last executing test programs: 11.209469643s ago: executing program 2 (id=257): close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 9.349664774s ago: executing program 2 (id=273): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x894, &(0x7f0000000140)={0x0, 0xf4dc, 0x0, 0x2, 0xbfdff7f8}, 0x0, &(0x7f00000001c0)) socket(0x200000000000011, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x800, 0x0, 0x10, 0x0, 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0xffff}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x2000000000003) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) 6.197041042s ago: executing program 2 (id=322): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 4.129493748s ago: executing program 1 (id=341): socket(0x840000000002, 0x3, 0xf8) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7U#\xcf`\x88\xb3}\xa89i\xdf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa92\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\xeaE', 0x0) socket$inet6(0xa, 0x1000080002, 0x100000000000088) socket$inet6(0xa, 0x802, 0x88) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x6, 0x40, 0x0, 0xd, 0x0, 0x4}, 0x0, &(0x7f0000000380)={0x7ff, 0x7, 0xc, 0x7, 0x7, 0x6, 0x5, 0x7}, 0x0, 0x0) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x4800105c, r2, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.278258435s ago: executing program 3 (id=356): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x7e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600), &(0x7f00000001c0), 0x71, r0}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r0, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.225166083s ago: executing program 3 (id=359): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000b70900000000000006090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0xc, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.172875362s ago: executing program 3 (id=361): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) 3.125663661s ago: executing program 1 (id=362): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95) 3.068258251s ago: executing program 2 (id=364): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000080)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0x110000, @loopback, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) 2.997599898s ago: executing program 4 (id=365): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="db", 0x1}], 0x1, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8000}}], 0x18}}], 0x2, 0x4000000) 2.997113689s ago: executing program 4 (id=366): add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x500, 0x2, 0x2, 0x0, 0x1}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x20000003}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffca) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000300)}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) fcntl$addseals(r6, 0x409, 0x7) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94ea3c92b", 0x14}], 0x1}, 0x40) ioctl$UDMABUF_CREATE(r5, 0x40187542, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000240)=0x9, 0x4) sendto(r1, 0x0, 0x0, 0x8000, &(0x7f00000001c0)=@hci={0x1f, 0xffffffffffffffff}, 0x80) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000080)=0x40000) 2.695592357s ago: executing program 3 (id=371): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r3, 0x400, 0x0) mq_unlink(&(0x7f0000001440)='%\xbc\xbf;-\xe2\xe0\x8d\xb9\xd8\xa4>\x82sII\x81P!\t\x04\x11t\xd4\x1e\x94&\xb1\xc6\x00`R\xfc\x9cF\xd4\x18\b\xb1\x04\xa1K@?\x97\x1b`\x1f\x1d<\xc6\n\x1b\xa0\x8bP\xcc\x13Q2H\xba\xbc\x18\xbd\xbe\xf8\b*\xf5\xdf\xb2\xd5+\x86$,& \xdc\xb8\xb7\x90\xc4\x948\xb5\n\xc2\"y-0\x88\x91\xbb[\x10?V\x9e\x94mB\x7fz\x1a:o\xe5\xe3f\xae\x03\xc7\x98\x95a\xfc\xb4\x96\xf0\xb6\"\x92\xbet\xec\x8d\x11\xcb\x9fpr.2\xe3\xca#\x18\x9b\x15\x1b\x9a\xdb\xb8\xf1]\xa3\xd9\xfa\xa5;Djo\x83\xba\xf9\xae\a)#J\x00'/176) close(r3) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x7bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x4], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="14000800130a030300000000010000fa21d72c5d61680000000100"], 0x14}, 0x1, 0x0, 0x0, 0x20006900}, 0x40000) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r5, 0x84, 0x6d, &(0x7f0000000000)=""/4102, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) 2.552022826s ago: executing program 0 (id=373): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) syz_usb_connect(0x0, 0x3d7, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 2.551785691s ago: executing program 1 (id=374): r0 = semget$private(0x0, 0x3, 0x4) semctl$GETALL(r0, 0x0, 0xd, 0xfffffffffffffffe) 2.465694834s ago: executing program 1 (id=375): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa000000000000000003000500000000000a"], 0x50}, 0x1, 0x7}, 0x20000000) 2.117700277s ago: executing program 1 (id=376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @key_params]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 2.043174213s ago: executing program 1 (id=377): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001840)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.968603868s ago: executing program 2 (id=378): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000019080)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="4b979fc5100000dd46b001fe944e827bf253fea454", 0x15}, {&(0x7f00000190c0)="e3", 0x1}, {0x0}], 0x3}}], 0x1, 0x24008804) sendmmsg$alg(r1, &(0x7f0000003b80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}], 0x1, 0x10) 1.529041302s ago: executing program 2 (id=379): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, 0x0, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000080)={0x5, 0x802}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1.528739101s ago: executing program 4 (id=380): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40cc844) socket$inet6_sctp(0xa, 0x1, 0x84) listen(0xffffffffffffffff, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000) 609.816389ms ago: executing program 4 (id=381): mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) 591.654353ms ago: executing program 0 (id=382): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x19, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x90, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) 393.022143ms ago: executing program 3 (id=383): timerfd_create(0x7, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1000, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f4, 0x0, 0x0, 0x0, 0x0) 285.464409ms ago: executing program 0 (id=384): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2ac, 0x30, 0x800, 0x71bd2a, 0x25dfdbff, {}, [{0x298, 0x1, [@m_gact={0x170, 0x17, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1ae8, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x65d6, 0x1, 0x8, 0xb, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12c5, 0x20000005}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x8, 0x0, 0xbd1c, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x583, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xaeb, 0x20000000}}]}, {0xe1, 0x6, "0f617356f0a663079abe295a350af32575b7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224474cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51ba59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9c6fc16198b2cfa20bc906e08c92c0642310e03f00a0ed12baa1df64f1bf0502f23ff4d6a5e05aa81fa19a9b88c32227231211d5d298a3c63d5549b1a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0xb0, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x79, 0x6, "bd3a5376a2440c64d6314cc7f446e251aa486d1931d16d2a624d085a1be90b436fdedf917b760ef37b4272893313d629bb02bcd42142bb0469eba6b0eddd9bc3612d9b46c64f145f45c89cb5bb716f4a44dc897bd951f9775a35dd8303b774f0c02924dc414d297ae96eb8e36c2dfb53b25733fc0f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x44, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "644cfabbe56830b72d4965b0f9c601f7e7"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 285.197719ms ago: executing program 4 (id=385): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)={0xc}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) 166.671773ms ago: executing program 4 (id=386): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2b, 0x1, 0x1) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 165.696198ms ago: executing program 0 (id=387): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)={0x28, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044045}, 0x4044010) 143.767596ms ago: executing program 3 (id=388): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x5, 0x4, 0x0, &(0x7f0000048000), 0x1000000) 17.70631ms ago: executing program 0 (id=389): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8201000000420000140003006272696467655f736c6176655f30000008000400d4000000600016805c000180100002"], 0x9c}}, 0x0) 0s ago: executing program 0 (id=390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. [ 35.749460][ T6478] cgroup: Unknown subsys name 'net' [ 36.003572][ T6478] cgroup: Unknown subsys name 'cpuset' [ 36.007390][ T6478] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 36.373684][ T6478] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 38.852632][ T6491] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.856689][ T6497] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.857259][ T6497] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.861518][ T6497] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.861783][ T6497] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.864157][ T6497] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.866275][ T6497] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.870593][ T6491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.876860][ T6498] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.877222][ T6498] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.877943][ T6498] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.878407][ T6498] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.879412][ T6058] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.880024][ T6058] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.881518][ T6058] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.894049][ T6502] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.896319][ T6504] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.902974][ T6058] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.902997][ T6504] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 38.903951][ T6058] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.904396][ T6058] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.918554][ T6497] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 38.923742][ T6058] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 38.929584][ T6058] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 38.938541][ T6058] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 39.199540][ T6500] chnl_net:caif_netlink_parms(): no params data found [ 39.241718][ T6495] chnl_net:caif_netlink_parms(): no params data found [ 39.432975][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.433148][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.433299][ T6500] bridge_slave_0: entered allmulticast mode [ 39.434203][ T6500] bridge_slave_0: entered promiscuous mode [ 39.436338][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.436390][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.436522][ T6500] bridge_slave_1: entered allmulticast mode [ 39.437412][ T6500] bridge_slave_1: entered promiscuous mode [ 39.468432][ T6489] chnl_net:caif_netlink_parms(): no params data found [ 39.490909][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.493005][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.495201][ T6495] bridge_slave_0: entered allmulticast mode [ 39.498545][ T6495] bridge_slave_0: entered promiscuous mode [ 39.502114][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.503371][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.503502][ T6495] bridge_slave_1: entered allmulticast mode [ 39.504329][ T6495] bridge_slave_1: entered promiscuous mode [ 39.507428][ T6499] chnl_net:caif_netlink_parms(): no params data found [ 39.537360][ T6500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.579791][ T6500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.594178][ T6495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.596908][ T6490] chnl_net:caif_netlink_parms(): no params data found [ 39.627362][ T6495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.653280][ T6500] team0: Port device team_slave_0 added [ 39.657291][ T6500] team0: Port device team_slave_1 added [ 39.674129][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.674249][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.674410][ T6489] bridge_slave_0: entered allmulticast mode [ 39.675296][ T6489] bridge_slave_0: entered promiscuous mode [ 39.677514][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.677562][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.677686][ T6489] bridge_slave_1: entered allmulticast mode [ 39.678535][ T6489] bridge_slave_1: entered promiscuous mode [ 39.728147][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.728221][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.728286][ T6500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.746093][ T6495] team0: Port device team_slave_0 added [ 39.749476][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.774142][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.774199][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.774512][ T6500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.780441][ T6499] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.780524][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.780667][ T6499] bridge_slave_0: entered allmulticast mode [ 39.781579][ T6499] bridge_slave_0: entered promiscuous mode [ 39.783990][ T6495] team0: Port device team_slave_1 added [ 39.796996][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.813524][ T6499] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.813639][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.813764][ T6499] bridge_slave_1: entered allmulticast mode [ 39.814681][ T6499] bridge_slave_1: entered promiscuous mode [ 39.842602][ T6489] team0: Port device team_slave_0 added [ 39.846161][ T6489] team0: Port device team_slave_1 added [ 39.859773][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.862034][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.862112][ T6495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.889817][ T6499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.890930][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.890957][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.890998][ T6495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.906407][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.906552][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.906675][ T6490] bridge_slave_0: entered allmulticast mode [ 39.907574][ T6490] bridge_slave_0: entered promiscuous mode [ 39.927891][ T6499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.936061][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.938200][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.941085][ T6490] bridge_slave_1: entered allmulticast mode [ 39.942213][ T6490] bridge_slave_1: entered promiscuous mode [ 39.957066][ T6500] hsr_slave_0: entered promiscuous mode [ 39.957718][ T6500] hsr_slave_1: entered promiscuous mode [ 39.959514][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.959545][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.959585][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.996364][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.996425][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.996743][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.019167][ T6495] hsr_slave_0: entered promiscuous mode [ 40.019721][ T6495] hsr_slave_1: entered promiscuous mode [ 40.020106][ T6495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.020199][ T6495] Cannot create hsr debugfs directory [ 40.022917][ T6499] team0: Port device team_slave_0 added [ 40.024750][ T6499] team0: Port device team_slave_1 added [ 40.027039][ T6490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.060125][ T6490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.101570][ T6499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.101638][ T6499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.101683][ T6499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.102792][ T6499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.102818][ T6499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.102851][ T6499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.150968][ T6490] team0: Port device team_slave_0 added [ 40.161820][ T6489] hsr_slave_0: entered promiscuous mode [ 40.162406][ T6489] hsr_slave_1: entered promiscuous mode [ 40.162793][ T6489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.162823][ T6489] Cannot create hsr debugfs directory [ 40.178485][ T6490] team0: Port device team_slave_1 added [ 40.181878][ T6499] hsr_slave_0: entered promiscuous mode [ 40.182520][ T6499] hsr_slave_1: entered promiscuous mode [ 40.182839][ T6499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.182868][ T6499] Cannot create hsr debugfs directory [ 40.308354][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.311192][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.319293][ T6490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.322362][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.322389][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.322433][ T6490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.469730][ T6490] hsr_slave_0: entered promiscuous mode [ 40.475263][ T6490] hsr_slave_1: entered promiscuous mode [ 40.475707][ T6490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.475742][ T6490] Cannot create hsr debugfs directory [ 40.484849][ T6500] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.493609][ T6500] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.496602][ T6500] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.513334][ T6500] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.565383][ T6489] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.574512][ T6489] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.602674][ T6489] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.606717][ T6489] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.661409][ T6499] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.666768][ T6499] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.679794][ T6499] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.685659][ T6499] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.706108][ T6500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.733746][ T6500] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.758878][ T6495] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.766748][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.766888][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.769022][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.769074][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.782965][ T6495] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.787099][ T6495] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.791611][ T6495] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.854786][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.877371][ T6489] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.903313][ T501] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.903403][ T501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.904522][ T501] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.904568][ T501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.952836][ T6491] Bluetooth: hci0: command tx timeout [ 40.953123][ T6491] Bluetooth: hci4: command tx timeout [ 40.953280][ T6491] Bluetooth: hci3: command tx timeout [ 40.953388][ T6491] Bluetooth: hci1: command tx timeout [ 40.953489][ T6491] Bluetooth: hci2: command tx timeout [ 40.962766][ T6499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.998053][ T6500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.006606][ T6490] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 41.010722][ T6490] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 41.014877][ T6490] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 41.019223][ T6490] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 41.052985][ T6495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.058271][ T6499] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.078492][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.078572][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.101384][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.101472][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.113828][ T6500] veth0_vlan: entered promiscuous mode [ 41.124407][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.128969][ T6495] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.142358][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.142457][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.155976][ T6500] veth1_vlan: entered promiscuous mode [ 41.177548][ T4085] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.177624][ T4085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.205184][ T6489] veth0_vlan: entered promiscuous mode [ 41.226973][ T6495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.227718][ T6495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.232834][ T6489] veth1_vlan: entered promiscuous mode [ 41.264292][ T6500] veth0_macvtap: entered promiscuous mode [ 41.270645][ T6500] veth1_macvtap: entered promiscuous mode [ 41.294933][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.307940][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.319487][ T6489] veth0_macvtap: entered promiscuous mode [ 41.324191][ T6489] veth1_macvtap: entered promiscuous mode [ 41.338842][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.343718][ T6500] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.346468][ T6500] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.349227][ T6500] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.353521][ T6500] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.366363][ T6490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.387213][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.389828][ T6489] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.390140][ T6489] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.390183][ T6489] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.394133][ T6489] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.429111][ T6490] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.473928][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.474023][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.474882][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.474927][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.496217][ T6499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.530456][ T6495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.593349][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.593443][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.613873][ T4085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.616308][ T4085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.628171][ T6495] veth0_vlan: entered promiscuous mode [ 41.662509][ T6499] veth0_vlan: entered promiscuous mode [ 41.666060][ T305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.668635][ T305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.678267][ T6499] veth1_vlan: entered promiscuous mode [ 41.688900][ T6495] veth1_vlan: entered promiscuous mode [ 41.713920][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.713988][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.729456][ T6490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.745649][ T6499] veth0_macvtap: entered promiscuous mode [ 41.747716][ T6499] veth1_macvtap: entered promiscuous mode [ 41.758186][ T6489] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.803651][ T6499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.806652][ T6495] veth0_macvtap: entered promiscuous mode [ 41.819359][ T6495] veth1_macvtap: entered promiscuous mode [ 41.829541][ T6499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.834380][ T6499] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.834424][ T6499] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.834457][ T6499] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.834490][ T6499] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.868452][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.901204][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.919317][ T6574] loop1: detected capacity change from 0 to 512 [ 41.934751][ T6495] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.934828][ T6495] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.934859][ T6495] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.934888][ T6495] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.980148][ T6574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.032254][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.032326][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.066781][ T6574] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 42.076881][ T31] audit: type=1400 audit(41.680:2): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=6573 comm="syz.1.2" name="/" dev="loop1" ino=2 [ 42.087963][ T4085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.088026][ T4085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.096244][ T6574] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 42.096890][ T6574] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 42.097159][ T6574] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 42.107524][ T31] audit: type=1400 audit(41.700:3): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=6573 comm="syz.1.2" name="/" dev="loop1" ino=2 [ 42.166564][ T6489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.168886][ T6490] veth0_vlan: entered promiscuous mode [ 42.177107][ T6490] veth1_vlan: entered promiscuous mode [ 42.215334][ T305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.215406][ T305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.326826][ T6582] loop2: detected capacity change from 0 to 32768 [ 42.374118][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.374185][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.390204][ T6490] veth0_macvtap: entered promiscuous mode [ 42.444877][ T6490] veth1_macvtap: entered promiscuous mode [ 42.518196][ T6582] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 42.555901][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.578653][ T6582] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,background_target=invalid device 79,nojournal_transaction_names [ 42.578653][ T6582] allowing incompatible features above 0.0: (unknown version) [ 42.601154][ T6582] bcachefs (loop2): initializing new filesystem [ 42.604590][ T6582] bcachefs (loop2): going read-write [ 42.608980][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.626027][ T6490] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.626101][ T6490] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.626131][ T6490] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.626161][ T6490] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.688796][ T6582] bcachefs (loop2): marking superblocks [ 42.726317][ T6582] bcachefs (loop2): initializing freespace [ 42.729277][ T6582] bcachefs (loop2): done initializing freespace [ 42.734444][ T6582] bcachefs (loop2): reading snapshots table [ 42.736280][ T6582] bcachefs (loop2): reading snapshots done [ 42.786310][ T6582] bcachefs (loop2): done starting filesystem [ 42.786416][ T6602] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 42.786555][ T6602] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 42.787393][ T6602] vhci_hcd vhci_hcd.0: Device attached [ 42.788949][ T6607] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 42.788978][ T6607] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 42.789041][ T6607] vhci_hcd vhci_hcd.0: Device attached [ 42.802331][ T6602] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 42.807396][ T6604] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(6) [ 42.807441][ T6604] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 42.807978][ T6604] vhci_hcd vhci_hcd.0: Device attached [ 42.897416][ T6612] vhci_hcd: connection closed [ 42.898156][ T6608] vhci_hcd: connection closed [ 42.900078][ T6609] vhci_hcd: connection closed [ 42.910043][ T12] vhci_hcd: stop threads [ 42.912283][ T12] vhci_hcd: release socket [ 42.921625][ T12] vhci_hcd: disconnect device [ 42.922029][ T12] vhci_hcd: stop threads [ 42.922058][ T12] vhci_hcd: release socket [ 42.922351][ T12] vhci_hcd: disconnect device [ 42.933875][ T12] vhci_hcd: stop threads [ 42.933948][ T12] vhci_hcd: release socket [ 42.934000][ T12] vhci_hcd: disconnect device [ 42.938429][ T6597] loop3: detected capacity change from 0 to 32768 [ 42.965801][ T6597] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4 (6597) [ 42.972785][ T6545] vhci_hcd: vhci_device speed not set [ 43.000688][ T305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.000730][ T305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.063093][ T6491] Bluetooth: hci2: command tx timeout [ 43.063164][ T6491] Bluetooth: hci1: command tx timeout [ 43.063216][ T6491] Bluetooth: hci3: command tx timeout [ 43.063256][ T6491] Bluetooth: hci4: command tx timeout [ 43.063296][ T6491] Bluetooth: hci0: command tx timeout [ 43.113383][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.113435][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.139540][ T6597] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 43.139685][ T6597] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 43.139758][ T6597] BTRFS info (device loop3): using free-space-tree [ 43.302752][ T6634] loop1: detected capacity change from 0 to 256 [ 43.339527][ T31] audit: type=1326 audit(42.860:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5d5a768 code=0x7ffc0000 [ 43.345958][ T31] audit: type=1326 audit(42.860:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5d5a768 code=0x7ffc0000 [ 43.346157][ T31] audit: type=1326 audit(42.870:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa5d5a768 code=0x7ffc0000 [ 43.346367][ T31] audit: type=1326 audit(42.870:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5d5a768 code=0x7ffc0000 [ 43.346572][ T31] audit: type=1326 audit(42.870:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5d5a768 code=0x7ffc0000 [ 43.346785][ T31] audit: type=1326 audit(42.870:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffffa5d5a768 code=0x7ffc0000 [ 43.346985][ T31] audit: type=1326 audit(42.870:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5d5a768 code=0x7ffc0000 [ 43.347185][ T31] audit: type=1326 audit(42.880:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5d5a768 code=0x7ffc0000 [ 43.863091][ T6626] loop0: detected capacity change from 0 to 1024 [ 43.863662][ T6626] ======================================================= [ 43.863662][ T6626] WARNING: The mand mount option has been deprecated and [ 43.863662][ T6626] and is ignored by this kernel. Remove the mand [ 43.863662][ T6626] option from the mount to silence this warning. [ 43.863662][ T6626] ======================================================= [ 44.049308][ T6500] bcachefs (loop2): shutting down [ 44.049430][ T6500] bcachefs (loop2): going read-only [ 44.049594][ T6500] bcachefs (loop2): finished waiting for writes to stop [ 44.106513][ T6500] bcachefs (loop2): flushing journal and stopping allocators, journal seq 6 [ 44.188321][ T6500] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 7 [ 44.197429][ T6500] bcachefs (loop2): clean shutdown complete, journal seq 8 [ 44.241716][ T6500] bcachefs (loop2): marking filesystem clean [ 44.300782][ T6649] loop1: detected capacity change from 0 to 16 [ 44.301820][ T6649] erofs: Bad value for 'dax' [ 44.382192][ T6500] bcachefs (loop2): shutdown complete [ 44.444724][ T6654] loop0: detected capacity change from 0 to 512 [ 44.466951][ T6654] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.478091][ T6499] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 44.497450][ T6654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.499689][ T6654] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.614941][ T6661] loop0: detected capacity change from 0 to 2048 [ 44.615613][ T6661] udf: Bad value for 'session' [ 44.656467][ T6641] loop4: detected capacity change from 0 to 32768 [ 44.940305][ T6663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 45.112085][ T55] Bluetooth: hci0: command tx timeout [ 45.114544][ T55] Bluetooth: hci4: command tx timeout [ 45.117133][ T55] Bluetooth: hci3: command tx timeout [ 45.119626][ T55] Bluetooth: hci1: command tx timeout [ 45.122241][ T55] Bluetooth: hci2: command tx timeout [ 45.546170][ T6666] loop6: detected capacity change from 0 to 524287999 [ 45.546676][ T6666] Buffer I/O error on dev loop6, logical block 0, async page read [ 45.546844][ T6666] Buffer I/O error on dev loop6, logical block 0, async page read [ 45.546918][ T6666] Buffer I/O error on dev loop6, logical block 0, async page read [ 45.546990][ T6666] Buffer I/O error on dev loop6, logical block 0, async page read [ 45.547077][ T6666] Buffer I/O error on dev loop6, logical block 0, async page read [ 45.547170][ T6666] Buffer I/O error on dev loop6, logical block 0, async page read [ 45.547251][ T6666] Buffer I/O error on dev loop6, logical block 0, async page read [ 45.547321][ T6666] Buffer I/O error on dev loop6, logical block 0, async page read [ 45.547374][ T6666] ldm_validate_partition_table(): Disk read failed. [ 45.547428][ T6666] Buffer I/O error on dev loop6, logical block 0, async page read [ 45.547498][ T6666] Buffer I/O error on dev loop6, logical block 0, async page read [ 45.547631][ T6666] Dev loop6: unable to read RDB block 0 [ 45.547987][ T6666] loop6: unable to read partition table [ 45.548121][ T6666] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 45.637137][ T6656] loop1: detected capacity change from 0 to 32768 [ 46.266275][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 46.276774][ T6688] 8021q: VLANs not supported on wg1 [ 46.465382][ T6700] PKCS7: Unknown OID: [4] 0.38.35.0.956032.117(bad) [ 46.465488][ T6700] PKCS7: Only support pkcs7_signedData type [ 46.540725][ T6696] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.563338][ T6684] loop3: detected capacity change from 0 to 32768 [ 46.563955][ T6684] btrfs: Bad value for 'max_inline' [ 46.642482][ T6696] Zero length message leads to an empty skb [ 46.837460][ T6684] loop3: detected capacity change from 0 to 4096 [ 46.846838][ T6684] ntfs3: Unknown parameter 'case' [ 46.879281][ T6656] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 46.941690][ T6656] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=zstd,norecovery,nojournal_transaction_names,nocow [ 46.941690][ T6656] allowing incompatible features above 0.0: (unknown version) [ 46.963620][ T6656] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 46.963800][ T6656] bcachefs (loop1): Version upgrade required: [ 46.963800][ T6656] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 46.963800][ T6656] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 46.963800][ T6656] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 46.980104][ T6656] bcachefs (loop1): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 46.980463][ T6656] bcachefs (loop1): bcachefs (loop1): error validating btree node on loop1 at btree extents level 0/0 [ 46.980483][ T6656] u64s 11 type btree_ptr_v2 18446744073707239423:U64_MAX:U32_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 46.980496][ T6656] node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX, btree topology error: [ 46.980713][ T6656] bcachefs (loop1): flagging btree extents lost data [ 46.980819][ T6656] bcachefs (loop1): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 46.981508][ T6656] bcachefs (loop1): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 47.035366][ T6656] bcachefs (loop1): bcachefs (loop1): error validating btree node at btree alloc level 0/0 [ 47.035433][ T6656] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 47.035462][ T6656] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 47.035878][ T6656] bcachefs (loop1): btree_node_read_work: rewriting btree node at due to error [ 47.035878][ T6656] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 47.067027][ T6656] bcachefs (loop1): scan_for_btree_nodes... [ 47.101752][ T6705] loop4: detected capacity change from 0 to 32768 [ 47.108243][ T6705] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.27 (6705) [ 47.115614][ T6705] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 47.120337][ T6705] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 47.122935][ T6705] BTRFS info (device loop4): using free-space-tree [ 47.137103][ T6656] bcachefs (loop1): btree node scan found 7 nodes after overwrites [ 47.137172][ T6656] done [ 47.137365][ T6656] bcachefs (loop1): check_topology... [ 47.138189][ T6656] bcachefs (loop1): btree root extents unreadable, must recover from scan [ 47.138353][ T6656] bcachefs (loop1): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX [ 47.138440][ T6656] bcachefs (loop1): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 47.141725][ T6656] done [ 47.141879][ T6656] bcachefs (loop1): accounting_read... done [ 47.192400][ T6656] bcachefs (loop1): alloc_read... done [ 47.192582][ T6656] bcachefs (loop1): snapshots_read... done [ 47.192746][ T6656] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 47.193570][ T6656] bcachefs (loop1): done starting filesystem [ 47.193775][ T6491] Bluetooth: hci2: command tx timeout [ 47.193840][ T6491] Bluetooth: hci1: command tx timeout [ 47.193880][ T6491] Bluetooth: hci3: command tx timeout [ 47.193918][ T6491] Bluetooth: hci4: command tx timeout [ 47.193956][ T6491] Bluetooth: hci0: command tx timeout [ 47.246650][ T6656] bcachefs (loop1): btree_path_down(): fatal error node not found at pos 536870912:1:U32_MAX within parent node u64s 5 type btree_ptr SPOS_MAX len 0 ver 0 [ 47.247509][ T6656] bcachefs (loop1): fatal error - emergency read only [ 47.247775][ T6656] bcachefs (loop1): /file1 offset 0: data read error: btree_need_topology_repair [ 47.255740][ T6726] loop3: detected capacity change from 0 to 2048 [ 47.441221][ T6489] bcachefs (loop1): shutting down [ 47.517295][ T6489] bcachefs (loop1): shutdown complete [ 47.535109][ T6490] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 47.626935][ T6727] loop2: detected capacity change from 0 to 32768 [ 47.668709][ T6727] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 47.743471][ T6727] XFS (loop2): Ending clean mount [ 48.174719][ T6500] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 48.365719][ T6767] netlink: 104 bytes leftover after parsing attributes in process `syz.0.39'. [ 48.402358][ T6755] loop3: detected capacity change from 0 to 32768 [ 48.405443][ T6755] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.35 (6755) [ 48.419919][ T6755] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 48.423989][ T6755] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 48.533388][ T6759] loop4: detected capacity change from 0 to 32768 [ 48.555728][ T6755] BTRFS info (device loop3): rebuilding free space tree [ 48.606889][ T6755] BTRFS info (device loop3): disabling free space tree [ 48.606998][ T6755] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 48.607081][ T6755] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 48.861923][ T6759] bcachefs (baafa011-d992-4344-aaf9-4ff0e0bec0ff): Using encoding defined by superblock: utf8-12.1.0 [ 48.952320][ T6759] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc64,metadata_target=/dev/loop4,noinodes_use_key_cache,degraded,journal_flush_disabled,fsck,fix_errors=ask,nojournal_transaction_names [ 48.952320][ T6759] allowing incompatible features above 0.0: (unknown version) [ 48.952483][ T6759] bcachefs (loop4): recovering from clean shutdown, journal seq 13 [ 48.972293][ T6759] bcachefs (loop4): Version upgrade required: [ 48.972293][ T6759] Version upgrade from 0.32: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 48.972293][ T6759] Doing incompatible version upgrade from 0.32: (unknown version) to 1.25: extent_flags [ 48.972293][ T6759] running recovery passes: check_allocations,check_extents_to_backpointers,check_snapshots,check_subvols,check_inodes,check_dirents,set_fs_needs_rebalance [ 48.995124][ T6759] bcachefs (loop4): accounting_read... done [ 49.044523][ T6759] bcachefs (loop4): alloc_read... done [ 49.044602][ T6759] bcachefs (loop4): snapshots_read... done [ 49.044687][ T6759] bcachefs (loop4): check_allocations... [ 49.071321][ T6759] bcachefs (loop4): bucket 0:25 gen 0 has wrong data_type: got free, should be journal, fixing [ 49.071630][ T6759] bcachefs (loop4): bucket 0:25 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 49.076040][ T6759] done [ 49.087226][ T6759] bcachefs (loop4): going read-write [ 49.100614][ T6759] bcachefs (loop4): journal_replay... [ 49.119565][ T6759] bcachefs (loop4): u64s 13 type alloc_v4 0:25:0 len 0 ver 0: [ 49.119624][ T6759] gen 0 oldest_gen 0 data_type journal [ 49.119652][ T6759] journal_seq_nonempty 0 [ 49.119662][ T6759] journal_seq_empty 0 [ 49.119671][ T6759] need_discard 0 [ 49.119681][ T6759] need_inc_gen 0 [ 49.119690][ T6759] dirty_sectors 256 [ 49.119700][ T6759] stripe_sectors 0 [ 49.119709][ T6759] cached_sectors 0 [ 49.119718][ T6759] stripe 0 [ 49.119727][ T6759] stripe_redundancy 0 [ 49.119737][ T6759] io_time[READ] 0 [ 49.119746][ T6759] io_time[WRITE] 0 [ 49.119755][ T6759] fragmentation 0 [ 49.119772][ T6759] bp_start 8 [ 49.119782][ T6759] [ 49.119791][ T6759] incorrectly set at freespace:0:25:0 (free 0, genbits 0 should be 0), fix? [ 49.163790][ T6759] done [ 49.165137][ T6759] bcachefs (loop4): check_alloc_info... [ 49.166423][ T6759] bcachefs (loop4): bucket incorrectly set in freespace btree [ 49.166469][ T6759] u64s 13 type alloc_v4 0:25:0 len 0 ver 0: [ 49.166485][ T6759] gen 0 oldest_gen 0 data_type journal [ 49.166495][ T6759] journal_seq_nonempty 0 [ 49.166504][ T6759] journal_seq_empty 0 [ 49.166514][ T6759] need_discard 0 [ 49.166523][ T6759] need_inc_gen 0 [ 49.166532][ T6759] dirty_sectors 256 [ 49.166541][ T6759] stripe_sectors 0 [ 49.166550][ T6759] cached_sectors 0 [ 49.166559][ T6759] stripe 0 [ 49.166568][ T6759] stripe_redundancy 0 [ 49.166577][ T6759] io_time[READ] 0 [ 49.166586][ T6759] io_time[WRITE] 0 [ 49.166595][ T6759] fragmentation 0 [ 49.166604][ T6759] bp_start 8 [ 49.166613][ T6759] , fixing [ 49.189357][ T6759] done [ 49.192385][ T6759] bcachefs (loop4): check_lrus... done [ 49.194814][ T6759] bcachefs (loop4): check_btree_backpointers... done [ 49.195077][ T6759] bcachefs (loop4): check_backpointers_to_extents... done [ 49.219578][ T6759] bcachefs (loop4): check_extents_to_backpointers... [ 49.220986][ T6759] bcachefs (loop4): scanning for missing backpointers in 6/128 buckets [ 49.221927][ T6759] done [ 49.234676][ T6759] bcachefs (loop4): check_alloc_to_lru_refs... done [ 49.236522][ T6759] bcachefs (loop4): check_snapshot_trees... done [ 49.236571][ T6759] bcachefs (loop4): check_snapshots... [ 49.236943][ T6759] bcachefs (loop4): snapshot points to missing/incorrect tree: [ 49.236956][ T6759] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent 0 children 0 0 subvol 1 tree 0, fixing [ 49.249932][ T6759] done [ 49.289597][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 49.293719][ T6759] bcachefs (loop4): check_subvols... done [ 49.294532][ T6759] bcachefs (loop4): check_subvol_children... done [ 49.294598][ T6759] bcachefs (loop4): delete_dead_snapshots... done [ 49.294628][ T6759] bcachefs (loop4): check_inodes... done [ 49.295054][ T6759] bcachefs (loop4): check_extents... done [ 49.295443][ T6759] bcachefs (loop4): check_indirect_extents... done [ 49.295490][ T6759] bcachefs (loop4): check_dirents... done [ 49.296185][ T6759] bcachefs (loop4): check_xattrs... done [ 49.296466][ T6759] bcachefs (loop4): check_root... done [ 49.296571][ T6759] bcachefs (loop4): check_unreachable_inodes... done [ 49.296676][ T6759] bcachefs (loop4): check_subvolume_structure... done [ 49.296727][ T6759] bcachefs (loop4): check_directory_structure... done [ 49.297030][ T6759] bcachefs (loop4): check_nlinks... done [ 49.297305][ T6759] bcachefs (loop4): resume_logged_ops... done [ 49.297351][ T6759] bcachefs (loop4): delete_dead_inodes... done [ 49.297668][ T6759] bcachefs (loop4): set_fs_needs_rebalance... done [ 49.328823][ T6759] bcachefs (loop4): done starting filesystem [ 49.370772][ T6820] overlayfs: failed to resolve './file2': -2 [ 49.375278][ T6817] bond1: entered allmulticast mode [ 49.384534][ T6817] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.515969][ T6822] loop2: detected capacity change from 0 to 512 [ 49.594750][ T6816] loop1: detected capacity change from 0 to 32768 [ 49.596991][ T6822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.600092][ T6499] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 49.624889][ T31] kauditd_printk_skb: 31 callbacks suppressed [ 49.626901][ T31] audit: type=1400 audit(49.230:43): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=6821 comm="syz.2.47" name="/" dev="loop2" ino=2 [ 49.650166][ T6816] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 49.659931][ T6500] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.704026][ T6816] XFS (loop1): Ending clean mount [ 49.717651][ T6816] XFS (loop1): Quotacheck needed: Please wait. [ 49.773913][ T6816] XFS (loop1): Quotacheck: Done. [ 49.789165][ T6840] loop2: detected capacity change from 0 to 2048 [ 49.875280][ T6844] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 49.888660][ T6489] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 50.218164][ T6759] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 50.392606][ T6847] loop1: detected capacity change from 0 to 32768 [ 50.442396][ T6847] JBD2: Ignoring recovery information on journal [ 50.452035][ T6848] loop3: detected capacity change from 0 to 32768 [ 50.460176][ T6848] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.48 (6848) [ 50.479341][ T6848] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 50.479451][ T6848] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 50.479487][ T6848] BTRFS info (device loop3): using free-space-tree [ 50.512229][ T6847] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 50.543007][ T6490] bcachefs (loop4): shutting down [ 50.543077][ T6490] bcachefs (loop4): going read-only [ 50.543103][ T6490] bcachefs (loop4): finished waiting for writes to stop [ 50.574578][ T6490] bcachefs (loop4): flushing journal and stopping allocators, journal seq 27 [ 50.583766][ T6490] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 27 [ 50.588468][ T6490] bcachefs (loop4): clean shutdown complete, journal seq 28 [ 50.644373][ T6840] ALSA: seq fatal error: cannot create timer (-22) [ 50.646868][ T6490] bcachefs (loop4): done going read-only, filesystem not clean [ 50.712436][ T6844] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 50.712551][ T6844] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 50.719747][ T6844] Remounting filesystem read-only [ 50.728585][ T6500] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 50.749052][ T6490] bcachefs (loop4): shutdown complete [ 50.862525][ T6489] ocfs2: Unmounting device (7,1) on (node local) [ 50.898568][ T6499] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 51.329697][ T6881] syz.3.57 uses obsolete (PF_INET,SOCK_PACKET) [ 51.637520][ T6874] loop2: detected capacity change from 0 to 32768 [ 51.643087][ T6874] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.54 (6874) [ 51.723951][ T6887] loop1: detected capacity change from 0 to 512 [ 51.730793][ T6874] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 51.730888][ T6874] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 51.731129][ T6874] BTRFS info (device loop2): using free-space-tree [ 51.815169][ T6892] loop3: detected capacity change from 0 to 16 [ 51.964989][ T6892] erofs (device loop3): mounted with root inode @ nid 36. [ 52.144077][ T6491] erofs (device loop3): failed to decompress -26 in[46, 0] out[9000] [ 52.239355][ T6893] erofs (device loop3): failed to decompress -26 in[46, 4050] out[9000] [ 52.240265][ T6893] erofs (device loop3): read error -117 @ 0 of nid 89 [ 52.241443][ T6893] erofs (device loop3): failed to decompress -26 in[46, 4050] out[8192] [ 52.241629][ T6893] erofs (device loop3): read error -117 @ 0 of nid 89 [ 52.242453][ T6893] erofs (device loop3): failed to decompress -26 in[46, 4050] out[8192] [ 52.242590][ T6893] erofs (device loop3): read error -117 @ 0 of nid 89 [ 52.243167][ T6893] erofs (device loop3): failed to decompress -26 in[46, 4050] out[8192] [ 52.243303][ T6893] erofs (device loop3): read error -117 @ 0 of nid 89 [ 52.244089][ T6894] erofs (device loop3): failed to decompress -26 in[46, 4050] out[8192] [ 52.244228][ T6894] erofs (device loop3): read error -117 @ 0 of nid 89 [ 52.244800][ T6894] erofs (device loop3): failed to decompress -26 in[46, 4050] out[8192] [ 52.244927][ T6894] erofs (device loop3): read error -117 @ 0 of nid 89 [ 52.245690][ T6894] erofs (device loop3): failed to decompress -26 in[46, 4050] out[8192] [ 52.245818][ T6894] erofs (device loop3): read error -117 @ 0 of nid 89 [ 52.246358][ T6894] erofs (device loop3): failed to decompress -26 in[46, 4050] out[8192] [ 52.246482][ T6894] erofs (device loop3): read error -117 @ 0 of nid 89 [ 52.248223][ T6892] erofs (device loop3): failed to decompress -26 in[46, 4050] out[9000] [ 52.248483][ T6892] erofs (device loop3): read error -117 @ 2 of nid 89 [ 52.249555][ T6892] erofs (device loop3): failed to decompress -26 in[46, 4050] out[9000] [ 52.249733][ T6892] erofs (device loop3): read error -117 @ 2 of nid 89 [ 52.250637][ T6892] erofs (device loop3): failed to decompress -26 in[46, 4050] out[9000] [ 52.250818][ T6892] erofs (device loop3): read error -117 @ 2 of nid 89 [ 52.283826][ T6892] erofs (device loop3): failed to decompress -26 in[46, 4050] out[8192] [ 52.284093][ T6892] erofs (device loop3): read error -117 @ 0 of nid 89 [ 52.284966][ T6892] erofs (device loop3): failed to decompress -26 in[46, 4050] out[8192] [ 52.285148][ T6892] erofs (device loop3): read error -117 @ 0 of nid 89 [ 52.285956][ T6892] erofs (device loop3): failed to decompress -26 in[46, 4050] out[8192] [ 52.286094][ T6892] erofs (device loop3): read error -117 @ 0 of nid 89 [ 52.286756][ T6892] erofs (device loop3): failed to decompress -26 in[46, 4050] out[8192] [ 52.286885][ T6892] erofs (device loop3): read error -117 @ 0 of nid 89 [ 52.297221][ T6892] erofs (device loop3): failed to decompress -26 in[46, 4050] out[8192] [ 52.297359][ T6892] erofs (device loop3): read error -117 @ 0 of nid 89 [ 52.297933][ T6892] erofs (device loop3): failed to decompress -26 in[46, 4050] out[8192] [ 52.298064][ T6892] erofs (device loop3): read error -117 @ 0 of nid 89 [ 52.298821][ T6892] erofs (device loop3): failed to decompress -26 in[46, 4050] out[8192] [ 52.298945][ T6892] erofs (device loop3): read error -117 @ 0 of nid 89 [ 52.299461][ T6892] erofs (device loop3): failed to decompress -26 in[46, 4050] out[8192] [ 52.299611][ T6892] erofs (device loop3): read error -117 @ 0 of nid 89 [ 52.424900][ T6887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.439768][ T31] audit: type=1400 audit(52.040:44): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=6886 comm="syz.1.59" name="/" dev="loop1" ino=2 [ 52.515504][ T6489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.590545][ T6912] sctp: [Deprecated]: syz.0.62 (pid 6912) Use of struct sctp_assoc_value in delayed_ack socket option. [ 52.590545][ T6912] Use struct sctp_sack_info instead [ 52.673511][ T6914] loop1: detected capacity change from 0 to 2048 [ 52.703501][ T6914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.735989][ T6914] fs-verity: sha512 using implementation "sha512-arm64" [ 52.807840][ T6500] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 52.880948][ T6489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.035536][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 53.035715][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 53.158004][ T6929] loop3: detected capacity change from 0 to 32768 [ 53.175800][ T6929] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.67 (6929) [ 53.187692][ T6929] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 53.210410][ T6929] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 53.210483][ T6929] BTRFS info (device loop3): using free-space-tree [ 53.620648][ T6499] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 53.721827][ T6939] loop1: detected capacity change from 0 to 32768 [ 53.774220][ T6950] loop2: detected capacity change from 0 to 32768 [ 53.778728][ T6939] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 53.786361][ T6950] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.69 (6950) [ 53.823691][ T6950] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 53.823796][ T6950] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 53.823865][ T6950] BTRFS info (device loop2): using free-space-tree [ 53.863449][ T6939] XFS (loop1): Ending clean mount [ 53.884211][ T6977] 9pnet_fd: Insufficient options for proto=fd [ 53.926625][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 53.926709][ T6939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.926762][ T6939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.926855][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 53.947116][ T6939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.947189][ T6939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.298069][ T6500] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 54.320120][ T6489] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 54.746819][ T7013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.750494][ T7013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.759180][ T7013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.759258][ T7013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.787655][ T6996] loop4: detected capacity change from 0 to 32768 [ 54.838802][ T6996] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 54.908820][ T6994] loop3: detected capacity change from 0 to 40427 [ 54.921096][ T6994] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 54.924223][ T6994] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 55.032791][ T6996] XFS (loop4): Ending clean mount [ 55.079075][ T6994] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 55.079295][ T6994] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 55.148464][ T6994] syz.3.74: attempt to access beyond end of device [ 55.148464][ T6994] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 55.198161][ T6996] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 55.202813][ T6996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 55.221789][ T6499] syz-executor: attempt to access beyond end of device [ 55.221789][ T6499] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 55.227501][ T6499] CPU: 0 UID: 0 PID: 6499 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 55.227529][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.227537][ T6499] Call trace: [ 55.227541][ T6499] show_stack+0x2c/0x3c (C) [ 55.227559][ T6499] __dump_stack+0x30/0x40 [ 55.227571][ T6499] dump_stack_lvl+0xd8/0x12c [ 55.227581][ T6499] dump_stack+0x1c/0x28 [ 55.227590][ T6499] f2fs_handle_critical_error+0x34c/0x4b8 [ 55.227605][ T6499] f2fs_stop_checkpoint+0x58/0x6c [ 55.227617][ T6499] f2fs_write_end_io+0x794/0xadc [ 55.227631][ T6499] bio_endio+0x81c/0x858 [ 55.227645][ T6499] submit_bio_noacct+0x158/0x176c [ 55.227656][ T6499] submit_bio+0x354/0x4d4 [ 55.227666][ T6499] f2fs_submit_write_bio+0x13c/0x324 [ 55.227684][ T6499] __submit_merged_bio+0x254/0x704 [ 55.227697][ T6499] __submit_merged_write_cond+0x23c/0x4ac [ 55.227710][ T6499] f2fs_write_data_pages+0x1e9c/0x27ac [ 55.227723][ T6499] do_writepages+0x2c0/0x6a8 [ 55.227738][ T6499] filemap_fdatawrite+0x144/0x1e8 [ 55.227748][ T6499] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 55.227760][ T6499] f2fs_write_checkpoint+0x684/0x1694 [ 55.227772][ T6499] kill_f2fs_super+0x21c/0x584 [ 55.227786][ T6499] deactivate_locked_super+0xc4/0x12c [ 55.227798][ T6499] deactivate_super+0xe0/0x100 [ 55.227809][ T6499] cleanup_mnt+0x31c/0x3ac [ 55.227822][ T6499] __cleanup_mnt+0x20/0x30 [ 55.227833][ T6499] task_work_run+0x1dc/0x260 [ 55.227846][ T6499] do_notify_resume+0x16c/0x1ec [ 55.227858][ T6499] el0_svc+0xb4/0x17c [ 55.227873][ T6499] el0t_64_sync_handler+0x78/0x108 [ 55.227886][ T6499] el0t_64_sync+0x198/0x19c [ 55.255662][ T6499] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 55.377098][ T7004] loop1: detected capacity change from 0 to 32768 [ 55.393522][ T7004] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.76 (7004) [ 55.436096][ T7004] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 55.439098][ T7004] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 55.441752][ T7004] BTRFS info (device loop1): using free-space-tree [ 55.494307][ T7026] loop2: detected capacity change from 0 to 32768 [ 55.498167][ T7026] BTRFS: device /dev/loop2 (7:2) using temp-fsid ce8b27f1-a7a6-4b56-87c5-87e7e4692856 [ 55.498326][ T7026] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.80 (7026) [ 55.506467][ T7026] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 55.506565][ T7026] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 55.506618][ T7026] BTRFS info (device loop2): disk space caching is enabled [ 55.506781][ T7026] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 55.735107][ T7026] BTRFS info (device loop2): rebuilding free space tree [ 55.764427][ T7026] BTRFS info (device loop2): disabling free space tree [ 55.764529][ T7026] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 55.764585][ T7026] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 55.829476][ T6489] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 56.040412][ T31] audit: type=1400 audit(55.640:45): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=7060 comm="syz.1.82" name="14" dev="tmpfs" ino=94 [ 56.040497][ T31] audit: type=1400 audit(55.640:46): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=7060 comm="syz.1.82" name="14" dev="tmpfs" ino=94 [ 56.219409][ T6500] BTRFS info (device loop2): last unmount of filesystem ce8b27f1-a7a6-4b56-87c5-87e7e4692856 [ 56.366239][ T6490] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 56.408781][ T7059] loop3: detected capacity change from 0 to 32768 [ 56.415521][ T7059] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.81 (7059) [ 56.465515][ T7059] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 56.465622][ T7059] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 56.465660][ T7059] BTRFS info (device loop3): using free-space-tree [ 56.523146][ T7089] loop1: detected capacity change from 0 to 256 [ 56.552056][ T7091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.89'. [ 56.552125][ T7091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.89'. [ 56.628554][ T7089] FAT-fs (loop1): Directory bread(block 64) failed [ 56.628728][ T7089] FAT-fs (loop1): Directory bread(block 65) failed [ 56.628802][ T7089] FAT-fs (loop1): Directory bread(block 66) failed [ 56.628840][ T7089] FAT-fs (loop1): Directory bread(block 67) failed [ 56.628949][ T7089] FAT-fs (loop1): Directory bread(block 68) failed [ 56.628985][ T7089] FAT-fs (loop1): Directory bread(block 69) failed [ 56.629072][ T7089] FAT-fs (loop1): Directory bread(block 70) failed [ 56.629111][ T7089] FAT-fs (loop1): Directory bread(block 71) failed [ 56.629174][ T7089] FAT-fs (loop1): Directory bread(block 72) failed [ 56.629210][ T7089] FAT-fs (loop1): Directory bread(block 73) failed [ 56.733829][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 56.774092][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 56.850928][ T6499] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 56.929662][ T7093] loop4: detected capacity change from 0 to 32768 [ 57.701681][ T7097] loop2: detected capacity change from 0 to 32768 [ 57.716264][ T7111] loop3: detected capacity change from 0 to 2048 [ 57.725155][ T7097] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 57.789207][ T7120] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 57.921989][ T7097] XFS (loop2): Ending clean mount [ 57.981003][ T7111] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 57.990324][ T7111] Remounting filesystem read-only [ 57.996591][ T6500] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 58.021782][ T7121] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 58.112268][ T7105] loop1: detected capacity change from 0 to 32768 [ 58.124379][ T7105] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.93 (7105) [ 58.146431][ T7105] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 58.146531][ T7105] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 58.146568][ T7105] BTRFS info (device loop1): using free-space-tree [ 58.219830][ T7142] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.465774][ T7156] netlink: 44 bytes leftover after parsing attributes in process `syz.3.101'. [ 58.498760][ T6489] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 58.502404][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 58.556304][ T7128] loop2: detected capacity change from 0 to 32768 [ 58.622264][ T7159] loop3: detected capacity change from 0 to 1024 [ 58.677929][ T7159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.707224][ T7128] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 58.708230][ T7156] EXT4-fs error (device loop3): ext4_map_blocks:709: inode #15: block 1: comm syz.3.101: lblock 1 mapped to illegal pblock 1 (length 7) [ 58.720022][ T7128] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck_memory_usage_percent=39,norecovery,nojournal_transaction_names [ 58.720022][ T7128] allowing incompatible features above 0.0: (unknown version) [ 58.720187][ T7128] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 58.735815][ T7156] EXT4-fs error (device loop3): ext4_ext_remove_space:2951: inode #15: comm syz.3.101: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 58.746656][ T7128] bcachefs (loop2): Version upgrade required: [ 58.746656][ T7128] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 58.746656][ T7128] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 58.746656][ T7128] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 58.770912][ T7128] bcachefs (loop2): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870912:U32_MAX len 0 ver 0: (unpack error) [ 58.770967][ T7128] invalid variable length fields, deleting [ 58.796227][ T7128] bcachefs (loop2): bcachefs (loop2): error validating btree node at btree alloc level 0/0 [ 58.796288][ T7128] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 58.796322][ T7128] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 58.796606][ T7128] bcachefs (loop2): btree_node_read_work: rewriting btree node at due to error [ 58.796606][ T7128] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 58.805178][ T7128] bcachefs (loop2): bcachefs (loop2): error validating btree node at btree freespace level 0/0 [ 58.805199][ T7128] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 58.805212][ T7128] node offset 8/32 bset u64s 35 bset byte offset 160: keys out of order: u64s 5 type set 5497558138880:32:0 len 2 ver 0 > u64s 5 type set 0:35:0 len 2 ver 0, fixing [ 58.805476][ T7128] bcachefs (loop2): btree_node_read_work: rewriting btree node at due to error [ 58.805476][ T7128] btree=freespace level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 58.809356][ T7128] bcachefs (loop2): accounting_read... [ 58.813787][ T7159] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 1: comm syz.3.101: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.816420][ T7159] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 1: comm syz.3.101: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.822531][ T7155] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 1: comm syz.3.101: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.832787][ T7155] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 1: comm syz.3.101: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.834615][ T7155] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 1: comm syz.3.101: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.839523][ T7156] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 1: comm syz.3.101: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.842397][ T7156] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 1: comm syz.3.101: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.850080][ T7156] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 1: comm syz.3.101: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.875527][ T7128] done [ 58.875597][ T7128] bcachefs (loop2): alloc_read... done [ 58.875725][ T7128] bcachefs (loop2): snapshots_read... done [ 58.875821][ T7128] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 58.876024][ T7128] bcachefs (loop2): done starting filesystem [ 58.933574][ T7128] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 58.956095][ T7128] bcachefs (loop2): dirent to missing inode: [ 58.956173][ T7128] u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0: file1 -> 536870912 type reg [ 58.956185][ T7128] inconsistency detected - emergency read only at journal seq 10 [ 58.956196][ T7128] [ 58.976177][ T7128] sctp: [Deprecated]: syz.2.97 (pid 7128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 58.976177][ T7128] Use struct sctp_sack_info instead [ 59.085916][ T6500] bcachefs (loop2): shutting down [ 59.258815][ T7180] xt_CT: No such helper "snmp_trap" [ 59.286184][ T6500] bcachefs (loop2): shutdown complete [ 59.430762][ T6499] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 59.669471][ T7178] loop1: detected capacity change from 0 to 32768 [ 59.859561][ T7206] syz_tun: refused to change device tx_queue_len [ 59.863948][ T7206] ubi31: attaching mtd0 [ 59.866745][ T7206] ubi31: scanning is finished [ 59.866811][ T7206] ubi31: empty MTD device detected [ 60.083543][ T7206] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 60.083613][ T7206] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 60.083637][ T7206] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 60.083660][ T7206] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 60.083682][ T7206] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 60.083704][ T7206] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 60.083726][ T7206] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2483759454 [ 60.083750][ T7206] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 60.106473][ T7210] ubi31: background thread "ubi_bgt31d" started, PID 7210 [ 60.158547][ T7204] loop3: detected capacity change from 0 to 32768 [ 60.173226][ T7204] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.113 (7204) [ 60.244605][ T7204] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 60.244725][ T7204] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 60.244763][ T7204] BTRFS info (device loop3): disk space caching is enabled [ 60.244787][ T7204] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 60.322798][ T7204] BTRFS info (device loop3): rebuilding free space tree [ 60.353980][ T7212] loop4: detected capacity change from 0 to 32768 [ 60.363765][ T7204] BTRFS info (device loop3): disabling free space tree [ 60.363849][ T7204] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 60.363877][ T7204] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 60.614863][ T6499] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 60.890203][ T7216] loop1: detected capacity change from 0 to 32768 [ 60.907836][ T7216] XFS: ikeep mount option is deprecated. [ 60.962073][ T7216] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 61.123237][ T7216] XFS (loop1): Ending clean mount [ 61.133680][ T7216] XFS (loop1): Quotacheck needed: Please wait. [ 61.183035][ T7216] XFS (loop1): Quotacheck: Done. [ 61.232804][ T6489] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 61.349262][ T7253] Soft offlining pfn 0x1354b3 at process virtual address 0x20cb3000 [ 61.396456][ T7253] Memory failure: 0x1354b3: unhandlable page. [ 61.446923][ T7270] netlink: 200 bytes leftover after parsing attributes in process `syz.4.124'. [ 61.469201][ T7272] sch_fq: defrate 0 ignored. [ 61.520563][ T3891] IPVS: starting estimator thread 0... [ 61.610418][ T7275] IPVS: using max 33 ests per chain, 79200 per kthread [ 61.632088][ T7278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.127'. [ 61.924765][ T7265] loop1: detected capacity change from 0 to 32768 [ 61.935274][ T7265] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.122 (7265) [ 61.945025][ T7265] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 61.945138][ T7265] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 61.945176][ T7265] BTRFS info (device loop1): using free-space-tree [ 62.043128][ T7278] loop4: detected capacity change from 0 to 32768 [ 62.046633][ T7279] loop3: detected capacity change from 0 to 32768 [ 62.112941][ T7274] loop2: detected capacity change from 0 to 32768 [ 62.325507][ T7278] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 62.392396][ T7278] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,str_hash=crc64,norecovery,nojournal_transaction_names,reconstruct_alloc [ 62.392396][ T7278] allowing incompatible features above 0.0: (unknown version) [ 62.423503][ T7278] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 62.437389][ T7278] bcachefs (loop4): Version upgrade required: [ 62.437389][ T7278] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 62.437389][ T7278] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 62.437389][ T7278] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 62.440677][ T7278] bcachefs (loop4): dropping and reconstructing all alloc info [ 62.703647][ T7278] bcachefs (loop4): accounting_read... done [ 62.731419][ T7278] bcachefs (loop4): alloc_read... done [ 62.731498][ T7278] bcachefs (loop4): snapshots_read... done [ 62.731757][ T7278] bcachefs (loop4): done starting filesystem [ 62.944846][ T6489] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 63.008319][ T6490] bcachefs (loop4): shutting down [ 63.104034][ T7324] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 63.135772][ T7314] loop3: detected capacity change from 0 to 32768 [ 63.140358][ T7314] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.130 (7314) [ 63.153833][ T7314] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 63.153931][ T7314] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 63.154639][ T7314] BTRFS info (device loop3): disk space caching is enabled [ 63.157656][ T7314] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 63.163487][ T6490] bcachefs (loop4): shutdown complete [ 63.170683][ T7321] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 63.175120][ T7321] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 63.218351][ T7321] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 63.230708][ T7314] BTRFS info (device loop3): rebuilding free space tree [ 63.245201][ T7314] BTRFS info (device loop3): disabling free space tree [ 63.245283][ T7314] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 63.245310][ T7314] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 63.271628][ T7321] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 63.272450][ T7321] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 63.344621][ T7343] loop1: detected capacity change from 0 to 512 [ 63.358071][ T7321] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 63.381668][ T7343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.389625][ T7321] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 63.389703][ T7321] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 63.419449][ T31] audit: type=1400 audit(63.020:47): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=7342 comm="syz.1.135" name="/" dev="loop1" ino=2 [ 63.422214][ T7343] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.135: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 63.422637][ T7343] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.135: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 63.423459][ T7343] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.135: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 63.424318][ T31] audit: type=1400 audit(63.030:48): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=7342 comm="syz.1.135" name="/" dev="loop1" ino=2 [ 63.468066][ T7321] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 63.477530][ T7321] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 63.478340][ T7321] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 63.515295][ T7321] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 63.515613][ T6489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.534002][ T7321] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 63.534102][ T7321] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 63.538021][ T7321] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 63.584029][ T6499] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 63.697464][ T7350] loop2: detected capacity change from 0 to 2048 [ 63.717866][ T7350] NILFS (loop2): couldn't find nilfs on the device [ 63.736531][ T7350] netlink: 340 bytes leftover after parsing attributes in process `syz.2.138'. [ 63.847005][ T7356] loop1: detected capacity change from 0 to 1024 [ 63.851200][ T7356] EXT4-fs: Ignoring removed orlov option [ 63.927334][ T7356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.937883][ T7355] netlink: 36 bytes leftover after parsing attributes in process `syz.1.139'. [ 63.938264][ T7355] x_tables: unsorted underflow at hook 3 [ 63.954683][ T6481] udevd[6481]: incorrect nilfs2 checksum on /dev/loop2 [ 64.036460][ T6489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.314280][ T7352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.136'. [ 64.645695][ T7370] loop1: detected capacity change from 0 to 32768 [ 64.874079][ T2391] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.876100][ T2391] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.201157][ T6491] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.362700][ T6491] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.430438][ T6491] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.505977][ T7378] loop2: detected capacity change from 0 to 32768 [ 65.511088][ T6491] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.554563][ T7378] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 65.590447][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 65.683030][ T7378] XFS (loop2): Ending clean mount [ 65.729990][ T7381] loop3: detected capacity change from 0 to 32768 [ 65.732781][ T7381] btrfs: Unknown parameter 'fragment' [ 65.784288][ T7381] loop3: detected capacity change from 0 to 256 [ 65.786729][ T7381] exfat: Deprecated parameter 'debug' [ 65.788311][ T7381] exfat: Unknown parameter 'noflushoncommit' [ 65.829200][ T7404] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 65.905597][ T7377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.016259][ T55] Bluetooth: hci4: unexpected event 0x2c length: 12 < 17 [ 66.072752][ T55] Bluetooth: hci4: unexpected event for opcode 0x0c12 [ 66.226481][ T7389] loop1: detected capacity change from 0 to 32768 [ 66.227455][ T7389] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.148 (7389) [ 66.273712][ T7389] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 66.274675][ T7389] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 66.274715][ T7389] BTRFS info (device loop1): using free-space-tree [ 66.344511][ T7401] loop4: detected capacity change from 0 to 32768 [ 66.362908][ T7401] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.134 (7401) [ 66.371993][ T7401] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 66.372100][ T7401] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 66.372143][ T7401] BTRFS info (device loop4): using free-space-tree [ 66.455035][ T6500] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 66.473998][ T7412] loop3: detected capacity change from 0 to 32768 [ 66.476512][ T7412] ocfs2: Unknown parameter 'nouser_' [ 66.542422][ T6489] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 66.691907][ T6490] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 67.183632][ T7470] loop4: detected capacity change from 0 to 128 [ 67.184223][ T7470] vfat: Unknown parameter 'ethtool' [ 67.194230][ T7470] xt_hashlimit: max too large, truncated to 1048576 [ 67.270333][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.276920][ T7455] loop2: detected capacity change from 0 to 32768 [ 67.388927][ T7460] loop1: detected capacity change from 0 to 32768 [ 67.413080][ T7460] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.159 (7460) [ 67.436225][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 67.452260][ T7460] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 67.452371][ T7460] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 67.452425][ T7460] BTRFS info (device loop1): disk space caching is enabled [ 67.452456][ T7460] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 67.602060][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.602258][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.836900][ T7460] BTRFS info (device loop1): rebuilding free space tree [ 67.868469][ T7460] BTRFS info (device loop1): disabling free space tree [ 67.868547][ T7460] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 67.868591][ T7460] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 68.028490][ T6489] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 68.349554][ T7473] loop4: detected capacity change from 0 to 32768 [ 68.351192][ T7473] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.163 (7473) [ 68.356855][ T7473] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 68.356954][ T7473] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 68.356992][ T7473] BTRFS info (device loop4): using free-space-tree [ 68.714346][ T6490] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 68.834973][ T7520] loop2: detected capacity change from 0 to 256 [ 68.837419][ T7520] exfat: Deprecated parameter 'utf8' [ 68.838995][ T7520] exfat: Deprecated parameter 'utf8' [ 68.888061][ T7520] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 69.360551][ T6491] Bluetooth: hci0: command 0x0c1a tx timeout [ 69.514157][ T6491] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.617111][ T7529] loop4: detected capacity change from 0 to 32768 [ 69.634444][ T7529] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.171 (7529) [ 69.656265][ T7529] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 69.656370][ T7529] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 69.656411][ T7529] BTRFS info (device loop4): using free-space-tree [ 69.672996][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.674697][ T6491] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.709270][ T7531] loop2: detected capacity change from 0 to 32768 [ 69.750768][ T7542] loop1: detected capacity change from 0 to 32768 [ 69.788942][ T7531] BTRFS: device /dev/loop2 (7:2) using temp-fsid d7ed1e66-1a79-4fc6-8bbc-e28f96101421 [ 69.789483][ T7531] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.172 (7531) [ 69.796386][ T7529] BTRFS error (device loop4): target device is invalid! [ 69.799397][ T7531] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 69.799466][ T7531] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 69.799506][ T7531] BTRFS info (device loop2): using free-space-tree [ 69.875180][ T7540] loop3: detected capacity change from 0 to 32768 [ 69.911036][ T6490] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 69.958141][ T7540] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.175 (7540) [ 69.972623][ T7540] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 69.975745][ T7540] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 69.978694][ T7540] BTRFS info (device loop3): disk space caching is enabled [ 69.978749][ T7540] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 69.996480][ T26] cfg80211: failed to load regulatory.db [ 70.153234][ T6491] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 70.153906][ T6491] Bluetooth: hci4: Injecting HCI hardware error event [ 70.157761][ T6491] Bluetooth: hci4: hardware error 0x00 [ 70.642802][ T7540] BTRFS info (device loop3): rebuilding free space tree [ 70.679837][ T7531] netlink: 'syz.2.172': attribute type 1 has an invalid length. [ 70.713236][ T7540] BTRFS info (device loop3): disabling free space tree [ 70.713320][ T7540] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 70.713348][ T7540] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 70.808811][ T6500] BTRFS info (device loop2): last unmount of filesystem d7ed1e66-1a79-4fc6-8bbc-e28f96101421 [ 70.910274][ T6499] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 71.233436][ T7601] loop1: detected capacity change from 0 to 32768 [ 71.296372][ T7601] find_entry called with index >= next_index [ 71.296498][ T7601] find_entry called with index >= next_index [ 71.296518][ T7601] find_entry called with index >= next_index [ 71.573768][ T7598] loop4: detected capacity change from 0 to 32768 [ 71.792761][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 72.027683][ T7621] loop3: detected capacity change from 0 to 1024 [ 72.061028][ T7622] vivid-000: disconnect [ 72.084222][ T7621] bridge0: port 3(syz_tun) entered blocking state [ 72.084331][ T7621] bridge0: port 3(syz_tun) entered disabled state [ 72.084539][ T7621] syz_tun: entered allmulticast mode [ 72.086462][ T7621] syz_tun: entered promiscuous mode [ 72.086889][ T7621] bridge0: port 3(syz_tun) entered blocking state [ 72.087375][ T7621] bridge0: port 3(syz_tun) entered forwarding state [ 72.092405][ T7624] loop2: detected capacity change from 0 to 512 [ 72.131736][ T7624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.182260][ T7624] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.189: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 72.187804][ T7624] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.189: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 72.192812][ T7624] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.189: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 72.200025][ T31] audit: type=1400 audit(71.800:49): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=7623 comm="syz.2.189" name="/" dev="loop2" ino=2 [ 72.230458][ T6491] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 72.286459][ T6500] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.730115][ T42] hfsplus: b-tree write err: -5, ino 4 [ 72.810805][ T7617] vivid-000: reconnect [ 72.970098][ T7634] loop2: detected capacity change from 0 to 32768 [ 73.708288][ T7644] loop1: detected capacity change from 0 to 32768 [ 73.714029][ T7644] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.194 (7644) [ 73.732253][ T7651] loop4: detected capacity change from 0 to 256 [ 73.740662][ T7651] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.740727][ T7651] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 73.753895][ T7651] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 73.770518][ T7644] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.770632][ T7644] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 73.770670][ T7644] BTRFS info (device loop1): using free-space-tree [ 73.779322][ T7651] overlay: filesystem on ./file0 not supported [ 73.791237][ T7654] capability: warning: `syz.0.199' uses 32-bit capabilities (legacy support in use) [ 73.895670][ T7642] loop3: detected capacity change from 0 to 32768 [ 73.900773][ T7642] BTRFS: device /dev/loop3 (7:3) using temp-fsid 6824ac00-8ba4-4f68-b186-3c26818b7266 [ 73.900847][ T7642] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.193 (7642) [ 73.950708][ T7642] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.952950][ T7642] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 73.953129][ T7642] BTRFS info (device loop3): disk space caching is enabled [ 73.953156][ T7642] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 73.996182][ T31] audit: type=1326 audit(73.600:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7683 comm="syz.0.201" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb5a768 code=0x0 [ 74.057209][ T7642] BTRFS info (device loop3): rebuilding free space tree [ 74.079044][ T7642] BTRFS info (device loop3): disabling free space tree [ 74.079114][ T7642] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 74.079168][ T7642] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 74.109182][ T6489] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.287390][ T6499] BTRFS info (device loop3): last unmount of filesystem 6824ac00-8ba4-4f68-b186-3c26818b7266 [ 74.443586][ T7670] loop2: detected capacity change from 0 to 32768 [ 74.444233][ T7670] XFS: ikeep mount option is deprecated. [ 74.506107][ T7670] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 74.643764][ T7670] XFS (loop2): Ending clean mount [ 74.646642][ T7670] XFS (loop2): Quotacheck needed: Please wait. [ 74.665940][ T7670] XFS (loop2): Quotacheck: Done. [ 74.742049][ T7670] overlay: ./file1 is not a directory [ 74.785562][ T7724] mmap: syz.4.209 (7724) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.054389][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 75.087243][ T6500] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 75.223139][ T7701] loop1: detected capacity change from 0 to 32768 [ 75.226937][ T7701] XFS: ikeep mount option is deprecated. [ 75.247106][ T7701] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 75.404579][ T7701] XFS (loop1): Ending clean mount [ 75.434877][ T7701] XFS (loop1): Quotacheck needed: Please wait. [ 75.453491][ T7756] openvswitch: netlink: Message has 1255 unknown bytes. [ 75.460305][ T7756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.485231][ T7701] XFS (loop1): Quotacheck: Done. [ 75.705337][ T6489] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 75.742641][ T7767] vlan2: entered promiscuous mode [ 75.742793][ T7767] vlan2: entered allmulticast mode [ 75.747147][ T7767] team0: Port device vlan2 added [ 75.891698][ T7766] loop4: detected capacity change from 0 to 4096 [ 75.984138][ T7772] overlayfs: overlapping lowerdir path [ 76.089439][ T7766] No such timeout policy "syz1" [ 76.241665][ T6491] Bluetooth: hci2: unexpected event 0x01 length: 6 > 1 [ 76.350843][ T31] audit: type=1326 audit(75.960:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7791 comm="syz.0.235" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb5a768 code=0x0 [ 76.589274][ T7779] loop3: detected capacity change from 0 to 32768 [ 76.610513][ T7806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.627904][ T7779] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 76.714904][ T7779] XFS (loop3): Ending clean mount [ 76.729540][ T7779] XFS (loop3): Quotacheck needed: Please wait. [ 76.784632][ T7779] XFS (loop3): Quotacheck: Done. [ 76.856333][ T6499] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 77.537927][ T7862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.539029][ T7862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.547864][ T7862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.548171][ T7862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.724847][ T7882] netlink: 80 bytes leftover after parsing attributes in process `syz.0.264'. [ 79.359321][ T7903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.417785][ T7894] vti0: entered promiscuous mode [ 79.419531][ T7894] vti0: entered allmulticast mode [ 79.422636][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 79.429503][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 79.432342][ T7896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.486930][ T7903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.508447][ T7903] netlink: 'syz.2.273': attribute type 1 has an invalid length. [ 80.406049][ T7948] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 80.408927][ T7948] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 80.932388][ T7985] netlink: 'syz.4.307': attribute type 28 has an invalid length. [ 81.201972][ T7996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.202314][ T7996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.214669][ T7996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.310'. [ 81.214741][ T7996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.310'. [ 81.250505][ T7996] dummy0: entered promiscuous mode [ 81.255622][ T7996] bond0: entered promiscuous mode [ 81.257664][ T7996] bond_slave_0: entered promiscuous mode [ 81.263712][ T7996] bond_slave_1: entered promiscuous mode [ 81.966906][ T8009] netlink: 32 bytes leftover after parsing attributes in process `syz.1.313'. [ 82.699388][ T8040] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 83.689238][ T8057] netlink: 48 bytes leftover after parsing attributes in process `syz.3.332'. [ 84.523752][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.342'. [ 84.559179][ T8085] process 'syz.1.341' launched '/dev/fd/11' with NULL argv: empty string added [ 84.628560][ T8090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.343'. [ 84.628702][ T8090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.343'. [ 85.321670][ T8125] usb usb1: usbfs: process 8125 (syz.4.357) did not claim interface 0 before use [ 85.338690][ T8126] netlink: 60 bytes leftover after parsing attributes in process `syz.0.358'. [ 85.431331][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.432554][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.858889][ T8156] netlink: 'syz.0.370': attribute type 17 has an invalid length. [ 85.899164][ T8156] dummy0: entered promiscuous mode [ 85.905883][ T8156] macsec1: entered promiscuous mode [ 85.907821][ T8156] macsec1: entered allmulticast mode [ 85.909742][ T8156] dummy0: entered allmulticast mode [ 86.224173][ T8162] input: syz0 as /devices/virtual/input/input4 [ 87.126179][ T8187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.130967][ T8187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.523310][ T8223] netlink: 72 bytes leftover after parsing attributes in process `syz.0.389'. [ 88.526236][ T8223] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 88.548836][ T8224] Unable to handle kernel paging request at virtual address dfff800000000006 ** replaying previous printk message ** [ 88.548836][ T8224] Unable to handle kernel paging request at virtual address dfff800000000006 [ 88.549930][ T8224] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 88.552079][ T8224] Mem abort info: [ 88.552101][ T8224] ESR = 0x0000000096000005 [ 88.552119][ T8224] EC = 0x25: DABT (current EL), IL = 32 bits [ 88.552140][ T8224] SET = 0, FnV = 0 [ 88.552158][ T8224] EA = 0, S1PTW = 0 [ 88.552176][ T8224] FSC = 0x05: level 1 translation fault [ 88.552194][ T8224] Data abort info: [ 88.552211][ T8224] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 88.552229][ T8224] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 88.552249][ T8224] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 88.552270][ T8224] [dfff800000000006] address between user and kernel address ranges [ 88.552450][ T8224] Internal error: Oops: 0000000096000005 [#1] SMP [ 88.576193][ T8224] Modules linked in: [ 88.577318][ T8224] CPU: 0 UID: 0 PID: 8224 Comm: syz.4.386 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 88.580440][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.583277][ T8224] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 88.585448][ T8224] pc : do_move_mount+0x248/0x92c [ 88.586865][ T8224] lr : do_move_mount+0x22c/0x92c [ 88.588291][ T8224] sp : ffff80009db37b60 [ 88.589445][ T8224] x29: ffff80009db37bb0 x28: ffffffffffffffea x27: dfff800000000000 [ 88.591678][ T8224] x26: 00000000ffffffea x25: ffff80009db37cc0 x24: 0000000000000002 [ 88.594011][ T8224] x23: ffff0000f580e9b0 x22: ffff0000c18f11a0 x21: ffff0000c1b46280 [ 88.596268][ T8224] x20: 0000000000000032 x19: 1fffe0001831e24e x18: 00000000ffffffff [ 88.598550][ T8224] x17: ffff800092f39000 x16: ffff80008adbeaf4 x15: 0000000000000001 [ 88.600825][ T8224] x14: 1fffe00018280846 x13: 0000000000000000 x12: 0000000000000000 [ 88.603141][ T8224] x11: 0000000000080000 x10: 00000000000007a8 x9 : ffff8000a556e000 [ 88.605382][ T8224] x8 : 0000000000000006 x7 : ffff800080da92ac x6 : 0000000000000000 [ 88.607667][ T8224] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 88.609936][ T8224] x2 : 0000000000000008 x1 : 0000000000000080 x0 : ffff0000c18f1278 [ 88.612181][ T8224] Call trace: [ 88.613095][ T8224] do_move_mount+0x248/0x92c (P) [ 88.614605][ T8224] vfs_move_mount+0x80/0x6c0 [ 88.615885][ T8224] __arm64_sys_move_mount+0x3c8/0x4f4 [ 88.617414][ T8224] invoke_syscall+0x98/0x2b8 [ 88.618693][ T8224] el0_svc_common+0x130/0x23c [ 88.620045][ T8224] do_el0_svc+0x48/0x58 [ 88.621231][ T8224] el0_svc+0x58/0x17c [ 88.622377][ T8224] el0t_64_sync_handler+0x78/0x108 [ 88.623797][ T8224] el0t_64_sync+0x198/0x19c [ 88.625073][ T8224] Code: f2fbfffb f85f83bc 91012394 d343fe88 (387b6908) [ 88.627024][ T8224] ---[ end trace 0000000000000000 ]--- [ 89.058781][ T8224] Kernel panic - not syncing: Oops: Fatal exception [ 89.060649][ T8224] SMP: stopping secondary CPUs [ 89.062000][ T8224] Kernel Offset: disabled [ 89.063307][ T8224] CPU features: 0x0800,000040e0,01000250,82017203 [ 89.065142][ T8224] Memory Limit: none [ 89.460389][ T8224] Rebooting in 86400 seconds..