last executing test programs: 24.330195813s ago: executing program 2 (id=674): syz_socket_connect_nvme_tcp() socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3583], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}, {&(0x7f0000000180)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)}], 0x1}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 22.927984555s ago: executing program 2 (id=676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat(0xffffffffffffffff, 0x0, 0x143042, 0x0) syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000000240)='./bus\x00', 0x8, &(0x7f0000000340)={[{@barrier}, {@user_subvol_rm}, {@user_subvol_rm}, {@ssd}, {@discard_sync}, {@max_inline={'max_inline', 0x3d, [0x33, 0x6, 0x25, 0x31, 0x31, 0x2d, 0x32]}}, {@rescan_uuid_tree}, {@space_cache_v2}, {@nossd}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000500)=ANY=[], 0x5, 0x6cb, &(0x7f0000001400)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f1c120340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xf43b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 21.532971156s ago: executing program 1 (id=678): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) r4 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) r5 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r5, 0x0, 0x0, 0x40488c1, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) 14.014229193s ago: executing program 0 (id=688): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffffff, r3, &(0x7f00000005c0)={[&(0x7f0000000040)='/\x00']}, 0x0, 0x1000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x7c) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xa}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 11.350930424s ago: executing program 0 (id=691): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x9, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f00000021c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xe) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, r2, 0x2, 0x0, @void}, 0x10) socket$inet6(0xa, 0x2, 0x0) 11.271985025s ago: executing program 2 (id=692): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r1, r1, 0x2, r3, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) close(r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 10.083752963s ago: executing program 0 (id=693): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7f) 10.039819304s ago: executing program 4 (id=694): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000340)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 10.023936624s ago: executing program 0 (id=695): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000021840)=[{0x0}], 0x1}, 0x10041) 9.958169316s ago: executing program 3 (id=696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000200)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@block_validity}, {@noload}, {@nobarrier}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLfyU8GloIFETEI2nSBz1wAYHEAQQSHIo4BSetQt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPR2rtp4tohDydO8ecjbTuzu+7Md2fHnp2xG0DHGkr/SCL2R8SvEdEfEcX6E4Zqf91cmi/9tTRfSqJSee3PJH1Z3FiaL2X/RHVL7avtqFSy/J4G5S6+GTFRLk9dzvKjcxffGZ29cvWp6YsT56fOT10aP3Pm5ImjPafHT7UkzjSuG4Pvzxw5/OIb114unb321o9fp/Xdnx3P42ilodrVbejRVhfWZgdWpJNiGyvChhzI+nt3tf/3R1f0LR/rjxc+amvlgG1VqVQqjT6fMwsV4D8siXbXAGiP/IM+ff7Ntx0aeuwKfzxbewBK476ZbbUjxShk53TXPd+2Um9EnF34+4t0i22ahwAAWOnbdPzzZKPxXyHuWXHe/7I1lIMR8f+IOBQRd0XEQETcHVE9996IuG+D5devkNw+/ilc31Rg65SO/57J1rZWj//y0V8c7MpyB6rxdyfnpstTx7NrMhzde9L82KqXrPbd8798Vr/v02yafWjF+C/d0vLzsWBWj+vFugm6yYm5iZYEn8b/YcRgsVH8yfI6YBIRhyNicJNlTD/+1ZFmx/49/jW0YJ2p8mXEY7X2X4i6+HNJ0/XJsadPj58a7Y3y1PHR/K643U8/L77arPwtxd8CafvvbXj/1+JPnxGT3ojZK1cvVNdrZzdexuJvH5eSJscGNnn/9ySvV9M92b73JubmLo9F9CQvpdm+VfvHb702z+fnp/EPH2vc/w/VHs+qV+L+iEhv4qMR8UBEPJi13UMR8XBEHFsj/h+ee+TtZseat/8as/ItlMY/uUb7p295aepW+2880XXh+2+alV9ZV/ufrKaGsz3ref9bbwW3cu0AAADgTlGofgc+KYwspwuFkZHad/gHYm+hPDM798S5mXcvTda+K38wugv5TFf/ivnQsWxuOM+P1+VPZPPGn3f1VfMjpZnyZLuDhw63r0n/T/3e1e7aAdvO77Wgc+n/0Ln0f+hc+j90Lv0fOlRP490f7HQ9gLbY+Od/77bUA9h5xv/QufR/6Fz6P3Skpr+NL2zpJ/93aqK4O6rRMNG3O6qRJ6KwK6rRusQrn9S6xG6pT54orvs/s9hkYk/DQ+1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiNfwIAAP//RwfmeQ==") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x84}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 9.68224814s ago: executing program 1 (id=697): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYRES8, @ANYBLOB="9e57c7d014862498bc78a021cd88f5c0251a3cb6bf493e0db9b7a32ff9e956e454d5deef4ea610dd15f390a1f2bd740b3b2c3d99c589edf6fb9a21a9372446624390f509dbecdf4fca54185cd3e260dc64421dee6072578ea118143eb41f4e779ec2f7f8ab82619e4a77fa6bd64bb734eed1569c15112bd15bc9855d641b20e018", @ANYRES64], 0x26, 0x336, &(0x7f00000001c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) getpeername(0xffffffffffffffff, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000480), 0x0}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c00000002020300000000000000000002000001180002801400018008000100ac1414bb71f83f181654b8471eaba9c5ab702275a861593bdf3d6769"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) 8.407924139s ago: executing program 4 (id=698): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmmsg$unix(r5, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001600)=""/4086, 0x10b8c}], 0x1}}], 0x1, 0x0, 0x0) 6.912394523s ago: executing program 3 (id=699): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x3, 0xa, 0x1, 0xed8, 0x7, 0x8c, 0x40, 0x925e, [{0x101, 0x6, 0x200, 0x3}]}}]}}]}, 0x54}}, 0x20040054) 6.021119366s ago: executing program 1 (id=700): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x6, 0x2d0, &(0x7f00000003c0)="$eJzs3b1uHFUUAOAz653ZBYp1QYWQGAkKqihOS7MWSiSEKyIXQAGGJBLyrpBiyRI/YklFS0NBwRNQ8SA0iBdAokWiI0iRLprZmf1xJhstYRMg39f4+N5z5p67O7bHha/ff3F6eqOMW3c+/yWGwyx64xjH3Sz2oxetL2PN+OsAAP7L7qYUv6e5beqyiBjuri0AYIe2/vn/w85bAgB27Prb77x5eHR09a2yHMa16Vfnx9Vv9tXH+fzhrfgoJnEzLsco7kXUDwp51E8LVXgtpTTrl5X9eGU6Oz+uKqfv/dhc//C3iLr+IEaxXw8tnjbq+jeOrh6Ucyv1s6qPZ5v1x1X9lRjF84vitforHfVxXMSrL6/0fylG8dOH8XFM4kbdxLL+i4OyfD1988dn71btVfXZ7Px4UOctpb3H/NYAAAAAAAAAAAAAAAAAAAAAAPA/dqk5O2cQ9fk91VBz/s7eveqTPMrW/vr5PPP6rL3Q6vlAKaVZiu/a83Uul2WZmsRlfT9e6Ef/yewaAAAAAAAAAAAAAAAAAAAA/l3OPvn09GQyuXn7Hwna0wD6EfHn9Yi/e53xyshLsTl50Kx5Mpn0mnA9pz9YGYm9NieL2NhGtYnuqZStLtF79Nfwmft6boLvP8i3vODw4Tl591oXg/4j7Ku9u05Psu7XcBDtyLC5Sb4tIpY5RTxkifZdLx6Uk2Kb26/onBptvffiuTqYbciJbFNjr/0631czkl3cRVG/qp3leRNEHt1fMsMH3M/dwf3fKzKndQAAAAAAAAAAAAAAAAAAwE5liz/67Zi8s7G0lwY7awsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHquzxf//XwQ/5xGLkXxtqglmTXHH1MWgiNtnT3iLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAX+CgAA//8wK1Yb") sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000340)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 5.961825167s ago: executing program 2 (id=701): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$sock(r0, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="bee5", 0x2}], 0x1}}], 0x1, 0x8000) 5.16067943s ago: executing program 4 (id=702): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") getpid() r0 = syz_open_dev$loop(0x0, 0xff, 0x2) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f00000000c0)=0x77, 0x4) 4.911011954s ago: executing program 3 (id=703): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x802, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x41, 0x0) write$nbd(r6, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f00000008c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00'}, 0x10) unshare(0x62040200) 4.618323448s ago: executing program 2 (id=704): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x9, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xe) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, r2, 0x2, 0x0, @void}, 0x10) socket$inet6(0xa, 0x2, 0x0) 4.018520907s ago: executing program 1 (id=705): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x40) ioctl$TIOCSTI(r0, 0x5412, 0x0) 2.880610395s ago: executing program 4 (id=706): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000640)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="9ffd45110db4455cd0886230f3f00e79f1fa2fd8cc40162f7f1d74f0a7444a3897e858b3fd78699a7b65c97ac13740b4a035c9aded5175cfa1eeb1d25c7f5df9ba0fa77cd271d5bda4b1e5c7a92c1823779cc326f4aa426b8f641293f58e4d4f79e6f2621b669a9678863f37ad0d00b1c9263d0c46f4ca0afa578a8ec048a5e3213470bbbdf0ad8634e86216ef4a7d408f0a5884f21e10ec385582da8d7fe34fe18e7fdf1544a293ec6f2021", @ANYRESOCT=0x0, @ANYRES8, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES64], 0x1, 0xa84, &(0x7f0000001440)="$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") lseek(0xffffffffffffffff, 0x8, 0x1) getdents(0xffffffffffffffff, 0x0, 0x40) 2.851161776s ago: executing program 2 (id=707): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) r4 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) r5 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r5, 0x0, 0x0, 0x40488c1, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) 2.745844857s ago: executing program 1 (id=708): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x6, 0x2d0, &(0x7f00000003c0)="$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") sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000340)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 2.740615597s ago: executing program 3 (id=709): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.642952609s ago: executing program 0 (id=710): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$fuse(0x0, 0x0, 0x1208000, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x7c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x1e, 0x805, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x0, 0x3c}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 1.337724759s ago: executing program 1 (id=711): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00m\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) socket$inet6(0xa, 0x1, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x9, 0x8}, 0xc) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018c900002006000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000202070250000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xf, 0x0, &(0x7f0000000440)="0000000000000060145b4ebeada5df", 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@data_ordered}, {@journal_checksum}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}, {@data_err_abort}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x611}}, {@nobh}]}, 0x8, 0x607, &(0x7f00000001c0)="$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") r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000002000010000000000000000000200200003000000000000001400110076657468305f6d61637674617000000008000200ac1e00011400030077"], 0x4c}}, 0x0) 1.24049954s ago: executing program 0 (id=712): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r6, r3, 0x4, r3}, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "1400", 0x46, 0x2f, 0xff, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xdf}}}}}}}}}, 0x0) 1.144256642s ago: executing program 3 (id=713): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x802, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x41, 0x0) write$nbd(r5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f00000008c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00'}, 0x10) 904.639996ms ago: executing program 4 (id=714): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$sock(r0, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="bee5", 0x2}], 0x1}}], 0x1, 0x8000) 206.411677ms ago: executing program 4 (id=715): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e05003d20"], 0x7) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000340)={r6, 0x0, 0x20}, &(0x7f0000000380)=0xc) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) write(r0, &(0x7f0000000500)="ee40a7761e9508745cec1b9be97aad5d8294e67b2eea7a92394b60c0a8de0b3316420e5a67c226d9addeb539cecafbd707699bf7882f5d95480f74d161cb12172e7951b3095b5912c5e5c97d3f248b37088a70bb5b81cd9399da9098787d745719f4193182806bf456be76f5e5f6e3c03ae0f3419c8cbe00000000000000051d4bbfbdd4cf45ce7500041e1d0919d008b1e7fd732ce672f4dcc700c66451dbf3c3ad34c64188b6cfd06d4d6919de7c3dbd41d9e6c0deffbe205fdc4d640f7383a344a26ca20a9690b7bf29f40d976ef55aea19127fb31a0b01dd207ce4044cad6ff44b1dd25829ab123a8e1d1a4b763240eeee20b143702974ee41d4af0fb992e0b493de7739b05c7d6663580f8891f0d088119bc965777b04ea939c3d04000000000000", 0x124) write$binfmt_script(r7, &(0x7f0000001e80)={'#! ', './file1/../file0', [{0x20, 'TCPOPTSTRIP\x00'}, {0x20, '.(*}{^+!#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c\xf4\xe3\x8d3+\xa6kXk\xe3\xd6\xbd\xcb\xc3\xa4\xb1\x9970\xbe\x8dA\x18^\xfe\xe5w&b\xbci\xb9\x15{\xf6\xc0vD\x1eN\xfd\x96\x11\x86\xc1\x97\x04\xb8\xa5\xb2\xf4\x9e\xb9M\xaf\x89\xe1\x98\xca\xa6\x8dM\xafuR\xe3\xd0\xf6s\x1d\xcd\xc5TN\xf8D\xa2\xce\n3\xd0\xa8e4\xf3\x96o(\xac\x9f\x9c\a\xc5\x04\xd5\x1dH\x9c\xa4o\x98\xd6\x93a\x86\xd1~\t|\x9e\xca`_\x14\xf0\x14\xe9\xe2\xb4\b\x8a\x8b\xb9\xaa\x1f7z0W$@\x9d?\xc7\xc3\xe5\xb5?9\xb9\xdd_t\x05ZX\xfd\x80;;~\x1c\xeaNOf&\xabZ\x1f\x19\xbd\x92\xcc\xda\xacEG\x1ap\x0e\f2m\x19@j\xe6\xb4\x81\xae\x93\x92bib0\xe4\xd7AIw\x93\xd7\x02\xbc0|Dz'}, {0x20, '('}, {0x20, '\xa3l<`P\x95X\x9c\xfc\xf8\x0f\x1cE\x19Y\x8d\x0f\a\xaa\xc7}\x95\xcf?\x8b\xe1\x03\xff\x12\xa8@\xa8O\x14\xa7\xf3\xe2+\xe6\xddY4/\xe6\xcd\xabyf\xf9\xa4\xd2\xf2$\xc1\x88\xf3? \x97\xca\xd9\x83\x06\xa5>\x10\xf3\x02\tg\xfa\x90\xf0\xa8=\\W?\xf2\x87\xfc\x063\xed+h\x05\xc4\xce\x9b)\xbaCM3\x1a\f \xcdkC\x10\xee\xa2\xe9pi|K\x8f\xa8\xad\n\x131\xfe\xe9\x8e-\b`\xa4\x98W9\xb3\xc22\xebA\xf2y\x9d\x90\xcb\x14\x82\xe3\b\xeb\xa5aa5\xc4\xe2\x14\xab\xc7\xb9}\x92\xd0\x12\x84V\x0fRUU\x97M\x1f\n\xa5\x11\xbb\xb7Z~\xf2\xe4\x02\xf2!\xeay\x96\xc1\xdd\xcc\r\xa4\xdb4\x7f\xa4\x11\xb1\x16\x1b\xe9\xef(\xdc^\xbf?sG\x98\xa0w\xd0q\xc5\xd9\xc1$\xd2+\x83iQ2'}]}, 0x1dc) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x4a042, 0x109) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000240)='./bus\x00', 0x50000, 0x0, 0x1, 0x0, &(0x7f00000007c0)) 0s ago: executing program 3 (id=716): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") getpid() r0 = syz_open_dev$loop(0x0, 0xff, 0x2) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f00000000c0)=0x77, 0x4) kernel console output (not intermixed with test programs): batadv_slave_1 [ 79.327904][ T4355] [ 79.327904][ T4355] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.327904][ T4355] [ 79.352501][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.378208][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.419152][ T4355] [ 79.419152][ T4355] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.419152][ T4355] [ 79.435082][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.443424][ T27] audit: type=1800 audit(1750646462.386:2): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8" name="bus" dev="loop1" ino=24 res=0 errno=0 [ 79.474685][ T4355] [ 79.474685][ T4355] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.474685][ T4355] [ 79.478340][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.528923][ T4355] [ 79.528923][ T4355] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.528923][ T4355] [ 79.573699][ T4251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.598807][ T4251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.613408][ T4357] xt_NFQUEUE: number of total queues is 0 [ 79.636063][ T4251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.654072][ T108] [ 79.654072][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.654072][ T108] [ 79.674543][ T4251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.700664][ T4252] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 79.751583][ T4252] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 79.764233][ T4252] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 79.777408][ T4266] [ 79.777408][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.777408][ T4266] [ 79.816122][ T4266] [ 79.816122][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.816122][ T4266] [ 79.821196][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.890030][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.932183][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.000940][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.018206][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.090767][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.194474][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.246935][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.277620][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.317126][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.330812][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.357926][ T4363] loop3: detected capacity change from 0 to 32768 [ 80.382706][ T4363] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.12 (4363) [ 80.416135][ T4363] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 80.428793][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.436747][ T4363] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 80.445521][ T4363] BTRFS info (device loop3): setting nodatacow, compression disabled [ 80.454919][ T4363] BTRFS info (device loop3): max_inline at 0 [ 80.461096][ T4363] BTRFS info (device loop3): turning off barriers [ 80.467702][ T4363] BTRFS info (device loop3): force zlib compression, level 3 [ 80.475376][ T4363] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 80.485099][ T4363] BTRFS info (device loop3): force zstd compression, level 3 [ 80.492728][ T4363] BTRFS info (device loop3): force clearing of disk cache [ 80.499953][ T4363] BTRFS info (device loop3): enabling ssd optimizations [ 80.507085][ T4363] BTRFS info (device loop3): max_inline at 4096 [ 80.513369][ T4363] BTRFS info (device loop3): using free space tree [ 80.695278][ T4365] loop0: detected capacity change from 0 to 4096 [ 80.736088][ T4367] loop1: detected capacity change from 0 to 32768 [ 80.763282][ T4365] ======================================================= [ 80.763282][ T4365] WARNING: The mand mount option has been deprecated and [ 80.763282][ T4365] and is ignored by this kernel. Remove the mand [ 80.763282][ T4365] option from the mount to silence this warning. [ 80.763282][ T4365] ======================================================= [ 80.862809][ T4381] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.882618][ T4367] XFS (loop1): Mounting V5 Filesystem [ 80.943294][ T4391] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 81.046367][ T4367] XFS (loop1): Ending clean mount [ 81.055505][ T4297] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 81.069956][ T4297] XFS (loop1): Unmount and run xfs_repair [ 81.076544][ T4297] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 81.084084][ T4297] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 81.093090][ T4297] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 81.102023][ T4297] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 81.110980][ T4297] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 81.119918][ T4297] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 81.129068][ T4297] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 81.138622][ T4297] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.148683][ T4297] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.161703][ T4363] BTRFS info (device loop3): rebuilding free space tree [ 81.177015][ T4367] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 81.189132][ T4367] XFS (loop1): Failed to initialize disk quotas. [ 81.437986][ T4252] XFS (loop1): Unmounting Filesystem [ 81.710853][ T4266] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.165916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 82.174671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 82.183001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 82.191302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 82.199634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 82.207937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 82.216310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 82.224629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 82.232932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 82.241223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 82.526680][ T4426] lo speed is unknown, defaulting to 1000 [ 82.532718][ T4426] lo speed is unknown, defaulting to 1000 [ 82.543859][ T4426] lo speed is unknown, defaulting to 1000 [ 82.566297][ T4426] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 82.598127][ T4426] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 82.925903][ T4426] lo speed is unknown, defaulting to 1000 [ 82.937723][ T4426] lo speed is unknown, defaulting to 1000 [ 82.947948][ T4426] lo speed is unknown, defaulting to 1000 [ 83.759798][ T4421] sched: RT throttling activated [ 83.760123][ T4426] lo speed is unknown, defaulting to 1000 [ 83.771823][ T4426] lo speed is unknown, defaulting to 1000 [ 84.378189][ T4438] loop4: detected capacity change from 0 to 4096 [ 84.394240][ T4441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 84.472939][ T4443] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.149230][ T4457] loop2: detected capacity change from 0 to 128 [ 85.212148][ T4457] EXT4-fs (loop2): Test dummy encryption mode enabled [ 85.313605][ T4461] loop6: detected capacity change from 0 to 7 [ 85.335165][ T4457] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 85.361503][ T4254] Dev loop6: unable to read RDB block 7 [ 85.375328][ T4449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 85.385260][ T4254] loop6: unable to read partition table [ 85.403668][ T4459] loop3: detected capacity change from 0 to 32768 [ 85.406958][ T4457] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.412543][ T4254] loop6: partition table beyond EOD, truncated [ 85.434861][ T4461] Dev loop6: unable to read RDB block 7 [ 85.495522][ T4461] loop6: unable to read partition table [ 85.501525][ T4459] XFS (loop3): Mounting V5 Filesystem [ 85.513539][ T4461] loop6: partition table beyond EOD, truncated [ 85.551296][ T4461] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 85.671258][ T4459] XFS (loop3): Ending clean mount [ 85.678252][ T4432] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 85.692275][ T4476] loop0: detected capacity change from 0 to 512 [ 85.721457][ T4476] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 85.725285][ T4432] XFS (loop3): Unmount and run xfs_repair [ 85.747227][ T4476] UDF-fs: Scanning with blocksize 512 failed [ 85.779782][ T4432] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 85.791061][ T4476] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 85.802894][ T4432] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 85.813642][ T4432] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 85.825328][ T4432] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 85.837143][ T4476] UDF-fs: Scanning with blocksize 1024 failed [ 85.864839][ T4476] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 85.904148][ T4432] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 85.933169][ T4476] UDF-fs: Scanning with blocksize 2048 failed [ 85.945398][ T4476] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 85.945634][ T4432] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 85.972979][ T4476] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.036420][ T4432] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 86.068560][ T4432] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 86.081853][ T4476] overlayfs: upper fs needs to support d_type. [ 86.103174][ T4432] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 86.143931][ T4476] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 86.146240][ T4459] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 86.163502][ T4459] XFS (loop3): Failed to initialize disk quotas. [ 86.194564][ T4476] overlayfs: failed to set xattr on upper [ 86.232428][ T4476] overlayfs: ...falling back to index=off,metacopy=off. [ 86.274213][ T4476] overlayfs: conflicting lowerdir path [ 86.374591][ T4266] XFS (loop3): Unmounting Filesystem [ 86.503560][ T4457] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 86.518203][ T7] cfg80211: failed to load regulatory.db [ 86.557596][ T4486] siw: device registration error -23 [ 86.771222][ T4491] loop1: detected capacity change from 0 to 32768 [ 86.778747][ T4491] XFS (loop1): invalid logbufs value: 1 [not 2-8] [ 87.045473][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 87.175835][ T4270] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 87.545974][ T4510] loop4: detected capacity change from 0 to 4096 [ 87.651359][ T4516] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.708340][ T27] audit: type=1804 audit(1750646470.666:3): pid=4510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.51" name="/newroot/11/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 88.254614][ T4537] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.283350][ T4532] loop2: detected capacity change from 0 to 2048 [ 88.401684][ T4270] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 88.474128][ T4534] loop1: detected capacity change from 0 to 32768 [ 88.521412][ T4532] loop2: p1[EZD] p4 [ 88.540553][ T4532] loop2: p4 size 8388608 extends beyond EOD, truncated [ 88.678273][ T4545] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 88.687167][ T4257] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.706821][ T4254] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.727048][ T4545] loop2: detected capacity change from 0 to 1024 [ 88.736885][ T4257] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.746244][ T4257] Buffer I/O error on dev loop2p4, logical block 1, async page read [ 88.756843][ T4254] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.766014][ T4254] Buffer I/O error on dev loop2p1, logical block 8, async page read [ 88.818712][ T4545] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 88.937015][ T4545] hfsplus: failed to load root directory [ 89.009910][ T4254] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.012728][ T4553] loop3: detected capacity change from 0 to 4096 [ 89.104693][ T4558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70'. [ 89.206813][ T4560] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.263022][ T27] audit: type=1804 audit(1750646472.216:4): pid=4553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.67" name="/newroot/10/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 89.450156][ T4254] udevd[4254]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 89.463760][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 89.683767][ T4575] loop0: detected capacity change from 0 to 1024 [ 89.693426][ T4576] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 89.694027][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 89.713361][ T4570] udevd[4570]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 89.743906][ T4270] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 89.810430][ T4582] netem: change failed [ 89.844177][ T4581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.79'. [ 89.899843][ T4581] netlink: 'syz.2.79': attribute type 7 has an invalid length. [ 89.947062][ T4581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 89.985939][ T4581] device bond0 entered promiscuous mode [ 90.002130][ T4581] device bond_slave_0 entered promiscuous mode [ 90.023274][ T4581] device bond_slave_1 entered promiscuous mode [ 90.054326][ T4581] device bridge0 entered promiscuous mode [ 90.076009][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 90.104103][ T4583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 90.128323][ T4583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.135809][ T4583] IPv6: NLM_F_CREATE should be set when creating new route [ 90.241038][ T4592] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 90.245563][ T4596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 90.247900][ T4592] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.285743][ T4592] vhci_hcd vhci_hcd.0: Device attached [ 90.547018][ T4423] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 90.569140][ T4602] loop2: detected capacity change from 0 to 32768 [ 90.577359][ T4602] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.85 (4602) [ 90.661700][ T4602] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 90.672101][ T4602] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 90.680887][ T4602] BTRFS info (device loop2): setting nodatacow, compression disabled [ 90.689051][ T4602] BTRFS info (device loop2): max_inline at 0 [ 90.695064][ T4602] BTRFS info (device loop2): using free space tree [ 90.776763][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.971160][ T7] usb 1-1: config 0 has no interfaces? [ 90.980905][ T7] usb 1-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 90.991487][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.004060][ T7] usb 1-1: config 0 descriptor?? [ 91.098349][ T4602] BTRFS info (device loop2): enabling ssd optimizations [ 91.233316][ T4593] usb 33-1: recv xbuf, 0 [ 91.237299][ T4432] usb 1-1: USB disconnect, device number 2 [ 91.243970][ T4303] vhci_hcd: stop threads [ 91.278854][ T4303] vhci_hcd: release socket [ 91.304523][ T4303] vhci_hcd: disconnect device [ 91.316700][ T4423] vhci_hcd: vhci_device speed not set [ 91.322153][ T4633] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 91.368104][ T4270] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 91.477545][ T4253] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 91.738371][ T4570] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4570) [ 91.870660][ T4640] loop3: detected capacity change from 0 to 32768 [ 91.892400][ T4640] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.96 (4640) [ 91.909538][ T4640] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 91.919745][ T4640] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 91.929045][ T4640] BTRFS info (device loop3): force zlib compression, level 3 [ 91.936452][ T4640] BTRFS info (device loop3): force clearing of disk cache [ 91.943729][ T4640] BTRFS info (device loop3): setting nodatasum [ 91.949949][ T4640] BTRFS info (device loop3): allowing degraded mounts [ 91.956798][ T4640] BTRFS info (device loop3): enabling disk space caching [ 91.963860][ T4640] BTRFS info (device loop3): disk space caching is enabled [ 92.989913][ T4640] BTRFS info (device loop3): rebuilding free space tree [ 92.991091][ T4676] netlink: 60 bytes leftover after parsing attributes in process `syz.1.98'. [ 93.010175][ T4640] BTRFS info (device loop3): disabling free space tree [ 93.017812][ T4640] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 93.027894][ T4640] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 93.027955][ T4676] netlink: 60 bytes leftover after parsing attributes in process `syz.1.98'. [ 93.126906][ T4671] netlink: 60 bytes leftover after parsing attributes in process `syz.1.98'. [ 93.160849][ T4266] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 93.619915][ T4270] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 93.685596][ T4689] netlink: 72 bytes leftover after parsing attributes in process `syz.1.104'. [ 94.036417][ T4693] loop0: detected capacity change from 0 to 32768 [ 94.141161][ T4693] XFS (loop0): Mounting V5 Filesystem [ 94.220221][ T4693] XFS (loop0): Ending clean mount [ 94.231416][ T4647] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 94.269461][ T4647] XFS (loop0): Unmount and run xfs_repair [ 94.295670][ T4647] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 94.336197][ T4647] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 94.368573][ T4647] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 94.392590][ T4647] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 94.426873][ T4647] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 94.471699][ T4647] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 94.506882][ T4647] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 94.536342][ T4647] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 94.565545][ T4647] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 94.587997][ T4693] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 94.599498][ T4693] XFS (loop0): Failed to initialize disk quotas. [ 94.764466][ T4263] XFS (loop0): Unmounting Filesystem [ 94.964277][ T4688] loop2: detected capacity change from 0 to 40427 [ 94.995198][ T4717] Zero length message leads to an empty skb [ 95.036801][ T4688] F2FS-fs (loop2): build fault injection attr: rate: 693, type: 0x3ffff [ 95.066027][ T4688] F2FS-fs (loop2): invalid crc value [ 95.319199][ T4688] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.367902][ T4722] loop4: detected capacity change from 0 to 32768 [ 95.375253][ T4722] XFS: attr2 mount option is deprecated. [ 95.447817][ T4688] F2FS-fs (loop2): Start checkpoint disabled! [ 95.533806][ T4688] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 95.568669][ T4722] XFS (loop4): Mounting V5 Filesystem [ 95.623287][ T4688] syz.2.103: attempt to access beyond end of device [ 95.623287][ T4688] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 95.674818][ T4722] XFS (loop4): Ending clean mount [ 95.686372][ T4722] XFS (loop4): Quotacheck needed: Please wait. [ 95.820530][ T4739] device syzkaller0 entered promiscuous mode [ 95.822522][ T4722] XFS (loop4): Quotacheck: Done. [ 95.984630][ T4251] XFS (loop4): Unmounting Filesystem [ 96.171751][ T4748] loop3: detected capacity change from 0 to 32768 [ 96.360005][ T56] F2FS-fs (loop2) : inject checkpoint error in f2fs_balance_fs of __write_node_page+0xb93/0x1d10 [ 96.403961][ T4748] XFS (loop3): Mounting V5 Filesystem [ 97.191854][ T56] kworker/u4:4: attempt to access beyond end of device [ 97.191854][ T56] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 97.427956][ T4748] XFS (loop3): Ending clean mount [ 97.433911][ T4423] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 97.496372][ T4423] XFS (loop3): Unmount and run xfs_repair [ 97.536675][ T4423] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 97.612009][ T4423] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 97.638545][ T4765] loop0: detected capacity change from 0 to 512 [ 97.654488][ T4423] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 97.679132][ T4423] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 97.692253][ T4423] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 97.703208][ T4423] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 97.712447][ T4423] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 97.721870][ T4423] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 97.731809][ T4423] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 97.741034][ T4748] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 97.753955][ T4748] XFS (loop3): Failed to initialize disk quotas. [ 97.774350][ T4765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 97.783551][ T4765] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.814375][ T4765] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 97.825367][ T4765] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 97.836037][ T4765] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.119: Failed to acquire dquot type 0 [ 97.988508][ T4266] XFS (loop3): Unmounting Filesystem [ 98.013836][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 98.577574][ T4774] loop4: detected capacity change from 0 to 32768 [ 98.607504][ T4774] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.118 (4774) [ 98.624800][ T4774] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.635073][ T4774] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 98.643782][ T4774] BTRFS info (device loop4): using free space tree [ 98.763365][ T4774] BTRFS info (device loop4): enabling ssd optimizations [ 98.907057][ T4251] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.927743][ T4791] loop3: detected capacity change from 0 to 4096 [ 99.413824][ T4791] ntfs3: loop3: ino=24, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ntfs_rename [ 99.673425][ T4809] loop2: detected capacity change from 0 to 512 [ 99.839267][ T4809] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 99.840552][ T4570] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4570) [ 99.856764][ T4809] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.136980][ T4815] loop3: detected capacity change from 0 to 32768 [ 100.153849][ T4815] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.124 (4815) [ 100.176766][ T4815] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 100.187881][ T4815] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 100.198129][ T4815] BTRFS info (device loop3): enabling disk space caching [ 100.205209][ T4815] BTRFS info (device loop3): doing ref verification [ 100.212105][ T4815] BTRFS info (device loop3): use zlib compression, level 3 [ 100.219393][ T4815] BTRFS info (device loop3): force clearing of disk cache [ 100.226637][ T4815] BTRFS info (device loop3): doing ref verification [ 100.233265][ T4815] BTRFS info (device loop3): disk space caching is enabled [ 100.353898][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 100.563201][ T4815] BTRFS info (device loop3): rebuilding free space tree [ 100.582911][ T4815] BTRFS info (device loop3): disabling free space tree [ 100.590029][ T4815] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 100.602271][ T4815] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 100.725094][ T4844] loop2: detected capacity change from 0 to 4096 [ 100.756205][ T4844] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 100.909049][ T4266] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 100.934502][ T4844] ntfs3: loop2: failed to convert "c46c" to maccyrillic [ 103.038605][ T4860] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.221575][ T4879] loop1: detected capacity change from 0 to 2048 [ 103.277995][ T4881] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.045904][ T4891] mmap: syz.1.144 (4891) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.222308][ T4893] netem: change failed [ 104.345602][ T4893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 104.664339][ T4901] loop3: detected capacity change from 0 to 32768 [ 104.673500][ T4901] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 105.492230][ T27] audit: type=1326 audit(1750646488.446:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568398e929 code=0x7ffc0000 [ 105.736660][ T27] audit: type=1326 audit(1750646488.496:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568398e929 code=0x7ffc0000 [ 106.545155][ T4262] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 106.626704][ T27] audit: type=1326 audit(1750646488.496:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f568398e929 code=0x7ffc0000 [ 106.693928][ T4932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 106.741060][ T27] audit: type=1326 audit(1750646488.496:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568398e929 code=0x7ffc0000 [ 106.830265][ T27] audit: type=1326 audit(1750646488.496:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568398e929 code=0x7ffc0000 [ 106.923754][ T27] audit: type=1326 audit(1750646488.506:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f568398e929 code=0x7ffc0000 [ 106.981282][ T4936] syz.2.157 (4936) used greatest stack depth: 18176 bytes left [ 107.023066][ T27] audit: type=1326 audit(1750646488.506:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f568398e929 code=0x7ffc0000 [ 107.238404][ T4945] loop3: detected capacity change from 0 to 256 [ 107.620094][ T4955] loop3: detected capacity change from 0 to 64 [ 107.651682][ T4955] hfs: unable to locate alternate MDB [ 107.657501][ T4955] hfs: continuing without an alternate MDB [ 107.675665][ T4955] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 107.994519][ T4930] loop4: detected capacity change from 0 to 32768 [ 108.218712][ T4961] loop1: detected capacity change from 0 to 32768 [ 108.231945][ T4961] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.169 (4961) [ 109.080851][ T4961] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 109.091734][ T4961] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 109.101725][ T4961] BTRFS info (device loop1): force zlib compression, level 3 [ 109.109193][ T4961] BTRFS info (device loop1): force clearing of disk cache [ 109.116339][ T4961] BTRFS info (device loop1): setting nodatasum [ 109.122577][ T4961] BTRFS info (device loop1): allowing degraded mounts [ 109.129445][ T4961] BTRFS info (device loop1): enabling disk space caching [ 109.136500][ T4961] BTRFS info (device loop1): disk space caching is enabled [ 109.179399][ T4962] loop0: detected capacity change from 0 to 32768 [ 109.203395][ T4973] loop3: detected capacity change from 0 to 64 [ 109.203857][ T4930] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.210053][ T4962] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.168 (4962) [ 109.296768][ T4930] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 109.306064][ T4930] BTRFS info (device loop4): using free space tree [ 109.391209][ T4973] netlink: 64 bytes leftover after parsing attributes in process `syz.3.172'. [ 109.595990][ T4999] loop2: detected capacity change from 0 to 2048 [ 109.659212][ T4999] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 109.751160][ T5019] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.811969][ T4961] BTRFS info (device loop1): rebuilding free space tree [ 109.825444][ T4961] BTRFS info (device loop1): disabling free space tree [ 109.832589][ T4961] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 109.842348][ T4961] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 109.919205][ T4930] BTRFS error (device loop4): open_ctree failed: -12 [ 109.972519][ T4262] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4262) [ 110.001670][ T4961] BTRFS info (device loop1): balance: start -susage=34359738368,drange=7..526336,limit=0..6 [ 110.013540][ T4961] BTRFS info (device loop1): balance: ended with status: 0 [ 110.118581][ T4570] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4570) [ 110.273224][ T4252] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 111.796280][ T4270] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 112.652398][ T5056] loop3: detected capacity change from 0 to 4096 [ 112.813482][ T5066] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.904643][ T5068] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.983335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.025000][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.032191][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.040703][ T4266] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 113.069010][ T4266] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12) [ 113.125517][ T4266] Remounting filesystem read-only [ 113.146180][ T4266] NILFS (loop3): error -5 truncating bmap (ino=12) [ 113.171875][ T4266] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 113.603646][ T5080] loop3: detected capacity change from 0 to 32768 [ 113.626034][ T5080] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 114.023096][ T5072] loop1: detected capacity change from 0 to 32768 [ 114.076876][ T5072] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.119849][ T5072] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 114.178848][ T5072] BTRFS info (device loop1): using free space tree [ 114.179058][ T4570] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 114.265942][ T4270] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 114.505812][ T5072] BTRFS info (device loop1): enabling ssd optimizations [ 114.939051][ T4252] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.952185][ T5122] siw: device registration error -23 [ 115.117444][ T5127] loop2: detected capacity change from 0 to 4096 [ 115.243882][ T5128] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.316968][ T5127] loop2: detected capacity change from 4096 to 64 [ 115.913604][ T5139] netlink: 64 bytes leftover after parsing attributes in process `syz.0.204'. [ 116.089965][ T4253] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 116.223295][ T4253] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12) [ 116.283924][ T4253] syz-executor: attempt to access beyond end of device [ 116.283924][ T4253] loop2: rw=395265, sector=4088, nr_sectors = 8 limit=64 [ 116.298230][ T4253] Buffer I/O error on dev loop2, logical block 511, lost sync page write [ 116.306864][ T4253] NILFS (loop2): unable to write superblock: err=-5 [ 116.320675][ T4253] Remounting filesystem read-only [ 116.382860][ T4253] NILFS (loop2): error -5 truncating bmap (ino=12) [ 116.512998][ T4253] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 117.134572][ T5157] loop2: detected capacity change from 0 to 64 [ 117.196873][ T4270] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 118.049154][ T5172] loop2: detected capacity change from 0 to 512 [ 118.173626][ T5172] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 118.241002][ T5168] siw: device registration error -23 [ 118.413112][ T5172] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 118.525166][ T5172] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 118.632485][ T5180] loop3: detected capacity change from 0 to 4096 [ 118.642396][ T5172] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 118.676659][ T5172] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 118.758414][ T5172] EXT4-fs (loop2): orphan cleanup on readonly fs [ 118.784482][ T5172] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.213: bg 0: block 34: padding at end of block bitmap is not set [ 118.807839][ T5185] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.897283][ T5180] loop3: detected capacity change from 4096 to 64 [ 118.897440][ T5172] Quota error (device loop2): write_blk: dquota write failed [ 118.931853][ T5172] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 118.953108][ T5172] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.213: Failed to acquire dquot type 1 [ 119.015745][ T5172] EXT4-fs (loop2): 1 truncate cleaned up [ 119.045605][ T5172] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.082581][ T4266] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 119.129246][ T4266] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12) [ 119.157460][ T4266] syz-executor: attempt to access beyond end of device [ 119.157460][ T4266] loop3: rw=395265, sector=4088, nr_sectors = 8 limit=64 [ 119.188881][ T4266] Buffer I/O error on dev loop3, logical block 511, lost sync page write [ 119.217986][ T4266] NILFS (loop3): unable to write superblock: err=-5 [ 119.247854][ T4266] Remounting filesystem read-only [ 119.253116][ T4266] NILFS (loop3): error -5 truncating bmap (ino=12) [ 119.262898][ T5192] loop1: detected capacity change from 0 to 128 [ 119.291108][ T4266] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 119.307017][ T5172] device vlan2 entered promiscuous mode [ 119.353999][ T5192] EXT4-fs (loop1): Test dummy encryption mode enabled [ 119.420841][ T5192] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.454161][ T5192] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.563626][ T5198] loop6: detected capacity change from 0 to 7 [ 119.611230][ T4570] Dev loop6: unable to read RDB block 7 [ 119.617989][ T4570] loop6: unable to read partition table [ 119.631862][ T4570] loop6: partition table beyond EOD, truncated [ 119.673068][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 119.688282][ T5198] Dev loop6: unable to read RDB block 7 [ 119.706832][ T5198] loop6: unable to read partition table [ 119.725334][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 119.777136][ T5198] loop6: partition table beyond EOD, truncated [ 119.816856][ T5198] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 120.347394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 120.553583][ T5211] loop0: detected capacity change from 0 to 512 [ 120.648895][ T5211] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 120.676704][ T5211] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.921889][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 121.191482][ T5231] 9pnet_fd: Insufficient options for proto=fd [ 121.551347][ T5235] loop0: detected capacity change from 0 to 4096 [ 121.654744][ T5240] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.816235][ T5248] netlink: 64 bytes leftover after parsing attributes in process `syz.2.232'. [ 123.054615][ T5272] loop3: detected capacity change from 0 to 128 [ 123.130961][ T5272] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.301778][ T5281] overlayfs: overlapping lowerdir path [ 123.384635][ T5272] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.400727][ T5278] overlayfs: failed to resolve './file1': -2 [ 124.559887][ T5297] loop1: detected capacity change from 0 to 512 [ 124.704044][ T5297] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 124.713248][ T5297] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.744371][ T5304] netem: change failed [ 124.797950][ T5290] loop0: detected capacity change from 0 to 4096 [ 124.902843][ T5280] loop2: detected capacity change from 0 to 40427 [ 124.934752][ T5280] F2FS-fs (loop2): build fault injection attr: rate: 693, type: 0x3ffff [ 124.953402][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 125.058822][ T5280] F2FS-fs (loop2): invalid crc value [ 125.175022][ T5280] F2FS-fs (loop2): Found nat_bits in checkpoint [ 125.180227][ T5308] siw: device registration error -23 [ 125.190382][ T4263] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 125.207789][ T4263] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 125.366339][ T5319] 9pnet_fd: Insufficient options for proto=fd [ 125.373403][ T5280] F2FS-fs (loop2): Start checkpoint disabled! [ 125.412964][ T5280] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 125.471908][ T5280] syz.2.245: attempt to access beyond end of device [ 125.471908][ T5280] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 125.881654][ T5332] overlayfs: failed to resolve './file1': -2 [ 126.680395][ T4303] kworker/u4:5: attempt to access beyond end of device [ 126.680395][ T4303] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 127.068948][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'. [ 127.173824][ T5326] loop0: detected capacity change from 0 to 32768 [ 127.189421][ T5345] loop3: detected capacity change from 0 to 32768 [ 127.199736][ T5326] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.255 (5326) [ 127.226803][ T5326] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.246776][ T5326] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 127.297856][ T5326] BTRFS info (device loop0): using free space tree [ 127.355309][ T5345] XFS (loop3): Mounting V5 Filesystem [ 127.478888][ T5345] XFS (loop3): Ending clean mount [ 127.484761][ T22] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 127.499312][ T5376] loop4: detected capacity change from 0 to 128 [ 127.524037][ T5376] EXT4-fs (loop4): Test dummy encryption mode enabled [ 127.602211][ T22] XFS (loop3): Unmount and run xfs_repair [ 127.636326][ T5376] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 127.661325][ T22] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 127.673186][ T5355] loop1: detected capacity change from 0 to 4096 [ 127.676748][ T5326] BTRFS info (device loop0): enabling ssd optimizations [ 127.688490][ T5355] ntfs3: Unknown parameter 'windows_names' [ 127.708653][ T5376] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.736694][ T22] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 127.792877][ T22] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 127.836633][ T22] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 127.883538][ T22] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 127.915816][ T22] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 127.952923][ T22] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 127.990833][ T22] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 128.023576][ T22] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 128.054421][ T5345] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 128.066040][ T5345] XFS (loop3): Failed to initialize disk quotas. [ 128.081157][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 128.252114][ T4266] XFS (loop3): Unmounting Filesystem [ 128.263164][ T4263] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.330177][ T5398] netem: change failed [ 128.472950][ T5399] siw: device registration error -23 [ 129.999526][ T5416] loop4: detected capacity change from 0 to 64 [ 130.084627][ T5416] netlink: 64 bytes leftover after parsing attributes in process `syz.4.273'. [ 130.085189][ T5418] loop1: detected capacity change from 0 to 128 [ 130.153331][ T5418] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.172273][ T5418] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.326633][ T5420] loop0: detected capacity change from 0 to 32768 [ 130.356899][ T5420] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.276 (5420) [ 130.371522][ T5420] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.381764][ T5420] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 130.390425][ T5420] BTRFS info (device loop0): enabling auto defrag [ 130.396902][ T5420] BTRFS info (device loop0): doing ref verification [ 130.403499][ T5420] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 130.414122][ T5420] BTRFS info (device loop0): trying to use backup root at mount time [ 130.422255][ T5420] BTRFS info (device loop0): max_inline at 4096 [ 130.428559][ T5420] BTRFS info (device loop0): enabling ssd optimizations [ 130.435517][ T5420] BTRFS info (device loop0): using spread ssd allocation scheme [ 130.443224][ T5420] BTRFS info (device loop0): using free space tree [ 130.672453][ T5434] loop4: detected capacity change from 0 to 128 [ 130.846483][ T5433] loop1: detected capacity change from 0 to 32768 [ 130.853545][ T5433] XFS: ikeep mount option is deprecated. [ 130.901109][ T5411] loop3: detected capacity change from 0 to 40427 [ 130.954837][ T5434] EXT4-fs (loop4): Test dummy encryption mode enabled [ 130.979312][ T5411] F2FS-fs (loop3): build fault injection attr: rate: 693, type: 0x3ffff [ 131.177393][ T5411] F2FS-fs (loop3): invalid crc value [ 131.250365][ T5450] loop2: detected capacity change from 0 to 32768 [ 131.262816][ T5434] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 131.274124][ T5433] XFS (loop1): Mounting V5 Filesystem [ 131.291195][ T5434] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.304951][ T5411] F2FS-fs (loop3): Found nat_bits in checkpoint [ 131.387733][ T5433] XFS (loop1): Ending clean mount [ 131.394662][ T5433] XFS (loop1): Quotacheck needed: Please wait. [ 131.456885][ T5433] XFS (loop1): Quotacheck: Done. [ 131.505549][ T5461] BTRFS info (device loop0): space_info DATA+METADATA has 57344 free, is full [ 131.515082][ T5461] BTRFS info (device loop0): space_info total=11534336, used=53248, pinned=0, reserved=24576, may_use=11399168, readonly=0 zone_unusable=0 [ 131.529608][ T5461] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1437696 [ 131.538922][ T5461] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 131.546782][ T5461] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 131.554452][ T5461] BTRFS info (device loop0): delayed_block_rsv: size 98304 reserved 98304 [ 131.563041][ T5461] BTRFS info (device loop0): delayed_refs_rsv: size 1835008 reserved 876544 [ 131.625356][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 131.642503][ T5450] XFS (loop2): Mounting V5 Filesystem [ 131.653553][ T5411] F2FS-fs (loop3): Start checkpoint disabled! [ 131.746159][ T5411] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 131.846003][ T5450] XFS (loop2): Ending clean mount [ 131.857141][ T22] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 131.886406][ T22] XFS (loop2): Unmount and run xfs_repair [ 131.905095][ T5411] syz.3.269: attempt to access beyond end of device [ 131.905095][ T5411] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 131.935967][ T22] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 131.964134][ T22] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 131.994643][ T22] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 132.025527][ T22] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 132.067151][ T22] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 132.092976][ T22] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 132.115038][ T22] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 132.175324][ T22] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 132.201447][ T22] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 132.256694][ T5450] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 132.268299][ T5450] XFS (loop2): Failed to initialize disk quotas. [ 132.343201][ T4252] XFS (loop1): Unmounting Filesystem [ 132.468862][ T4253] XFS (loop2): Unmounting Filesystem [ 132.569397][ T5038] kworker/u4:11: attempt to access beyond end of device [ 132.569397][ T5038] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 132.596330][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.635399][ T5483] loop4: detected capacity change from 0 to 128 [ 133.642773][ T5483] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.656909][ T5483] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.850467][ T4263] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 134.387396][ T5496] 9pnet_fd: Insufficient options for proto=fd [ 134.652943][ T5486] loop1: detected capacity change from 0 to 32768 [ 134.753880][ T5486] XFS (loop1): Mounting V5 Filesystem [ 134.954643][ T5486] XFS (loop1): Ending clean mount [ 134.971947][ T5486] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 135.009691][ T5486] XFS (loop1): Unmount and run xfs_repair [ 135.016027][ T5486] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 135.044074][ T5486] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 135.103161][ T5486] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 135.177129][ T5486] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 135.217692][ T5486] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 135.242335][ T5486] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 135.282132][ T5486] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 135.316022][ T5486] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 135.433845][ T5486] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 135.482782][ T5486] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 135.506792][ T5486] XFS (loop1): Failed to initialize disk quotas. [ 135.686357][ T4252] XFS (loop1): Unmounting Filesystem [ 135.880238][ T5520] loop2: detected capacity change from 0 to 32768 [ 136.007753][ T5499] loop3: detected capacity change from 0 to 32768 [ 136.034092][ T5499] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.291 (5499) [ 136.083626][ T5520] XFS (loop2): Mounting V5 Filesystem [ 136.128242][ T5499] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 136.146906][ T5499] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 136.242138][ T5499] BTRFS info (device loop3): force zlib compression, level 3 [ 136.275071][ T5520] XFS (loop2): Ending clean mount [ 136.281122][ T4642] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 136.319958][ T5499] BTRFS info (device loop3): force clearing of disk cache [ 136.336380][ T5499] BTRFS info (device loop3): setting nodatasum [ 136.342311][ T4642] XFS (loop2): Unmount and run xfs_repair [ 136.343609][ T5499] BTRFS info (device loop3): allowing degraded mounts [ 136.365054][ T5499] BTRFS info (device loop3): enabling disk space caching [ 136.381221][ T5499] BTRFS info (device loop3): disk space caching is enabled [ 136.402494][ T4642] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 136.445364][ T4642] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 136.498607][ T4642] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 136.519573][ T4642] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 136.532433][ T4642] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 136.543785][ T4642] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 136.556220][ T4642] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 136.594508][ T4642] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 136.622854][ T5499] BTRFS info (device loop3): rebuilding free space tree [ 136.637016][ T4642] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 136.655263][ T5520] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 136.667328][ T5520] XFS (loop2): Failed to initialize disk quotas. [ 136.697191][ T5499] BTRFS info (device loop3): disabling free space tree [ 136.706964][ T5499] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 136.732374][ T5499] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 136.790841][ T4253] XFS (loop2): Unmounting Filesystem [ 136.804319][ T5516] loop0: detected capacity change from 0 to 40427 [ 136.834793][ T5516] F2FS-fs (loop0): build fault injection attr: rate: 693, type: 0x3ffff [ 136.882381][ T5499] BTRFS info (device loop3): balance: start -susage=34359738368,drange=7..526336,limit=0..6 [ 136.893968][ T5516] F2FS-fs (loop0): invalid crc value [ 136.914382][ T5499] BTRFS info (device loop3): balance: ended with status: 0 [ 137.802817][ T5516] F2FS-fs (loop0): Found nat_bits in checkpoint [ 137.883677][ T4266] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 137.942735][ T5516] F2FS-fs (loop0): Start checkpoint disabled! [ 138.022176][ T5516] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 138.058530][ T5516] syz.0.294: attempt to access beyond end of device [ 138.058530][ T5516] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 138.318068][ T4303] kworker/u4:5: attempt to access beyond end of device [ 138.318068][ T4303] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 138.490372][ T5568] loop2: detected capacity change from 0 to 128 [ 138.527385][ T5568] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.770004][ T5568] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.905370][ T5571] loop4: detected capacity change from 0 to 32768 [ 140.977466][ T5571] XFS (loop4): Mounting V5 Filesystem [ 141.029252][ T5577] loop0: detected capacity change from 0 to 32768 [ 141.086355][ T5577] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.304 (5577) [ 141.160056][ T5577] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.172850][ T5577] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 141.181579][ T5577] BTRFS info (device loop0): using free space tree [ 141.319760][ T5577] BTRFS info (device loop0): enabling ssd optimizations [ 141.339666][ T5571] XFS (loop4): Ending clean mount [ 141.347854][ T4432] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 141.409452][ T4432] XFS (loop4): Unmount and run xfs_repair [ 141.440974][ T4432] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 141.473486][ T4432] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 141.484919][ T4263] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.505713][ T4432] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 141.539030][ T4432] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 141.575455][ T4432] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 141.608389][ T4432] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 141.633528][ T4432] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 141.666011][ T4432] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 141.705189][ T4432] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 141.764800][ T5571] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 141.794725][ T5571] XFS (loop4): Failed to initialize disk quotas. [ 141.910805][ T4251] XFS (loop4): Unmounting Filesystem [ 141.945276][ T5626] netem: change failed [ 142.034876][ T5629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'. [ 142.365874][ T5633] overlayfs: overlapping lowerdir path [ 143.644352][ T5625] loop3: detected capacity change from 0 to 40427 [ 143.701184][ T5625] F2FS-fs (loop3): build fault injection attr: rate: 693, type: 0x3ffff [ 143.740948][ T5625] F2FS-fs (loop3): invalid crc value [ 143.780499][ T5625] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.832138][ T5652] 9pnet_fd: Insufficient options for proto=fd [ 143.943857][ T5625] F2FS-fs (loop3): Start checkpoint disabled! [ 143.990514][ T5625] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 144.043269][ T5625] syz.3.315: attempt to access beyond end of device [ 144.043269][ T5625] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 144.404401][ T5659] loop0: detected capacity change from 0 to 128 [ 144.427749][ T5659] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.482164][ T5659] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.498055][ T5639] loop4: detected capacity change from 0 to 32768 [ 144.540390][ T5639] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 144.669424][ T4910] kworker/u4:10: attempt to access beyond end of device [ 144.669424][ T4910] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 144.690069][ T5663] loop1: detected capacity change from 0 to 64 [ 144.740767][ T5663] netlink: 64 bytes leftover after parsing attributes in process `syz.1.329'. [ 145.177236][ T4262] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 145.263181][ T5675] loop1: detected capacity change from 0 to 512 [ 145.495085][ T5675] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 145.773601][ T5675] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.929252][ T5682] netem: change failed [ 146.150592][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 146.279018][ T4262] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 146.473914][ T5691] 9pnet_fd: Insufficient options for proto=fd [ 147.124563][ T5693] loop2: detected capacity change from 0 to 128 [ 147.131940][ T5693] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.146286][ T5693] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.193470][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 147.423402][ T5701] loop4: detected capacity change from 0 to 512 [ 147.459935][ T5701] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 147.485887][ T5701] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.560619][ T5701] EXT4-fs error (device loop4): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.4.336: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 147.672093][ T5701] EXT4-fs (loop4): Remounting filesystem read-only [ 147.689234][ T5701] EXT4-fs error (device loop4): ext4_get_first_dir_block:3594: inode #12: comm syz.4.336: directory missing '.' [ 147.729885][ T5701] EXT4-fs (loop4): Remounting filesystem read-only [ 148.103799][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 148.434874][ T5695] loop0: detected capacity change from 0 to 40427 [ 148.489859][ T5695] F2FS-fs (loop0): build fault injection attr: rate: 693, type: 0x3ffff [ 148.522242][ T5695] F2FS-fs (loop0): invalid crc value [ 148.562395][ T5695] F2FS-fs (loop0): Found nat_bits in checkpoint [ 150.816939][ T5695] F2FS-fs (loop0): Start checkpoint disabled! [ 150.893720][ T5725] loop2: detected capacity change from 0 to 64 [ 150.959486][ T5725] netlink: 64 bytes leftover after parsing attributes in process `syz.2.348'. [ 151.250699][ T5731] netem: change failed [ 151.344872][ T5733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.350'. [ 151.409187][ T5734] loop2: detected capacity change from 0 to 128 [ 151.416471][ T5734] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.469262][ T5734] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 151.787239][ T5736] loop3: detected capacity change from 0 to 32768 [ 151.829795][ T5743] 9pnet_fd: Insufficient options for proto=fd [ 152.036205][ T5736] XFS (loop3): Mounting V5 Filesystem [ 152.042001][ T5745] siw: device registration error -23 [ 154.150791][ T5736] XFS (loop3): Ending clean mount [ 154.156895][ T4299] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 154.206705][ T4299] XFS (loop3): Unmount and run xfs_repair [ 154.258750][ T4299] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 154.266186][ T4299] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 154.314015][ T4299] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 154.339753][ T4299] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 154.362930][ T5770] loop1: detected capacity change from 0 to 128 [ 154.416242][ T5770] EXT4-fs (loop1): Test dummy encryption mode enabled [ 154.510003][ T4299] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 154.512759][ T5770] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 154.519889][ T4299] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 154.539338][ T4299] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 154.548562][ T4299] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 154.552766][ T5770] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.557776][ T4299] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 154.577128][ T5736] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 154.588816][ T5736] XFS (loop3): Failed to initialize disk quotas. [ 154.845285][ T4266] XFS (loop3): Unmounting Filesystem [ 155.316609][ T4643] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 155.347649][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 155.583371][ T5776] loop4: detected capacity change from 0 to 32768 [ 155.594109][ T5768] loop0: detected capacity change from 0 to 40427 [ 155.603090][ T5776] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.365 (5776) [ 155.620666][ T5776] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.631273][ T5776] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 155.640035][ T5776] BTRFS info (device loop4): enabling auto defrag [ 155.646493][ T5776] BTRFS info (device loop4): doing ref verification [ 155.653178][ T5776] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 155.663878][ T5776] BTRFS info (device loop4): trying to use backup root at mount time [ 155.669499][ T5768] F2FS-fs (loop0): build fault injection attr: rate: 693, type: 0x3ffff [ 155.672219][ T5776] BTRFS info (device loop4): max_inline at 4096 [ 155.686681][ T5776] BTRFS info (device loop4): enabling ssd optimizations [ 155.693662][ T5776] BTRFS info (device loop4): using spread ssd allocation scheme [ 155.701476][ T5776] BTRFS info (device loop4): using free space tree [ 155.710448][ T5768] F2FS-fs (loop0): invalid crc value [ 155.738369][ T4643] usb 3-1: config 0 has an invalid interface number: 45 but max is 0 [ 155.746745][ T4643] usb 3-1: config 0 has no interface number 0 [ 155.753085][ T4643] usb 3-1: config 0 interface 45 altsetting 175 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.764451][ T4643] usb 3-1: config 0 interface 45 altsetting 175 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.775362][ T4643] usb 3-1: config 0 interface 45 has no altsetting 0 [ 155.786757][ T4643] usb 3-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 155.793390][ T5768] F2FS-fs (loop0): Found nat_bits in checkpoint [ 155.795881][ T4643] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.829780][ T4643] usb 3-1: config 0 descriptor?? [ 155.878429][ T5768] F2FS-fs (loop0): Start checkpoint disabled! [ 155.895363][ T5768] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 155.917608][ T5768] syz.0.361: attempt to access beyond end of device [ 155.917608][ T5768] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 156.266230][ T5807] BTRFS info (device loop4): space_info DATA+METADATA has 155648 free, is full [ 156.266436][ T4643] uclogic 0003:5543:3031.0001: interface is invalid, ignoring [ 156.275431][ T5807] BTRFS info (device loop4): space_info total=11534336, used=53248, pinned=0, reserved=7745536, may_use=3579904, readonly=0 zone_unusable=0 [ 156.275553][ T5807] BTRFS info (device loop4): global_block_rsv: size 1441792 reserved 1437696 [ 156.275621][ T5807] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 156.275642][ T5807] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 156.275661][ T5807] BTRFS info (device loop4): delayed_block_rsv: size 98304 reserved 98304 [ 156.275682][ T5807] BTRFS info (device loop4): delayed_refs_rsv: size 1835008 reserved 778240 [ 156.347680][ T4334] kworker/u4:6: attempt to access beyond end of device [ 156.347680][ T4334] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 156.621033][ T4643] usb 3-1: USB disconnect, device number 2 [ 160.596040][ T4251] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.536179][ T5835] loop2: detected capacity change from 0 to 40427 [ 161.592730][ T5824] loop0: detected capacity change from 0 to 32768 [ 161.634848][ T5835] F2FS-fs (loop2): build fault injection attr: rate: 693, type: 0x3ffff [ 161.675497][ T5824] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 161.692802][ T5835] F2FS-fs (loop2): invalid crc value [ 161.749813][ T5835] F2FS-fs (loop2): Found nat_bits in checkpoint [ 162.017920][ T5835] F2FS-fs (loop2): Start checkpoint disabled! [ 162.080372][ T5835] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 162.127716][ T5835] syz.2.378: attempt to access beyond end of device [ 162.127716][ T5835] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 162.424194][ T4254] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 164.538340][ T4303] kworker/u4:5: attempt to access beyond end of device [ 164.538340][ T4303] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 164.815119][ T5868] loop4: detected capacity change from 0 to 32768 [ 164.941853][ T5868] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.389 (5868) [ 164.967767][ T5868] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 164.978389][ T5868] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 164.987400][ T5868] BTRFS info (device loop4): enabling ssd optimizations [ 164.994371][ T5868] BTRFS info (device loop4): turning on sync discard [ 165.001158][ T5868] BTRFS info (device loop4): max_inline at 3 [ 165.007242][ T5868] BTRFS info (device loop4): not using ssd optimizations [ 165.014338][ T5868] BTRFS info (device loop4): using free space tree [ 165.183741][ T5868] BTRFS info (device loop4): checking UUID tree [ 165.444064][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'. [ 165.664820][ T4251] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 166.078384][ T4570] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop4 scanned by udevd (4570) [ 167.092557][ T5912] loop3: detected capacity change from 0 to 4096 [ 167.130266][ T5912] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 167.334734][ T27] audit: type=1800 audit(1750646550.286:12): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.398" name="bus" dev="loop3" ino=24 res=0 errno=0 [ 167.362031][ T5899] loop0: detected capacity change from 0 to 32768 [ 167.398269][ T5899] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 167.563633][ T4266] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 167.671591][ T4266] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 167.696710][ T4266] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 167.794001][ T5919] loop2: detected capacity change from 0 to 64 [ 167.801460][ T4254] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 167.850997][ T5919] netlink: 64 bytes leftover after parsing attributes in process `syz.2.401'. [ 169.180896][ T5911] loop4: detected capacity change from 0 to 40427 [ 169.224142][ T5911] F2FS-fs (loop4): build fault injection attr: rate: 693, type: 0x3ffff [ 169.284240][ T5911] F2FS-fs (loop4): invalid crc value [ 169.315272][ T5911] F2FS-fs (loop4): Found nat_bits in checkpoint [ 169.347489][ T5937] loop2: detected capacity change from 0 to 128 [ 169.385349][ T5937] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.488940][ T5937] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 169.491684][ T5911] F2FS-fs (loop4): Start checkpoint disabled! [ 169.530914][ T5911] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 170.015207][ T5921] loop0: detected capacity change from 0 to 32768 [ 170.484423][ T5921] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.402 (5921) [ 170.502956][ T5921] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 170.513528][ T5921] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 170.523409][ T5921] BTRFS info (device loop0): force zlib compression, level 3 [ 170.543493][ T5921] BTRFS info (device loop0): force clearing of disk cache [ 170.759011][ T5921] BTRFS info (device loop0): setting nodatasum [ 170.765392][ T5921] BTRFS info (device loop0): allowing degraded mounts [ 170.776987][ T5921] BTRFS info (device loop0): enabling disk space caching [ 170.784122][ T5921] BTRFS info (device loop0): disk space caching is enabled [ 171.718653][ T5921] BTRFS error (device loop0): open_ctree failed: -12 [ 171.778219][ T4570] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by udevd (4570) [ 172.086409][ T5979] loop4: detected capacity change from 0 to 32768 [ 172.113887][ T5979] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 172.124264][ T5979] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 172.132941][ T5979] BTRFS info (device loop4): enabling ssd optimizations [ 172.139922][ T5979] BTRFS info (device loop4): turning on sync discard [ 172.146901][ T5979] BTRFS info (device loop4): max_inline at 3 [ 172.153177][ T5979] BTRFS info (device loop4): not using ssd optimizations [ 172.160283][ T5979] BTRFS info (device loop4): using free space tree [ 173.348809][ T5979] BTRFS info (device loop4): checking UUID tree [ 173.555450][ T6011] loop1: detected capacity change from 0 to 64 [ 173.580099][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 173.783404][ T4251] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 173.797576][ T6011] netlink: 64 bytes leftover after parsing attributes in process `syz.1.417'. [ 174.303896][ T6015] siw: device registration error -23 [ 174.433755][ T5980] loop2: detected capacity change from 0 to 32768 [ 174.469054][ T5980] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.511069][ T5980] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 174.678136][ T5980] BTRFS info (device loop2): setting nodatacow, compression disabled [ 174.716998][ T5980] BTRFS info (device loop2): max_inline at 0 [ 174.723100][ T5980] BTRFS info (device loop2): turning off barriers [ 174.735016][ T5980] BTRFS info (device loop2): force zlib compression, level 3 [ 174.761243][ T5980] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 174.797069][ T5980] BTRFS info (device loop2): force zstd compression, level 3 [ 174.850782][ T5980] BTRFS info (device loop2): force clearing of disk cache [ 174.901701][ T5980] BTRFS info (device loop2): enabling ssd optimizations [ 174.946229][ T5980] BTRFS info (device loop2): max_inline at 4096 [ 174.990754][ T5980] BTRFS info (device loop2): using free space tree [ 175.404218][ T5980] BTRFS error (device loop2): open_ctree failed: -12 [ 176.362908][ T6053] netem: change failed [ 176.608658][ T4570] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4570) [ 177.136321][ T6018] loop4: detected capacity change from 0 to 40427 [ 177.143692][ T6069] loop3: detected capacity change from 0 to 64 [ 177.293563][ T6018] F2FS-fs (loop4): build fault injection attr: rate: 693, type: 0x3ffff [ 177.308271][ T6069] netlink: 64 bytes leftover after parsing attributes in process `syz.3.431'. [ 177.323143][ T6018] F2FS-fs (loop4): invalid crc value [ 177.987456][ T6018] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 178.377723][ T6076] siw: device registration error -23 [ 178.781804][ T6085] loop3: detected capacity change from 0 to 32768 [ 178.814095][ T6085] [ 178.814095][ T6085] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.814095][ T6085] [ 178.830512][ T6085] [ 178.830512][ T6085] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.830512][ T6085] [ 178.841031][ T6085] [ 178.841031][ T6085] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.841031][ T6085] [ 178.851536][ T6085] [ 178.851536][ T6085] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.851536][ T6085] [ 178.862579][ T6085] [ 178.862579][ T6085] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.862579][ T6085] [ 178.873066][ T6085] [ 178.873066][ T6085] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.873066][ T6085] [ 178.884111][ T107] [ 178.884111][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.884111][ T107] [ 178.906725][ T6083] loop4: detected capacity change from 0 to 4096 [ 178.969509][ T6083] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 179.117757][ T4266] [ 179.117757][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.117757][ T4266] [ 179.147290][ T4266] [ 179.147290][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.147290][ T4266] [ 179.207533][ T4251] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 179.237188][ T4251] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 179.278156][ T4251] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 179.521904][ T6079] loop2: detected capacity change from 0 to 32768 [ 179.721736][ T6079] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.855331][ T6079] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 179.866797][ T6079] BTRFS info (device loop2): setting nodatacow, compression disabled [ 179.957967][ T6079] BTRFS info (device loop2): max_inline at 0 [ 180.052004][ T6103] netem: change failed [ 180.068324][ T6079] BTRFS info (device loop2): turning off barriers [ 180.189103][ T6079] BTRFS info (device loop2): force zlib compression, level 3 [ 180.198872][ T6106] loop4: detected capacity change from 0 to 64 [ 180.246273][ T6106] netlink: 64 bytes leftover after parsing attributes in process `syz.4.444'. [ 180.345471][ T6079] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 180.429280][ T6079] BTRFS info (device loop2): force zstd compression, level 3 [ 180.449085][ T6079] BTRFS info (device loop2): force clearing of disk cache [ 180.496782][ T6079] BTRFS info (device loop2): enabling ssd optimizations [ 180.507573][ T6079] BTRFS info (device loop2): max_inline at 4096 [ 180.550528][ T6079] BTRFS info (device loop2): using free space tree [ 180.823535][ T6127] overlayfs: overlapping lowerdir path [ 180.919528][ T6079] BTRFS info (device loop2): rebuilding free space tree [ 181.088589][ T4253] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 182.075916][ T6145] loop0: detected capacity change from 0 to 4096 [ 182.106384][ T6145] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 182.264889][ T4263] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 182.296628][ T4263] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 182.310995][ T4263] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 182.893994][ T6160] loop1: detected capacity change from 0 to 64 [ 182.932197][ T6161] netem: change failed [ 182.947148][ T6160] netlink: 64 bytes leftover after parsing attributes in process `syz.1.457'. [ 184.143451][ T6175] loop2: detected capacity change from 0 to 256 [ 184.229432][ T6175] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 184.604623][ T6179] loop1: detected capacity change from 0 to 4096 [ 184.642609][ T6179] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 184.837733][ T6183] siw: device registration error -23 [ 185.309403][ T4252] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 185.315654][ T4252] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 185.401367][ T4252] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 185.586128][ T6195] loop0: detected capacity change from 0 to 32768 [ 185.625359][ T6195] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.469 (6195) [ 185.645286][ T6195] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 185.655950][ T6195] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 185.664644][ T6195] BTRFS info (device loop0): enabling ssd optimizations [ 185.671615][ T6195] BTRFS info (device loop0): turning on sync discard [ 185.678343][ T6195] BTRFS info (device loop0): max_inline at 3 [ 185.684343][ T6195] BTRFS info (device loop0): not using ssd optimizations [ 185.691403][ T6195] BTRFS info (device loop0): using free space tree [ 186.083582][ T6181] loop3: detected capacity change from 0 to 32768 [ 186.121470][ T6221] netem: change failed [ 186.143073][ T6195] BTRFS info (device loop0): checking UUID tree [ 186.153323][ T6181] XFS (loop3): Mounting V5 Filesystem [ 186.302668][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 186.378989][ T6181] XFS (loop3): Ending clean mount [ 186.384846][ T4302] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 186.397311][ T4302] XFS (loop3): Unmount and run xfs_repair [ 186.404214][ T4302] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 186.413513][ T4302] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 186.423563][ T4302] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 186.433490][ T4302] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 186.443386][ T4302] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 186.531983][ T4302] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 186.878094][ T4302] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 186.917804][ T4302] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 186.986548][ T4302] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 187.035833][ T6181] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 187.094846][ T6181] XFS (loop3): Failed to initialize disk quotas. [ 187.140552][ T4263] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 187.228045][ T4266] XFS (loop3): Unmounting Filesystem [ 187.542865][ T6209] loop4: detected capacity change from 0 to 32768 [ 187.892874][ T6251] loop2: detected capacity change from 0 to 256 [ 188.091883][ T6209] XFS (loop4): Mounting V5 Filesystem [ 188.111583][ T6251] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 188.431419][ T6209] XFS (loop4): Ending clean mount [ 188.447339][ T6209] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 188.476979][ T6209] XFS (loop4): Unmount and run xfs_repair [ 188.496326][ T6261] loop2: detected capacity change from 0 to 64 [ 188.505475][ T6209] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 188.555727][ T6209] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 188.582685][ T6261] netlink: 64 bytes leftover after parsing attributes in process `syz.2.482'. [ 188.619454][ T6209] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 188.692196][ T6209] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 188.746732][ T6209] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 188.804300][ T6209] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 188.846577][ T6209] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 188.855494][ T6209] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 188.913352][ T6209] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 189.027686][ T6209] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 189.148360][ T6209] XFS (loop4): Failed to initialize disk quotas. [ 189.358046][ T6273] loop3: detected capacity change from 0 to 32768 [ 189.376176][ T6273] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.485 (6273) [ 189.515829][ T4251] XFS (loop4): Unmounting Filesystem [ 189.521912][ T6273] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 189.532159][ T6273] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 189.540905][ T6273] BTRFS info (device loop3): enabling ssd optimizations [ 189.547913][ T6273] BTRFS info (device loop3): turning on sync discard [ 189.554671][ T6273] BTRFS info (device loop3): max_inline at 3 [ 189.560756][ T6273] BTRFS info (device loop3): not using ssd optimizations [ 189.567841][ T6273] BTRFS info (device loop3): using free space tree [ 189.804333][ T6285] netlink: 104 bytes leftover after parsing attributes in process `syz.2.487'. [ 190.597673][ T6293] netem: change failed [ 190.675166][ T6273] BTRFS info (device loop3): checking UUID tree [ 190.852245][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 191.261341][ T6267] loop1: detected capacity change from 0 to 32768 [ 191.314744][ T6267] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.483 (6267) [ 191.458213][ T6267] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.476555][ T4266] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 191.536691][ T6267] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 191.545441][ T6267] BTRFS info (device loop1): setting nodatacow, compression disabled [ 191.695731][ T6267] BTRFS info (device loop1): max_inline at 0 [ 191.719878][ T6267] BTRFS info (device loop1): turning off barriers [ 191.729668][ T6267] BTRFS info (device loop1): force zlib compression, level 3 [ 191.738286][ T6267] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 191.743634][ T4570] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (4570) [ 191.762959][ T6267] BTRFS info (device loop1): force zstd compression, level 3 [ 191.795539][ T6267] BTRFS info (device loop1): force clearing of disk cache [ 191.919800][ T6267] BTRFS info (device loop1): enabling ssd optimizations [ 191.939126][ T6267] BTRFS info (device loop1): max_inline at 4096 [ 191.950097][ T6267] BTRFS info (device loop1): using free space tree [ 192.342352][ T6267] BTRFS error (device loop1): open_ctree failed: -12 [ 193.013731][ T6342] loop0: detected capacity change from 0 to 64 [ 193.134296][ T6342] netlink: 64 bytes leftover after parsing attributes in process `syz.0.495'. [ 193.449955][ T6308] loop4: detected capacity change from 0 to 32768 [ 193.613043][ T6335] loop2: detected capacity change from 0 to 32768 [ 193.646991][ T6308] XFS (loop4): Mounting V5 Filesystem [ 193.743001][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'. [ 193.949860][ T6335] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 194.225626][ T6335] XFS (loop2): Mounting V5 Filesystem [ 194.247601][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.259967][ T6365] loop1: detected capacity change from 0 to 32768 [ 194.278483][ T6365] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 194.429933][ T6308] XFS (loop4): Ending clean mount [ 194.471691][ T4803] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 194.485109][ T4803] XFS (loop4): Unmount and run xfs_repair [ 194.491024][ T4803] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 194.498649][ T4803] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 194.509896][ T4803] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 194.521633][ T4803] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 194.599875][ T4803] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 194.746032][ T4803] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 194.755357][ T4803] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 194.769678][ T4803] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 194.790868][ T4803] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 194.836601][ T6308] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 194.863995][ T6335] XFS (loop2): Ending clean mount [ 194.890053][ T6335] XFS (loop2): Quotacheck needed: Please wait. [ 194.899093][ T6308] XFS (loop4): Failed to initialize disk quotas. [ 194.983293][ T6335] XFS (loop2): Quotacheck: Done. [ 195.112953][ T4251] XFS (loop4): Unmounting Filesystem [ 195.204226][ T4254] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 195.266693][ T27] audit: type=1804 audit(1750646578.196:13): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.493" name="/newroot/98/file0/file1" dev="loop2" ino=4422 res=1 errno=0 [ 195.300211][ T4798] XFS (loop2): Metadata CRC error detected at xfs_refcountbt_read_verify+0x3a/0xd0, xfs_refcountbt block 0x28 [ 195.363358][ T4798] XFS (loop2): Unmount and run xfs_repair [ 195.390844][ T6347] loop3: detected capacity change from 0 to 32768 [ 195.472279][ T6378] netlink: 104 bytes leftover after parsing attributes in process `syz.0.501'. [ 195.812384][ T6347] XFS (loop3): Mounting V5 Filesystem [ 196.116679][ T4798] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 196.124287][ T4798] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 196.133210][ T4798] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 196.142108][ T4798] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 196.152255][ T6347] XFS (loop3): Ending clean mount [ 196.157139][ T4798] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 196.166180][ T4798] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 196.185801][ T6347] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 196.186258][ T4798] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 196.235002][ T4798] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 196.255948][ T6347] XFS (loop3): Unmount and run xfs_repair [ 196.296601][ T6347] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 196.334455][ T6347] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 196.413580][ T6347] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 196.415783][ T4798] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 196.432161][ T6335] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x28 len 8 error 74 [ 196.478557][ T6347] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 196.565779][ T6347] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 196.645319][ T6335] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1784/0x1e50 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 196.682189][ T6347] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 196.696676][ T6335] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 196.745250][ T6347] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 196.782600][ T6347] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 196.827440][ T6347] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 196.846632][ T6347] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 196.867526][ T4253] XFS (loop2): Unmounting Filesystem [ 196.929119][ T6347] XFS (loop3): Failed to initialize disk quotas. [ 197.035386][ T4266] XFS (loop3): Unmounting Filesystem [ 197.307226][ T6397] loop0: detected capacity change from 0 to 64 [ 197.334112][ T6387] loop1: detected capacity change from 0 to 32768 [ 197.425761][ T6387] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.504 (6387) [ 197.474845][ T6397] netlink: 64 bytes leftover after parsing attributes in process `syz.0.509'. [ 197.715269][ T6387] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 197.736687][ T6387] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 197.747964][ T6387] BTRFS info (device loop1): setting nodatacow, compression disabled [ 197.756167][ T6387] BTRFS info (device loop1): max_inline at 0 [ 197.780074][ T6387] BTRFS info (device loop1): turning off barriers [ 197.795495][ T6387] BTRFS info (device loop1): force zlib compression, level 3 [ 197.809413][ T6387] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 197.832690][ T6387] BTRFS info (device loop1): force zstd compression, level 3 [ 197.848935][ T6387] BTRFS info (device loop1): force clearing of disk cache [ 197.865703][ T6387] BTRFS info (device loop1): enabling ssd optimizations [ 197.881385][ T6387] BTRFS info (device loop1): max_inline at 4096 [ 197.896406][ T6387] BTRFS info (device loop1): using free space tree [ 197.992707][ T6402] loop2: detected capacity change from 0 to 256 [ 198.005027][ T6402] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 198.309821][ T6387] BTRFS info (device loop1): rebuilding free space tree [ 198.535632][ T6432] loop3: detected capacity change from 0 to 256 [ 198.538130][ T6427] loop4: detected capacity change from 0 to 32768 [ 198.551342][ T6427] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 198.590923][ T6432] FAT-fs (loop3): Directory bread(block 64) failed [ 198.597577][ T6432] FAT-fs (loop3): Directory bread(block 65) failed [ 198.604340][ T6432] FAT-fs (loop3): Directory bread(block 66) failed [ 198.666832][ T4252] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.678842][ T6432] FAT-fs (loop3): Directory bread(block 67) failed [ 198.685469][ T6432] FAT-fs (loop3): Directory bread(block 68) failed [ 198.778031][ T4570] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.802437][ T6432] FAT-fs (loop3): Directory bread(block 69) failed [ 198.818482][ T6432] FAT-fs (loop3): Directory bread(block 70) failed [ 198.832611][ T6432] FAT-fs (loop3): Directory bread(block 71) failed [ 198.884445][ T6427] loop4: detected capacity change from 0 to 1024 [ 198.987492][ T6432] FAT-fs (loop3): Directory bread(block 72) failed [ 199.007132][ T6432] FAT-fs (loop3): Directory bread(block 73) failed [ 199.741837][ T4257] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (4257) [ 199.891396][ T6444] netlink: 104 bytes leftover after parsing attributes in process `syz.1.516'. [ 202.442093][ T6459] loop3: detected capacity change from 0 to 64 [ 202.585892][ T6459] netlink: 64 bytes leftover after parsing attributes in process `syz.3.521'. [ 202.743790][ T6461] loop1: detected capacity change from 0 to 256 [ 202.767369][ T6461] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 203.843827][ T6477] loop4: detected capacity change from 0 to 32768 [ 203.902976][ T6477] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 204.087515][ T6474] loop2: detected capacity change from 0 to 32768 [ 206.509941][ T6484] netlink: 104 bytes leftover after parsing attributes in process `syz.3.529'. [ 206.522162][ T6474] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 206.905899][ T4262] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 207.023605][ T4570] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 207.972088][ T6502] loop0: detected capacity change from 0 to 256 [ 208.238248][ T6503] netlink: 64 bytes leftover after parsing attributes in process `syz.4.535'. [ 208.263990][ T6502] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 209.017033][ T6514] loop0: detected capacity change from 0 to 256 [ 209.211450][ T6514] FAT-fs (loop0): Directory bread(block 64) failed [ 209.246449][ T6514] FAT-fs (loop0): Directory bread(block 65) failed [ 209.283608][ T6514] FAT-fs (loop0): Directory bread(block 66) failed [ 209.311593][ T6514] FAT-fs (loop0): Directory bread(block 67) failed [ 209.336151][ T6514] FAT-fs (loop0): Directory bread(block 68) failed [ 209.458901][ T6514] FAT-fs (loop0): Directory bread(block 69) failed [ 209.465564][ T6514] FAT-fs (loop0): Directory bread(block 70) failed [ 209.582833][ T6517] loop2: detected capacity change from 0 to 32768 [ 209.662962][ T6514] FAT-fs (loop0): Directory bread(block 71) failed [ 209.679371][ T6517] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 209.709079][ T6514] FAT-fs (loop0): Directory bread(block 72) failed [ 209.715667][ T6514] FAT-fs (loop0): Directory bread(block 73) failed [ 209.887699][ T6506] loop3: detected capacity change from 0 to 32768 [ 210.246034][ T6506] XFS (loop3): Mounting V5 Filesystem [ 210.603667][ T6506] XFS (loop3): Ending clean mount [ 210.652258][ T4335] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 210.684782][ T4335] XFS (loop3): Unmount and run xfs_repair [ 210.707378][ T4335] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 210.736180][ T4335] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 210.777262][ T4335] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 210.796066][ T4570] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 210.816645][ T4335] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 210.825539][ T4335] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 210.885498][ T4335] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 210.899275][ T6538] loop1: detected capacity change from 0 to 4096 [ 210.915740][ T4335] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 210.937248][ T6538] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 211.003022][ T4335] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 211.013992][ T6543] loop2: detected capacity change from 0 to 256 [ 211.030987][ T6543] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 211.353444][ T4335] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 211.401382][ T6506] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 211.414845][ T6506] XFS (loop3): Failed to initialize disk quotas. [ 211.492979][ T27] audit: type=1800 audit(1750646594.446:14): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.546" name="bus" dev="loop1" ino=24 res=0 errno=0 [ 211.585597][ T4266] XFS (loop3): Unmounting Filesystem [ 211.797092][ T4252] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 211.811235][ T4252] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 211.846770][ T4252] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 212.494987][ T6539] loop0: detected capacity change from 0 to 32768 [ 212.594271][ T6539] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 213.281914][ T4254] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 215.611198][ T6558] loop2: detected capacity change from 0 to 32768 [ 216.536669][ T6582] loop4: detected capacity change from 0 to 40427 [ 216.975350][ T6582] F2FS-fs (loop4): Unrecognized mount option "whint_mode=fs-based" or missing value [ 217.086242][ T6558] [ 217.086242][ T6558] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.086242][ T6558] [ 218.308420][ T6558] read_mapping_page failed! [ 218.313664][ T6558] diRead: diIAGRead returned -5 [ 218.362443][ T6578] siw: device registration error -23 [ 221.157869][ T6589] loop4: detected capacity change from 0 to 32768 [ 221.220013][ T6589] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 221.376762][ T4570] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.477584][ T6615] loop3: detected capacity change from 0 to 128 [ 224.125859][ T6620] loop1: detected capacity change from 0 to 40427 [ 224.165473][ T6615] EXT4-fs: error -4 creating inode table initialization thread [ 224.174091][ T6615] EXT4-fs (loop3): mount failed [ 224.249739][ T6620] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value [ 226.107790][ T4254] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.336942][ T6627] xt_TPROXY: Can be used only with -p tcp or -p udp [ 227.520223][ T6634] siw: device registration error -23 [ 228.276265][ T6645] netlink: 104 bytes leftover after parsing attributes in process `syz.3.580'. [ 229.537567][ T6655] loop3: detected capacity change from 0 to 256 [ 229.633718][ T6656] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.721312][ T6656] loop0: detected capacity change from 0 to 1024 [ 229.734094][ T6656] EXT4-fs: Ignoring removed nobh option [ 229.770010][ T6656] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 229.780306][ T6656] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 230.832754][ T6668] loop3: detected capacity change from 0 to 256 [ 232.102652][ T6674] loop4: detected capacity change from 0 to 256 [ 232.261429][ T6674] FAT-fs (loop4): Directory bread(block 64) failed [ 232.301733][ T6674] FAT-fs (loop4): Directory bread(block 65) failed [ 232.342373][ T6674] FAT-fs (loop4): Directory bread(block 66) failed [ 232.386775][ T6674] FAT-fs (loop4): Directory bread(block 67) failed [ 232.449494][ T6674] FAT-fs (loop4): Directory bread(block 68) failed [ 232.484722][ T6674] FAT-fs (loop4): Directory bread(block 69) failed [ 232.522851][ T6674] FAT-fs (loop4): Directory bread(block 70) failed [ 232.561639][ T6674] FAT-fs (loop4): Directory bread(block 71) failed [ 232.607576][ T6674] FAT-fs (loop4): Directory bread(block 72) failed [ 232.634545][ T6674] FAT-fs (loop4): Directory bread(block 73) failed [ 232.685996][ T6677] 9pnet_fd: Insufficient options for proto=fd [ 232.789640][ T6660] loop0: detected capacity change from 0 to 32768 [ 232.809428][ T6660] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 232.963905][ T4570] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 233.665656][ T6682] loop1: detected capacity change from 0 to 256 [ 233.766326][ T6685] netlink: 104 bytes leftover after parsing attributes in process `syz.3.591'. [ 233.785171][ T6682] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 234.057195][ T6689] overlayfs: unrecognized mount option "/" or missing value [ 234.239589][ T6695] loop0: detected capacity change from 0 to 256 [ 234.503534][ T6699] loop1: detected capacity change from 0 to 256 [ 234.597144][ T6699] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 235.053851][ T6706] lo speed is unknown, defaulting to 1000 [ 235.954646][ T6693] loop2: detected capacity change from 0 to 32768 [ 236.020088][ T6693] [ 236.020088][ T6693] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.020088][ T6693] [ 236.086303][ T6693] [ 236.086303][ T6693] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.086303][ T6693] [ 236.128305][ T6693] [ 236.128305][ T6693] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.128305][ T6693] [ 236.592704][ T6714] loop0: detected capacity change from 0 to 128 [ 236.820409][ T6715] loop1: detected capacity change from 0 to 256 [ 236.914691][ T6693] [ 236.914691][ T6693] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.914691][ T6693] [ 238.944617][ T6709] 9pnet_fd: Insufficient options for proto=fd [ 239.966891][ T6714] EXT4-fs: failed to create workqueue [ 239.972437][ T6714] EXT4-fs (loop0): mount failed [ 240.577826][ T6693] [ 240.577826][ T6693] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.577826][ T6693] [ 241.077533][ T6693] [ 241.077533][ T6693] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.077533][ T6693] [ 241.138040][ T108] [ 241.138040][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.138040][ T108] [ 241.463338][ T4253] [ 241.463338][ T4253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.463338][ T4253] [ 241.711527][ T6726] loop3: detected capacity change from 0 to 32768 [ 241.794776][ T6726] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 241.805055][ T6726] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 241.813739][ T6726] BTRFS info (device loop3): enabling ssd optimizations [ 241.820729][ T6726] BTRFS info (device loop3): turning on sync discard [ 241.827528][ T6726] BTRFS info (device loop3): max_inline at 3 [ 241.833527][ T6726] BTRFS info (device loop3): not using ssd optimizations [ 241.840570][ T6726] BTRFS info (device loop3): using free space tree [ 241.862448][ T4253] [ 241.862448][ T4253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.862448][ T4253] [ 241.987479][ T6740] loop4: detected capacity change from 0 to 256 [ 242.186179][ T6740] FAT-fs (loop4): Directory bread(block 64) failed [ 242.231366][ T6740] FAT-fs (loop4): Directory bread(block 65) failed [ 242.239094][ T6726] BTRFS info (device loop3): checking UUID tree [ 242.277457][ T6740] FAT-fs (loop4): Directory bread(block 66) failed [ 242.302070][ T6740] FAT-fs (loop4): Directory bread(block 67) failed [ 242.372774][ T6740] FAT-fs (loop4): Directory bread(block 68) failed [ 242.400636][ T6754] loop0: detected capacity change from 0 to 256 [ 242.484084][ T6740] FAT-fs (loop4): Directory bread(block 69) failed [ 242.490891][ T6740] FAT-fs (loop4): Directory bread(block 70) failed [ 242.505442][ T6740] FAT-fs (loop4): Directory bread(block 71) failed [ 242.514667][ T6740] FAT-fs (loop4): Directory bread(block 72) failed [ 242.542506][ T6740] FAT-fs (loop4): Directory bread(block 73) failed [ 242.660107][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'. [ 242.955327][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'. [ 242.964753][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'. [ 243.695386][ T6767] netlink: 104 bytes leftover after parsing attributes in process `syz.0.611'. [ 243.743301][ T6769] loop4: detected capacity change from 0 to 256 [ 243.780618][ T6769] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 244.043273][ T6747] loop1: detected capacity change from 0 to 32768 [ 244.104360][ T6747] XFS (loop1): Mounting V5 Filesystem [ 244.330140][ T6747] XFS (loop1): Ending clean mount [ 244.383144][ T6747] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 244.432239][ T6747] XFS (loop1): Unmount and run xfs_repair [ 244.452473][ T6747] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 244.470510][ T6747] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 244.501946][ T6747] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 244.546056][ T6747] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 244.600703][ T6747] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 244.666857][ T6747] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 244.752401][ T6747] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 244.824590][ T6747] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 244.875649][ T6747] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 244.938887][ T6747] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 244.998637][ T6747] XFS (loop1): Failed to initialize disk quotas. [ 245.237672][ T4252] XFS (loop1): Unmounting Filesystem [ 245.658076][ T4266] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 246.012352][ T6785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.405245][ T6790] loop4: detected capacity change from 0 to 1024 [ 246.412788][ T6790] EXT4-fs: Ignoring removed nobh option [ 246.507498][ T6790] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 246.517175][ T6790] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 246.645762][ T6793] loop2: detected capacity change from 0 to 256 [ 247.050190][ T6797] overlayfs: failed to resolve './file1': -2 [ 247.745302][ T6804] 9pnet_fd: Insufficient options for proto=fd [ 247.783221][ T6801] loop4: detected capacity change from 0 to 256 [ 248.350090][ T6811] overlayfs: failed to resolve './file1': -2 [ 248.663420][ T6813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.686815][ T6813] loop2: detected capacity change from 0 to 1024 [ 249.961299][ T6815] loop1: detected capacity change from 0 to 512 [ 250.120412][ T4570] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 250.156991][ T6815] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 250.286856][ T6815] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.741628][ T6820] netlink: 104 bytes leftover after parsing attributes in process `syz.4.624'. [ 251.100232][ T6827] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #2: comm syz.1.623: corrupted inode contents [ 251.121657][ T6827] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #2: comm syz.1.623: mark_inode_dirty error [ 251.138453][ T6827] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #2: comm syz.1.623: corrupted inode contents [ 251.649187][ T6824] loop2: detected capacity change from 0 to 256 [ 251.698253][ T6824] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 251.747676][ T6827] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.623: mark_inode_dirty error [ 252.059197][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 255.428878][ T6859] 9pnet_fd: Insufficient options for proto=fd [ 255.469162][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.988001][ T6870] loop3: detected capacity change from 0 to 512 [ 256.044979][ T6873] loop1: detected capacity change from 0 to 256 [ 256.247686][ T6870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 256.317497][ T6878] overlayfs: failed to resolve './file1': -2 [ 257.068291][ T6870] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.468660][ T6882] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #2: comm syz.3.638: corrupted inode contents [ 259.486784][ T6882] EXT4-fs error (device loop3): ext4_dirty_inode:6118: inode #2: comm syz.3.638: mark_inode_dirty error [ 259.498712][ T6882] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #2: comm syz.3.638: corrupted inode contents [ 259.513950][ T6882] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.638: mark_inode_dirty error [ 259.633008][ T6889] loop1: detected capacity change from 0 to 512 [ 259.730477][ T6889] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 259.816756][ T6889] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 259.856764][ T6889] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 259.947963][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 259.954473][ T6889] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 260.016195][ T6889] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 260.280311][ T6889] EXT4-fs (loop1): orphan cleanup on readonly fs [ 260.480395][ T6889] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.640: bg 0: block 34: padding at end of block bitmap is not set [ 260.581088][ T6889] Quota error (device loop1): write_blk: dquota write failed [ 260.706965][ T6889] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 260.726424][ T6889] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.640: Failed to acquire dquot type 1 [ 260.773332][ T6889] EXT4-fs (loop1): 1 truncate cleaned up [ 260.818209][ T6889] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 261.908453][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 263.325078][ T6910] loop3: detected capacity change from 0 to 32768 [ 263.729810][ T6916] 9pnet_fd: Insufficient options for proto=fd [ 263.786142][ T6910] XFS (loop3): Mounting V5 Filesystem [ 264.057677][ T6926] loop2: detected capacity change from 0 to 32768 [ 264.068219][ T6926] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.650 (6926) [ 264.126253][ T6930] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.216514][ T6930] loop0: detected capacity change from 0 to 1024 [ 264.710215][ T6926] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 264.720604][ T6926] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 264.729355][ T6926] BTRFS info (device loop2): enabling ssd optimizations [ 264.736344][ T6926] BTRFS info (device loop2): turning on sync discard [ 264.743160][ T6926] BTRFS info (device loop2): max_inline at 3 [ 264.749351][ T6926] BTRFS info (device loop2): not using ssd optimizations [ 264.756418][ T6926] BTRFS info (device loop2): using free space tree [ 264.778260][ T6910] XFS (loop3): Ending clean mount [ 264.793336][ T4242] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 264.924378][ T4242] XFS (loop3): Unmount and run xfs_repair [ 264.946536][ T4242] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 264.953973][ T4242] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 264.976572][ T4242] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 264.985637][ T4242] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 264.998843][ T4242] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 265.008846][ T4242] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 265.018160][ T4242] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 265.027137][ T4242] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 265.036402][ T4242] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 265.055139][ T6910] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 265.196710][ T6910] XFS (loop3): Failed to initialize disk quotas. [ 266.135135][ T6926] BTRFS info (device loop2): checking UUID tree [ 266.175124][ T4266] XFS (loop3): Unmounting Filesystem [ 266.868267][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'. [ 267.661807][ T6969] siw: device registration error -23 [ 268.126899][ T6977] loop3: detected capacity change from 0 to 256 [ 269.296324][ T6982] loop4: detected capacity change from 0 to 128 [ 271.965493][ T6982] EXT4-fs: error -4 creating inode table initialization thread [ 271.974184][ T6982] EXT4-fs (loop4): mount failed [ 272.475224][ T6988] loop1: detected capacity change from 0 to 512 [ 272.653468][ T6992] loop4: detected capacity change from 0 to 256 [ 272.833505][ T6988] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 273.040033][ T6988] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 273.277423][ T6988] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 273.471053][ T6988] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 273.529903][ T6988] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 273.618302][ T6988] EXT4-fs (loop1): orphan cleanup on readonly fs [ 273.727510][ T6988] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.657: bg 0: block 34: padding at end of block bitmap is not set [ 273.885985][ T6988] Quota error (device loop1): write_blk: dquota write failed [ 274.050805][ T6988] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 275.953851][ T6988] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.657: Failed to acquire dquot type 1 [ 276.115554][ T6988] EXT4-fs (loop1): 1 truncate cleaned up [ 276.154406][ T6988] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 276.304850][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 276.335748][ T7005] loop3: detected capacity change from 0 to 256 [ 276.470930][ T7010] 9pnet_fd: Insufficient options for proto=fd [ 276.474710][ T7005] FAT-fs (loop3): Directory bread(block 64) failed [ 276.511668][ T4253] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 276.523681][ T7005] FAT-fs (loop3): Directory bread(block 65) failed [ 276.539179][ T7005] FAT-fs (loop3): Directory bread(block 66) failed [ 276.553195][ T7005] FAT-fs (loop3): Directory bread(block 67) failed [ 276.630883][ T7005] FAT-fs (loop3): Directory bread(block 68) failed [ 276.667536][ T7005] FAT-fs (loop3): Directory bread(block 69) failed [ 276.674218][ T7005] FAT-fs (loop3): Directory bread(block 70) failed [ 276.745804][ T7005] FAT-fs (loop3): Directory bread(block 71) failed [ 276.790508][ T7005] FAT-fs (loop3): Directory bread(block 72) failed [ 276.810590][ T7005] FAT-fs (loop3): Directory bread(block 73) failed [ 277.172734][ T7012] siw: device registration error -23 [ 277.289101][ T7002] loop4: detected capacity change from 0 to 128 [ 277.621562][ T7002] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 277.742018][ T7002] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.478728][ T7030] loop1: detected capacity change from 0 to 256 [ 281.440739][ T7036] tty tty3: ldisc open failed (-12), clearing slot 2 [ 281.735619][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 282.760506][ T7055] netlink: 104 bytes leftover after parsing attributes in process `syz.1.673'. [ 283.790279][ T7061] loop1: detected capacity change from 0 to 256 [ 284.198727][ T7063] loop2: detected capacity change from 0 to 32768 [ 284.216926][ T7065] overlayfs: failed to resolve './file1': -2 [ 284.270649][ T7063] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.676 (7063) [ 284.885537][ T7063] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 284.895867][ T7063] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 284.904635][ T7063] BTRFS info (device loop2): enabling ssd optimizations [ 284.912568][ T7063] BTRFS info (device loop2): turning on sync discard [ 284.919384][ T7063] BTRFS info (device loop2): max_inline at 3 [ 284.925411][ T7063] BTRFS info (device loop2): not using ssd optimizations [ 284.932612][ T7063] BTRFS info (device loop2): using free space tree [ 285.616029][ T7063] BTRFS info (device loop2): checking UUID tree [ 286.225827][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 288.863197][ T7116] lo speed is unknown, defaulting to 1000 [ 289.985041][ T7121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.072489][ T7121] loop3: detected capacity change from 0 to 1024 [ 290.084253][ T7121] EXT4-fs: Ignoring removed nobh option [ 290.121419][ T7121] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 290.131361][ T7121] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 291.133543][ T7115] loop4: detected capacity change from 0 to 128 [ 291.559302][ T7112] loop0: detected capacity change from 0 to 32768 [ 291.777037][ T7112] [ 291.777037][ T7112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.777037][ T7112] [ 291.946227][ T7115] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 291.956913][ T7112] read_mapping_page failed! [ 291.961465][ T7112] diRead: diIAGRead returned -5 [ 292.129184][ T7115] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.317931][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 295.482295][ T4253] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 295.649204][ T7134] loop3: detected capacity change from 0 to 2048 [ 295.692884][ T7134] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 295.832014][ T7139] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.927484][ T7141] xt_CT: You must specify a L4 protocol and not use inversions on it [ 296.015566][ T7141] loop4: detected capacity change from 0 to 1024 [ 296.233682][ T4254] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 298.120027][ T7152] loop1: detected capacity change from 0 to 256 [ 298.203873][ T7156] loop3: detected capacity change from 0 to 512 [ 298.352133][ T7156] EXT4-fs (loop3): failed to initialize system zone (-117) [ 298.451237][ T7156] EXT4-fs (loop3): mount failed [ 298.486022][ T7152] FAT-fs (loop1): Directory bread(block 64) failed [ 298.545904][ T7152] FAT-fs (loop1): Directory bread(block 65) failed [ 298.613105][ T7152] FAT-fs (loop1): Directory bread(block 66) failed [ 298.694309][ T7152] FAT-fs (loop1): Directory bread(block 67) failed [ 298.765929][ T7152] FAT-fs (loop1): Directory bread(block 68) failed [ 298.772570][ T7152] FAT-fs (loop1): Directory bread(block 69) failed [ 298.779332][ T7152] FAT-fs (loop1): Directory bread(block 70) failed [ 298.786766][ T7152] FAT-fs (loop1): Directory bread(block 71) failed [ 298.793399][ T7152] FAT-fs (loop1): Directory bread(block 72) failed [ 298.803658][ T7152] FAT-fs (loop1): Directory bread(block 73) failed [ 299.990012][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'. [ 299.999276][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'. [ 301.586781][ T7176] loop1: detected capacity change from 0 to 256 [ 301.943789][ T7180] overlayfs: failed to resolve './file1': -2 [ 302.694173][ T7184] loop4: detected capacity change from 0 to 256 [ 302.782481][ T7184] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 303.386621][ T7190] lo speed is unknown, defaulting to 1000 [ 304.112243][ T7195] loop1: detected capacity change from 0 to 256 [ 304.334836][ T7201] loop4: detected capacity change from 0 to 2048 [ 304.473482][ T7204] overlayfs: failed to resolve './file1': -2 [ 305.260115][ T7206] netlink: 104 bytes leftover after parsing attributes in process `syz.0.710'. [ 305.423696][ T7201] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 305.599277][ T7208] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 306.743697][ T7214] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.763638][ T7228] loop4: detected capacity change from 0 to 512 [ 306.821426][ T7230] loop3: detected capacity change from 0 to 256 [ 306.856296][ T7230] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 306.904246][ T7228] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 306.928117][ T7228] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.964524][ T7214] loop1: detected capacity change from 0 to 1024 [ 306.971917][ T7214] EXT4-fs: Ignoring removed nobh option [ 307.002539][ T7214] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 307.012307][ T7214] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 307.444211][ T7237] [ 307.446626][ T7237] ====================================================== [ 307.453660][ T7237] WARNING: possible circular locking dependency detected [ 307.460706][ T7237] 6.1.141-syzkaller #0 Not tainted [ 307.465831][ T7237] ------------------------------------------------------ [ 307.472869][ T7237] syz.4.715/7237 is trying to acquire lock: [ 307.478781][ T7237] ffff888058e54ce8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 307.487711][ T7237] [ 307.487711][ T7237] but task is already holding lock: [ 307.495083][ T7237] ffff888058c40288 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x903/0x1b60 [ 307.504613][ T7237] [ 307.504613][ T7237] which lock already depends on the new lock. [ 307.504613][ T7237] [ 307.515031][ T7237] [ 307.515031][ T7237] the existing dependency chain (in reverse order) is: [ 307.524057][ T7237] [ 307.524057][ T7237] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 307.531914][ T7237] down_read+0x42/0x2d0 [ 307.536649][ T7237] ext4_map_blocks+0x316/0x1b60 [ 307.542036][ T7237] ext4_getblk+0x1ab/0x6d0 [ 307.546994][ T7237] ext4_bread+0x26/0x170 [ 307.551783][ T7237] ext4_quota_write+0x230/0x570 [ 307.557188][ T7237] get_free_dqblk+0x312/0x660 [ 307.562417][ T7237] do_insert_tree+0x22b/0x1040 [ 307.567736][ T7237] do_insert_tree+0x9eb/0x1040 [ 307.573044][ T7237] qtree_write_dquot+0x48d/0x5b0 [ 307.578527][ T7237] v2_write_dquot+0x108/0x190 [ 307.583753][ T7237] dquot_acquire+0x2d5/0x520 [ 307.588894][ T7237] ext4_acquire_dquot+0x2d9/0x4a0 [ 307.594463][ T7237] dqget+0x778/0xeb0 [ 307.598902][ T7237] __dquot_initialize+0x3b6/0xcb0 [ 307.604562][ T7237] ext4_setattr+0x2ba/0x19f0 [ 307.609694][ T7237] notify_change+0xc74/0xf40 [ 307.614831][ T7237] chown_common+0x486/0x620 [ 307.619884][ T7237] do_fchownat+0x164/0x270 [ 307.624862][ T7237] __x64_sys_lchown+0x81/0x90 [ 307.630097][ T7237] do_syscall_64+0x4c/0xa0 [ 307.635073][ T7237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.641531][ T7237] [ 307.641531][ T7237] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 307.649662][ T7237] down_read+0x42/0x2d0 [ 307.654383][ T7237] v2_read_dquot+0x4a/0x110 [ 307.659440][ T7237] dquot_acquire+0x152/0x520 [ 307.664583][ T7237] ext4_acquire_dquot+0x2d9/0x4a0 [ 307.670166][ T7237] dqget+0x778/0xeb0 [ 307.674615][ T7237] __dquot_initialize+0x3b6/0xcb0 [ 307.680193][ T7237] ext4_setattr+0x2ba/0x19f0 [ 307.685336][ T7237] notify_change+0xc74/0xf40 [ 307.690488][ T7237] chown_common+0x486/0x620 [ 307.695545][ T7237] do_fchownat+0x164/0x270 [ 307.700513][ T7237] __x64_sys_lchown+0x81/0x90 [ 307.705741][ T7237] do_syscall_64+0x4c/0xa0 [ 307.710706][ T7237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.717162][ T7237] [ 307.717162][ T7237] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 307.724818][ T7237] __lock_acquire+0x2cf8/0x7c50 [ 307.730204][ T7237] lock_acquire+0x1b4/0x490 [ 307.735239][ T7237] __mutex_lock+0x120/0xaf0 [ 307.740277][ T7237] dquot_commit+0x5a/0x410 [ 307.745221][ T7237] ext4_write_dquot+0x1f0/0x360 [ 307.750610][ T7237] mark_all_dquot_dirty+0xf9/0x400 [ 307.756249][ T7237] __dquot_alloc_space+0x5fc/0xe60 [ 307.761889][ T7237] ext4_mb_new_blocks+0xf74/0x4720 [ 307.767540][ T7237] ext4_ext_map_blocks+0x143c/0x66d0 [ 307.773367][ T7237] ext4_map_blocks+0x9d1/0x1b60 [ 307.778752][ T7237] ext4_getblk+0x1ab/0x6d0 [ 307.783797][ T7237] ext4_bread+0x26/0x170 [ 307.788568][ T7237] ext4_append+0x2c3/0x560 [ 307.793501][ T7237] ext4_add_entry+0x8f0/0xd90 [ 307.798702][ T7237] ext4_add_nondir+0x93/0x270 [ 307.803908][ T7237] ext4_create+0x2e0/0x460 [ 307.808847][ T7237] path_openat+0x1187/0x2e70 [ 307.813977][ T7237] do_filp_open+0x1c1/0x3c0 [ 307.819003][ T7237] do_sys_openat2+0x142/0x490 [ 307.824209][ T7237] __x64_sys_openat+0x135/0x160 [ 307.829583][ T7237] do_syscall_64+0x4c/0xa0 [ 307.834528][ T7237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.840965][ T7237] [ 307.840965][ T7237] other info that might help us debug this: [ 307.840965][ T7237] [ 307.851193][ T7237] Chain exists of: [ 307.851193][ T7237] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 307.851193][ T7237] [ 307.864848][ T7237] Possible unsafe locking scenario: [ 307.864848][ T7237] [ 307.872296][ T7237] CPU0 CPU1 [ 307.877654][ T7237] ---- ---- [ 307.883017][ T7237] lock(&ei->i_data_sem/2); [ 307.887625][ T7237] lock(&s->s_dquot.dqio_sem); [ 307.894996][ T7237] lock(&ei->i_data_sem/2); [ 307.902115][ T7237] lock(&dquot->dq_lock); [ 307.906537][ T7237] [ 307.906537][ T7237] *** DEADLOCK *** [ 307.906537][ T7237] [ 307.914682][ T7237] 4 locks held by syz.4.715/7237: [ 307.919703][ T7237] #0: ffff888025032460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 307.928875][ T7237] #1: ffff888058c40400 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: path_openat+0x7c2/0x2e70 [ 307.939066][ T7237] #2: ffff888058c40288 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x903/0x1b60 [ 307.949000][ T7237] #3: ffffffff8ca74d08 (dquot_srcu){....}-{0:0}, at: __dquot_alloc_space+0x173/0xe60 [ 307.958591][ T7237] [ 307.958591][ T7237] stack backtrace: [ 307.964592][ T7237] CPU: 0 PID: 7237 Comm: syz.4.715 Not tainted 6.1.141-syzkaller #0 [ 307.972573][ T7237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.982635][ T7237] Call Trace: [ 307.985917][ T7237] [ 307.988864][ T7237] dump_stack_lvl+0x168/0x22e [ 307.993553][ T7237] ? load_image+0x3b0/0x3b0 [ 307.998060][ T7237] ? show_regs_print_info+0x12/0x12 [ 308.003277][ T7237] ? print_circular_bug+0x12b/0x1a0 [ 308.008497][ T7237] check_noncircular+0x274/0x310 [ 308.013443][ T7237] ? add_chain_block+0x940/0x940 [ 308.018382][ T7237] ? lockdep_lock+0xdc/0x1e0 [ 308.022977][ T7237] ? _find_first_zero_bit+0xcf/0x100 [ 308.028269][ T7237] __lock_acquire+0x2cf8/0x7c50 [ 308.033139][ T7237] ? add_chain_block+0x940/0x940 [ 308.038094][ T7237] ? verify_lock_unused+0x140/0x140 [ 308.043324][ T7237] ? mark_lock+0x94/0x320 [ 308.047666][ T7237] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 308.053660][ T7237] lock_acquire+0x1b4/0x490 [ 308.058179][ T7237] ? dquot_commit+0x5a/0x410 [ 308.062787][ T7237] ? lockdep_hardirqs_on+0x94/0x140 [ 308.067995][ T7237] ? __might_sleep+0xd0/0xd0 [ 308.072596][ T7237] ? read_lock_is_recursive+0x10/0x10 [ 308.077983][ T7237] __mutex_lock+0x120/0xaf0 [ 308.082497][ T7237] ? dquot_commit+0x5a/0x410 [ 308.087096][ T7237] ? __might_sleep+0xd0/0xd0 [ 308.091697][ T7237] ? dquot_commit+0x5a/0x410 [ 308.096294][ T7237] ? release_firmware_map_entry+0x18a/0x18a [ 308.102196][ T7237] ? mutex_lock_nested+0x10/0x10 [ 308.107151][ T7237] ? ext4_journal_check_start+0x17e/0x240 [ 308.112886][ T7237] dquot_commit+0x5a/0x410 [ 308.117320][ T7237] ext4_write_dquot+0x1f0/0x360 [ 308.122181][ T7237] mark_all_dquot_dirty+0xf9/0x400 [ 308.127311][ T7237] __dquot_alloc_space+0x5fc/0xe60 [ 308.132464][ T7237] ? __dquot_alloc_space+0x173/0xe60 [ 308.137763][ T7237] ext4_mb_new_blocks+0xf74/0x4720 [ 308.142885][ T7237] ? _raw_write_unlock+0x36/0x40 [ 308.147838][ T7237] ? __es_insert_extent+0x1790/0x1790 [ 308.153216][ T7237] ? ext4_find_extent+0x367/0xe00 [ 308.158244][ T7237] ? rcu_is_watching+0x11/0xa0 [ 308.163017][ T7237] ? memcpy+0x3c/0x60 [ 308.167013][ T7237] ? ext4_mb_pa_callback+0xd0/0xd0 [ 308.172145][ T7237] ? ext4_ext_check_overlap+0x401/0x560 [ 308.177691][ T7237] ? ext4_ext_find_goal+0xed/0x1d0 [ 308.182805][ T7237] ext4_ext_map_blocks+0x143c/0x66d0 [ 308.188101][ T7237] ? lockdep_hardirqs_on+0x94/0x140 [ 308.193306][ T7237] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 308.198951][ T7237] ? lock_acquire+0x20f/0x490 [ 308.203638][ T7237] ? ext4_ext_release+0x10/0x10 [ 308.208502][ T7237] ? rwsem_write_trylock+0x12f/0x1b0 [ 308.213794][ T7237] ? ext4_es_lookup_extent+0x443/0xb20 [ 308.219264][ T7237] ext4_map_blocks+0x9d1/0x1b60 [ 308.224125][ T7237] ? ext4_issue_zeroout+0x250/0x250 [ 308.229335][ T7237] ? ext4_map_blocks+0x6da/0x1b60 [ 308.234375][ T7237] ext4_getblk+0x1ab/0x6d0 [ 308.238806][ T7237] ? ext4_get_block_unwritten+0x100/0x100 [ 308.244537][ T7237] ? memset+0x1e/0x40 [ 308.248537][ T7237] ? fscrypt_setup_filename+0x94/0xa40 [ 308.254016][ T7237] ext4_bread+0x26/0x170 [ 308.258262][ T7237] ext4_append+0x2c3/0x560 [ 308.262688][ T7237] ? ext4_init_new_dir+0x570/0x570 [ 308.267816][ T7237] ? lock_chain_count+0x20/0x20 [ 308.272690][ T7237] ext4_add_entry+0x8f0/0xd90 [ 308.277380][ T7237] ? ext4_inc_count+0x1b0/0x1b0 [ 308.282255][ T7237] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 308.287914][ T7237] ext4_add_nondir+0x93/0x270 [ 308.292614][ T7237] ext4_create+0x2e0/0x460 [ 308.297055][ T7237] ? ext4_lookup+0x6d0/0x6d0 [ 308.301660][ T7237] ? inode_permission+0xef/0x480 [ 308.306616][ T7237] ? bpf_lsm_inode_create+0x5/0x10 [ 308.311764][ T7237] ? security_inode_create+0xb3/0x100 [ 308.317151][ T7237] ? ext4_lookup+0x6d0/0x6d0 [ 308.321746][ T7237] path_openat+0x1187/0x2e70 [ 308.326362][ T7237] ? do_filp_open+0x3c0/0x3c0 [ 308.331051][ T7237] do_filp_open+0x1c1/0x3c0 [ 308.335561][ T7237] ? vfs_tmpfile+0x480/0x480 [ 308.340166][ T7237] ? _raw_spin_unlock+0x24/0x40 [ 308.345026][ T7237] ? alloc_fd+0x58f/0x630 [ 308.349372][ T7237] do_sys_openat2+0x142/0x490 [ 308.354066][ T7237] ? do_sys_open+0xe0/0xe0 [ 308.358493][ T7237] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 308.364487][ T7237] ? lock_chain_count+0x20/0x20 [ 308.369347][ T7237] __x64_sys_openat+0x135/0x160 [ 308.374210][ T7237] do_syscall_64+0x4c/0xa0 [ 308.378645][ T7237] ? clear_bhb_loop+0x60/0xb0 [ 308.383340][ T7237] ? clear_bhb_loop+0x60/0xb0 [ 308.388019][ T7237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.393921][ T7237] RIP: 0033:0x7f3b3f18e929 [ 308.398349][ T7237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.418054][ T7237] RSP: 002b:00007f3b40009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 308.426579][ T7237] RAX: ffffffffffffffda RBX: 00007f3b3f3b6240 RCX: 00007f3b3f18e929 [ 308.434569][ T7237] RDX: 000000000000275a RSI: 0000200000000140 RDI: ffffffffffffff9c [ 308.442544][ T7237] RBP: 00007f3b3f210b39 R08: 0000000000000000 R09: 0000000000000000 [ 308.450526][ T7237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.458508][ T7237] R13: 0000000000000000 R14: 00007f3b3f3b6240 R15: 00007ffd4c5b2cc8 [ 308.466487][ T7237] [ 308.470489][ T7237] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #2: comm syz.4.715: corrupted inode contents [ 308.506900][ T7237] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #2: comm syz.4.715: mark_inode_dirty error [ 308.518676][ T7237] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #2: comm syz.4.715: corrupted inode contents [ 308.532701][ T7237] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.715: mark_inode_dirty error [ 308.732399][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 316.917993][ T1277] ieee802154 phy0 wpan0: encryption failed: -22