last executing test programs: 28.861877683s ago: executing program 1 (id=280): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000400), &(0x7f0000000300)=r4}, 0x20) sendmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="e42c6f2206", 0x5}], 0x1, 0x0, 0x0, 0x1}, 0x80) 28.779150245s ago: executing program 1 (id=283): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000300)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r1}, 0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000005000000b7080000000000007b8af8ff00000000b70800000e0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f3ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$sock(r3, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x20000000) 28.691403807s ago: executing program 1 (id=295): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x9}]) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) 28.647898198s ago: executing program 1 (id=286): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000380)={[{@uni_xlate}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x48a}}, {@utf8no}, {@uni_xlate}, {@shortname_lower}, {@utf8}, {@uni_xlateno}, {@rodir}, {@fat=@sys_immutable}, {@fat=@flush}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2bf, &(0x7f0000002bc0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 28.559804701s ago: executing program 1 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2014040, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 28.022699563s ago: executing program 1 (id=297): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10000) 27.974554474s ago: executing program 32 (id=297): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10000) 1.623076081s ago: executing program 0 (id=584): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) fstat(r1, &(0x7f00000006c0)) 1.533041784s ago: executing program 0 (id=585): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f0000000340)={[{@debug}, {@lazytime}, {@noblock_validity}, {@delalloc}, {@nombcache}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@errors_remount}]}, 0x1, 0x7b5, &(0x7f0000000540)="$eJzs3c9rHNcdAPDvrH7ZslurUKjdi3VqDcYr21XtFgqV6aEUajC059pitRaqVlqjXRlL6BATAoEQkpgcEpJLzvnh3HINyTl/Qy4hBBsnkU0ccggbZn9IK620+mHtyrY+HxjpvZk3+953Z+fN253HbgAH1nD6JxNxIiJeTyKO1dcnEdFXTfVGjNXKPV5eyqVLEpXKf75LqmUeLS/lommf1JF65nhEfPZSxOlMa72lhcXp8UIhP1fPj5RnboyUFhbPTM2MT+Yn87MXzo2Onr/454sX9i7WH75YPHr/jX/+8aOxn1783d1XP09iLI7WtzXHsVeGY7j+nPSlT+Ea/9jryvZZst8NYFfSU7OndpbHiTgWPdUUAPA8S6//FQDggElc/wHggGl8DvBoeSnXWPb3E4nuenApIklq8Tfub9a29Nbv2R2q3gcdfJREb/2OaOzh/a7hiHj3k/99kC7RofuQABt54XZEXBsabu3/k5Y5Czt1dhtlhtfl9X/QPZ9eioi/bDT+y6yMf2Jl/LNqYINzdzeGI/qb863nf+behjv+fQ8qr4///lab25YG2jT+W5m0NtRTz/0qzZyMiKlCPu3bfh0Rp6Jv4PpUIX+uTR2nHv78cLNtzeO/7+/8//20/vT/aonMvd6BtftMjJfHnyTmZg9uR/y+d3Vu3+OW/v9Qday7/vin6660e+CTq8l//fXldzYrlsafxttYWuPvrMp7EX+IjeNvSNrOTxxJD//Z2t+N6/j4q7cGN6u/+finS1p/471AN6THf7B9/ENJ83zN0t7Wv3X8G7/++5P/VtONzuPWeLk8dy6iP/l36/rzq/s28o3yafy1SNfHn2n7+k/fCV7bZoy997/9cPfxr+jIFMs0/okdHf+dJ+4+nu7Zffzp8R+tpk7V12yn/yvk+2M7DXyS5w4AAAAAAAAAAAAAAAAAAAAAAAAAtisTEUcjyWRX0plMNlv7De/fxmCmUCyVT18vzs9ORPW3soeiL9P4qsvGdyw2vv90qLY9SfPn1+X/FBG/iYg3Bw5X89lcsTCxz7EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMORTX7/P/XNQJsdk95uNREA6IRDW5Z4mF+TrVQqlQ62BwDovK2v/63efq0DDQEAuqbN9f9wN9sBAHTPbt7/AwDPNtd/ADh4XP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosCuXL6dL5cflpVyan7i5MD9dvHlmIl+azs7M57K54tyN7GSxOFnIZ3PFma0er1As3hiN2flbI+V8qTxSWli8OlOcny1fnZoZn8xfzfd1JSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JnSwuL0eKGQn3suEq9ExNo1laejYU+eSOKpaMa+JL4+8+XxdmXubPEyHnsqonjGEvvdMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8G34JAAD//7M8Jlw=") sched_setscheduler(0x0, 0x6, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x40) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 1.436208446s ago: executing program 0 (id=587): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000271) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) 1.352253318s ago: executing program 3 (id=589): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xff}, {0x6, 0x0, 0x2}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 1.255707401s ago: executing program 0 (id=600): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r2, 0x20, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/106, 0x6a}}, 0x10) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 1.169554892s ago: executing program 3 (id=591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd2d, 0x1e, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20000000) 1.095623544s ago: executing program 3 (id=593): r0 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 964.984677ms ago: executing program 2 (id=596): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) fstat(r1, &(0x7f00000006c0)) 919.039338ms ago: executing program 2 (id=597): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(r0, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x6559, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x9}}}}, 0x36) socket$nl_route(0x10, 0x3, 0x0) 740.854833ms ago: executing program 2 (id=599): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000600)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r1, r2, r3, 0x0) io_uring_enter(r0, 0x2, 0x2, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000900)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000b00)=@IORING_OP_CLOSE={0x13, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2, 0x2, 0x0, 0x0, 0x0) 739.560043ms ago: executing program 5 (id=601): pipe2(&(0x7f00000003c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 701.499444ms ago: executing program 5 (id=602): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xff}, {0x6, 0x0, 0x2}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 678.900354ms ago: executing program 2 (id=603): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), 0x0) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) lseek(r0, 0x2000, 0x0) 620.098886ms ago: executing program 5 (id=604): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000080)='::&/\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000018c0)='\xf5\xfc\xd2S?\x10s{\x84\x11\n\xaen|\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\x11\xfb\xde\x93\xbe\x7f\xb7\x12\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00\x00\x00', &(0x7f00000004c0)='\xa4\x93\xaatH\x98\xb7\x8c\xd5\xff\a\x03X\x11\xcbN\xc6L\xff\xdf{c\xdd\xeek\x05\\_\xed<]\xcd\xfbX\xbfK\xf4g\f\xce\xe8\xc0\xb5S\x13\x9f\x9b\x18\xb3U\xb4>\"\xf9 \xf0\x80j\xf4\xac\x01\x1a\xf3{\xe3I\x0f\x98\xd1\fF\xe53\xa2\xb9\xc0\xbe\xfa\xe9+\xdc\x05\xf4\xcc\xce~\x16\xfb\xd7\xabn\x8d\xeb\xc8\xfb\x1e\x00\xf0F\xc5\x87\x02\x19\x13yfz`ph', 0x0) tkill(r1, 0xb) 587.764596ms ago: executing program 2 (id=605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r3, 0xb, 0x0, @val=@netfilter={0xa, 0x1, 0x5, 0x1}}, 0x20) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) 562.843777ms ago: executing program 2 (id=606): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r1, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) 484.564709ms ago: executing program 4 (id=608): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) 384.123511ms ago: executing program 0 (id=609): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000002400)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x3, 0x1020, 0x200, 0xfffffff7}}}}}}, 0x0) 298.395404ms ago: executing program 0 (id=610): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0xaca80400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='cmdline\x00') exit(0x7) pread64(r2, 0x0, 0x0, 0x4) 268.040494ms ago: executing program 4 (id=611): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000540)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@resgid}, {@minixdf}, {@stripe={'stripe', 0x3d, 0x5}}, {@nomblk_io_submit}, {@jqfmt_vfsv0}, {@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 226.109015ms ago: executing program 5 (id=612): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0xef6f16ad20de71d8, 0x1b, 0x1}, 0xfffffe0b) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000000002, 0x2) 200.682755ms ago: executing program 3 (id=613): pipe2(&(0x7f00000003c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 167.165687ms ago: executing program 4 (id=614): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000600)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r1, r2, r3, 0x0) io_uring_enter(r0, 0x2, 0x2, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000900)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000b00)=@IORING_OP_CLOSE={0x13, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2, 0x2, 0x0, 0x0, 0x0) 136.856437ms ago: executing program 3 (id=615): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x10}, 0x18) 128.276878ms ago: executing program 5 (id=616): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), 0x0) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) lseek(r0, 0x2000, 0x0) 96.647609ms ago: executing program 4 (id=617): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r3, 0xb, 0x0, @val=@netfilter={0xa, 0x1, 0x5, 0x1}}, 0x20) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) 68.684309ms ago: executing program 4 (id=618): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r3, 0x65, 0x1, &(0x7f0000000080), 0x1d0) 34.71731ms ago: executing program 3 (id=619): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r2, 0x20, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/106, 0x6a}}, 0x10) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 21.13322ms ago: executing program 4 (id=620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000002400)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x3, 0x1020, 0x200, 0xfffffff7}}}}}}, 0x0) 0s ago: executing program 5 (id=621): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) kernel console output (not intermixed with test programs): CONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.706290][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.707667][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.709021][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.710434][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.716150][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.719100][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.720683][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.736136][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.737669][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.739784][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.745474][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.747041][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.750376][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.754576][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.755743][ T4337] device veth0_macvtap entered promiscuous mode [ 33.758855][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.760282][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.762896][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.764406][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.765851][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.767786][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.774665][ T4337] device veth1_macvtap entered promiscuous mode [ 33.776236][ T4334] device veth0_macvtap entered promiscuous mode [ 33.777908][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.779344][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.783252][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.785393][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.786789][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.788184][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.789704][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.795724][ T4334] device veth1_macvtap entered promiscuous mode [ 33.800609][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.804326][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.805608][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.806958][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.809884][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.811701][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.813571][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.815285][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.816726][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.844099][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.858999][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.860587][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.863470][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.866001][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.870281][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.880083][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.882282][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.883887][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.885330][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.886876][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.894867][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.897039][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.898693][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.900190][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.902845][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.907464][ T4415] loop3: detected capacity change from 0 to 512 [ 33.907930][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.914633][ T4415] EXT2-fs (loop3): nobh option not supported [ 33.917254][ T4415] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 33.918979][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.922287][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.923972][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.927485][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.928855][ T4336] device veth0_vlan entered promiscuous mode [ 33.937268][ T4415] syz.3.6: attempt to access beyond end of device [ 33.937268][ T4415] loop3: rw=0, sector=3606377190, nr_sectors = 2 limit=512 [ 33.943290][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.944938][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.945550][ T4415] EXT2-fs (loop3): error: ext2_free_blocks: Freeing blocks not in datazone - block = 1701604449, count = 1 [ 33.947914][ T4334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.949246][ T4334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.950531][ T4334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.951279][ T4415] EXT2-fs (loop3): error: ext2_free_blocks: Freeing blocks not in datazone - block = 29554, count = 1 [ 33.955026][ T4415] EXT2-fs (loop3): error: ext2_free_blocks: Freeing blocks not in datazone - block = 4294967040, count = 1 [ 33.955511][ T4334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.957958][ T4415] EXT2-fs (loop3): error: ext2_free_blocks: bit already cleared for block 255 [ 33.964043][ T4336] device veth1_vlan entered promiscuous mode [ 33.968468][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.970157][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.974681][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.976415][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.981888][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.988197][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.991056][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.997780][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.999413][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.000969][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.005355][ T4337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.006746][ T4337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.008079][ T4337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.009515][ T4337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.021057][ T1575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.022463][ T1575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.024275][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.046855][ T4396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.048137][ T4396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.049345][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.190387][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.192296][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.198657][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.199762][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.201097][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.204991][ T4336] device veth0_macvtap entered promiscuous mode [ 34.214904][ T4396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.216102][ T4396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.225192][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.226712][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.233819][ T4336] device veth1_macvtap entered promiscuous mode [ 34.239366][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.241077][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.255436][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.260792][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.263556][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.265128][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.266581][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.267105][ T4424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 34.268272][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.281853][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.304507][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.307567][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.309205][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.316929][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.318502][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.319930][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.322037][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.323680][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.325163][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.326704][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.328246][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.330460][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.345316][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.347068][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.348800][ T1575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.350268][ T1575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.352671][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.366730][ T4336] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.368155][ T4336] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.369520][ T4336] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.370843][ T4336] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.416131][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.417429][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.438110][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.513010][ T4396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.514364][ T4396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.515664][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.539898][ T4441] syz.3.14 uses obsolete (PF_INET,SOCK_PACKET) [ 34.568548][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.569877][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.571899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.763599][ T4461] loop0: detected capacity change from 0 to 128 [ 34.769023][ T4461] ======================================================= [ 34.769023][ T4461] WARNING: The mand mount option has been deprecated and [ 34.769023][ T4461] and is ignored by this kernel. Remove the mand [ 34.769023][ T4461] option from the mount to silence this warning. [ 34.769023][ T4461] ======================================================= [ 34.789215][ T4461] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 34.796805][ T4461] hpfs: filesystem error: improperly stopped [ 34.797905][ T4461] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 34.799250][ T4461] hpfs: You really don't want any checks? You are crazy... [ 34.801479][ T4461] hpfs: Code page index out of array [ 34.802542][ T4461] hpfs: code page support is disabled [ 34.807261][ T4461] hpfs: hpfs_map_4sectors(): unaligned read [ 34.808422][ T4461] hpfs: hpfs_map_4sectors(): unaligned read [ 34.818540][ T4461] hpfs: filesystem error: unable to find root dir [ 34.839632][ T4467] loop1: detected capacity change from 0 to 136 [ 34.893672][ T4467] rock: directory entry would overflow storage [ 34.919042][ T4467] rock: sig=0x4f50, size=4, remaining=3 [ 34.919963][ T4467] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 34.975348][ T4342] Bluetooth: hci4: command 0x041b tx timeout [ 34.976400][ T4342] Bluetooth: hci3: command 0x041b tx timeout [ 34.977428][ T4342] Bluetooth: hci1: command 0x041b tx timeout [ 34.978326][ T4342] Bluetooth: hci2: command 0x041b tx timeout [ 34.979256][ T4342] Bluetooth: hci0: command 0x041b tx timeout [ 35.112612][ T4485] loop4: detected capacity change from 0 to 1024 [ 35.155065][ T4485] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 35.159209][ T4488] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 35.174795][ T4488] EXT4-fs (loop4): Remounting filesystem read-only [ 35.183347][ T4480] loop1: detected capacity change from 0 to 32768 [ 35.208574][ T4485] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.34: lblock 0 mapped to illegal pblock 0 (length 1) [ 35.235502][ T4485] EXT4-fs (loop4): Remounting filesystem read-only [ 35.236638][ T4485] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.34: lblock 0 mapped to illegal pblock 0 (length 1) [ 35.241477][ T4485] EXT4-fs (loop4): Remounting filesystem read-only [ 35.242713][ T4485] EXT4-fs error (device loop4): ext4_ext_remove_space:2945: inode #15: comm syz.4.34: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 35.251531][ T4485] EXT4-fs (loop4): Remounting filesystem read-only [ 35.255083][ T4485] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.34: lblock 0 mapped to illegal pblock 0 (length 1) [ 35.262973][ T4485] EXT4-fs (loop4): Remounting filesystem read-only [ 35.264109][ T4485] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.34: lblock 0 mapped to illegal pblock 0 (length 1) [ 35.269418][ T4485] EXT4-fs (loop4): Remounting filesystem read-only [ 35.270475][ T4485] EXT4-fs error (device loop4): ext4_ext_remove_space:2945: inode #15: comm syz.4.34: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 35.316454][ T4485] EXT4-fs (loop4): Remounting filesystem read-only [ 35.324342][ T4494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.37'. [ 35.325832][ T4494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 35.333223][ T4494] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.334598][ T4494] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.335874][ T4494] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.337080][ T4494] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.346025][ T4494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.37'. [ 35.347407][ T4494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 35.348757][ T4494] Zero length message leads to an empty skb [ 35.368760][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 35.485144][ T4510] loop4: detected capacity change from 0 to 16 [ 35.497958][ T4510] erofs: (device loop4): mounted with root inode @ nid 36. [ 35.516141][ T4343] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 35.527278][ T4507] loop1: detected capacity change from 0 to 8192 [ 35.530641][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.535265][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.539218][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.541319][ T4507] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 35.543413][ T4507] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 35.546373][ T4507] REISERFS (device loop1): using ordered data mode [ 35.547341][ T4507] reiserfs: using flush barriers [ 35.548935][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.555566][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.557363][ T4507] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 35.560264][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.563302][ T4507] REISERFS (device loop1): checking transaction log (loop1) [ 35.566572][ T4507] REISERFS (device loop1): Using rupasov hash to sort names [ 35.568066][ T4507] REISERFS (device loop1): using 3.5.x disk format [ 35.569572][ T4507] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 35.576776][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.579299][ T4507] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 35.581078][ T4507] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 35.581156][ T4509] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 35.583153][ T4507] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 35.586915][ T4507] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 35.597503][ T4509] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 35.600279][ T4507] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 35.605667][ T4507] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 35.608252][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.609359][ T4507] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 35.617644][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 35.621954][ T4514] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 35.628132][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.630126][ T4507] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 35.635529][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.638697][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.646069][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.648968][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.656200][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.657369][ T4507] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 35.660071][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.662120][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.665022][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.667385][ T4507] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 35.668678][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.669033][ T4507] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 35.675914][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.677907][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.680081][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.684801][ T4520] loop0: detected capacity change from 0 to 1024 [ 35.688062][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.690169][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.694297][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.696467][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.698468][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.701703][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.704606][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.707169][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.709309][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.711577][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.719355][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.722433][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.724650][ T4520] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 35.724942][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.728128][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.736853][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.738664][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.740556][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.743227][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.745085][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.747630][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.750114][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.754881][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.756726][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.758724][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.760573][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.763900][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.766046][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.767815][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.769777][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.771512][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.773632][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.775360][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.777181][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.778996][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.780966][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.786018][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.788039][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.790089][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.792471][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.795073][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.797956][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.799811][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.811345][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.817563][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.819363][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.821163][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.831444][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.834159][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.836492][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.838843][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.840692][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.849156][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.851148][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.853765][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.861342][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.866178][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.876272][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.878113][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.879875][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.883752][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.886379][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.891281][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.894238][ T4525] loop1: detected capacity change from 0 to 16 [ 35.896491][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.898221][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.901342][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.904678][ T4525] erofs: (device loop1): mounted with root inode @ nid 36. [ 35.906682][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.911774][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.914193][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.916615][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.918939][ T4519] loop2: detected capacity change from 0 to 32768 [ 35.921073][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.927244][ T4519] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.49 (4519) [ 35.930412][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.933277][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.940677][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.943906][ T4519] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 35.945636][ T4519] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 35.946918][ T4519] BTRFS info (device loop2): enabling auto defrag [ 35.947833][ T4519] BTRFS info (device loop2): force clearing of disk cache [ 35.948875][ T4519] BTRFS info (device loop2): disabling log replay at mount time [ 35.950020][ T4519] BTRFS info (device loop2): turning on async discard [ 35.951086][ T4519] BTRFS info (device loop2): setting nodatacow, compression disabled [ 35.952692][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.954650][ T4519] BTRFS info (device loop2): turning off async discard [ 35.955772][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.957610][ T4519] BTRFS info (device loop2): disabling free space tree [ 35.958603][ T4519] BTRFS info (device loop2): disabling tree log [ 35.958957][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 35.959457][ T4519] BTRFS info (device loop2): enabling disk space caching [ 35.961660][ T4519] BTRFS info (device loop2): disk space caching is enabled [ 35.962876][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.965434][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.967924][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.970042][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.972310][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.977138][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.979151][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.981584][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.992569][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.999806][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 35.999985][ T4532] process 'syz.0.51' launched './file0' with NULL argv: empty string added [ 36.006885][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.009822][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.022503][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.029912][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.034484][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.036287][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.039835][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.046042][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.050840][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.069437][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.071758][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.076707][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.078930][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.080775][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.086009][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.096169][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.097889][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.119855][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.123470][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.125310][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.127190][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.129052][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.146655][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.149493][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.159441][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.164584][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.166581][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.171591][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.173654][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.175668][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.185347][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.191663][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.197728][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.200843][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.206729][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.212672][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.221385][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.228972][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.230932][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.237249][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.240987][ T4337] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 36.242666][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.249930][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.253243][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.256777][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.258819][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.271583][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.273852][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.275806][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.277692][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.279533][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.287824][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.296386][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.298900][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.306818][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.309154][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.329477][ T4510] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 36.463766][ T4581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'. [ 36.747869][ T4600] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 36.768908][ T4604] device syzkaller1 entered promiscuous mode [ 36.948569][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 37.041488][ T4343] Bluetooth: hci0: command 0x040f tx timeout [ 37.042505][ T4343] Bluetooth: hci2: command 0x040f tx timeout [ 37.043548][ T4343] Bluetooth: hci1: command 0x040f tx timeout [ 37.044466][ T4343] Bluetooth: hci3: command 0x040f tx timeout [ 37.045404][ T4343] Bluetooth: hci4: command 0x040f tx timeout [ 37.048751][ T4598] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 37.051153][ T4598] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 37.058151][ T4598] F2FS-fs (loop2): invalid crc value [ 37.078279][ T4598] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 37.109525][ T4598] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 37.110965][ T4598] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 37.188775][ T4337] syz-executor: attempt to access beyond end of device [ 37.188775][ T4337] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 37.280407][ T4382] binder: undelivered death notification, 0000000000000000 [ 37.672370][ T4642] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 37.831004][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 37.840459][ T4655] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 37.855016][ T4660] device team1 entered promiscuous mode [ 37.857303][ T4660] 8021q: adding VLAN 0 to HW filter on device team1 [ 37.891557][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 37.892147][ T4662] overlayfs: failed to resolve './bus': -2 [ 37.897261][ T4660] device team2 entered promiscuous mode [ 37.898230][ T4660] 8021q: adding VLAN 0 to HW filter on device team2 [ 37.906871][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 38.088708][ T4665] F2FS-fs (loop2): invalid crc value [ 38.093896][ T4665] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.104665][ T4665] F2FS-fs (loop2): Start checkpoint disabled! [ 38.111901][ T4665] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 38.132383][ T4665] syz.2.95: attempt to access beyond end of device [ 38.132383][ T4665] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 38.198698][ T4674] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.247368][ T4674] capability: warning: `syz.3.99' uses 32-bit capabilities (legacy support in use) [ 38.277811][ T4396] kworker/u4:6: attempt to access beyond end of device [ 38.277811][ T4396] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 38.288718][ T4396] kworker/u4:6: attempt to access beyond end of device [ 38.288718][ T4396] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 38.288878][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 38.547640][ T4684] UBIFS error (pid: 4684): cannot open "./file0", error -22 [ 38.605948][ T4698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 38.618412][ T4698] device team1 entered promiscuous mode [ 38.619975][ T4698] 8021q: adding VLAN 0 to HW filter on device team1 [ 38.635122][ T4698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 38.640441][ T4698] device team2 entered promiscuous mode [ 38.643181][ T4697] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.663284][ T4698] 8021q: adding VLAN 0 to HW filter on device team2 [ 38.748771][ T4702] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 38.818951][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 39.023152][ T4704] set_capacity_and_notify: 10 callbacks suppressed [ 39.023162][ T4704] loop1: detected capacity change from 0 to 40427 [ 39.037347][ T4704] F2FS-fs (loop1): invalid crc value [ 39.046510][ T4704] F2FS-fs (loop1): Found nat_bits in checkpoint [ 39.055887][ T4714] loop3: detected capacity change from 0 to 4096 [ 39.065329][ T4704] F2FS-fs (loop1): Start checkpoint disabled! [ 39.079942][ T4704] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 39.095469][ T4714] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 39.105552][ T4704] syz.1.110: attempt to access beyond end of device [ 39.105552][ T4704] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 39.131786][ T4342] Bluetooth: hci4: command 0x0419 tx timeout [ 39.132862][ T4342] Bluetooth: hci3: command 0x0419 tx timeout [ 39.133857][ T4342] Bluetooth: hci1: command 0x0419 tx timeout [ 39.134812][ T4342] Bluetooth: hci2: command 0x0419 tx timeout [ 39.135765][ T4342] Bluetooth: hci0: command 0x0419 tx timeout [ 39.250229][ T4729] loop0: detected capacity change from 0 to 64 [ 39.273201][ T4389] kworker/u4:5: attempt to access beyond end of device [ 39.273201][ T4389] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 39.279757][ T4389] kworker/u4:5: attempt to access beyond end of device [ 39.279757][ T4389] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 39.339966][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 39.346953][ T4735] device team1 entered promiscuous mode [ 39.348000][ T4735] 8021q: adding VLAN 0 to HW filter on device team1 [ 39.389588][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 39.395341][ T4735] device team2 entered promiscuous mode [ 39.404053][ T4735] 8021q: adding VLAN 0 to HW filter on device team2 [ 39.489475][ T4743] device syzkaller1 entered promiscuous mode [ 39.542644][ T4734] loop3: detected capacity change from 0 to 40427 [ 39.548471][ T4734] F2FS-fs (loop3): invalid crc value [ 39.552014][ T4734] F2FS-fs (loop3): Found nat_bits in checkpoint [ 39.563849][ T4734] F2FS-fs (loop3): Start checkpoint disabled! [ 39.566792][ T4734] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 39.579957][ T4734] syz.3.133: attempt to access beyond end of device [ 39.579957][ T4734] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 39.663860][ T4396] kworker/u4:6: attempt to access beyond end of device [ 39.663860][ T4396] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 39.666433][ T4396] kworker/u4:6: attempt to access beyond end of device [ 39.666433][ T4396] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 39.795250][ T4754] loop1: detected capacity change from 0 to 32768 [ 39.801331][ T4754] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.140 (4754) [ 39.816315][ T4754] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 39.817796][ T4754] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 39.819260][ T4754] BTRFS info (device loop1): using free space tree [ 39.880902][ T4775] netlink: 'syz.2.136': attribute type 4 has an invalid length. [ 39.948793][ T4754] BTRFS info (device loop1): enabling ssd optimizations [ 40.008668][ T4788] loop2: detected capacity change from 0 to 2048 [ 40.048464][ T4788] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 40.074600][ T4788] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 40.239280][ T4810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 40.244787][ T4810] netlink: 'syz.0.147': attribute type 15 has an invalid length. [ 40.251129][ T4810] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.252795][ T4810] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.254144][ T4810] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.255538][ T4810] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.275328][ T4810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 40.280125][ T4810] netlink: 'syz.0.147': attribute type 15 has an invalid length. [ 40.366231][ T4814] Illegal XDP return value 4294967274 on prog (id 22) dev syz_tun, expect packet loss! [ 40.434558][ T4329] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 40.633183][ T4826] 9pnet: p9_errstr2errno: server reported unknown error ags: [ 40.670427][ T4836] loop1: detected capacity change from 0 to 256 [ 40.676937][ T4836] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 40.726495][ T4838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'. [ 40.925942][ T4812] loop2: detected capacity change from 0 to 131072 [ 40.934228][ T4812] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 40.935822][ T4812] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 40.938358][ T4812] F2FS-fs (loop2): invalid crc value [ 40.948657][ T4812] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.963560][ T4812] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 40.964665][ T4812] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 41.119320][ T4858] loop1: detected capacity change from 0 to 8192 [ 41.144332][ T4858] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 41.146520][ T4858] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 41.147937][ T4858] REISERFS (device loop1): using ordered data mode [ 41.149026][ T4858] reiserfs: using flush barriers [ 41.150198][ T4858] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.154214][ T4858] REISERFS (device loop1): checking transaction log (loop1) [ 41.156341][ T4858] REISERFS (device loop1): Using r5 hash to sort names [ 41.157423][ T4858] REISERFS (device loop1): using 3.5.x disk format [ 41.158876][ T4858] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 41.315476][ T4848] loop0: detected capacity change from 0 to 32768 [ 41.317243][ T4848] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.161 (4848) [ 41.322060][ T4848] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 41.323870][ T4848] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 41.325381][ T4848] BTRFS info (device loop0): using free space tree [ 41.333653][ T4848] BTRFS info (device loop0): enabling ssd optimizations [ 41.601252][ T4898] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 41.605945][ T4896] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 41.636778][ T4896] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #12: comm syz.1.173: corrupted in-inode xattr [ 41.663823][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 41.675393][ T4907] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.698493][ T4907] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.719130][ T4334] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 41.753429][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 41.775116][ T39] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.917073][ T4918] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 41.919169][ T4918] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 41.920639][ T4918] REISERFS (device loop2): using ordered data mode [ 41.943646][ T4918] reiserfs: using flush barriers [ 41.945162][ T4918] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.954850][ T4918] REISERFS (device loop2): checking transaction log (loop2) [ 41.960379][ T4918] REISERFS (device loop2): Using r5 hash to sort names [ 41.967020][ T4934] tipc: Started in network mode [ 41.967898][ T4934] tipc: Node identity 96872d877d59, cluster identity 4711 [ 41.969078][ T4934] tipc: Enabled bearer , priority 10 [ 41.970255][ T4918] REISERFS (device loop2): using 3.5.x disk format [ 41.973864][ T4918] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 41.997214][ T4930] tipc: Resetting bearer [ 42.058562][ T4930] tipc: Disabling bearer [ 42.100523][ T4941] netlink: 32 bytes leftover after parsing attributes in process `syz.0.188'. [ 42.103912][ T4941] netlink: 32 bytes leftover after parsing attributes in process `syz.0.188'. [ 42.388160][ T4949] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.187 (4949) [ 42.393813][ T4949] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 42.395767][ T4949] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 42.397086][ T4949] BTRFS info (device loop2): using free space tree [ 42.431362][ T4949] BTRFS info (device loop2): enabling ssd optimizations [ 42.595288][ T4337] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 42.929387][ T4995] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 42.931750][ T4995] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 42.933212][ T4995] REISERFS (device loop4): using ordered data mode [ 42.934144][ T4995] reiserfs: using flush barriers [ 42.935324][ T4995] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 42.937941][ T4995] REISERFS (device loop4): checking transaction log (loop4) [ 42.940292][ T4995] REISERFS (device loop4): Using r5 hash to sort names [ 42.941905][ T4995] REISERFS (device loop4): using 3.5.x disk format [ 42.943061][ T4995] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 42.968770][ T4998] Mass Storage Function, version: 2009/09/11 [ 42.970346][ T4998] LUN: removable file: (no medium) [ 42.971930][ T4343] Bluetooth: hci4: command 0x0405 tx timeout [ 43.270838][ T5002] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 43.367431][ T5008] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 43.368538][ T5008] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 43.370475][ T5008] F2FS-fs (loop3): invalid crc value [ 43.384631][ T5008] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 43.454198][ T5008] F2FS-fs (loop3): Start checkpoint disabled! [ 43.490342][ T5008] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 43.494346][ T5008] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 43.538347][ T5008] syz.3.205: attempt to access beyond end of device [ 43.538347][ T5008] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 43.553031][ T5018] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.209 (5018) [ 43.564922][ T5008] syz.3.205: attempt to access beyond end of device [ 43.564922][ T5008] loop3: rw=0, sector=77832, nr_sectors = 8 limit=40427 [ 43.574388][ T5018] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 43.578589][ T5018] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 43.586582][ T5018] BTRFS info (device loop4): using free space tree [ 43.588359][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 43.610693][ T4389] kworker/u4:5: attempt to access beyond end of device [ 43.610693][ T4389] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 43.767493][ T5018] BTRFS info (device loop4): enabling ssd optimizations [ 43.795172][ T5031] XFS (loop0): Mounting V5 Filesystem [ 43.867292][ T5031] XFS (loop0): Ending clean mount [ 43.877942][ T5031] XFS (loop0): Quotacheck needed: Please wait. [ 43.902982][ T5031] XFS (loop0): Quotacheck: Done. [ 43.989290][ T4336] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 44.036103][ T4334] XFS (loop0): Unmounting Filesystem [ 44.168855][ T5073] set_capacity_and_notify: 11 callbacks suppressed [ 44.168865][ T5073] loop3: detected capacity change from 0 to 32768 [ 44.186435][ T5082] loop2: detected capacity change from 0 to 1024 [ 44.187849][ T5082] EXT4-fs: Ignoring removed bh option [ 44.188768][ T5082] EXT4-fs: inline encryption not supported [ 44.200912][ T5073] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 44.205727][ T5073] JBD2: Ignoring recovery information on journal [ 44.254676][ T5073] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 44.269014][ T5082] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #3: block 1: comm syz.2.220: lblock 1 mapped to illegal pblock 1 (length 1) [ 44.295506][ T5082] EXT4-fs (loop2): Remounting filesystem read-only [ 44.296383][ T5082] Quota error (device loop2): write_blk: dquota write failed [ 44.297332][ T5082] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 44.376560][ T5082] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.220: Failed to acquire dquot type 0 [ 44.386169][ T5082] EXT4-fs (loop2): Remounting filesystem read-only [ 44.387627][ T5082] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.220: Freeing blocks not in datazone - block = 0, count = 4096 [ 44.425093][ T5082] EXT4-fs (loop2): Remounting filesystem read-only [ 44.427077][ T5082] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.220: Invalid inode bitmap blk 0 in block_group 0 [ 44.445398][ T4389] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 44.448962][ T4389] EXT4-fs (loop2): Remounting filesystem read-only [ 44.449873][ T4389] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 44.451022][ T4389] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 44.466914][ T4389] EXT4-fs (loop2): Remounting filesystem read-only [ 44.476411][ T5082] EXT4-fs (loop2): Remounting filesystem read-only [ 44.477460][ T5082] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 44.495028][ T5082] EXT4-fs (loop2): Remounting filesystem read-only [ 44.496071][ T5082] EXT4-fs (loop2): 1 orphan inode deleted [ 44.496987][ T5082] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 44.658393][ T5082] EXT4-fs error (device loop2): ext4_get_group_desc:277: comm syz.2.220: block_group >= groups_count - block_group = 1, groups_count = 1 [ 44.686315][ T5082] EXT4-fs (loop2): Remounting filesystem read-only [ 44.687311][ T5082] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4643: inode #40: comm syz.2.220: unable to read itable block [ 44.705226][ T5082] EXT4-fs (loop2): Remounting filesystem read-only [ 44.790268][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 44.933627][ T5095] loop1: detected capacity change from 0 to 32768 [ 44.964055][ T5095] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 44.985007][ T4328] ocfs2: Unmounting device (7,3) on (node local) [ 45.006754][ T5095] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 45.102123][ T5104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.226'. [ 45.147664][ T4329] ocfs2: Unmounting device (7,1) on (node local) [ 45.175285][ T5104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 45.527127][ T5113] loop3: detected capacity change from 0 to 32768 [ 45.553395][ T5113] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.228 (5113) [ 45.567972][ T5113] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 45.569678][ T5113] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 45.570994][ T5113] BTRFS info (device loop3): using free space tree [ 45.577103][ T5139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 45.579765][ T5139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 45.723281][ T5113] BTRFS info (device loop3): enabling ssd optimizations [ 45.740089][ T5134] loop0: detected capacity change from 0 to 32768 [ 45.779886][ T5134] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 45.928410][ T4334] ocfs2: Unmounting device (7,0) on (node local) [ 45.954693][ T4328] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 46.323171][ T5188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 46.342202][ T5188] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.343668][ T5188] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.344971][ T5188] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.346283][ T5188] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.364625][ T5188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 46.376503][ T5192] loop4: detected capacity change from 0 to 4096 [ 46.390967][ T5192] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 46.410795][ T5192] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 46.416138][ T5192] ntfs3: loop4: Failed to load $Extend. [ 46.626078][ T5203] loop4: detected capacity change from 0 to 4096 [ 46.647584][ T5199] loop3: detected capacity change from 0 to 32768 [ 46.712904][ T5199] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 46.790952][ T5209] loop1: detected capacity change from 0 to 16 [ 46.820768][ T5209] erofs: (device loop1): mounted with root inode @ nid 36. [ 46.857908][ T5201] loop0: detected capacity change from 0 to 32768 [ 46.876866][ T5201] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.257 (5201) [ 46.882758][ T5201] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 46.884206][ T5201] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 46.891044][ T4328] ocfs2: Unmounting device (7,3) on (node local) [ 46.893399][ T5201] BTRFS info (device loop0): using free space tree [ 46.914016][ T5209] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 46.915793][ T5209] syz.1.260: attempt to access beyond end of device [ 46.915793][ T5209] loop1: rw=0, sector=296, nr_sectors = 8 limit=16 [ 46.917737][ T5209] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 46.918981][ T5209] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 47.009403][ T5227] erofs: (device loop4): mounted with root inode @ nid 36. [ 47.027819][ T5227] syz.4.263: attempt to access beyond end of device [ 47.027819][ T5227] loop4: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 47.030191][ T5227] syz.4.263: attempt to access beyond end of device [ 47.030191][ T5227] loop4: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 47.053539][ T5227] syz.4.263: attempt to access beyond end of device [ 47.053539][ T5227] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 47.063133][ T4342] Bluetooth: Wrong link type (-71) [ 47.064419][ T4342] Bluetooth: hci3: SCO packet for unknown connection handle 2217 [ 47.118334][ T5201] BTRFS info (device loop0): enabling ssd optimizations [ 47.138805][ T5133] F2FS-fs (loop2): Found nat_bits in checkpoint [ 47.186544][ T5236] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.188821][ T5236] EXT4-fs (loop3): Test dummy encryption mode enabled [ 47.203898][ T5236] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 47.229386][ T5229] (syz.1.264,5229,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 47.231762][ T5133] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 47.234644][ T5229] (syz.1.264,5229,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 47.257872][ T5229] JBD2: Ignoring recovery information on journal [ 47.271366][ T5133] F2FS-fs (loop2): Inconsistent error blkaddr:6146, sit bitmap:0 [ 47.272822][ T5133] CPU: 0 PID: 5133 Comm: syz.2.237 Not tainted syzkaller #0 [ 47.273966][ T5133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 47.275465][ T5133] Call trace: [ 47.276109][ T5133] dump_backtrace+0x1c4/0x1f0 [ 47.276847][ T5133] show_stack+0x2c/0x3c [ 47.277442][ T5133] __dump_stack+0x30/0x40 [ 47.278085][ T5133] dump_stack_lvl+0xf4/0x15c [ 47.278778][ T5133] dump_stack+0x1c/0x5c [ 47.279379][ T5133] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 47.280208][ T5133] f2fs_get_node_info+0x5ac/0xd84 [ 47.280913][ T5133] read_node_page+0x2e0/0x6c4 [ 47.281590][ T5133] __get_node_page+0x114/0xae8 [ 47.282260][ T5133] f2fs_get_node_page+0x30/0x40 [ 47.283000][ T5133] f2fs_iget+0x68c/0x4768 [ 47.283636][ T5133] f2fs_lookup+0x3f0/0x900 [ 47.284279][ T5133] path_openat+0xc74/0x27a0 [ 47.284938][ T5133] do_filp_open+0x198/0x38c [ 47.285633][ T5133] do_sys_openat2+0x134/0x3fc [ 47.286277][ T5133] __arm64_sys_openat+0x11c/0x150 [ 47.287049][ T5133] invoke_syscall+0x98/0x290 [ 47.287711][ T5133] el0_svc_common+0x13c/0x258 [ 47.288410][ T5133] do_el0_svc+0x5c/0x134 [ 47.289085][ T5133] el0_svc+0x58/0x128 [ 47.289660][ T5133] el0t_64_sync_handler+0x84/0xf0 [ 47.290364][ T5133] el0t_64_sync+0x18c/0x190 [ 47.296072][ T5229] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 47.306399][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 47.369374][ T5133] F2FS-fs (loop2): Inconsistent error blkaddr:6146, sit bitmap:0 [ 47.370704][ T5133] CPU: 1 PID: 5133 Comm: syz.2.237 Not tainted syzkaller #0 [ 47.371880][ T5133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 47.373441][ T5133] Call trace: [ 47.373933][ T5133] dump_backtrace+0x1c4/0x1f0 [ 47.374702][ T5133] show_stack+0x2c/0x3c [ 47.375408][ T5133] __dump_stack+0x30/0x40 [ 47.376098][ T5133] dump_stack_lvl+0xf4/0x15c [ 47.376823][ T5133] dump_stack+0x1c/0x5c [ 47.377474][ T5133] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 47.378185][ T5133] f2fs_get_node_info+0x5ac/0xd84 [ 47.378913][ T5133] read_node_page+0x2e0/0x6c4 [ 47.379648][ T5133] __get_node_page+0x114/0xae8 [ 47.380350][ T5133] f2fs_get_node_page+0x30/0x40 [ 47.381148][ T5133] f2fs_iget+0x68c/0x4768 [ 47.381794][ T5133] f2fs_lookup+0x3f0/0x900 [ 47.382468][ T5133] path_openat+0xc74/0x27a0 [ 47.383159][ T5133] do_filp_open+0x198/0x38c [ 47.383807][ T5133] do_sys_openat2+0x134/0x3fc [ 47.384469][ T5133] __arm64_sys_openat+0x11c/0x150 [ 47.385222][ T5133] invoke_syscall+0x98/0x290 [ 47.385922][ T5133] el0_svc_common+0x13c/0x258 [ 47.386596][ T5133] do_el0_svc+0x5c/0x134 [ 47.387210][ T5133] el0_svc+0x58/0x128 [ 47.387799][ T5133] el0t_64_sync_handler+0x84/0xf0 [ 47.388521][ T5133] el0t_64_sync+0x18c/0x190 [ 47.439962][ T4334] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 47.542957][ T5245] XFS (loop4): Mounting V5 Filesystem [ 47.607602][ T5245] XFS (loop4): Ending clean mount [ 47.609747][ T5245] XFS (loop4): Quotacheck needed: Please wait. [ 47.644684][ T5245] XFS (loop4): Quotacheck: Done. [ 47.679862][ T4329] ocfs2: Unmounting device (7,1) on (node local) [ 47.724175][ T27] audit: type=1326 audit(47.710:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5277 comm="syz.3.275" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa29781a8 code=0x0 [ 47.894088][ T4336] XFS (loop4): Unmounting Filesystem [ 47.937944][ T5294] syz.2.281 sent an empty control message without MSG_MORE. [ 48.192694][ T4329] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 48.194506][ T4329] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 48.265978][ T5312] EXT4-fs (loop0): Test dummy encryption mode enabled [ 48.266077][ T5304] (syz.2.285,5304,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 48.273784][ T5304] (syz.2.285,5304,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 48.277020][ T5312] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 48.296407][ T5304] JBD2: Ignoring recovery information on journal [ 48.305383][ T5312] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 48.344868][ T5312] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 48.353132][ T5304] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 48.395272][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 48.687714][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 48.887894][ T4342] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.888341][ T5328] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 48.890226][ T5328] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 48.891922][ T4342] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.894147][ T4342] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.896240][ T4342] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.896245][ T5328] F2FS-fs (loop0): invalid crc value [ 48.898788][ T4342] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 48.900159][ T4342] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.939061][ T5328] F2FS-fs (loop0): Found nat_bits in checkpoint [ 48.956671][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.958341][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.978188][ T5328] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 48.979375][ T5328] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 49.020566][ T5350] binder: 5348:5350 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 49.029914][ T5350] binder: 5350 RLIMIT_NICE not set [ 49.123712][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.125405][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.130514][ T5354] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 49.179024][ T5361] set_capacity_and_notify: 10 callbacks suppressed [ 49.179034][ T5361] loop4: detected capacity change from 0 to 1024 [ 49.218510][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.220123][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.236520][ T5361] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 49.280286][ T5361] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.305: bg 0: block 112: padding at end of block bitmap is not set [ 49.299741][ T5361] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 49.303926][ T5361] EXT4-fs (loop4): This should not happen!! Data will be lost [ 49.303926][ T5361] [ 49.307505][ T5361] EXT4-fs (loop4): Total free blocks count 0 [ 49.309876][ T5361] EXT4-fs (loop4): Free/Dirty block details [ 49.311568][ T5361] EXT4-fs (loop4): free_blocks=0 [ 49.312630][ T5361] EXT4-fs (loop4): dirty_blocks=16 [ 49.322062][ T5361] EXT4-fs (loop4): Block reservation details [ 49.323058][ T5361] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 49.352787][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.354336][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.362203][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 49.370694][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 49.447131][ T5337] chnl_net:caif_netlink_parms(): no params data found [ 49.504224][ T5337] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.506757][ T5337] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.518422][ T5337] device bridge_slave_0 entered promiscuous mode [ 49.526334][ T11] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 49.534285][ T11] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 49.539144][ T5337] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.540415][ T5337] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.558415][ T5337] device bridge_slave_1 entered promiscuous mode [ 49.600275][ T5386] loop0: detected capacity change from 0 to 512 [ 49.614504][ T5386] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 49.622544][ T11] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 49.627777][ T11] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 49.631569][ T5386] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 49.637160][ T5337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.639964][ T5337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.645863][ T5386] EXT4-fs (loop0): orphan cleanup on readonly fs [ 49.671535][ T5386] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.312: bg 0: block 15: invalid block bitmap [ 49.686868][ T5386] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 49.692953][ T5337] team0: Port device team_slave_0 added [ 49.697893][ T5386] EXT4-fs (loop0): 1 truncate cleaned up [ 49.701315][ T5337] team0: Port device team_slave_1 added [ 49.717610][ T5386] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 49.746018][ T5386] EXT4-fs (loop0): shut down requested (2) [ 49.785705][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.787084][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.801533][ T5337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.816426][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.821054][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.825535][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 49.828126][ T5337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.892868][ T5337] device hsr_slave_0 entered promiscuous mode [ 49.921611][ T5337] device hsr_slave_1 entered promiscuous mode [ 49.941676][ T5337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.943084][ T5337] Cannot create hsr debugfs directory [ 49.944221][ T11] tipc: Left network mode [ 50.087307][ T5419] loop4: detected capacity change from 0 to 1024 [ 50.108866][ T5409] loop3: detected capacity change from 0 to 40427 [ 50.118016][ T5409] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 50.118854][ T5419] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 50.120538][ T5409] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 50.129028][ T5409] F2FS-fs (loop3): invalid crc value [ 50.145096][ T5409] F2FS-fs (loop3): Found nat_bits in checkpoint [ 50.164377][ T5409] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 50.165661][ T5409] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 50.215542][ T5337] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 50.242483][ T5337] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 50.310564][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 50.384058][ T5337] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 50.395134][ T5430] Bluetooth: MGMT ver 1.22 [ 50.415071][ T5337] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 50.627789][ T5448] loop2: detected capacity change from 0 to 8192 [ 50.642943][ T5448] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 50.645701][ T5448] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 50.647212][ T5448] REISERFS (device loop2): using ordered data mode [ 50.648203][ T5448] reiserfs: using flush barriers [ 50.653918][ T5448] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 50.659840][ T5448] REISERFS (device loop2): checking transaction log (loop2) [ 50.663887][ T5432] loop4: detected capacity change from 0 to 32768 [ 50.672924][ T5432] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.322 (5432) [ 50.678030][ T5448] REISERFS (device loop2): Using r5 hash to sort names [ 50.680871][ T5448] REISERFS (device loop2): using 3.5.x disk format [ 50.682358][ T5448] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 50.695582][ T5432] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 50.698189][ T5432] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 50.699898][ T5432] BTRFS info (device loop4): turning on sync discard [ 50.701011][ T5432] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 50.705188][ T5337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.718190][ T5337] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.732165][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.733742][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.735154][ T5432] BTRFS info (device loop4): use zstd compression, level 3 [ 50.735195][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.736320][ T5432] BTRFS info (device loop4): turning on async discard [ 50.737769][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.740012][ T4396] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.741131][ T4396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.746260][ T5432] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 50.747846][ T5432] BTRFS info (device loop4): trying to use backup root at mount time [ 50.749038][ T5432] BTRFS info (device loop4): enabling auto defrag [ 50.750014][ T5432] BTRFS info (device loop4): using free space tree [ 50.766026][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.835699][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.837431][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.838839][ T1575] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.839718][ T1575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.857066][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.858981][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.868793][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.870159][ T4389] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 50.874019][ T5432] BTRFS error (device loop4): failed to load root extent [ 50.875225][ T5432] BTRFS warning (device loop4): try to load backup roots slot 1 [ 50.876845][ T9] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 50.879598][ T5432] BTRFS warning (device loop4): couldn't read tree root [ 50.880951][ T5432] BTRFS warning (device loop4): try to load backup roots slot 2 [ 50.883215][ T5432] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 50.883532][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.885004][ T5432] BTRFS warning (device loop4): couldn't read tree root [ 50.887123][ T5432] BTRFS warning (device loop4): try to load backup roots slot 3 [ 50.890914][ T5432] BTRFS info (device loop4): enabling ssd optimizations [ 50.896879][ T5432] BTRFS info (device loop4): rebuilding free space tree [ 50.898037][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.909781][ T5432] BTRFS info (device loop4): checking UUID tree [ 50.914430][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.929835][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.964993][ T4343] Bluetooth: hci1: command 0x0409 tx timeout [ 50.977491][ T5484] loop3: detected capacity change from 0 to 1024 [ 51.023148][ T5484] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 51.037471][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.039140][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.040568][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.045297][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.062697][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.098287][ T4336] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 51.252550][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 51.473559][ T5508] loop4: detected capacity change from 0 to 40427 [ 51.479218][ T5508] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 51.480464][ T5508] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 51.492829][ T5508] F2FS-fs (loop4): invalid crc value [ 51.497486][ T5508] F2FS-fs (loop4): Found nat_bits in checkpoint [ 51.525325][ T5508] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 51.526545][ T5508] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 51.773272][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.774714][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.794197][ T5337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.939418][ T5546] loop2: detected capacity change from 0 to 2048 [ 51.977137][ T5546] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 51.978437][ T5546] UDF-fs: Scanning with blocksize 512 failed [ 52.000856][ T5546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 52.097420][ T5530] loop4: detected capacity change from 0 to 40427 [ 52.109293][ T5530] F2FS-fs (loop4): invalid crc value [ 52.166174][ T5530] F2FS-fs (loop4): Found nat_bits in checkpoint [ 52.213210][ T5530] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 52.259743][ T1575] kworker/u4:3: attempt to access beyond end of device [ 52.259743][ T1575] loop2: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 52.262502][ T1575] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 52.263839][ T1575] kworker/u4:3: attempt to access beyond end of device [ 52.263839][ T1575] loop2: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 52.269503][ T1575] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 52.270917][ T1575] kworker/u4:3: attempt to access beyond end of device [ 52.270917][ T1575] loop2: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 52.280865][ T1575] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 52.283086][ T1575] kworker/u4:3: attempt to access beyond end of device [ 52.283086][ T1575] loop2: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 52.285219][ T1575] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 52.288296][ T1575] kworker/u4:3: attempt to access beyond end of device [ 52.288296][ T1575] loop2: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 52.290263][ T1575] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 52.299486][ T11] device hsr_slave_0 left promiscuous mode [ 52.301054][ T1575] kworker/u4:3: attempt to access beyond end of device [ 52.301054][ T1575] loop2: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 52.308135][ T1575] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 52.309553][ T1575] kworker/u4:3: attempt to access beyond end of device [ 52.309553][ T1575] loop2: rw=1, sector=2054, nr_sectors = 2 limit=2048 [ 52.312655][ T11] device hsr_slave_1 left promiscuous mode [ 52.321904][ T1575] Buffer I/O error on dev loop2, logical block 1027, lost async page write [ 52.323398][ T1575] kworker/u4:3: attempt to access beyond end of device [ 52.323398][ T1575] loop2: rw=1, sector=2054, nr_sectors = 2 limit=2048 [ 52.325629][ T1575] Buffer I/O error on dev loop2, logical block 1027, lost async page write [ 52.328347][ T5564] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 52.330344][ T5564] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 52.334769][ T5564] REISERFS (device loop3): using ordered data mode [ 52.335810][ T5564] reiserfs: using flush barriers [ 52.336630][ T1575] kworker/u4:3: attempt to access beyond end of device [ 52.336630][ T1575] loop2: rw=1, sector=2056, nr_sectors = 2 limit=2048 [ 52.340116][ T5564] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 52.345673][ T1575] Buffer I/O error on dev loop2, logical block 1028, lost async page write [ 52.347007][ T1575] kworker/u4:3: attempt to access beyond end of device [ 52.347007][ T1575] loop2: rw=1, sector=2056, nr_sectors = 2 limit=2048 [ 52.349741][ T1575] Buffer I/O error on dev loop2, logical block 1028, lost async page write [ 52.371378][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.372674][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.374003][ T5564] REISERFS (device loop3): checking transaction log (loop3) [ 52.403928][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.405198][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.406757][ T11] device bridge_slave_1 left promiscuous mode [ 52.408884][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.413730][ T5564] REISERFS (device loop3): Using r5 hash to sort names [ 52.438037][ T5564] REISERFS (device loop3): using 3.5.x disk format [ 52.440325][ T5564] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 52.478538][ T11] device bridge_slave_0 left promiscuous mode [ 52.479686][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.622651][ T11] device veth1_macvtap left promiscuous mode [ 52.623969][ T11] device veth0_macvtap left promiscuous mode [ 52.625055][ T11] device veth1_vlan left promiscuous mode [ 52.626051][ T11] device veth0_vlan left promiscuous mode [ 52.839557][ T5595] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a800c018, mo2=0082] [ 52.841007][ T5595] System zones: 2-12, 7-7 [ 52.845875][ T5595] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #17: comm syz.4.346: iget: immutable or append flags not allowed on symlinks [ 52.852784][ T5595] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.346: couldn't read orphan inode 17 (err -117) [ 52.855515][ T5583] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.343 (5583) [ 52.859343][ T5595] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.869694][ T5583] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 52.871318][ T5583] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 52.872725][ T5583] BTRFS info (device loop2): turning on sync discard [ 52.873753][ T5583] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 52.887580][ T5583] BTRFS info (device loop2): use zstd compression, level 3 [ 52.888908][ T5583] BTRFS info (device loop2): turning on async discard [ 52.890042][ T5583] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 52.900228][ T5583] BTRFS info (device loop2): trying to use backup root at mount time [ 52.902261][ T5583] BTRFS info (device loop2): enabling auto defrag [ 52.905752][ T5583] BTRFS info (device loop2): using free space tree [ 52.942250][ T1575] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 52.944575][ T5583] BTRFS error (device loop2): failed to load root extent [ 52.945744][ T5583] BTRFS warning (device loop2): try to load backup roots slot 1 [ 52.947027][ T1575] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 52.950112][ T5583] BTRFS warning (device loop2): couldn't read tree root [ 52.951646][ T5583] BTRFS warning (device loop2): try to load backup roots slot 2 [ 52.953348][ T5583] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 52.955250][ T5583] BTRFS warning (device loop2): couldn't read tree root [ 52.956462][ T5583] BTRFS warning (device loop2): try to load backup roots slot 3 [ 52.959447][ T5583] BTRFS info (device loop2): enabling ssd optimizations [ 52.965666][ T5583] BTRFS info (device loop2): rebuilding free space tree [ 52.976486][ T5583] BTRFS info (device loop2): checking UUID tree [ 53.041306][ T4343] Bluetooth: hci1: command 0x041b tx timeout [ 53.067256][ T4337] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 55.121382][ T4343] Bluetooth: hci1: command 0x040f tx timeout [ 55.691266][ T5358] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 56.274456][ T11] team0 (unregistering): Port device team_slave_1 removed [ 56.433401][ T11] team0 (unregistering): Port device team_slave_0 removed [ 56.592095][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.814783][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.202027][ T4342] Bluetooth: hci1: command 0x0419 tx timeout [ 58.392859][ T11] bond0 (unregistering): Released all slaves [ 58.719351][ T5337] device veth0_vlan entered promiscuous mode [ 58.743001][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.744725][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.746266][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.747695][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.755070][ T5337] device veth1_vlan entered promiscuous mode [ 58.757318][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.759439][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.767016][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 58.807862][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.809620][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.830204][ T5337] device veth0_macvtap entered promiscuous mode [ 58.832313][ T5637] netlink: 'syz.4.349': attribute type 12 has an invalid length. [ 58.833473][ T5637] netlink: 'syz.4.349': attribute type 29 has an invalid length. [ 58.834575][ T5637] netlink: 148 bytes leftover after parsing attributes in process `syz.4.349'. [ 58.835929][ T5637] netlink: 'syz.4.349': attribute type 3 has an invalid length. [ 58.840737][ T5337] device veth1_macvtap entered promiscuous mode [ 58.863741][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.865481][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.866978][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.868651][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.870355][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.888753][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.890346][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.892876][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.896351][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.904570][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.906207][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.907684][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.909166][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.912777][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.915690][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.920900][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.923930][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.927502][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.930953][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.933144][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.934933][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.939468][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.945058][ T5337] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.946563][ T5337] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.948086][ T5337] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.949576][ T5337] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.952844][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.954565][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.063767][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.065088][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.082971][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.101389][ T5630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.102603][ T5630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.103860][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.274330][ T5672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.359'. [ 60.037683][ T5734] set_capacity_and_notify: 3 callbacks suppressed [ 60.037692][ T5734] loop0: detected capacity change from 0 to 128 [ 60.060127][ T5734] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 60.066944][ T5734] hpfs: filesystem error: improperly stopped [ 60.068002][ T5734] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 60.069219][ T5734] hpfs: You really don't want any checks? You are crazy... [ 60.086947][ T5734] hpfs: Code page index out of array [ 60.087846][ T5734] hpfs: code page support is disabled [ 60.088886][ T5734] hpfs: hpfs_map_4sectors(): unaligned read [ 60.089782][ T5734] hpfs: hpfs_map_4sectors(): unaligned read [ 60.104299][ T5734] hpfs: filesystem error: unable to find root dir [ 60.365660][ T5765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.373'. [ 61.034394][ T5697] loop5: detected capacity change from 0 to 262144 [ 61.079329][ T5697] F2FS-fs (loop5): Found nat_bits in checkpoint [ 61.121383][ T5697] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 61.383132][ T5808] loop0: detected capacity change from 0 to 40427 [ 61.386939][ T5808] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 61.387958][ T5808] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 61.396318][ T5808] F2FS-fs (loop0): invalid crc value [ 61.398093][ T5808] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 61.442697][ T5808] F2FS-fs (loop0): Start checkpoint disabled! [ 61.470336][ T5808] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 61.471623][ T5808] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 61.578407][ T5808] bio_check_eod: 14 callbacks suppressed [ 61.578418][ T5808] syz.0.383: attempt to access beyond end of device [ 61.578418][ T5808] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 61.631014][ T4396] kworker/u4:6: attempt to access beyond end of device [ 61.631014][ T4396] loop0: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 61.757449][ T5697] F2FS-fs (loop5): Start checkpoint disabled! [ 61.915043][ T5842] loop4: detected capacity change from 0 to 128 [ 61.977243][ T5644] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 61.984410][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 62.150340][ T5859] netlink: 'syz.0.399': attribute type 5 has an invalid length. [ 62.330770][ T5860] loop4: detected capacity change from 0 to 40427 [ 62.346483][ T5860] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 62.347659][ T5860] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 62.352906][ T5860] F2FS-fs (loop4): invalid crc value [ 62.354246][ T5860] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 62.395735][ T5860] F2FS-fs (loop4): Start checkpoint disabled! [ 62.403153][ T5877] loop2: detected capacity change from 0 to 512 [ 62.408320][ T5877] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 62.412481][ T5860] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 62.413627][ T5860] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 62.444637][ T5877] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 62.465363][ T5877] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 62.518712][ T5886] loop0: detected capacity change from 0 to 128 [ 62.536685][ T5860] syz.4.389: attempt to access beyond end of device [ 62.536685][ T5860] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 62.574461][ T5886] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 62.579240][ T39] kworker/u4:2: attempt to access beyond end of device [ 62.579240][ T39] loop4: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 62.763365][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 62.818459][ T5911] netlink: 'syz.3.402': attribute type 5 has an invalid length. [ 62.939529][ T5921] loop3: detected capacity change from 0 to 512 [ 62.956658][ T5921] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 62.991980][ T5921] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 62.995672][ T5921] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 63.217952][ T5941] loop4: detected capacity change from 0 to 128 [ 63.227017][ T5941] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 63.333071][ T5950] loop2: detected capacity change from 0 to 1024 [ 63.371104][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 63.498845][ T5935] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 63.501763][ T5935] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 63.505890][ T5935] F2FS-fs (loop3): invalid crc value [ 63.509466][ T5935] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 63.541650][ T5935] F2FS-fs (loop3): Start checkpoint disabled! [ 63.558577][ T5935] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 63.559725][ T5935] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 63.644731][ T5935] syz.3.407: attempt to access beyond end of device [ 63.644731][ T5935] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 63.677451][ T39] kworker/u4:2: attempt to access beyond end of device [ 63.677451][ T39] loop3: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 64.210088][ T5994] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #70: mode 03644 has unknown file type [ 64.212649][ T5994] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 64.214197][ T5994] OCFS2: File system is now read-only. [ 64.214985][ T5994] (syz.2.433,5994,1):ocfs2_read_locked_inode:554 ERROR: status = -30 [ 64.216798][ T5994] (syz.2.433,5994,1):_ocfs2_get_system_file_inode:141 ERROR: status = -30 [ 64.218247][ T5994] (syz.2.433,5994,1):ocfs2_init_global_system_inodes:461 ERROR: status = -30 [ 64.219853][ T5994] (syz.2.433,5994,1):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 3, possibly corrupt fs? [ 64.219887][ T5994] (syz.2.433,5994,1):ocfs2_init_global_system_inodes:472 ERROR: status = -30 [ 64.230691][ T5994] (syz.2.433,5994,1):ocfs2_initialize_super:2253 ERROR: status = -30 [ 64.233187][ T5994] (syz.2.433,5994,1):ocfs2_fill_super:1176 ERROR: status = -30 [ 64.494653][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495907][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.588925][ T6022] raw_sendmsg: syz.0.446 forgot to set AF_INET. Fix it! [ 64.840258][ T6032] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #70: mode 03644 has unknown file type [ 64.845839][ T6032] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 64.847408][ T6032] OCFS2: File system is now read-only. [ 64.848417][ T6032] (syz.4.451,6032,1):ocfs2_read_locked_inode:554 ERROR: status = -30 [ 64.849853][ T6032] (syz.4.451,6032,1):_ocfs2_get_system_file_inode:141 ERROR: status = -30 [ 64.858861][ T6032] (syz.4.451,6032,1):ocfs2_init_global_system_inodes:461 ERROR: status = -30 [ 64.860847][ T6032] (syz.4.451,6032,1):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 3, possibly corrupt fs? [ 64.860877][ T6032] (syz.4.451,6032,1):ocfs2_init_global_system_inodes:472 ERROR: status = -30 [ 64.884372][ T6032] (syz.4.451,6032,1):ocfs2_initialize_super:2253 ERROR: status = -30 [ 64.885712][ T6032] (syz.4.451,6032,1):ocfs2_fill_super:1176 ERROR: status = -30 [ 65.000413][ T6042] input: syz0 as /devices/virtual/input/input2 [ 65.147674][ T6036] set_capacity_and_notify: 7 callbacks suppressed [ 65.147682][ T6036] loop2: detected capacity change from 0 to 32768 [ 65.168427][ T6051] loop4: detected capacity change from 0 to 1024 [ 65.178163][ T6051] EXT4-fs: Ignoring removed bh option [ 65.213634][ T6036] XFS (loop2): Mounting V5 Filesystem [ 65.215437][ T6051] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 65.237693][ T6051] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 65.290366][ T6036] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 65.300040][ T6068] loop3: detected capacity change from 0 to 164 [ 65.306750][ T6036] XFS (loop2): Starting recovery (logdev: internal) [ 65.317874][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 65.325273][ T6036] XFS (loop2): Ending recovery (logdev: internal) [ 65.369088][ T6071] device syzkaller0 entered promiscuous mode [ 65.539831][ T6081] netlink: 144 bytes leftover after parsing attributes in process `syz.0.469'. [ 65.613217][ T6075] loop3: detected capacity change from 0 to 32768 [ 65.632658][ T4337] XFS (loop2): Unmounting Filesystem [ 65.666818][ T6075] XFS (loop3): Mounting V5 Filesystem [ 65.685258][ T6089] loop0: detected capacity change from 0 to 4096 [ 65.697841][ T6075] XFS (loop3): Ending clean mount [ 65.800289][ T6075] overlayfs: upper fs does not support file handles, falling back to index=off. [ 65.864228][ T4328] XFS (loop3): Unmounting Filesystem [ 66.120229][ T6099] loop0: detected capacity change from 0 to 32768 [ 66.156474][ T6099] XFS (loop0): Mounting V5 Filesystem [ 66.187036][ T6099] XFS (loop0): Ending clean mount [ 66.268928][ T6099] overlayfs: upper fs does not support file handles, falling back to index=off. [ 66.315325][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 66.346607][ T4334] XFS (loop0): Unmounting Filesystem [ 66.364218][ T6121] loop4: detected capacity change from 0 to 16 [ 66.368884][ T6121] erofs: (device loop4): mounted with root inode @ nid 36. [ 66.458554][ T6124] netlink: 144 bytes leftover after parsing attributes in process `syz.5.481'. [ 66.685244][ T6122] loop3: detected capacity change from 0 to 32768 [ 66.705323][ T6126] loop4: detected capacity change from 0 to 32768 [ 66.714462][ T6126] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.482 (6126) [ 66.717964][ T6126] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 66.719578][ T6126] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 66.721021][ T6126] BTRFS info (device loop4): turning off barriers [ 66.722347][ T6126] BTRFS info (device loop4): turning on async discard [ 66.723539][ T6126] BTRFS info (device loop4): doing ref verification [ 66.724937][ T6126] BTRFS info (device loop4): using free space tree [ 66.727468][ T6122] XFS (loop3): Mounting V5 Filesystem [ 66.786564][ T6122] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 66.801615][ T6122] XFS (loop3): Starting recovery (logdev: internal) [ 66.814665][ T6122] XFS (loop3): Ending recovery (logdev: internal) [ 66.915600][ T6126] BTRFS info (device loop4): enabling ssd optimizations [ 67.074053][ T6126] overlayfs: conflicting lowerdir path [ 67.201930][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.491'. [ 67.203571][ T4336] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 67.210138][ T4328] XFS (loop3): Unmounting Filesystem [ 67.536414][ T6182] loop5: detected capacity change from 0 to 16 [ 67.549612][ T6182] erofs: (device loop5): mounted with root inode @ nid 36. [ 67.568975][ T6185] netlink: 144 bytes leftover after parsing attributes in process `syz.4.494'. [ 67.927001][ T6192] XFS (loop5): Mounting V5 Filesystem [ 67.942633][ T6203] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop4 scanned by syz.4.502 (6203) [ 67.947744][ T6203] BTRFS info (device loop4): first mount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 67.949421][ T6203] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 67.950775][ T6203] BTRFS info (device loop4): using free space tree [ 67.974649][ T6192] XFS (loop5): Ending clean mount [ 68.012171][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 68.040262][ T6203] BTRFS info (device loop4): enabling ssd optimizations [ 68.121492][ T4336] BTRFS info (device loop4): last unmount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 68.246313][ T5337] XFS (loop5): Unmounting Filesystem [ 68.324123][ T6212] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.503 (6212) [ 68.334932][ T6212] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 68.336516][ T6212] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 68.337928][ T6212] BTRFS info (device loop0): turning off barriers [ 68.344878][ T6212] BTRFS info (device loop0): turning on async discard [ 68.345982][ T6212] BTRFS info (device loop0): doing ref verification [ 68.347072][ T6212] BTRFS info (device loop0): using free space tree [ 68.490124][ T6212] BTRFS info (device loop0): enabling ssd optimizations [ 69.140017][ T4334] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 69.606473][ T22] cfg80211: failed to load regulatory.db [ 69.934512][ T6329] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop2 scanned by syz.2.517 (6329) [ 69.939561][ T6329] BTRFS info (device loop2): first mount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 69.941081][ T6329] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 69.963920][ T6329] BTRFS info (device loop2): using free space tree [ 70.030398][ T6331] XFS (loop0): Mounting V5 Filesystem [ 70.105188][ T6331] XFS (loop0): Ending clean mount [ 70.223666][ T6329] BTRFS info (device loop2): enabling ssd optimizations [ 70.292046][ T4334] XFS (loop0): Unmounting Filesystem [ 70.335535][ T4337] BTRFS info (device loop2): last unmount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 70.527053][ T6413] set_capacity_and_notify: 5 callbacks suppressed [ 70.527063][ T6413] loop4: detected capacity change from 0 to 512 [ 70.582411][ T6413] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.529: missing EA_INODE flag [ 70.586370][ T6413] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.529: error while reading EA inode 2 err=-117 [ 70.614160][ T6413] EXT4-fs (loop4): 1 orphan inode deleted [ 70.620266][ T6413] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 70.704450][ T6429] loop3: detected capacity change from 0 to 512 [ 70.735741][ T6429] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.533: missing EA_INODE flag [ 70.737698][ T6429] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.533: error while reading EA inode 2 err=-117 [ 70.741426][ T6429] EXT4-fs (loop3): 1 orphan inode deleted [ 70.742433][ T6429] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 70.810564][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 70.962633][ T6443] loop3: detected capacity change from 0 to 4096 [ 70.970254][ T6443] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 70.998004][ T6443] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 71.001658][ T6443] ntfs3: loop3: Failed to load $Extend. [ 71.012860][ T6437] loop2: detected capacity change from 0 to 32768 [ 71.051143][ T6437] XFS (loop2): Mounting V5 Filesystem [ 71.113138][ T6437] XFS (loop2): Ending clean mount [ 71.285573][ T6453] loop5: detected capacity change from 0 to 32768 [ 71.293794][ T6453] JBD2: Ignoring recovery information on journal [ 71.351796][ T6453] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 71.468129][ T6453] OCFS2: ERROR (device loop5): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 10 used bits, but a count shows 5 [ 71.472279][ T6453] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 71.473838][ T6453] OCFS2: File system is now read-only. [ 71.474622][ T6453] (syz.5.540,6453,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 71.476011][ T6453] (syz.5.540,6453,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 71.477277][ T6453] (syz.5.540,6453,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 71.478716][ T6453] (syz.5.540,6453,0):ocfs2_lock_refcount_allocators:2881 ERROR: status = -30 [ 71.479966][ T6453] (syz.5.540,6453,0):ocfs2_make_clusters_writable:3199 ERROR: status = -30 [ 71.482946][ T6453] (syz.5.540,6453,0):ocfs2_replace_cow:3359 ERROR: status = -30 [ 71.484125][ T6453] (syz.5.540,6453,0):ocfs2_refcount_cow_hunk:3435 ERROR: status = -30 [ 71.485556][ T6453] (syz.5.540,6453,0):ocfs2_refcount_cow:3479 ERROR: status = -30 [ 71.487830][ T6453] (syz.5.540,6453,0):ocfs2_orphan_for_truncate:385 ERROR: status = -30 [ 71.489138][ T6453] (syz.5.540,6453,0):ocfs2_truncate_file:498 ERROR: status = -30 [ 71.490321][ T6453] (syz.5.540,6453,0):ocfs2_setattr:1217 ERROR: status = -30 [ 72.826930][ T4337] XFS (loop2): Unmounting Filesystem [ 72.854981][ T5337] ocfs2: Unmounting device (7,5) on (node local) [ 72.866314][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 72.965758][ T6464] loop3: detected capacity change from 0 to 2048 [ 73.034568][ T6464] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c029, mo2=0003] [ 73.036254][ T6464] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 73.089676][ T6464] EXT4-fs error (device loop3): ext4_find_extent:936: inode #2: comm syz.3.539: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 73.122097][ T6464] EXT4-fs (loop3): Remounting filesystem read-only [ 73.216660][ T6480] loop4: detected capacity change from 0 to 512 [ 73.255132][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 73.274613][ T6480] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.546: missing EA_INODE flag [ 73.281627][ T6480] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.546: error while reading EA inode 2 err=-117 [ 73.284627][ T6480] EXT4-fs (loop4): 1 orphan inode deleted [ 73.285462][ T6480] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 73.363789][ T6488] loop5: detected capacity change from 0 to 512 [ 73.405253][ T6488] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.547: missing EA_INODE flag [ 73.407212][ T6488] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.547: error while reading EA inode 2 err=-117 [ 73.409361][ T6488] EXT4-fs (loop5): 1 orphan inode deleted [ 73.410234][ T6488] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 73.437976][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 73.523806][ T6509] loop4: detected capacity change from 0 to 4096 [ 73.525626][ T6509] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 73.540337][ T6509] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 73.544134][ T6509] ntfs3: loop4: Failed to load $Extend. [ 73.554577][ T5337] EXT4-fs (loop5): unmounting filesystem. [ 73.608409][ T6515] sock: sock_set_timeout: `syz.5.551' (pid 6515) tries to set negative timeout [ 73.804304][ T6537] loop5: detected capacity change from 0 to 2048 [ 73.824035][ T6537] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c029, mo2=0003] [ 73.826151][ T6537] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 73.842844][ T6537] EXT4-fs error (device loop5): ext4_find_extent:936: inode #2: comm syz.5.556: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 73.849873][ T6537] EXT4-fs (loop5): Remounting filesystem read-only [ 73.873972][ T5337] EXT4-fs (loop5): unmounting filesystem. [ 73.952962][ T6527] JBD2: Ignoring recovery information on journal [ 74.004257][ T6527] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 74.100768][ T6527] OCFS2: ERROR (device loop4): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 10 used bits, but a count shows 5 [ 74.107121][ T6527] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 74.108601][ T6527] OCFS2: File system is now read-only. [ 74.109415][ T6527] (syz.4.553,6527,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 74.110656][ T6527] (syz.4.553,6527,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 74.112250][ T6527] (syz.4.553,6527,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 74.113456][ T6527] (syz.4.553,6527,0):ocfs2_lock_refcount_allocators:2881 ERROR: status = -30 [ 74.114770][ T6527] (syz.4.553,6527,0):ocfs2_make_clusters_writable:3199 ERROR: status = -30 [ 74.116098][ T6527] (syz.4.553,6527,0):ocfs2_replace_cow:3359 ERROR: status = -30 [ 74.117333][ T6527] (syz.4.553,6527,0):ocfs2_refcount_cow_hunk:3435 ERROR: status = -30 [ 74.118521][ T6527] (syz.4.553,6527,0):ocfs2_refcount_cow:3479 ERROR: status = -30 [ 74.119696][ T6527] (syz.4.553,6527,0):ocfs2_orphan_for_truncate:385 ERROR: status = -30 [ 74.120840][ T6527] (syz.4.553,6527,0):ocfs2_truncate_file:498 ERROR: status = -30 [ 74.122027][ T6527] (syz.4.553,6527,0):ocfs2_setattr:1217 ERROR: status = -30 [ 74.147026][ T4336] ocfs2: Unmounting device (7,4) on (node local) [ 74.348834][ T6578] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.562: missing EA_INODE flag [ 74.350749][ T6578] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.562: error while reading EA inode 2 err=-117 [ 74.357661][ T6578] EXT4-fs (loop3): 1 orphan inode deleted [ 74.359901][ T6578] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 74.409642][ T6583] sock: sock_set_timeout: `syz.0.563' (pid 6583) tries to set negative timeout [ 74.450356][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 74.566524][ T6600] EXT4-fs: inline encryption not supported [ 74.567709][ T6600] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.569303][ T6600] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.571086][ T6600] EXT4-fs (loop0): Test dummy encryption mode enabled [ 74.589871][ T6602] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c029, mo2=0003] [ 74.595507][ T6602] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 74.595750][ T6600] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003] [ 74.598273][ T6600] System zones: 0-5 [ 74.603286][ T6600] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 74.618946][ T6602] EXT4-fs error (device loop4): ext4_find_extent:936: inode #2: comm syz.4.567: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 74.632325][ T6602] EXT4-fs (loop4): Remounting filesystem read-only [ 74.680403][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 74.933429][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 75.142196][ T6633] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.578 (6633) [ 75.149244][ T6633] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 75.162388][ T6633] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 75.163913][ T6633] BTRFS info (device loop3): enabling disk space caching [ 75.165160][ T6633] BTRFS info (device loop3): force clearing of disk cache [ 75.166367][ T6633] BTRFS info (device loop3): disk space caching is enabled [ 75.253985][ T6663] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c029, mo2=0003] [ 75.255723][ T6663] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 75.265808][ T6663] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.585: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 75.268715][ T6663] EXT4-fs (loop0): Remounting filesystem read-only [ 75.290135][ T6633] BTRFS info (device loop3): rebuilding free space tree [ 75.290488][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 75.300723][ T6633] BTRFS info (device loop3): disabling free space tree [ 75.302038][ T6633] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 75.303635][ T6633] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 75.364890][ T4328] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 75.526533][ T6693] EXT4-fs: inline encryption not supported [ 75.527463][ T6693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.540863][ T6693] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.542837][ T6693] EXT4-fs (loop2): Test dummy encryption mode enabled [ 75.547897][ T6693] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003] [ 75.549240][ T6693] System zones: 0-5 [ 75.554314][ T6693] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 75.713273][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 75.791801][ T6709] set_capacity_and_notify: 7 callbacks suppressed [ 75.791812][ T6709] loop5: detected capacity change from 0 to 4096 [ 75.801996][ T6709] EXT4-fs: inline encryption not supported [ 75.806205][ T6709] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.824030][ T6709] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.828633][ T6709] EXT4-fs (loop5): Test dummy encryption mode enabled [ 75.847833][ T6709] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003] [ 75.853170][ T6709] System zones: 0-5 [ 75.856516][ T6709] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 75.957538][ T5337] EXT4-fs (loop5): unmounting filesystem. [ 76.016164][ T6716] loop4: detected capacity change from 0 to 32768 [ 76.020051][ T6716] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.598 (6716) [ 76.028648][ T6716] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 76.034426][ T6716] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 76.037823][ T6716] BTRFS info (device loop4): enabling disk space caching [ 76.040216][ T6716] BTRFS info (device loop4): force clearing of disk cache [ 76.044659][ T6716] BTRFS info (device loop4): disk space caching is enabled [ 76.149363][ T14] libceph: connect (1)[c::]:6789 error -101 [ 76.150693][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 76.158332][ T14] libceph: connect (1)[c::]:6789 error -101 [ 76.159914][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 76.174210][ T6716] BTRFS info (device loop4): rebuilding free space tree [ 76.186445][ T6716] BTRFS info (device loop4): disabling free space tree [ 76.188115][ T6716] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 76.190912][ T6716] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 76.247889][ T4336] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 76.286659][ T6740] ceph: No mds server is up or the cluster is laggy [ 76.425224][ T5269] libceph: connect (1)[c::]:6789 error -101 [ 76.426289][ T5269] libceph: mon0 (1)[c::]:6789 connect error [ 76.481080][ T6767] loop4: detected capacity change from 0 to 4096 [ 76.484066][ T6767] EXT4-fs: inline encryption not supported [ 76.485226][ T6767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.486787][ T6767] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.488471][ T6767] EXT4-fs (loop4): Test dummy encryption mode enabled [ 76.490688][ T6767] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003] [ 76.494971][ T6767] System zones: 0-5 [ 76.497487][ T6767] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 76.570801][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 76.749767][ T6796] ================================================================== [ 76.751150][ T6796] BUG: KASAN: use-after-free in dvb_device_open+0xd4/0x38c [ 76.752302][ T6796] Read of size 8 at addr ffff0000d0c5c618 by task syz.5.621/6796 [ 76.753524][ T6796] [ 76.753864][ T6796] CPU: 1 PID: 6796 Comm: syz.5.621 Not tainted syzkaller #0 [ 76.755197][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 76.756799][ T6796] Call trace: [ 76.757313][ T6796] dump_backtrace+0x1c4/0x1f0 [ 76.758064][ T6796] show_stack+0x2c/0x3c [ 76.758689][ T6796] __dump_stack+0x30/0x40 [ 76.759392][ T6796] dump_stack_lvl+0xf4/0x15c [ 76.760087][ T6796] print_address_description+0x88/0x218 [ 76.760994][ T6796] print_report+0x50/0x68 [ 76.761788][ T6796] kasan_report+0xa8/0xfc [ 76.762517][ T6796] __asan_report_load8_noabort+0x2c/0x38 [ 76.763393][ T6796] dvb_device_open+0xd4/0x38c [ 76.764125][ T6796] chrdev_open+0x3d0/0x51c [ 76.764829][ T6796] do_dentry_open+0x738/0xf8c [ 76.765497][ T6796] vfs_open+0x7c/0x90 [ 76.766150][ T6796] path_openat+0x1fc0/0x27a0 [ 76.766807][ T6796] do_filp_open+0x198/0x38c [ 76.767608][ T6796] do_sys_openat2+0x134/0x3fc [ 76.768309][ T6796] __arm64_sys_openat+0x11c/0x150 [ 76.769200][ T6796] invoke_syscall+0x98/0x290 [ 76.769954][ T6796] el0_svc_common+0x13c/0x258 [ 76.770668][ T6796] do_el0_svc+0x5c/0x134 [ 76.771315][ T6796] el0_svc+0x58/0x128 [ 76.771901][ T6796] el0t_64_sync_handler+0x84/0xf0 [ 76.772674][ T6796] el0t_64_sync+0x18c/0x190 [ 76.773369][ T6796] [ 76.773745][ T6796] Allocated by task 1: [ 76.774381][ T6796] kasan_set_track+0x4c/0x80 [ 76.775058][ T6796] kasan_save_alloc_info+0x24/0x30 [ 76.775868][ T6796] __kasan_kmalloc+0xa0/0xb8 [ 76.776608][ T6796] kmalloc_trace+0x7c/0x94 [ 76.777312][ T6796] dvb_register_device+0x1a4/0x1800 [ 76.778087][ T6796] dvb_register_frontend+0x4d0/0x750 [ 76.778937][ T6796] vidtv_bridge_probe+0x9cc/0xe38 [ 76.779646][ T6796] platform_probe+0x148/0x1c8 [ 76.780290][ T6796] really_probe+0x3a0/0xac4 [ 76.780960][ T6796] __driver_probe_device+0x1c8/0x368 [ 76.781705][ T6796] driver_probe_device+0x78/0x324 [ 76.782477][ T6796] __driver_attach+0x3bc/0x614 [ 76.783175][ T6796] bus_for_each_dev+0x148/0x1d0 [ 76.783850][ T6796] driver_attach+0x50/0x60 [ 76.784538][ T6796] bus_add_driver+0x2c0/0x518 [ 76.785191][ T6796] driver_register+0x200/0x37c [ 76.785883][ T6796] __platform_driver_register+0x70/0x84 [ 76.786706][ T6796] vidtv_bridge_init+0x4c/0x8c [ 76.787429][ T6796] do_one_initcall+0x278/0x9f0 [ 76.788097][ T6796] do_initcall_level+0x158/0x214 [ 76.788821][ T6796] do_initcalls+0x58/0xac [ 76.789407][ T6796] do_basic_setup+0x8c/0xa0 [ 76.790092][ T6796] kernel_init_freeable+0x35c/0x4f0 [ 76.790822][ T6796] kernel_init+0x24/0x1d8 [ 76.791482][ T6796] ret_from_fork+0x10/0x20 [ 76.792130][ T6796] [ 76.792488][ T6796] Freed by task 6764: [ 76.793096][ T6796] kasan_set_track+0x4c/0x80 [ 76.793806][ T6796] kasan_save_free_info+0x38/0x5c [ 76.794634][ T6796] ____kasan_slab_free+0x148/0x1b0 [ 76.795440][ T6796] __kasan_slab_free+0x18/0x28 [ 76.796184][ T6796] slab_free_freelist_hook+0x16c/0x1e8 [ 76.797057][ T6796] __kmem_cache_free+0xbc/0x21c [ 76.797823][ T6796] kfree+0xd0/0x1a8 [ 76.798420][ T6796] dvb_device_open+0x2e0/0x38c [ 76.799146][ T6796] chrdev_open+0x3d0/0x51c [ 76.799860][ T6796] do_dentry_open+0x738/0xf8c [ 76.800567][ T6796] vfs_open+0x7c/0x90 [ 76.801185][ T6796] path_openat+0x1fc0/0x27a0 [ 76.801881][ T6796] do_filp_open+0x198/0x38c [ 76.802572][ T6796] do_sys_openat2+0x134/0x3fc [ 76.803277][ T6796] __arm64_sys_openat+0x11c/0x150 [ 76.804095][ T6796] invoke_syscall+0x98/0x290 [ 76.804820][ T6796] el0_svc_common+0x13c/0x258 [ 76.805534][ T6796] do_el0_svc+0x5c/0x134 [ 76.806160][ T6796] el0_svc+0x58/0x128 [ 76.806726][ T6796] el0t_64_sync_handler+0x84/0xf0 [ 76.807474][ T6796] el0t_64_sync+0x18c/0x190 [ 76.808114][ T6796] [ 76.808477][ T6796] The buggy address belongs to the object at ffff0000d0c5c600 [ 76.808477][ T6796] which belongs to the cache kmalloc-256 of size 256 [ 76.810627][ T6796] The buggy address is located 24 bytes inside of [ 76.810627][ T6796] 256-byte region [ffff0000d0c5c600, ffff0000d0c5c700) [ 76.812526][ T6796] [ 76.812877][ T6796] The buggy address belongs to the physical page: [ 76.813833][ T6796] page:00000000bbdff0b4 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000d0c5d000 pfn:0x110c5c [ 76.815587][ T6796] head:00000000bbdff0b4 order:1 compound_mapcount:0 compound_pincount:0 [ 76.816831][ T6796] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 76.818024][ T6796] raw: 05ffc00000010200 fffffc00035f5808 fffffc00032f2988 ffff0000c0002480 [ 76.819306][ T6796] raw: ffff0000d0c5d000 000000000010000e 00000001ffffffff 0000000000000000 [ 76.820565][ T6796] page dumped because: kasan: bad access detected [ 76.821539][ T6796] [ 76.821931][ T6796] Memory state around the buggy address: [ 76.822761][ T6796] ffff0000d0c5c500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.823962][ T6796] ffff0000d0c5c580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.825201][ T6796] >ffff0000d0c5c600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.826331][ T6796] ^ [ 76.827040][ T6796] ffff0000d0c5c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.828241][ T6796] ffff0000d0c5c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.829447][ T6796] ================================================================== [ 76.830718][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.833189][ T6796] Disabling lock debugging due to kernel taint [ 76.834268][ T6796] ------------[ cut here ]------------ [ 76.835047][ T6796] refcount_t: addition on 0; use-after-free. [ 76.836166][ T6796] WARNING: CPU: 1 PID: 6796 at lib/refcount.c:25 refcount_warn_saturate+0x134/0x1f8 [ 76.837531][ T6796] Modules linked in: [ 76.838136][ T6796] CPU: 1 PID: 6796 Comm: syz.5.621 Tainted: G B syzkaller #0 [ 76.839561][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 76.841110][ T6796] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.842296][ T6796] pc : refcount_warn_saturate+0x134/0x1f8 [ 76.843163][ T6796] lr : refcount_warn_saturate+0x134/0x1f8 [ 76.844014][ T6796] sp : ffff800021597620 [ 76.844589][ T6796] x29: ffff800021597620 x28: 1fffe0001a2ad8dc x27: 1fffe000196ce545 [ 76.845809][ T6796] x26: ffff0000cb672a28 x25: ffff0000ccf3e800 x24: dfff800000000000 [ 76.847057][ T6796] x23: 0000000000000000 x22: ffff0000d0c5c610 x21: ffff0000d156c6b0 [ 76.848308][ T6796] x20: ffff0000d0c5c610 x19: ffff800017d5d000 x18: 1fffe00033e7697e [ 76.849460][ T6796] x17: ffff80001537d000 x16: ffff800008043b30 x15: 0000000040000000 [ 76.850692][ T6796] x14: 0000000000000001 x13: 1fffe00033e79070 x12: 0000000000000000 [ 76.851941][ T6796] x11: ff00800008048e14 x10: 0000000040000002 x9 : 8073c82a8dae0f00 [ 76.853183][ T6796] x8 : 8073c82a8dae0f00 x7 : ffff800011cec160 x6 : ffff80000825ab50 [ 76.854423][ T6796] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 76.855648][ T6796] x2 : ffff8000215971e0 x1 : 0000000000000000 x0 : ffff80000825abe4 [ 76.856922][ T6796] Call trace: [ 76.857422][ T6796] refcount_warn_saturate+0x134/0x1f8 [ 76.858261][ T6796] dvb_device_open+0x32c/0x38c [ 76.858991][ T6796] chrdev_open+0x3d0/0x51c [ 76.859685][ T6796] do_dentry_open+0x738/0xf8c [ 76.860400][ T6796] vfs_open+0x7c/0x90 [ 76.861068][ T6796] path_openat+0x1fc0/0x27a0 [ 76.861806][ T6796] do_filp_open+0x198/0x38c [ 76.862490][ T6796] do_sys_openat2+0x134/0x3fc [ 76.863155][ T6796] __arm64_sys_openat+0x11c/0x150 [ 76.863880][ T6796] invoke_syscall+0x98/0x290 [ 76.864532][ T6796] el0_svc_common+0x13c/0x258 [ 76.865221][ T6796] do_el0_svc+0x5c/0x134 [ 76.865831][ T6796] el0_svc+0x58/0x128 [ 76.866533][ T6796] el0t_64_sync_handler+0x84/0xf0 [ 76.867347][ T6796] el0t_64_sync+0x18c/0x190 [ 76.868039][ T6796] irq event stamp: 2109 [ 76.868754][ T6796] hardirqs last enabled at (2109): [] finish_lock_switch+0xb0/0x1c8 [ 76.870308][ T6796] hardirqs last disabled at (2108): [] __schedule+0x294/0x1a6c [ 76.871649][ T6796] softirqs last enabled at (1762): [] local_bh_enable+0x10/0x34 [ 76.873091][ T6796] softirqs last disabled at (1760): [] local_bh_disable+0x10/0x34 [ 76.874606][ T6796] ---[ end trace 0000000000000000 ]--- [ 76.875413][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.879317][ T6796] ------------[ cut here ]------------ [ 76.880185][ T6796] refcount_t: underflow; use-after-free. [ 76.881450][ T6796] WARNING: CPU: 1 PID: 6796 at lib/refcount.c:28 refcount_warn_saturate+0x154/0x1f8 [ 76.882907][ T6796] Modules linked in: [ 76.883535][ T6796] CPU: 1 PID: 6796 Comm: syz.5.621 Tainted: G B W syzkaller #0 [ 76.884930][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 76.886349][ T6796] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.887618][ T6796] pc : refcount_warn_saturate+0x154/0x1f8 [ 76.888497][ T6796] lr : refcount_warn_saturate+0x154/0x1f8 [ 76.889356][ T6796] sp : ffff800021597510 [ 76.889992][ T6796] x29: ffff800021597510 x28: 1fffe0001a2e9861 x27: dfff800000000000 [ 76.891269][ T6796] x26: ffff0000d0c5c600 x25: 1fffe0001a18b8c7 x24: ffff0000d3680010 [ 76.892546][ T6796] x23: 00000000fffffffc x22: ffff0000d0c5c63c x21: 00000000c0000000 [ 76.893788][ T6796] x20: ffff0000d0c5c610 x19: ffff800017d5d000 x18: 1fffe00033e7697e [ 76.894978][ T6796] x17: ffff80001537d000 x16: ffff800008043b30 x15: 0000000040000000 [ 76.896226][ T6796] x14: 0000000000000001 x13: 1fffe00033e79070 x12: 0000000000000000 [ 76.897450][ T6796] x11: ff00800008048e14 x10: 0000000040000002 x9 : 8073c82a8dae0f00 [ 76.898683][ T6796] x8 : 8073c82a8dae0f00 x7 : ffff800011cec160 x6 : ffff80000825ab50 [ 76.899924][ T6796] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 76.901198][ T6796] x2 : ffff8000215970c0 x1 : 0000000000000000 x0 : ffff80000825abe4 [ 76.902361][ T6796] Call trace: [ 76.902850][ T6796] refcount_warn_saturate+0x154/0x1f8 [ 76.903637][ T6796] dvb_generic_release+0x16c/0x1e4 [ 76.904398][ T6796] dvb_frontend_open+0x9cc/0x10a0 [ 76.905114][ T6796] dvb_device_open+0x200/0x38c [ 76.905816][ T6796] chrdev_open+0x3d0/0x51c [ 76.906506][ T6796] do_dentry_open+0x738/0xf8c [ 76.907194][ T6796] vfs_open+0x7c/0x90 [ 76.907792][ T6796] path_openat+0x1fc0/0x27a0 [ 76.908467][ T6796] do_filp_open+0x198/0x38c [ 76.909112][ T6796] do_sys_openat2+0x134/0x3fc [ 76.909827][ T6796] __arm64_sys_openat+0x11c/0x150 [ 76.910625][ T6796] invoke_syscall+0x98/0x290 [ 76.911318][ T6796] el0_svc_common+0x13c/0x258 [ 76.912037][ T6796] do_el0_svc+0x5c/0x134 [ 76.912688][ T6796] el0_svc+0x58/0x128 [ 76.913285][ T6796] el0t_64_sync_handler+0x84/0xf0 [ 76.914079][ T6796] el0t_64_sync+0x18c/0x190 [ 76.914786][ T6796] irq event stamp: 2109 [ 76.915402][ T6796] hardirqs last enabled at (2109): [] finish_lock_switch+0xb0/0x1c8 [ 76.916882][ T6796] hardirqs last disabled at (2108): [] __schedule+0x294/0x1a6c [ 76.918325][ T6796] softirqs last enabled at (1762): [] local_bh_enable+0x10/0x34 [ 76.919665][ T6796] softirqs last disabled at (1760): [] local_bh_disable+0x10/0x34 [ 76.921072][ T6796] ---[ end trace 0000000000000000 ]--- [ 76.922018][ C1] vkms_vblank_simulate: vblank timer overrun