcachefs (loop2): flagging btree extents lost data [ 70.603103][ T7596] bcachefs (loop2): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 70.603352][ T7596] bcachefs (loop2): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 70.626614][ T7596] bcachefs (loop2): bcachefs (loop2): error validating btree node at btree alloc level 0/0 [ 70.626637][ T7596] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 70.626650][ T7596] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 70.627131][ T7596] bcachefs (loop2): btree_node_read_work: rewriting btree node at due to error [ 70.627131][ T7596] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 70.640307][ T7596] bcachefs (loop2): scan_for_btree_nodes... [ 70.712217][ T7596] bcachefs (loop2): btree node scan found 7 nodes after overwrites [ 70.712300][ T7596] done [ 70.715398][ T7596] bcachefs (loop2): check_topology... [ 70.715558][ T7596] bcachefs (loop2): btree root extents unreadable, must recover from scan [ 70.715649][ T7596] bcachefs (loop2): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX [ 70.715720][ T7596] bcachefs (loop2): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 70.718782][ T6488] bcachefs (loop0): shutdown complete [ 70.730942][ T7596] done [ 70.731107][ T7596] bcachefs (loop2): accounting_read... done [ 70.786005][ T7596] bcachefs (loop2): alloc_read... done [ 70.786144][ T7596] bcachefs (loop2): snapshots_read... done [ 70.786258][ T7596] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 70.786620][ T7596] bcachefs (loop2): done starting filesystem [ 70.831669][ T7596] bcachefs (loop2): btree_path_down(): fatal error node not found at pos 4100:1:U32_MAX within parent node u64s 5 type btree_ptr SPOS_MAX len 0 ver 0 [ 70.856336][ T7596] bcachefs (loop2): fatal error - emergency read only [ 70.856985][ T7596] bcachefs (loop2): /file0/file1 offset 0: read error -2324 from btree lookup [ 70.909958][ T6496] bcachefs (loop2): shutting down [ 71.025923][ T6496] bcachefs (loop2): shutdown complete [ 71.318436][ T6502] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.323375][ T6502] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.326710][ T6502] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.329899][ T6502] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.337628][ T6502] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.367578][ T1630] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.626177][ T1630] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.730466][ T7619] loop0: detected capacity change from 0 to 32768 [ 71.737206][ T7627] loop3: detected capacity change from 0 to 1024 [ 71.739777][ T7627] ext4: Unknown parameter '/dev/audio1' [ 71.745941][ T7619] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.158 (7619) [ 71.767661][ T7619] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 71.767762][ T7619] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 71.767799][ T7619] BTRFS info (device loop0): using free-space-tree [ 71.894480][ T1630] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.920234][ T7651] bond_slave_1: entered promiscuous mode [ 71.998401][ T7650] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004 [ 72.116284][ T1630] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.181836][ T7647] bond_slave_1: left promiscuous mode [ 73.202745][ T6488] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.222939][ T7620] chnl_net:caif_netlink_parms(): no params data found [ 73.412577][ T6502] Bluetooth: hci1: command tx timeout [ 73.925261][ T7726] loop3: detected capacity change from 0 to 64 [ 73.925916][ T7726] hfs: Unknown parameter '0x000000000000000600000000000000000007o' [ 73.942056][ T7620] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.946384][ T7620] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.948990][ T7620] bridge_slave_0: entered allmulticast mode [ 73.959349][ T7620] bridge_slave_0: entered promiscuous mode [ 74.008387][ T7620] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.008463][ T7620] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.008610][ T7620] bridge_slave_1: entered allmulticast mode [ 74.023005][ T7728] netlink: 40 bytes leftover after parsing attributes in process `syz.1.171'. [ 74.080376][ T7620] bridge_slave_1: entered promiscuous mode [ 74.165823][ T1630] bridge_slave_1: left allmulticast mode [ 74.172701][ T1630] bridge_slave_1: left promiscuous mode [ 74.174056][ T1630] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.192100][ T1630] bridge_slave_0: left allmulticast mode [ 74.195286][ T1630] bridge_slave_0: left promiscuous mode [ 74.197154][ T1630] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.332222][ T7724] loop0: detected capacity change from 0 to 32768 [ 74.361860][ T7724] btrfs: Deprecated parameter 'usebackuproot' [ 74.361937][ T7724] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 74.384508][ T7724] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.170 (7724) [ 74.417213][ T7724] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.417320][ T7724] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 74.417356][ T7724] BTRFS info (device loop0): using free-space-tree [ 74.505135][ T7724] BTRFS info (device loop0): rebuilding free space tree [ 74.893192][ T7752] loop2: detected capacity change from 0 to 32768 [ 74.903745][ T7752] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.159 (7752) [ 74.921776][ T7752] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 74.921871][ T7752] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 74.921908][ T7752] BTRFS info (device loop2): disk space caching is enabled [ 74.921932][ T7752] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 74.997077][ T7752] BTRFS info (device loop2): rebuilding free space tree [ 75.022842][ T7752] BTRFS info (device loop2): disabling free space tree [ 75.022930][ T7752] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 75.022960][ T7752] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 75.495531][ T6502] Bluetooth: hci1: command tx timeout [ 75.853319][ T6496] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 75.979496][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 75.979568][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 75.979627][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 76.069957][ T7787] libceph: resolve '. [ 76.069957][ T7787] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)Hyo=U邋#ǤYMhE$ [ 76.069957][ T7787] ' (ret=-3): failed [ 76.095701][ T1630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.130207][ T1630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.166753][ T1630] bond0 (unregistering): Released all slaves [ 76.178986][ T7620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.199791][ T7759] veth0_to_bond: entered allmulticast mode [ 76.218953][ T7620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.321579][ T7790] loop2: detected capacity change from 0 to 32768 [ 76.374175][ T7620] team0: Port device team_slave_0 added [ 76.410594][ T6488] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.414713][ T7790] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 76.592581][ T6496] ocfs2: Unmounting device (7,2) on (node local) [ 76.631640][ T7620] team0: Port device team_slave_1 added [ 76.759781][ T7811] loop2: detected capacity change from 0 to 1764 [ 76.868065][ T7822] loop3: detected capacity change from 0 to 256 [ 76.900343][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.900402][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.900459][ T7620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.901529][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.901556][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.901596][ T7620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.909615][ T7822] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 76.965096][ T7822] exFAT-fs (loop3): error, data size is invalid(10) [ 76.965254][ T7822] exFAT-fs (loop3): Filesystem has been set read-only [ 76.981765][ T7822] exFAT-fs (loop3): error, data size is invalid(10) [ 77.017741][ T7822] exFAT-fs (loop3): error, data size is invalid(10) [ 77.018083][ T7822] exFAT-fs (loop3): error, data size is invalid(10) [ 77.381642][ T7839] loop0: detected capacity change from 0 to 4096 [ 77.398141][ T7839] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 77.431686][ T7620] hsr_slave_0: entered promiscuous mode [ 77.434038][ T7620] hsr_slave_1: entered promiscuous mode [ 77.436071][ T7620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.438620][ T7620] Cannot create hsr debugfs directory [ 77.441213][ T7839] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 77.451683][ T7839] ntfs3(loop0): Failed to load $Extend (-22). [ 77.451743][ T7839] ntfs3(loop0): Failed to initialize $Extend. [ 77.573030][ T6502] Bluetooth: hci1: command tx timeout [ 77.799893][ T7842] loop2: detected capacity change from 0 to 32768 [ 77.825774][ T7842] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 77.833478][ T1630] hsr_slave_0: left promiscuous mode [ 77.842034][ T1630] hsr_slave_1: left promiscuous mode [ 77.844452][ T1630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.868415][ T1630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.868505][ T1630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.896212][ T7842] XFS (loop2): Ending clean mount [ 77.900642][ T7846] loop3: detected capacity change from 0 to 32768 [ 77.921142][ T7846] btrfs: Unknown parameter 'check_int_data' [ 77.968895][ T1630] veth1_macvtap: left promiscuous mode [ 77.972578][ T1630] veth0_macvtap: left promiscuous mode [ 77.974539][ T1630] veth1_vlan: left promiscuous mode [ 77.976432][ T1630] veth0_vlan: left promiscuous mode [ 78.091599][ T7852] loop0: detected capacity change from 0 to 32768 [ 78.204438][ T7852] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 78.291894][ T7852] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 78.291894][ T7852] allowing incompatible features above 0.0: (unknown version) [ 78.301287][ T7852] bcachefs (loop0): initializing new filesystem [ 78.306080][ T7852] bcachefs (loop0): going read-write [ 78.388254][ T7852] bcachefs (loop0): marking superblocks [ 78.394221][ T7852] bcachefs (loop0): initializing freespace [ 78.395048][ T7852] bcachefs (loop0): done initializing freespace [ 78.395963][ T7852] bcachefs (loop0): reading snapshots table [ 78.396015][ T7852] bcachefs (loop0): reading snapshots done [ 78.429446][ T7852] bcachefs (loop0): done starting filesystem [ 78.460417][ T7883] loop3: detected capacity change from 0 to 1024 [ 78.493685][ T6488] bcachefs (loop0): shutting down [ 78.493748][ T6488] bcachefs (loop0): going read-only [ 78.493790][ T6488] bcachefs (loop0): finished waiting for writes to stop [ 78.523308][ T6488] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2 [ 78.570691][ T6971] hfsplus: b-tree write err: -5, ino 4 [ 78.572107][ T6488] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 78.575978][ T6488] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 78.603459][ T6488] bcachefs (loop0): marking filesystem clean [ 78.666229][ T6488] bcachefs (loop0): shutdown complete [ 79.652469][ T6502] Bluetooth: hci1: command tx timeout [ 79.715499][ T7890] loop0: detected capacity change from 0 to 256 [ 80.000442][ T1630] team0 (unregistering): Port device team_slave_1 removed [ 80.006916][ T7893] loop0: detected capacity change from 0 to 40427 [ 80.009262][ T7893] F2FS-fs (loop0): invalid crc value [ 80.041211][ T7893] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 80.217207][ T1630] team0 (unregistering): Port device team_slave_0 removed [ 80.305424][ T6488] syz-executor: attempt to access beyond end of device [ 80.305424][ T6488] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 80.306734][ T6488] CPU: 1 UID: 0 PID: 6488 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 80.306756][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.306763][ T6488] Call trace: [ 80.306767][ T6488] show_stack+0x2c/0x3c (C) [ 80.306785][ T6488] __dump_stack+0x30/0x40 [ 80.306797][ T6488] dump_stack_lvl+0xd8/0x12c [ 80.306807][ T6488] dump_stack+0x1c/0x28 [ 80.306816][ T6488] f2fs_handle_critical_error+0x34c/0x4b8 [ 80.306831][ T6488] f2fs_stop_checkpoint+0x58/0x6c [ 80.306843][ T6488] f2fs_write_end_io+0x794/0xadc [ 80.306857][ T6488] bio_endio+0x81c/0x858 [ 80.306871][ T6488] submit_bio_noacct+0x158/0x176c [ 80.306882][ T6488] submit_bio+0x354/0x4d4 [ 80.306892][ T6488] f2fs_submit_write_bio+0x13c/0x324 [ 80.306905][ T6488] __submit_merged_bio+0x254/0x704 [ 80.306918][ T6488] __submit_merged_write_cond+0x23c/0x4ac [ 80.306931][ T6488] f2fs_write_data_pages+0x1e9c/0x27ac [ 80.306944][ T6488] do_writepages+0x2c0/0x6a8 [ 80.306959][ T6488] filemap_fdatawrite+0x144/0x1e8 [ 80.306970][ T6488] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 80.306982][ T6488] f2fs_write_checkpoint+0x684/0x1694 [ 80.306994][ T6488] kill_f2fs_super+0x21c/0x584 [ 80.307007][ T6488] deactivate_locked_super+0xc4/0x12c [ 80.307019][ T6488] deactivate_super+0xe0/0x100 [ 80.307030][ T6488] cleanup_mnt+0x31c/0x3ac [ 80.307043][ T6488] __cleanup_mnt+0x20/0x30 [ 80.307054][ T6488] task_work_run+0x1dc/0x260 [ 80.307066][ T6488] do_notify_resume+0x16c/0x1ec [ 80.307079][ T6488] el0_svc+0xb4/0x17c [ 80.307093][ T6488] el0t_64_sync_handler+0x78/0x108 [ 80.307107][ T6488] el0t_64_sync+0x198/0x19c [ 80.308797][ T6488] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 80.477629][ T7901] loop0: detected capacity change from 0 to 256 [ 80.481473][ T7901] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.481538][ T7901] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 80.498808][ T7901] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x43c9847d, utbl_chksum : 0xe619d30d) [ 80.596419][ T7903] loop0: detected capacity change from 0 to 2048 [ 80.596967][ T7903] nilfs2: Unknown parameter 'noncovery' [ 82.492189][ T6496] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 82.517684][ T7888] gretap0: entered promiscuous mode [ 82.527189][ T7888] batman_adv: batadv0: Adding interface: macvlan2 [ 82.527248][ T7888] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.527308][ T7888] batman_adv: batadv0: Interface activated: macvlan2 [ 82.891692][ T7930] loop0: detected capacity change from 0 to 2048 [ 83.023091][ T7930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.048662][ T7930] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 83.072733][ T7930] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 1 with error 28 [ 83.072867][ T7930] EXT4-fs (loop0): This should not happen!! Data will be lost [ 83.072867][ T7930] [ 83.072911][ T7930] EXT4-fs (loop0): Total free blocks count 0 [ 83.072941][ T7930] EXT4-fs (loop0): Free/Dirty block details [ 83.072976][ T7930] EXT4-fs (loop0): free_blocks=66060288 [ 83.073010][ T7930] EXT4-fs (loop0): dirty_blocks=16 [ 83.073038][ T7930] EXT4-fs (loop0): Block reservation details [ 83.073065][ T7930] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 83.233741][ T7930] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 84.644184][ T7620] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.910470][ T7962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.912656][ T7962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.912722][ T7963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.912995][ T7963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.933759][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 84.994181][ T7620] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.015926][ T7963] fuse: Bad value for 'fd' [ 85.016176][ T7969] fuse: Bad value for 'fd' [ 86.401952][ T7965] loop3: detected capacity change from 0 to 262144 [ 86.418709][ T7965] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.214 (7965) [ 86.440932][ T7620] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.465092][ T7965] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 86.465193][ T7965] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 86.465246][ T7965] BTRFS info (device loop3): using free-space-tree [ 86.505057][ T7620] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.028848][ T7981] gretap0: entered promiscuous mode [ 87.038338][ T7981] batman_adv: batadv0: Adding interface: macvlan2 [ 87.043739][ T7981] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.053366][ T7981] batman_adv: batadv0: Interface activated: macvlan2 [ 87.084021][ T7620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.091283][ T7620] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.120160][ T7620] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.125965][ T7620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.233587][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.233671][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.234611][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.235510][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.637947][ T7620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.945329][ T8014] loop2: detected capacity change from 0 to 8192 [ 88.012458][ T8014] FAT-fs (loop2): bogus number of directory entries (3) [ 88.012668][ T8014] FAT-fs (loop2): Can't find a valid FAT filesystem [ 88.190806][ T7325] udevd[7325]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 88.225521][ T7620] veth0_vlan: entered promiscuous mode [ 88.245475][ T7620] veth1_vlan: entered promiscuous mode [ 88.282189][ T7620] veth0_macvtap: entered promiscuous mode [ 88.299667][ T7620] veth1_macvtap: entered promiscuous mode [ 88.309049][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.411809][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.413735][ T7620] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.413793][ T7620] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.413830][ T7620] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.413866][ T7620] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.697607][ T6500] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 88.908968][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.909032][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.942310][ T8014] loop2: detected capacity change from 0 to 32768 [ 89.038031][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.050572][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.081426][ T8014] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.219 (8014) [ 89.112076][ T8014] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 89.112190][ T8014] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 89.112246][ T8014] BTRFS info (device loop2): disk space caching is enabled [ 89.112286][ T8014] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 89.530864][ T8014] BTRFS info (device loop2): rebuilding free space tree [ 89.582720][ T8014] BTRFS info (device loop2): disabling free space tree [ 89.583489][ T8014] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.583558][ T8014] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.626867][ T8064] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 89.757394][ T8014] BTRFS info (device loop2): balance: start -f [ 89.768417][ T8014] BTRFS info (device loop2): balance: ended with status: 0 [ 90.049938][ T6496] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 91.517690][ T8077] loop3: detected capacity change from 0 to 32768 [ 91.528718][ T8098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.233'. [ 91.552479][ T8077] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.228 (8077) [ 91.562801][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 91.562860][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 91.562912][ T8098] netlink: 'syz.2.233': attribute type 14 has an invalid length. [ 91.562942][ T8098] netlink: 'syz.2.233': attribute type 11 has an invalid length. [ 91.691024][ T8056] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 92.305724][ T8093] loop5: detected capacity change from 0 to 32768 [ 92.635097][ T8093] BTRFS: device /dev/loop5 (7:5) using temp-fsid 1837c8c4-7b1a-4a68-b49d-89ca34f2816d [ 92.635180][ T8093] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.231 (8093) [ 92.637477][ T8077] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.637570][ T8077] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 92.637613][ T8077] BTRFS info (device loop3): using free-space-tree [ 92.671059][ T8093] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.671164][ T8093] BTRFS info (device loop5): using crc32c (crc32c-arm64) checksum algorithm [ 92.671207][ T8093] BTRFS info (device loop5): using free-space-tree [ 93.938580][ T8104] loop2: detected capacity change from 0 to 32768 [ 95.010733][ T8104] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.234 (8104) [ 95.505339][ T6500] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.292355][ C1] sched: DL replenish lagged too much [ 97.584134][ T7620] BTRFS info (device loop5): last unmount of filesystem 1837c8c4-7b1a-4a68-b49d-89ca34f2816d [ 98.154837][ T8219] batman_adv: batadv0: Adding interface: macvlan3 [ 98.174113][ T8219] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.174244][ T8219] batman_adv: batadv0: Interface activated: macvlan3 [ 98.209091][ T8222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.241'. [ 99.133093][ T8237] netlink: 'syz.1.245': attribute type 7 has an invalid length. [ 99.876931][ T8232] loop3: detected capacity change from 0 to 32768 [ 99.908073][ T8232] btrfs: Unknown parameter 'fragment' [ 100.858743][ T8214] loop5: detected capacity change from 0 to 64 [ 100.859277][ T8214] hfs: Bad value for 'gid' [ 102.156284][ T8262] loop2: detected capacity change from 0 to 32768 [ 102.198925][ T8262] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.249 (8262) [ 102.220430][ T8262] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.223528][ T8262] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 102.226186][ T8262] BTRFS info (device loop2): using free-space-tree [ 105.590380][ T6496] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.651691][ T8326] batman_adv: batadv0: Adding interface: macvlan3 [ 107.664211][ T8326] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.664341][ T8326] batman_adv: batadv0: Interface activated: macvlan3 [ 107.931794][ T8338] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 108.270482][ T8344] netlink: 36 bytes leftover after parsing attributes in process `syz.2.261'. [ 108.270637][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.261'. [ 108.270685][ T8344] netlink: 36 bytes leftover after parsing attributes in process `syz.2.261'. [ 108.270751][ T8344] netlink: 36 bytes leftover after parsing attributes in process `syz.2.261'. [ 111.749619][ T8429] gretap0: entered promiscuous mode [ 111.781373][ T8429] batman_adv: batadv0: Adding interface: macvlan3 [ 111.783512][ T8429] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.790971][ T8429] batman_adv: batadv0: Interface activated: macvlan3 [ 111.889556][ T8421] loop2: detected capacity change from 0 to 32768 [ 111.935287][ T8421] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.268 (8421) [ 112.106836][ T8421] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.109999][ T8421] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 112.115098][ T8421] BTRFS info (device loop2): disk space caching is enabled [ 112.117385][ T8421] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 115.473912][ T8421] BTRFS error (device loop2): open_ctree failed: -4 [ 117.547702][ T8483] 9pnet: Found fid 0 not clunked [ 117.640357][ T8486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.645454][ T8486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.663769][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 117.681932][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 118.444482][ T8507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.458299][ T8507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.576116][ T31] audit: type=1326 audit(120.560:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8537 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 121.576223][ T31] audit: type=1326 audit(120.560:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8537 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 121.576283][ T31] audit: type=1326 audit(120.690:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8537 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=145 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 121.576328][ T31] audit: type=1326 audit(120.690:62): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8537 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 121.576372][ T31] audit: type=1326 audit(120.690:63): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8537 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 121.576415][ T31] audit: type=1326 audit(120.800:64): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8537 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=31 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 121.576459][ T31] audit: type=1326 audit(120.800:65): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8537 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 121.576504][ T31] audit: type=1326 audit(120.800:66): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8537 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 123.754489][ T9] atkbd serio0: keyboard reset failed on [ 125.309707][ T31] audit: type=1326 audit(124.920:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8600 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 125.325094][ T31] audit: type=1326 audit(124.940:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8600 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 126.297399][ T2392] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.413345][ T6493] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 126.592532][ T6493] usb 1-1: Using ep0 maxpacket: 16 [ 126.599585][ T6493] usb 1-1: config 0 has no interfaces? [ 126.604905][ T6493] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 126.604965][ T6493] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.605007][ T6493] usb 1-1: Product: syz [ 126.605034][ T6493] usb 1-1: Manufacturer: syz [ 126.605061][ T6493] usb 1-1: SerialNumber: syz [ 126.633999][ T6493] usb 1-1: config 0 descriptor?? [ 128.505934][ T8659] loop2: detected capacity change from 0 to 7 [ 128.531102][ T8659] Dev loop2: unable to read RDB block 7 [ 128.534620][ T8659] loop2: unable to read partition table [ 128.536442][ T8659] loop2: partition table beyond EOD, truncated [ 128.538738][ T8659] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 128.810812][ T8667] sctp: [Deprecated]: syz.1.321 (pid 8667) Use of int in max_burst socket option deprecated. [ 128.810812][ T8667] Use struct sctp_assoc_value instead [ 128.831461][ T8668] Smack: duplicate mount options [ 128.931448][ T8671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.937713][ T8671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.076332][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 129.091325][ T1801] usb 1-1: USB disconnect, device number 2 [ 130.532421][ T8701] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.329'. [ 131.138949][ T8716] netlink: 'syz.5.335': attribute type 3 has an invalid length. [ 131.142531][ T8716] netlink: 'syz.5.335': attribute type 1 has an invalid length. [ 131.145171][ T8716] netlink: 216 bytes leftover after parsing attributes in process `syz.5.335'. [ 131.150553][ T8716] NCSI netlink: No device for ifindex 33022 [ 131.382639][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 136.145240][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'. [ 141.268881][ T8808] IPVS: length: 135 != 24 [ 141.975695][ T6493] libceph: connect (1)[c::]:6789 error -101 [ 141.975860][ T6493] libceph: mon0 (1)[c::]:6789 connect error [ 141.981284][ T6493] libceph: connect (1)[c::]:6789 error -101 [ 141.981433][ T6493] libceph: mon0 (1)[c::]:6789 connect error [ 142.179942][ T8799] ceph: No mds server is up or the cluster is laggy [ 142.261601][ T6493] libceph: connect (1)[c::]:6789 error -101 [ 142.261766][ T6493] libceph: mon0 (1)[c::]:6789 connect error [ 142.349619][ T8838] netlink: 36 bytes leftover after parsing attributes in process `syz.0.366'. [ 142.349689][ T8838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.366'. [ 142.349733][ T8838] netlink: 36 bytes leftover after parsing attributes in process `syz.0.366'. [ 142.349772][ T8838] netlink: 36 bytes leftover after parsing attributes in process `syz.0.366'. [ 143.258907][ T8852] netlink: 36 bytes leftover after parsing attributes in process `syz.2.368'. [ 143.258974][ T8852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.368'. [ 143.259019][ T8852] netlink: 36 bytes leftover after parsing attributes in process `syz.2.368'. [ 143.259058][ T8852] netlink: 36 bytes leftover after parsing attributes in process `syz.2.368'. [ 148.973213][ T8865] Bluetooth: MGMT ver 1.23 [ 149.084658][ T8869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.085039][ T8869] batadv_slave_0: entered promiscuous mode [ 149.085107][ T8869] batadv_slave_0: entered allmulticast mode [ 151.660021][ T6502] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 151.671189][ T6502] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.008461][ T8889] futex_wake_op: syz.0.378 tries to shift op by 144; fix this program [ 158.991600][ T8981] 9pnet_fd: Insufficient options for proto=fd [ 159.174076][ T6506] Bluetooth: hci4: command 0x0406 tx timeout [ 159.176012][ T6499] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.177968][ T6499] Bluetooth: hci3: command 0x0406 tx timeout [ 159.178444][ T6499] Bluetooth: hci2: command 0x0406 tx timeout [ 166.311906][ T9026] netlink: 'syz.2.420': attribute type 1 has an invalid length. [ 166.614388][ T9026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.710489][ T9028] bond1: (slave veth3): Enslaving as an active interface with a down link [ 166.759380][ T9031] bond1: (slave veth0_to_bond): making interface the new active one [ 166.775691][ T9031] veth0_to_bond: entered promiscuous mode [ 166.777706][ T9031] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 166.795611][ T9026] vlan2: entered allmulticast mode [ 166.797192][ T9026] veth1: entered allmulticast mode [ 166.799658][ T9026] veth1: entered promiscuous mode [ 166.801759][ T9026] veth1: left promiscuous mode [ 166.816930][ T9026] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 166.921298][ T9035] netlink: 'syz.2.423': attribute type 1 has an invalid length. [ 167.067929][ T9039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.425'. [ 188.183343][ T2392] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.543458][ T6057] Bluetooth: hci1: command 0x0406 tx timeout [ 250.705074][ T2392] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.785097][ T2392] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.735474][ T32] INFO: task kworker/u8:25:7115 blocked for more than 143 seconds. [ 321.744852][ T32] Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 [ 321.754134][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 321.763354][ T32] task:kworker/u8:25 state:D stack:0 pid:7115 tgid:7115 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 321.786240][ T32] Workqueue: events_power_efficient reg_check_chans_work [ 321.804503][ T32] Call trace: [ 321.813712][ T32] __switch_to+0x414/0x834 (T) [ 321.823296][ T32] __schedule+0x13b0/0x28d4 [ 321.832636][ T32] schedule+0xb4/0x230 [ 321.846331][ T32] schedule_preempt_disabled+0x18/0x2c [ 321.855569][ T32] __mutex_lock_common+0xbd0/0x2190 [ 321.864761][ T32] mutex_lock_nested+0x2c/0x38 [ 321.873935][ T32] reg_check_chans_work+0x11c/0xd88 [ 321.883113][ T32] process_one_work+0x7e8/0x156c [ 321.896802][ T32] worker_thread+0x958/0xed8 [ 321.905931][ T32] kthread+0x5fc/0x75c [ 321.915134][ T32] ret_from_fork+0x10/0x20 [ 321.924480][ T32] [ 321.924480][ T32] Showing all locks held in the system: [ 321.933663][ T32] 3 locks held by kworker/u8:0/12: [ 321.942714][ T32] 2 locks held by kworker/1:1/26: [ 321.956475][ T32] 1 lock held by khungtaskd/32: [ 321.965563][ T32] #0: ffff80008f508920 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 [ 322.025864][ T32] 3 locks held by kworker/u8:2/40: [ 322.035035][ T32] 3 locks held by kworker/u8:4/160: [ 322.044225][ T32] 2 locks held by kworker/u8:7/1630: [ 322.053499][ T32] 2 locks held by kworker/0:2/1801: [ 322.062909][ T32] 2 locks held by kworker/u8:8/2007: [ 322.076741][ T32] 3 locks held by udevd/6105: [ 322.085849][ T32] 1 lock held by dhcpcd/6159: [ 322.094942][ T32] 1 lock held by dhcpcd/6160: [ 322.104190][ T32] 2 locks held by getty/6258: [ 322.113358][ T32] #0: ffff0000d81c00a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 322.516742][ T32] #1: ffff80009b61b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfa0 [ 322.576676][ T32] 1 lock held by syz-executor/6488: [ 322.585951][ T32] 2 locks held by kworker/0:4/6493: [ 322.595180][ T32] 1 lock held by syz-executor/6496: [ 322.604261][ T32] 2 locks held by syz-executor/6500: [ 322.613396][ T32] 2 locks held by syz-executor/6503: [ 322.622555][ T32] 3 locks held by kworker/1:5/6542: [ 322.636287][ T32] #0: ffff0000c0028d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x658/0x156c [ 322.696853][ T32] #1: ffff8000a1f87bc0 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c [ 322.756781][ T32] #2: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 322.816508][ T32] 2 locks held by kworker/1:7/6544: [ 322.825773][ T32] 3 locks held by kworker/u8:11/6765: [ 322.834838][ T32] 4 locks held by kworker/u8:12/6767: [ 322.844005][ T32] 3 locks held by kworker/u8:13/6772: [ 322.853430][ T32] 2 locks held by kworker/u8:14/6773: [ 322.862528][ T32] 4 locks held by kworker/u8:15/6776: [ 322.876129][ T32] 3 locks held by kworker/u8:17/6787: [ 322.885409][ T32] 3 locks held by kworker/u8:19/6796: [ 322.894518][ T32] 3 locks held by kworker/u8:20/6971: [ 322.903611][ T32] 3 locks held by kworker/u8:23/6993: [ 322.912742][ T32] 3 locks held by kworker/u8:24/6994: [ 322.926373][ T32] 4 locks held by kworker/u8:25/7115: [ 322.935466][ T32] #0: ffff0000c0031948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x658/0x156c [ 324.226484][ T32] #1: ffff80009fad7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c [ 324.226556][ T32] #2: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 324.226626][ T32] #3: ffff0000f8838768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x11c/0xd88 [ 324.226699][ T32] 3 locks held by kworker/u8:27/7120: [ 324.226718][ T32] #0: ffff0000d3345148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x658/0x156c [ 324.226787][ T32] #1: ffff80009f8f7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c [ 324.226856][ T32] #2: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 324.226923][ T32] 3 locks held by kworker/u8:29/7128: [ 324.226943][ T32] 2 locks held by syz-executor/7620: [ 324.226967][ T32] 4 locks held by kworker/0:5/9054: [ 324.226986][ T32] 3 locks held by syz-executor/9055: [ 324.227008][ T32] [ 324.227025][ T32] ============================================= [ 324.227025][ T32] [ 324.227043][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 324.295248][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 324.298096][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 324.300821][ T32] Call trace: [ 324.301686][ T32] show_stack+0x2c/0x3c (C) [ 324.302943][ T32] __dump_stack+0x30/0x40 [ 324.304108][ T32] dump_stack_lvl+0x30/0x12c [ 324.305316][ T32] dump_stack+0x1c/0x28 [ 324.306396][ T32] panic+0x2bc/0x7ac [ 324.307475][ T32] hung_task_panic+0x0/0x2c [ 324.308704][ T32] kthread+0x5fc/0x75c [ 324.309833][ T32] ret_from_fork+0x10/0x20 [ 324.311046][ T32] SMP: stopping secondary CPUs [ 324.312465][ T32] Kernel Offset: disabled [ 324.313678][ T32] CPU features: 0x0800,000040e0,01000250,82017203 [ 324.315505][ T32] Memory Limit: none [ 324.720498][ T32] Rebooting in 86400 seconds..