last executing test programs: 2m2.699038886s ago: executing program 0 (id=50): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000380)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c4637bf02640f5c4b93c10", 0xdc000006, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x66) r1 = socket(0x2a, 0x2, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) 2m2.183815781s ago: executing program 0 (id=51): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000380)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c4637bf02640f5c4b93c10", 0xdc000006, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x66) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) 2m1.656800378s ago: executing program 0 (id=56): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000180)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c46b7bf036c0f5c42279243a3c10", 0xcc000004, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x67) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) 2m0.899085954s ago: executing program 0 (id=61): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000030c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000c00)=[{&(0x7f00000003c0)="85", 0x1}], 0x1, &(0x7f0000003180)=ANY=[@ANYBLOB="78000000000000002900000039000000670c02a40000000000000000000000000000000000000001fc020000000000000000000000000001fc020000000000000000000000000001ff010000000000000000000000000001fe8000000000000000000000000000bb200100000000000000000000000000021400000000000000290000004300000000100000000000001400000000000000290000000b0000008000000000000000280000000000000029000000370000003c01000000000000000100c2040000001000000000000000"], 0x150}}], 0x2, 0x20000800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) 2m0.164990487s ago: executing program 0 (id=66): socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xb, 0x0, 0x6}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd00", 0x1a}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) fsetxattr$security_capability(r4, &(0x7f00000001c0), &(0x7f0000000100)=@v1={0x1000000, [{0x5, 0x9e0d}]}, 0xc, 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000540)=@allocspi={0x10c, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1, 0x0, 0xfd1, 0x4, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in6=@private2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x80000001}, {0x101, 0x0, 0x0, 0x800}, {0x4, 0x6, 0x400}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x94}, 0x0, 0x4ad}, [@srcaddr={0x14, 0xd, @in6=@local}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v3={0x3000000, [{0x1, 0x9}, {0x2, 0xffffffc0}]}, 0x18, 0x0) 2m0.079438029s ago: executing program 3 (id=67): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000200)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f1504000000f15ac46b7bf036c0f5c42279243a3c10", 0xcc000004, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x66) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) read$nci(r1, 0x0, 0x0) 1m59.034615097s ago: executing program 3 (id=73): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000200)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c46b7bf036c0f5c42279243a3c10", 0xcc000004, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x66) mount_setattr(0xffffffffffffff9c, 0x0, 0x8100, &(0x7f0000000100)={0x73, 0x8e, 0x1a0000}, 0x20) 1m58.625849293s ago: executing program 3 (id=75): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000180)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c46b7bf036c0f5c42279243a3c10", 0xcc000004, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x66) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40010002) sendto$unix(r1, &(0x7f0000000000)="ba", 0x1, 0x48005, 0x0, 0x0) 1m57.438003129s ago: executing program 3 (id=79): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000180)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c46b7bf036c0f5c42279243a3c10", 0xcc000004, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x66) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) 1m56.817327767s ago: executing program 3 (id=82): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000180)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c46b7bf036c0f5c42279243a3c10", 0xcc000004, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x67) socket$inet_smc(0x2b, 0x1, 0x0) 1m56.072790547s ago: executing program 3 (id=84): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db9638edbc"}) write$cgroup_devices(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e030800dd5c9801288563a20dad12"], 0xffdd) 1m55.743544291s ago: executing program 0 (id=86): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_emit_ethernet(0x9e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9200063fa392e039b1f95902e158283afffe8000000500000000000000000000bbff020000000000000000000000000001890090780000000000000000060000000001ff0000aafc0100000000000000000000000000000000b3af5654773fca3ecfde44bd6086e905f902c63aa20b315bc2cce2d6d97983afdba7bd96eb"], 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) sched_setattr(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') pread64(r3, &(0x7f0000000180)=""/246, 0xf6, 0x20d5) setrlimit(0xf, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x21c0, 0xc) r5 = fanotify_init(0x200, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000380)={"dde31455499e94b05188c5c508bcd27a", 0x0, 0x0, {0x3, 0x2}, {0x100000000, 0x400}, 0x9, [0xc, 0x5, 0x3, 0x3, 0x9, 0x9, 0x2, 0x0, 0x400, 0x6, 0x401, 0xbd3d, 0x6, 0xb82, 0xfffffffffffffff8, 0x4]}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f00000021c0)={0x8, 0x6, {0x7ff, @usage=0x6, 0x0, 0x8, 0x50000, 0x7, 0x5, 0xc75, 0x4, @struct={0x3, 0x7fffffff}, 0x934, 0x0, [0x401, 0x1d, 0x7, 0x7fffffff, 0x3, 0xe]}, {0x1, @struct={0x6, 0x1ff}, 0x0, 0x100, 0x3, 0x7, 0x6bc, 0x8, 0x0, @struct={0xcb, 0x1}, 0xa, 0x6287, [0x1, 0xf, 0x882c, 0x10000, 0x4, 0x4]}, {0xb5, @struct={0x3, 0x1}, 0x0, 0x6, 0x8, 0x2, 0x6d7a, 0x2e2481c6, 0x99, @struct={0x8f}, 0x10, 0x145, [0x7fffffffffffffff, 0x3, 0x7f, 0x5, 0x100000000, 0x99ed]}, {0x3b0c, 0x2, 0xffffffff}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000005540)={{}, r6, 0x2, @unused=[0x61b09b36, 0x3d8, 0x3, 0x3], @devid=r7}) recvmmsg(r4, &(0x7f0000005440), 0x0, 0x60, 0x0) fanotify_mark(r5, 0x201, 0x4800003e, r4, 0x0) dup2(r5, r4) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[], 0x0) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) unshare(0x42040200) 1m53.91698959s ago: executing program 4 (id=94): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000180)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c46b7bf036c0f5c42279243a3c10", 0xcc000004, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x67) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) 1m53.335294589s ago: executing program 4 (id=96): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000180)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c46b7bf036c0f5c42279243a3c10", 0xcc000004, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x67) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x7}, 0x0) 1m52.860920555s ago: executing program 4 (id=97): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000080)={&(0x7f0000000180)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c46b7bf036c0f5c42279243a3c10", 0xcc000004, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x66) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 1m52.105353487s ago: executing program 4 (id=99): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000380)="c441f96ec866400fe2dec441a16dfb46c70453004d101000000fc01e52c4637bf02640f5c4b93e6566420f383375a1", 0xdc000006, 0x0, {[0x6]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x66) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 1m51.640308318s ago: executing program 4 (id=100): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000380)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c4637bf02640f5c4b93c10", 0xdc000006, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x66) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000001bc0)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0x3, 0xa73, &(0x7f0000003cc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x44402, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x6042, 0x0) sendfile(r2, r1, 0x0, 0x80000002) 1m50.074887178s ago: executing program 4 (id=102): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_emit_ethernet(0x9e, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) sched_setattr(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') pread64(r3, &(0x7f0000000180)=""/246, 0xf6, 0x20d5) setrlimit(0xf, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000380)={"dde31455499e94b05188c5c508bcd27a", 0x0, 0x0, {0x3, 0x2}, {0x100000000, 0x400}, 0x9, [0xc, 0x5, 0x3, 0x3, 0x9, 0x9, 0x2, 0x0, 0x400, 0x6, 0x401, 0xbd3d, 0x6, 0xb82, 0xfffffffffffffff8, 0x4]}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f00000021c0)={0x8, 0x6, {0x7ff, @usage=0x6, 0x0, 0x8, 0x50000, 0x7, 0x5, 0xc75, 0x4, @struct={0x3, 0x7fffffff}, 0x934, 0x0, [0x401, 0x1d, 0x7, 0x7fffffff, 0x3, 0xe]}, {0x1, @struct={0x6, 0x1ff}, 0x0, 0x100, 0x3, 0x7, 0x6bc, 0x8, 0x0, @struct={0xcb, 0x1}, 0xa, 0x6287, [0x1, 0xf, 0x882c, 0x10000, 0x4, 0x4]}, {0xb5, @struct={0x3, 0x1}, 0x0, 0x6, 0x8, 0x2, 0x6d7a, 0x2e2481c6, 0x99, @struct={0x8f}, 0x10, 0x145, [0x7fffffffffffffff, 0x3, 0x7f, 0x5, 0x100000000, 0x99ed]}, {0x3b0c, 0x2, 0xffffffff}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000005540)={{r4}, r6, 0x2, @unused=[0x61b09b36, 0x3d8, 0x3, 0x3], @devid=r7}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) fanotify_mark(r5, 0x201, 0x4800003e, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[], 0x0) unshare(0x42040200) 1m40.824577479s ago: executing program 32 (id=84): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db9638edbc"}) write$cgroup_devices(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e030800dd5c9801288563a20dad12"], 0xffdd) 1m40.061192923s ago: executing program 33 (id=86): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_emit_ethernet(0x9e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9200063fa392e039b1f95902e158283afffe8000000500000000000000000000bbff020000000000000000000000000001890090780000000000000000060000000001ff0000aafc0100000000000000000000000000000000b3af5654773fca3ecfde44bd6086e905f902c63aa20b315bc2cce2d6d97983afdba7bd96eb"], 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) sched_setattr(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') pread64(r3, &(0x7f0000000180)=""/246, 0xf6, 0x20d5) setrlimit(0xf, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x21c0, 0xc) r5 = fanotify_init(0x200, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000380)={"dde31455499e94b05188c5c508bcd27a", 0x0, 0x0, {0x3, 0x2}, {0x100000000, 0x400}, 0x9, [0xc, 0x5, 0x3, 0x3, 0x9, 0x9, 0x2, 0x0, 0x400, 0x6, 0x401, 0xbd3d, 0x6, 0xb82, 0xfffffffffffffff8, 0x4]}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f00000021c0)={0x8, 0x6, {0x7ff, @usage=0x6, 0x0, 0x8, 0x50000, 0x7, 0x5, 0xc75, 0x4, @struct={0x3, 0x7fffffff}, 0x934, 0x0, [0x401, 0x1d, 0x7, 0x7fffffff, 0x3, 0xe]}, {0x1, @struct={0x6, 0x1ff}, 0x0, 0x100, 0x3, 0x7, 0x6bc, 0x8, 0x0, @struct={0xcb, 0x1}, 0xa, 0x6287, [0x1, 0xf, 0x882c, 0x10000, 0x4, 0x4]}, {0xb5, @struct={0x3, 0x1}, 0x0, 0x6, 0x8, 0x2, 0x6d7a, 0x2e2481c6, 0x99, @struct={0x8f}, 0x10, 0x145, [0x7fffffffffffffff, 0x3, 0x7f, 0x5, 0x100000000, 0x99ed]}, {0x3b0c, 0x2, 0xffffffff}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000005540)={{}, r6, 0x2, @unused=[0x61b09b36, 0x3d8, 0x3, 0x3], @devid=r7}) recvmmsg(r4, &(0x7f0000005440), 0x0, 0x60, 0x0) fanotify_mark(r5, 0x201, 0x4800003e, r4, 0x0) dup2(r5, r4) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[], 0x0) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) unshare(0x42040200) 1m34.429620062s ago: executing program 34 (id=102): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_emit_ethernet(0x9e, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) sched_setattr(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') pread64(r3, &(0x7f0000000180)=""/246, 0xf6, 0x20d5) setrlimit(0xf, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000380)={"dde31455499e94b05188c5c508bcd27a", 0x0, 0x0, {0x3, 0x2}, {0x100000000, 0x400}, 0x9, [0xc, 0x5, 0x3, 0x3, 0x9, 0x9, 0x2, 0x0, 0x400, 0x6, 0x401, 0xbd3d, 0x6, 0xb82, 0xfffffffffffffff8, 0x4]}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f00000021c0)={0x8, 0x6, {0x7ff, @usage=0x6, 0x0, 0x8, 0x50000, 0x7, 0x5, 0xc75, 0x4, @struct={0x3, 0x7fffffff}, 0x934, 0x0, [0x401, 0x1d, 0x7, 0x7fffffff, 0x3, 0xe]}, {0x1, @struct={0x6, 0x1ff}, 0x0, 0x100, 0x3, 0x7, 0x6bc, 0x8, 0x0, @struct={0xcb, 0x1}, 0xa, 0x6287, [0x1, 0xf, 0x882c, 0x10000, 0x4, 0x4]}, {0xb5, @struct={0x3, 0x1}, 0x0, 0x6, 0x8, 0x2, 0x6d7a, 0x2e2481c6, 0x99, @struct={0x8f}, 0x10, 0x145, [0x7fffffffffffffff, 0x3, 0x7f, 0x5, 0x100000000, 0x99ed]}, {0x3b0c, 0x2, 0xffffffff}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000005540)={{r4}, r6, 0x2, @unused=[0x61b09b36, 0x3d8, 0x3, 0x3], @devid=r7}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) fanotify_mark(r5, 0x201, 0x4800003e, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[], 0x0) unshare(0x42040200) 19.802201872s ago: executing program 2 (id=241): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000380)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c4637bf02640f5c4b93c10", 0xdc000006, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x66) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000640)=""/159) 17.616573484s ago: executing program 2 (id=245): socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xb, 0x0, 0x6}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd00", 0x1a}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) fsetxattr$security_capability(r4, &(0x7f00000001c0), &(0x7f0000000100)=@v1={0x1000000, [{0x5, 0x9e0d}]}, 0xc, 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000540)=@allocspi={0x10c, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1, 0x0, 0xfd1, 0x4, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in6=@private2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x80000001}, {0x101, 0x0, 0x0, 0x800}, {0x4, 0x6, 0x400}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x94}, 0x0, 0x4ad}, [@srcaddr={0x14, 0xd, @in6=@local}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v3={0x3000000, [{0x1, 0x9}, {0x2, 0xffffffc0}]}, 0x18, 0x0) 14.036587876s ago: executing program 2 (id=250): syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f646973636172642c6163746976655f6c6f67733d362c646973636172645f756e69743d73656374696f6e2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6661756c745f747970653d30303030303030303030303030303030303030372c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c626172726965722c6167655f657874656e745f63616368652c757365725f78617474722c71756f74612c0089e5afa1e5917778089d53bf1e7976b8101ed131cec59926dc45294c5c18206d0a669306b1d0cc8e4f7753c03396a2734f10a3d75d435a08eff937580007aaad0ec81f842b74c22ac48ca4fbfd6fc3a509f51ebd287101d13d198d9a644e3d8216f29bc51a3a607656666d4d54e20072d115c3f57de32b7eb4964b4a45b355bb9d1a8cb6259ad2a4a5ef3e291451b10a28707e7964398a2d7a8a8d2b9e2ada5657"], 0x1, 0x5505, &(0x7f0000002480)="$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") rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000180)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c46b7bf036c0f5c42279243a3c10", 0xcc000004, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x67) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) 11.293178578s ago: executing program 5 (id=255): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 11.087223511s ago: executing program 2 (id=256): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r2, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r2, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 8.849616754s ago: executing program 1 (id=257): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000100)="c441f96ec866400fe2dec441a16dfb46c70453001010a800000fc01e66410f6f150400000052c46b7bf036c0f5c42279243a3c10", 0xcc000004, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x66) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000f"], 0x48) 8.421697874s ago: executing program 1 (id=258): socket(0x10, 0x3, 0x0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x200) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000340)={{0x6, 0x4, 0x7c, 0x6, 'syz1\x00', 0x5}, 0x1, [0x5, 0xffff, 0x0, 0x805, 0x0, 0x2, 0x3, 0x101, 0x3ff, 0x3, 0x7, 0x80, 0x6, 0x4000000000005, 0xfff, 0xb42, 0x0, 0x2, 0xf3f, 0xffff, 0x2, 0xfffffffffffffffa, 0x3, 0xf4a, 0xfffffffffffffff7, 0x1a8, 0x7, 0x4, 0x4, 0xc9, 0x4, 0x3, 0x4, 0x101, 0x101, 0x9, 0x8, 0x9, 0x10a, 0x7ff, 0x7ff, 0x8, 0x3, 0x10, 0x5166f65b, 0x7fff, 0x8, 0x7728fcc0, 0x0, 0x3, 0x1, 0x8, 0xf69d, 0x5, 0x2, 0xfffffffffffffff4, 0x85, 0x4451, 0x4, 0xffffffffffff2f8a, 0x5, 0x9, 0x7, 0x2, 0xfffbfffffffffffa, 0x6, 0x7f, 0x2, 0x1ff, 0x1ff, 0x1000000, 0x6, 0xffffffffffffffff, 0xfffffffffffffe00, 0xd964, 0x7, 0xfffffffffffffff9, 0x1000000000000001, 0x7, 0x80000000, 0x0, 0x9, 0x1, 0xcb, 0x9, 0x243, 0xcf40, 0x3, 0xffffffffffffffff, 0x4, 0xa69, 0x8, 0x8, 0x800000000000000, 0x8000000000000001, 0x9, 0xce8, 0xd, 0xffffffffffff8000, 0x5, 0x6e0, 0x1a02379b, 0xc2c, 0x3, 0x1, 0x6, 0x1, 0x0, 0x100000000002, 0x100000000, 0x8, 0xffffffffffffeffc, 0x6, 0x6, 0x3, 0x8, 0x1d2b, 0x5, 0x2, 0x2, 0x800000000, 0x168, 0x7, 0x3, 0x7, 0x3, 0x0, 0xbeca]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r6 = fanotify_init(0x20, 0x800) r7 = inotify_init() r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSERGETLSR(r8, 0x5459, &(0x7f0000000040)) inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x401) r9 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fanotify_mark(r6, 0x641, 0x1020, r9, 0x0) 8.020137208s ago: executing program 1 (id=259): socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xb, 0x0, 0x6}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd00", 0x1a}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) fsetxattr$security_capability(r4, &(0x7f00000001c0), &(0x7f0000000100)=@v1={0x1000000, [{0x5, 0x9e0d}]}, 0xc, 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000540)=@allocspi={0x10c, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1, 0x0, 0xfd1, 0x4, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in6=@private2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x80000001}, {0x101, 0x0, 0x0, 0x800}, {0x4, 0x6, 0x400}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x94}, 0x0, 0x4ad}, [@srcaddr={0x14, 0xd, @in6=@local}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v3={0x3000000, [{0x1, 0x9}, {0x2, 0xffffffc0}]}, 0x18, 0x0) 7.311568013s ago: executing program 5 (id=260): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x30}}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) 5.075935463s ago: executing program 1 (id=261): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000380)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c4637bf02640f5c4b93c10", 0xdc000006, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x66) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x12) 4.861473259s ago: executing program 1 (id=262): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev, 0x40, r4}) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r5, 0x8936, &(0x7f0000000000)) 4.60135053s ago: executing program 5 (id=263): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000380)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c4637bf02640f5c4b93c10", 0xdc000006, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x66) unshare(0x22020600) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 4.223128151s ago: executing program 5 (id=264): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000380)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c4637bf02640f5c4b93c10", 0xdc000006, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x66) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f00000010c0)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6e6f5f686561702c6163746976655f6c6f67733d362c6163746976655f6c6f67733d362c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303131322c616c6c6f635f6d6f64653d72657573652c6e6f61636c2c686561702c617467632c6e6f657874656e745f63616368652c636f6d70726573735f63616368652c6a71666d743d7666736f6c642c003b6a01ac180ccad64a6c4143c5ec26ffe3b82b197e9e9fcbfbf4d5e0d197a589fc13ec64daef10859bfa7fb2a010f2ed42a67b000aa0227391d5295469f6a7794bc152affebe04cd007b458790e702f43e8d95"], 0x1, 0x5505, &(0x7f0000002480)="$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") 2.733410194s ago: executing program 2 (id=265): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000380)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c4637bf02640f5c4b93c10", 0xdc000006, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x66) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000002640)={[{@usrquota}, {@coherency_full}, {@err_cont}, {@heartbeat_none}, {@err_cont}, {@nointr}, {@grpquota}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") 1.881840601s ago: executing program 1 (id=266): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000380)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c4637bf02640f5c4b93c10", 0xdc000006, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x66) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f0000000100)={0x20, 0x3, 0x5, {0x5, 0x23, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "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"}) 1.140194364s ago: executing program 5 (id=267): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000180)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c46b7bf036c0f5c42279243a3c10", 0xcc000004, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x67) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/182, 0xb6) 794.446904ms ago: executing program 5 (id=268): socket(0x10, 0x3, 0x0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x200) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000340)={{0x6, 0x4, 0x7c, 0x6, 'syz1\x00', 0x5}, 0x1, [0x5, 0xffff, 0x0, 0x805, 0x0, 0x2, 0x3, 0x101, 0x3ff, 0x3, 0x7, 0x80, 0x6, 0x4000000000005, 0xfff, 0xb42, 0x0, 0x2, 0xf3f, 0xffff, 0x2, 0xfffffffffffffffa, 0x3, 0xf4a, 0xfffffffffffffff7, 0x1a8, 0x7, 0x4, 0x4, 0xc9, 0x4, 0x3, 0x4, 0x101, 0x101, 0x9, 0x8, 0x9, 0x10a, 0x7ff, 0x7ff, 0x8, 0x3, 0x10, 0x5166f65b, 0x7fff, 0x8, 0x7728fcc0, 0x0, 0x3, 0x1, 0x8, 0xf69d, 0x5, 0x2, 0xfffffffffffffff4, 0x85, 0x4451, 0x4, 0xffffffffffff2f8a, 0x5, 0x9, 0x7, 0x2, 0xfffbfffffffffffa, 0x6, 0x7f, 0x2, 0x1ff, 0x1ff, 0x1000000, 0x6, 0xffffffffffffffff, 0xfffffffffffffe00, 0xd964, 0x7, 0xfffffffffffffff9, 0x1000000000000001, 0x7, 0x80000000, 0x0, 0x9, 0x1, 0xcb, 0x9, 0x243, 0xcf40, 0x3, 0xffffffffffffffff, 0x4, 0xa69, 0x8, 0x8, 0x800000000000000, 0x8000000000000001, 0x9, 0xce8, 0xd, 0xffffffffffff8000, 0x5, 0x6e0, 0x1a02379b, 0xc2c, 0x3, 0x1, 0x6, 0x1, 0x0, 0x100000000002, 0x100000000, 0x8, 0xffffffffffffeffc, 0x6, 0x6, 0x3, 0x8, 0x1d2b, 0x5, 0x2, 0x2, 0x800000000, 0x168, 0x7, 0x3, 0x7, 0x3, 0x0, 0xbeca]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r6 = fanotify_init(0x20, 0x800) r7 = inotify_init() r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSERGETLSR(r8, 0x5459, &(0x7f0000000040)) inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x401) r9 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fanotify_mark(r6, 0x641, 0x1020, r9, 0x0) 0s ago: executing program 2 (id=269): socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xb, 0x0, 0x6}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd00", 0x1a}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) fsetxattr$security_capability(r4, &(0x7f00000001c0), &(0x7f0000000100)=@v1={0x1000000, [{0x5, 0x9e0d}]}, 0xc, 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000540)=@allocspi={0x10c, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1, 0x0, 0xfd1, 0x4, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in6=@private2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x80000001}, {0x101, 0x0, 0x0, 0x800}, {0x4, 0x6, 0x400}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x94}, 0x0, 0x4ad}, [@srcaddr={0x14, 0xd, @in6=@local}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v3={0x3000000, [{0x1, 0x9}, {0x2, 0xffffffc0}]}, 0x18, 0x0) kernel console output (not intermixed with test programs): ort 2(bridge_slave_1) entered forwarding state [ 126.737890][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.758502][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 126.774235][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 126.791162][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 126.823210][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 126.864391][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.873261][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.979734][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.017203][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.025291][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.049634][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.224449][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.328915][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.336298][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.381600][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.432270][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.494448][ T3422] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.502091][ T3422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.521390][ T3422] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.528898][ T3422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.610927][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.615795][ T5839] Bluetooth: hci1: command tx timeout [ 127.653110][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.660719][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.686341][ T5839] Bluetooth: hci0: command tx timeout [ 127.709789][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.765806][ T5839] Bluetooth: hci2: command tx timeout [ 127.771514][ T5839] Bluetooth: hci3: command tx timeout [ 127.833793][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.841410][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.881424][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.889101][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.935274][ T5839] Bluetooth: hci5: command tx timeout [ 127.940936][ T5839] Bluetooth: hci4: command tx timeout [ 128.050216][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.074725][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.113725][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.181264][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.188792][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.204666][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.212726][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.253327][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.330141][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.858575][ T5838] veth0_vlan: entered promiscuous mode [ 129.011490][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.029938][ T5831] veth0_vlan: entered promiscuous mode [ 129.055498][ T5838] veth1_vlan: entered promiscuous mode [ 129.174589][ T5831] veth1_vlan: entered promiscuous mode [ 129.193945][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.351339][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.380327][ T5838] veth0_macvtap: entered promiscuous mode [ 129.405026][ T5838] veth1_macvtap: entered promiscuous mode [ 129.480793][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.542230][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.588354][ T5831] veth0_macvtap: entered promiscuous mode [ 129.608941][ T5831] veth1_macvtap: entered promiscuous mode [ 129.652621][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.668341][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.678482][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.691199][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.714899][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.747468][ T5827] veth0_vlan: entered promiscuous mode [ 129.860425][ T5827] veth1_vlan: entered promiscuous mode [ 129.893852][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.926875][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.947674][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.981714][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.993892][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.008832][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.064363][ T5828] veth0_vlan: entered promiscuous mode [ 130.092342][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.102569][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.113631][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.124702][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.271388][ T5828] veth1_vlan: entered promiscuous mode [ 130.420625][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.424567][ T5827] veth0_macvtap: entered promiscuous mode [ 130.448340][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.469091][ T5827] veth1_macvtap: entered promiscuous mode [ 130.534743][ T5828] veth0_macvtap: entered promiscuous mode [ 130.569480][ T5844] veth0_vlan: entered promiscuous mode [ 130.591544][ T5828] veth1_macvtap: entered promiscuous mode [ 130.657261][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.668058][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.679142][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.690039][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.702613][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.755847][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.764058][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.809165][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.811168][ T5844] veth1_vlan: entered promiscuous mode [ 130.826463][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.848058][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.863230][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.878600][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.889580][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.902063][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.952018][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.967798][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.978683][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.988428][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.002708][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.013400][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.024474][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.038984][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.051090][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.062100][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.073483][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.087555][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.101788][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.149016][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 131.178331][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.190100][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.205717][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.216774][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.227318][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.239017][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.253094][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.303607][ T5846] veth0_vlan: entered promiscuous mode [ 131.316233][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.330824][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.340295][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.349590][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.558871][ T5844] veth0_macvtap: entered promiscuous mode [ 131.578413][ T5846] veth1_vlan: entered promiscuous mode [ 131.640409][ T5844] veth1_macvtap: entered promiscuous mode [ 131.852357][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.885798][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.939007][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.965376][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.991186][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.016009][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.036966][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.065887][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.078446][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.105071][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.127176][ T5940] syz.1.8 (5940) used greatest stack depth: 21096 bytes left [ 132.137587][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.206603][ T5942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9'. [ 132.250929][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.289799][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.302377][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.318342][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.345087][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.365674][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.385269][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.414970][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.460901][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.550534][ T5947] loop1: detected capacity change from 0 to 1024 [ 132.564593][ T5844] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.608890][ T5844] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.636491][ T5844] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.661488][ T5947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.662623][ T5844] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.689875][ T5846] veth0_macvtap: entered promiscuous mode [ 132.703836][ T5846] veth1_macvtap: entered promiscuous mode [ 132.748526][ T5951] process 'syz.3.12' launched './file0' with NULL argv: empty string added [ 132.807100][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.845155][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.866599][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.892245][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.007611][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.073295][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.130228][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.161398][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.195023][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.230291][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.241899][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.258129][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.269932][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.286746][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.299007][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.332924][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.357022][ T5955] bridge0: port 3(syz_tun) entered blocking state [ 133.363711][ T5955] bridge0: port 3(syz_tun) entered disabled state [ 133.384107][ T5955] syz_tun: entered allmulticast mode [ 133.399795][ T5955] syz_tun: entered promiscuous mode [ 133.411181][ T5955] bridge0: port 3(syz_tun) entered blocking state [ 133.418545][ T5955] bridge0: port 3(syz_tun) entered forwarding state [ 133.438133][ T5956] bridge0: entered promiscuous mode [ 133.490448][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.517609][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.531034][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.552939][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.570106][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.605491][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.619688][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.670749][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.689089][ T5959] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 133.696973][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.708281][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.718631][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.733892][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.776282][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.859449][ T5846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.895089][ T5846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.914762][ T5846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.945066][ T5846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.212890][ T5953] loop3: detected capacity change from 0 to 32768 [ 134.257880][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.318375][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.562905][ T5953] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 134.715371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 134.746894][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.764501][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.909823][ T5953] XFS (loop3): Ending clean mount [ 135.076847][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.125931][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.447382][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.507795][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.723203][ T5831] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 136.086445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 136.096897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 136.600077][ T5976] loop2: detected capacity change from 0 to 32768 [ 136.697231][ T5976] ======================================================= [ 136.697231][ T5976] WARNING: The mand mount option has been deprecated and [ 136.697231][ T5976] and is ignored by this kernel. Remove the mand [ 136.697231][ T5976] option from the mount to silence this warning. [ 136.697231][ T5976] ======================================================= [ 137.406426][ T5976] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 137.557490][ T6011] netlink: 'syz.5.24': attribute type 21 has an invalid length. [ 137.613309][ T6011] netlink: 156 bytes leftover after parsing attributes in process `syz.5.24'. [ 138.062156][ T5828] ocfs2: Unmounting device (7,2) on (node local) [ 138.426660][ T6024] syz.2.28 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 138.721233][ T6028] loop5: detected capacity change from 0 to 256 [ 138.956772][ T6028] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 139.150610][ T6028] exFAT-fs (loop5): start_clu is invalid cluster(0x0) [ 139.513915][ T6038] loop0: detected capacity change from 0 to 512 [ 139.585962][ T6038] EXT4-fs (loop0): Invalid log block size: 4294967295 [ 140.079961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 140.090254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 140.196540][ T6017] loop1: detected capacity change from 0 to 32768 [ 140.287869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 140.329372][ T6017] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.26 (6017) [ 140.556098][ T6017] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.666957][ T6017] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 140.669544][ T6057] capability: warning: `syz.0.43' uses 32-bit capabilities (legacy support in use) [ 140.699924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 140.765192][ T6017] BTRFS info (device loop1): using free-space-tree [ 141.013751][ T6017] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 141.015960][ T6017] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 141.037300][ T6017] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 141.141640][ T6017] BTRFS error (device loop1): open_ctree failed: -12 [ 142.013441][ T6056] loop3: detected capacity change from 0 to 32768 [ 142.148298][ T6056] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.42 (6056) [ 142.239656][ T6056] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.239822][ T6056] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 142.239882][ T6056] BTRFS info (device loop3): using free-space-tree [ 142.665733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 142.823092][ T6056] BTRFS info (device loop3): rebuilding free space tree [ 143.322121][ T6059] loop2: detected capacity change from 0 to 32768 [ 143.387311][ T6059] XFS: noikeep mount option is deprecated. [ 143.444361][ T6059] XFS: noikeep mount option is deprecated. [ 143.615670][ T6059] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.627035][ T6059] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop2": -EINTR [ 143.628398][ T6059] XFS (loop2): log mount failed [ 143.634087][ T6111] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.886583][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.893305][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.125022][ T6116] loop4: detected capacity change from 0 to 512 [ 144.166616][ T5831] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.210274][ T30] audit: type=1800 audit(1746881170.340:2): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.56" name="file1" dev="tmpfs" ino=101 res=0 errno=0 [ 144.287055][ T6116] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.53: casefold flag without casefold feature [ 144.393609][ T6116] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.53: couldn't read orphan inode 15 (err -117) [ 144.437718][ T6127] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.559639][ T6116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.697154][ T30] audit: type=1800 audit(1746881170.770:3): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.53" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 145.098976][ T5846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.076091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 146.999097][ T6171] loop1: detected capacity change from 0 to 128 [ 147.256344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 147.627120][ T6144] loop4: detected capacity change from 0 to 32768 [ 148.259717][ T6164] loop2: detected capacity change from 0 to 32768 [ 148.352252][ T6164] OCFS2: ERROR (device loop2): ocfs2_get_clusters_nocache: Inode 18 has bad extent record (0, 1, 0) [ 148.436844][ T6164] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 148.526160][ T6164] OCFS2: File system is now read-only. [ 148.545565][ T6164] (syz.2.70,6164,1):ocfs2_get_clusters:634 ERROR: status = -30 [ 148.575830][ T6164] (syz.2.70,6164,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 148.635032][ T6164] (syz.2.70,6164,1):ocfs2_read_virt_blocks:997 ERROR: status = -30 [ 148.690866][ T6164] (syz.2.70,6164,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 148.779615][ T6164] (syz.2.70,6164,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30 [ 148.821855][ T6164] (syz.2.70,6164,0):ocfs2_init_global_system_inodes:466 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 148.821942][ T6164] (syz.2.70,6164,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30 [ 148.891808][ T6164] (syz.2.70,6164,1):ocfs2_initialize_super:2195 ERROR: status = -30 [ 148.978727][ T6164] (syz.2.70,6164,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 149.083977][ T6187] loop5: detected capacity change from 0 to 4096 [ 149.172994][ T6187] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 149.984151][ T6180] loop1: detected capacity change from 0 to 32768 [ 150.196252][ T6196] syzkaller0: entered promiscuous mode [ 150.286651][ T6196] syzkaller0: entered allmulticast mode [ 150.786018][ T5901] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 150.801745][ T6180] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 151.160918][ T6180] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,fsck,nojournal_transaction_names [ 151.160918][ T6180] allowing incompatible features above 0.0: (unknown version) [ 151.235236][ T5901] usb 1-1: config 0 has no interfaces? [ 151.475843][ T6180] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 151.487620][ T5901] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 151.536711][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.555067][ T6180] bcachefs (loop1): Version upgrade required: [ 151.555067][ T6180] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 151.555067][ T6180] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 151.555067][ T6180] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 151.595246][ T5901] usb 1-1: Product: syz [ 151.798161][ T5901] usb 1-1: Manufacturer: syz [ 151.803519][ T5901] usb 1-1: SerialNumber: syz [ 152.010031][ T5901] usb 1-1: config 0 descriptor?? [ 152.044662][ T6180] bcachefs (loop1): bcachefs (loop1): error validating btree node at btree alloc level 0/0 [ 152.044704][ T6180] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 152.044736][ T6180] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 152.466506][ T6180] bcachefs (loop1): btree_node_read_work: rewriting btree node at due to error [ 152.466506][ T6180] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 152.661090][ T6180] bcachefs (loop1): accounting_read... [ 152.750054][ T6212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.757527][ T6180] done [ 152.774240][ T6212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.826708][ T6231] loop2: detected capacity change from 0 to 32768 [ 152.847585][ T6180] bcachefs (loop1): alloc_read... done [ 152.858722][ T6180] bcachefs (loop1): snapshots_read... done [ 152.906808][ T6231] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.91 (6231) [ 152.945220][ T6180] bcachefs (loop1): check_allocations... [ 153.001175][ T6231] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 153.026910][ T6180] bcachefs (loop1): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 153.026957][ T6180] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 153.116049][ T6231] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 153.116134][ T6231] BTRFS info (device loop2): using free-space-tree [ 153.354421][ T6180] bcachefs (loop1): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 153.354474][ T6180] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 153.478859][ T6180] bcachefs (loop1): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 153.478893][ T6180] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 153.706719][ T6180] bcachefs (loop1): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 153.706750][ T6180] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 153.866098][ T6180] bcachefs (loop1): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 153.866133][ T6180] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 154.101854][ T6180] bcachefs (loop1): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 154.213624][ T6180] bcachefs (loop1): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 154.337566][ T6180] bcachefs (loop1): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 154.374680][ T6180] bcachefs (loop1): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 154.426378][ T6180] bcachefs (loop1): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 154.465237][ T6180] bcachefs (loop1): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 154.554039][ T6269] loop4: detected capacity change from 0 to 2048 [ 154.582764][ T6180] bcachefs (loop1): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 154.689347][ T5828] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 154.767754][ T6180] bcachefs (loop1): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 154.858619][ T6180] bcachefs (loop1): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 154.890310][ T6270] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.998053][ T6180] bcachefs (loop1): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 155.135863][ T6180] bcachefs (loop1): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 155.179638][ T30] audit: type=1800 audit(1746881181.320:4): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.100" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 155.255506][ T6180] bcachefs (loop1): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 155.302473][ T6180] bcachefs (loop1): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 155.315202][ T30] audit: type=1800 audit(1746881181.360:5): pid=6269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.100" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 155.414321][ T6180] bcachefs (loop1): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 155.485565][ T6180] bcachefs (loop1): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 155.511571][ T6180] bcachefs (loop1): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 155.578307][ T6180] bcachefs (loop1): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 155.599545][ T6180] bcachefs (loop1): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 155.614715][ T6180] bcachefs (loop1): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 155.695723][ T6180] bcachefs (loop1): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 155.733628][ T6180] bcachefs (loop1): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 155.733666][ T6180] Ratelimiting new instances of previous error [ 155.839580][ T6180] bcachefs (loop1): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 155.839606][ T6180] Ratelimiting new instances of previous error [ 156.062418][ T6180] done [ 156.134890][ T6180] bcachefs (loop1): going read-write [ 156.225943][ T5891] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 156.247451][ T6180] bcachefs (loop1): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 156.288408][ T6277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.310963][ T6180] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10 [ 156.356706][ T6180] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 156.530695][ T6180] bcachefs (loop1): unclean shutdown complete, journal seq 11 [ 156.606812][ T5891] usb 5-1: config 0 has no interfaces? [ 156.690952][ T6180] bcachefs (loop1): bch2_fs_recovery(): error EINTR [ 156.713446][ T6180] bcachefs (loop1): bch2_fs_start(): error starting filesystem EINTR [ 156.725504][ T6180] bcachefs (loop1): shutting down [ 156.775603][ T5891] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 156.785468][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.793616][ T5891] usb 5-1: Product: syz [ 156.853968][ T5891] usb 5-1: Manufacturer: syz [ 156.878084][ T5891] usb 5-1: SerialNumber: syz [ 156.907372][ T5891] usb 5-1: config 0 descriptor?? [ 157.007405][ T6180] bcachefs (loop1): shutdown complete [ 157.571738][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.583105][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.755978][ T5985] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 159.373967][ T5985] usb 6-1: config 0 has no interfaces? [ 159.499694][ T5985] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 159.509980][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.553549][ T5985] usb 6-1: Product: syz [ 159.599951][ T5985] usb 6-1: Manufacturer: syz [ 159.625053][ T5985] usb 6-1: SerialNumber: syz [ 159.743623][ T5985] usb 6-1: config 0 descriptor?? [ 161.298616][ T6180] bcachefs: bch2_fs_get_tree() error: EINTR [ 162.697475][ T1101] usb 6-1: USB disconnect, device number 2 [ 165.727482][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 165.742362][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 165.767183][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 165.787344][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 165.797327][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 166.382831][ T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 166.403663][ T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 166.413415][ T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 166.436473][ T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 166.449654][ T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 166.974699][ T6275] warning: `syz.4.102' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 167.012705][ T6322] bridge0: entered allmulticast mode [ 167.040574][ T6325] pim6reg: entered allmulticast mode [ 167.690658][ T5901] IPVS: starting estimator thread 0... [ 167.720075][ T6344] loop1: detected capacity change from 0 to 32768 [ 167.785570][ T6349] IPVS: using max 21 ests per chain, 50400 per kthread [ 167.845173][ T5839] Bluetooth: hci6: command tx timeout [ 168.132444][ T6344] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 168.281649][ T6344] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 168.281649][ T6344] allowing incompatible features above 0.0: (unknown version) [ 168.393700][ T6344] bcachefs (loop1): invalid journal entry, version=1.7: mi_btree_bitmap type=btree_root in superblock: invalid btree root journal entry: wrong number of keys, fixing [ 168.472714][ T6344] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 168.520174][ T6344] bcachefs (loop1): superblock requires following recovery passes to be run: [ 168.520174][ T6344] recovery_pass_empty,accounting_read [ 168.565760][ T5839] Bluetooth: hci7: command tx timeout [ 168.579492][ T6344] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.25: extent_flags [ 168.579492][ T6344] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 168.644148][ T6350] loop2: detected capacity change from 0 to 32768 [ 168.700837][ T6344] bcachefs (loop1): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 168.767843][ T6344] bcachefs (loop1): bcachefs (loop1): error validating btree node on loop1 at btree extents level 0/0 [ 168.767889][ T6344] u64s 11 type btree_ptr_v2 U64_MAX:U64_MAX:4278190080 len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 168.767924][ T6344] node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX, btree topology error: [ 168.870838][ T6344] bcachefs (loop1): flagging btree extents lost data [ 168.890281][ T6344] bcachefs (loop1): running explicit recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 168.912842][ T6344] bcachefs (loop1): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 168.947561][ T6344] bcachefs (loop1): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 168.984759][ T6344] bcachefs (loop1): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 169.031353][ T6344] bcachefs (loop1): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4100:U32_MAX len 0 ver 0: (unpack error) [ 169.031383][ T6344] invalid variable length fields, deleting [ 169.087467][ T6344] bcachefs (loop1): invalid bkey in btree_node btree=xattrs level=0: u64s 7 type xattr 536870912:3798421620223919902:U32_MAX len 0 ver 0: user.:xattr2 [ 169.087510][ T6344] value too small (2 < 226), deleting [ 169.213105][ T6344] bcachefs (loop1): bcachefs (loop1): error validating btree node on loop1 at btree lru level 0/0 [ 169.213142][ T6344] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 169.213175][ T6344] node offset 8/16: btree node data missing: expected 16 sectors, found 8, fixing [ 169.314221][ T6344] bcachefs (loop1): btree_node_read_work: rewriting btree node at due to error [ 169.314221][ T6344] btree=lru level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 169.356229][ T6344] bcachefs (loop1): bcachefs (loop1): error validating btree node on loop1 at btree freespace level 0/0 [ 169.356263][ T6344] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 169.356295][ T6344] node offset 0/32: bad magic: want 59513f585d347cd2, got 59513f585d340000, btree topology error: [ 169.410486][ T6344] bcachefs (loop1): flagging btree freespace lost data [ 169.417603][ T6344] bcachefs (loop1): running explicit recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 169.435477][ T6344] bcachefs (loop1): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 169.455806][ T6344] bcachefs (loop1): bcachefs (loop1): error validating btree node on loop1 at btree deleted_inodes level 0/0 [ 169.455844][ T6344] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key 0:4278190080:0 durability: 1 ptr: 0:42:0 gen 0 [ 169.455876][ T6344] node offset 0/8: incorrect min_key: got POS_MIN should be 0:4278190080:0, btree topology error: [ 169.545481][ T6344] bcachefs (loop1): flagging btree deleted_inodes lost data [ 169.554714][ T6344] bcachefs (loop1): error reading btree root btree=deleted_inodes level=0: btree_node_read_error, fixing [ 169.609579][ T6344] bcachefs (loop1): scan_for_btree_nodes... [ 169.639778][ T6364] bcachefs (loop1): bcachefs (loop1): error validating btree node on loop1 at btree extents level 0/0 [ 169.639825][ T6364] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 0 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 169.639857][ T6364] node offset 0/0 bset u64s 0: invalid bkey format: field 1 too large: 18446744073709551615 + 38654705664 > 18446744073709551615 [ 169.639888][ T6364] u64s 3 fields 64:0, 64:38654705664, 32:0, 0:0, 0:0, 0:0, btree topology error: [ 169.668683][ T3422] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.848777][ T6344] bcachefs (loop1): btree node scan found 2 nodes after overwrites [ 169.850851][ T6362] loop5: detected capacity change from 0 to 32768 [ 169.870181][ T6344] done [ 169.893529][ T6344] bcachefs (loop1): check_topology... [ 169.896845][ T6344] bcachefs (loop1): btree root extents unreadable, must recover from scan [ 169.926532][ T5839] Bluetooth: hci6: command tx timeout [ 169.944807][ T6344] bcachefs (loop1): no nodes found for btree extents, continuing [ 169.966457][ T6344] bcachefs (loop1): btree root deleted_inodes unreadable, must recover from scan [ 170.003069][ T6344] bcachefs (loop1): bch2_get_scanned_nodes(): recovery btree=deleted_inodes level=0 POS_MIN - SPOS_MAX [ 170.022005][ T3422] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.035876][ T6344] bcachefs (loop1): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 170.097629][ T6344] done [ 170.104536][ T6344] bcachefs (loop1): accounting_read... done [ 170.152629][ T6344] bcachefs (loop1): alloc_read... done [ 170.174137][ T6344] bcachefs (loop1): snapshots_read... done [ 170.201749][ T6344] bcachefs (loop1): check_allocations... [ 170.203421][ T6344] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 170.203453][ T6344] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 8 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 170.276834][ T6344] bcachefs (loop1): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 170.276865][ T6344] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 8 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 170.326799][ T6344] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 170.326835][ T6344] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 170.354715][ T3422] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.379123][ T6344] bcachefs (loop1): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 170.379159][ T6344] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 170.599287][ T6344] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 170.599324][ T6344] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 170.645233][ T5839] Bluetooth: hci7: command tx timeout [ 170.771292][ T6344] bcachefs (loop1): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 170.771327][ T6344] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 170.858347][ T47] usb 5-1: USB disconnect, device number 2 [ 170.982597][ T3422] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.003041][ T6344] bcachefs (loop1): bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 171.003077][ T6344] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 171.215278][ T6344] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 171.215314][ T6344] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 171.281226][ T6341] chnl_net:caif_netlink_parms(): no params data found [ 171.374485][ T6344] bcachefs (loop1): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 171.374530][ T6344] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 171.579485][ T6344] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 171.579512][ T6344] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 171.747352][ T6344] bcachefs (loop1): bucket 0:32 data type btree ptr gen 0 missing in alloc btree [ 171.747388][ T6344] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 171.865213][ T6339] chnl_net:caif_netlink_parms(): no params data found [ 171.885597][ T6344] bcachefs (loop1): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 171.885625][ T6344] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 172.035340][ T5839] Bluetooth: hci6: command tx timeout [ 172.150299][ T6344] bcachefs (loop1): bucket 0:37 data type btree ptr gen 0 missing in alloc btree [ 172.150335][ T6344] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing [ 172.181168][ T6344] bcachefs (loop1): bucket 0:42 data type btree ptr gen 0 missing in alloc btree [ 172.181200][ T6344] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0, fixing [ 172.316996][ T6344] bcachefs (loop1): bucket 0:0 gen 0 has wrong data_type: got free, should be sb, fixing [ 172.350674][ T6344] bcachefs (loop1): bucket 0:0 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 172.377602][ T6344] bcachefs (loop1): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 172.396887][ T6344] bcachefs (loop1): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 172.417665][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.445634][ T6344] bcachefs (loop1): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 172.463780][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.464072][ T6341] bridge_slave_0: entered allmulticast mode [ 172.466771][ T6341] bridge_slave_0: entered promiscuous mode [ 172.482390][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.482504][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.482714][ T6341] bridge_slave_1: entered allmulticast mode [ 172.484895][ T6341] bridge_slave_1: entered promiscuous mode [ 172.685790][ T6344] bcachefs (loop1): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 172.698847][ T6344] bcachefs (loop1): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 172.712145][ T6344] bcachefs (loop1): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 172.725896][ T5839] Bluetooth: hci7: command tx timeout [ 172.738599][ T6344] bcachefs (loop1): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 172.753913][ T6344] bcachefs (loop1): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 172.767548][ T6344] bcachefs (loop1): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 172.784042][ T6344] bcachefs (loop1): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 172.798986][ T6344] bcachefs (loop1): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 172.818115][ T6344] bcachefs (loop1): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 172.831252][ T6344] bcachefs (loop1): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 172.852751][ T5891] usb 1-1: USB disconnect, device number 2 [ 172.921161][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.932735][ T6344] bcachefs (loop1): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 172.948378][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.958182][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.966484][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.970487][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.065048][ T6344] bcachefs (loop1): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 173.084520][ T6344] bcachefs (loop1): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 173.106876][ T6344] bcachefs (loop1): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 173.125813][ T6344] bcachefs (loop1): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 173.139855][ T6344] bcachefs (loop1): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 173.139887][ T6344] Ratelimiting new instances of previous error [ 173.159939][ T6344] bcachefs (loop1): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 173.159974][ T6344] Ratelimiting new instances of previous error [ 173.206880][ T6344] done [ 173.220886][ T6344] bcachefs (loop1): going read-write [ 173.227431][ T6379] netlink: 6 bytes leftover after parsing attributes in process `syz.5.137'. [ 173.232171][ T6344] bcachefs (loop1): bch2_copygc_start(): error creating copygc thread EINTR [ 173.245575][ T6379] bridge: RTM_NEWNEIGH with invalid ether address [ 173.246682][ T6344] bcachefs (loop1): __bch2_fs_read_write(): error error starting copygc thread EINTR [ 173.309873][ T6344] bcachefs (loop1): going read-only [ 173.326055][ T6344] bcachefs (loop1): finished waiting for writes to stop [ 173.333371][ T6344] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10 [ 173.357530][ T6344] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 173.379683][ T6341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.474602][ T6341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.502348][ T6344] bcachefs (loop1): unclean shutdown complete, journal seq 11 [ 173.583095][ T6344] bcachefs (loop1): done going read-only, filesystem not clean [ 173.604614][ T6344] bcachefs (loop1): bch2_fs_recovery(): error EINTR [ 173.626313][ T6344] bcachefs (loop1): bch2_fs_start(): error starting filesystem EINTR [ 173.638452][ T3422] bridge_slave_1: left allmulticast mode [ 173.644510][ T3422] bridge_slave_1: left promiscuous mode [ 173.645264][ T6344] bcachefs (loop1): shutting down [ 173.675516][ T3422] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.753555][ T3422] bridge_slave_0: left allmulticast mode [ 173.768540][ T3422] bridge_slave_0: left promiscuous mode [ 173.782953][ T3422] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.821156][ T6344] bcachefs (loop1): shutdown complete [ 174.085146][ T55] Bluetooth: hci6: command tx timeout [ 174.809250][ T55] Bluetooth: hci7: command tx timeout [ 175.055239][ T55] Bluetooth: hci0: command tx timeout [ 175.159960][ T3422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.198772][ T3422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.214724][ T3422] bond0 (unregistering): Released all slaves [ 175.264118][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.272075][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.297837][ T6339] bridge_slave_0: entered allmulticast mode [ 175.324246][ T6339] bridge_slave_0: entered promiscuous mode [ 175.497797][ T6341] team0: Port device team_slave_0 added [ 175.615257][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.622480][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.675322][ T6339] bridge_slave_1: entered allmulticast mode [ 175.697647][ T6339] bridge_slave_1: entered promiscuous mode [ 175.960752][ T6341] team0: Port device team_slave_1 added [ 176.027269][ T6344] bcachefs: bch2_fs_get_tree() error: EINTR [ 176.529732][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.553125][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.702274][ T6341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.902972][ T6339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.951825][ T6339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.105453][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.112585][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.126042][ T55] Bluetooth: hci0: command tx timeout [ 177.245911][ T6341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.822371][ T3422] hsr_slave_0: left promiscuous mode [ 177.904989][ T3422] hsr_slave_1: left promiscuous mode [ 177.936105][ T3422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.943703][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.028663][ T3422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.081544][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.287778][ T3422] veth1_macvtap: left promiscuous mode [ 178.294227][ T3422] veth0_macvtap: left promiscuous mode [ 178.346070][ T3422] veth1_vlan: left promiscuous mode [ 178.363976][ T3422] veth0_vlan: left promiscuous mode [ 178.572322][ T6423] loop1: detected capacity change from 0 to 32768 [ 178.628526][ T6423] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.151 (6423) [ 178.715455][ T6423] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 178.775163][ T6423] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 178.812444][ T6423] BTRFS info (device loop1): using free-space-tree [ 179.225106][ T5839] Bluetooth: hci0: command tx timeout [ 179.232150][ T6462] loop5: detected capacity change from 0 to 128 [ 179.745693][ T5838] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 179.846611][ T6462] EXT4-fs (loop5): Test dummy encryption mode enabled [ 179.931881][ T6462] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.032723][ T6462] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.373357][ T6482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.160'. [ 180.500621][ T6462] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 180.523160][ T6481] fscrypt (loop5): Error allocating 'xts(aes)' transform: -4 [ 180.865678][ T5844] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.128530][ T6490] loop5: detected capacity change from 0 to 1024 [ 181.285333][ T5839] Bluetooth: hci0: command tx timeout [ 181.417461][ T13] hfsplus: b-tree write err: -5, ino 4 [ 182.012184][ T6492] loop5: detected capacity change from 0 to 4096 [ 182.349626][ T3422] team0 (unregistering): Port device team_slave_1 removed [ 183.136213][ T47] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 183.402028][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 183.468734][ T47] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 183.500747][ T3422] team0 (unregistering): Port device team_slave_0 removed [ 183.514574][ T47] usb 3-1: config 0 has no interface number 0 [ 183.541521][ T47] usb 3-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 183.575267][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.584527][ T47] usb 3-1: Product: syz [ 183.597678][ T47] usb 3-1: Manufacturer: syz [ 183.622798][ T47] usb 3-1: SerialNumber: syz [ 183.645905][ T47] usb 3-1: config 0 descriptor?? [ 185.113198][ T6339] team0: Port device team_slave_0 added [ 185.276395][ T6339] team0: Port device team_slave_1 added [ 185.537592][ T47] usb 3-1: USB disconnect, device number 2 [ 185.983926][ T6341] hsr_slave_0: entered promiscuous mode [ 186.003260][ T6341] hsr_slave_1: entered promiscuous mode [ 186.016969][ T6341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.024770][ T6341] Cannot create hsr debugfs directory [ 186.174481][ T6339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.195026][ T6339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.313032][ T6339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.361121][ T6339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.390983][ T6339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.486307][ T6339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.096641][ T6511] loop1: detected capacity change from 0 to 32768 [ 187.408501][ T6511] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 187.444238][ T6510] loop2: detected capacity change from 0 to 40427 [ 187.494999][ T6510] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 187.503289][ T6510] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 187.726495][ T6339] hsr_slave_0: entered promiscuous mode [ 187.734022][ T6339] hsr_slave_1: entered promiscuous mode [ 187.838706][ T6339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.882433][ T6339] Cannot create hsr debugfs directory [ 188.158764][ T6382] chnl_net:caif_netlink_parms(): no params data found [ 188.456476][ T6510] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 188.569557][ T6510] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 190.343566][ T3422] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.551418][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.605271][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.612696][ T6382] bridge_slave_0: entered allmulticast mode [ 190.692766][ T6382] bridge_slave_0: entered promiscuous mode [ 190.864599][ T3422] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.888401][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.906167][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.930892][ T6382] bridge_slave_1: entered allmulticast mode [ 190.952548][ T6382] bridge_slave_1: entered promiscuous mode [ 191.387913][ T3422] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.473432][ T6561] netlink: 28 bytes leftover after parsing attributes in process `syz.5.176'. [ 191.663921][ T3422] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.808043][ T6382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.974178][ T6382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.158283][ T5838] ocfs2: Unmounting device (7,1) on (node local) [ 192.328580][ T6382] team0: Port device team_slave_0 added [ 192.353309][ T6563] loop5: detected capacity change from 0 to 4096 [ 192.394828][ T6563] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 192.615804][ T6382] team0: Port device team_slave_1 added [ 193.138406][ T6341] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 193.208119][ T6341] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 193.861209][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.884830][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.981399][ T6382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.385396][ T3422] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.452678][ T6341] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 194.487837][ T6341] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 194.663852][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.715040][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.855048][ T6382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.030466][ T3422] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.525532][ T3422] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.906670][ T6592] loop5: detected capacity change from 0 to 32768 [ 195.937374][ T6592] XFS: ikeep mount option is deprecated. [ 195.943589][ T6592] XFS: ikeep mount option is deprecated. [ 196.023156][ T3422] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.129403][ T6592] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 196.190360][ T6382] hsr_slave_0: entered promiscuous mode [ 196.236763][ T6382] hsr_slave_1: entered promiscuous mode [ 196.243922][ T6382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.252707][ T6382] Cannot create hsr debugfs directory [ 196.269295][ T6339] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 196.332480][ T6339] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 196.439942][ T6339] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 196.579151][ T6592] XFS (loop5): Ending clean mount [ 196.617616][ T6592] XFS (loop5): Quotacheck needed: Please wait. [ 196.670110][ T6339] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 196.804740][ T6592] XFS (loop5): Quotacheck: Done. [ 196.826016][ T6596] loop2: detected capacity change from 0 to 32768 [ 196.971219][ T6596] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 197.026285][ T6596] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 197.397973][ T6596] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 197.455108][ T5901] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 197.462584][ T5901] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 197.553691][ T5844] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 197.635598][ T5901] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 173ms [ 197.681297][ T5901] gfs2: fsid=syz:syz.0: jid=0: Done [ 197.697008][ T6596] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 197.815503][ T6596] gfs2: fsid=syz:syz.0: can't create quotad thread: -4 [ 198.238246][ T3422] bridge_slave_1: left allmulticast mode [ 198.310784][ T3422] bridge_slave_1: left promiscuous mode [ 198.325243][ T3422] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.342878][ T6635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.186'. [ 198.383210][ T3422] bridge_slave_0: left allmulticast mode [ 198.396517][ T3422] bridge_slave_0: left promiscuous mode [ 198.402431][ T3422] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.451700][ T3422] bridge_slave_1: left allmulticast mode [ 198.458011][ T3422] bridge_slave_1: left promiscuous mode [ 198.464374][ T3422] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.517751][ T3422] bridge_slave_0: left allmulticast mode [ 198.524027][ T3422] bridge_slave_0: left promiscuous mode [ 198.555897][ T3422] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.893929][ T6644] loop2: detected capacity change from 0 to 32768 [ 199.922192][ T6644] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.187 (6644) [ 199.996836][ T6644] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 200.095819][ T6644] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 200.105549][ T6644] BTRFS info (device loop2): using free-space-tree [ 200.327833][ T6644] BTRFS info (device loop2): rebuilding free space tree [ 200.880500][ T5828] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 203.196991][ T3422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.230085][ T3422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.248337][ T3422] bond0 (unregistering): Released all slaves [ 203.694483][ T3422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.717100][ T3422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.737657][ T3422] bond0 (unregistering): Released all slaves [ 204.385461][ T6341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.950239][ T6341] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.297105][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.304182][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.438546][ T6382] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 205.581660][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.589517][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.653233][ T6382] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 205.971291][ T6382] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 206.029433][ T6382] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 206.117298][ T6339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.250780][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.258607][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.473920][ T6339] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.189342][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.197140][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.268110][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.276145][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.523826][ T3422] hsr_slave_0: left promiscuous mode [ 208.062084][ T3422] hsr_slave_1: left promiscuous mode [ 208.078510][ T3422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.098760][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.122974][ T3422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.142052][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.171991][ T3422] hsr_slave_0: left promiscuous mode [ 208.199831][ T3422] hsr_slave_1: left promiscuous mode [ 208.246467][ T3422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.254279][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.385217][ T3422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.393092][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.453409][ T6698] loop5: detected capacity change from 0 to 32768 [ 208.710429][ T6698] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 208.803600][ T3422] veth1_macvtap: left promiscuous mode [ 208.809610][ T3422] veth0_macvtap: left promiscuous mode [ 208.820556][ T3422] veth1_vlan: left promiscuous mode [ 208.826337][ T3422] veth0_vlan: left promiscuous mode [ 208.856036][ T3422] veth1_macvtap: left promiscuous mode [ 208.981774][ T3422] veth0_macvtap: left promiscuous mode [ 208.995711][ T3422] veth1_vlan: left promiscuous mode [ 209.015189][ T3422] veth0_vlan: left promiscuous mode [ 209.103948][ T5844] ocfs2: Unmounting device (7,5) on (node local) [ 209.980684][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.5.201'. [ 211.250351][ T3422] team0 (unregistering): Port device team_slave_1 removed [ 211.370460][ T3422] team0 (unregistering): Port device team_slave_0 removed [ 211.723657][ T6736] loop2: detected capacity change from 0 to 32768 [ 212.099729][ T6736] bcachefs (baafa011-d992-4344-aaf9-4ff0e0bec0ff): Using encoding defined by superblock: utf8-12.1.0 [ 212.208251][ T6736] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,fix_errors=no,nojournal_transaction_names [ 212.208251][ T6736] allowing incompatible features above 0.0: (unknown version) [ 212.261457][ T6736] bcachefs (loop2): invalid bkey in superblock btree=extents level=0: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4e0410879b0c2f04 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 212.261510][ T6736] invalid key type for btree extents (btree_ptr_v2), deleting [ 212.295348][ T6736] bcachefs (loop2): recovering from clean shutdown, journal seq 13 [ 212.303863][ T6736] bcachefs (loop2): Version upgrade required: [ 212.303863][ T6736] Version upgrade from 0.19: freespace to 1.7: mi_btree_bitmap incomplete [ 212.303863][ T6736] Doing incompatible version upgrade from 0.19: freespace to 1.25: extent_flags [ 212.303863][ T6736] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 212.399323][ T6736] bcachefs (loop2): accounting_read... done [ 212.407591][ T6736] bcachefs (loop2): alloc_read... done [ 212.414144][ T6736] bcachefs (loop2): snapshots_read... done [ 212.420384][ T6736] bcachefs (loop2): check_allocations... [ 212.442336][ T6736] bcachefs (loop2): bucket 0:27 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 212.470774][ T6736] bcachefs (loop2): bucket 0:27 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 212.494700][ T6736] bcachefs (loop2): bucket 0:34 gen 0 has wrong data_type: got user, should be need_discard, fixing [ 212.508389][ T6736] bcachefs (loop2): bucket 0:34 gen 0 data type need_discard has wrong dirty_sectors: got 16, should be 0, fixing [ 212.532283][ T6736] done [ 212.541921][ T6736] bcachefs (loop2): going read-write [ 212.607228][ T6736] bcachefs (loop2): journal_replay... done [ 212.978412][ T6736] bcachefs (loop2): check_alloc_info... [ 213.010944][ T6736] bcachefs (loop2): bucket incorrectly unset in need_discard btree [ 213.010988][ T6736] u64s 13 type alloc_v4 0:27:0 len 0 ver 0: [ 213.011007][ T6736] gen 0 oldest_gen 0 data_type need_discard [ 213.011027][ T6736] journal_seq_nonempty 4 [ 213.011044][ T6736] journal_seq_empty 0 [ 213.011061][ T6736] need_discard 1 [ 213.011079][ T6736] need_inc_gen 1 [ 213.011096][ T6736] dirty_sectors 0 [ 213.011114][ T6736] stripe_sectors 0 [ 213.011132][ T6736] cached_sectors 0 [ 213.011150][ T6736] stripe 0 [ 213.011167][ T6736] stripe_redundancy 0 [ 213.011184][ T6736] io_time[READ] 1 [ 213.011202][ T6736] io_time[WRITE] 256 [ 213.011220][ T6736] fragmentation 0 [ 213.011238][ T6736] bp_start 8 [ 213.011255][ T6736] , fixing [ 213.139112][ T6736] bcachefs (loop2): bucket incorrectly unset in need_discard btree [ 213.139144][ T6736] u64s 13 type alloc_v4 0:34:0 len 0 ver 0: [ 213.139163][ T6736] gen 0 oldest_gen 0 data_type need_discard [ 213.139182][ T6736] journal_seq_nonempty 5 [ 213.139199][ T6736] journal_seq_empty 134217728 [ 213.139217][ T6736] need_discard 1 [ 213.139234][ T6736] need_inc_gen 1 [ 213.139251][ T6736] dirty_sectors 0 [ 213.139267][ T6736] stripe_sectors 0 [ 213.139285][ T6736] cached_sectors 0 [ 213.139302][ T6736] stripe 0 [ 213.139319][ T6736] stripe_redundancy 0 [ 213.139336][ T6736] io_time[READ] 1 [ 213.139353][ T6736] io_time[WRITE] 512 [ 213.139371][ T6736] fragmentation 0 [ 213.139388][ T6736] bp_start 8 [ 213.139406][ T6736] , fixing [ 213.333704][ T6736] done [ 213.352564][ T6736] bcachefs (loop2): check_lrus... [ 213.360033][ T6736] bcachefs (loop2): incorrect lru entry: lru fragmentation time 134217728 [ 213.360071][ T6736] u64s 5 type set 18446462598867058688:34:0 len 0 ver 0 [ 213.360093][ T6736] for u64s 13 type alloc_v4 0:34:0 len 0 ver 0: [ 213.360113][ T6736] gen 0 oldest_gen 0 data_type need_discard [ 213.360132][ T6736] journal_seq_nonempty 5 [ 213.360149][ T6736] journal_seq_empty 134217728 [ 213.360167][ T6736] need_discard 1 [ 213.360184][ T6736] need_inc_gen 1 [ 213.360201][ T6736] dirty_sectors 0 [ 213.360218][ T6736] stripe_sectors 0 [ 213.360235][ T6736] cached_sectors 0 [ 213.360252][ T6736] stripe 0 [ 213.360269][ T6736] stripe_redundancy 0 [ 213.360286][ T6736] io_time[READ] 1 [ 213.360303][ T6736] io_time[WRITE] 512 [ 213.360321][ T6736] fragmentation 0 [ 213.360338][ T6736] bp_start 8 [ 213.360355][ T6736] , fixing [ 213.525450][ T6736] done [ 213.531694][ T6736] bcachefs (loop2): check_btree_backpointers... done [ 213.543036][ T6736] bcachefs (loop2): check_backpointers_to_extents... done [ 213.583501][ T6736] bcachefs (loop2): check_extents_to_backpointers... [ 213.589314][ T6736] bcachefs (loop2): scanning for missing backpointers in 6/128 buckets [ 213.610842][ T6736] done [ 213.628997][ T6736] bcachefs (loop2): check_alloc_to_lru_refs... done [ 213.646387][ T6736] bcachefs (loop2): bucket_gens_init... done [ 213.735312][ T6736] bcachefs (loop2): check_snapshot_trees... done [ 213.748405][ T6736] bcachefs (loop2): check_snapshots... [ 213.749647][ T6736] bcachefs (loop2): snapshot points to missing/incorrect tree: [ 213.749675][ T6736] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent 0 children 0 0 subvol 1 tree 0, fixing [ 213.929235][ T6736] done [ 213.947187][ T6736] bcachefs (loop2): check_subvols... done [ 213.978377][ T6736] bcachefs (loop2): check_subvol_children... done [ 213.988210][ T6736] bcachefs (loop2): delete_dead_snapshots... done [ 214.025296][ T6736] bcachefs (loop2): check_inodes... done [ 214.053995][ T6736] bcachefs (loop2): check_extents... done [ 214.061661][ T6736] bcachefs (loop2): check_indirect_extents... done [ 214.091914][ T3422] team0 (unregistering): Port device team_slave_1 removed [ 214.096068][ T6736] bcachefs (loop2): check_dirents... done [ 214.144803][ T6736] bcachefs (loop2): check_xattrs... done [ 214.152608][ T6736] bcachefs (loop2): check_root... done [ 214.169501][ T3422] team0 (unregistering): Port device team_slave_0 removed [ 214.178077][ T6736] bcachefs (loop2): check_unreachable_inodes... done [ 214.194371][ T6736] bcachefs (loop2): check_subvolume_structure... done [ 214.202792][ T6736] bcachefs (loop2): check_directory_structure... done [ 214.212517][ T6736] bcachefs (loop2): check_nlinks... done [ 214.238188][ T6736] bcachefs (loop2): resume_logged_ops... done [ 214.244726][ T6736] bcachefs (loop2): delete_dead_inodes... done [ 214.262202][ T6736] bcachefs (loop2): set_fs_needs_rebalance... done [ 214.426255][ T6736] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 214.438875][ T6736] bcachefs (loop2): check_alloc_info... done [ 214.459988][ T6736] bcachefs (loop2): check_lrus... done [ 214.474968][ T6736] bcachefs (loop2): check_btree_backpointers... done [ 214.483017][ T6736] bcachefs (loop2): check_backpointers_to_extents... done [ 214.545659][ T6736] bcachefs (loop2): check_extents_to_backpointers... done [ 214.563772][ T6736] bcachefs (loop2): check_alloc_to_lru_refs... done [ 214.595273][ T6736] bcachefs (loop2): bucket_gens_init... done [ 214.613541][ T6736] bcachefs (loop2): check_snapshot_trees... done [ 214.625017][ T6736] bcachefs (loop2): check_snapshots... done [ 214.633655][ T6736] bcachefs (loop2): check_subvols... done [ 214.641661][ T6736] bcachefs (loop2): check_subvol_children... done [ 214.648694][ T6736] bcachefs (loop2): delete_dead_snapshots... done [ 214.655786][ T6736] bcachefs (loop2): check_inodes... done [ 214.662789][ T6736] bcachefs (loop2): check_extents... done [ 214.669023][ T6736] bcachefs (loop2): check_indirect_extents... done [ 214.676614][ T6736] bcachefs (loop2): check_dirents... done [ 214.685960][ T6736] bcachefs (loop2): check_xattrs... done [ 214.693491][ T6736] bcachefs (loop2): check_root... done [ 214.703210][ T6736] bcachefs (loop2): check_unreachable_inodes... done [ 214.717519][ T6736] bcachefs (loop2): check_subvolume_structure... done [ 214.725354][ T6736] bcachefs (loop2): check_directory_structure... done [ 214.736480][ T6736] bcachefs (loop2): check_nlinks... done [ 214.744172][ T6736] bcachefs (loop2): resume_logged_ops... done [ 214.766140][ T6736] bcachefs (loop2): delete_dead_inodes... done [ 214.773474][ T6736] bcachefs (loop2): set_fs_needs_rebalance... done [ 214.802097][ T6736] bcachefs (loop2): done starting filesystem [ 214.932465][ T6736] syz.2.206 (6736) used greatest stack depth: 14824 bytes left [ 214.983121][ T5828] bcachefs (loop2): shutting down [ 214.993360][ T5828] bcachefs (loop2): going read-only [ 215.004266][ T5828] bcachefs (loop2): finished waiting for writes to stop [ 215.042303][ T5828] bcachefs (loop2): flushing journal and stopping allocators, journal seq 32 [ 215.069398][ T5828] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 32 [ 215.093987][ T5828] bcachefs (loop2): clean shutdown complete, journal seq 33 [ 215.169480][ T5828] bcachefs (loop2): marking filesystem clean [ 215.426055][ T5828] bcachefs (loop2): shutdown complete [ 216.623351][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.862947][ T6382] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.076267][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.085694][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.247871][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.255740][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.804799][ T6341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.348337][ T6339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.913202][ T6382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.111144][ T6797] loop1: detected capacity change from 0 to 1024 [ 220.748857][ T6341] veth0_vlan: entered promiscuous mode [ 220.896193][ T6341] veth1_vlan: entered promiscuous mode [ 221.410969][ T6339] veth0_vlan: entered promiscuous mode [ 221.444014][ T6341] veth0_macvtap: entered promiscuous mode [ 221.587396][ T6341] veth1_macvtap: entered promiscuous mode [ 221.603166][ T6816] loop1: detected capacity change from 0 to 512 [ 221.690151][ T6816] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 221.721837][ T6339] veth1_vlan: entered promiscuous mode [ 221.751900][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.794198][ T6816] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 221.806623][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.835296][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.863140][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.885167][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.903695][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.950246][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.993019][ T6816] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 222.082528][ T6816] EXT4-fs (loop1): 1 truncate cleaned up [ 222.092972][ T6816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.164279][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.255328][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.268315][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.281675][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.292518][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.305007][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.366098][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.382783][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.490070][ T6341] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.551873][ T6341] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.591443][ T6341] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.635119][ T6341] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.878825][ T6339] veth0_macvtap: entered promiscuous mode [ 222.928343][ T6382] veth0_vlan: entered promiscuous mode [ 223.150499][ T6339] veth1_macvtap: entered promiscuous mode [ 223.224579][ T6382] veth1_vlan: entered promiscuous mode [ 223.510746][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.538156][ T6339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.576612][ T5901] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 223.583744][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.625093][ T6339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.665377][ T6339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.706732][ T6339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.742390][ T6339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.754212][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 223.827405][ T5901] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 223.837054][ T6339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.862350][ T5901] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.883046][ T6339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.903542][ T5901] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 223.943627][ T5901] usb 3-1: config 0 has no interface number 0 [ 223.951418][ T6339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.982916][ T5901] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 224.007578][ T6339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.041296][ T5901] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 224.080595][ T5901] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210 [ 224.145054][ T5901] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 224.215628][ T6339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.239331][ T5901] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 224.269693][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.277864][ T6339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.277933][ T6339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.277962][ T6339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.277981][ T6339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.278007][ T6339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.278049][ T6339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.278074][ T6339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.296519][ T6339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.461471][ T5901] usb 3-1: Product: syz [ 224.490204][ T5901] usb 3-1: Manufacturer: syz [ 224.517450][ T5901] usb 3-1: SerialNumber: syz [ 224.560985][ T5901] usb 3-1: config 0 descriptor?? [ 224.564161][ T6339] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.595073][ T6339] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.595729][ T6832] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 224.604126][ T6339] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.679690][ T5901] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 224.897321][ T6339] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.345250][ T5893] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 225.525681][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 225.548596][ T5893] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 225.765772][ T5893] usb 6-1: config 0 has no interface number 0 [ 225.807594][ T5893] usb 6-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 225.859834][ T5901] usb 3-1: USB disconnect, device number 3 [ 225.871129][ T6382] veth0_macvtap: entered promiscuous mode [ 225.875076][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.918269][ T6583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.952247][ T5893] usb 6-1: Product: syz [ 225.968519][ T6382] veth1_macvtap: entered promiscuous mode [ 225.979755][ T6583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.008238][ T5893] usb 6-1: Manufacturer: syz [ 226.013225][ T5893] usb 6-1: SerialNumber: syz [ 226.098650][ T5893] usb 6-1: config 0 descriptor?? [ 226.281154][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.395085][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.415473][ T6062] udevd[6062]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.464983][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.511128][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.563717][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.623227][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.664992][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.702210][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.762992][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.813794][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.872367][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.061605][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.099419][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.148813][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.210916][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.254641][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.311998][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.373659][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.424930][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.470732][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.518911][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.584584][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.659037][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 227.681365][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 227.761446][ T969] usb 6-1: USB disconnect, device number 3 [ 227.768366][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 227.795138][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 227.809461][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 228.367815][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 228.383248][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 228.392255][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 228.400523][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 228.411430][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 228.563333][ T6382] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.628974][ T6382] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.742072][ T6382] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.869564][ T6382] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.718793][ T3459] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.015111][ T5839] Bluetooth: hci2: command tx timeout [ 230.330814][ T3459] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.565710][ T5839] Bluetooth: hci5: command tx timeout [ 230.870687][ T3459] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.382201][ T3459] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.085038][ T5839] Bluetooth: hci2: command tx timeout [ 232.643201][ T6882] loop2: detected capacity change from 0 to 40427 [ 232.658091][ T5833] Bluetooth: hci5: command tx timeout [ 232.706500][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 232.720613][ T6882] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7 [ 232.747587][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 232.779694][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 232.804427][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 232.822422][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 232.907245][ T6882] F2FS-fs (loop2): invalid crc value [ 233.433597][ T6882] F2FS-fs (loop2): Start checkpoint disabled! [ 233.447217][ T6909] loop5: detected capacity change from 0 to 512 [ 233.473992][ T6909] EXT4-fs: Ignoring removed orlov option [ 233.528231][ T6882] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 233.621427][ T6862] chnl_net:caif_netlink_parms(): no params data found [ 233.653484][ T6909] EXT4-fs error (device loop5): __ext4_iget:5025: inode #15: block 1803188595: comm syz.5.226: invalid block [ 233.797097][ T6909] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.226: couldn't read orphan inode 15 (err -117) [ 233.822250][ T3459] bridge_slave_1: left allmulticast mode [ 233.843767][ T3459] bridge_slave_1: left promiscuous mode [ 233.977320][ T3459] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.993176][ T6909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.063720][ T3459] bridge_slave_0: left allmulticast mode [ 234.091696][ T36] kworker/u8:2: attempt to access beyond end of device [ 234.091696][ T36] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 234.102489][ T3459] bridge_slave_0: left promiscuous mode [ 234.118031][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 234.118076][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.118099][ T36] Workqueue: writeback wb_workfn (flush-7:2) [ 234.118152][ T36] Call Trace: [ 234.118164][ T36] [ 234.118176][ T36] dump_stack_lvl+0x16c/0x1f0 [ 234.118235][ T36] f2fs_handle_critical_error+0x621/0x9f0 [ 234.118282][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.118326][ T36] ? __asan_memset+0x23/0x50 [ 234.118371][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.118422][ T36] f2fs_write_end_io+0x73d/0xac0 [ 234.118478][ T36] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 234.118521][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.118560][ T36] ? rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0 [ 234.118630][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.118679][ T36] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 234.118724][ T36] bio_endio+0x6d2/0x810 [ 234.118763][ T36] submit_bio_noacct+0x56d/0x1ec0 [ 234.118825][ T36] __submit_merged_bio+0x33c/0x770 [ 234.118879][ T36] __submit_merged_write_cond+0x319/0x3f0 [ 234.118940][ T36] f2fs_write_cache_pages+0x2139/0x2680 [ 234.119026][ T36] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 234.119082][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.119131][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.119170][ T36] ? unwind_next_frame+0x3fe/0x20a0 [ 234.119215][ T36] ? ret_from_fork+0x48/0x80 [ 234.119251][ T36] ? kfree+0x2b6/0x4d0 [ 234.119289][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.119351][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.119421][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.119464][ T36] ? __lock_acquire+0x5ca/0x1ba0 [ 234.119580][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.119630][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.119673][ T36] f2fs_write_data_pages+0x4ad/0xd90 [ 234.119728][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 234.119772][ T36] ? prep_compound_page+0x265/0x4e0 [ 234.119824][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.119866][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 234.119914][ T36] do_writepages+0x1b5/0x820 [ 234.119959][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.119999][ T36] ? __pfx_do_writepages+0x10/0x10 [ 234.120034][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.120067][ T36] ? __lock_acquire+0xaa4/0x1ba0 [ 234.120122][ T36] ? __lock_acquire+0xaa4/0x1ba0 [ 234.120170][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.120203][ T36] ? reacquire_held_locks+0xcd/0x1f0 [ 234.120255][ T36] __writeback_single_inode+0x160/0xfb0 [ 234.120290][ T36] ? __pfx___writeback_single_inode+0x10/0x10 [ 234.120320][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.120353][ T36] ? do_raw_spin_unlock+0x172/0x230 [ 234.120384][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.120424][ T36] writeback_sb_inodes+0x601/0xf90 [ 234.120477][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 234.120575][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.120609][ T36] ? rcu_is_watching+0x12/0xc0 [ 234.120641][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.120674][ T36] ? queue_io+0x3f6/0x520 [ 234.120732][ T36] wb_writeback+0x419/0xb70 [ 234.120773][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 234.120816][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.120852][ T36] ? mark_held_locks+0x49/0x80 [ 234.120895][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 234.120940][ T36] wb_workfn+0x14d/0xbe0 [ 234.120976][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.121009][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 234.121049][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 234.121084][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.121122][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.121161][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.121194][ T36] ? rcu_is_watching+0x12/0xc0 [ 234.121234][ T36] process_one_work+0x9cf/0x1b70 [ 234.121286][ T36] ? __pfx_process_one_work+0x10/0x10 [ 234.121317][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.121362][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.121395][ T36] ? assign_work+0x1a0/0x250 [ 234.121428][ T36] worker_thread+0x6c8/0xf10 [ 234.121480][ T36] ? __pfx_worker_thread+0x10/0x10 [ 234.121511][ T36] kthread+0x3c5/0x780 [ 234.121539][ T36] ? __pfx_kthread+0x10/0x10 [ 234.121563][ T36] ? __pfx_kthread+0x10/0x10 [ 234.121589][ T36] ? __pfx_kthread+0x10/0x10 [ 234.121613][ T36] ? __pfx_kthread+0x10/0x10 [ 234.121637][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.121670][ T36] ? rcu_is_watching+0x12/0xc0 [ 234.121704][ T36] ? __pfx_kthread+0x10/0x10 [ 234.121732][ T36] ret_from_fork+0x48/0x80 [ 234.121758][ T36] ? __pfx_kthread+0x10/0x10 [ 234.121785][ T36] ret_from_fork_asm+0x1a/0x30 [ 234.121859][ T36] [ 234.121870][ T36] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 234.219952][ T5833] Bluetooth: hci2: command tx timeout [ 234.676509][ T3459] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.737434][ T5833] Bluetooth: hci5: command tx timeout [ 234.886581][ T5833] Bluetooth: hci6: command tx timeout [ 234.956362][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.430173][ T6915] loop5: detected capacity change from 0 to 40427 [ 236.469448][ T6915] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x7 [ 236.502351][ T6915] F2FS-fs (loop5): invalid crc value [ 236.732248][ T5833] Bluetooth: hci2: command tx timeout [ 236.805073][ T5833] Bluetooth: hci5: command tx timeout [ 236.951153][ T6915] F2FS-fs (loop5): Start checkpoint disabled! [ 236.967535][ T5833] Bluetooth: hci6: command tx timeout [ 237.413223][ T6915] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 237.478904][ T3459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.506559][ T3459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.593548][ T3459] bond0 (unregistering): Released all slaves [ 237.781934][ T6858] chnl_net:caif_netlink_parms(): no params data found [ 238.270028][ T3459] hsr_slave_0: left promiscuous mode [ 238.316265][ T3459] hsr_slave_1: left promiscuous mode [ 238.354705][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.423555][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.516209][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.524518][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.682642][ T3459] veth1_macvtap: left promiscuous mode [ 238.713223][ T3459] veth0_macvtap: left promiscuous mode [ 238.735371][ T3459] veth1_vlan: left promiscuous mode [ 238.740756][ T3459] veth0_vlan: left promiscuous mode [ 238.965593][ T6583] kworker/u8:9: attempt to access beyond end of device [ 238.965593][ T6583] loop5: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 239.045343][ T5833] Bluetooth: hci6: command tx timeout [ 239.289517][ T6583] kworker/u8:9: attempt to access beyond end of device [ 239.289517][ T6583] loop5: rw=1, sector=49152, nr_sectors = 136 limit=40427 [ 239.337943][ T6583] kworker/u8:9: attempt to access beyond end of device [ 239.337943][ T6583] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 239.565047][ T6583] CPU: 0 UID: 0 PID: 6583 Comm: kworker/u8:9 Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 239.565095][ T6583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.565118][ T6583] Workqueue: writeback wb_workfn (flush-7:5) [ 239.565168][ T6583] Call Trace: [ 239.565178][ T6583] [ 239.565191][ T6583] dump_stack_lvl+0x16c/0x1f0 [ 239.565245][ T6583] f2fs_handle_critical_error+0x621/0x9f0 [ 239.565290][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.565333][ T6583] ? __asan_memset+0x23/0x50 [ 239.565376][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.565424][ T6583] f2fs_write_end_io+0x73d/0xac0 [ 239.565476][ T6583] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 239.565527][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.565575][ T6583] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 239.565618][ T6583] bio_endio+0x6d2/0x810 [ 239.565655][ T6583] submit_bio_noacct+0x56d/0x1ec0 [ 239.565710][ T6583] __submit_merged_bio+0x33c/0x770 [ 239.565761][ T6583] __submit_merged_write_cond+0x319/0x3f0 [ 239.565824][ T6583] f2fs_write_cache_pages+0x2139/0x2680 [ 239.565900][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.565940][ T6583] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 239.566005][ T6583] ? __pfx_f2fs_sync_meta_pages+0x10/0x10 [ 239.566063][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.566190][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.566235][ T6583] f2fs_write_data_pages+0x4ad/0xd90 [ 239.566295][ T6583] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 239.566354][ T6583] ? rcu_is_watching+0x12/0xc0 [ 239.566397][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.566438][ T6583] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 239.566492][ T6583] do_writepages+0x1b5/0x820 [ 239.566549][ T6583] ? __pfx_do_writepages+0x10/0x10 [ 239.566589][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.566626][ T6583] ? __lock_acquire+0xaa4/0x1ba0 [ 239.566699][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.566736][ T6583] ? reacquire_held_locks+0xcd/0x1f0 [ 239.566793][ T6583] __writeback_single_inode+0x160/0xfb0 [ 239.566839][ T6583] ? __pfx___writeback_single_inode+0x10/0x10 [ 239.566872][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.566911][ T6583] ? do_raw_spin_unlock+0x172/0x230 [ 239.566946][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.566990][ T6583] writeback_sb_inodes+0x601/0xf90 [ 239.567044][ T6583] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 239.567080][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.567118][ T6583] ? find_held_lock+0x2b/0x80 [ 239.567211][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.567249][ T6583] ? rcu_is_watching+0x12/0xc0 [ 239.567287][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.567326][ T6583] ? queue_io+0x3f6/0x520 [ 239.567390][ T6583] wb_writeback+0x419/0xb70 [ 239.567434][ T6583] ? __pfx_wb_writeback+0x10/0x10 [ 239.567480][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.567517][ T6583] ? mark_held_locks+0x49/0x80 [ 239.567566][ T6583] ? _raw_spin_unlock_irq+0x23/0x50 [ 239.567617][ T6583] wb_workfn+0x14d/0xbe0 [ 239.567658][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.567696][ T6583] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 239.567740][ T6583] ? __pfx_wb_workfn+0x10/0x10 [ 239.567779][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.567827][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.567870][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.567908][ T6583] ? rcu_is_watching+0x12/0xc0 [ 239.567952][ T6583] process_one_work+0x9cf/0x1b70 [ 239.568007][ T6583] ? __pfx_process_one_work+0x10/0x10 [ 239.568042][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.568091][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.568129][ T6583] ? assign_work+0x1a0/0x250 [ 239.568195][ T6583] worker_thread+0x6c8/0xf10 [ 239.568239][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.568353][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.568391][ T6583] ? __kthread_parkme+0x19e/0x250 [ 239.568439][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.568487][ T6583] ? __pfx_worker_thread+0x10/0x10 [ 239.568525][ T6583] kthread+0x3c5/0x780 [ 239.568558][ T6583] ? __pfx_kthread+0x10/0x10 [ 239.568585][ T6583] ? __pfx_kthread+0x10/0x10 [ 239.568613][ T6583] ? __pfx_kthread+0x10/0x10 [ 239.568641][ T6583] ? __pfx_kthread+0x10/0x10 [ 239.568667][ T6583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.568705][ T6583] ? rcu_is_watching+0x12/0xc0 [ 239.568744][ T6583] ? __pfx_kthread+0x10/0x10 [ 239.568776][ T6583] ret_from_fork+0x48/0x80 [ 239.568817][ T6583] ? __pfx_kthread+0x10/0x10 [ 239.568851][ T6583] ret_from_fork_asm+0x1a/0x30 [ 239.568926][ T6583] [ 239.568939][ T6583] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 241.130244][ T5839] Bluetooth: hci6: command tx timeout [ 242.448432][ T3459] team0 (unregistering): Port device team_slave_1 removed [ 242.625693][ T3459] team0 (unregistering): Port device team_slave_0 removed [ 243.212605][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 243.219266][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 243.219388][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 245.294734][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.237'. [ 245.325885][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.377670][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.389401][ T6862] bridge_slave_0: entered allmulticast mode [ 245.398647][ T6862] bridge_slave_0: entered promiscuous mode [ 245.858137][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.867210][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.889621][ T6862] bridge_slave_1: entered allmulticast mode [ 245.949155][ T6862] bridge_slave_1: entered promiscuous mode [ 246.084147][ T47] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 246.181755][ T6862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.223872][ T6858] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.234372][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.254645][ T6858] bridge_slave_0: entered allmulticast mode [ 246.267769][ T6858] bridge_slave_0: entered promiscuous mode [ 246.285221][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.289098][ T6862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.304948][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.329945][ T6858] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.345349][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.363176][ T6858] bridge_slave_1: entered allmulticast mode [ 246.391809][ T47] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 246.414366][ T6858] bridge_slave_1: entered promiscuous mode [ 246.435496][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.528721][ T47] usb 3-1: config 0 descriptor?? [ 247.055828][ T47] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 247.133195][ T47] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 247.148163][ T6862] team0: Port device team_slave_0 added [ 247.200266][ T6858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.268717][ T47] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0001/input/input5 [ 247.316032][ T6858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.559728][ T47] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 247.699781][ T6862] team0: Port device team_slave_1 added [ 247.727706][ T47] usb 3-1: USB disconnect, device number 4 [ 248.210113][ T7001] fido_id[7001]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 248.771741][ T6858] team0: Port device team_slave_0 added [ 248.826088][ T6858] team0: Port device team_slave_1 added [ 249.065108][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.074962][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.227853][ T6862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.272897][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.308291][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.601422][ T6862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.004815][ T3459] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.378925][ T6897] chnl_net:caif_netlink_parms(): no params data found [ 250.609965][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.630025][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.665980][ T6858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.890983][ T3459] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.933418][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.948934][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.008130][ T6858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.596884][ T3459] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.791301][ T6862] hsr_slave_0: entered promiscuous mode [ 251.841228][ T6862] hsr_slave_1: entered promiscuous mode [ 251.856076][ T6862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.875022][ T6862] Cannot create hsr debugfs directory [ 252.387353][ T3459] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.457464][ T7025] loop5: detected capacity change from 0 to 32768 [ 252.470303][ T7025] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.249 (7025) [ 252.602067][ T7025] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 252.655741][ T7025] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 252.703242][ T7025] BTRFS info (device loop5): using free-space-tree [ 252.733355][ T6858] hsr_slave_0: entered promiscuous mode [ 252.759139][ T6858] hsr_slave_1: entered promiscuous mode [ 252.786955][ T6858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.824563][ T6858] Cannot create hsr debugfs directory [ 252.939213][ T7027] loop2: detected capacity change from 0 to 40427 [ 253.066317][ T7027] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7 [ 253.150807][ T6897] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.168948][ T6897] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.186115][ T7027] F2FS-fs (loop2): invalid crc value [ 253.202394][ T6897] bridge_slave_0: entered allmulticast mode [ 253.222664][ T6897] bridge_slave_0: entered promiscuous mode [ 253.241814][ T6897] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.279851][ T5844] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 253.286253][ T6897] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.316900][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 253.325574][ T6897] bridge_slave_1: entered allmulticast mode [ 253.328090][ T6897] bridge_slave_1: entered promiscuous mode [ 253.692120][ T7027] F2FS-fs (loop2): Start checkpoint disabled! [ 253.709009][ T24] usb 2-1: config 0 has no interfaces? [ 253.812608][ T7027] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 253.953868][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 254.015104][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.046961][ T24] usb 2-1: Product: syz [ 254.056520][ T24] usb 2-1: Manufacturer: syz [ 254.061778][ T24] usb 2-1: SerialNumber: syz [ 254.122854][ T24] usb 2-1: config 0 descriptor?? [ 254.304314][ T6897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.413950][ T13] kworker/u8:1: attempt to access beyond end of device [ 254.413950][ T13] loop2: rw=1, sector=45096, nr_sectors = 128 limit=40427 [ 254.534201][ T13] kworker/u8:1: attempt to access beyond end of device [ 254.534201][ T13] loop2: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 254.583110][ T6897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.155129][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 255.155184][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.155211][ T13] Workqueue: writeback wb_workfn (flush-7:2) [ 255.155268][ T13] Call Trace: [ 255.155279][ T13] [ 255.155293][ T13] dump_stack_lvl+0x16c/0x1f0 [ 255.155355][ T13] f2fs_handle_critical_error+0x621/0x9f0 [ 255.155408][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.155458][ T13] ? __asan_memset+0x23/0x50 [ 255.155506][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.155571][ T13] f2fs_write_end_io+0x73d/0xac0 [ 255.155632][ T13] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 255.155692][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.155747][ T13] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 255.155799][ T13] bio_endio+0x6d2/0x810 [ 255.155841][ T13] submit_bio_noacct+0x56d/0x1ec0 [ 255.155904][ T13] __submit_merged_bio+0x33c/0x770 [ 255.155964][ T13] __submit_merged_write_cond+0x319/0x3f0 [ 255.156032][ T13] f2fs_write_cache_pages+0x2139/0x2680 [ 255.156123][ T13] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 255.156189][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.156235][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.156279][ T13] ? find_held_lock+0x2b/0x80 [ 255.156328][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.156377][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.156421][ T13] ? do_raw_spin_unlock+0x172/0x230 [ 255.156481][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.156526][ T13] ? f2fs_available_free_memory+0x279/0xa30 [ 255.156648][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.156702][ T13] f2fs_write_data_pages+0x4ad/0xd90 [ 255.156772][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 255.156844][ T13] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 255.156911][ T13] ? do_raw_read_unlock+0x44/0xe0 [ 255.156960][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 255.157025][ T13] do_writepages+0x1b5/0x820 [ 255.157087][ T13] ? __pfx_do_writepages+0x10/0x10 [ 255.157133][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.157174][ T13] ? __lock_acquire+0xaa4/0x1ba0 [ 255.157254][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.157299][ T13] ? reacquire_held_locks+0xcd/0x1f0 [ 255.157366][ T13] __writeback_single_inode+0x160/0xfb0 [ 255.157414][ T13] ? __pfx___writeback_single_inode+0x10/0x10 [ 255.157454][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.157499][ T13] ? do_raw_spin_unlock+0x172/0x230 [ 255.157540][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.157603][ T13] writeback_sb_inodes+0x601/0xf90 [ 255.157667][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 255.157708][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.157753][ T13] ? find_held_lock+0x2b/0x80 [ 255.157860][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.157905][ T13] ? rcu_is_watching+0x12/0xc0 [ 255.157950][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.157994][ T13] ? queue_io+0x3f6/0x520 [ 255.158066][ T13] wb_writeback+0x419/0xb70 [ 255.158116][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 255.158169][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.158214][ T13] ? mark_held_locks+0x49/0x80 [ 255.158271][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 255.158329][ T13] wb_workfn+0x14d/0xbe0 [ 255.158376][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.158421][ T13] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 255.158474][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 255.158519][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.158573][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.158624][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.158668][ T13] ? rcu_is_watching+0x12/0xc0 [ 255.158720][ T13] process_one_work+0x9cf/0x1b70 [ 255.158782][ T13] ? __pfx_process_one_work+0x10/0x10 [ 255.158823][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.158883][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.158928][ T13] ? assign_work+0x1a0/0x250 [ 255.158970][ T13] worker_thread+0x6c8/0xf10 [ 255.159032][ T13] ? __pfx_worker_thread+0x10/0x10 [ 255.159072][ T13] kthread+0x3c5/0x780 [ 255.159109][ T13] ? __pfx_kthread+0x10/0x10 [ 255.159139][ T13] ? __pfx_kthread+0x10/0x10 [ 255.159172][ T13] ? __pfx_kthread+0x10/0x10 [ 255.159205][ T13] ? __pfx_kthread+0x10/0x10 [ 255.159236][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.159281][ T13] ? rcu_is_watching+0x12/0xc0 [ 255.159325][ T13] ? __pfx_kthread+0x10/0x10 [ 255.159362][ T13] ret_from_fork+0x48/0x80 [ 255.159398][ T13] ? __pfx_kthread+0x10/0x10 [ 255.159434][ T13] ret_from_fork_asm+0x1a/0x30 [ 255.159520][ T13] [ 255.459942][ T13] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 256.600699][ T47] usb 2-1: USB disconnect, device number 2 [ 257.031112][ T6897] team0: Port device team_slave_0 added [ 257.107837][ T6897] team0: Port device team_slave_1 added [ 257.734067][ T3459] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.346654][ T6897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.357478][ T6897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.396497][ T6897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.483688][ T3459] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.998155][ T6897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.222271][ T6897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.275179][ T6897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.430070][ T3459] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.262881][ T3459] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.999070][ T6897] hsr_slave_0: entered promiscuous mode [ 261.202705][ T6897] hsr_slave_1: entered promiscuous mode [ 261.354591][ T6897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.415174][ T6897] Cannot create hsr debugfs directory [ 263.091286][ T3459] bridge_slave_1: left allmulticast mode [ 263.115977][ T3459] bridge_slave_1: left promiscuous mode [ 263.145439][ T3459] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.199721][ T3459] bridge_slave_0: left allmulticast mode [ 263.252208][ T3459] bridge_slave_0: left promiscuous mode [ 263.266170][ T3459] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.370457][ T3459] bridge_slave_1: left allmulticast mode [ 263.396422][ T3459] bridge_slave_1: left promiscuous mode [ 263.415510][ T3459] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.501698][ T3459] bridge_slave_0: left allmulticast mode [ 263.533791][ T3459] bridge_slave_0: left promiscuous mode [ 263.564462][ T3459] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.675593][ T7106] loop5: detected capacity change from 0 to 40427 [ 263.735071][ T7106] F2FS-fs (loop5): heap/no_heap options were deprecated [ 263.760675][ T7106] F2FS-fs (loop5): build fault injection attr: rate: 74, type: 0x3fffff [ 263.803253][ T7106] F2FS-fs (loop5): heap/no_heap options were deprecated [ 263.819882][ T7106] F2FS-fs (loop5): Image doesn't support compression [ 263.918968][ T7106] F2FS-fs (loop5): invalid crc value [ 263.977672][ T7106] F2FS-fs (loop5): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x390a/0x8e90 [ 264.026071][ T7106] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-12) [ 264.095077][ T5901] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 264.301499][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0 [ 264.309005][ T5901] usb 2-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 264.355361][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.406073][ T5901] usb 2-1: config 0 descriptor?? [ 264.527276][ T7113] loop2: detected capacity change from 0 to 32768 [ 264.583503][ T7113] (syz.2.265,7113,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 264.611666][ T7113] (syz.2.265,7113,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 264.791320][ T7113] JBD2: Ignoring recovery information on journal [ 264.958805][ T7113] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 264.976288][ T5901] apple 0003:05AC:024F.0002: hidraw0: USB HID vff.ff Device [HID 05ac:024f] on usb-dummy_hcd.1-1/input0 [ 265.147683][ T13] ocfs2: Finishing quota recovery on device (7,2) for slot 0 [ 265.309103][ T5841] usb 2-1: USB disconnect, device number 3 [ 265.388295][ T7134] fido_id[7134]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 265.524842][ T5828] [ 265.527257][ T5828] ====================================================== [ 265.534613][ T5828] WARNING: possible circular locking dependency detected [ 265.542542][ T5828] 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 Not tainted [ 265.550658][ T5828] ------------------------------------------------------ [ 265.558045][ T5828] syz-executor/5828 is trying to acquire lock: [ 265.564492][ T5828] ffff888057c23948 ((wq_completion)ocfs2_wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x9c/0x1c0 [ 265.575407][ T5828] [ 265.575407][ T5828] but task is already holding lock: [ 265.583515][ T5828] ffff8880525280e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 265.594727][ T5828] [ 265.594727][ T5828] which lock already depends on the new lock. [ 265.594727][ T5828] [ 265.605809][ T5828] [ 265.605809][ T5828] the existing dependency chain (in reverse order) is: [ 265.615050][ T5828] [ 265.615050][ T5828] -> #2 (&type->s_umount_key#52){++++}-{4:4}: [ 265.623531][ T5828] down_read+0x9b/0x480 [ 265.628374][ T5828] ocfs2_finish_quota_recovery+0xeb/0xcb0 [ 265.634967][ T5828] ocfs2_complete_recovery+0x2f9/0xfb0 [ 265.641199][ T5828] process_one_work+0x9cf/0x1b70 [ 265.647082][ T5828] worker_thread+0x6c8/0xf10 [ 265.652593][ T5828] kthread+0x3c5/0x780 [ 265.657750][ T5828] ret_from_fork+0x48/0x80 [ 265.663259][ T5828] ret_from_fork_asm+0x1a/0x30 [ 265.668695][ T5828] [ 265.668695][ T5828] -> #1 ((work_completion)(&journal->j_recovery_work)){+.+.}-{0:0}: [ 265.679451][ T5828] process_one_work+0x932/0x1b70 [ 265.685077][ T5828] worker_thread+0x6c8/0xf10 [ 265.690654][ T5828] kthread+0x3c5/0x780 [ 265.696194][ T5828] ret_from_fork+0x48/0x80 [ 265.701802][ T5828] ret_from_fork_asm+0x1a/0x30 [ 265.707915][ T5828] [ 265.707915][ T5828] -> #0 ((wq_completion)ocfs2_wq){+.+.}-{0:0}: [ 265.716584][ T5828] __lock_acquire+0x1173/0x1ba0 [ 265.722108][ T5828] lock_acquire+0x179/0x350 [ 265.727651][ T5828] touch_wq_lockdep_map+0xad/0x1c0 [ 265.734141][ T5828] __flush_workqueue+0x128/0x1230 [ 265.739824][ T5828] ocfs2_shutdown_local_alloc+0xbd/0xa10 [ 265.746515][ T5828] ocfs2_dismount_volume+0x1ed/0x9f0 [ 265.752422][ T5828] generic_shutdown_super+0x156/0x390 [ 265.758546][ T5828] kill_block_super+0x3b/0x90 [ 265.764594][ T5828] deactivate_locked_super+0xc1/0x1a0 [ 265.770615][ T5828] deactivate_super+0xde/0x100 [ 265.776677][ T5828] cleanup_mnt+0x225/0x450 [ 265.783235][ T5828] task_work_run+0x150/0x240 [ 265.789093][ T5828] syscall_exit_to_user_mode+0x27b/0x2a0 [ 265.795769][ T5828] do_syscall_64+0xda/0x260 [ 265.800976][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.807569][ T5828] [ 265.807569][ T5828] other info that might help us debug this: [ 265.807569][ T5828] [ 265.817984][ T5828] Chain exists of: [ 265.817984][ T5828] (wq_completion)ocfs2_wq --> (work_completion)(&journal->j_recovery_work) --> &type->s_umount_key#52 [ 265.817984][ T5828] [ 265.835307][ T5828] Possible unsafe locking scenario: [ 265.835307][ T5828] [ 265.842970][ T5828] CPU0 CPU1 [ 265.848522][ T5828] ---- ---- [ 265.854563][ T5828] lock(&type->s_umount_key#52); [ 265.859661][ T5828] lock((work_completion)(&journal->j_recovery_work)); [ 265.869432][ T5828] lock(&type->s_umount_key#52); [ 265.878000][ T5828] lock((wq_completion)ocfs2_wq); [ 265.883405][ T5828] [ 265.883405][ T5828] *** DEADLOCK *** [ 265.883405][ T5828] [ 265.892834][ T5828] 1 lock held by syz-executor/5828: [ 265.898427][ T5828] #0: ffff8880525280e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 265.909634][ T5828] [ 265.909634][ T5828] stack backtrace: [ 265.916857][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 265.916904][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.916926][ T5828] Call Trace: [ 265.916940][ T5828] [ 265.916955][ T5828] dump_stack_lvl+0x116/0x1f0 [ 265.917018][ T5828] print_circular_bug+0x275/0x350 [ 265.917077][ T5828] check_noncircular+0x14c/0x170 [ 265.917135][ T5828] __lock_acquire+0x1173/0x1ba0 [ 265.917194][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.917246][ T5828] lock_acquire+0x179/0x350 [ 265.917299][ T5828] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 265.917361][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.917404][ T5828] ? lockdep_init_map_type+0x5c/0x280 [ 265.917460][ T5828] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 265.917513][ T5828] touch_wq_lockdep_map+0xad/0x1c0 [ 265.917565][ T5828] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 265.917619][ T5828] __flush_workqueue+0x128/0x1230 [ 265.917655][ T5828] ? __pfx___timer_delete+0x10/0x10 [ 265.917707][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.917749][ T5828] ? find_held_lock+0x2b/0x80 [ 265.917793][ T5828] ? __pfx___flush_workqueue+0x10/0x10 [ 265.917850][ T5828] ocfs2_shutdown_local_alloc+0xbd/0xa10 [ 265.917906][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.917947][ T5828] ? enable_work+0x245/0x340 [ 265.917987][ T5828] ? __pfx_enable_work+0x10/0x10 [ 265.918024][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.918068][ T5828] ? __pfx_ocfs2_shutdown_local_alloc+0x10/0x10 [ 265.918127][ T5828] ocfs2_dismount_volume+0x1ed/0x9f0 [ 265.918168][ T5828] ? __pfx_fsnotify_sb_delete+0x10/0x10 [ 265.918216][ T5828] ? __pfx_ocfs2_dismount_volume+0x10/0x10 [ 265.918255][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.918298][ T5828] ? filemap_check_errors+0xa9/0x160 [ 265.918347][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.918390][ T5828] ? filemap_write_and_wait_range+0x10b/0x130 [ 265.918428][ T5828] ? __pfx_ocfs2_put_super+0x10/0x10 [ 265.918466][ T5828] generic_shutdown_super+0x156/0x390 [ 265.918508][ T5828] kill_block_super+0x3b/0x90 [ 265.918546][ T5828] deactivate_locked_super+0xc1/0x1a0 [ 265.918589][ T5828] deactivate_super+0xde/0x100 [ 265.918632][ T5828] cleanup_mnt+0x225/0x450 [ 265.918681][ T5828] task_work_run+0x150/0x240 [ 265.918719][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 265.918754][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.918802][ T5828] ? __pfx___x64_sys_umount+0x10/0x10 [ 265.918859][ T5828] syscall_exit_to_user_mode+0x27b/0x2a0 [ 265.918918][ T5828] do_syscall_64+0xda/0x260 [ 265.918976][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.919013][ T5828] RIP: 0033:0x7f1c4af8fc97 [ 265.919039][ T5828] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 265.919075][ T5828] RSP: 002b:00007ffdd94f3658 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 265.919108][ T5828] RAX: 0000000000000000 RBX: 00007f1c4b01089d RCX: 00007f1c4af8fc97 [ 265.919131][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd94f3710 [ 265.919153][ T5828] RBP: 00007ffdd94f3710 R08: 0000000000000000 R09: 0000000000000000 [ 265.919175][ T5828] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd94f47a0 [ 265.919198][ T5828] R13: 00007f1c4b01089d R14: 0000000000040c1e R15: 00007ffdd94f47e0 [ 265.919231][ T5828] [ 266.294789][ T5828] ocfs2: Unmounting device (7,2) on (node local) [ 266.731968][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.739296][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.216082][ T3459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.238691][ T3459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.265796][ T3459] bond0 (unregistering): Released all slaves [ 267.598703][ T3459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.613990][ T3459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.628739][ T3459] bond0 (unregistering): Released all slaves [ 267.705842][ T6858] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 267.746277][ T6858] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 267.819167][ T6858] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 267.890614][ T6858] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 268.196698][ T3459] hsr_slave_0: left promiscuous mode [ 268.202825][ T3459] hsr_slave_1: left promiscuous mode [ 268.210807][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.220880][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.232220][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.240239][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.256802][ T3459] hsr_slave_0: left promiscuous mode [ 268.262875][ T3459] hsr_slave_1: left promiscuous mode [ 268.272960][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.281998][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.293930][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.301954][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.323831][ T3459] veth1_macvtap: left promiscuous mode [ 268.338776][ T3459] veth0_macvtap: left promiscuous mode [ 268.349207][ T3459] veth1_vlan: left promiscuous mode [ 268.354636][ T3459] veth0_vlan: left promiscuous mode [ 268.361557][ T3459] veth1_macvtap: left promiscuous mode [ 268.367762][ T3459] veth0_macvtap: left promiscuous mode [ 268.374317][ T3459] veth1_vlan: left promiscuous mode [ 268.380488][ T3459] veth0_vlan: left promiscuous mode [ 268.729387][ T3459] team0 (unregistering): Port device team_slave_1 removed [ 268.768179][ T3459] team0 (unregistering): Port device team_slave_0 removed [ 269.080796][ T3459] team0 (unregistering): Port device team_slave_1 removed [ 269.123996][ T3459] team0 (unregistering): Port device team_slave_0 removed [ 269.326980][ T6858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.458076][ T6858] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.511759][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.519405][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.622253][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.629657][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.790609][ T6897] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 269.823628][ T6897] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 269.888551][ T6897] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 269.947042][ T6897] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 269.964509][ T6862] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 269.984378][ T6862] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 270.029839][ T6862] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 270.071378][ T6862] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 270.300045][ T6897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.321823][ T6862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.373982][ T6862] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.388671][ T6858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.400707][ T6897] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.419243][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.427089][ T6434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.469665][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.477479][ T6434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.521376][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.528579][ T6434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.580650][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.587936][ T6434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.622608][ T6862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.876950][ T6858] veth0_vlan: entered promiscuous mode [ 270.914415][ T6858] veth1_vlan: entered promiscuous mode [ 270.983878][ T6858] veth0_macvtap: entered promiscuous mode [ 271.014516][ T6858] veth1_macvtap: entered promiscuous mode [ 271.071046][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.095859][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.124114][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.136424][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.146606][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.159963][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.171510][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.211965][ T6862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.223275][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.234803][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.245713][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.268417][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.289649][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.300605][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.312694][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.389001][ T6858] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.400712][ T6858] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.412170][ T6858] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.422883][ T6858] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.439985][ T6897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.509669][ T6858] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 271.570672][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.590432][ T6858] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 271.601943][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.682051][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.709210][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.801106][ T6862] veth0_vlan: entered promiscuous mode [ 271.853402][ T6862] veth1_vlan: entered promiscuous mode [ 271.912800][ T6862] veth0_macvtap: entered promiscuous mode [ 271.940220][ T6862] veth1_macvtap: entered promiscuous mode [ 271.986896][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.998411][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.012227][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.026695][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.038982][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.052908][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.066493][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.078786][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.092131][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.127358][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.139495][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.152552][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.164256][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.175046][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.189215][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.203163][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.218057][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.233656][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.265294][ T6862] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.274213][ T6862] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.285871][ T6862] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.297291][ T6862] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.352664][ T6897] veth0_vlan: entered promiscuous mode [ 272.388763][ T6862] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 272.412986][ T6897] veth1_vlan: entered promiscuous mode [ 272.448367][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.463046][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.468208][ T6862] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 272.514728][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.529011][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.552734][ T6897] veth0_macvtap: entered promiscuous mode [ 272.577860][ T6897] veth1_macvtap: entered promiscuous mode [ 272.622732][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.634562][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.648957][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.660020][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.674279][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.691775][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.701708][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.716294][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.729221][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.741939][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.759785][ T6897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.788635][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.808617][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.821294][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.834379][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.847566][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.860150][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.874623][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.889657][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.901921][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.916994][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.929881][ T6897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.959943][ T6897] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.972161][ T6897] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.986793][ T6897] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.002251][ T6897] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.065767][ T6897] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 273.106389][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.117240][ T6897] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 273.132173][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.171738][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.182422][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50