last executing test programs: 2m59.417444231s ago: executing program 3 (id=159): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@mcast1, @private2, @private2={0xfc, 0x2, '\x00', 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca0242}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001800010000000000000000000a000000fe0000000000000014000500fc"], 0x30}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r2}) 2m59.125222623s ago: executing program 3 (id=161): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x10, 0x0, 0x7ffc0002}]}) syz_emit_ethernet(0x72, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f008400000000880000"}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_io_uring_setup(0x83a, &(0x7f0000000180)={0x0, 0x2b9a, 0x1000, 0x0, 0x3cf}, &(0x7f0000000300)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) open$dir(0x0, 0x10000, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x41, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x1}) io_uring_enter(r3, 0x3516, 0x8000000, 0x0, 0x0, 0x0) 2m56.819412807s ago: executing program 3 (id=168): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200cc84, &(0x7f0000000880)=ANY=[], 0x1, 0x22d, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0xa) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) getresgid(0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@empty, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x19}}, [@mark={0xc, 0x15, {0x35075b}}]}, 0x104}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x21}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008080}, 0x4040) 2m55.435771945s ago: executing program 3 (id=173): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3b, r5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(r6, 0x8936, &(0x7f0000000000)) 2m52.441415663s ago: executing program 3 (id=181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080007401000000d0500020007000000080006400000000208000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x844) 2m52.141567668s ago: executing program 3 (id=186): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000057c9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@ipv4_getrule={0xfffffffffffffdf5, 0x22, 0x400, 0x70bd2a, 0x25d7dbfc, {0x2, 0x10, 0x14, 0x1, 0xa, 0x0, 0x0, 0x5, 0x10008}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24000080) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) socket$inet6(0xa, 0x3, 0x7) 2m36.531816296s ago: executing program 32 (id=186): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000057c9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@ipv4_getrule={0xfffffffffffffdf5, 0x22, 0x400, 0x70bd2a, 0x25d7dbfc, {0x2, 0x10, 0x14, 0x1, 0xa, 0x0, 0x0, 0x5, 0x10008}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24000080) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) socket$inet6(0xa, 0x3, 0x7) 19.009832955s ago: executing program 5 (id=811): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000001c0)={0x2, 0x8}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x3) close_range(r0, 0xffffffffffffffff, 0x0) 13.023188843s ago: executing program 5 (id=830): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x5, 0x4, 0x7, 0x0, r3, 0x0, '\x00', 0x0, r6, 0x2, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0d00470300d84d20b70000000800000000000000", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"/28], 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x91aef8a0c7c113eb, 0x0) 10.649379353s ago: executing program 1 (id=836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)) 10.487663866s ago: executing program 1 (id=839): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x1, 0x0, &(0x7f0000000380), 0x0) 8.056372149s ago: executing program 5 (id=853): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001800090900000000000091000a000000000000000000000008001e"], 0x24}}, 0x0) 7.892064355s ago: executing program 5 (id=854): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 7.573152965s ago: executing program 5 (id=856): syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xff, 0x5a85, &(0x7f0000001080)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r1 = geteuid() mount$nfs(&(0x7f00000000c0)='!@,:/--#\x00', &(0x7f0000000100)='./file1/file0\x00', &(0x7f0000000140), 0x80400, &(0x7f0000000280)={[{'-]*]'}, {'bcachefs\x00'}, {'bcachefs\x00'}, {}, {'bcachefs\x00'}], [{@smackfshat={'smackfshat', 0x3d, 'bcachefs\x00'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@audit}, {@hash}, {@fowner_lt={'fowner<', r0}}, {@subj_role={'subj_role', 0x3d, 'bcachefs\x00'}}, {@fowner_eq={'fowner', 0x3d, r1}}]}) r2 = open(&(0x7f0000000340)='./bus\x00', 0x14927e, 0x102) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="120100020950c908da0b8a81e7a30103ee277a31b6a958d3395d69ae0109021b00021009802a0904628d00cb1ebc594ce11810a3f78beaf9b8a55501a1d8827a2e6c75db7ce75c50ab1efd469cb6d3e69ae578cff0478b814c63b22f2fba993038c0d572b914d6b8eb5cee36d934701820170d5f069429dd98f4b7345b77730f70f83853aa27d84f5d37955710c3876f1955b1d57f31f2636b14317444f8ca087ada7b262eb334325e9d8c7618cca72cc27a24745b1ef270d717ea18552da37dace8b9a186"], 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) sendfile(r5, r5, 0x0, 0x1000200201005) 7.511511287s ago: executing program 4 (id=857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 6.53318052s ago: executing program 4 (id=860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)) 6.227169595s ago: executing program 2 (id=863): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x5, 0x4, 0x7, 0x0, r3, 0x0, '\x00', 0x0, r6, 0x2, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0d00470300d84d20b70000000800000000000000", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"/28], 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x91aef8a0c7c113eb, 0x0) 6.189651494s ago: executing program 1 (id=864): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x4018400, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYRES8=0x0], 0x1, 0xf23, &(0x7f000001fb40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) statx(r1, &(0x7f0000005b40)='./file0\x00', 0x4000, 0x7ff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x0, 0x3a36}, 0x8) 4.876015571s ago: executing program 0 (id=867): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 4.721022855s ago: executing program 4 (id=868): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}], 0x1, &(0x7f0000000280)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x0, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x30, 0x14001}], 0x1, 0x4044040) 4.208703351s ago: executing program 1 (id=869): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, 0x0) 3.916527467s ago: executing program 1 (id=870): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x8, &(0x7f0000000040)={[{@autodefrag}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55a3, &(0x7f000000ac40)="$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") openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4db8, &(0x7f0000000480)={0x0, 0x9, 0x1, 0x3, 0x63}, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000400)={0x4}, 0x0) 3.898766976s ago: executing program 5 (id=871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 3.788459185s ago: executing program 0 (id=872): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4093, 0xffd}], 0x2}, 0x101}], 0x4, 0x40000020, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="06003800d8510000040049800400e0801a165c80f928efeadc95a00c88d81d8d36eb021f05e357ce0cc80496d946a14b733a0b75dc0e0fe7ec451e3304efabb148cf7740d92633549fc799efeffbb500bf6a3db52cb6551af05b9d13a338392b5a8a8a21422903ac79280ba0651419590f6126813018282ea112a8c697e421a55ef2aac7340a5736e3d51504d8c7f023ee72b55ab9a1a1195cf9edf01e30447d1e000ce0ec914a9a6ae232498e74bcd19c01b7086e3fec56b754ab12185fda15b9525dec81f973a9c4bc9e3346f077651b64733a62e0536a41b5d896c07d71bb8b256ff30493694ca27c654b9cdfd0721dcef4726d97a2974dc7d8e373b0a60174bb0800ee00", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) 3.786225281s ago: executing program 4 (id=873): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="141100005200010000000000000000001a000000001124808f10d7800800eee5", @ANYRES32, @ANYBLOB="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"], 0x1114}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r2, 0x44e9}, &(0x7f0000000040)=0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 3.733183255s ago: executing program 4 (id=874): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x1, 0x0, &(0x7f0000000380), 0x0) 3.711950327s ago: executing program 0 (id=875): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=@tcp, 0x2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x4}, 0x10}}, 0x0) 3.525091713s ago: executing program 2 (id=876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1000001, 0x12, 0xffffffffffffffff, 0x83a28000) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x2, 0x2}, 0x10) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) 2.625584086s ago: executing program 2 (id=877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) write$P9_RGETLOCK(r5, &(0x7f0000000000)={0x20, 0x37, 0x1, {0x0, 0x8, 0x1c, r1, 0x2, ']\x00'}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200), 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x1c0, 0xb, 0x108, 0x108, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 2.521851088s ago: executing program 0 (id=878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)) 1.63838359s ago: executing program 2 (id=879): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x4018400, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYRES8=0x0], 0x1, 0xf23, &(0x7f000001fb40)="$eJzs3U9sHNUZAPA3a6//xCZeAwUDJaTQikDBDkmkprcgUI+IS++gkNAIQ1FDD0RATA+ISogiIU4VByoulEoBqUigShXqqe2pVW89oV6oVKVSUA9tpNhV7Dfr3ecddj22Z9e7v5/0+fnNm53vG6+zmRnPvg3AyKqtfz1xYiEL4Z3P3n705aeyT64vu6u5xuH1r1nsNUII9ZZ+lmzvi7jg2pWXTndqs3Bs/WveD49dbj52JoSwEg6Hz0MjfLi0/NUH7z5y5OPXpm5588Izr+zR7jel+wEAAMPo0p+X/37fP//0wPzVS4dOhcnm8vz4vBH7M/G4/2g8UM6Pl2uhvZ+1RKuJZL2xGLVkvbFkvfEkz3hBvnqynXrBehNd8o21LOu0nwAAALAf5ee1jZDVFtv6tdri4sZ5/3VfzE1ki8+dWz57vk+FAgAAAKX95+L6TbdCCCGEEEIIIYQY4lib6/cVCAAAAGDUpPOFbbGyuzN1NbfW6C3/5YdrnR8Pu6Dq3/+vzz/V5/wdjHj+91/1igMAQHnDejSZ71d+HJ3PY5DOIziWPG67x/+1ZDvj26yzaF7B/TLfYFGd6c91UBXVv93nsV+K6k/nwxxURfWn83QOqqL6Jyuuo6yi+jtc+RlIRfVPV1xHWUX1H6i4jrKK6p+puI6yiuqfrbiOsorqv6HiOsoqqv9gxXWUVVT/frmttqj+RsV1lFVU/3zFdZRVVP+NFddRVlH9N1VcR1mt9bees9zch1r64c7Y5j+HQwXrzXQ4p9sv53gAAAAw6v5n/j8hRizi3Q19r0OIgY0p/0aEEEIIMYxxsb+XHwAAAIABkL8vIH/X+1qUj491GR9vHZ/aXCEfr3d5/ESX8cku4wAAAEAIv3v97G1vZZvz3e10Prx83qjp8MlqKDGPUTof4Xbz73Tes53m3y/zlgEAADBash98vnr/o++9MH/10qFTLWe/q/F8N58HdDxeG/g09vP7AmaTfpafQ59qz1MrWC+9PnBD0fYe3+GOAgAAwAjLz98bIasttpx3N0Kttri4eT6+EOrZ2XPLZ47Gfv75LH+cq09eX/5QxXUDAAAAvds83+98/p9/ju9CmMgWnzu3fPb8Rn+2ubxea70uMLe5PGu9LtBIlh8rWH489vPP7/zR3PT68sXTP15+ard3HgAAAEbE+RcvPPPk8vKZn/jGN77xTfObfr8yAQAAu+3LL9+u//T47O833v+/Of/davzmcOw34tx+f4nL8/sE8vcBbHm//hPteeaK1nu+fb1Gst5YjMmk7qmW7YT1+QbbHzdflK/Rvp2JgnwzSb7ZJF86T8F4sn7WYS7B0GF+wny9uWR5Og/jeJIjS/Lf3SEXAAAA5JZeePb5pfMvXnjw3LNPPn3m6TPPHT928vsnTx596HsPLa3f17/Uenc/AAAAsB9t3vTb70oAAAAAAAAAAAAAAAAAAABgdFXxcWL93kcAAAAYdf++GEJYEaIg8g8Y7HcdYpBjbbL/NQx3hAH9d/j6R/2vYf/G9MA+rzuMqYnh3C8hhNhhTPb9tdF5n1gJYW0t/aR5AAAAgL117cpLp1vbLVayXc3X3Fpjo1mNefN29sG/zV+PfLXLD7dfLzmwq9Uw6qr+/Zd/UPNPdhx//9XdzT8VNl/7Qk+vf7X2DZxq6033mvfepV8vNPOHEG4f7zF/uv+P95qx3ZEk/72ht/xr7yX5n2jr1XrNf1+S/0CP+bfs//O9Zmx3f8y/EPtH7uk1f/su5r+l+X70+gvw3WT/nwq95k/2v9FjwsQDMT8AjKLm/+ZrF/tbyC7LjxLy4+mZ2M/3Nx5uhvTuh+0e/9eS7YzvuPL27ebHQbfG/lSzjva8uW3Uv54i/7nMxvaGknWm9stdJUX179bzuNeK6q9XXEdZRfVPVFxHWUX1dz57HzxF9U9VXEdZRfX3fCGiz4rq3y/XlYvqn6m4jrKK6p+tuI6yiurf7v/j/VJU/8GK6yirqP65iusoq6j+kpfVKldU/3zFdZRVVP+NFddRVlH9N1VcR1lF9d9ccR39ckdsi86H8/PPuTiW9xtJf7LDz7LnP4YAAAAAe+pfAzkPRMuVg77XIoQQQgghxPDHf9c29LsOIcTexdpaP68+0G97+25mAAaV1//R5vkfbZ7/0eb55+vkf4nPkn5urMv4eJfxepfxiWQ8/X2d7DJ+U7Ldtfy6ZnRzl/FvxD0oGj/Y5fG3dhlf6DJ+W5fx27uM39FlHAAAgNFwS2ydHwIAAMDwevk3n77x23ufuDJ/9dKhU2Fiy7zzR2N/Mv5t/fXYT+e9z9Xj3/x/Fvu/iu0fYvuPZH33nwAAAMDeyz8nxt//AQAAYHjln1Pq/B8AAACG13xsnf8DAADA8Loxts7/AQAAYIhlU50Xxza/LnB3bHud1w8AGHzfjO2dsT0U27ti+63Y5scB98T22xXVBwDsnl/+8Ocn38o25/s/noxfi8vzdouVjSsFWa19Jv/p2B6I7Xd6rCf9PIBe8+cO9phnr/LP7TA/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8autfT5xYyEJ457O3H/3FxBt/vb7sruYah9e/ZrHXCCHUm4/LRzf7H8UVr1156XRruxrbLBwLWciay8Njl5uZZkIIK+Fw+Dw0wodLy1998O4jRz5+beqWNy8888oe/gja9g8AAACG0f8DAAD//2giHs0=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) statx(r1, &(0x7f0000005b40)='./file0\x00', 0x4000, 0x7ff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x0, 0x3a36}, 0x8) 1.425216334s ago: executing program 1 (id=880): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x2, 0x4, {0xffffffffffffffff, @struct={0xfffffffd}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, @struct={0x0, 0xce82}, 0x4000, 0x3, [0x0, 0x8, 0x1000000000]}, {0xfffffffffffffffe, @usage=0x9, 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x8, 0x58a, @struct={0x2, 0xf136}, 0x3, 0xa, [0x4, 0x1, 0x2, 0xfffffffffffffffc, 0x0, 0x1]}, {0x6, @struct={0x4, 0x8}, 0x0, 0x7, 0x807fc, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x4a, @struct={0x0, 0x6}, 0xffffffff, 0x4, [0x80000000, 0x800004, 0x0, 0x3ff, 0x80, 0x7]}}) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x210c08, &(0x7f0000000640)=ANY=[], 0x1, 0xa8b, &(0x7f0000001400)="$eJzs3UuMHEfdAPCe3Z21HTufx/lsYpyQ2ASSCMhuvGvMw4I4ii9YMeIWKeJiOU6wcAzCkSCRpdg+ccORZW6IhzjlEgFCIhdk5cQlErHEJafAgQOWkSxxgAR70M5Wzc78PZOe8T56Z+f3k3pququmq7q3u7dfVVUAY2ui9VlvfV55+/KRfzz69y0L359qp2i0Pqc6xhZS19L4VJjfB5OL4a2b5070CmvFXOszj1/q+O3WoijOF3uLq0Wj2HPl2hvvzj177MLRi/vee/PQ9VVYdAAAGDvfunrowK6//vmBHR++9dDhYlN7ej4/b6Txbem8/3A68V8Ipmr5+mHpeqDWMXSaDumm0jAR0k32SFd0pKvndJu7fxfznw7zrfdJt6kk/8mOaZ3TY7lhFOXtuFHUJma6xicmZmYWr8mL1nX9dG3mzKnTL56tqKDAivvXw0VR7DUYxmSo5+/N7e2doOoyVTh0rAWASsXnhXc4H+8sLE97blOD5X/j6Ynev+9WX8kyMj7WevuXf5x/dznWOv+y5f/1hVVefsbK4FvT5lUtx0rLy5X3o21pPD5HiO8vDXv8yfObDPMb9ASg33OEUXm+0K+ck2tcjrvVr/xxu9iovpbCvB6+HuI795/4Nx2VvzHQ27/X3f3/LUuFq7wsBsPGHppVHnyAapVc1sf35ppJjo/v9cX4TSXxm0vit5TE31MSv7UkHsbZ7175SXGptnSdH6/pb90819pZBr0flu+z3ZvC/xuyPPF+5LD34+J7v8Nabv7xfWJYz/5w/LmTX37h+WuL7//X2tv/7bS9703jjbRvXU0J8v3CeF+9/e5/ozufiT7p7gvlubdH+tb3nd3pajuX5lN0HGfuKMfu7t9t75fuwe50jZBuSxri6VI8P7kn/C6ff+Tjal5fU2F562E5pkM58nFlRwpH62kM61XeHvu9/5+3z91FvfbiqdMnn0zjeTv902R908L0/WtcbmD5Bq3/s7vorv+zrT29PtF5XNi+NL3WeVxohOlzfabPp/H8f+47k1ta02dOfO/0Cyu98DDmzr762nePnz598ge++DJ6X+rroxgb8UvVRyZgtc2+8vL3Z8+++toTp14+/tLJl06emT94cH5u7uBX5g/Mts7rZzvP7oGNZOmfftUlAQAAAAAAAAAAAAb1w6NHrv3lnS+9v1j/f6n+X67/n9/8zfX/fxzq/8d68rkefK4HuKNHfCtNaGB1OqSrp+H/Q3l3hnx2hd99IoXtfvxS/f+cXWzXNZfn/jA9tt+b04XmBO5oL2U6tEES+wv8dAovpvBXBVSo9rPek1NY1r513tZz+xTapRhN+e+W2zPJ7Zjk+t/92nXKx/8dvWf7+kqXk5W1FtUJq15GoLd/rrv2v1dlWGrws/KydFwxDJL+9YrKOV31ehrP4Vaz2VzL/JrNj+vFQ19TwNqpuv/PfN8zh2f++I3NC0NOduPp7uNlbL8UlqPq/i8ryz/fWBzX5R8w/5Xu/7Pd/93Ax7/QY17j7vL9z8+vv9+RbbGnb/6biq784/LndqB3Dpf/hyn/vDSPFf3y717+5i9D/vGB0IA+CvnfM2D+cfkvD5txyvC/Kf+82h5/ZND8F2dQm+guR7xvnJ//xfvG2a2w/Lltz2GX/247aryd8odxNir9zA6rq//fC8217/93mT0MxfcwvpjG84Ewv+cQ+zsZtvz5/Yr8f2BXmH+t5P+b/n9H21dTWLY/5P5/8/bY6DE+0TFe77FuN+qxBkbVByv2/K/jjbl18BzFMD5DzTZ310Oz2az0IZ8njNWqev1XfZ1Qdf5Vr/8ysf/feA4f+/+N8bH/3xgf+/+N8a37ih8tddob11fs/zfGx/5/Y/z9Id/YP/DukvhPlsTvKYl/oCT+wZL4T5XE7yuJf6gk/uGS+PtK4h8pif9M+IvH+M+W/P7RkvjHPz5+/kclv9/ocn2UcV1+GGexfp79H8ZHfv7Tb//fWRIPjK6fvrX/med/++3GYv3/6fb9kPwc73Aar6dr53i9FO+fTKa4d9L430L8er/fAeMktp8R/78/VhIPjK78npf9G8ZQrXeLPYO2W9XvPJ/R8rkUfj6FX0jhEymcSeFsCvencG6NysfqeOY3vz90qbZ0vb89xA/6PnmsDxTbiZofsDzx/sCw77PHdvyGtdz877I6GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGUmWp8HDuyuFcWVty8fee7YqdmFKU+1UzRan1MdY/X274riyRROpvAX6cutm+dOdIa3U1gr5opaUWtPL755o53T1qIozhd7i6tFo9hz5dob7849e+zC0Yv73nvz0PXVWwMAAACw8f0vAAD//3fOHG0=") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x48, 0x0, &(0x7f0000000000)) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 839.37151ms ago: executing program 0 (id=881): r0 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x30) 732.129815ms ago: executing program 0 (id=882): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 722.225855ms ago: executing program 4 (id=883): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}], 0x1, &(0x7f0000000280)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x0, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x30, 0x14001}], 0x1, 0x4044040) 548.55112ms ago: executing program 2 (id=884): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="141100005200010000000000000000001a000000001124808f10d7800800eee5", @ANYRES32, @ANYBLOB="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"], 0x1114}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r2, 0x44e9}, &(0x7f0000000040)=0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 0s ago: executing program 2 (id=885): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4093, 0xffd}], 0x2}, 0x101}], 0x4, 0x40000020, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) kernel console output (not intermixed with test programs): audit(86.330:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa755a9a8 code=0x7ffc0000 [ 86.618031][ T31] audit: type=1326 audit(86.330:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa755a9a8 code=0x7ffc0000 [ 86.618076][ T31] audit: type=1326 audit(86.330:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa755a9a8 code=0x7ffc0000 [ 86.618121][ T31] audit: type=1326 audit(86.330:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa755a9a8 code=0x7ffc0000 [ 87.303643][ T6513] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.144378][ T7252] loop3: detected capacity change from 0 to 256 [ 90.077863][ T7262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.078016][ T7262] IPv6: NLM_F_CREATE should be set when creating new route [ 91.827549][ T31] kauditd_printk_skb: 37 callbacks suppressed [ 91.827619][ T31] audit: type=1326 audit(91.540:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7280 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8d5a9a8 code=0x7ffc0000 [ 92.579626][ T7282] loop4: detected capacity change from 0 to 1024 [ 92.583755][ T31] audit: type=1326 audit(92.300:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7280 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffa8d59070 code=0x7ffc0000 [ 92.583840][ T31] audit: type=1326 audit(92.300:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7280 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8d5a9a8 code=0x7ffc0000 [ 92.583908][ T31] audit: type=1326 audit(92.300:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7280 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8d5a9a8 code=0x7ffc0000 [ 93.068969][ T7264] loop1: detected capacity change from 0 to 32768 [ 93.082863][ T7282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.118910][ T7264] JBD2: journal reset failed [ 93.118962][ T7264] (syz.1.172,7264,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 93.119007][ T7264] (syz.1.172,7264,0):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4 [ 93.155044][ T7293] loop0: detected capacity change from 0 to 2048 [ 93.212855][ T6745] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 393: padding at end of block bitmap is not set [ 93.223392][ T6745] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 93.223509][ T6745] EXT4-fs (loop4): This should not happen!! Data will be lost [ 93.223509][ T6745] [ 93.223553][ T6745] EXT4-fs (loop4): Total free blocks count 0 [ 93.223581][ T6745] EXT4-fs (loop4): Free/Dirty block details [ 93.223615][ T6745] EXT4-fs (loop4): free_blocks=0 [ 93.223648][ T6745] EXT4-fs (loop4): dirty_blocks=16 [ 93.223676][ T6745] EXT4-fs (loop4): Block reservation details [ 93.223703][ T6745] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 93.279013][ T7300] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.389516][ T6514] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.282563][ T7311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.282625][ T7311] IPv6: NLM_F_CREATE should be set when creating new route [ 94.730195][ T7313] overlayfs: missing 'lowerdir' [ 95.031114][ T26] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.035769][ T26] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.319769][ T7318] fido_id[7318]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 97.002082][ T31] audit: type=1326 audit(96.720:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7332 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb355a9a8 code=0x7ffc0000 [ 97.002165][ T31] audit: type=1326 audit(96.720:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7332 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb355a9a8 code=0x7ffc0000 [ 97.028217][ T31] audit: type=1326 audit(96.740:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7332 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb3559070 code=0x7ffc0000 [ 97.031488][ T31] audit: type=1326 audit(96.740:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7332 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb355a9a8 code=0x7ffc0000 [ 97.031545][ T31] audit: type=1326 audit(96.740:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7332 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb355a9a8 code=0x7ffc0000 [ 97.033241][ T31] audit: type=1326 audit(96.740:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7332 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb355a9a8 code=0x7ffc0000 [ 97.033292][ T31] audit: type=1326 audit(96.740:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7332 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb355a9a8 code=0x7ffc0000 [ 97.033331][ T31] audit: type=1326 audit(96.740:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7332 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb355a9a8 code=0x7ffc0000 [ 97.033370][ T31] audit: type=1326 audit(96.740:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7332 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb355a9a8 code=0x7ffc0000 [ 97.033409][ T31] audit: type=1326 audit(96.740:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7332 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb355a9a8 code=0x7ffc0000 [ 99.158935][ T6519] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 99.159080][ T6519] Bluetooth: hci0: Injecting HCI hardware error event [ 99.159974][ T6519] Bluetooth: hci0: hardware error 0x00 [ 99.349265][ T7359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.349330][ T7359] IPv6: NLM_F_CREATE should be set when creating new route [ 99.401137][ T7365] loop2: detected capacity change from 0 to 256 [ 100.316009][ T7369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.201'. [ 101.358842][ T6259] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.409594][ T6519] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 101.508509][ T6259] usb 1-1: Using ep0 maxpacket: 32 [ 101.513153][ T6259] usb 1-1: unable to get BOS descriptor or descriptor too short [ 101.518183][ T6259] usb 1-1: config 5 has an invalid interface number: 52 but max is 0 [ 101.518317][ T6259] usb 1-1: config 5 has no interface number 0 [ 101.518375][ T6259] usb 1-1: config 5 interface 52 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 101.518656][ T6259] usb 1-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 102.238524][ T6259] usb 1-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 102.238592][ T6259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.238618][ T6259] usb 1-1: Product: syz [ 102.238655][ T6259] usb 1-1: Manufacturer: syz [ 102.238677][ T6259] usb 1-1: SerialNumber: syz [ 102.283586][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.210'. [ 103.123957][ T6259] aircable 1-1:5.52: aircable converter detected [ 103.178585][ T6259] usb 1-1: aircable converter now attached to ttyUSB0 [ 103.193585][ T6259] usb 1-1: USB disconnect, device number 2 [ 103.199312][ T6259] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 103.200091][ T6259] aircable 1-1:5.52: device disconnected [ 103.226434][ T7399] loop1: detected capacity change from 0 to 1024 [ 103.232873][ T7399] ext4: Unknown parameter 'dont_appraise' [ 103.407728][ T7403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.670025][ T7410] dvmrp8: entered allmulticast mode [ 103.908584][ T31] kauditd_printk_skb: 39 callbacks suppressed [ 104.637609][ T31] audit: type=1326 audit(103.620:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 104.637699][ T31] audit: type=1326 audit(103.620:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 104.681251][ T31] audit: type=1326 audit(104.400:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff86359070 code=0x7ffc0000 [ 104.687544][ T31] audit: type=1326 audit(104.400:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 104.706634][ T31] audit: type=1326 audit(104.400:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 104.706711][ T31] audit: type=1326 audit(104.400:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 104.706759][ T31] audit: type=1326 audit(104.400:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 104.706806][ T31] audit: type=1326 audit(104.400:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 104.749922][ T31] audit: type=1326 audit(104.460:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 104.750009][ T31] audit: type=1326 audit(104.460:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 105.936590][ T7446] loop0: detected capacity change from 0 to 256 [ 105.948970][ T7446] vfat: Unknown parameter 'shor†name' [ 106.975155][ T7441] loop2: detected capacity change from 0 to 32768 [ 107.055072][ T7457] loop0: detected capacity change from 0 to 256 [ 107.185169][ T7441] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 107.185227][ T7441] allowing incompatible features above 0.0: (unknown version) [ 107.185267][ T7441] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 107.185327][ T7441] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 107.185429][ T7441] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 107.185554][ T7441] bcachefs (loop2): Version upgrade required: [ 107.185554][ T7441] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 107.185554][ T7441] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 107.185554][ T7441] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 107.248624][ T7441] bcachefs (loop2): dropping and reconstructing all alloc info [ 107.279770][ T7441] bcachefs (loop2): invalid bkey in btree_node btree=dirents level=0: u64s 7 type dirent 4098:5675548428000973578:U32_MAX len 0 ver 0: -> 593924 type unknown [ 107.284897][ T7441] dirent has stray data after name's NUL, deleting [ 107.296888][ T7441] bcachefs (loop2): accounting_read... done [ 107.372775][ T7441] bcachefs (loop2): alloc_read... done [ 107.390852][ T7441] bcachefs (loop2): snapshots_read... done [ 107.402963][ T7441] bcachefs (loop2): check_allocations... done [ 107.459342][ T7441] bcachefs (loop2): going read-write [ 107.499105][ T7471] loop1: detected capacity change from 0 to 32768 [ 107.513963][ T7441] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 107.514701][ T7441] bcachefs (loop2): done starting filesystem [ 107.519087][ T7471] (syz.1.234,7471,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 107.523462][ T7471] (syz.1.234,7471,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 107.583987][ T7471] JBD2: Ignoring recovery information on journal [ 107.599589][ T6525] bcachefs (loop2): shutting down [ 107.599646][ T6525] bcachefs (loop2): going read-only [ 107.599881][ T6525] bcachefs (loop2): finished waiting for writes to stop [ 107.633329][ T6525] bcachefs (loop2): flushing journal and stopping allocators, journal seq 12 [ 107.654242][ T7471] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 107.734077][ T6525] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12 [ 107.743807][ T6525] bcachefs (loop2): unclean shutdown complete, journal seq 13 [ 107.753113][ T6525] bcachefs (loop2): done going read-only, filesystem not clean [ 107.803687][ T6525] bcachefs (loop2): shutdown complete [ 109.061962][ T31] kauditd_printk_skb: 37 callbacks suppressed [ 109.062030][ T31] audit: type=1326 audit(108.780:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7486 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb355a9a8 code=0x7ffc0000 [ 109.062618][ T31] audit: type=1326 audit(108.780:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7486 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb355a9a8 code=0x7ffc0000 [ 109.065919][ T31] audit: type=1326 audit(108.780:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7486 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb3559070 code=0x7ffc0000 [ 109.066266][ T31] audit: type=1326 audit(108.780:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7486 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb355a9a8 code=0x7ffc0000 [ 109.066564][ T31] audit: type=1326 audit(108.780:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7486 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb355a9a8 code=0x7ffc0000 [ 109.067189][ T31] audit: type=1326 audit(108.780:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7486 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb355a9a8 code=0x7ffc0000 [ 109.067488][ T31] audit: type=1326 audit(108.780:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7486 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb355a9a8 code=0x7ffc0000 [ 109.067700][ T31] audit: type=1326 audit(108.780:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7486 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb355a9a8 code=0x7ffc0000 [ 109.068120][ T31] audit: type=1326 audit(108.780:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7486 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb355a9a8 code=0x7ffc0000 [ 109.068298][ T31] audit: type=1326 audit(108.780:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7486 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb355a9a8 code=0x7ffc0000 [ 109.368177][ T6519] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 109.371274][ T6519] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 109.379228][ T6519] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 109.380319][ T6519] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 109.381139][ T6519] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 109.459092][ T7493] loop4: detected capacity change from 0 to 256 [ 109.459763][ T7493] vfat: Unknown parameter 'shor†name' [ 109.535540][ T6523] ocfs2: Unmounting device (7,1) on (node local) [ 111.653018][ T6520] Bluetooth: hci5: command tx timeout [ 111.960940][ T7489] chnl_net:caif_netlink_parms(): no params data found [ 112.225721][ T7519] loop0: detected capacity change from 0 to 32768 [ 112.456032][ T7489] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.456114][ T7489] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.456268][ T7489] bridge_slave_0: entered allmulticast mode [ 112.457272][ T7489] bridge_slave_0: entered promiscuous mode [ 112.469769][ T7489] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.469862][ T7489] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.470021][ T7489] bridge_slave_1: entered allmulticast mode [ 112.479226][ T7489] bridge_slave_1: entered promiscuous mode [ 112.480799][ T7519] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 112.480821][ T7519] allowing incompatible features above 0.0: (unknown version) [ 112.480832][ T7519] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 112.485881][ T7519] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 112.485924][ T7519] bcachefs (loop0): initializing new filesystem [ 112.498007][ T7519] bcachefs (loop0): going read-write [ 112.552502][ T7519] bcachefs (loop0): marking superblocks [ 112.580681][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.607061][ T7519] bcachefs (loop0): initializing freespace [ 112.622962][ T7519] bcachefs (loop0): done initializing freespace [ 112.639507][ T7519] bcachefs (loop0): reading snapshots table [ 112.639601][ T7519] bcachefs (loop0): reading snapshots done [ 112.644452][ T7539] loop4: detected capacity change from 0 to 1024 [ 112.686382][ T7519] bcachefs (loop0): done starting filesystem [ 112.954840][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.964711][ T7489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.449955][ T7541] loop2: detected capacity change from 0 to 32768 [ 113.452511][ T7489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.469440][ T7541] (syz.2.248,7541,0):ocfs2_verify_volume:2308 ERROR: bad block number on superblock: found 134217730, should be 2 [ 113.469512][ T7541] (syz.2.248,7541,0):ocfs2_verify_volume:2331 ERROR: status = -22 [ 113.469545][ T7541] (syz.2.248,7541,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 113.469576][ T7541] (syz.2.248,7541,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 113.577128][ T6513] bcachefs (loop0): shutting down [ 113.577187][ T6513] bcachefs (loop0): going read-only [ 113.577246][ T6513] bcachefs (loop0): finished waiting for writes to stop [ 113.628133][ T6513] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13 [ 113.641844][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.694323][ T6513] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 16 [ 113.699699][ T6513] bcachefs (loop0): clean shutdown complete, journal seq 17 [ 113.702575][ T6513] bcachefs (loop0): marking filesystem clean [ 113.719138][ T6520] Bluetooth: hci5: command tx timeout [ 113.754566][ T7489] team0: Port device team_slave_0 added [ 113.757989][ T7489] team0: Port device team_slave_1 added [ 113.783548][ T6513] bcachefs (loop0): shutdown complete [ 113.911287][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.918877][ T7489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.918929][ T7489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.918979][ T7489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.920281][ T7489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.920308][ T7489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.920351][ T7489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.593744][ T7489] hsr_slave_0: entered promiscuous mode [ 114.594342][ T7489] hsr_slave_1: entered promiscuous mode [ 114.605334][ T7489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.605390][ T7489] Cannot create hsr debugfs directory [ 114.857744][ T7565] loop4: detected capacity change from 0 to 1024 [ 114.862925][ T7565] EXT4-fs: Ignoring removed i_version option [ 115.214929][ T7565] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.348494][ T7565] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.255: Invalid block bitmap block 0 in block_group 0 [ 115.358865][ T7565] __quota_error: 41 callbacks suppressed [ 115.358949][ T7565] Quota error (device loop4): write_blk: dquota write failed [ 115.359322][ T7565] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 115.359605][ T7565] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.255: Failed to acquire dquot type 0 [ 115.381873][ T7565] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.255: Freeing blocks not in datazone - block = 0, count = 4096 [ 115.395188][ T7565] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.255: Invalid inode bitmap blk 0 in block_group 0 [ 115.405181][ T7565] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 115.409131][ T7565] EXT4-fs (loop4): 1 orphan inode deleted [ 115.418082][ T7565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.679895][ T543] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 115.683459][ T543] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 115.858657][ T6520] Bluetooth: hci5: command tx timeout [ 117.619610][ T7579] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 117.619736][ T7579] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 117.701714][ T12] bridge_slave_1: left allmulticast mode [ 117.740717][ T12] bridge_slave_1: left promiscuous mode [ 117.741779][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.927965][ T6520] Bluetooth: hci5: command tx timeout [ 118.067801][ T6514] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.076646][ T12] bridge_slave_0: left allmulticast mode [ 118.078629][ T12] bridge_slave_0: left promiscuous mode [ 118.078817][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.629099][ T7611] loop4: detected capacity change from 0 to 32768 [ 118.673174][ T7611] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 118.725921][ T7611] XFS (loop4): Ending clean mount [ 118.790458][ T6514] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 118.915456][ T7621] loop0: detected capacity change from 0 to 4096 [ 118.941936][ T7621] NILFS (loop0): invalid segment: Checksum error in segment payload [ 118.942097][ T7621] NILFS (loop0): trying rollback from an earlier position [ 118.966585][ T7621] NILFS (loop0): recovery complete [ 118.974058][ T7623] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.696634][ T7646] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 120.403332][ T7648] loop2: detected capacity change from 0 to 512 [ 120.464639][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.539027][ T7648] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.539097][ T7648] ext4: Unknown parameter 'subj_user' [ 120.561665][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.624084][ T12] bond0 (unregistering): Released all slaves [ 121.328862][ T7663] usb usb8: usbfs: process 7663 (syz.2.276) did not claim interface 0 before use [ 121.655168][ T7489] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 122.303932][ T7489] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 122.787676][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.283'. [ 123.783426][ T7489] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.795408][ T7489] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.897031][ T7701] loop1: detected capacity change from 0 to 256 [ 123.913667][ T7700] loop0: detected capacity change from 0 to 1024 [ 123.916362][ T7700] EXT4-fs: Ignoring removed bh option [ 123.971266][ T7700] EXT4-fs (loop0): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.087109][ T6513] EXT4-fs (loop0): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 124.444204][ T12] hsr_slave_0: left promiscuous mode [ 124.446995][ T12] hsr_slave_1: left promiscuous mode [ 124.447545][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.447612][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.469784][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.469871][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.517385][ T12] veth1_macvtap: left promiscuous mode [ 124.517597][ T12] veth0_macvtap: left promiscuous mode [ 124.534955][ T12] veth1_vlan: left promiscuous mode [ 124.536950][ T12] veth0_vlan: left promiscuous mode [ 124.691949][ T7719] loop0: detected capacity change from 0 to 32768 [ 124.803806][ T7719] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 124.813335][ T7719] allowing incompatible features above 0.0: (unknown version) [ 124.815846][ T7719] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 124.826759][ T7719] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 124.829999][ T7719] bcachefs (loop0): initializing new filesystem [ 124.835773][ T7719] bcachefs (loop0): going read-write [ 124.954404][ T7719] bcachefs (loop0): marking superblocks [ 124.987497][ T7719] bcachefs (loop0): initializing freespace [ 124.995846][ T7719] bcachefs (loop0): done initializing freespace [ 124.999505][ T7719] bcachefs (loop0): reading snapshots table [ 125.001402][ T7719] bcachefs (loop0): reading snapshots done [ 125.633782][ T7719] bcachefs (loop0): done starting filesystem [ 125.765115][ T7755] netlink: 'syz.4.299': attribute type 1 has an invalid length. [ 125.765296][ T7755] netlink: 'syz.4.299': attribute type 2 has an invalid length. [ 125.855465][ T6513] bcachefs (loop0): shutting down [ 125.855540][ T6513] bcachefs (loop0): going read-only [ 125.855592][ T6513] bcachefs (loop0): finished waiting for writes to stop [ 125.900827][ T6513] bcachefs (loop0): flushing journal and stopping allocators, journal seq 14 [ 125.928369][ T6513] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 15 [ 125.933471][ T6513] bcachefs (loop0): clean shutdown complete, journal seq 16 [ 125.937545][ T6513] bcachefs (loop0): marking filesystem clean [ 126.021579][ T6513] bcachefs (loop0): shutdown complete [ 126.199097][ T2400] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.199182][ T2400] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.632733][ T7761] loop4: detected capacity change from 0 to 1024 [ 126.633479][ T7761] EXT4-fs: Ignoring removed bh option [ 126.686278][ T7761] EXT4-fs (loop4): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.773626][ T6514] EXT4-fs (loop4): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 127.862964][ T12] team0 (unregistering): Port device team_slave_1 removed [ 128.048218][ T12] team0 (unregistering): Port device team_slave_0 removed [ 131.470500][ T7489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.681312][ T7489] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.859170][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.860154][ T6745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.867172][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.867264][ T6745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.163651][ T7798] loop1: detected capacity change from 0 to 128 [ 132.185875][ T7798] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 132.236398][ T7803] loop2: detected capacity change from 0 to 1024 [ 132.237679][ T7803] EXT4-fs: Ignoring removed bh option [ 132.311358][ T7803] EXT4-fs (loop2): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.363386][ T4446] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 132.436299][ T7796] loop0: detected capacity change from 0 to 32768 [ 132.531953][ T7489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.542547][ T6525] EXT4-fs (loop2): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 132.630093][ T7780] loop4: detected capacity change from 0 to 32768 [ 132.698045][ T7796] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 132.698095][ T7796] allowing incompatible features above 0.0: (unknown version) [ 132.702282][ T7796] features: atomic_nlink [ 132.702337][ T7796] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 132.702377][ T7796] bcachefs (loop0): initializing new filesystem [ 132.705773][ T7796] bcachefs (loop0): going read-write [ 132.809189][ T7796] bcachefs (loop0): marking superblocks [ 132.820024][ T7796] bcachefs (loop0): initializing freespace [ 132.826911][ T7796] bcachefs (loop0): done initializing freespace [ 132.829884][ T7796] bcachefs (loop0): reading snapshots table [ 132.829981][ T7796] bcachefs (loop0): reading snapshots done [ 132.873969][ T7780] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 132.874029][ T7780] allowing incompatible features above 0.0: (unknown version) [ 132.899870][ T7780] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 132.901058][ T7780] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 132.902426][ T7780] bcachefs (loop4): initializing new filesystem [ 132.902593][ T7796] bcachefs (loop0): done starting filesystem [ 132.907395][ T7780] bcachefs (loop4): going read-write [ 133.087252][ T7780] bcachefs (loop4): marking superblocks [ 133.090828][ T7780] bcachefs (loop4): initializing freespace [ 133.092800][ T7780] bcachefs (loop4): done initializing freespace [ 133.093778][ T7780] bcachefs (loop4): reading snapshots table [ 133.093830][ T7780] bcachefs (loop4): reading snapshots done [ 133.162009][ T6513] bcachefs (loop0): shutting down [ 133.162074][ T6513] bcachefs (loop0): going read-only [ 133.162105][ T6513] bcachefs (loop0): finished waiting for writes to stop [ 133.192714][ T7780] bcachefs (loop4): done starting filesystem [ 133.212698][ T7489] veth0_vlan: entered promiscuous mode [ 133.215841][ T7489] veth1_vlan: entered promiscuous mode [ 133.244598][ T6513] bcachefs (loop0): flushing journal and stopping allocators, journal seq 4 [ 133.381373][ T7489] veth0_macvtap: entered promiscuous mode [ 133.393049][ T7489] veth1_macvtap: entered promiscuous mode [ 133.422643][ T6513] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4 [ 133.426026][ T6513] bcachefs (loop0): clean shutdown complete, journal seq 5 [ 133.426849][ T6513] bcachefs (loop0): marking filesystem clean [ 133.486130][ T7489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.507871][ T7811] loop1: detected capacity change from 0 to 32768 [ 133.529439][ T7489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.531164][ T7489] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.533311][ T7489] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.533366][ T7489] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.533410][ T7489] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.175659][ T6513] bcachefs (loop0): shutdown complete [ 134.234614][ T7840] loop2: detected capacity change from 0 to 32768 [ 134.328840][ T6514] bcachefs (loop4): shutting down [ 134.328899][ T6514] bcachefs (loop4): going read-only [ 134.328956][ T6514] bcachefs (loop4): finished waiting for writes to stop [ 134.340838][ T7840] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 134.387500][ T7811] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,background_target=invalid device 79,nojournal_transaction_names [ 134.396176][ T7811] allowing incompatible features above 0.0: (unknown version) [ 134.396229][ T7811] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 134.396303][ T7811] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 134.396351][ T7811] bcachefs (loop1): initializing new filesystem [ 134.412159][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.414405][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.416845][ T6514] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 134.434776][ T7811] bcachefs (loop1): going read-write [ 134.449732][ T283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.449794][ T283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.505291][ T6514] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 4 [ 134.511952][ T6514] bcachefs (loop4): clean shutdown complete, journal seq 5 [ 134.512730][ T6514] bcachefs (loop4): marking filesystem clean [ 134.522110][ T7811] bcachefs (loop1): marking superblocks [ 134.527616][ T7811] bcachefs (loop1): initializing freespace [ 134.541529][ T7840] XFS (loop2): Ending clean mount [ 134.584359][ T7811] bcachefs (loop1): done initializing freespace [ 134.585515][ T7811] bcachefs (loop1): reading snapshots table [ 134.585568][ T7811] bcachefs (loop1): reading snapshots done [ 134.658842][ T7811] bcachefs (loop1): done starting filesystem [ 134.700074][ T6525] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 134.707152][ T6514] bcachefs (loop4): shutdown complete [ 134.826919][ T6523] bcachefs (loop1): shutting down [ 134.826976][ T6523] bcachefs (loop1): going read-only [ 134.827035][ T6523] bcachefs (loop1): finished waiting for writes to stop [ 134.894909][ T6523] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 135.031397][ T6523] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4 [ 135.036353][ T6523] bcachefs (loop1): clean shutdown complete, journal seq 5 [ 135.037633][ T6523] bcachefs (loop1): marking filesystem clean [ 135.107835][ T7896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.108147][ T7896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.221886][ T7882] loop5: detected capacity change from 0 to 32768 [ 135.227357][ T7882] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.237 (7882) [ 135.295057][ T7882] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 135.295161][ T7882] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 135.295197][ T7882] BTRFS info (device loop5): disk space caching is enabled [ 135.295221][ T7882] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 135.309912][ T6523] bcachefs (loop1): shutdown complete [ 135.422201][ T7882] BTRFS info (device loop5): rebuilding free space tree [ 135.448662][ T6572] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.455972][ T7882] BTRFS info (device loop5): disabling free space tree [ 135.456641][ T7882] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 135.456678][ T7882] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 135.539950][ T7882] BTRFS info (device loop5): balance: start -susage=0..2147483648,limit=4294967296,limit=0..1,stripes=0..32767 [ 135.540121][ T7882] BTRFS info (device loop5): balance: ended with status: 0 [ 135.561271][ T7923] loop2: detected capacity change from 0 to 1024 [ 135.719648][ T6572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 135.724395][ T6572] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 135.724453][ T6572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.724494][ T6572] usb 1-1: Product: syz [ 135.724522][ T6572] usb 1-1: Manufacturer: syz [ 135.724549][ T6572] usb 1-1: SerialNumber: syz [ 135.730396][ T6572] usb 1-1: config 0 descriptor?? [ 135.923044][ T7489] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 136.391250][ T7931] netlink: 28 bytes leftover after parsing attributes in process `syz.4.327'. [ 137.786929][ T6572] usb 1-1: USB disconnect, device number 3 [ 137.897713][ T7902] udevd[7902]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.075631][ T7958] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.075730][ T7958] IPv6: Can't replace route, no match found [ 138.429997][ T7965] @: renamed from vlan0 (while UP) [ 139.284161][ T7968] bridge_slave_0: left allmulticast mode [ 139.284248][ T7968] bridge_slave_0: left promiscuous mode [ 139.285647][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.335450][ T7968] bridge_slave_1: left allmulticast mode [ 139.335517][ T7968] bridge_slave_1: left promiscuous mode [ 139.342528][ T7968] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.437369][ T7968] bond0: (slave bond_slave_0): Releasing backup interface [ 139.523981][ T7968] bond0: (slave bond_slave_1): Releasing backup interface [ 139.528147][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.532870][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.580338][ T7968] team0: Port device team_slave_0 removed [ 139.591596][ T7968] team0: Port device team_slave_1 removed [ 139.594066][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.596552][ T7968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.604677][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.607244][ T7968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.660984][ T7976] vlan0: entered promiscuous mode [ 139.797491][ T7984] loop5: detected capacity change from 0 to 1024 [ 140.223494][ T7989] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 140.223599][ T7989] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 141.260448][ T8020] loop4: detected capacity change from 0 to 4096 [ 141.935920][ T8025] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.112003][ T8032] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.746197][ T6514] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 142.758622][ T6514] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 142.771627][ T6514] Remounting filesystem read-only [ 142.771684][ T6514] NILFS (loop4): error -5 truncating bmap (ino=12) [ 142.871857][ T6514] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 143.788797][ T8048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.789118][ T8048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.440358][ T8054] ufs: You didn't specify the type of your ufs filesystem [ 144.440358][ T8054] [ 144.440358][ T8054] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 144.440358][ T8054] [ 144.440358][ T8054] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 144.440490][ T8054] ufs: ufstype=old is supported read-only [ 144.442345][ T8054] ufs: ufs_fill_super(): bad magic number [ 144.460087][ T8059] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 144.460151][ T8059] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 146.159245][ T8082] loop2: detected capacity change from 0 to 4096 [ 146.230956][ T8090] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.247179][ T8072] loop4: detected capacity change from 0 to 32768 [ 146.463929][ T8098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.464231][ T8098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.736056][ T8072] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.757064][ T6525] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 146.761146][ T6525] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12) [ 146.762067][ T6525] Remounting filesystem read-only [ 146.762786][ T6525] NILFS (loop2): error -5 truncating bmap (ino=12) [ 146.798892][ T6525] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 146.865307][ T8072] XFS (loop4): Ending clean mount [ 146.901494][ T8072] XFS (loop4): Quotacheck needed: Please wait. [ 148.025294][ T8072] XFS (loop4): Quotacheck: Done. [ 148.133418][ T8116] loop0: detected capacity change from 0 to 32768 [ 148.240553][ T6514] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.516303][ T8116] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,gc_reserve_percent=15,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,no_data_io [ 148.516362][ T8116] allowing incompatible features above 0.0: (unknown version) [ 148.516394][ T8116] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 148.516454][ T8116] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 148.517202][ T8116] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=blacklist in superblock: invalid journal seq blacklist entry: bad size, shutting down [ 148.517263][ T8116] error not marked as autofix and not in fsck [ 148.517291][ T8116] run fsck, and forward to devs so error can be marked for self-healing [ 148.517309][ T8116] emergency read only at seq 0 [ 148.517483][ T8116] bcachefs (loop0): error in recovery: fsck_errors_not_fixed [ 148.517524][ T8116] bcachefs (loop0): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 148.517552][ T8116] bcachefs (loop0): shutting down [ 148.567004][ T8116] bcachefs (loop0): shutdown complete [ 148.971671][ T8136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.976604][ T8136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.334443][ T8159] netlink: 20 bytes leftover after parsing attributes in process `syz.4.375'. [ 149.485931][ T8163] loop4: detected capacity change from 0 to 4096 [ 149.571870][ T8167] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.164086][ T6514] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 151.164153][ T6514] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 151.224002][ T6514] Remounting filesystem read-only [ 151.224056][ T6514] NILFS (loop4): error -5 truncating bmap (ino=12) [ 151.724280][ T6514] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 152.902813][ T8203] netlink: 20 bytes leftover after parsing attributes in process `syz.4.386'. [ 153.241217][ T8213] loop1: detected capacity change from 0 to 64 [ 153.443147][ T8116] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed [ 154.644743][ T8221] loop5: detected capacity change from 0 to 4096 [ 154.683700][ T8231] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.452177][ T8242] bridge0: port 3(netdevsim0) entered blocking state [ 155.452718][ T8242] bridge0: port 3(netdevsim0) entered disabled state [ 155.455015][ T8242] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 155.473248][ T8242] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 155.476125][ T8242] bridge0: port 3(netdevsim0) entered blocking state [ 155.476277][ T8242] bridge0: port 3(netdevsim0) entered forwarding state [ 156.375072][ T8248] loop2: detected capacity change from 0 to 1024 [ 156.745486][ T8268] input: syz0 as /devices/virtual/input/input2 [ 157.716552][ T8278] loop0: detected capacity change from 0 to 4096 [ 157.978606][ T8287] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.233254][ T8283] loop2: detected capacity change from 0 to 32768 [ 158.244654][ T8283] ocfs2: Unknown parameter 'journal_asyD [ 158.244654][ T8283] %Ÿjnc_commit' [ 159.605526][ T8318] vivid-000: ================= START STATUS ================= [ 159.611106][ T8318] vivid-000: Test Pattern: 75% Colorbar [ 159.614637][ T8318] vivid-000: Fill Percentage of Frame: 100 [ 159.616622][ T8318] vivid-000: Horizontal Movement: No Movement [ 159.618609][ T8318] vivid-000: Vertical Movement: No Movement [ 159.619012][ T8318] vivid-000: OSD Text Mode: All [ 159.619067][ T8318] vivid-000: Show Border: false [ 159.619121][ T8318] vivid-000: Show Square: false [ 159.619173][ T8318] vivid-000: Sensor Flipped Horizontally: false [ 159.619225][ T8318] vivid-000: Sensor Flipped Vertically: false [ 159.619292][ T8318] vivid-000: Insert SAV Code in Image: false [ 159.619345][ T8318] vivid-000: Insert EAV Code in Image: false [ 159.619397][ T8318] vivid-000: Insert Video Guard Band: false [ 159.619450][ T8318] vivid-000: Reduced Framerate: false [ 159.619503][ T8318] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 159.619556][ T8318] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 159.619610][ T8318] vivid-000: Enable Capture Cropping: true grabbed [ 159.644867][ T8318] vivid-000: Enable Capture Composing: true grabbed [ 159.644916][ T8318] vivid-000: Enable Capture Scaler: true grabbed [ 159.644963][ T8318] vivid-000: Timestamp Source: End of Frame [ 159.645010][ T8318] vivid-000: Colorspace: sRGB [ 159.645048][ T8318] vivid-000: Transfer Function: Default [ 159.645086][ T8318] vivid-000: Y'CbCr Encoding: Default [ 159.645123][ T8318] vivid-000: HSV Encoding: Hue 0-179 [ 159.645160][ T8318] vivid-000: Quantization: Default [ 159.645197][ T8318] vivid-000: Apply Alpha To Red Only: false [ 159.645242][ T8318] vivid-000: Standard Aspect Ratio: 4x3 [ 159.645280][ T8318] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 159.645327][ T8318] vivid-000: DV Timings: 640x480p59 inactive [ 159.645374][ T8318] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 159.645412][ T8318] vivid-000: Maximum EDID Blocks: 2 [ 159.645449][ T8318] vivid-000: Limited RGB Range (16-235): false [ 159.645487][ T8318] vivid-000: Rx RGB Quantization Range: Automatic [ 159.645524][ T8318] vivid-000: Power Present: 0x00000001 [ 159.645563][ T8318] tpg source WxH: 320x240 (Y'CbCr) [ 159.645583][ T8318] tpg field: 1 [ 159.645601][ T8318] tpg crop: (0,0)/320x240 [ 159.645621][ T8318] tpg compose: (0,0)/320x240 [ 159.645641][ T8318] tpg colorspace: 8 [ 159.645659][ T8318] tpg transfer function: 0/2 [ 159.645678][ T8318] tpg Y'CbCr encoding: 0/1 [ 159.645696][ T8318] tpg quantization: 0/2 [ 159.645714][ T8318] tpg RGB range: 0/2 [ 159.645733][ T8318] vivid-000: ================== END STATUS ================== [ 159.677772][ T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 159.764705][ T8328] loop4: detected capacity change from 0 to 4096 [ 159.777723][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz.5.425'. [ 159.925191][ T8335] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.928558][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 159.935776][ T26] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 159.935850][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.935882][ T26] usb 1-1: Product: syz [ 159.935910][ T26] usb 1-1: Manufacturer: syz [ 159.935936][ T26] usb 1-1: SerialNumber: syz [ 159.947307][ T26] usb 1-1: config 0 descriptor?? [ 160.021575][ T26] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 160.582955][ T26] gspca_sunplus: reg_w_riv err -110 [ 160.584730][ T26] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 160.616671][ T8341] veth0_to_team: entered promiscuous mode [ 160.625042][ T8341] veth0_to_team: entered allmulticast mode [ 160.721052][ T8343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.726060][ T8343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.015442][ T8346] loop2: detected capacity change from 0 to 32768 [ 161.684958][ T8371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.437'. [ 161.742196][ T8373] loop1: detected capacity change from 0 to 4096 [ 161.766293][ T8376] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.935876][ T1816] usb 1-1: USB disconnect, device number 4 [ 162.852187][ T6523] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 162.859292][ T6523] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 162.945723][ T6523] Remounting filesystem read-only [ 162.945783][ T6523] NILFS (loop1): error -5 truncating bmap (ino=12) [ 163.041119][ T6523] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 163.071695][ T8393] netlink: 'syz.5.442': attribute type 1 has an invalid length. [ 163.258872][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 163.258957][ T8399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.443'. [ 163.259140][ T8399] netlink: 40 bytes leftover after parsing attributes in process `syz.4.443'. [ 163.392783][ T8382] loop0: detected capacity change from 0 to 32768 [ 163.589938][ T31] audit: type=1326 audit(163.270:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8406 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655a9a8 code=0x7ffc0000 [ 163.590017][ T31] audit: type=1326 audit(163.270:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8406 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655a9a8 code=0x7ffc0000 [ 163.590084][ T31] audit: type=1326 audit(163.280:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8406 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff86559070 code=0x7ffc0000 [ 163.590131][ T31] audit: type=1326 audit(163.280:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8406 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655a9a8 code=0x7ffc0000 [ 163.590179][ T31] audit: type=1326 audit(163.280:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8406 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655a9a8 code=0x7ffc0000 [ 163.590224][ T31] audit: type=1326 audit(163.280:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8406 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8655a9a8 code=0x7ffc0000 [ 163.590278][ T31] audit: type=1326 audit(163.280:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8406 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655a9a8 code=0x7ffc0000 [ 163.590332][ T31] audit: type=1326 audit(163.280:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8406 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655a9a8 code=0x7ffc0000 [ 163.590378][ T31] audit: type=1326 audit(163.300:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8406 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8655a9a8 code=0x7ffc0000 [ 163.590424][ T31] audit: type=1326 audit(163.300:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8406 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655a9a8 code=0x7ffc0000 [ 164.132416][ T6524] Bluetooth: hci4: command 0x0406 tx timeout [ 164.135435][ T6524] Bluetooth: hci1: command 0x0406 tx timeout [ 164.137731][ T6524] Bluetooth: hci3: command 0x0406 tx timeout [ 164.549337][ T8419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 164.912545][ T8431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.468283][ T8427] loop5: detected capacity change from 0 to 4096 [ 165.589567][ T8432] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.001424][ T8429] loop2: detected capacity change from 0 to 32768 [ 166.005804][ T8429] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.452 (8429) [ 166.095753][ T7489] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 166.102940][ T7489] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12) [ 166.107672][ T8409] loop4: detected capacity change from 0 to 32768 [ 166.110118][ T7489] Remounting filesystem read-only [ 166.111838][ T7489] NILFS (loop5): error -5 truncating bmap (ino=12) [ 166.117565][ T8409] XFS: ikeep mount option is deprecated. [ 166.158583][ T7489] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 166.186028][ T8409] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 166.203647][ T8429] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.203741][ T8429] BTRFS info (device loop2): using sha256 (sha256-arm64) checksum algorithm [ 166.203797][ T8429] BTRFS info (device loop2): using free-space-tree [ 166.333456][ T8409] XFS (loop4): Ending clean mount [ 166.335193][ T8409] XFS (loop4): Quotacheck needed: Please wait. [ 166.373735][ T8409] XFS (loop4): Quotacheck: Done. [ 166.649333][ T283] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 167.312715][ T6514] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 167.377933][ T6525] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.414025][ T8455] loop0: detected capacity change from 0 to 32768 [ 167.415364][ T8449] loop5: detected capacity change from 0 to 40427 [ 167.453343][ T8449] F2FS-fs (loop5): build fault injection rate: 771 [ 167.464369][ T8449] F2FS-fs (loop5): invalid crc value [ 167.516412][ T8449] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 167.527230][ T8482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.527579][ T8482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.572112][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'. [ 167.572185][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'. [ 167.572210][ T8484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.457'. [ 167.615626][ T8449] syz.5.455: attempt to access beyond end of device [ 167.615626][ T8449] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 167.697395][ T7489] syz-executor: attempt to access beyond end of device [ 167.697395][ T7489] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 167.697489][ T7489] CPU: 1 UID: 0 PID: 7489 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-g6625c855789e #0 PREEMPT [ 167.697506][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.697513][ T7489] Call trace: [ 167.697518][ T7489] show_stack+0x2c/0x3c (C) [ 167.697538][ T7489] __dump_stack+0x30/0x40 [ 167.697562][ T7489] dump_stack_lvl+0xd8/0x12c [ 167.697576][ T7489] dump_stack+0x1c/0x28 [ 167.697588][ T7489] f2fs_handle_critical_error+0x34c/0x4b8 [ 167.697601][ T7489] f2fs_stop_checkpoint+0x5c/0x70 [ 167.697614][ T7489] f2fs_write_end_io+0x58c/0x818 [ 167.697626][ T7489] bio_endio+0x804/0x840 [ 167.697638][ T7489] submit_bio_noacct+0x158/0x176c [ 167.697652][ T7489] submit_bio+0x354/0x4d4 [ 167.697664][ T7489] f2fs_submit_write_bio+0x13c/0x324 [ 167.697675][ T7489] __submit_merged_bio+0x254/0x704 [ 167.697686][ T7489] __submit_merged_write_cond+0x23c/0x4ac [ 167.697697][ T7489] f2fs_write_data_pages+0x1d28/0x2634 [ 167.697709][ T7489] do_writepages+0x270/0x468 [ 167.697725][ T7489] filemap_fdatawrite+0x144/0x1e8 [ 167.697739][ T7489] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 167.697753][ T7489] f2fs_write_checkpoint+0x684/0x1694 [ 167.697767][ T7489] kill_f2fs_super+0x21c/0x584 [ 167.697778][ T7489] deactivate_locked_super+0xc4/0x12c [ 167.697790][ T7489] deactivate_super+0xe0/0x100 [ 167.697800][ T7489] cleanup_mnt+0x31c/0x3ac [ 167.697812][ T7489] __cleanup_mnt+0x20/0x30 [ 167.697823][ T7489] task_work_run+0x1dc/0x260 [ 167.697834][ T7489] do_notify_resume+0x16c/0x1ec [ 167.697846][ T7489] el0_svc+0xb4/0x17c [ 167.697859][ T7489] el0t_64_sync_handler+0x78/0x108 [ 167.697871][ T7489] el0t_64_sync+0x198/0x19c [ 167.698066][ T7489] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 169.020469][ T8501] loop2: detected capacity change from 0 to 512 [ 169.021116][ T8501] EXT4-fs: Ignoring removed nobh option [ 169.021186][ T8501] ext4: Unknown parameter 'fsmagic' [ 169.051185][ T8501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.468'. [ 170.496540][ T8536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.503664][ T8536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.560710][ T31] kauditd_printk_skb: 81 callbacks suppressed [ 170.560769][ T31] audit: type=1326 audit(170.220:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb35a9a8 code=0x7ffc0000 [ 170.560821][ T31] audit: type=1326 audit(170.220:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb35a9a8 code=0x7ffc0000 [ 170.560867][ T31] audit: type=1326 audit(170.220:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffbb359070 code=0x7ffc0000 [ 170.560915][ T31] audit: type=1326 audit(170.230:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb35a9a8 code=0x7ffc0000 [ 170.560962][ T31] audit: type=1326 audit(170.230:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb35a9a8 code=0x7ffc0000 [ 170.561009][ T31] audit: type=1326 audit(170.230:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbb35a9a8 code=0x7ffc0000 [ 170.561055][ T31] audit: type=1326 audit(170.230:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb35a9a8 code=0x7ffc0000 [ 170.561103][ T31] audit: type=1326 audit(170.230:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb35a9a8 code=0x7ffc0000 [ 170.561148][ T31] audit: type=1326 audit(170.230:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbb35a9a8 code=0x7ffc0000 [ 170.561193][ T31] audit: type=1326 audit(170.230:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb35a9a8 code=0x7ffc0000 [ 170.616048][ T8498] loop1: detected capacity change from 0 to 32768 [ 170.681744][ T8498] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 170.685488][ T8498] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.846798][ T8498] XFS (loop1): Ending clean mount [ 170.864944][ T8498] XFS (loop1): Quotacheck needed: Please wait. [ 170.956315][ T8498] XFS (loop1): Quotacheck: Done. [ 171.043738][ T6519] Bluetooth: hci4: command 0x0406 tx timeout [ 171.127460][ T6523] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 172.867028][ T8587] loop1: detected capacity change from 0 to 4096 [ 172.933052][ T8596] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.325685][ T8607] netlink: 'syz.4.491': attribute type 4 has an invalid length. [ 174.166338][ T8584] loop2: detected capacity change from 0 to 40427 [ 174.189105][ T8584] F2FS-fs (loop2): heap/no_heap options were deprecated [ 174.192524][ T8584] F2FS-fs (loop2): invalid crc value [ 174.292718][ T8584] F2FS-fs (loop2): Start checkpoint disabled! [ 174.297089][ T6523] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 174.300382][ T6523] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 174.312368][ T8584] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 174.318461][ T6523] Remounting filesystem read-only [ 174.318518][ T6523] NILFS (loop1): error -5 truncating bmap (ino=12) [ 174.366753][ T8600] loop5: detected capacity change from 0 to 32768 [ 174.457831][ T6523] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 174.473220][ T8600] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 174.637752][ T8600] XFS (loop5): Ending clean mount [ 174.729114][ T8615] loop0: detected capacity change from 0 to 32768 [ 174.816411][ T8600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.887353][ T8615] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 174.887408][ T8615] allowing incompatible features above 0.0: (unknown version) [ 174.900424][ T8615] features: atomic_nlink [ 174.901804][ T8615] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 174.904160][ T8615] bcachefs (loop0): initializing new filesystem [ 174.910559][ T8615] bcachefs (loop0): going read-write [ 174.947878][ T7489] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 175.000388][ T8615] bcachefs (loop0): marking superblocks [ 175.004954][ T8615] bcachefs (loop0): initializing freespace [ 175.006508][ T8615] bcachefs (loop0): done initializing freespace [ 175.007485][ T8615] bcachefs (loop0): reading snapshots table [ 175.007547][ T8615] bcachefs (loop0): reading snapshots done [ 175.086391][ T8615] bcachefs (loop0): done starting filesystem [ 175.506477][ T6513] bcachefs (loop0): shutting down [ 175.508185][ T6513] bcachefs (loop0): going read-only [ 175.510057][ T6513] bcachefs (loop0): finished waiting for writes to stop [ 175.557848][ T6513] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2 [ 175.679392][ T8669] netlink: 'syz.1.503': attribute type 1 has an invalid length. [ 175.693081][ T8669] netlink: 'syz.1.503': attribute type 1 has an invalid length. [ 176.102777][ T6513] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 176.107578][ T6513] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 176.133394][ T6513] bcachefs (loop0): marking filesystem clean [ 176.233922][ T6513] bcachefs (loop0): shutdown complete [ 176.258247][ T8685] loop4: detected capacity change from 0 to 4096 [ 176.307917][ T8694] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 176.714248][ T4392] kworker/u8:9: attempt to access beyond end of device [ 176.714248][ T4392] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.714351][ T4392] CPU: 0 UID: 0 PID: 4392 Comm: kworker/u8:9 Not tainted 6.16.0-rc4-syzkaller-g6625c855789e #0 PREEMPT [ 176.714375][ T4392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.714382][ T4392] Workqueue: writeback wb_workfn (flush-7:2) [ 176.714404][ T4392] Call trace: [ 176.714409][ T4392] show_stack+0x2c/0x3c (C) [ 176.714426][ T4392] __dump_stack+0x30/0x40 [ 176.714440][ T4392] dump_stack_lvl+0xd8/0x12c [ 176.714453][ T4392] dump_stack+0x1c/0x28 [ 176.714466][ T4392] f2fs_handle_critical_error+0x34c/0x4b8 [ 176.714479][ T4392] f2fs_stop_checkpoint+0x5c/0x70 [ 176.714492][ T4392] f2fs_write_end_io+0x58c/0x818 [ 176.714504][ T4392] bio_endio+0x804/0x840 [ 176.714515][ T4392] submit_bio_noacct+0x158/0x176c [ 176.714529][ T4392] submit_bio+0x354/0x4d4 [ 176.714541][ T4392] f2fs_submit_write_bio+0x13c/0x324 [ 176.714553][ T4392] __submit_merged_bio+0x254/0x704 [ 176.714563][ T4392] __submit_merged_write_cond+0x23c/0x4ac [ 176.714574][ T4392] f2fs_write_data_pages+0x1d28/0x2634 [ 176.714586][ T4392] do_writepages+0x270/0x468 [ 176.714601][ T4392] __writeback_single_inode+0x15c/0x13e8 [ 176.714615][ T4392] writeback_sb_inodes+0x558/0xe38 [ 176.714628][ T4392] wb_writeback+0x3cc/0xd70 [ 176.714643][ T4392] wb_workfn+0x338/0xdc0 [ 176.714655][ T4392] process_one_work+0x7e8/0x155c [ 176.714670][ T4392] worker_thread+0x958/0xed8 [ 176.714683][ T4392] kthread+0x5fc/0x75c [ 176.714695][ T4392] ret_from_fork+0x10/0x20 [ 176.718649][ T4392] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 177.149136][ T6514] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 177.149199][ T6514] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 177.159124][ T6514] Remounting filesystem read-only [ 177.159153][ T6514] NILFS (loop4): error -5 truncating bmap (ino=12) [ 177.184141][ T6514] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 177.211978][ T8723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.507'. [ 177.435574][ T8736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.441144][ T8736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.654778][ T8743] loop4: detected capacity change from 0 to 512 [ 177.665719][ T8743] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.137826][ T8743] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0102] [ 178.138066][ T8743] EXT4-fs (loop4): orphan cleanup on readonly fs [ 178.153641][ T8743] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.515: bg 0: block 248: padding at end of block bitmap is not set [ 178.169420][ T8743] __quota_error: 92 callbacks suppressed [ 178.169484][ T8743] Quota error (device loop4): write_blk: dquota write failed [ 178.169553][ T8743] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 178.169587][ T8743] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.515: Failed to acquire dquot type 1 [ 178.198256][ T8743] EXT4-fs (loop4): 1 truncate cleaned up [ 178.217781][ T8743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.678971][ T8765] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 178.717519][ T8765] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0102] [ 178.759611][ T8765] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.515: Abort forced by user [ 178.770003][ T8765] EXT4-fs (loop4): Remounting filesystem read-only [ 178.770137][ T8765] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 179.034931][ T8757] loop2: detected capacity change from 0 to 40427 [ 179.053037][ T8757] F2FS-fs (loop2): heap/no_heap options were deprecated [ 179.061435][ T8757] F2FS-fs (loop2): invalid crc value [ 179.064421][ T6514] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.129986][ T8757] F2FS-fs (loop2): Start checkpoint disabled! [ 179.159411][ T8757] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 179.377484][ T8774] loop4: detected capacity change from 0 to 4096 [ 179.465581][ T8781] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.364454][ T6514] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 180.364524][ T6514] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 180.365356][ T6514] Remounting filesystem read-only [ 180.365393][ T6514] NILFS (loop4): error -5 truncating bmap (ino=12) [ 180.402697][ T6514] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 180.655891][ T8802] loop4: detected capacity change from 0 to 1024 [ 180.981075][ T8812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.982285][ T8812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.162167][ T622] kworker/u8:8: attempt to access beyond end of device [ 181.162167][ T622] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.162279][ T622] CPU: 1 UID: 0 PID: 622 Comm: kworker/u8:8 Not tainted 6.16.0-rc4-syzkaller-g6625c855789e #0 PREEMPT [ 181.162297][ T622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.162314][ T622] Workqueue: writeback wb_workfn (flush-7:2) [ 181.162336][ T622] Call trace: [ 181.162340][ T622] show_stack+0x2c/0x3c (C) [ 181.162358][ T622] __dump_stack+0x30/0x40 [ 181.162371][ T622] dump_stack_lvl+0xd8/0x12c [ 181.162385][ T622] dump_stack+0x1c/0x28 [ 181.162397][ T622] f2fs_handle_critical_error+0x34c/0x4b8 [ 181.162410][ T622] f2fs_stop_checkpoint+0x5c/0x70 [ 181.162424][ T622] f2fs_write_end_io+0x58c/0x818 [ 181.162437][ T622] bio_endio+0x804/0x840 [ 181.162448][ T622] submit_bio_noacct+0x158/0x176c [ 181.162462][ T622] submit_bio+0x354/0x4d4 [ 181.162474][ T622] f2fs_submit_write_bio+0x13c/0x324 [ 181.162485][ T622] __submit_merged_bio+0x254/0x704 [ 181.162496][ T622] __submit_merged_write_cond+0x23c/0x4ac [ 181.162507][ T622] f2fs_write_data_pages+0x1d28/0x2634 [ 181.162519][ T622] do_writepages+0x270/0x468 [ 181.162534][ T622] __writeback_single_inode+0x15c/0x13e8 [ 181.162547][ T622] writeback_sb_inodes+0x558/0xe38 [ 181.162561][ T622] wb_writeback+0x3cc/0xd70 [ 181.162574][ T622] wb_workfn+0x338/0xdc0 [ 181.162586][ T622] process_one_work+0x7e8/0x155c [ 181.162600][ T622] worker_thread+0x958/0xed8 [ 181.162613][ T622] kthread+0x5fc/0x75c [ 181.162625][ T622] ret_from_fork+0x10/0x20 [ 181.206465][ T622] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 181.326730][ T8806] loop1: detected capacity change from 0 to 32768 [ 181.403198][ T8806] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.522065][ T8806] XFS (loop1): Ending clean mount [ 181.530493][ T8806] XFS (loop1): Quotacheck needed: Please wait. [ 181.588436][ T8806] XFS (loop1): Quotacheck: Done. [ 181.764186][ T6523] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 182.218948][ T8844] loop4: detected capacity change from 0 to 8 [ 182.400842][ T8853] netlink: 'syz.4.546': attribute type 1 has an invalid length. [ 182.454103][ T8853] netlink: 'syz.4.546': attribute type 1 has an invalid length. [ 183.555385][ T8874] loop4: detected capacity change from 0 to 8 [ 185.648263][ T8895] loop4: detected capacity change from 0 to 32768 [ 185.772462][ T8895] (syz.4.558,8895,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 185.787269][ T8895] (syz.4.558,8895,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 185.952332][ T8895] JBD2: Ignoring recovery information on journal [ 186.544790][ T8895] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 187.175835][ T8904] loop5: detected capacity change from 0 to 64 [ 187.538684][ T8904] Trying to free block not in datazone [ 187.547118][ T8904] Trying to free block not in datazone [ 187.559072][ T8904] Trying to free block not in datazone [ 187.718796][ T2400] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.718906][ T2400] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.016456][ T8909] loop0: detected capacity change from 0 to 32768 [ 189.569702][ T8909] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.564 (8909) [ 189.786273][ T8909] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 189.786358][ T8909] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 189.786428][ T8909] BTRFS info (device loop0): using free-space-tree [ 190.378619][ T8909] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 190.380603][ T8909] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 190.380875][ T8909] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 190.381024][ T8909] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 190.381176][ T8909] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 190.381338][ T8909] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 190.381490][ T8909] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 190.381652][ T8909] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 190.381826][ T8909] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 190.427108][ T8909] BTRFS error (device loop0): open_ctree failed: -12 [ 191.160471][ T6514] ocfs2: Unmounting device (7,4) on (node local) [ 191.448701][ T8938] netlink: 'syz.1.571': attribute type 1 has an invalid length. [ 191.453061][ T8938] netlink: 'syz.1.571': attribute type 1 has an invalid length. [ 192.450816][ T6518] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 192.473345][ T6518] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 192.571357][ T8952] loop5: detected capacity change from 0 to 1024 [ 192.584526][ T8952] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.591045][ T8952] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 192.613597][ T8952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.380030][ T7489] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.506786][ T8966] syzkaller1: entered promiscuous mode [ 193.514199][ T8966] syzkaller1: entered allmulticast mode [ 193.603929][ T8961] fido_id[8961]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 194.698655][ T8990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.698968][ T8990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.846773][ T8979] loop0: detected capacity change from 0 to 40427 [ 194.870571][ T8979] F2FS-fs (loop0): heap/no_heap options were deprecated [ 194.878753][ T8979] F2FS-fs (loop0): invalid crc value [ 194.913204][ T8979] F2FS-fs (loop0): Start checkpoint disabled! [ 194.919396][ T8979] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 195.168782][ T495] kworker/u8:6: attempt to access beyond end of device [ 195.168782][ T495] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 195.168873][ T495] CPU: 1 UID: 0 PID: 495 Comm: kworker/u8:6 Not tainted 6.16.0-rc4-syzkaller-g6625c855789e #0 PREEMPT [ 195.168890][ T495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.168898][ T495] Workqueue: writeback wb_workfn (flush-7:0) [ 195.168919][ T495] Call trace: [ 195.168923][ T495] show_stack+0x2c/0x3c (C) [ 195.168941][ T495] __dump_stack+0x30/0x40 [ 195.168955][ T495] dump_stack_lvl+0xd8/0x12c [ 195.168968][ T495] dump_stack+0x1c/0x28 [ 195.168981][ T495] f2fs_handle_critical_error+0x34c/0x4b8 [ 195.168994][ T495] f2fs_stop_checkpoint+0x5c/0x70 [ 195.169007][ T495] f2fs_write_end_io+0x58c/0x818 [ 195.169019][ T495] bio_endio+0x804/0x840 [ 195.169031][ T495] submit_bio_noacct+0x158/0x176c [ 195.169045][ T495] submit_bio+0x354/0x4d4 [ 195.169057][ T495] f2fs_submit_write_bio+0x13c/0x324 [ 195.169068][ T495] __submit_merged_bio+0x254/0x704 [ 195.169079][ T495] __submit_merged_write_cond+0x23c/0x4ac [ 195.169090][ T495] f2fs_write_data_pages+0x1d28/0x2634 [ 195.169102][ T495] do_writepages+0x270/0x468 [ 195.169116][ T495] __writeback_single_inode+0x15c/0x13e8 [ 195.169130][ T495] writeback_sb_inodes+0x558/0xe38 [ 195.169144][ T495] wb_writeback+0x3cc/0xd70 [ 195.169157][ T495] wb_workfn+0x338/0xdc0 [ 195.169169][ T495] process_one_work+0x7e8/0x155c [ 195.169183][ T495] worker_thread+0x958/0xed8 [ 195.169196][ T495] kthread+0x5fc/0x75c [ 195.169208][ T495] ret_from_fork+0x10/0x20 [ 195.171099][ T495] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 196.517727][ T9008] loop0: detected capacity change from 0 to 512 [ 196.552344][ T9008] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 196.592826][ T9008] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 196.593067][ T9008] EXT4-fs (loop0): orphan cleanup on readonly fs [ 196.620957][ T9008] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.588: corrupted inode contents [ 196.626329][ T9008] EXT4-fs (loop0): Remounting filesystem read-only [ 196.626695][ T9008] EXT4-fs (loop0): 1 truncate cleaned up [ 196.633403][ T13] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 196.633466][ T13] Quota error (device loop0): write_blk: dquota write failed [ 196.633518][ T13] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 196.633547][ T13] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 196.633578][ T13] Quota error (device loop0): write_blk: dquota write failed [ 196.633606][ T13] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 196.633673][ T13] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 196.633704][ T13] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 196.633870][ T13] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 196.635846][ T9008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.738308][ T6513] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.058864][ T9031] netlink: 132 bytes leftover after parsing attributes in process `syz.0.599'. [ 198.136142][ T9034] bridge0: port 3(netdevsim0) entered blocking state [ 198.136505][ T9034] bridge0: port 3(netdevsim0) entered disabled state [ 198.138306][ T9034] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 198.155970][ T9034] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 198.158090][ T9034] bridge0: port 3(netdevsim0) entered blocking state [ 198.158148][ T9034] bridge0: port 3(netdevsim0) entered forwarding state [ 200.121528][ T9041] loop5: detected capacity change from 0 to 40427 [ 200.131607][ T9041] F2FS-fs (loop5): heap/no_heap options were deprecated [ 200.137296][ T9041] F2FS-fs (loop5): invalid crc value [ 200.201888][ T9041] F2FS-fs (loop5): Start checkpoint disabled! [ 200.244352][ T9041] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 200.503376][ T283] kworker/u8:4: attempt to access beyond end of device [ 200.503376][ T283] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 200.503467][ T283] CPU: 0 UID: 0 PID: 283 Comm: kworker/u8:4 Not tainted 6.16.0-rc4-syzkaller-g6625c855789e #0 PREEMPT [ 200.503484][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.503491][ T283] Workqueue: writeback wb_workfn (flush-7:5) [ 200.503513][ T283] Call trace: [ 200.503517][ T283] show_stack+0x2c/0x3c (C) [ 200.503535][ T283] __dump_stack+0x30/0x40 [ 200.503548][ T283] dump_stack_lvl+0xd8/0x12c [ 200.503561][ T283] dump_stack+0x1c/0x28 [ 200.503574][ T283] f2fs_handle_critical_error+0x34c/0x4b8 [ 200.503586][ T283] f2fs_stop_checkpoint+0x5c/0x70 [ 200.503599][ T283] f2fs_write_end_io+0x58c/0x818 [ 200.503611][ T283] bio_endio+0x804/0x840 [ 200.503622][ T283] submit_bio_noacct+0x158/0x176c [ 200.503635][ T283] submit_bio+0x354/0x4d4 [ 200.503648][ T283] f2fs_submit_write_bio+0x13c/0x324 [ 200.503659][ T283] __submit_merged_bio+0x254/0x704 [ 200.503670][ T283] __submit_merged_write_cond+0x23c/0x4ac [ 200.503681][ T283] f2fs_write_data_pages+0x1d28/0x2634 [ 200.503692][ T283] do_writepages+0x270/0x468 [ 200.503707][ T283] __writeback_single_inode+0x15c/0x13e8 [ 200.503720][ T283] writeback_sb_inodes+0x558/0xe38 [ 200.503734][ T283] wb_writeback+0x3cc/0xd70 [ 200.503746][ T283] wb_workfn+0x338/0xdc0 [ 200.503758][ T283] process_one_work+0x7e8/0x155c [ 200.503772][ T283] worker_thread+0x958/0xed8 [ 200.503785][ T283] kthread+0x5fc/0x75c [ 200.503797][ T283] ret_from_fork+0x10/0x20 [ 200.503965][ T283] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 200.504011][ T283] CPU: 0 UID: 0 PID: 283 Comm: kworker/u8:4 Not tainted 6.16.0-rc4-syzkaller-g6625c855789e #0 PREEMPT [ 200.504026][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.504033][ T283] Workqueue: writeback wb_workfn (flush-7:5) [ 200.504048][ T283] Call trace: [ 200.504052][ T283] show_stack+0x2c/0x3c (C) [ 200.504065][ T283] __dump_stack+0x30/0x40 [ 200.504078][ T283] dump_stack_lvl+0xd8/0x12c [ 200.504091][ T283] dump_stack+0x1c/0x28 [ 200.504104][ T283] f2fs_handle_critical_error+0x34c/0x4b8 [ 200.504115][ T283] f2fs_stop_checkpoint+0x5c/0x70 [ 200.504128][ T283] f2fs_write_end_io+0x58c/0x818 [ 200.504139][ T283] bio_endio+0x804/0x840 [ 200.504150][ T283] submit_bio_noacct+0x158/0x176c [ 200.504163][ T283] submit_bio+0x354/0x4d4 [ 200.504175][ T283] f2fs_submit_write_bio+0x13c/0x324 [ 200.504186][ T283] __submit_merged_bio+0x254/0x704 [ 200.504197][ T283] __submit_merged_write_cond+0x23c/0x4ac [ 200.504208][ T283] f2fs_write_data_pages+0x1d28/0x2634 [ 200.504220][ T283] do_writepages+0x270/0x468 [ 200.504233][ T283] __writeback_single_inode+0x15c/0x13e8 [ 200.504255][ T283] writeback_sb_inodes+0x558/0xe38 [ 200.504268][ T283] wb_writeback+0x3cc/0xd70 [ 200.504281][ T283] wb_workfn+0x338/0xdc0 [ 200.504292][ T283] process_one_work+0x7e8/0x155c [ 200.504310][ T283] worker_thread+0x958/0xed8 [ 200.504323][ T283] kthread+0x5fc/0x75c [ 200.504335][ T283] ret_from_fork+0x10/0x20 [ 200.504488][ T283] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 200.903781][ T26] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 200.913380][ T26] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 201.068995][ T9056] loop4: detected capacity change from 0 to 1024 [ 201.069609][ T9056] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.078325][ T9056] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 201.119778][ T9056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.794056][ T9054] loop0: detected capacity change from 0 to 32768 [ 201.796614][ T9054] ocfs2: Unknown parameter 'journal_asyD [ 201.796614][ T9054] %Ÿjnc_commit' [ 201.865649][ T6514] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.992226][ T9071] netlink: 132 bytes leftover after parsing attributes in process `syz.1.611'. [ 202.167017][ T9078] loop0: detected capacity change from 0 to 512 [ 202.182829][ T9078] EXT4-fs (loop0): Test dummy encryption mode enabled [ 202.185368][ T9078] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 202.185975][ T9078] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 202.188315][ T9078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.218857][ T6513] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.055657][ T9065] loop2: detected capacity change from 0 to 32768 [ 203.071053][ T9065] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.608 (9065) [ 203.085439][ T9065] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.085535][ T9065] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 203.085594][ T9065] BTRFS info (device loop2): using free-space-tree [ 203.445700][ T6525] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.813621][ T1816] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 203.818784][ T1816] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 204.114746][ T9120] fido_id[9120]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 205.245464][ T9119] loop1: detected capacity change from 0 to 32768 [ 205.246055][ T9119] ocfs2: Unknown parameter 'journal_asyD [ 205.246055][ T9119] %Ÿjnc_commit' [ 206.602345][ T9144] loop4: detected capacity change from 0 to 4096 [ 206.707962][ T9146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.711006][ T9146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.305667][ T9147] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.614280][ T2313] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 207.627006][ T2313] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 207.644370][ T9153] loop5: detected capacity change from 0 to 1024 [ 207.659260][ T9153] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.664060][ T9153] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 207.691791][ T9153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.756449][ T7489] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.838646][ T26] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 208.063569][ T26] usb 1-1: device descriptor read/64, error -71 [ 208.599660][ T6514] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 208.599929][ T6514] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 208.607420][ T6514] Remounting filesystem read-only [ 208.610641][ T6514] NILFS (loop4): error -5 truncating bmap (ino=12) [ 208.615586][ T6514] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 208.671441][ T26] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 208.799950][ T26] usb 1-1: device descriptor read/64, error -71 [ 208.960684][ T26] usb usb1-port1: attempt power cycle [ 209.432022][ T26] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 209.837805][ T26] usb 1-1: device descriptor read/8, error -71 [ 209.885606][ T9192] loop1: detected capacity change from 0 to 512 [ 209.911472][ T9192] EXT4-fs (loop1): Test dummy encryption mode enabled [ 209.967871][ T9192] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 209.968927][ T9192] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 209.969808][ T9192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.078516][ T26] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 210.100577][ T6523] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.111111][ T26] usb 1-1: device descriptor read/8, error -71 [ 210.339712][ T26] usb usb1-port1: unable to enumerate USB device [ 210.347083][ T9199] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 212.971837][ T9226] loop4: detected capacity change from 0 to 512 [ 212.973904][ T9226] EXT4-fs (loop4): Test dummy encryption mode enabled [ 212.977121][ T9226] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 212.982752][ T9226] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 212.983646][ T9226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.032404][ T9230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.654'. [ 213.042340][ T6514] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.354412][ T9232] loop1: detected capacity change from 0 to 32768 [ 213.382198][ T9232] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 213.409190][ T2313] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 213.433817][ T9232] XFS (loop1): Ending clean mount [ 213.655886][ T2313] usb 1-1: device descriptor read/64, error -71 [ 213.896138][ T2313] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 214.445780][ T9268] loop2: detected capacity change from 0 to 512 [ 214.452478][ T9268] EXT4-fs (loop2): Test dummy encryption mode enabled [ 214.468672][ T2313] usb 1-1: device descriptor read/64, error -71 [ 214.473880][ T9268] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 214.578794][ T2313] usb usb1-port1: attempt power cycle [ 214.651962][ T6523] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 214.704991][ T9268] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 214.706083][ T9268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.804949][ T6525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.935618][ T2313] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 214.952987][ T2313] usb 1-1: device descriptor read/8, error -71 [ 215.228620][ T2313] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 215.258564][ T2313] usb 1-1: device descriptor read/8, error -71 [ 215.368728][ T2313] usb usb1-port1: unable to enumerate USB device [ 216.979743][ T9311] loop1: detected capacity change from 0 to 512 [ 217.063989][ T9311] EXT4-fs (loop1): Test dummy encryption mode enabled [ 217.069955][ T9311] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 217.168853][ T9311] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 217.169785][ T9311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.272958][ T6523] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.952008][ T9324] loop2: detected capacity change from 0 to 1024 [ 218.057212][ T9309] loop0: detected capacity change from 0 to 32768 [ 218.133465][ T9309] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 218.213783][ T9309] XFS (loop0): Ending clean mount [ 218.654310][ T6513] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 219.668287][ T11] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 219.888509][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 219.898657][ T11] usb 1-1: no configurations [ 219.898716][ T11] usb 1-1: can't read configurations, error -22 [ 220.014769][ T9361] loop5: detected capacity change from 0 to 512 [ 220.028580][ T11] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 220.044607][ T9361] EXT4-fs (loop5): Test dummy encryption mode enabled [ 220.051752][ T9361] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 220.057360][ T9361] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 220.058237][ T9361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.135371][ T7489] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.198757][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 220.200966][ T11] usb 1-1: no configurations [ 220.201032][ T11] usb 1-1: can't read configurations, error -22 [ 220.204718][ T11] usb usb1-port1: attempt power cycle [ 220.590048][ T11] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 220.608906][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 220.611130][ T11] usb 1-1: no configurations [ 220.612765][ T11] usb 1-1: can't read configurations, error -22 [ 220.749387][ T11] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 220.769085][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 220.771585][ T11] usb 1-1: no configurations [ 220.773121][ T11] usb 1-1: can't read configurations, error -22 [ 220.775436][ T11] usb usb1-port1: unable to enumerate USB device [ 222.116836][ T9394] loop0: detected capacity change from 0 to 512 [ 222.117968][ T9394] EXT4-fs (loop0): Test dummy encryption mode enabled [ 222.130895][ T9394] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 222.131273][ T9394] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 222.132136][ T9394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.151960][ T9394] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.704'. [ 222.267552][ T6513] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.435266][ T9403] loop0: detected capacity change from 0 to 512 [ 222.470379][ T9403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.205753][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.712'. [ 224.288874][ T9418] hsr_slave_1 (unregistering): left promiscuous mode [ 224.406724][ T9433] loop4: detected capacity change from 0 to 512 [ 224.438568][ T9433] EXT4-fs (loop4): Test dummy encryption mode enabled [ 224.449573][ T9433] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 224.449951][ T9433] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 224.450826][ T9433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.463149][ T9433] netlink: 1068 bytes leftover after parsing attributes in process `syz.4.717'. [ 224.564227][ T6514] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.932886][ T9431] loop2: detected capacity change from 0 to 40427 [ 224.940088][ T9431] F2FS-fs (loop2): heap/no_heap options were deprecated [ 224.942725][ T9431] F2FS-fs (loop2): invalid crc value [ 224.987371][ T9446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.990856][ T9446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.048682][ T9431] F2FS-fs (loop2): Start checkpoint disabled! [ 225.069277][ T9431] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 225.390846][ T6513] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.487095][ T283] kworker/u8:4: attempt to access beyond end of device [ 225.487095][ T283] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 225.491532][ T283] CPU: 0 UID: 0 PID: 283 Comm: kworker/u8:4 Not tainted 6.16.0-rc4-syzkaller-g6625c855789e #0 PREEMPT [ 225.491558][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.491566][ T283] Workqueue: writeback wb_workfn (flush-7:2) [ 225.491589][ T283] Call trace: [ 225.491594][ T283] show_stack+0x2c/0x3c (C) [ 225.491611][ T283] __dump_stack+0x30/0x40 [ 225.491625][ T283] dump_stack_lvl+0xd8/0x12c [ 225.491639][ T283] dump_stack+0x1c/0x28 [ 225.491651][ T283] f2fs_handle_critical_error+0x34c/0x4b8 [ 225.491664][ T283] f2fs_stop_checkpoint+0x5c/0x70 [ 225.491677][ T283] f2fs_write_end_io+0x58c/0x818 [ 225.491689][ T283] bio_endio+0x804/0x840 [ 225.491701][ T283] submit_bio_noacct+0x158/0x176c [ 225.491714][ T283] submit_bio+0x354/0x4d4 [ 225.491726][ T283] f2fs_submit_write_bio+0x13c/0x324 [ 225.491737][ T283] __submit_merged_bio+0x254/0x704 [ 225.491748][ T283] __submit_merged_write_cond+0x23c/0x4ac [ 225.491759][ T283] f2fs_write_data_pages+0x1d28/0x2634 [ 225.491771][ T283] do_writepages+0x270/0x468 [ 225.491786][ T283] __writeback_single_inode+0x15c/0x13e8 [ 225.491800][ T283] writeback_sb_inodes+0x558/0xe38 [ 225.491813][ T283] wb_writeback+0x3cc/0xd70 [ 225.491826][ T283] wb_workfn+0x338/0xdc0 [ 225.491838][ T283] process_one_work+0x7e8/0x155c [ 225.491852][ T283] worker_thread+0x958/0xed8 [ 225.491865][ T283] kthread+0x5fc/0x75c [ 225.491877][ T283] ret_from_fork+0x10/0x20 [ 225.540191][ T283] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 225.542634][ T283] CPU: 0 UID: 0 PID: 283 Comm: kworker/u8:4 Not tainted 6.16.0-rc4-syzkaller-g6625c855789e #0 PREEMPT [ 225.542659][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.542668][ T283] Workqueue: writeback wb_workfn (flush-7:2) [ 225.542690][ T283] Call trace: [ 225.542695][ T283] show_stack+0x2c/0x3c (C) [ 225.542712][ T283] __dump_stack+0x30/0x40 [ 225.542726][ T283] dump_stack_lvl+0xd8/0x12c [ 225.542739][ T283] dump_stack+0x1c/0x28 [ 225.542752][ T283] f2fs_handle_critical_error+0x34c/0x4b8 [ 225.542764][ T283] f2fs_stop_checkpoint+0x5c/0x70 [ 225.542777][ T283] f2fs_write_end_io+0x58c/0x818 [ 225.542790][ T283] bio_endio+0x804/0x840 [ 225.542801][ T283] submit_bio_noacct+0x158/0x176c [ 225.542814][ T283] submit_bio+0x354/0x4d4 [ 225.542827][ T283] f2fs_submit_write_bio+0x13c/0x324 [ 225.542838][ T283] __submit_merged_bio+0x254/0x704 [ 225.542849][ T283] __submit_merged_write_cond+0x23c/0x4ac [ 225.542860][ T283] f2fs_write_data_pages+0x1d28/0x2634 [ 225.542872][ T283] do_writepages+0x270/0x468 [ 225.542886][ T283] __writeback_single_inode+0x15c/0x13e8 [ 225.542900][ T283] writeback_sb_inodes+0x558/0xe38 [ 225.542914][ T283] wb_writeback+0x3cc/0xd70 [ 225.542927][ T283] wb_workfn+0x338/0xdc0 [ 225.542939][ T283] process_one_work+0x7e8/0x155c [ 225.542953][ T283] worker_thread+0x958/0xed8 [ 225.542966][ T283] kthread+0x5fc/0x75c [ 225.542987][ T283] ret_from_fork+0x10/0x20 [ 225.612378][ T283] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 227.296624][ T9468] loop0: detected capacity change from 0 to 40427 [ 227.335851][ T9468] F2FS-fs (loop0): heap/no_heap options were deprecated [ 227.339548][ T9468] F2FS-fs (loop0): invalid crc value [ 227.428927][ T9468] F2FS-fs (loop0): Start checkpoint disabled! [ 227.436195][ T9468] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 227.721111][ T9479] loop5: detected capacity change from 0 to 512 [ 227.733106][ T9479] EXT4-fs (loop5): Test dummy encryption mode enabled [ 227.808679][ T6745] kworker/u8:11: attempt to access beyond end of device [ 227.808679][ T6745] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 227.813875][ T6745] CPU: 1 UID: 0 PID: 6745 Comm: kworker/u8:11 Not tainted 6.16.0-rc4-syzkaller-g6625c855789e #0 PREEMPT [ 227.813902][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 227.813911][ T6745] Workqueue: writeback wb_workfn (flush-7:0) [ 227.813934][ T6745] Call trace: [ 227.813938][ T6745] show_stack+0x2c/0x3c (C) [ 227.813957][ T6745] __dump_stack+0x30/0x40 [ 227.813971][ T6745] dump_stack_lvl+0xd8/0x12c [ 227.813985][ T6745] dump_stack+0x1c/0x28 [ 227.813998][ T6745] f2fs_handle_critical_error+0x34c/0x4b8 [ 227.814011][ T6745] f2fs_stop_checkpoint+0x5c/0x70 [ 227.814025][ T6745] f2fs_write_end_io+0x58c/0x818 [ 227.814037][ T6745] bio_endio+0x804/0x840 [ 227.814049][ T6745] submit_bio_noacct+0x158/0x176c [ 227.814063][ T6745] submit_bio+0x354/0x4d4 [ 227.814076][ T6745] f2fs_submit_write_bio+0x13c/0x324 [ 227.814087][ T6745] __submit_merged_bio+0x254/0x704 [ 227.814098][ T6745] __submit_merged_write_cond+0x23c/0x4ac [ 227.814110][ T6745] f2fs_write_data_pages+0x1d28/0x2634 [ 227.814122][ T6745] do_writepages+0x270/0x468 [ 227.814137][ T6745] __writeback_single_inode+0x15c/0x13e8 [ 227.814151][ T6745] writeback_sb_inodes+0x558/0xe38 [ 227.814165][ T6745] wb_writeback+0x3cc/0xd70 [ 227.814179][ T6745] wb_workfn+0x338/0xdc0 [ 227.814191][ T6745] process_one_work+0x7e8/0x155c [ 227.814206][ T6745] worker_thread+0x958/0xed8 [ 227.814219][ T6745] kthread+0x5fc/0x75c [ 227.814232][ T6745] ret_from_fork+0x10/0x20 [ 227.815147][ T9479] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 227.868705][ T9479] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 227.869693][ T9479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.878670][ T6745] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 227.885440][ T9479] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.729'. [ 227.939892][ T7489] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.719196][ T9493] loop1: detected capacity change from 0 to 1024 [ 230.310529][ T9514] loop2: detected capacity change from 0 to 512 [ 230.324671][ T9514] EXT4-fs (loop2): Test dummy encryption mode enabled [ 230.356154][ T9514] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 230.360056][ T9514] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 230.360945][ T9514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.397275][ T9514] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.741'. [ 230.502674][ T6525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.615740][ T9517] loop4: detected capacity change from 0 to 40427 [ 231.653900][ T9517] F2FS-fs (loop4): heap/no_heap options were deprecated [ 231.655288][ T9517] F2FS-fs (loop4): invalid crc value [ 232.031015][ T9517] F2FS-fs (loop4): Start checkpoint disabled! [ 232.101660][ T9517] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 232.189438][ T9520] loop0: detected capacity change from 0 to 32768 [ 232.301101][ T9520] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 232.358699][ T9520] XFS (loop0): Ending clean mount [ 232.483433][ T543] kworker/u8:7: attempt to access beyond end of device [ 232.483433][ T543] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 232.483530][ T543] CPU: 0 UID: 0 PID: 543 Comm: kworker/u8:7 Not tainted 6.16.0-rc4-syzkaller-g6625c855789e #0 PREEMPT [ 232.483544][ T543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.483552][ T543] Workqueue: writeback wb_workfn (flush-7:4) [ 232.483573][ T543] Call trace: [ 232.483578][ T543] show_stack+0x2c/0x3c (C) [ 232.483595][ T543] __dump_stack+0x30/0x40 [ 232.483609][ T543] dump_stack_lvl+0xd8/0x12c [ 232.483622][ T543] dump_stack+0x1c/0x28 [ 232.483635][ T543] f2fs_handle_critical_error+0x34c/0x4b8 [ 232.483647][ T543] f2fs_stop_checkpoint+0x5c/0x70 [ 232.483660][ T543] f2fs_write_end_io+0x58c/0x818 [ 232.483672][ T543] bio_endio+0x804/0x840 [ 232.483683][ T543] submit_bio_noacct+0x158/0x176c [ 232.483697][ T543] submit_bio+0x354/0x4d4 [ 232.483709][ T543] f2fs_submit_write_bio+0x13c/0x324 [ 232.483720][ T543] __submit_merged_bio+0x254/0x704 [ 232.483731][ T543] __submit_merged_write_cond+0x23c/0x4ac [ 232.483742][ T543] f2fs_write_data_pages+0x1d28/0x2634 [ 232.483753][ T543] do_writepages+0x270/0x468 [ 232.483767][ T543] __writeback_single_inode+0x15c/0x13e8 [ 232.483781][ T543] writeback_sb_inodes+0x558/0xe38 [ 232.483794][ T543] wb_writeback+0x3cc/0xd70 [ 232.483807][ T543] wb_workfn+0x338/0xdc0 [ 232.483820][ T543] process_one_work+0x7e8/0x155c [ 232.483834][ T543] worker_thread+0x958/0xed8 [ 232.483848][ T543] kthread+0x5fc/0x75c [ 232.483861][ T543] ret_from_fork+0x10/0x20 [ 232.483874][ T543] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 232.738727][ T9559] veth0_to_team: entered promiscuous mode [ 232.738792][ T9559] veth0_to_team: entered allmulticast mode [ 233.590107][ T6513] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 233.667129][ T9569] loop1: detected capacity change from 0 to 512 [ 233.688211][ T9569] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 233.707286][ T9569] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0102] [ 233.707485][ T9569] EXT4-fs (loop1): orphan cleanup on readonly fs [ 233.708536][ T9569] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.757: bg 0: block 248: padding at end of block bitmap is not set [ 233.708917][ T9569] Quota error (device loop1): write_blk: dquota write failed [ 233.708971][ T9569] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 233.709002][ T9569] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.757: Failed to acquire dquot type 1 [ 233.711910][ T9569] EXT4-fs (loop1): 1 truncate cleaned up [ 233.719421][ T9569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 234.048816][ T9576] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 234.054838][ T9576] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0102] [ 234.089677][ T9576] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.757: Abort forced by user [ 234.096177][ T9576] EXT4-fs (loop1): Remounting filesystem read-only [ 234.096359][ T9576] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 235.359735][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 235.381108][ T6523] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.401377][ T9586] loop2: detected capacity change from 0 to 256 [ 235.818642][ T6519] Bluetooth: hci5: command 0x0406 tx timeout [ 236.312022][ T9600] loop4: detected capacity change from 0 to 1024 [ 237.864282][ T9604] loop2: detected capacity change from 0 to 32768 [ 237.898307][ T9604] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 238.115802][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.772'. [ 238.168516][ T9604] XFS (loop2): Ending clean mount [ 238.941503][ T6525] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 241.001706][ T31] audit: type=1326 audit(240.720:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9665 comm="syz.1.782" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655a9a8 code=0x0 [ 241.061470][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 242.343278][ T9673] loop2: detected capacity change from 0 to 32768 [ 242.345952][ T9673] ocfs2: Unknown parameter 'journal_asyD [ 242.345952][ T9673] %Ÿjnc_commit' [ 243.352227][ T9679] loop4: detected capacity change from 0 to 32768 [ 243.363301][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'. [ 243.393283][ T9679] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 243.446242][ T9679] XFS (loop4): Ending clean mount [ 244.161230][ T6514] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 245.107977][ T9727] netlink: 356 bytes leftover after parsing attributes in process `syz.2.801'. [ 245.115808][ T9732] loop4: detected capacity change from 0 to 512 [ 245.127779][ T9721] loop5: detected capacity change from 0 to 32768 [ 245.139052][ T9732] EXT4-fs (loop4): Test dummy encryption mode enabled [ 245.172830][ T9732] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 245.185372][ T9732] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 245.186278][ T9732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.296845][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'. [ 245.521749][ T6514] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.546112][ T9726] loop1: detected capacity change from 0 to 32768 [ 245.550830][ T9726] ocfs2: Unknown parameter 'journal_asyD [ 245.550830][ T9726] %Ÿjnc_commit' [ 246.177473][ T9721] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 246.177535][ T9721] allowing incompatible features above 0.0: (unknown version) [ 246.194448][ T9721] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 246.194510][ T9721] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 246.194585][ T9721] bcachefs (loop5): initializing new filesystem [ 246.197948][ T9721] bcachefs (loop5): going read-write [ 246.267852][ T9721] bcachefs (loop5): marking superblocks [ 246.289448][ T9721] bcachefs (loop5): initializing freespace [ 246.307530][ T9721] bcachefs (loop5): done initializing freespace [ 246.320149][ T9721] bcachefs (loop5): reading snapshots table [ 246.320238][ T9721] bcachefs (loop5): reading snapshots done [ 246.379020][ T9721] bcachefs (loop5): done starting filesystem [ 246.545528][ T7489] bcachefs (loop5): shutting down [ 246.545591][ T7489] bcachefs (loop5): going read-only [ 246.545623][ T7489] bcachefs (loop5): finished waiting for writes to stop [ 246.560097][ T9763] loop1: detected capacity change from 0 to 32768 [ 246.580353][ T7489] bcachefs (loop5): flushing journal and stopping allocators, journal seq 13 [ 246.590655][ T9763] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 246.646391][ T9763] XFS (loop1): Ending clean mount [ 246.667351][ T7489] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 15 [ 246.671407][ T7489] bcachefs (loop5): clean shutdown complete, journal seq 16 [ 246.672192][ T7489] bcachefs (loop5): marking filesystem clean [ 246.738737][ T7489] bcachefs (loop5): shutdown complete [ 246.902653][ T6523] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 248.522353][ T9787] loop2: detected capacity change from 0 to 512 [ 248.571394][ T9788] netlink: 356 bytes leftover after parsing attributes in process `syz.1.814'. [ 248.706299][ T9787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 248.713075][ T9787] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0102] [ 248.713290][ T9787] EXT4-fs (loop2): orphan cleanup on readonly fs [ 248.733990][ T9787] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.816: bg 0: block 248: padding at end of block bitmap is not set [ 248.735573][ T9787] Quota error (device loop2): write_blk: dquota write failed [ 248.735634][ T9787] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 248.735666][ T9787] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.816: Failed to acquire dquot type 1 [ 248.744661][ T9787] EXT4-fs (loop2): 1 truncate cleaned up [ 248.898123][ T9787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 249.079614][ T2400] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.079713][ T2400] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.138669][ T9798] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 249.139050][ T9798] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0102] [ 249.229128][ T9798] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.816: Abort forced by user [ 249.233548][ T9798] EXT4-fs (loop2): Remounting filesystem read-only [ 249.233608][ T9798] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 249.253314][ T9795] loop1: detected capacity change from 0 to 32768 [ 249.255875][ T9795] ocfs2: Unknown parameter 'journal_asyD [ 249.255875][ T9795] %Ÿjnc_commit' [ 249.394136][ T6525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.425003][ T9805] loop1: detected capacity change from 0 to 256 [ 250.646286][ T9807] loop2: detected capacity change from 0 to 32768 [ 251.394442][ T9807] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 251.477071][ T9807] XFS (loop2): Ending clean mount [ 251.834582][ T6525] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 252.199357][ T9839] netlink: 356 bytes leftover after parsing attributes in process `syz.2.827'. [ 252.705064][ T9841] loop2: detected capacity change from 0 to 32768 [ 252.751753][ T9841] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 252.910275][ T9851] loop4: detected capacity change from 0 to 512 [ 252.927367][ T9851] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.986104][ T9851] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0102] [ 252.986329][ T9851] EXT4-fs (loop4): orphan cleanup on readonly fs [ 252.996539][ T9851] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.832: bg 0: block 248: padding at end of block bitmap is not set [ 253.004320][ T9851] Quota error (device loop4): write_blk: dquota write failed [ 253.004409][ T9851] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 253.004449][ T9851] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.832: Failed to acquire dquot type 1 [ 253.025793][ T9851] EXT4-fs (loop4): 1 truncate cleaned up [ 253.299803][ T9851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 253.544605][ T6525] ocfs2: Unmounting device (7,2) on (node local) [ 253.548858][ T9851] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 253.570083][ T9851] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0102] [ 253.599286][ T9851] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.832: Abort forced by user [ 253.602705][ T9851] EXT4-fs (loop4): Remounting filesystem read-only [ 253.602769][ T9851] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 253.680852][ T6514] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.761007][ T9847] loop0: detected capacity change from 0 to 32768 [ 253.912531][ T9847] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 255.033290][ T9847] XFS (loop0): Ending clean mount [ 255.052903][ T9881] netlink: 356 bytes leftover after parsing attributes in process `syz.2.838'. [ 255.119091][ T6513] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 257.137308][ T9914] netlink: 356 bytes leftover after parsing attributes in process `syz.0.850'. [ 259.194305][ T9940] netlink: 356 bytes leftover after parsing attributes in process `syz.2.861'. [ 259.409555][ T9946] loop1: detected capacity change from 0 to 4096 [ 259.430529][ T9928] loop5: detected capacity change from 0 to 32768 [ 259.434825][ T9949] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.526402][ T9928] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 259.534508][ T9928] allowing incompatible features above 0.0: (unknown version) [ 259.534529][ T9928] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 259.534591][ T9928] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 259.534635][ T9928] bcachefs (loop5): initializing new filesystem [ 259.539502][ T9928] bcachefs (loop5): going read-write [ 259.688639][ T9928] bcachefs (loop5): marking superblocks [ 259.694637][ T9928] bcachefs (loop5): initializing freespace [ 259.696665][ T9928] bcachefs (loop5): done initializing freespace [ 259.708753][ T9928] bcachefs (loop5): reading snapshots table [ 259.708838][ T9928] bcachefs (loop5): reading snapshots done [ 259.722336][ T9928] bcachefs (loop5): loop5: Superblock write was silently dropped! (seq 0 expected 42) [ 259.722737][ T9928] bcachefs (loop5): done starting filesystem [ 260.390040][ T9928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.390381][ T9928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.446386][ T31] audit: type=1326 audit(260.160:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9966 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 260.446484][ T31] audit: type=1326 audit(260.160:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9966 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 260.446625][ T31] audit: type=1326 audit(260.160:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9966 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 260.446894][ T31] audit: type=1326 audit(260.160:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9966 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 260.447106][ T31] audit: type=1326 audit(260.160:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9966 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 260.447564][ T31] audit: type=1326 audit(260.160:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9966 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 260.447705][ T31] audit: type=1326 audit(260.160:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9966 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 260.447835][ T31] audit: type=1326 audit(260.160:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9966 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 260.448110][ T31] audit: type=1326 audit(260.160:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9966 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 260.448337][ T31] audit: type=1326 audit(260.160:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9966 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff8635a9dc code=0x7ffc0000 [ 260.452408][ T9967] loop0: detected capacity change from 0 to 256 [ 260.453613][ T9967] vfat: Unknown parameter 'shor†name' [ 261.343608][ T6523] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 261.343681][ T6523] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 261.353006][ T6523] Remounting filesystem read-only [ 261.353065][ T6523] NILFS (loop1): error -5 truncating bmap (ino=12) [ 261.371182][ T6523] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 261.653196][ T7489] bcachefs (loop5): shutting down [ 261.653273][ T7489] bcachefs (loop5): going read-only [ 261.653325][ T7489] bcachefs (loop5): finished waiting for writes to stop [ 261.778551][ T7489] bcachefs (loop5): flushing journal and stopping allocators, journal seq 4 [ 261.794847][ T9987] netlink: 356 bytes leftover after parsing attributes in process `syz.0.872'. [ 261.844646][ T7489] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 4 [ 261.907302][ T7489] bcachefs (loop5): clean shutdown complete, journal seq 5 [ 261.908094][ T7489] bcachefs (loop5): marking filesystem clean [ 262.101068][ T7489] bcachefs (loop5): shutdown complete [ 263.001633][ T9983] loop1: detected capacity change from 0 to 32768 [ 263.004727][ T9983] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.870 (9983) [ 263.017665][ T9983] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 263.021745][ T9983] BTRFS info (device loop1): using sha256 (sha256-arm64) checksum algorithm [ 263.801869][T10004] xt_CT: No such helper "netbios-ns" [ 263.909077][ T9983] BTRFS info (device loop1): rebuilding free space tree [ 263.941555][ T9983] BTRFS info (device loop1): disabling free space tree [ 263.941639][ T9983] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 263.941668][ T9983] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 263.961463][T10024] loop2: detected capacity change from 0 to 4096 [ 264.025359][T10026] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 264.076426][ T6523] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 264.687210][T10028] loop1: detected capacity change from 0 to 32768 [ 264.701802][T10028] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.880 (10028) [ 264.733220][T10028] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 264.733331][T10028] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 264.733368][T10028] BTRFS info (device loop1): disk space caching is enabled [ 264.733393][T10028] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 264.861770][T10028] BTRFS info (device loop1): rebuilding free space tree [ 265.070417][T10028] BTRFS info (device loop1): disabling free space tree [ 265.070504][T10028] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 265.070553][T10028] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 265.101433][ T6525] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 265.101502][ T6525] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12) [ 265.130296][ T6525] Remounting filesystem read-only [ 265.132012][ T6525] NILFS (loop2): error -5 truncating bmap (ino=12) [ 265.242497][ T6525] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 265.545910][T10028] BTRFS info (device loop1): balance: start -susage=34359738372,drange=7..526332,limit=0..6 [ 265.569199][T10028] ------------[ cut here ]------------ [ 265.569351][T10028] BTRFS: Transaction aborted (error -28) [ 265.574156][T10028] WARNING: CPU: 0 PID: 10028 at fs/btrfs/block-group.c:2781 btrfs_create_pending_block_groups+0xe34/0x10f4 [ 265.577534][T10028] Modules linked in: [ 265.578749][T10028] CPU: 0 UID: 0 PID: 10028 Comm: syz.1.880 Not tainted 6.16.0-rc4-syzkaller-g6625c855789e #0 PREEMPT [ 265.581922][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.584863][T10028] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 265.587051][T10028] pc : btrfs_create_pending_block_groups+0xe34/0x10f4 [ 265.589021][T10028] lr : btrfs_create_pending_block_groups+0xe34/0x10f4 [ 265.591009][T10028] sp : ffff80009d8774e0 [ 265.592234][T10028] x29: ffff80009d877710 x28: dfff800000000000 x27: ffff0000dde05508 [ 265.594489][T10028] x26: ffff0000dde05500 x25: ffff0000fb6c91c0 x24: ffff0000fb6c9058 [ 265.596732][T10028] x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000000000 [ 265.598983][T10028] x20: ffff0000fb6c9050 x19: 00000000ffffffe4 x18: 1fffe000337d8876 [ 265.601334][T10028] x17: ffff80008f64e000 x16: ffff80008aedd708 x15: 0000000000000001 [ 265.603707][T10028] x14: 1fffe000337db2f0 x13: 0000000000000000 x12: 0000000000000000 [ 265.606038][T10028] x11: 0000000000080000 x10: 0000000000000003 x9 : 18bd6535875e2900 [ 265.606939][T10062] netlink: 356 bytes leftover after parsing attributes in process `syz.2.885'. [ 265.610987][T10028] x8 : 18bd6535875e2900 x7 : ffff800080487aac x6 : 0000000000000000 [ 265.613378][T10028] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 [ 265.615672][T10028] x2 : 0000000000000007 x1 : ffff80008b5189a0 x0 : 0000000000000001 [ 265.618062][T10028] Call trace: [ 265.619037][T10028] btrfs_create_pending_block_groups+0xe34/0x10f4 (P) [ 265.621062][T10028] __btrfs_end_transaction+0x134/0x5f4 [ 265.622657][T10028] btrfs_end_transaction+0x24/0x34 [ 265.624163][T10028] btrfs_inc_block_group_ro+0x588/0x62c [ 265.625754][T10028] btrfs_relocate_block_group+0x310/0x97c [ 265.627445][T10028] btrfs_relocate_chunk+0x104/0x378 [ 265.628936][T10028] __btrfs_balance+0x1308/0x1a94 [ 265.630417][T10028] btrfs_balance+0xa44/0xe58 [ 265.631788][T10028] btrfs_ioctl_balance+0x350/0x550 [ 265.633290][T10028] btrfs_ioctl+0xb04/0xc3c [ 265.634617][T10028] __arm64_sys_ioctl+0x14c/0x1c4 [ 265.636166][T10028] invoke_syscall+0x98/0x2b8 [ 265.637526][T10028] el0_svc_common+0x130/0x23c [ 265.638872][T10028] do_el0_svc+0x48/0x58 [ 265.640170][T10028] el0_svc+0x58/0x17c [ 265.641388][T10028] el0t_64_sync_handler+0x78/0x108 [ 265.642875][T10028] el0t_64_sync+0x198/0x19c [ 265.644349][T10028] irq event stamp: 50650 [ 265.645622][T10028] hardirqs last enabled at (50649): [] finish_lock_switch+0xb0/0x1c0 [ 265.648507][T10028] hardirqs last disabled at (50650): [] el1_dbg+0x24/0x80 [ 265.651157][T10028] softirqs last enabled at (50110): [] local_bh_enable+0x10/0x34 [ 265.653914][T10028] softirqs last disabled at (50108): [] local_bh_disable+0x10/0x34 [ 265.656630][T10028] ---[ end trace 0000000000000000 ]--- [ 265.683166][T10028] BTRFS info (device loop1 state A): dumping space info: [ 265.683254][T10028] BTRFS info (device loop1 state A): space_info DATA+METADATA (sub-group id 0) has 1740800 free, is full [ 265.683489][T10028] BTRFS info (device loop1 state A): space_info total=3276800, used=49152, pinned=0, reserved=12288, may_use=1474560, readonly=0 zone_unusable=0 [ 265.683589][T10028] BTRFS info (device loop1 state A): space_info SYSTEM (sub-group id 0) has 8253440 free, is not full [ 265.683628][T10028] BTRFS info (device loop1 state A): space_info total=12451840, used=4096, pinned=0, reserved=4096, may_use=0, readonly=4190208 zone_unusable=0 [ 265.683670][T10028] BTRFS info (device loop1 state A): global_block_rsv: size 983040 reserved 983040 [ 265.683782][T10028] BTRFS info (device loop1 state A): trans_block_rsv: size 0 reserved 0 [ 265.683815][T10028] BTRFS info (device loop1 state A): chunk_block_rsv: size 0 reserved 0 [ 265.683846][T10028] BTRFS info (device loop1 state A): delayed_block_rsv: size 98304 reserved 98304 [ 265.683878][T10028] BTRFS info (device loop1 state A): delayed_refs_rsv: size 589824 reserved 393216 [ 265.683925][T10028] BTRFS: error (device loop1 state A) in btrfs_create_pending_block_groups:2781: errno=-28 No space left [ 265.683959][T10028] BTRFS info (device loop1 state EA): forced readonly [ 265.684244][T10028] BTRFS: error (device loop1 state EA) in btrfs_create_pending_block_groups:2793: errno=-28 No space left [ 265.791931][T10028] BTRFS info (device loop1 state EA): balance: ended with status: -30 [ 265.811296][ T6523] BTRFS info (device loop1 state EA): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2