last executing test programs: 3.26407307s ago: executing program 2 (id=966): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f00000005c0)="63eced8e465c1cff7018a6d28b4b", 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 3.25674222s ago: executing program 1 (id=969): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f0000000280)=ANY=[@ANYBLOB='longad,iocharset=macinuit,anchor=00000000000000002311,adinicb,adinicb,iocharset=iso8859-7,mode=0000000000000000000\x00\x0010,mode=00000000000000000000177,gid=forget,novrs,iocharset=iso8859-15,iocharset=cp936,adinicb,\x00'], 0x1, 0xc4d, &(0x7f0000000f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) symlinkat(&(0x7f0000000100)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 2.760091847s ago: executing program 1 (id=971): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x2, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x54, 0x2, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3d}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40094) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) readv(r0, &(0x7f0000000080), 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000001040), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a0101000000000000000c070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) 2.759918567s ago: executing program 4 (id=972): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x704, &(0x7f0000001880)="$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") syz_read_part_table(0x5e4, &(0x7f0000000000)="$eJzs3D2LXFUYB/D/uXfeFiLrBxBcSCMKRrETF2Oha7og2gnaWqxILMRCdgcVwZcPYCtaGIUQawUFCWKsrERYYiFib2GacGTuy0xAsZlFCfx+xZznnHue57mXe9sz4c5Wd5Nakuvd7KO2GybNw33wW/L2NFm+8EQy7xOmQ2JJ8tzlJ5+6sHexzNdrq9Xj4ep802U2jJPsDdGXk3xw+eCdLj5OyVGGMNPPZ5ms9tY+78O/3/TNkrbbw/9s8nXtX8QsP+aLJIelXb38ebLMJ8ndWXT7ziVpa63daz5OdpJ2/VVs4cr+teXjQ7yT4Uub9rOjd0t9aLg2Ta21Njk6O2a2yT2Pnbv0T0W7/GX3eONSrXV6ZsxtNhcOb80mw+yR7345ynKxrp7abEqe7CSvnDzzYHcnpa8x3f7xAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Zfe9ev83zTg53/2Wdfz0p2k2W49z7zreW5xS/yv713bffOtSk9f3X/rp5Td+Pfg9fyRp2xycSebrfS/2w9X3umEyrLZb9z+81cw++/jbnfXCULok35/9+WYdO5wM42uP3pa832zdHwAAAAAAAAAAAAAAAAAAAFau5sLexSbPfnWj5PlsjvvXLJJSxukiqbXWP2tnPPz/w3gOP9dvpKySUsvt1c8nu3cldf7+A93fCvSJtdZJ16L8J4/Iv/grAAD//x/vY/E=") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) 2.69273483s ago: executing program 3 (id=973): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000400)={0x0, 0x81, 0x20, 0xfea, 0xfffffffffffffffa}, &(0x7f0000000440)=0x18) 2.261552783s ago: executing program 0 (id=974): syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2b900", 0x44, 0x2f, 0x1, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x289, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x2, {0x6, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r1}, 0x14) 2.218288715s ago: executing program 3 (id=975): syz_open_dev$vim2m(&(0x7f0000002c80), 0x7, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.memory_migrate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x26020480) r6 = inotify_init1(0x0) r7 = inotify_add_watch(r6, &(0x7f00000002c0)='.\x00', 0x20000000) r8 = dup(r6) r9 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r9, &(0x7f0000ff7000/0x3000)=nil, 0x400c) inotify_rm_watch(r8, r7) sendfile(r1, r1, 0x0, 0x5) 2.217913655s ago: executing program 4 (id=976): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="3e1c1adaceb67a6f219b124f8d60f2f9", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000004000)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="c79502add57d49847de3ab118305d99978c85c7b7b96c7c069f00b3e4755c5d436dd74d97202a2ed84e17c6ba3e84ca0dc90a83058b4ef0fe3f40e330df37d95c53412674471d5d920148e7866659196352ffb2cc02c92838ce284123642b571d01fe9affdc3580242c448f0a5fcfc781de3432af77cdba78b8ad1b67fb644868846791cd447584b358a3435ac55", 0x8e}, {&(0x7f0000000100)="b26e6655a3a04e1f776040dc22be9dcc2634d9f5244a120d5d322b8680091a6ce0eb0831fde9a81647cfd1908d8f5afeb5960cdfc53fed3684bae72318987e52cfdffbb7523611ed28c72bf01ba099fafdca76050b58ebfbeae15bf178d1b24e451ce99544771b107945d47a4889ddaebed8f44921d643c2c6b6f8655ee3cc75290e633c58e45c3a35307d0c0515e0a2c56f97b9983bc6be89d07425ef82e4b115c527aa9c7d03f1a26b3ad52d7ce216a12d570be43b7772dd2b58a7c3033a3e03759d231b8abdd9ddde35f5058e317952216f287500a7204db63577410fa6ada955", 0xe2}, {&(0x7f00000003c0)="b207ae502f6be6a13b39d48ce4e69bd00a6d417708ddedcfe085650ed1c8925b64f3f9436c3c5e8194e172f8fb9aa2719cdebacbf83f3dfc799db95b9acbd64de36a577bb9645ee51602b5bf08436b5efc1279382e4746e3965f044d9864ca3a30660e3c63a75a83a08d4f0e5f848823a2ea125128ad55fcaa94ef4f497a39621aac41b8044b6da6d1c6575402288b0bfd4fe5432bdb10e27de75e310d76bc66bca0bbb239b3e5fe04207052d57cb70689a777f2543a1e73d5ec77aca1c38b683e326801dc1ea4", 0xc7}], 0x3, 0x0, 0x0, 0x4008000}], 0x1, 0x4040010) 2.217285575s ago: executing program 2 (id=977): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000", @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80000, 0x0) read(r0, 0x0, 0x0) 2.196667246s ago: executing program 0 (id=978): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) 2.062510943s ago: executing program 4 (id=979): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) close(0x3) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6}]}}}}}}}, 0x0) 2.015833475s ago: executing program 2 (id=980): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x800, &(0x7f0000000680)={[{@debug}, {@nolazytime}, {@dax_inode}, {@jqfmt_vfsv0}, {@dioread_lock}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@test_dummy_encryption}]}, 0x3, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) pwrite64(r0, &(0x7f0000005c80)="a9", 0x1, 0xc00000) write$tun(r0, &(0x7f0000000680)=ANY=[], 0x3) r1 = socket(0x15, 0x5, 0x0) getpeername$netlink(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9b5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90501b0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc5867dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eafeffffffffffffff000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99a40b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23eb8c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee36cdad078fc88d17cbde37a2270f90a60afe8548d4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd10459e2f2e267f82bafd5b4c7b481ea5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 1.659022194s ago: executing program 0 (id=981): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet(0x2, 0x802, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000080)={[{@oldalloc}, {@dax}, {@minixdf}]}, 0x1, 0x455, &(0x7f00000004c0)="$eJzs3MtvG0UYAPBv7SR901DKo6WFQEFUPJImfdADFxBIHEBCgkMRp5C4VajboCZIJIogcAhHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvU4dx3aT1KlD9/eTtp3xTDLzeXfi2RnbAeTWUPpPErE3Iv6IiP217OoKQ7X/bi4vTPyzvDCRRKXy9t9Jtd6N5YWJetX6z+2pZSqVLL+jRbtL70WMl8ulK1l+ZPbShyMzc/MvTF0av1C6ULo8dvbsqZNHB86Mne5KnGlcNw5/Mn3k0OvvXn1z4tzV93/5Lu3v3qy8MY5uGao9uy093e3GemxfQzrp62FH2JBiRKSnq786/vdHMXatlO2P1z7vaeeALVWpVCqtXp8zixXgHpZEr3sA9Eb9hT69/60eleQuzTy2h+sv126A0thvZketpC8KWZ3+pvvbbhqKiHOL/36dHrFF6xAAAI1+SOc/zzfM/1bmH4V4qKHefdkeymBE3B8RByLigYg4GBEPRlTrPhwRj2yw/eYdkrXzn8K1TQW2Tun876Vsb2v1/K8++4vBYpbbV42/Pzk/VS6dyJ6T49G/I82Pdmjjx1d//7JdWeP8Lz3S9utzwawf1/qaFugmx2fH7yTmRtc/izjc1yr+JOrbOOkdwaGIOLzJNqae/fZIu7Lbx99BF/aZKt9EPFM7/4vRFH9d0nZ/cvTFM2OnR3ZGuXRipH5VrPXrb0tvtWv/juLvgvT87255/a/EP5jsjJiZm79Y3a+d2XgbS39+0faeZrPX/0DyTjU9kD328fjs7JXRiIHkjbWPj9362Xq+Xj+N//ix1uP/QNx6Jh6NiPQiPhoRj0XE41nfn4iIJyPiWIf4f37lqQ82Hn+HVfkuSuOfvN35j8bz33whLLYoWp0oXvzp+3btr+/8n6qmjmePrOfvX4futAoCAAAA7mmF6nvgk8LwSrpQGB6uvYf/YOwulKdnZp87P/3R5cnae+UHo79wfqpc2rWyHlxbDx3N1obr+bGm/Mls3fir4q5qfnhiujzZ6+Ah5/a0Gf+pv4q97h2w5XxeC/LL+If8Mv4hrxLjH3LM+If8ajX+P+1BP4C7z+s/5JfxD/ll/EN+Gf+QS20/G19oXyQhMTcfhW3Rje2WiMWI7v7mvnV/mcXmEkm0LOr8dyNf3xIKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8n/0XAAD//2ru3wE=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)=ANY=[]) 1.645062885s ago: executing program 1 (id=982): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x4780a, &(0x7f0000000680)=ANY=[@ANYRES64, @ANYRESOCT], 0x1, 0x1543, &(0x7f0000001f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf5f) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x2a}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.501418812s ago: executing program 4 (id=983): unshare(0x20000400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$eJzs3M1vFOUfAPDv7G7hx2v3h/gCoqJoJL60tKBy8KKJiQdNTPSAx1oKQRZqaE2ENLYYghcTJeFuTLyY+Bd48kTUk4lXvBsSYriAelkz3dllu91tt91tt3U/n2To83Sf3ef7nZln55kZpgH0rYPpP0nEzoi4GRGDEZGrb7CtsqTt7t2ZGf/rzsx4EuXyu38m6dvi7p2Z8WrTJPu5o1IppB+Uu5JEsUm/UxcvnR0rlSYuZPXh6XMfDU9dvPTimXNjpydOT5wfPX782NGRV14efakreaYx3d3/6eSBfW++f+3t8RPXPvj5+0q85fL1G0cW5NEdAxExU1snjZ7pbmc9t6uunBR6GAgrsjUiCtneejMGI39ld+21wXjjs54GB6ypcrlcHm398lwZ+A9LotcRAL1RPdCn57/VpX4C8M/aTj967vZrlROgNO972VJ5pRCXszYDDee33XQwIk7M/f11ukTD9RQAgLXwYzr/eaHJ/K8Y8VBdu93ZvaFiRPw/IvZExAMRsTciHoxK24cj4pEV9n+wob54/pO7tbrM2pPO/17N7m0tnP/V7oIV81lt13z+A8mpM6WJI9k6ORwDW9P6SNNPTyLm0p+/fdmq//r5X7qk/VfnglkctwpbF77n5Nj0WMeJZ25fjthfaJZ/EoX7WcS+iNi/yj7OPPfdgYW/yddKy+e/hC7cZyp/E/FsZfvPRUP+VcnS9yeH/xeliSPD1b1isV9+vfpOq/47yr8L0u2/ven+X8u/mNTfr51a9BFbluvj6u+ftzynWe3+vyV5b0Hnn4xNT18YidiSvLX493UXuKv1avs0/8OHmo//PXF/TTwaEelO/FhEPB4RT2SxPxkRT0XEoSXy/+n1pz9cff5rK81/dkXbf+WF/NkbP7Tqv73tf6xamQ+qne+/dgPsZN0BAADAZpGLiJ2R5IZq5VxuaKjy/+X3xvZcaXJq+vlTkx+fP1l5RqAYA7nqla7BuuuhI9m14Wp9NKvPZvWj2XXj6/lt8/Wh8cnSyV4nD31uR4vxn/oj3+vogDXneS3oX8Y/9K/Vj3/fHLDZLTOKc+sVB7D+HMWhfzUb/7M9iANYf47/0L9q4/+rNhrXPe7V+PAmsPk4/kP/Mv6hL3XyXP+GKMS3EUu3STZKqCsqfNHJ2wvrEGHkNsaKWsfCaD6ih2EU2v2rFnGxPNtxp73+ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiOfwMAAP//Oyno9g==") timer_settime(0x0, 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) 1.464736314s ago: executing program 0 (id=984): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf6bf531d9ec214627c11430c1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) recvmmsg(r1, &(0x7f0000005e40), 0x2, 0x40012101, 0x0) 1.391687938s ago: executing program 1 (id=985): syz_open_dev$vim2m(&(0x7f0000002c80), 0x7, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x26020480) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f00000002c0)='.\x00', 0x20000000) r6 = dup(r4) r7 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r7, &(0x7f0000ff7000/0x3000)=nil, 0x400c) inotify_rm_watch(r6, r5) sendfile(r0, r0, 0x0, 0x5) 1.089738384s ago: executing program 0 (id=986): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='memory=low,background_gc=off,noquota,inline_dentry,data_flush,disable_roll_forward,noinline_xattr,discard,checkpoint=disable,user_xattr,atgc,resuid=', @ANYRESDEC=0x0, @ANYBLOB="2c6a71666d743d76667376312c7573726a71756f74613d2d29242d2e25272a2c2c00a40988e362019a69db5cb2a8b125934e5652c7c1af7aa1b29a3326b2ca0000000000"], 0xff, 0x5512, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) fallocate(r1, 0x20, 0x4000, 0x3000080) 1.009488188s ago: executing program 3 (id=987): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x101}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$inet_sctp(r1, &(0x7f0000000840)={&(0x7f00000001c0)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000480)="bafcd7692c2278c46fcc3450e378807c8d44d9980204a0e3f68ff7eb5ccd34e549ebd354dd631dc3c191fa8a166a8474bda794c482d4e55aa8b0b604b9fca84c46200a5620", 0x45}], 0x1, 0x0, 0x0, 0x4000044}, 0x4000004) read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0xfdef) 695.207894ms ago: executing program 2 (id=988): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES32], 0xffdd) 632.106698ms ago: executing program 4 (id=989): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) 631.455768ms ago: executing program 3 (id=990): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x6a, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='c'], 0x45) sendmmsg$alg(r1, &(0x7f0000005380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880), 0x0, 0xc000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x118}], 0x2, 0x20049001) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) 602.130529ms ago: executing program 3 (id=991): syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@sys_tz}, {@namecase}, {@discard}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@discard}, {@dmask={'dmask', 0x3d, 0x11f1}}, {@keep_last_dots}, {@errors_continue}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x41, 0x1528, &(0x7f0000000580)="$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") bind$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xb8) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./bus/file0\x00', 0x10, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) 601.091149ms ago: executing program 4 (id=992): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x2, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x54, 0x2, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3d}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40094) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) readv(r0, &(0x7f0000000080), 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000001040), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a0101000000000000000c070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) 492.292665ms ago: executing program 2 (id=993): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) 111.839494ms ago: executing program 1 (id=994): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x519, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xfffffff1, 0x800, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xf698], [0x1, 0x4, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x9, 0xfffffffd, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x2, 0x0, 0x0, 0x31c, 0x1, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0xc8a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffc, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x7fffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7], [0x0, 0xfffffffe, 0xff, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3f35e3b2, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000006480)) 61.630307ms ago: executing program 3 (id=995): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0), 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000700)={0x0, [[0x9ef8, 0x100, 0x0, 0x8000, 0x0, 0xfffffffe], [0xfffe, 0x2400000, 0x0, 0x0, 0x0, 0x4, 0x2], [0x7, 0x4, 0x0, 0x0, 0x6466]], '\x00', [{0x36, 0x3}, {0x3, 0xfffffffb}, {0x0, 0x5}, {0x1, 0x80000000}, {0x0, 0x80, 0x0, 0x1, 0x1}, {0xffffffff, 0x5f}, {}, {0x5, 0x6}, {0x3, 0x5}, {0x0, 0xffffffff}, {0x0, 0x12}, {0x5379e1f4}], '\x00', 0x1000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='securityfs\x00', 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b') r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x639) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) 59.299277ms ago: executing program 2 (id=996): openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x28403, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x8900) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 29.985139ms ago: executing program 0 (id=997): syz_open_dev$vim2m(&(0x7f0000002c80), 0x7, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.memory_migrate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x26020480) r6 = inotify_init1(0x0) r7 = inotify_add_watch(r6, &(0x7f00000002c0)='.\x00', 0x20000000) r8 = dup(r6) r9 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r9, &(0x7f0000ff7000/0x3000)=nil, 0x400c) inotify_rm_watch(r8, r7) sendfile(r1, r1, 0x0, 0x5) 0s ago: executing program 1 (id=998): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x800, &(0x7f0000000680)={[{@debug}, {@nolazytime}, {@dax_inode}, {@jqfmt_vfsv0}, {@dioread_lock}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@test_dummy_encryption}]}, 0x3, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) pwrite64(r0, &(0x7f0000005c80)="a9", 0x1, 0xc00000) write$tun(r0, &(0x7f0000000680)=ANY=[], 0x3) r1 = socket(0x15, 0x5, 0x0) getpeername$netlink(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="b9ff03006044238cb89e14f086dd1bff88a800008100630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) kernel console output (not intermixed with test programs): ed=8 got=1 [ 102.538004][ T5375] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 102.541347][ T5375] EXT4-fs (loop4): mount failed [ 102.605915][ T5376] EXT4-fs (loop3): Test dummy encryption mode enabled [ 102.690873][ T5376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 102.692270][ T5376] System zones: 1-3, 19-19, 35-36 [ 102.693448][ T5376] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 102.695049][ T5376] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.806198][ T5383] loop7: detected capacity change from 0 to 7 [ 102.938555][ T5384] loop2: detected capacity change from 0 to 32768 [ 103.078946][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 103.080597][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 103.085962][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 103.087484][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 103.102648][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 103.104095][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 103.111968][ T5388] loop0: detected capacity change from 0 to 256 [ 104.543248][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 104.544804][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.547684][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 104.548468][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 104.550357][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.551959][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 104.553374][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.554803][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 104.556530][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.557906][ T5383] ldm_validate_partition_table(): Disk read failed. [ 104.568525][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 104.570107][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.577602][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 104.579333][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.584030][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 104.585854][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.596868][ T5383] Dev loop7: unable to read RDB block 0 [ 104.603354][ T5383] loop7: unable to read partition table [ 104.604360][ T5383] loop7: partition table beyond EOD, truncated [ 104.605387][ T5383] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 104.622982][ T5381] ldm_validate_partition_table(): Disk read failed. [ 104.624366][ T5381] Dev loop7: unable to read RDB block 0 [ 104.625439][ T5381] loop7: unable to read partition table [ 104.626379][ T5381] loop7: partition table beyond EOD, truncated [ 104.643102][ T5388] FAT-fs (loop0): Directory bread(block 64) failed [ 104.644199][ T5388] FAT-fs (loop0): Directory bread(block 65) failed [ 104.645312][ T5388] FAT-fs (loop0): Directory bread(block 66) failed [ 104.646425][ T5388] FAT-fs (loop0): Directory bread(block 67) failed [ 104.655737][ T5388] FAT-fs (loop0): Directory bread(block 68) failed [ 104.656832][ T5388] FAT-fs (loop0): Directory bread(block 69) failed [ 104.659848][ T5388] FAT-fs (loop0): Directory bread(block 70) failed [ 104.660888][ T5388] FAT-fs (loop0): Directory bread(block 71) failed [ 104.680666][ T5388] FAT-fs (loop0): Directory bread(block 72) failed [ 104.684705][ T5388] FAT-fs (loop0): Directory bread(block 73) failed [ 105.242549][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 105.266007][ T5400] loop4: detected capacity change from 0 to 512 [ 105.270586][ T5400] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.121613][ T5400] EXT4-fs (loop4): 1 truncate cleaned up [ 106.122620][ T5400] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 106.142237][ T5413] loop1: detected capacity change from 0 to 128 [ 106.423841][ T5414] Injecting memory failure for pfn 0x1402b1 at process virtual address 0x20ffe000 [ 106.830495][ T5414] Memory failure: 0x1402b1: recovery action for dirty LRU page: Recovered [ 106.831842][ T5414] Injecting memory failure for pfn 0x1402a3 at process virtual address 0x20fff000 [ 106.833534][ T5414] Memory failure: 0x1402a3: recovery action for dirty LRU page: Recovered [ 107.082591][ T5423] loop2: detected capacity change from 0 to 128 [ 107.096375][ T5423] VFS: could not find a valid V7 on loop2. [ 107.108799][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 107.393682][ T5431] ubi31: attaching mtd0 [ 107.394740][ T5431] ubi31: scanning is finished [ 107.536210][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 107.681506][ T5431] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 107.682825][ T5431] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 107.684128][ T5431] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 107.685266][ T5431] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 107.686563][ T5431] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 107.687905][ T5431] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 107.689598][ T5431] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2474831306 [ 107.691192][ T5431] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 107.698260][ T5433] ubi31: background thread "ubi_bgt31d" started, PID 5433 [ 107.737200][ T5437] loop2: detected capacity change from 0 to 8 [ 107.742531][ T5437] Page size > filesystem block size (96). This is currently not supported! [ 107.768745][ T5428] loop4: detected capacity change from 0 to 8192 [ 107.781412][ T5428] REISERFS warning (device loop4): super-6503 reiserfs_getopt: the option "nouser_xattr" does not require an argument [ 107.781412][ T5428] [ 108.042525][ T5446] ubi: mtd0 is already attached to ubi31 [ 108.060971][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 108.394395][ T5451] loop3: detected capacity change from 0 to 128 [ 108.400108][ T5451] EXT4-fs (loop3): Test dummy encryption mode enabled [ 108.408134][ T5451] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 108.412577][ T5451] System zones: 1-3, 19-19, 35-36 [ 108.416783][ T5451] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 108.420481][ T5443] loop4: detected capacity change from 0 to 32768 [ 108.421886][ T5451] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.441466][ T5443] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.195 (5443) [ 108.521201][ T5443] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 108.522990][ T5443] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 108.524581][ T5443] BTRFS info (device loop4): force zlib compression, level 3 [ 108.525837][ T5443] BTRFS info (device loop4): turning on flush-on-commit [ 108.542842][ T5443] BTRFS info (device loop4): max_inline at 0 [ 108.543884][ T5443] BTRFS info (device loop4): using free space tree [ 108.923689][ T5466] loop2: detected capacity change from 0 to 8 [ 108.927684][ T5466] unable to read xattr id index table [ 109.058135][ T5443] BTRFS info (device loop4): enabling ssd optimizations [ 109.089438][ T5477] loop2: detected capacity change from 0 to 4096 [ 109.454493][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 109.505642][ T4331] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 109.526846][ T5486] loop3: detected capacity change from 0 to 164 [ 109.563618][ T5486] Unable to read rock-ridge attributes [ 109.660885][ T5477] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 109.954234][ T5497] Injecting memory failure for pfn 0x13b2c7 at process virtual address 0x20ffe000 [ 110.162031][ T5497] Memory failure: 0x13b2c7: recovery action for dirty LRU page: Recovered [ 110.163587][ T5497] Injecting memory failure for pfn 0x13b2c0 at process virtual address 0x20fff000 [ 110.375524][ T5497] Memory failure: 0x13b2c0: recovery action for dirty LRU page: Recovered [ 110.495696][ T5505] loop1: detected capacity change from 0 to 4096 [ 110.979205][ T5506] ubi: mtd0 is already attached to ubi31 [ 110.982675][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 111.000606][ T5505] ntfs: (device loop1): ntfs_read_inode_mount(): MST fixup failed. $MFT is corrupt. [ 111.002272][ T5505] ntfs: (device loop1): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 111.188443][ T5518] ubi: mtd0 is already attached to ubi31 [ 111.193348][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 111.549942][ T5521] loop3: detected capacity change from 0 to 512 [ 111.561889][ T5521] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 111.565586][ T4675] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop4 scanned by udevd (4675) [ 111.595049][ T4312] blk_print_req_error: 26 callbacks suppressed [ 111.595071][ T4312] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.686145][ T5528] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 111.690849][ T5528] vxfs: unsupported VxFS version (-1232326277) [ 112.176297][ T4336] Bluetooth: hci4: Invalid connection link type handle 0x00c8 [ 112.194334][ T5526] set_capacity_and_notify: 1 callbacks suppressed [ 112.194343][ T5526] loop3: detected capacity change from 0 to 32768 [ 112.207291][ T5526] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 112.695715][ T5477] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 112.757969][ T5545] loop1: detected capacity change from 0 to 8192 [ 112.775828][ T5545] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 112.782929][ T5545] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 112.784539][ T5545] REISERFS (device loop1): using ordered data mode [ 112.785701][ T5545] reiserfs: using flush barriers [ 112.851004][ T5545] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 112.858379][ T5545] REISERFS (device loop1): checking transaction log (loop1) [ 112.863693][ T5545] REISERFS warning (device loop1): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 112.870180][ T5545] REISERFS warning (device loop1): reiserfs_fill_super: corrupt root inode, run fsck [ 112.879608][ T5540] loop4: detected capacity change from 0 to 32768 [ 112.881223][ T5540] gfs2: Bad value for 'quota_quantum' [ 113.302087][ T5173] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 113.918424][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 114.165831][ T5570] loop3: detected capacity change from 0 to 128 [ 114.185406][ T5570] FAT-fs (loop3): Unrecognized mount option "01777777777777777777777ÿ0xffffffffffffffffÿÿÿÿÿÿÿÿ00000000000000000000000" or missing value [ 114.670202][ T5573] ubi: mtd0 is already attached to ubi31 [ 114.673801][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 116.180180][ T5602] loop4: detected capacity change from 0 to 512 [ 116.181712][ T5602] EXT4-fs: user quota file already specified [ 116.271089][ T5173] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.713696][ T4336] Bluetooth: Wrong link type (-71) [ 116.746984][ T5609] loop4: detected capacity change from 0 to 16 [ 116.781687][ T5609] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16300) [ 117.488262][ T5618] ubi: mtd0 is already attached to ubi31 [ 117.588571][ T4329] Bluetooth: Frame is too long (len 12, expected len 4) [ 117.617067][ T5613] loop4: detected capacity change from 0 to 8192 [ 117.631114][ T5613] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 117.636865][ T5613] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 117.638766][ T5613] REISERFS (device loop4): using ordered data mode [ 117.641976][ T5613] reiserfs: using flush barriers [ 117.645210][ T5613] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.654030][ T5613] REISERFS (device loop4): checking transaction log (loop4) [ 117.657855][ T5613] REISERFS warning: reiserfs-5090 is_tree_node: node level 0 does not match to the expected one 1 [ 117.666644][ T5613] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 0. Fsck? [ 117.668925][ T5613] REISERFS (device loop4): Remounting filesystem read-only [ 117.719373][ T5613] REISERFS error (device loop4): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 117.804164][ T5623] loop1: detected capacity change from 0 to 4096 [ 117.867109][ T5630] loop3: detected capacity change from 0 to 512 [ 117.890913][ T5623] ntfs3: loop1: Failed to load $Extend. [ 117.895840][ T5630] EXT2-fs (loop3): (no)acl options not supported [ 117.911105][ T5630] EXT2-fs (loop3): bad geometry: block count 1024 exceeds size of device (256 blocks) [ 118.410880][ T5633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.414363][ T5633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.505732][ T5632] ceph: No mds server is up or the cluster is laggy [ 118.509143][ T5633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.525918][ T4665] libceph: connect (1)[c::]:6789 error -22 [ 118.528127][ T4665] libceph: mon0 (1)[c::]:6789 connect error [ 118.532097][ T5643] loop3: detected capacity change from 0 to 8192 [ 118.584532][ T5638] loop4: detected capacity change from 0 to 32768 [ 118.602174][ T5638] *** Log Is Dirty ! *** [ 118.603246][ T5638] lmLogInit: exit(-22) [ 118.604112][ T5638] lmLogOpen: exit(-22) [ 118.606190][ T5643] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 118.614742][ T5643] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 118.616376][ T5643] REISERFS (device loop3): using ordered data mode [ 118.617624][ T5643] reiserfs: using flush barriers [ 118.679111][ T5643] REISERFS warning (device loop3): sh-458 journal_init_dev: cannot init journal device unknown-block(2304,0): -6 [ 118.681527][ T5643] REISERFS warning (device loop3): sh-462 journal_init: unable to initialize journal device [ 118.920512][ T5658] NILFS (nullb0): couldn't find nilfs on the device [ 119.299102][ T5653] securityfs: Unknown parameter '' [ 119.368546][ T5653] Injecting memory failure for pfn 0x138cc7 at process virtual address 0x20000000 [ 119.386668][ T5653] Memory failure: 0x138cc7: recovery action for dirty LRU page: Recovered [ 119.388503][ T5653] Injecting memory failure for pfn 0x137d91 at process virtual address 0x20001000 [ 119.391904][ T5653] Memory failure: 0x137d91: recovery action for dirty LRU page: Recovered [ 119.393321][ T5653] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 119.395009][ T5653] Memory failure: 0x225a04: already hardware poisoned [ 120.069473][ T5671] ubi: mtd0 is already attached to ubi31 [ 120.097090][ T4329] Bluetooth: Frame is too long (len 12, expected len 4) [ 120.615892][ T5678] securityfs: Unknown parameter '' [ 120.617930][ T5678] Injecting memory failure for pfn 0x138fa2 at process virtual address 0x20000000 [ 120.621412][ T5678] Memory failure: 0x138fa2: recovery action for dirty LRU page: Recovered [ 120.622747][ T5678] Injecting memory failure for pfn 0x137ff9 at process virtual address 0x20001000 [ 120.624324][ T5678] Memory failure: 0x137ff9: recovery action for dirty LRU page: Recovered [ 120.625697][ T5678] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 120.627160][ T5678] Memory failure: 0x225a04: already hardware poisoned [ 121.404905][ T5690] loop3: detected capacity change from 0 to 128 [ 121.501839][ T5690] EXT4-fs (loop3): Test dummy encryption mode enabled [ 121.506339][ T5689] loop1: detected capacity change from 0 to 4096 [ 121.517918][ T5695] loop4: detected capacity change from 0 to 512 [ 121.520491][ T5689] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 121.523524][ T5690] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 121.525028][ T5690] System zones: 1-3, 19-19, 35-36 [ 121.526650][ T5689] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 121.528015][ T5690] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 121.949518][ T5698] Injecting memory failure for pfn 0x1391a2 at process virtual address 0x20ffe000 [ 122.194619][ T5698] Memory failure: 0x1391a2: recovery action for dirty LRU page: Recovered [ 122.196071][ T5689] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 122.196156][ T5698] Injecting memory failure for pfn 0x1391a3 at process virtual address 0x20fff000 [ 122.199094][ T5689] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 122.200212][ T5695] EXT2-fs (loop4): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 122.203912][ T5698] Memory failure: 0x1391a3: recovery action for dirty LRU page: Recovered [ 122.208804][ T5689] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 122.214307][ T5690] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.216386][ T5689] ntfs: volume version 3.1. [ 122.220778][ T5689] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 122.224848][ T5689] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 122.232179][ T5689] ntfs: (device loop1): ntfs_read_locked_attr_inode(): Found compressed non-data or named data attribute. Please report you saw this message to linux-ntfs-dev@lists.sourceforge.net [ 122.268318][ T5689] ntfs: (device loop1): ntfs_read_locked_attr_inode(): Failed with error code -5 while reading attribute inode (mft_no 0x5, type 0xb0, name_len 4). Marking corrupt inode and base inode 0x5 as bad. Run chkdsk. [ 122.272245][ T5695] EXT2-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 122.277018][ T5689] ntfs: (device loop1): ntfs_read_locked_inode(): Failed to get bitmap attribute. [ 122.301578][ T5695] ext2 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.603407][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 122.670804][ T5708] Injecting memory failure for pfn 0x13903e at process virtual address 0x20000000 [ 122.672836][ T5708] Memory failure: 0x13903e: recovery action for dirty LRU page: Recovered [ 122.698432][ T5708] Injecting memory failure for pfn 0x121dc3 at process virtual address 0x20001000 [ 122.925002][ T5719] ubi: mtd0 is already attached to ubi31 [ 122.938543][ T4329] Bluetooth: Frame is too long (len 12, expected len 4) [ 123.204661][ T5708] Memory failure: 0x121dc3: recovery action for dirty LRU page: Recovered [ 123.206329][ T5708] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 123.207925][ T5708] Memory failure: 0x225a04: already hardware poisoned [ 123.276550][ T5723] loop3: detected capacity change from 0 to 512 [ 123.288623][ T5723] EXT4-fs: Ignoring removed orlov option [ 123.293304][ T5723] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.307405][ T5723] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #16: comm syz.3.273: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 123.313039][ T5723] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.273: couldn't read orphan inode 16 (err -117) [ 123.315292][ T5723] EXT4-fs (loop3): 1 orphan inode deleted [ 123.316396][ T5723] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.350830][ T4329] Bluetooth: hci3: link tx timeout [ 123.352296][ T4329] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.359534][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 123.850903][ T5740] loop4: detected capacity change from 0 to 8 [ 123.862987][ T5740] unable to read inode lookup table [ 124.012120][ T5729] loop3: detected capacity change from 0 to 32768 [ 124.050462][ T5729] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 124.077826][ T5729] XFS (loop3): Quotacheck needed: Please wait. [ 124.128078][ T5746] loop1: detected capacity change from 0 to 32768 [ 124.142670][ T4918] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x258/0xe3c, inode 0x1803 dinode [ 124.160440][ T4918] XFS (loop3): Unmount and run xfs_repair [ 124.163994][ T5746] (syz.1.282,5746,0):ocfs2_find_slot:468 ERROR: no free slots available! [ 124.165593][ T5746] (syz.1.282,5746,0):ocfs2_mount_volume:1808 ERROR: status = -22 [ 124.167025][ T4918] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 124.173794][ T5746] (syz.1.282,5746,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 68 [ 124.175826][ T4918] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 124.181361][ T4918] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 124.186729][ T4918] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 124.205807][ T5746] (syz.1.282,5746,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 124.207684][ T4918] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 124.218260][ T4918] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 124.241796][ T4918] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 124.250490][ T5761] Injecting memory failure for pfn 0x13a1e6 at process virtual address 0x20000000 [ 124.377216][ T4329] Bluetooth: hci3: link tx timeout [ 124.378357][ T4329] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.382522][ T5761] Memory failure: 0x13a1e6: recovery action for dirty LRU page: Recovered [ 124.384078][ T5761] Injecting memory failure for pfn 0x138e0e at process virtual address 0x20001000 [ 124.385628][ T5761] Memory failure: 0x138e0e: recovery action for dirty LRU page: Recovered [ 124.387700][ T4918] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 124.389346][ T4918] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 124.402886][ T5729] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 124.426358][ T5761] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 124.436293][ T5761] Memory failure: 0x225a04: already hardware poisoned [ 124.467957][ T4321] XFS (loop3): Unmounting Filesystem [ 124.507816][ T4329] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 124.598485][ T5774] capability: warning: `syz.2.291' uses 32-bit capabilities (legacy support in use) [ 124.950663][ T5771] loop4: detected capacity change from 0 to 32768 [ 125.358790][ T4329] Bluetooth: hci3: command 0x0406 tx timeout [ 125.430101][ T5789] loop1: detected capacity change from 0 to 64 [ 125.439615][ T4336] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 125.441994][ T4336] Bluetooth: hci4: Injecting HCI hardware error event [ 125.444381][ T4329] Bluetooth: hci4: hardware error 0x00 [ 125.471481][ T5789] hfs: get root inode failed [ 125.562771][ T5797] Injecting memory failure for pfn 0x13ffce at process virtual address 0x20000000 [ 125.564520][ T5797] Memory failure: 0x13ffce: recovery action for dirty LRU page: Recovered [ 125.565959][ T5797] Injecting memory failure for pfn 0x13ffcf at process virtual address 0x20001000 [ 125.567650][ T5797] Memory failure: 0x13ffcf: recovery action for dirty LRU page: Recovered [ 125.569203][ T5797] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 125.570617][ T5797] Memory failure: 0x225a04: already hardware poisoned [ 125.576659][ T5791] loop3: detected capacity change from 0 to 32768 [ 125.582846][ T5791] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.289 (5791) [ 125.592099][ T5791] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 125.594461][ T5791] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 125.596082][ T5791] BTRFS info (device loop3): setting nodatasum [ 125.597620][ T5791] BTRFS info (device loop3): force zlib compression, level 3 [ 125.604259][ T5791] BTRFS warning (device loop3): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 125.607816][ T5791] BTRFS error (device loop3): support for check_integrity* not compiled in! [ 125.612770][ T5791] BTRFS error (device loop3): open_ctree failed: -22 [ 125.650098][ T4675] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by udevd (4675) [ 125.826269][ T5794] loop4: detected capacity change from 0 to 32768 [ 126.058283][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.059381][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.116269][ T5824] loop2: detected capacity change from 0 to 2048 [ 126.132420][ T5794] XFS (loop4): Mounting V5 Filesystem [ 126.156386][ T5824] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.308: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 126.161013][ T5824] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.308: Bad quota inode: 4, type: 1 [ 126.163506][ T5824] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.170520][ T5827] loop1: detected capacity change from 0 to 2048 [ 126.195530][ T5824] EXT4-fs (loop2): mount failed [ 126.202612][ T5827] NILFS (loop1): The specified checkpoint is not a snapshot (checkpoint number=1) [ 126.207988][ T5794] XFS (loop4): Ending clean mount [ 126.289575][ T4331] XFS (loop4): Unmounting Filesystem [ 126.383509][ T5848] securityfs: Unknown parameter '' [ 126.384896][ T5848] Injecting memory failure for pfn 0x125bba at process virtual address 0x20000000 [ 126.387219][ T5848] Memory failure: 0x125bba: recovery action for dirty LRU page: Recovered [ 126.390366][ T5848] Injecting memory failure for pfn 0x13a6e5 at process virtual address 0x20001000 [ 126.398089][ T5848] Memory failure: 0x13a6e5: recovery action for dirty LRU page: Recovered [ 126.410651][ T5848] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 126.412321][ T5848] Memory failure: 0x225a04: already hardware poisoned [ 127.405688][ T5852] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.317 (5852) [ 127.474045][ T5926] ubi: mtd0 is already attached to ubi31 [ 127.492058][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 127.752454][ T4329] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 127.776724][ T5852] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.806137][ T5852] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 127.817318][ T5852] BTRFS info (device loop2): setting nodatasum [ 127.821347][ T5852] BTRFS info (device loop2): force zlib compression, level 3 [ 127.827122][ T5852] BTRFS info (device loop2): turning on flush-on-commit [ 127.827888][ T5931] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.835292][ T5852] BTRFS info (device loop2): enabling auto defrag [ 127.838432][ T5852] BTRFS info (device loop2): max_inline at 4096 [ 127.842730][ T5852] BTRFS info (device loop2): using free space tree [ 127.844966][ T5931] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.315: corrupted in-inode xattr [ 127.847736][ T5931] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.315: couldn't read orphan inode 15 (err -117) [ 127.847741][ T5852] workqueue: max_active -2147483648 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 127.852450][ T5931] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 127.865263][ T5852] workqueue: max_active -2147483648 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 127.877041][ T5937] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.879843][ T5852] workqueue: max_active -2147483648 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 127.884767][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 127.916859][ T5937] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.324: missing EA_INODE flag [ 127.929048][ T5852] workqueue: max_active -2147483648 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 127.935691][ T5852] workqueue: max_active -2147483648 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 127.941083][ T5937] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.324: error while reading EA inode 2 err=-117 [ 127.943144][ T5852] workqueue: max_active -2147483648 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 127.945752][ T5852] workqueue: max_active -2147483648 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 127.949719][ T5852] workqueue: max_active -2147483648 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 127.954937][ T5937] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 127.958528][ T5852] workqueue: max_active -2147483648 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 127.963443][ T5937] EXT4-fs (loop1): 1 truncate cleaned up [ 127.966871][ T5937] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 127.988115][ T5852] BTRFS info (device loop2): enabling ssd optimizations [ 127.994700][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 128.038639][ T4330] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.041419][ T4372] workqueue: max_active -2147483648 requested for btrfs-cache is out of range, clamping between 1 and 512 [ 128.348514][ T5962] ubi: mtd0 is already attached to ubi31 [ 128.378569][ T4329] Bluetooth: Frame is too long (len 12, expected len 4) [ 128.717331][ T5958] set_capacity_and_notify: 3 callbacks suppressed [ 128.717343][ T5958] loop1: detected capacity change from 0 to 40427 [ 128.726171][ T5958] F2FS-fs (loop1): invalid crc value [ 128.734058][ T5958] F2FS-fs (loop1): Found nat_bits in checkpoint [ 128.744488][ T5958] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 128.745697][ T5958] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 128.747264][ T5958] F2FS-fs (loop1): Start checkpoint disabled! [ 128.822066][ T5958] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 130.001115][ T6053] loop3: detected capacity change from 0 to 128 [ 130.165603][ T6053] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 130.171944][ T6053] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.260097][ T5943] loop4: detected capacity change from 0 to 131072 [ 130.276846][ T5943] F2FS-fs (loop4): Found nat_bits in checkpoint [ 130.290873][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 130.315877][ T5943] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 130.330462][ T6065] loop3: detected capacity change from 0 to 256 [ 130.481526][ T6075] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.344' sets config #0 [ 130.616833][ T6083] loop3: detected capacity change from 0 to 512 [ 130.858559][ T6083] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 131.024809][ T6083] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.348: corrupted in-inode xattr [ 131.030069][ T6083] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.348: couldn't read orphan inode 15 (err -117) [ 131.035134][ T6083] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 131.063660][ T6095] loop2: detected capacity change from 0 to 512 [ 131.090967][ T6095] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 131.092525][ T6095] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.296355][ T6107] ubi: mtd0 is already attached to ubi31 [ 131.587082][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 132.040352][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 132.155895][ T6167] loop3: detected capacity change from 0 to 512 [ 132.213782][ T6167] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 132.282163][ T6167] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.364515][ T6167] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.360: casefold flag without casefold feature [ 132.373949][ T6182] netlink: 20 bytes leftover after parsing attributes in process `syz.0.365'. [ 132.375575][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 132.844079][ T6189] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.369'. [ 132.846142][ T6189] netlink: get zone limit has 8 unknown bytes [ 132.875313][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 133.552898][ T4329] Bluetooth: Frame is too long (len 12, expected len 4) [ 134.215285][ T6253] netlink: 496 bytes leftover after parsing attributes in process `syz.0.373'. [ 135.431931][ T6261] securityfs: Unknown parameter '' [ 135.433735][ T6261] Injecting memory failure for pfn 0x14018f at process virtual address 0x20000000 [ 135.438404][ T6261] Memory failure: 0x14018f: recovery action for dirty LRU page: Recovered [ 135.439783][ T6261] Injecting memory failure for pfn 0x137fe2 at process virtual address 0x20001000 [ 135.508878][ T6261] Memory failure: 0x137fe2: recovery action for dirty LRU page: Recovered [ 135.510249][ T6261] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 135.525294][ T6262] securityfs: Unknown parameter '' [ 135.526611][ T6262] Injecting memory failure for pfn 0x139bdc at process virtual address 0x20000000 [ 135.529353][ T6262] Memory failure: 0x139bdc: recovery action for dirty LRU page: Recovered [ 135.530739][ T6262] Injecting memory failure for pfn 0x123ba5 at process virtual address 0x20001000 [ 135.532297][ T6262] Memory failure: 0x123ba5: recovery action for dirty LRU page: Recovered [ 135.533722][ T6262] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 135.535529][ T6261] Memory failure: 0x225a04: already hardware poisoned [ 135.599061][ T6262] Memory failure: 0x225a04: already hardware poisoned [ 135.896058][ T6279] NILFS (nullb0): couldn't find nilfs on the device [ 136.730297][ T4329] Bluetooth: Frame is too long (len 12, expected len 4) [ 137.493552][ T6350] infiniband sy‡1: set active [ 137.494464][ T6350] infiniband sy‡1: added bond0 [ 137.542123][ T6359] loop2: detected capacity change from 0 to 8192 [ 137.555600][ T6359] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 137.558027][ T6359] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 137.559996][ T6359] REISERFS (device loop2): using ordered data mode [ 137.561208][ T6359] reiserfs: using flush barriers [ 137.563477][ T6359] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 137.568704][ T6359] REISERFS (device loop2): checking transaction log (loop2) [ 137.586882][ T6350] RDS/IB: sy‡1: added [ 137.587986][ T6350] smc: adding ib device sy‡1 with port count 1 [ 137.611602][ T6350] smc: ib device sy‡1 port 1 has pnetid [ 137.697710][ T6359] REISERFS (device loop2): Using tea hash to sort names [ 137.707639][ T6359] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 137.714331][ T6361] loop1: detected capacity change from 0 to 40427 [ 137.727042][ T6361] F2FS-fs (loop1): invalid crc value [ 137.756499][ T6361] F2FS-fs (loop1): Found nat_bits in checkpoint [ 137.789757][ T6361] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 137.791055][ T6361] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 137.793554][ T6361] F2FS-fs (loop1): Start checkpoint disabled! [ 137.799383][ T6361] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 137.961638][ T6386] loop2: detected capacity change from 0 to 4096 [ 138.271318][ T6386] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 138.583530][ T6396] NILFS (nullb0): couldn't find nilfs on the device [ 138.978381][ T6407] ubi: mtd0 is already attached to ubi31 [ 139.027873][ T4329] Bluetooth: Frame is too long (len 12, expected len 4) [ 139.761804][ T6418] loop1: detected capacity change from 0 to 256 [ 139.826378][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 140.131084][ T6416] loop2: detected capacity change from 0 to 32768 [ 140.672310][ T6488] ubi: mtd0 is already attached to ubi31 [ 140.698674][ T4329] Bluetooth: Frame is too long (len 12, expected len 4) [ 140.951978][ T6416] XFS (loop2): Mounting V5 Filesystem [ 141.007951][ T6416] XFS (loop2): Ending clean mount [ 141.012821][ T6495] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 141.036982][ T6495] CIFS mount error: No usable UNC path provided in device string! [ 141.036982][ T6495] [ 141.043629][ T6495] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 141.049338][ T6497] securityfs: Unknown parameter '' [ 141.051380][ T6497] Injecting memory failure for pfn 0x138e6e at process virtual address 0x20000000 [ 141.057229][ T6497] Memory failure: 0x138e6e: recovery action for dirty LRU page: Recovered [ 141.062565][ T6497] Injecting memory failure for pfn 0x1220e3 at process virtual address 0x20001000 [ 141.064201][ T6497] Memory failure: 0x1220e3: recovery action for dirty LRU page: Recovered [ 141.077623][ T6497] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 141.095129][ T4330] XFS (loop2): Unmounting Filesystem [ 141.100276][ T6497] Memory failure: 0x225a04: already hardware poisoned [ 141.384107][ T6499] loop4: detected capacity change from 0 to 32768 [ 141.410286][ T6499] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 141.411694][ T6499] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 141.434186][ T6499] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 141.439479][ T4666] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 141.440796][ T4666] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 141.459733][ T4666] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 18ms [ 141.462602][ T4666] gfs2: fsid=syz:syz.0: jid=0: Done [ 141.464207][ T6499] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 141.594790][ T6499] gfs2: fsid=syz:syz.0: found 1 quota changes [ 141.639938][ T6522] securityfs: Unknown parameter '' [ 141.641118][ T6522] Injecting memory failure for pfn 0x125915 at process virtual address 0x20000000 [ 141.642954][ T6522] Memory failure: 0x125915: recovery action for dirty LRU page: Recovered [ 141.644384][ T6522] Injecting memory failure for pfn 0x13a567 at process virtual address 0x20001000 [ 141.646190][ T6522] Memory failure: 0x13a567: recovery action for dirty LRU page: Recovered [ 141.647654][ T6522] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 141.649388][ T6522] Memory failure: 0x225a04: already hardware poisoned [ 141.656834][ T4331] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 141.656834][ T4331] inode = 11 2339 [ 141.656834][ T4331] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 141.677001][ T4331] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 141.706474][ T6507] loop1: detected capacity change from 0 to 40427 [ 141.718836][ T4331] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4331 [syz-executor] gfs2_quota_sync+0x2cc/0x500 [ 141.730044][ T4331] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 141.731591][ T4331] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 141.985284][ T4331] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 141.987866][ T6530] loop3: detected capacity change from 0 to 512 [ 141.989099][ T4331] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 141.990609][ T6507] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 141.991638][ T6507] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 141.994252][ T6507] F2FS-fs (loop1): invalid crc value [ 141.997054][ T4331] gfs2: fsid=syz:syz.0: File system withdrawn [ 142.001795][ T4331] CPU: 1 PID: 4331 Comm: syz-executor Not tainted syzkaller #0 [ 142.003140][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 142.005005][ T4331] Call trace: [ 142.005550][ T4331] dump_backtrace+0x1c0/0x1ec [ 142.006345][ T4331] show_stack+0x2c/0x3c [ 142.007114][ T4331] __dump_stack+0x30/0x40 [ 142.007899][ T4331] dump_stack_lvl+0xf4/0x15c [ 142.008717][ T4331] dump_stack+0x1c/0x5c [ 142.009436][ T4331] gfs2_withdraw+0x9ec/0x127c [ 142.010255][ T4331] gfs2_consist_inode_i+0xf0/0x10c [ 142.011276][ T4331] gfs2_inode_refresh+0x918/0xd64 [ 142.012165][ T4331] inode_go_instantiate+0x4c/0x68 [ 142.013047][ T4331] gfs2_instantiate+0x178/0x2b4 [ 142.013855][ T4331] gfs2_glock_wait+0x1b4/0x298 [ 142.014728][ T4331] gfs2_glock_nq+0x8bc/0x11c4 [ 142.015494][ T4331] do_sync+0x41c/0xaec [ 142.016150][ T4331] gfs2_quota_sync+0x2cc/0x500 [ 142.017019][ T4331] gfs2_sync_fs+0x4c/0xc4 [ 142.017783][ T4331] sync_filesystem+0xe8/0x218 [ 142.018608][ T4331] generic_shutdown_super+0x70/0x324 [ 142.019521][ T4331] kill_block_super+0x70/0xdc [ 142.020347][ T4331] gfs2_kill_sb+0xc0/0xd4 [ 142.021094][ T4331] deactivate_locked_super+0xac/0x120 [ 142.022002][ T4331] deactivate_super+0xe4/0x104 [ 142.022852][ T4331] cleanup_mnt+0x390/0x418 [ 142.023638][ T4331] __cleanup_mnt+0x20/0x30 [ 142.024411][ T4331] task_work_run+0x1ec/0x278 [ 142.025130][ T4331] do_notify_resume+0x1fa0/0x2aa4 [ 142.026052][ T4331] el0_svc+0x98/0x128 [ 142.026738][ T4331] el0t_64_sync_handler+0x84/0xf0 [ 142.027562][ T4331] el0t_64_sync+0x18c/0x190 [ 142.045053][ T6530] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 142.046354][ T6530] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 142.049595][ T6507] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 142.082436][ T4331] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 142.084824][ T4331] CPU: 0 PID: 4331 Comm: syz-executor Not tainted syzkaller #0 [ 142.086026][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 142.087600][ T4331] Call trace: [ 142.088188][ T4331] dump_backtrace+0x1c0/0x1ec [ 142.088990][ T4331] show_stack+0x2c/0x3c [ 142.089554][ T6507] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 142.089724][ T4331] __dump_stack+0x30/0x40 [ 142.091093][ T6507] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 142.091672][ T4331] dump_stack_lvl+0xf4/0x15c [ 142.091689][ T4331] dump_stack+0x1c/0x5c [ 142.094398][ T4331] gfs2_assert_warn_i+0x16c/0x26c [ 142.095246][ T4331] gfs2_quota_cleanup+0x464/0x668 [ 142.096150][ T4331] gfs2_put_super+0x1f0/0x760 [ 142.097048][ T4331] generic_shutdown_super+0x130/0x324 [ 142.098006][ T4331] kill_block_super+0x70/0xdc [ 142.098842][ T4331] gfs2_kill_sb+0xc0/0xd4 [ 142.099630][ T4331] deactivate_locked_super+0xac/0x120 [ 142.100593][ T4331] deactivate_super+0xe4/0x104 [ 142.101446][ T4331] cleanup_mnt+0x390/0x418 [ 142.102252][ T4331] __cleanup_mnt+0x20/0x30 [ 142.102978][ T4331] task_work_run+0x1ec/0x278 [ 142.103741][ T4331] do_notify_resume+0x1fa0/0x2aa4 [ 142.104643][ T4331] el0_svc+0x98/0x128 [ 142.105302][ T4331] el0t_64_sync_handler+0x84/0xf0 [ 142.106161][ T4331] el0t_64_sync+0x18c/0x190 [ 142.115668][ T6530] EXT4-fs (loop3): 1 truncate cleaned up [ 142.119880][ T6530] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 142.154414][ T6530] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.432: Logical block already allocated [ 142.201199][ T6530] EXT4-fs (loop3): Remounting filesystem read-only [ 142.479387][ T6549] securityfs: Unknown parameter '' [ 142.481006][ T6549] Injecting memory failure for pfn 0x123a81 at process virtual address 0x20000000 [ 142.514667][ T6549] Memory failure: 0x123a81: recovery action for dirty LRU page: Recovered [ 142.516164][ T6549] Injecting memory failure for pfn 0x1391dd at process virtual address 0x20001000 [ 142.561725][ T6549] Memory failure: 0x1391dd: recovery action for dirty LRU page: Recovered [ 142.563549][ T6549] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 142.565489][ T6549] Memory failure: 0x225a04: already hardware poisoned [ 142.606072][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 142.654012][ T4320] syz-executor: attempt to access beyond end of device [ 142.654012][ T4320] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 142.729753][ T6587] loop2: detected capacity change from 0 to 512 [ 142.736058][ T6587] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 142.783198][ T6587] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.440: corrupted in-inode xattr [ 142.785717][ T6587] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.440: couldn't read orphan inode 15 (err -117) [ 142.818325][ T6587] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 142.892046][ T6593] loop3: detected capacity change from 0 to 164 [ 142.960162][ T6598] securityfs: Unknown parameter '' [ 142.961570][ T6598] Injecting memory failure for pfn 0x122f3c at process virtual address 0x20000000 [ 143.014570][ T6598] Memory failure: 0x122f3c: recovery action for dirty LRU page: Recovered [ 143.016250][ T6598] Injecting memory failure for pfn 0x122f3f at process virtual address 0x20001000 [ 143.017999][ T6598] Memory failure: 0x122f3f: recovery action for dirty LRU page: Recovered [ 143.019789][ T6598] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 143.021346][ T6598] Memory failure: 0x225a04: already hardware poisoned [ 143.024329][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 143.451204][ T6601] ubi: mtd0 is already attached to ubi31 [ 143.502384][ T6608] loop2: detected capacity change from 0 to 1024 [ 143.504362][ T6608] EXT4-fs: Ignoring removed mblk_io_submit option [ 143.506040][ T6608] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.516623][ T6608] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz.2.444: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 143.524267][ T6608] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.444: couldn't read orphan inode 11 (err -117) [ 143.528807][ T6608] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.599645][ T6613] NILFS (nullb0): couldn't find nilfs on the device [ 143.846973][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 143.912456][ T6616] loop4: detected capacity change from 0 to 4096 [ 143.957498][ T6616] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 144.003310][ T6624] securityfs: Unknown parameter '' [ 144.004761][ T6624] Injecting memory failure for pfn 0x124a93 at process virtual address 0x20000000 [ 144.006414][ T6624] Memory failure: 0x124a93: recovery action for dirty LRU page: Recovered [ 144.007924][ T6624] Injecting memory failure for pfn 0x13efc2 at process virtual address 0x20001000 [ 144.023167][ T6624] Memory failure: 0x13efc2: recovery action for dirty LRU page: Recovered [ 144.024741][ T6624] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 144.026349][ T6624] Memory failure: 0x225a04: already hardware poisoned [ 144.127016][ T6627] loop2: detected capacity change from 0 to 512 [ 144.152451][ T6627] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 144.227145][ T6627] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.454: corrupted in-inode xattr [ 144.232926][ T6627] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.454: couldn't read orphan inode 15 (err -117) [ 145.450950][ T6627] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 145.672719][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 145.775458][ T6646] loop4: detected capacity change from 0 to 764 [ 145.782775][ T6646] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 145.961258][ T6654] ubi: mtd0 is already attached to ubi31 [ 145.981088][ T4329] Bluetooth: Frame is too long (len 12, expected len 4) [ 146.635362][ T6659] loop4: detected capacity change from 0 to 8192 [ 146.657068][ T6659] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 146.660010][ T6659] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 146.661473][ T6659] REISERFS (device loop4): using ordered data mode [ 146.663730][ T6659] reiserfs: using flush barriers [ 146.666681][ T6659] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.692149][ T6668] loop1: detected capacity change from 0 to 4096 [ 146.708535][ T6659] REISERFS (device loop4): checking transaction log (loop4) [ 146.765420][ T6671] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.205431][ T6659] REISERFS (device loop4): Using tea hash to sort names [ 147.207076][ T6659] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 147.293362][ T6681] securityfs: Unknown parameter '' [ 147.295026][ T6681] Injecting memory failure for pfn 0x139abf at process virtual address 0x20000000 [ 147.297621][ T6681] Memory failure: 0x139abf: recovery action for dirty LRU page: Recovered [ 147.305840][ T6681] Injecting memory failure for pfn 0x1223da at process virtual address 0x20001000 [ 147.307681][ T6681] Memory failure: 0x1223da: recovery action for dirty LRU page: Recovered [ 147.326262][ T6681] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 147.327994][ T6681] Memory failure: 0x225a04: already hardware poisoned [ 148.586640][ T6701] ubi: mtd0 is already attached to ubi31 [ 148.619306][ T4329] Bluetooth: Frame is too long (len 12, expected len 4) [ 148.857571][ T6706] loop1: detected capacity change from 0 to 8 [ 148.872505][ T6706] Page size > filesystem block size (96). This is currently not supported! [ 149.039454][ T6709] securityfs: Unknown parameter '' [ 149.052078][ T6709] Injecting memory failure for pfn 0x13aae6 at process virtual address 0x20000000 [ 149.066556][ T6709] Memory failure: 0x13aae6: recovery action for dirty LRU page: Recovered [ 149.067987][ T6709] Injecting memory failure for pfn 0x1388ca at process virtual address 0x20001000 [ 149.095458][ T6709] Memory failure: 0x1388ca: recovery action for dirty LRU page: Recovered [ 149.096934][ T6709] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 149.128581][ T6709] Memory failure: 0x225a04: already hardware poisoned [ 149.261595][ T6716] loop1: detected capacity change from 0 to 256 [ 149.766268][ T6721] loop1: detected capacity change from 0 to 164 [ 149.776159][ T6721] Unable to read rock-ridge attributes [ 149.782273][ T6723] loop4: detected capacity change from 0 to 128 [ 149.799591][ T6723] VFS: could not find a valid V7 on loop4. [ 149.961566][ T6725] loop2: detected capacity change from 0 to 512 [ 150.391641][ T6725] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.488: inode has both inline data and extents flags [ 150.395818][ T6725] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.488: couldn't read orphan inode 15 (err -117) [ 150.398199][ T6725] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 150.932223][ T6712] loop3: detected capacity change from 0 to 32768 [ 150.933892][ T6712] jfs: Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 150.936481][ T6730] securityfs: Unknown parameter '' [ 150.937740][ T6730] Injecting memory failure for pfn 0x13f4de at process virtual address 0x20000000 [ 151.093398][ T6730] Memory failure: 0x13f4de: recovery action for dirty LRU page: Recovered [ 151.094953][ T6730] Injecting memory failure for pfn 0x1393a4 at process virtual address 0x20001000 [ 151.096727][ T6730] Memory failure: 0x1393a4: recovery action for dirty LRU page: Recovered [ 151.098264][ T6730] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 151.099872][ T6730] Memory failure: 0x225a04: already hardware poisoned [ 151.138310][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 152.561128][ T6750] ubi: mtd0 is already attached to ubi31 [ 152.862717][ T6754] loop2: detected capacity change from 0 to 512 [ 152.879496][ T6754] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 152.930930][ T6754] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.496: corrupted in-inode xattr [ 152.933206][ T6754] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.496: couldn't read orphan inode 15 (err -117) [ 152.935623][ T6754] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 152.991495][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 153.093545][ T6764] securityfs: Unknown parameter '' [ 153.098766][ T6764] Injecting memory failure for pfn 0x125a32 at process virtual address 0x20000000 [ 153.101848][ T6764] Memory failure: 0x125a32: recovery action for dirty LRU page: Recovered [ 153.103258][ T6764] Injecting memory failure for pfn 0x125a2f at process virtual address 0x20001000 [ 153.104813][ T6764] Memory failure: 0x125a2f: recovery action for dirty LRU page: Recovered [ 153.106271][ T6764] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 153.107780][ T6764] Memory failure: 0x225a04: already hardware poisoned [ 153.688239][ T4336] Bluetooth: hci1: command 0x0406 tx timeout [ 153.689414][ T4336] Bluetooth: hci2: command 0x0406 tx timeout [ 154.307459][ T6785] securityfs: Unknown parameter '' [ 154.313428][ T6785] Injecting memory failure for pfn 0x122549 at process virtual address 0x20000000 [ 154.323792][ T6785] Memory failure: 0x122549: recovery action for dirty LRU page: Recovered [ 154.338496][ T6785] Injecting memory failure for pfn 0x13a862 at process virtual address 0x20001000 [ 154.343546][ T6785] Memory failure: 0x13a862: recovery action for dirty LRU page: Recovered [ 154.350037][ T6785] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 154.351944][ T6785] Memory failure: 0x225a04: already hardware poisoned [ 154.964849][ T6798] ubi: mtd0 is already attached to ubi31 [ 155.108278][ T4329] Bluetooth: Frame is too long (len 12, expected len 4) [ 155.292750][ T6790] loop4: detected capacity change from 0 to 32768 [ 155.299081][ T6790] jfs: Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 156.201757][ T6811] loop2: detected capacity change from 0 to 512 [ 156.243226][ T6811] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 156.297320][ T6809] loop4: detected capacity change from 0 to 4096 [ 156.322125][ T6811] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.511: corrupted in-inode xattr [ 156.376028][ T6848] securityfs: Unknown parameter '' [ 156.377260][ T6848] Injecting memory failure for pfn 0x139a8c at process virtual address 0x20000000 [ 156.378509][ T6811] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.511: couldn't read orphan inode 15 (err -117) [ 156.386618][ T6848] Memory failure: 0x139a8c: recovery action for dirty LRU page: Recovered [ 156.392248][ T6811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 156.398676][ T6848] Injecting memory failure for pfn 0x13fb75 at process virtual address 0x20001000 [ 156.400220][ T6848] Memory failure: 0x13fb75: recovery action for dirty LRU page: Recovered [ 156.401506][ T6848] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 156.403226][ T6848] Memory failure: 0x225a04: already hardware poisoned [ 156.427577][ T6845] loop1: detected capacity change from 0 to 32768 [ 156.466606][ T6809] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 156.499475][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 156.556603][ T6845] XFS (loop1): Mounting V5 Filesystem [ 156.916836][ T6845] XFS (loop1): Ending clean mount [ 156.985871][ T4320] XFS (loop1): Unmounting Filesystem [ 158.797367][ T6882] ubi: mtd0 is already attached to ubi31 [ 158.801081][ T4329] Bluetooth: Frame is too long (len 12, expected len 4) [ 158.891345][ T6890] loop1: detected capacity change from 0 to 512 [ 158.895998][ T6890] EXT4-fs: user quota file already specified [ 159.008469][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 159.008503][ T27] audit: type=1326 audit(2000000112.160:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a7789e8 code=0x7ffc0000 [ 159.028482][ T27] audit: type=1326 audit(2000000112.160:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a7789e8 code=0x7ffc0000 [ 159.214192][ T27] audit: type=1326 audit(2000000112.160:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a7789e8 code=0x7ffc0000 [ 159.217726][ T27] audit: type=1326 audit(2000000112.160:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=88 compat=0 ip=0xffff8a7789e8 code=0x7ffc0000 [ 159.248498][ T27] audit: type=1326 audit(2000000112.160:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a7789e8 code=0x7ffc0000 [ 159.252285][ T27] audit: type=1326 audit(2000000112.160:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a7789e8 code=0x7ffc0000 [ 159.281503][ T27] audit: type=1326 audit(2000000112.160:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a7789e8 code=0x7ffc0000 [ 159.285217][ T27] audit: type=1326 audit(2000000112.160:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8a7789e8 code=0x7ffc0000 [ 159.314347][ T6879] loop2: detected capacity change from 0 to 32768 [ 159.320417][ T27] audit: type=1326 audit(2000000112.160:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a7789e8 code=0x7ffc0000 [ 159.324249][ T27] audit: type=1326 audit(2000000112.170:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a7789e8 code=0x7ffc0000 [ 159.328609][ T6879] jfs: Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 159.672162][ T6896] loop3: detected capacity change from 0 to 4096 [ 159.677829][ T4312] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 159.730839][ T6896] ntfs3: loop3: Failed to load $Extend. [ 159.733122][ T6904] securityfs: Unknown parameter '' [ 159.734766][ T6904] Injecting memory failure for pfn 0x1403f5 at process virtual address 0x20000000 [ 159.736664][ T6904] Memory failure: 0x1403f5: recovery action for dirty LRU page: Recovered [ 159.738052][ T6904] Injecting memory failure for pfn 0x13a31e at process virtual address 0x20001000 [ 159.740216][ T6904] Memory failure: 0x13a31e: recovery action for dirty LRU page: Recovered [ 159.741560][ T6904] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 159.743143][ T6904] Memory failure: 0x225a04: already hardware poisoned [ 160.913476][ T4329] Bluetooth: Wrong link type (-71) [ 160.945562][ T6960] loop3: detected capacity change from 0 to 512 [ 160.947448][ T6960] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.470515][ T6967] ubi: mtd0 is already attached to ubi31 [ 161.733638][ T6960] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.536: corrupted in-inode xattr [ 161.736203][ T6960] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.536: couldn't read orphan inode 15 (err -117) [ 161.741948][ T6960] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 161.755034][ T6972] loop2: detected capacity change from 0 to 512 [ 161.771259][ T6972] EXT4-fs: user quota file already specified [ 161.904241][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 161.944541][ T6978] securityfs: Unknown parameter '' [ 161.945819][ T6978] Injecting memory failure for pfn 0x13ed34 at process virtual address 0x20000000 [ 161.947792][ T6978] Memory failure: 0x13ed34: recovery action for dirty LRU page: Recovered [ 161.953754][ T6978] Injecting memory failure for pfn 0x13fd5d at process virtual address 0x20001000 [ 161.955513][ T6978] Memory failure: 0x13fd5d: recovery action for dirty LRU page: Recovered [ 161.956846][ T6978] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 161.967285][ T6978] Memory failure: 0x225a04: already hardware poisoned [ 162.119815][ T6982] loop1: detected capacity change from 0 to 1024 [ 162.131030][ T6982] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 162.134106][ T6982] EXT4-fs (loop1): mount failed [ 164.601095][ T4336] Bluetooth: hci3: link tx timeout [ 164.601917][ T4336] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.291113][ T7031] ubi: mtd0 is already attached to ubi31 [ 165.490000][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 165.638399][ T7038] loop2: detected capacity change from 0 to 1024 [ 166.673399][ T7046] ubi: mtd0 is already attached to ubi31 [ 166.709972][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 166.827929][ T7038] hfsplus: bad catalog entry type [ 166.921736][ T7062] loop1: detected capacity change from 0 to 512 [ 166.932438][ T7062] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 167.341304][ T5350] hfsplus: b-tree write err: -5, ino 25 [ 167.343236][ T5350] hfsplus: b-tree write err: -5, ino 4 [ 167.344453][ T5350] hfsplus: b-tree write err: -5, ino 2 [ 167.357077][ T7062] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.551: corrupted in-inode xattr [ 167.362118][ T7062] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.551: couldn't read orphan inode 15 (err -117) [ 167.364623][ T7062] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 167.371563][ T7063] loop3: detected capacity change from 0 to 8192 [ 167.376834][ T7063] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 167.379202][ T7063] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 167.380800][ T7063] REISERFS (device loop3): using ordered data mode [ 167.382030][ T7063] reiserfs: using flush barriers [ 167.383425][ T7063] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 167.386367][ T7063] REISERFS (device loop3): checking transaction log (loop3) [ 167.388093][ T7063] REISERFS warning: reiserfs-5090 is_tree_node: node level 0 does not match to the expected one 1 [ 167.399328][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 167.409146][ T7063] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 0. Fsck? [ 167.411121][ T7063] REISERFS (device loop3): Remounting filesystem read-only [ 167.413393][ T7063] REISERFS error (device loop3): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 167.616343][ T7081] securityfs: Unknown parameter '' [ 167.622056][ T7081] Injecting memory failure for pfn 0x13affb at process virtual address 0x20000000 [ 167.623984][ T7081] Memory failure: 0x13affb: recovery action for dirty LRU page: Recovered [ 167.626577][ T7081] Injecting memory failure for pfn 0x13a2a6 at process virtual address 0x20001000 [ 167.648983][ T7081] Memory failure: 0x13a2a6: recovery action for dirty LRU page: Recovered [ 167.750955][ T7081] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 167.752805][ T7081] Memory failure: 0x225a04: already hardware poisoned [ 168.624256][ T7094] loop4: detected capacity change from 0 to 256 [ 169.446833][ T7139] loop4: detected capacity change from 0 to 512 [ 169.490070][ T7139] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.536395][ T7139] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.567: corrupted in-inode xattr [ 169.565084][ T7139] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.567: couldn't read orphan inode 15 (err -117) [ 169.638431][ T7139] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 169.656815][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 170.010168][ T7150] securityfs: Unknown parameter '' [ 170.011660][ T7150] Injecting memory failure for pfn 0x122055 at process virtual address 0x20000000 [ 170.013452][ T7150] Memory failure: 0x122055: recovery action for dirty LRU page: Recovered [ 170.014935][ T7150] Injecting memory failure for pfn 0x13a6e4 at process virtual address 0x20001000 [ 170.016557][ T7150] Memory failure: 0x13a6e4: recovery action for dirty LRU page: Recovered [ 170.018094][ T7150] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 170.020299][ T7150] Memory failure: 0x225a04: already hardware poisoned [ 171.731896][ T7159] netlink: 220 bytes leftover after parsing attributes in process `syz.0.581'. [ 171.895414][ T7170] securityfs: Unknown parameter '' [ 171.896948][ T7170] Injecting memory failure for pfn 0x13a6be at process virtual address 0x20000000 [ 172.429440][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 172.752319][ T7175] loop4: detected capacity change from 0 to 1024 [ 172.758393][ T7170] Memory failure: 0x13a6be: recovery action for dirty LRU page: Recovered [ 172.759795][ T7170] Injecting memory failure for pfn 0x13b01c at process virtual address 0x20001000 [ 172.763582][ T7170] Memory failure: 0x13b01c: recovery action for dirty LRU page: Recovered [ 172.845880][ T7175] hfsplus: bad catalog entry type [ 172.916556][ T4516] hfsplus: b-tree write err: -5, ino 25 [ 172.917711][ T4516] hfsplus: b-tree write err: -5, ino 4 [ 172.930960][ T7185] loop3: detected capacity change from 0 to 64 [ 172.935997][ T7185] hfs: get root inode failed [ 172.940353][ T4516] hfsplus: b-tree write err: -5, ino 2 [ 172.951768][ T4413] hid-generic 0003:0006:0003.0001: unknown main item tag 0xd [ 172.953534][ T4413] hid-generic 0003:0006:0003.0001: item fetching failed at offset 5/6 [ 172.955094][ T4413] hid-generic: probe of 0003:0006:0003.0001 failed with error -22 [ 172.984654][ T4675] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 173.053391][ T7198] loop4: detected capacity change from 0 to 256 [ 173.059526][ T7198] exfat: Deprecated parameter 'utf8' [ 173.061253][ T7198] exfat: Deprecated parameter 'utf8' [ 173.063163][ T7198] exfat: Deprecated parameter 'utf8' [ 173.064069][ T7198] exfat: Deprecated parameter 'utf8' [ 173.072130][ T7198] exfat: Deprecated parameter 'namecase' [ 173.082608][ T7198] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 173.196942][ T7203] loop3: detected capacity change from 0 to 512 [ 173.420199][ T7205] ubi: mtd0 is already attached to ubi31 [ 173.645323][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 173.832750][ T7203] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.589: inode has both inline data and extents flags [ 173.842186][ T7203] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.589: couldn't read orphan inode 15 (err -117) [ 173.845217][ T7203] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 174.901831][ T7217] ubi: mtd0 is already attached to ubi31 [ 175.025425][ T7222] loop1: detected capacity change from 0 to 512 [ 175.031641][ T7222] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 175.055386][ T7222] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.596: corrupted in-inode xattr [ 175.063095][ T7222] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.596: couldn't read orphan inode 15 (err -117) [ 175.071629][ T7222] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 175.152826][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 175.169185][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 175.210681][ T7231] loop1: detected capacity change from 0 to 256 [ 175.253449][ T7231] FAT-fs (loop1): Directory bread(block 64) failed [ 175.254584][ T7231] FAT-fs (loop1): Directory bread(block 65) failed [ 175.257057][ T7231] FAT-fs (loop1): Directory bread(block 66) failed [ 175.265848][ T7231] FAT-fs (loop1): Directory bread(block 67) failed [ 175.266967][ T7231] FAT-fs (loop1): Directory bread(block 68) failed [ 175.271208][ T7231] FAT-fs (loop1): Directory bread(block 69) failed [ 175.272422][ T7231] FAT-fs (loop1): Directory bread(block 70) failed [ 175.273529][ T7231] FAT-fs (loop1): Directory bread(block 71) failed [ 175.274705][ T7231] FAT-fs (loop1): Directory bread(block 72) failed [ 175.275916][ T7231] FAT-fs (loop1): Directory bread(block 73) failed [ 176.460908][ T7242] securityfs: Unknown parameter '' [ 176.462700][ T7242] Injecting memory failure for pfn 0x124abf at process virtual address 0x20000000 [ 176.464477][ T7242] Memory failure: 0x124abf: recovery action for dirty LRU page: Recovered [ 176.465902][ T7242] Injecting memory failure for pfn 0x1227ee at process virtual address 0x20001000 [ 176.467552][ T7242] Memory failure: 0x1227ee: recovery action for dirty LRU page: Recovered [ 176.469375][ T7242] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 176.470927][ T7242] Memory failure: 0x225a04: already hardware poisoned [ 176.544536][ T7255] securityfs: Unknown parameter '' [ 176.546349][ T7255] Injecting memory failure for pfn 0x124e15 at process virtual address 0x20000000 [ 176.549736][ T7255] Memory failure: 0x124e15: recovery action for dirty LRU page: Recovered [ 176.554642][ T7255] Injecting memory failure for pfn 0x125bbc at process virtual address 0x20001000 [ 176.564060][ T7253] loop1: detected capacity change from 0 to 2048 [ 176.570515][ T7255] Memory failure: 0x125bbc: recovery action for dirty LRU page: Recovered [ 176.577676][ T7255] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 176.586325][ T7255] Memory failure: 0x225a04: already hardware poisoned [ 176.589104][ T7261] netlink: 32 bytes leftover after parsing attributes in process `syz.3.607'. [ 176.590659][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 176.616090][ T7253] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #4: comm syz.1.605: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 176.617859][ T7264] loop3: detected capacity change from 0 to 512 [ 176.621680][ T7264] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 176.622572][ T7253] EXT4-fs error (device loop1): ext4_quota_enable:7052: comm syz.1.605: Bad quota inode: 4, type: 1 [ 176.625985][ T7253] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 176.641228][ T7253] EXT4-fs (loop1): mount failed [ 176.654157][ T7264] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.608: corrupted in-inode xattr [ 176.656450][ T7264] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.608: couldn't read orphan inode 15 (err -117) [ 176.684965][ T7264] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 176.722016][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 177.883001][ T7271] loop4: detected capacity change from 0 to 32768 [ 177.904430][ T7271] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.610 (7271) [ 177.919383][ T7271] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.927007][ T7271] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 177.931658][ T7271] BTRFS info (device loop4): setting nodatasum [ 177.932626][ T7271] BTRFS info (device loop4): force zlib compression, level 3 [ 177.933951][ T7271] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 177.947346][ T7271] BTRFS info (device loop4): use lzo compression, level 0 [ 177.957762][ T7271] BTRFS info (device loop4): turning on flush-on-commit [ 177.960277][ T7271] BTRFS info (device loop4): enabling auto defrag [ 177.961456][ T7271] BTRFS info (device loop4): max_inline at 4096 [ 177.962556][ T7271] BTRFS info (device loop4): using free space tree [ 178.056883][ T7280] loop3: detected capacity change from 0 to 32768 [ 178.147813][ T7283] loop2: detected capacity change from 0 to 32768 [ 178.154107][ T7283] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.617 (7283) [ 178.248748][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 178.487836][ T7271] BTRFS info (device loop4): enabling ssd optimizations [ 178.566674][ T4331] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.596476][ T7312] securityfs: Unknown parameter '' [ 178.597789][ T7312] Injecting memory failure for pfn 0x13fbc5 at process virtual address 0x20000000 [ 178.604602][ T7312] Memory failure: 0x13fbc5: recovery action for dirty LRU page: Recovered [ 178.632109][ T7312] Injecting memory failure for pfn 0x123ab0 at process virtual address 0x20001000 [ 178.664809][ T7312] Memory failure: 0x123ab0: recovery action for dirty LRU page: Recovered [ 178.666472][ T7312] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 178.686111][ T7312] Memory failure: 0x225a04: already hardware poisoned [ 178.847957][ T7318] netlink: 32 bytes leftover after parsing attributes in process `syz.2.623'. [ 179.014433][ T5173] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (5173) [ 179.632103][ T7354] ubi: mtd0 is already attached to ubi31 [ 179.648482][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 180.007827][ T7346] loop1: detected capacity change from 0 to 32768 [ 180.033409][ T7346] XFS (loop1): Mounting V5 Filesystem [ 180.066173][ T7346] XFS (loop1): Ending clean mount [ 180.085446][ T7352] loop3: detected capacity change from 0 to 32768 [ 180.117811][ T4320] XFS (loop1): Unmounting Filesystem [ 180.162658][ T7352] XFS (loop3): Mounting V5 Filesystem [ 180.196915][ T7352] XFS (loop3): Ending clean mount [ 180.204254][ T7352] XFS (loop3): Quotacheck needed: Please wait. [ 180.255136][ T7352] XFS (loop3): Quotacheck: Done. [ 180.322502][ T4321] XFS (loop3): Unmounting Filesystem [ 180.336673][ T7385] loop4: detected capacity change from 0 to 512 [ 180.344864][ T7385] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 180.354017][ T7385] ext2 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.386143][ T7388] securityfs: Unknown parameter '' [ 180.395245][ T7385] EXT2-fs (loop4): error: ext2_check_page: size of directory #12 is not a multiple of chunk size [ 180.397271][ T7385] EXT2-fs (loop4): error: remounting filesystem read-only [ 180.398432][ T7388] Injecting memory failure for pfn 0x12259e at process virtual address 0x20000000 [ 180.402806][ T7388] Memory failure: 0x12259e: recovery action for dirty LRU page: Recovered [ 180.404392][ T7388] Injecting memory failure for pfn 0x1225a3 at process virtual address 0x20001000 [ 180.406063][ T7388] Memory failure: 0x1225a3: recovery action for dirty LRU page: Recovered [ 180.407353][ T7388] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 180.410344][ T7388] Memory failure: 0x225a04: already hardware poisoned [ 180.518610][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 180.869773][ T7398] loop1: detected capacity change from 0 to 4096 [ 180.871359][ T7397] loop2: detected capacity change from 0 to 4096 [ 180.877571][ T7397] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.943015][ T7401] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.976846][ T7397] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 181.101404][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 181.239917][ T7414] securityfs: Unknown parameter '' [ 181.241266][ T7414] Injecting memory failure for pfn 0x14180e at process virtual address 0x20000000 [ 181.243051][ T7414] Memory failure: 0x14180e: recovery action for dirty LRU page: Recovered [ 181.244483][ T7414] Injecting memory failure for pfn 0x121da5 at process virtual address 0x20001000 [ 181.246152][ T7414] Memory failure: 0x121da5: recovery action for dirty LRU page: Recovered [ 181.247622][ T7414] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 181.255816][ T7414] Memory failure: 0x225a04: already hardware poisoned [ 181.347936][ T7422] loop1: detected capacity change from 0 to 256 [ 181.653191][ T7431] loop4: detected capacity change from 0 to 512 [ 181.809435][ T7431] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.654: inode has both inline data and extents flags [ 181.812813][ T7431] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.654: couldn't read orphan inode 15 (err -117) [ 181.815232][ T7431] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 182.584246][ T7441] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.729834][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 182.752012][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 183.083225][ T7418] set_capacity_and_notify: 1 callbacks suppressed [ 183.083235][ T7418] loop2: detected capacity change from 0 to 32768 [ 183.510556][ T7447] ubi: mtd0 is already attached to ubi31 [ 183.551323][ T7438] loop3: detected capacity change from 0 to 32768 [ 183.553231][ T7438] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.661 (7438) [ 183.879902][ T7438] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.883338][ T7438] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 183.885896][ T7438] BTRFS info (device loop3): force clearing of disk cache [ 183.892540][ T7438] BTRFS info (device loop3): enabling auto defrag [ 183.953379][ T7438] BTRFS info (device loop3): max_inline at 428 [ 183.954499][ T7438] BTRFS info (device loop3): enabling disk space caching [ 183.955719][ T7438] BTRFS info (device loop3): disk space caching is enabled [ 183.959195][ T7418] XFS (loop2): Mounting V5 Filesystem [ 183.973337][ T7462] loop1: detected capacity change from 0 to 2048 [ 183.987170][ T7460] loop4: detected capacity change from 0 to 4096 [ 184.002081][ T7462] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.003602][ T7418] XFS (loop2): Ending clean mount [ 184.004310][ T7418] XFS (loop2): Quotacheck needed: Please wait. [ 184.023749][ T7470] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.026114][ T7418] XFS (loop2): Quotacheck: Done. [ 184.031641][ T7418] XFS (loop2): syz.2.656 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 184.060329][ T4330] XFS (loop2): Unmounting Filesystem [ 184.207092][ T7485] loop1: detected capacity change from 0 to 128 [ 184.234185][ T7485] FAT-fs (loop1): error, clusters badly computed (2 != 0) [ 184.238318][ T7485] FAT-fs (loop1): Filesystem has been set read-only [ 184.240220][ T7438] BTRFS info (device loop3): enabling ssd optimizations [ 184.240914][ T7485] FAT-fs (loop1): error, clusters badly computed (3 != 1) [ 184.242982][ T7438] BTRFS info (device loop3): rebuilding free space tree [ 184.258701][ T7485] FAT-fs (loop1): error, clusters badly computed (4 != 2) [ 184.278787][ T7438] BTRFS info (device loop3): disabling free space tree [ 184.281219][ T7438] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 184.283044][ T7438] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 184.343456][ T4321] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.414687][ T7495] securityfs: Unknown parameter '' [ 184.416155][ T7495] Injecting memory failure for pfn 0x123b3a at process virtual address 0x20000000 [ 184.452427][ T7495] Memory failure: 0x123b3a: recovery action for dirty LRU page: Recovered [ 184.453892][ T7495] Injecting memory failure for pfn 0x141b93 at process virtual address 0x20001000 [ 184.461752][ T7495] Memory failure: 0x141b93: recovery action for dirty LRU page: Recovered [ 184.463128][ T7495] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 184.464602][ T7495] Memory failure: 0x225a04: already hardware poisoned [ 184.600123][ T7502] ubi: mtd0 is already attached to ubi31 [ 184.885411][ T7508] loop2: detected capacity change from 0 to 256 [ 184.894559][ T7489] loop4: detected capacity change from 0 to 32768 [ 184.912665][ T7489] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.925447][ T7489] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 185.078443][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 185.238573][ T7489] BTRFS info (device loop4): enabling auto defrag [ 185.240320][ T7508] FAT-fs (loop2): Directory bread(block 64) failed [ 185.298994][ T7489] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 185.301035][ T7489] BTRFS info (device loop4): use zstd compression, level 3 [ 185.303823][ T7508] FAT-fs (loop2): Directory bread(block 65) failed [ 185.304947][ T7508] FAT-fs (loop2): Directory bread(block 66) failed [ 185.306022][ T7508] FAT-fs (loop2): Directory bread(block 67) failed [ 185.307122][ T7508] FAT-fs (loop2): Directory bread(block 68) failed [ 185.308356][ T7489] BTRFS info (device loop4): turning on async discard [ 185.309744][ T7489] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 185.311236][ T7489] BTRFS info (device loop4): trying to use backup root at mount time [ 185.312411][ T7489] BTRFS info (device loop4): enabling ssd optimizations [ 185.313606][ T7489] BTRFS info (device loop4): using spread ssd allocation scheme [ 185.315056][ T7508] FAT-fs (loop2): Directory bread(block 69) failed [ 185.316203][ T7508] FAT-fs (loop2): Directory bread(block 70) failed [ 185.317401][ T7508] FAT-fs (loop2): Directory bread(block 71) failed [ 185.318588][ T7508] FAT-fs (loop2): Directory bread(block 72) failed [ 185.324685][ T7489] BTRFS info (device loop4): force zlib compression, level 3 [ 185.326030][ T7489] BTRFS info (device loop4): using free space tree [ 185.327398][ T7508] FAT-fs (loop2): Directory bread(block 73) failed [ 185.341606][ T5408] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 185.346002][ T7489] BTRFS error (device loop4): failed to load root extent [ 185.347393][ T7489] BTRFS warning (device loop4): try to load backup roots slot 1 [ 185.352140][ T5408] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 185.442430][ T7489] BTRFS warning (device loop4): couldn't read tree root [ 185.513863][ T7489] BTRFS warning (device loop4): try to load backup roots slot 2 [ 185.748332][ T7489] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 185.753996][ T7489] BTRFS warning (device loop4): couldn't read tree root [ 185.772562][ T7489] BTRFS warning (device loop4): try to load backup roots slot 3 [ 186.302485][ T7489] BTRFS info (device loop4): rebuilding free space tree [ 186.307796][ T7489] BTRFS info (device loop4): checking UUID tree [ 186.701710][ T7578] loop3: detected capacity change from 0 to 512 [ 186.751184][ T7578] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 186.773340][ T4331] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.853129][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 186.922880][ T7588] netlink: 'syz.4.685': attribute type 10 has an invalid length. [ 186.955203][ T7588] device dummy0 entered promiscuous mode [ 186.962049][ T7588] team0: Port device dummy0 added [ 186.974111][ T7588] netlink: 14 bytes leftover after parsing attributes in process `syz.4.685'. [ 187.001632][ T4675] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (4675) [ 187.444748][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.446619][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.747534][ T7626] netlink: 136 bytes leftover after parsing attributes in process `syz.1.688'. [ 187.752955][ T7626] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 187.862874][ T7583] loop2: detected capacity change from 0 to 32768 [ 188.983762][ T7638] ubi: mtd0 is already attached to ubi31 [ 188.985378][ T7637] ubi: mtd0 is already attached to ubi31 [ 189.025468][ T7583] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 189.028014][ T7583] XFS (loop2): Mounting V5 Filesystem [ 189.075398][ T7583] XFS (loop2): Ending clean mount [ 189.081247][ T7583] XFS (loop2): Quotacheck needed: Please wait. [ 189.105494][ T7583] XFS (loop2): Quotacheck: Done. [ 189.187143][ T7653] loop4: detected capacity change from 0 to 2048 [ 189.191137][ T4330] XFS (loop2): Unmounting Filesystem [ 189.215595][ T7657] loop1: detected capacity change from 0 to 512 [ 189.217088][ T7657] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.222912][ T7653] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 189.231086][ T7657] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.247400][ T7657] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #2: block 4: comm syz.1.698: lblock 0 mapped to illegal pblock 4 (length 1) [ 189.253838][ T7657] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.698: error -117 reading directory block [ 189.256068][ T7657] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 189.308795][ T7657] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 189.356476][ T7664] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.060243][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 190.287087][ T7701] loop1: detected capacity change from 0 to 128 [ 190.294814][ T7701] EXT4-fs (loop1): Test dummy encryption mode enabled [ 190.314953][ T7701] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 190.316611][ T7701] System zones: 1-3, 19-19, 35-36 [ 190.317884][ T7701] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 190.360975][ T7701] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.252673][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 191.354393][ T7707] loop3: detected capacity change from 0 to 40427 [ 191.356167][ T7707] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 191.357527][ T7707] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 191.478462][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 191.702129][ T7707] F2FS-fs (loop3): invalid crc value [ 191.704801][ T7722] loop2: detected capacity change from 0 to 2048 [ 191.707253][ T7725] loop1: detected capacity change from 0 to 256 [ 191.713339][ T7725] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 191.717446][ T7722] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.725293][ T7725] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 191.726515][ T7707] F2FS-fs (loop3): Found nat_bits in checkpoint [ 191.732640][ T7725] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 191.734104][ T7725] UDF-fs: Scanning with blocksize 512 failed [ 191.741257][ T7707] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 191.744819][ T7707] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 191.746524][ T7725] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 191.751304][ T7725] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.786709][ T39] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 191.787500][ T7725] overlayfs: upper fs needs to support d_type. [ 191.793672][ T39] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 191.797536][ T7725] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 191.804551][ T7725] overlayfs: failed to set xattr on upper [ 191.805526][ T7725] overlayfs: ...falling back to index=off,metacopy=off. [ 191.854277][ T7714] loop4: detected capacity change from 0 to 32768 [ 191.862779][ T7714] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.707 (7714) [ 191.869884][ T7714] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 191.871815][ T7714] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 191.874953][ T7714] BTRFS info (device loop4): using free space tree [ 191.972471][ T7749] loop1: detected capacity change from 0 to 65 [ 191.990231][ T7749] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 192.036184][ T7743] loop2: detected capacity change from 0 to 4096 [ 192.045120][ T7743] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 192.084041][ T7714] BTRFS info (device loop4): enabling ssd optimizations [ 192.425665][ T7766] loop1: detected capacity change from 0 to 128 [ 192.427760][ T7766] EXT4-fs (loop1): Test dummy encryption mode enabled [ 192.431853][ T7766] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 192.433321][ T7766] System zones: 1-3, 19-19, 35-36 [ 192.434599][ T7766] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 192.437463][ T7766] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.257553][ T4331] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 193.282632][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 193.818844][ T7824] ubi: mtd0 is already attached to ubi31 [ 194.299769][ T7835] ubi: mtd0 is already attached to ubi31 [ 194.348658][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 194.571511][ T7834] set_capacity_and_notify: 2 callbacks suppressed [ 194.571523][ T7834] loop2: detected capacity change from 0 to 128 [ 194.576169][ T7834] EXT4-fs (loop2): Test dummy encryption mode enabled [ 194.593763][ T7834] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 194.595439][ T7834] System zones: 1-3, 19-19, 35-36 [ 194.601237][ T7834] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 194.662797][ T7834] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.784187][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 195.993528][ T7886] tipc: Failed to obtain node identity [ 195.994804][ T7886] tipc: Enabling of bearer rejected, failed to enable media [ 196.010973][ T7890] loop4: detected capacity change from 0 to 64 [ 196.030883][ T7890] hfs: filesystem is marked locked, mounting read-only. [ 196.053014][ T7890] hfs: filesystem is marked locked, leaving read-only. [ 196.282204][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 196.647207][ T7884] loop1: detected capacity change from 0 to 32768 [ 196.681557][ T7884] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 197.005102][ T7914] infiniband syz1: set active [ 197.018476][ T7914] infiniband syz1: added bond_slave_1 [ 197.021177][ T4320] ocfs2: Unmounting device (7,1) on (node local) [ 197.065209][ T7914] RDS/IB: syz1: added [ 197.075562][ T7914] smc: adding ib device syz1 with port count 1 [ 197.080951][ T7914] smc: ib device syz1 port 1 has pnetid [ 197.083311][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.756'. [ 197.120526][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.756'. [ 197.187921][ T7929] tipc: Failed to obtain node identity [ 197.189096][ T7929] tipc: Enabling of bearer rejected, failed to enable media [ 197.541174][ T7948] ubi: mtd0 is already attached to ubi31 [ 197.844573][ T7961] loop3: detected capacity change from 0 to 256 [ 197.899797][ T7959] loop1: detected capacity change from 0 to 512 [ 197.908849][ T7959] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 197.987670][ T7964] ubi: mtd0 is already attached to ubi31 [ 198.005529][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 198.224372][ T7959] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.772: corrupted in-inode xattr [ 198.234121][ T7959] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.772: couldn't read orphan inode 15 (err -117) [ 198.251999][ T7959] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 198.295497][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 198.315834][ T7968] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.339149][ T7970] loop3: detected capacity change from 0 to 2048 [ 198.354322][ T7970] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 198.357284][ T7970] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 198.357886][ T7974] loop4: detected capacity change from 0 to 512 [ 198.370806][ T7970] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.383124][ T7974] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #3: comm syz.4.776: corrupted inode contents [ 198.387399][ T7974] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #3: comm syz.4.776: mark_inode_dirty error [ 198.395407][ T7974] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #3: comm syz.4.776: corrupted inode contents [ 198.397764][ T7974] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.776: mark_inode_dirty error [ 198.402806][ T7974] __quota_error: 63 callbacks suppressed [ 198.402822][ T7974] Quota error (device loop4): write_blk: dquota write failed [ 198.405576][ T7974] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 198.407379][ T7974] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.776: Failed to acquire dquot type 0 [ 198.415792][ T7974] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.776: corrupted inode contents [ 198.419846][ T7974] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #16: comm syz.4.776: mark_inode_dirty error [ 198.422040][ T7974] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.776: corrupted inode contents [ 198.424299][ T7974] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.776: mark_inode_dirty error [ 198.426416][ T7974] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.776: corrupted inode contents [ 198.432953][ T7974] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 198.434813][ T7974] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.776: corrupted inode contents [ 198.437196][ T7974] EXT4-fs error (device loop4): ext4_truncate:4325: inode #16: comm syz.4.776: mark_inode_dirty error [ 198.439387][ T7974] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 198.441859][ T7974] EXT4-fs (loop4): 1 truncate cleaned up [ 198.442962][ T7974] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.444632][ T7974] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.591894][ T7987] securityfs: Unknown parameter '' [ 198.880100][ T7987] Injecting memory failure for pfn 0x13fec6 at process virtual address 0x20000000 [ 198.885832][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 198.887428][ T7987] Memory failure: 0x13fec6: recovery action for dirty LRU page: Recovered [ 198.889691][ T7987] Injecting memory failure for pfn 0x137dc2 at process virtual address 0x20001000 [ 198.891294][ T7987] Memory failure: 0x137dc2: recovery action for dirty LRU page: Recovered [ 198.905701][ T7987] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 198.909783][ T7987] Memory failure: 0x225a04: already hardware poisoned [ 199.486670][ T7998] loop2: detected capacity change from 0 to 4096 [ 199.701254][ T8006] ubi: mtd0 is already attached to ubi31 [ 199.943899][ T4330] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 199.946435][ T4330] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 200.053780][ T8016] rdma_rxe: rxe_register_device failed with error -23 [ 200.057564][ T8016] rdma_rxe: failed to add bond_slave_1 [ 200.106623][ T8002] loop3: detected capacity change from 0 to 40427 [ 200.190709][ T8002] F2FS-fs (loop3): Found nat_bits in checkpoint [ 200.908729][ T8026] ubi: mtd0 is already attached to ubi31 [ 200.910349][ T8025] ubi: mtd0 is already attached to ubi31 [ 200.961009][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 201.117379][ T8002] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 201.255615][ T4321] syz-executor: attempt to access beyond end of device [ 201.255615][ T4321] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 201.305427][ T8041] securityfs: Unknown parameter '' [ 201.306769][ T8041] Injecting memory failure for pfn 0x14169d at process virtual address 0x20000000 [ 201.309134][ T8041] Memory failure: 0x14169d: recovery action for dirty LRU page: Recovered [ 201.310489][ T8041] Injecting memory failure for pfn 0x137d43 at process virtual address 0x20001000 [ 201.318612][ T8041] Memory failure: 0x137d43: recovery action for dirty LRU page: Recovered [ 201.322815][ T8041] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 201.324361][ T8041] Memory failure: 0x225a04: already hardware poisoned [ 201.437209][ T8054] securityfs: Unknown parameter '' [ 201.443164][ T8054] Injecting memory failure for pfn 0x13a4e1 at process virtual address 0x20000000 [ 201.445072][ T8054] Memory failure: 0x13a4e1: recovery action for dirty LRU page: Recovered [ 201.446432][ T8054] Injecting memory failure for pfn 0x13a032 at process virtual address 0x20001000 [ 201.448095][ T8054] Memory failure: 0x13a032: recovery action for dirty LRU page: Recovered [ 201.450313][ T8054] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 201.451865][ T8054] Memory failure: 0x225a04: already hardware poisoned [ 201.516039][ T8063] netlink: 372 bytes leftover after parsing attributes in process `syz.2.805'. [ 201.627045][ T8061] rdma_rxe: rxe_register_device failed with error -23 [ 201.629304][ T8061] rdma_rxe: failed to add bond_slave_1 [ 201.728232][ T8075] ubi: mtd0 is already attached to ubi31 [ 202.115487][ T8090] netlink: 224 bytes leftover after parsing attributes in process `syz.2.810'. [ 202.240514][ T8102] securityfs: Unknown parameter '' [ 202.241956][ T8102] Injecting memory failure for pfn 0x13edf4 at process virtual address 0x20000000 [ 202.245824][ T8102] Memory failure: 0x13edf4: recovery action for dirty LRU page: Recovered [ 202.250769][ T8102] Injecting memory failure for pfn 0x13edf6 at process virtual address 0x20001000 [ 202.255730][ T8102] Memory failure: 0x13edf6: recovery action for dirty LRU page: Recovered [ 202.258319][ T8102] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 202.262133][ T8102] Memory failure: 0x225a04: already hardware poisoned [ 202.477654][ T8121] loop4: detected capacity change from 0 to 4096 [ 202.517976][ T8121] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 202.522228][ T8128] netlink: 224 bytes leftover after parsing attributes in process `syz.3.825'. [ 202.642814][ T8121] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.823: corrupted inode contents [ 202.671892][ T8121] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #15: comm syz.4.823: mark_inode_dirty error [ 202.848366][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 202.980249][ T8121] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.823: corrupted inode contents [ 202.986608][ T8121] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.823: mark_inode_dirty error [ 202.992950][ T8121] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.823: corrupted inode contents [ 203.002712][ T8121] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.823: mark_inode_dirty error [ 203.012819][ T8121] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.823: corrupted inode contents [ 203.022749][ T8121] EXT4-fs error (device loop4): ext4_truncate:4325: inode #15: comm syz.4.823: mark_inode_dirty error [ 203.029911][ T8121] EXT4-fs error (device loop4) in ext4_setattr:5695: Corrupt filesystem [ 203.062318][ T8139] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.823: corrupted inode contents [ 203.069497][ T8145] loop3: detected capacity change from 0 to 128 [ 203.111909][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 203.183286][ T8150] loop3: detected capacity change from 0 to 128 [ 203.191731][ T8148] loop4: detected capacity change from 0 to 256 [ 203.205282][ T8150] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 203.207182][ T8150] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 203.247560][ T8150] fscrypt (loop3, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop3' because it doesn't have stable inode numbers [ 203.297185][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 203.736543][ T8154] ubi: mtd0 is already attached to ubi31 [ 203.766965][ T8160] loop3: detected capacity change from 0 to 2048 [ 203.789382][ T8160] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 203.806882][ T8162] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.836115][ T8160] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 203.837176][ T8163] netlink: 224 bytes leftover after parsing attributes in process `syz.4.837'. [ 203.883745][ T8160] Remounting filesystem read-only [ 203.885377][ T8160] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 262144 [ 203.887200][ T8160] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 203.904529][ T8160] NILFS (loop3): error -5 truncating bmap (ino=15) [ 203.945414][ T4321] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 204.000539][ T8175] loop2: detected capacity change from 0 to 64 [ 204.234336][ T8190] loop4: detected capacity change from 0 to 128 [ 204.261097][ T8190] EXT4-fs (loop4): Test dummy encryption mode enabled [ 204.263081][ T8190] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 204.264377][ T8190] System zones: 1-3, 19-19, 35-36 [ 204.277016][ T8190] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 204.281225][ T8190] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.294088][ T8172] loop3: detected capacity change from 0 to 40427 [ 204.322511][ T8172] F2FS-fs (loop3): invalid crc value [ 204.370666][ T8172] F2FS-fs (loop3): Found nat_bits in checkpoint [ 204.395414][ T8172] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 204.777594][ T4321] syz-executor: attempt to access beyond end of device [ 204.777594][ T4321] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 205.096572][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 205.144414][ T8217] securityfs: Unknown parameter '' [ 205.145736][ T8217] Injecting memory failure for pfn 0x137eab at process virtual address 0x20000000 [ 205.194554][ T8217] Memory failure: 0x137eab: recovery action for dirty LRU page: Recovered [ 205.197916][ T8217] Injecting memory failure for pfn 0x12393f at process virtual address 0x20001000 [ 205.215522][ T8217] Memory failure: 0x12393f: recovery action for dirty LRU page: Recovered [ 205.217148][ T8217] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 205.225648][ T8217] Memory failure: 0x225a04: already hardware poisoned [ 205.330166][ T8219] ubi: mtd0 is already attached to ubi31 [ 205.345760][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 205.637093][ T8181] loop1: detected capacity change from 0 to 131072 [ 205.648473][ T8181] F2FS-fs (loop1): invalid crc value [ 205.669194][ T8228] loop4: detected capacity change from 0 to 256 [ 205.678019][ T8181] F2FS-fs (loop1): Found nat_bits in checkpoint [ 205.681090][ T8228] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x41f366b4, utbl_chksum : 0xe619d30d) [ 205.708101][ T8181] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 205.760868][ T8181] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 205.872559][ T8238] loop4: detected capacity change from 0 to 8192 [ 205.881774][ T8238] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 205.886325][ T8238] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 205.903010][ T8238] REISERFS (device loop4): using ordered data mode [ 205.904356][ T8238] reiserfs: using flush barriers [ 205.918010][ T8238] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 205.926520][ T8238] REISERFS (device loop4): checking transaction log (loop4) [ 205.937566][ T8238] REISERFS (device loop4): Using r5 hash to sort names [ 205.943702][ T8238] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 206.384108][ T8249] loop1: detected capacity change from 0 to 4096 [ 206.410782][ T8249] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 206.427645][ T8249] ntfs3: loop1: ino=1b, "file0" directory corrupted [ 206.442435][ T8251] loop3: detected capacity change from 0 to 4096 [ 206.445388][ T4443] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 206.450425][ T4320] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 206.452209][ T8251] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 206.454663][ T4320] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 206.456926][ T4320] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 206.460378][ T4443] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 206.461832][ T4320] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 206.478613][ T8254] securityfs: Unknown parameter '' [ 206.480458][ T8254] Injecting memory failure for pfn 0x13a27c at process virtual address 0x20000000 [ 206.482504][ T8254] Memory failure: 0x13a27c: recovery action for dirty LRU page: Recovered [ 206.484561][ T8254] Injecting memory failure for pfn 0x13b107 at process virtual address 0x20001000 [ 206.489674][ T8254] Memory failure: 0x13b107: recovery action for dirty LRU page: Recovered [ 206.492362][ T8254] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 206.496395][ T8254] Memory failure: 0x225a04: already hardware poisoned [ 206.511590][ T8256] loop1: detected capacity change from 0 to 512 [ 206.587951][ T8256] syz.1.869: attempt to access beyond end of device [ 206.587951][ T8256] loop1: rw=34817, sector=17179852706, nr_sectors = 4 limit=512 [ 206.615581][ T8265] loop4: detected capacity change from 0 to 64 [ 206.921046][ T8279] ubi: mtd0 is already attached to ubi31 [ 206.939536][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 207.156079][ T8280] securityfs: Unknown parameter '' [ 207.157522][ T8280] Injecting memory failure for pfn 0x122fb4 at process virtual address 0x20000000 [ 207.161893][ T8280] Memory failure: 0x122fb4: recovery action for dirty LRU page: Recovered [ 207.178704][ T8280] Injecting memory failure for pfn 0x123b29 at process virtual address 0x20001000 [ 207.183971][ T8259] loop3: detected capacity change from 0 to 32768 [ 207.185662][ T8280] Memory failure: 0x123b29: recovery action for dirty LRU page: Recovered [ 207.187894][ T8259] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.870 (8259) [ 207.195089][ T8280] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 207.196813][ T8280] Memory failure: 0x225a04: already hardware poisoned [ 207.203701][ T8259] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 207.205768][ T8259] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 207.208474][ T8259] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 207.210125][ T8259] BTRFS info (device loop3): use zstd compression, level 3 [ 207.211380][ T8259] BTRFS info (device loop3): using free space tree [ 207.294757][ T8259] BTRFS info (device loop3): enabling ssd optimizations [ 207.337750][ T8303] securityfs: Unknown parameter '' [ 207.340906][ T8303] Injecting memory failure for pfn 0x1390d1 at process virtual address 0x20000000 [ 207.342745][ T8303] Memory failure: 0x1390d1: recovery action for dirty LRU page: Recovered [ 207.344246][ T8303] Injecting memory failure for pfn 0x13bed5 at process virtual address 0x20001000 [ 207.346063][ T8303] Memory failure: 0x13bed5: recovery action for dirty LRU page: Recovered [ 207.347882][ T8303] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 207.349409][ T8303] Memory failure: 0x225a04: already hardware poisoned [ 207.371961][ T4321] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 207.668022][ T8317] loop2: detected capacity change from 0 to 512 [ 207.711051][ T8321] loop1: detected capacity change from 0 to 128 [ 207.717672][ T8321] EXT4-fs (loop1): Test dummy encryption mode enabled [ 207.733917][ T8321] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 207.735510][ T8321] System zones: 1-3, 19-19, 35-36 [ 207.763889][ T8321] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 207.766817][ T8321] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.346618][ T8335] securityfs: Unknown parameter '' [ 208.347873][ T8335] Injecting memory failure for pfn 0x140342 at process virtual address 0x20000000 [ 208.369365][ T8335] Memory failure: 0x140342: recovery action for dirty LRU page: Recovered [ 208.370841][ T8335] Injecting memory failure for pfn 0x140343 at process virtual address 0x20001000 [ 208.372526][ T8335] Memory failure: 0x140343: recovery action for dirty LRU page: Recovered [ 208.373920][ T8335] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 208.375451][ T8335] Memory failure: 0x225a04: already hardware poisoned [ 208.422138][ T8338] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 208.423558][ T8338] FAT-fs (loop3): Filesystem has been set read-only [ 208.425895][ T8338] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 208.577155][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 208.698412][ T4336] Bluetooth: Frame is too long (len 12, expected len 4) [ 209.100241][ T8349] securityfs: Unknown parameter '' [ 209.101642][ T8349] Injecting memory failure for pfn 0x125bde at process virtual address 0x20000000 [ 209.104893][ T8349] Memory failure: 0x125bde: recovery action for dirty LRU page: Recovered [ 209.106409][ T8349] Injecting memory failure for pfn 0x140f0d at process virtual address 0x20001000 [ 209.108031][ T8349] Memory failure: 0x140f0d: recovery action for dirty LRU page: Recovered [ 209.109902][ T8349] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 209.111554][ T8349] Memory failure: 0x225a04: already hardware poisoned [ 209.225118][ T8355] FAT-fs (loop3): bogus sectors per cluster 223 [ 209.226184][ T8355] FAT-fs (loop3): Can't find a valid FAT filesystem [ 209.378974][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.905'. [ 209.380502][ T8364] netlink: 'syz.1.905': attribute type 29 has an invalid length. [ 209.381780][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.905'. [ 210.249836][ T8385] lo: Caught tx_queue_len zero misconfig [ 210.346581][ T8412] securityfs: Unknown parameter '' [ 210.348060][ T8412] Injecting memory failure for pfn 0x122f33 at process virtual address 0x20000000 [ 210.350608][ T8412] Memory failure: 0x122f33: recovery action for dirty LRU page: Recovered [ 210.352014][ T8412] Injecting memory failure for pfn 0x1238ed at process virtual address 0x20001000 [ 210.353742][ T8412] Memory failure: 0x1238ed: recovery action for dirty LRU page: Recovered [ 210.355330][ T8412] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 210.356970][ T8412] Memory failure: 0x225a04: already hardware poisoned [ 210.449730][ T8420] bridge0: port 3(geneve1) entered disabled state [ 210.452144][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.453332][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.997324][ T4336] Bluetooth: hci3: command 0x0406 tx timeout [ 211.049184][ T4329] Bluetooth: Frame is too long (len 12, expected len 4) [ 211.207612][ T8438] set_capacity_and_notify: 4 callbacks suppressed [ 211.207624][ T8438] loop1: detected capacity change from 0 to 4096 [ 211.207728][ T8435] loop2: detected capacity change from 0 to 4096 [ 211.216523][ T8438] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 211.230513][ T8435] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 211.245557][ T8435] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 211.247352][ T8435] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 211.257145][ T8435] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 211.265994][ T8435] ntfs: volume version 3.1. [ 211.322674][ T8435] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 211.324607][ T8435] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 211.370549][ T6248] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 211.372472][ T6248] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 211.419611][ T4330] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 211.557534][ T8439] loop3: detected capacity change from 0 to 40427 [ 211.889549][ T8453] securityfs: Unknown parameter '' [ 211.899555][ T8453] Injecting memory failure for pfn 0x13b026 at process virtual address 0x20000000 [ 211.930284][ T8439] F2FS-fs (loop3): invalid crc value [ 211.932051][ T8453] Memory failure: 0x13b026: recovery action for dirty LRU page: Recovered [ 211.943901][ T8453] Injecting memory failure for pfn 0x13ae54 at process virtual address 0x20001000 [ 211.951762][ T8439] F2FS-fs (loop3): Found nat_bits in checkpoint [ 211.961771][ T8453] Memory failure: 0x13ae54: recovery action for dirty LRU page: Recovered [ 211.963510][ T8453] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 211.986362][ T8453] Memory failure: 0x225a04: already hardware poisoned [ 212.270216][ T8439] F2FS-fs (loop3): Start checkpoint disabled! [ 212.352473][ T8439] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 212.477797][ T8483] loop5: detected capacity change from 0 to 1 [ 212.513357][ T8483] Dev loop5: unable to read RDB block 1 [ 212.514305][ T8483] loop5: unable to read partition table [ 212.515476][ T8483] loop5: partition table beyond EOD, truncated [ 212.516602][ T8483] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 212.557466][ T8495] veth1: Caught tx_queue_len zero misconfig [ 213.335838][ T8533] securityfs: Unknown parameter '' [ 213.337208][ T8533] Injecting memory failure for pfn 0x137da0 at process virtual address 0x20000000 [ 213.373182][ T8533] Memory failure: 0x137da0: recovery action for dirty LRU page: Recovered [ 213.381137][ T8533] Injecting memory failure for pfn 0x12201a at process virtual address 0x20001000 [ 213.382771][ T8533] Memory failure: 0x12201a: recovery action for dirty LRU page: Recovered [ 213.395958][ T8533] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 213.397711][ T8533] Memory failure: 0x225a04: already hardware poisoned [ 214.026090][ T8571] loop1: detected capacity change from 0 to 40427 [ 214.047076][ T8571] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x3ffff [ 214.051317][ T8571] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 214.059977][ T8571] F2FS-fs (loop1): invalid crc value [ 214.081012][ T8571] F2FS-fs (loop1): Found nat_bits in checkpoint [ 214.086782][ T8571] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x54c/0x884 [ 214.135969][ T8571] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 214.163654][ T8571] F2FS-fs (loop1) : inject no more block in inc_valid_block_count of __allocate_data_block+0x39c/0x8bc [ 214.183159][ T8571] F2FS-fs (loop1) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x14c/0x8e4 [ 214.250145][ T8574] loop4: detected capacity change from 0 to 32768 [ 214.271915][ T8574] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.947 (8574) [ 214.288538][ T8574] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.296301][ T8574] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 214.298042][ T8574] BTRFS info (device loop4): setting nodatacow, compression disabled [ 214.583031][ T8574] BTRFS info (device loop4): enabling auto defrag [ 214.584241][ T8574] BTRFS info (device loop4): max_inline at 0 [ 214.585199][ T8574] BTRFS info (device loop4): using free space tree [ 214.641450][ T8601] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 214.698017][ T8606] securityfs: Unknown parameter '' [ 214.700708][ T8606] Injecting memory failure for pfn 0x138fb3 at process virtual address 0x20000000 [ 214.869735][ T8606] Memory failure: 0x138fb3: recovery action for dirty LRU page: Recovered [ 214.880383][ T8606] Injecting memory failure for pfn 0x141b8a at process virtual address 0x20001000 [ 214.941637][ T8606] Memory failure: 0x141b8a: recovery action for dirty LRU page: Recovered [ 215.204728][ T8606] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 215.206509][ T8606] Memory failure: 0x225a04: already hardware poisoned [ 215.444240][ T4331] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 216.121004][ T8592] loop2: detected capacity change from 0 to 40427 [ 216.153935][ T8661] loop4: detected capacity change from 0 to 256 [ 216.171401][ T8592] F2FS-fs (loop2): invalid crc value [ 216.183446][ T8592] F2FS-fs (loop2): Found nat_bits in checkpoint [ 216.196124][ T8592] F2FS-fs (loop2): Start checkpoint disabled! [ 216.204503][ T8592] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 216.223016][ T8592] syz.2.954: attempt to access beyond end of device [ 216.223016][ T8592] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 216.232567][ T8592] syz.2.954: attempt to access beyond end of device [ 216.232567][ T8592] loop2: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 216.236047][ T8667] loop4: detected capacity change from 0 to 256 [ 216.267036][ T5289] kworker/u4:20: attempt to access beyond end of device [ 216.267036][ T5289] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 216.371457][ T8675] Driver unsupported XDP return value 0 on prog (id 65) dev N/A, expect packet loss! [ 216.492709][ T8682] loop1: detected capacity change from 0 to 2048 [ 216.812957][ T8682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.883117][ T8687] loop4: detected capacity change from 0 to 1024 [ 217.426146][ T5289] hfsplus: b-tree write err: -5, ino 25 [ 217.427065][ T5289] hfsplus: b-tree write err: -5, ino 4 [ 217.428050][ T5289] hfsplus: b-tree write err: -5, ino 2 [ 217.434302][ T5289] hfsplus: b-tree write err: -5, ino 26 [ 217.471248][ T8704] loop2: detected capacity change from 0 to 16 [ 217.551371][ T8704] erofs: (device loop2): mounted with root inode @ nid 36. [ 218.032489][ T8747] loop1: detected capacity change from 0 to 256 [ 218.036587][ T8746] loop2: detected capacity change from 0 to 128 [ 218.094213][ T8746] EXT4-fs (loop2): Test dummy encryption mode enabled [ 218.105101][ T8746] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 218.106492][ T8746] System zones: 1-3, 19-19, 35-36 [ 218.111880][ T8746] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 218.118359][ T8746] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.197180][ T8754] loop4: detected capacity change from 0 to 512 [ 218.216540][ T8754] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 218.599364][ T8754] EXT4-fs (loop4): orphan cleanup on readonly fs [ 218.603142][ T8754] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.983: Block bitmap for bg 0 marked uninitialized [ 218.615039][ T8754] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 218.622211][ T8754] EXT4-fs (loop4): 1 orphan inode deleted [ 218.626561][ T8754] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 218.960965][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 218.981232][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 219.123347][ T8774] loop3: detected capacity change from 0 to 256 [ 219.124965][ T8774] exfat: Deprecated parameter 'namecase' [ 219.154543][ T8774] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 219.585902][ T8787] input: syz0 as /devices/virtual/input/input5 [ 219.763888][ T8797] securityfs: Unknown parameter '' [ 219.765539][ T8797] Injecting memory failure for pfn 0x125ad2 at process virtual address 0x20000000 [ 219.768865][ T8798] loop1: detected capacity change from 0 to 128 [ 219.770304][ T8797] Memory failure: 0x125ad2: recovery action for dirty LRU page: Recovered [ 219.790454][ T8798] EXT4-fs (loop1): Test dummy encryption mode enabled [ 219.792888][ T8797] Injecting memory failure for pfn 0x137dff at process virtual address 0x20001000 [ 219.797872][ T8797] Memory failure: 0x137dff: recovery action for dirty LRU page: Recovered [ 220.065970][ C0] ------------[ cut here ]------------ [ 220.066911][ C0] WARNING: CPU: 0 PID: 8796 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0xf60/0x12bc [ 220.068492][ C0] Modules linked in: [ 220.069128][ C0] CPU: 0 PID: 8796 Comm: syz.0.997 Not tainted syzkaller #0 [ 220.070328][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 220.072036][ C0] pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 220.073368][ C0] pc : __ieee80211_beacon_get+0xf60/0x12bc [ 220.074401][ C0] lr : __ieee80211_beacon_get+0xf60/0x12bc [ 220.075467][ C0] sp : ffff800008007a90 [ 220.076156][ C0] x29: ffff800008007ad0 x28: ffffffffffffe520 x27: 0000000000000001 [ 220.077519][ C0] x26: 0000000000000041 x25: ffff0000f5444400 x24: 0000000000000000 [ 220.078897][ C0] x23: ffff0000ce368e80 x22: ffff800008007b3c x21: ffff0000d3dea228 [ 220.080349][ C0] x20: dfff800000000000 x19: ffff0000d3dea760 x18: 0000000000000000 [ 220.081705][ C0] x17: ffff80018a3bc000 x16: ffff8000082d7db8 x15: 0000000000000000 [ 220.083057][ C0] x14: 0000000000000007 x13: 0000000000ff0100 x12: 0000000000ff0100 [ 220.084360][ C0] x11: ff0080001131b664 x10: 0000000000000000 x9 : ffff80001131b664 [ 220.085699][ C0] x8 : ffff0000f9698000 x7 : 0000000000000000 x6 : 0000000000000000 [ 220.087043][ C0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80001131a95c [ 220.088423][ C0] x2 : 000000000000000a x1 : 0000000000000000 x0 : 0000000000000000 [ 220.089874][ C0] Call trace: [ 220.090442][ C0] __ieee80211_beacon_get+0xf60/0x12bc [ 220.091345][ C0] ieee80211_beacon_get_tim+0x70/0x44c [ 220.092217][ C0] mac80211_hwsim_beacon_tx+0x1e8/0x914 [ 220.093170][ C0] __iterate_interfaces+0x204/0x484 [ 220.094022][ C0] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 220.095195][ C0] mac80211_hwsim_beacon+0xc8/0x1b8 [ 220.096077][ C0] __hrtimer_run_queues+0x438/0xc3c [ 220.096931][ C0] hrtimer_run_softirq+0x160/0x400 [ 220.097800][ C0] handle_softirqs+0x318/0xc60 [ 220.098593][ C0] __do_softirq+0x14/0x20 [ 220.099297][ C0] ____do_softirq+0x14/0x20 [ 220.100061][ C0] call_on_irq_stack+0x30/0x48 [ 220.100856][ C0] do_softirq_own_stack+0x20/0x2c [ 220.101718][ C0] __irq_exit_rcu+0x23c/0x438 [ 220.102497][ C0] irq_exit_rcu+0x14/0x84 [ 220.103217][ C0] el1_interrupt+0x38/0x54 [ 220.104022][ C0] el1h_64_irq_handler+0x18/0x24 [ 220.104892][ C0] el1h_64_irq+0x64/0x68 [ 220.105635][ C0] arch_local_irq_restore+0x8/0x10 [ 220.106518][ C0] __might_resched+0x48/0x4cc [ 220.107340][ C0] __might_sleep+0x94/0x110 [ 220.108128][ C0] __mutex_lock_common+0xd0/0x1f60 [ 220.109113][ C0] mutex_lock_nested+0x38/0x44 [ 220.109949][ C0] __unix_dgram_recvmsg+0x180/0xb04 [ 220.110885][ C0] unix_dgram_recvmsg+0xd0/0xe8 [ 220.111718][ C0] ____sys_recvmsg+0x678/0x768 [ 220.112546][ C0] do_recvmmsg+0x388/0xa0c [ 220.113322][ C0] __arm64_sys_recvmmsg+0x17c/0x23c [ 220.114238][ C0] invoke_syscall+0x98/0x2b4 [ 220.115068][ C0] el0_svc_common+0x138/0x258 [ 220.115884][ C0] do_el0_svc+0x58/0x130 [ 220.116600][ C0] el0_svc+0x58/0x128 [ 220.117285][ C0] el0t_64_sync_handler+0x84/0xf0 [ 220.118168][ C0] el0t_64_sync+0x18c/0x190 [ 220.118988][ C0] irq event stamp: 135627 [ 220.119755][ C0] hardirqs last enabled at (135626): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 220.121511][ C0] hardirqs last disabled at (135627): [] el1_dbg+0x24/0x80 [ 220.122991][ C0] softirqs last enabled at (115974): [] handle_softirqs+0xaec/0xc60 [ 220.124599][ C0] softirqs last disabled at (135623): [] __do_softirq+0x14/0x20 [ 220.126085][ C0] ---[ end trace 0000000000000000 ]--- [ 220.394670][ T8798] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 220.400263][ T8797] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 220.402999][ T8797] Memory failure: 0x225a04: already hardware poisoned [ 220.408432][ T8798] System zones: 1-3, 19-19, 35-36 [ 220.412128][ T8798] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 220.414330][ T8798] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.920182][ T4320] EXT4-fs (loop1): unmounting filesystem.