last executing test programs: 10.633120538s ago: executing program 3 (id=1119): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0xffffffffffffffff, &(0x7f0000000040)=0x4) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000040)={0x0, 'syz1\x00'}) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 10.472187894s ago: executing program 1 (id=1121): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003980)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x84}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 9.60251407s ago: executing program 1 (id=1124): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc3afe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}, 0x1, 0x0, 0x0, 0x604c000}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)={'dummy0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 8.671121152s ago: executing program 3 (id=1127): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(r2, 0x9, &(0x7f00000001c0)={0x8000000000000000, 0xa}, &(0x7f0000000280)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x80, r6, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @initial, {0x4, 0x3}, @value=@ver_80211n={0x0, 0x7ffe}}, 0x1c000000000000, @default, 0x10a, @void, @val, @void, @void, @val={0x6, 0x2, 0x8}, @val={0x5, 0x3, {0x0, 0xbd}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x5, 0x9, 0xff}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x2, 0x8, 0x8}}, @val={0x76, 0x6, {0xd0, 0x3, 0x34, 0x2}}}}]]}, 0x80}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 8.668477952s ago: executing program 1 (id=1137): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x180) 7.588173789s ago: executing program 4 (id=1130): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 7.587389929s ago: executing program 1 (id=1131): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x140, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2b442, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r0}, 0x50) r1 = syz_io_uring_setup(0x42e9, &(0x7f0000000200)={0x0, 0xfe3a, 0x0, 0x3, 0x20000}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, 0x0, 0x0}, 0x20) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 7.5771677s ago: executing program 0 (id=1132): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r6) 7.456096652s ago: executing program 3 (id=1133): r0 = semget$private(0x0, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x39) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f96551", 0x0, 0x2f, 0x0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}]}}}}}}}, 0x0) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {0xff}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffe}}}, {{@ipv6={@local, @private2, [0x0, 0x0, 0xffffff00], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88, 0x0, 0x0, 0x42}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) semop(r0, 0x0, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, &(0x7f0000000040)={0x77359400}) 6.921347015s ago: executing program 1 (id=1134): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000200)=0xfffffff9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) r4 = socket(0x840000000002, 0x3, 0xff) sendto$inet(r4, 0x0, 0x0, 0x4000, &(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r4, 0x0, 0x4000) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 6.637217353s ago: executing program 0 (id=1135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.625112214s ago: executing program 2 (id=1136): mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0]) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) 6.455658351s ago: executing program 3 (id=1138): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x121c02, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x2, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@mcast2, 0x4e24, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffff8001, 0xfffffffffffffffe}, {0x0, 0x0, 0x200000000000, 0xb}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0x0, &(0x7f0000000080)}) 5.956711651s ago: executing program 0 (id=1139): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0xffffffffffffffff, &(0x7f0000000040)=0x4) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000040)={0x0, 'syz1\x00'}) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 5.85724539s ago: executing program 4 (id=1140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x3e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) syz_emit_vhci(&(0x7f0000002c00)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x6}}}}, 0xf) recvmmsg(r3, &(0x7f0000008880), 0x483, 0x44000102, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2000, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 5.406707415s ago: executing program 2 (id=1141): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) 5.405930205s ago: executing program 1 (id=1142): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x121c02, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x2, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@mcast2, 0x4e24, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffff8001, 0xfffffffffffffffe}, {0x0, 0x0, 0x200000000000, 0xb}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0x0, &(0x7f0000000080)}) 4.858226779s ago: executing program 2 (id=1143): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x180) 4.857433929s ago: executing program 4 (id=1144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) dup(0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') rseq(0x0, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000002740)=0x0) io_getevents(r3, 0x4, 0x13, &(0x7f0000000000), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r3, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, r4, 0x0, 0x0, 0x6}]) io_destroy(r3) 3.860473788s ago: executing program 2 (id=1145): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x140, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2b442, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r0}, 0x50) r1 = syz_io_uring_setup(0x42e9, &(0x7f0000000200)={0x0, 0xfe3a, 0x0, 0x3, 0x20000}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, 0x0, 0x0}, 0x20) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 3.829093111s ago: executing program 3 (id=1146): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 3.324779461s ago: executing program 2 (id=1147): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r6) 3.189437914s ago: executing program 4 (id=1148): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2.704770102s ago: executing program 3 (id=1149): syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x6000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc2c45513, &(0x7f00000000c0)={0xb, 0x3, 0x1, 0x2, '\x00', 0x6}) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x8c, 0x0) dup(0xffffffffffffffff) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, 0x0, 0x0) 2.695537563s ago: executing program 0 (id=1150): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.874670394s ago: executing program 2 (id=1151): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f00000002c0)={[{@nobarrier}, {@noflushoncommit}, {@nossd}, {@commit={'commit', 0x3d, 0x3f}}, {@nodatasum}, {@nodiscard}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@noacl}]}, 0x9, 0x5104, &(0x7f0000005480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c400943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf45b665d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35", 0x278}, {0x0}, {0x0}, {&(0x7f00000010c0)="547dc1cc8a8f2d3c1090633730f90ce80c98ab81e96e74e5549758ddcdda7779e05956aaeb2faec77b1345220ebb01281e29631ac1074bd184d6af1edf9319f2228346838301fbb3da884fcf06194382992e635a1ab4fa313d592b467fe61027c6597bea5c3f53c4880c7604b031f151ddbd35e1f7bc81d2a8111e367cb7c1794507414adf32e780f7a769299c70d32b833c4ccebbf967590d638c59606b09cb8d3c6c9588191bad2a638070a357f8e864fe450910b67a9d7111bdcb733cf5e8d4d3c6fcd09f7a86dfe22a35a69c2fb75645e21770b61ff50438ae0836699431ccde0693d34c5745bd401257ce9cbf089d380a6ad57f58b758ff49d4b28ceae53aeb0f082bdecb48583ae7ba5b7ff69e2b31dd4ce3251d20907639dd90204257c43c77634e605b303478a0fdf895679c3fc7ad4b45f7b0946158dc3a18d7c7e00455f616b96f1b8b", 0x148}], 0x4}}], 0x2, 0x4048884) 1.069082484s ago: executing program 4 (id=1152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.058191825s ago: executing program 0 (id=1153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0xa0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) 97.95873ms ago: executing program 4 (id=1154): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) 0s ago: executing program 0 (id=1155): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x180) kernel console output (not intermixed with test programs): Bluetooth: hci3: command 0x041b tx timeout [ 35.203220][ T4339] Bluetooth: hci4: command 0x041b tx timeout [ 35.209511][ T4339] Bluetooth: hci1: command 0x041b tx timeout [ 35.374999][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.376498][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.391277][ T4443] loop0: detected capacity change from 0 to 136 [ 35.403166][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.438727][ T4436] loop4: detected capacity change from 0 to 32768 [ 35.446558][ T4436] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.5 (4436) [ 35.470538][ T4436] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 35.473630][ T4436] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 35.478737][ T4436] BTRFS info (device loop4): force clearing of disk cache [ 35.483169][ T4436] BTRFS info (device loop4): enabling auto defrag [ 35.487388][ T4436] BTRFS info (device loop4): max_inline at 0 [ 35.491776][ T4436] BTRFS info (device loop4): turning on sync discard [ 35.496481][ T4436] BTRFS info (device loop4): using free space tree [ 35.553940][ T4451] loop1: detected capacity change from 0 to 4096 [ 35.558200][ T4451] ======================================================= [ 35.558200][ T4451] WARNING: The mand mount option has been deprecated and [ 35.558200][ T4451] and is ignored by this kernel. Remove the mand [ 35.558200][ T4451] option from the mount to silence this warning. [ 35.558200][ T4451] ======================================================= [ 35.589531][ T4451] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 35.614919][ T4451] ntfs3: loop1: Failed to load $Extend. [ 35.706435][ T4461] Driver unsupported XDP return value 0 on prog (id 1) dev N/A, expect packet loss! [ 36.250648][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 36.252227][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 36.971234][ T4469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 37.343467][ T4324] Bluetooth: hci1: command 0x040f tx timeout [ 37.344487][ T4324] Bluetooth: hci4: command 0x040f tx timeout [ 37.345397][ T4324] Bluetooth: hci3: command 0x040f tx timeout [ 37.347328][ T4324] Bluetooth: hci2: command 0x040f tx timeout [ 37.348289][ T4324] Bluetooth: hci0: command 0x040f tx timeout [ 37.384934][ T4436] BTRFS info (device loop4): enabling ssd optimizations [ 37.389817][ T4436] BTRFS info (device loop4): rebuilding free space tree [ 37.453651][ T4488] loop3: detected capacity change from 0 to 128 [ 37.920274][ T4488] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.293250][ T4500] lo speed is unknown, defaulting to 1000 [ 38.294360][ T4500] lo speed is unknown, defaulting to 1000 [ 38.295754][ T4500] lo speed is unknown, defaulting to 1000 [ 38.297663][ T4500] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 38.300536][ T4500] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 38.389401][ T4500] lo speed is unknown, defaulting to 1000 [ 38.392650][ T4500] lo speed is unknown, defaulting to 1000 [ 38.395131][ T4500] lo speed is unknown, defaulting to 1000 [ 38.397721][ T4500] lo speed is unknown, defaulting to 1000 [ 38.400179][ T4500] lo speed is unknown, defaulting to 1000 [ 38.613238][ T4328] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 38.996508][ T4508] process 'syz.3.11' launched './file1' with NULL argv: empty string added [ 39.092877][ T4493] loop2: detected capacity change from 0 to 32768 [ 39.150611][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 39.175528][ T4493] XFS (loop2): Mounting V5 Filesystem [ 39.239441][ T4493] XFS (loop2): Ending clean mount [ 39.243343][ T4493] XFS (loop2): Quotacheck needed: Please wait. [ 39.260339][ T4493] XFS (loop2): Quotacheck: Done. [ 39.361620][ T4339] Bluetooth: hci0: command 0x0419 tx timeout [ 39.363226][ T4324] Bluetooth: hci2: command 0x0419 tx timeout [ 39.363247][ T4330] Bluetooth: hci3: command 0x0419 tx timeout [ 39.364278][ T4338] Bluetooth: hci4: command 0x0419 tx timeout [ 39.365202][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 39.687410][ T4534] loop3: detected capacity change from 0 to 32768 [ 39.748206][ T4534] XFS (loop3): Mounting V5 Filesystem [ 39.787100][ T4329] XFS (loop2): Unmounting Filesystem [ 39.789400][ T4534] XFS (loop3): Ending clean mount [ 40.245041][ T4556] loop1: detected capacity change from 0 to 64 [ 40.567486][ T4559] ptrace attach of "./syz-executor exec"[4321] was attempted by "./syz-executor exec"[4559] [ 41.298400][ T4321] XFS (loop3): Unmounting Filesystem [ 41.389158][ T4572] netlink: 'syz.4.24': attribute type 1 has an invalid length. [ 41.400443][ T4572] bond1 (unregistering): Released all slaves [ 41.475609][ T4570] loop0: detected capacity change from 0 to 65536 [ 41.477720][ T4570] xfs: Unknown parameter 'uid<00000000000000000000' [ 41.498625][ T4312] I/O error, dev loop0, sector 65408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.604346][ T4572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24'. [ 43.344998][ T4602] loop2: detected capacity change from 0 to 1024 [ 43.350326][ T4602] EXT4-fs: Ignoring removed bh option [ 45.306241][ T4602] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.472934][ T4600] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.799412][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 46.735134][ T4636] loop1: detected capacity change from 0 to 16 [ 46.798393][ T4636] erofs: (device loop1): mounted with root inode @ nid 36. [ 46.831077][ T4636] syz.1.33: attempt to access beyond end of device [ 46.831077][ T4636] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 48.619708][ T4702] loop2: detected capacity change from 0 to 128 [ 49.051249][ T4702] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 49.053281][ T4702] hpfs: filesystem error: improperly stopped [ 49.054294][ T4702] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 49.055563][ T4702] hpfs: You really don't want any checks? You are crazy... [ 49.057329][ T4702] hpfs: hpfs_map_sector(): read error [ 49.058208][ T4702] hpfs: code page support is disabled [ 49.063763][ T4702] hpfs: hpfs_map_4sectors(): unaligned read [ 49.064766][ T4702] hpfs: hpfs_map_4sectors(): unaligned read [ 49.066114][ T4702] hpfs: filesystem error: unable to find root dir [ 50.298832][ T4747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 50.300305][ T4747] netlink: 62 bytes leftover after parsing attributes in process `syz.1.43'. [ 50.564271][ T4753] lo speed is unknown, defaulting to 1000 [ 50.793546][ T4747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.794944][ T4747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.811610][ T4747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.812969][ T4747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.008390][ T4758] loop2: detected capacity change from 0 to 128 [ 52.151727][ T4767] loop3: detected capacity change from 0 to 32768 [ 52.262981][ T4758] sched: RT throttling activated [ 52.433643][ T4756] loop1: detected capacity change from 0 to 32768 [ 52.453507][ T4756] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.44 (4756) [ 52.606991][ T4767] (syz.3.57,4767,1):ocfs2_load_local_alloc:338 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 52.606991][ T4767] found = 2, set = 0, taken = 0, off = 0 [ 52.609909][ T4767] (syz.3.57,4767,1):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 52.612287][ T4767] (syz.3.57,4767,1):ocfs2_check_volume:2461 ERROR: status = -22 [ 52.613515][ T4767] (syz.3.57,4767,1):ocfs2_check_volume:2489 ERROR: status = -22 [ 52.614861][ T4767] (syz.3.57,4767,1):ocfs2_mount_volume:1821 ERROR: status = -22 [ 52.621505][ T4767] (syz.3.57,4767,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 52.633069][ T4756] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 52.634737][ T4756] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 52.652583][ T4756] BTRFS info (device loop1): turning off barriers [ 52.653710][ T4756] BTRFS info (device loop1): setting nodatasum [ 52.654753][ T4756] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 52.668134][ T4756] BTRFS info (device loop1): use zstd compression, level 3 [ 52.669275][ T4756] BTRFS info (device loop1): using free space tree [ 53.720862][ T4320] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 53.754400][ T4812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.785262][ T4812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.967479][ T4809] loop0: detected capacity change from 0 to 40427 [ 55.222197][ T4809] F2FS-fs (loop0): invalid crc value [ 55.232477][ T4821] device syzkaller0 entered promiscuous mode [ 55.249537][ T4809] F2FS-fs (loop0): Found nat_bits in checkpoint [ 55.264935][ T4809] F2FS-fs (loop0): Start checkpoint disabled! [ 55.278638][ T4809] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 55.894101][ T4817] loop1: detected capacity change from 0 to 32768 [ 55.899740][ T4817] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.63 (4817) [ 55.947545][ T4817] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 55.949226][ T4817] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 55.951046][ T4817] BTRFS info (device loop1): turning off barriers [ 55.952120][ T4817] BTRFS info (device loop1): setting nodatasum [ 55.953025][ T4817] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 55.954631][ T4817] BTRFS info (device loop1): use zstd compression, level 3 [ 55.963196][ T4817] BTRFS info (device loop1): using free space tree [ 56.382855][ T4320] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 56.431616][ T4673] kworker/u4:14: attempt to access beyond end of device [ 56.431616][ T4673] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 57.011521][ T4858] loop2: detected capacity change from 0 to 128 [ 59.179420][ T4312] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (4312) [ 59.946975][ T4888] loop4: detected capacity change from 0 to 32768 [ 60.887916][ T4888] (syz.4.73,4888,0):ocfs2_load_local_alloc:338 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 60.887916][ T4888] found = 2, set = 0, taken = 0, off = 0 [ 60.891642][ T4888] (syz.4.73,4888,0):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 60.893002][ T4888] (syz.4.73,4888,0):ocfs2_check_volume:2461 ERROR: status = -22 [ 60.894194][ T4888] (syz.4.73,4888,0):ocfs2_check_volume:2489 ERROR: status = -22 [ 60.895586][ T4888] (syz.4.73,4888,0):ocfs2_mount_volume:1821 ERROR: status = -22 [ 60.936167][ T4888] (syz.4.73,4888,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 60.956412][ T4900] kthread_run failed with err -4 [ 60.962714][ T4903] device syzkaller0 entered promiscuous mode [ 61.493547][ T4903] netlink: 44 bytes leftover after parsing attributes in process `syz.3.68'. [ 62.010006][ T4910] loop1: detected capacity change from 0 to 32768 [ 62.340985][ T4910] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 62.343856][ T4910] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 62.351282][ T4910] BTRFS info (device loop1): turning off barriers [ 62.352397][ T4910] BTRFS info (device loop1): setting nodatasum [ 62.353443][ T4910] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 62.354930][ T4910] BTRFS info (device loop1): use zstd compression, level 3 [ 62.367063][ T4910] BTRFS info (device loop1): using free space tree [ 63.058686][ T4320] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 63.112864][ T4956] loop2: detected capacity change from 0 to 128 [ 63.143585][ T4957] loop0: detected capacity change from 0 to 2048 [ 64.142450][ T4957] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 64.717475][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.718873][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.393283][ T4986] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.77: bg 0: block 345: padding at end of block bitmap is not set [ 65.403597][ T4986] EXT4-fs (loop0): Remounting filesystem read-only [ 65.749842][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 66.254836][ T5000] loop2: detected capacity change from 0 to 32768 [ 66.373148][ T5000] (syz.2.82,5000,1):ocfs2_load_local_alloc:338 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 66.373148][ T5000] found = 2, set = 0, taken = 0, off = 0 [ 66.376392][ T5000] (syz.2.82,5000,1):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 66.377590][ T5000] (syz.2.82,5000,1):ocfs2_check_volume:2461 ERROR: status = -22 [ 66.378848][ T5000] (syz.2.82,5000,1):ocfs2_check_volume:2489 ERROR: status = -22 [ 66.380197][ T5000] (syz.2.82,5000,0):ocfs2_mount_volume:1821 ERROR: status = -22 [ 66.612251][ T5000] (syz.2.82,5000,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 66.861897][ T4998] loop4: detected capacity change from 0 to 40427 [ 66.895080][ T4998] F2FS-fs (loop4): invalid crc value [ 67.335621][ T4998] F2FS-fs (loop4): Found nat_bits in checkpoint [ 67.343715][ T4998] F2FS-fs (loop4): Start checkpoint disabled! [ 67.345557][ T4998] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 68.414102][ T11] kworker/u4:1: attempt to access beyond end of device [ 68.414102][ T11] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 68.505127][ T5022] loop0: detected capacity change from 0 to 32768 [ 68.512050][ T5022] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.88 (5022) [ 68.525629][ T5022] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 68.529220][ T5022] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 68.571351][ T5022] BTRFS info (device loop0): turning off barriers [ 68.576355][ T5022] BTRFS info (device loop0): setting nodatasum [ 68.907249][ T5022] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 68.909499][ T5022] BTRFS info (device loop0): use zstd compression, level 3 [ 68.919268][ T5022] BTRFS info (device loop0): using free space tree [ 68.930662][ T5041] loop4: detected capacity change from 0 to 128 [ 68.947390][ T5038] loop1: detected capacity change from 0 to 1024 [ 70.124789][ T22] cfg80211: failed to load regulatory.db [ 71.520209][ T4639] hfsplus: b-tree write err: -5, ino 4 [ 71.532501][ T5022] BTRFS error (device loop0): open_ctree failed: -12 [ 71.747551][ T5085] loop1: detected capacity change from 0 to 164 [ 71.776211][ T5085] Unable to read rock-ridge attributes [ 72.426701][ T5080] loop2: detected capacity change from 0 to 32768 [ 72.585228][ T5101] overlayfs: overlapping lowerdir path [ 72.910588][ T4312] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (4312) [ 73.783459][ T5107] loop1: detected capacity change from 0 to 32768 [ 73.952227][ T5109] loop2: detected capacity change from 0 to 40427 [ 73.971768][ T5109] F2FS-fs (loop2): invalid crc value [ 73.982827][ T5109] F2FS-fs (loop2): Found nat_bits in checkpoint [ 74.256731][ T5120] kthread_run failed with err -4 [ 75.101814][ T5109] F2FS-fs (loop2): Start checkpoint disabled! [ 75.839448][ T5109] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 75.878879][ T5139] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 76.411912][ T5145] loop0: detected capacity change from 0 to 32768 [ 76.439434][ T5145] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.112 (5145) [ 76.454414][ T4515] kworker/u4:9: attempt to access beyond end of device [ 76.454414][ T4515] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 76.461904][ T5145] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.463563][ T5145] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 76.465015][ T5145] BTRFS info (device loop0): turning off barriers [ 76.466174][ T5145] BTRFS info (device loop0): setting nodatasum [ 76.467250][ T5145] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 76.468709][ T5145] BTRFS info (device loop0): use zstd compression, level 3 [ 76.470040][ T5145] BTRFS info (device loop0): using free space tree [ 78.578651][ T5203] loop3: detected capacity change from 0 to 128 [ 78.684500][ T4325] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 78.898966][ T5182] loop1: detected capacity change from 0 to 32768 [ 81.712356][ T5230] loop3: detected capacity change from 0 to 40427 [ 82.130171][ T5230] F2FS-fs (loop3): invalid crc value [ 82.142446][ T5230] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.150357][ T5230] F2FS-fs (loop3): Start checkpoint disabled! [ 82.183190][ T5230] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 82.341268][ T5262] overlayfs: overlapping lowerdir path [ 82.725332][ T4722] kworker/u4:23: attempt to access beyond end of device [ 82.725332][ T4722] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 82.748671][ T5268] tipc: Enabling of bearer rejected, failed to enable media [ 82.779478][ T5268] device syzkaller0 entered promiscuous mode [ 83.329035][ T5281] tipc: Started in network mode [ 83.329997][ T5281] tipc: Node identity a6d5cb6b88bb, cluster identity 4711 [ 83.331253][ T5281] tipc: Enabled bearer , priority 0 [ 83.333415][ T5277] device syzkaller0 entered promiscuous mode [ 83.689614][ T5277] tipc: Resetting bearer [ 83.774006][ T5276] tipc: Resetting bearer [ 83.829238][ T5276] tipc: Disabling bearer [ 84.269749][ T5293] ufs: You didn't specify the type of your ufs filesystem [ 84.269749][ T5293] [ 84.269749][ T5293] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 84.269749][ T5293] [ 84.269749][ T5293] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 84.275454][ T5293] ufs: ufstype=old is supported read-only [ 84.277424][ T5293] I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 85.480440][ T5295] loop3: detected capacity change from 0 to 32768 [ 85.638589][ T4312] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 85.922141][ T5316] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.927347][ T5316] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.958192][ T5311] netlink: 'syz.0.154': attribute type 16 has an invalid length. [ 85.960672][ T5311] netlink: 'syz.0.154': attribute type 17 has an invalid length. [ 86.161182][ T5321] loop1: detected capacity change from 0 to 40427 [ 86.164959][ T5321] F2FS-fs (loop1): invalid crc value [ 86.168905][ T5321] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.480729][ T5321] F2FS-fs (loop1): Start checkpoint disabled! [ 86.565862][ T5321] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 87.178813][ T4707] kworker/u4:22: attempt to access beyond end of device [ 87.178813][ T4707] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 88.796362][ T5365] ufs: You didn't specify the type of your ufs filesystem [ 88.796362][ T5365] [ 88.796362][ T5365] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 88.796362][ T5365] [ 88.796362][ T5365] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 88.800997][ T5365] ufs: ufstype=old is supported read-only [ 88.802196][ T5365] I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 90.540739][ T5392] loop0: detected capacity change from 0 to 128 [ 90.560812][ T5392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.059507][ T5385] loop1: detected capacity change from 0 to 32768 [ 91.144836][ T5385] JBD2: Ignoring recovery information on journal [ 91.173892][ T5385] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 91.500918][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 92.152323][ T4320] ocfs2: Unmounting device (7,1) on (node local) [ 92.322192][ T5432] overlayfs: unrecognized mount option "/" or missing value [ 92.609849][ T5428] tipc: Enabled bearer , priority 0 [ 92.617365][ T5424] device syzkaller0 entered promiscuous mode [ 92.718978][ T5428] tipc: Resetting bearer [ 92.738946][ T5423] tipc: Resetting bearer [ 94.026296][ T3899] tipc: Node number set to 779012971 [ 94.152126][ T5423] tipc: Disabling bearer [ 94.190318][ T5449] loop1: detected capacity change from 0 to 4096 [ 94.201420][ T5449] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 94.203191][ T5449] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 94.216666][ T5449] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 94.221980][ T5449] ntfs: volume version 3.1. [ 94.786412][ T4320] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 95.601173][ T5473] loop2: detected capacity change from 0 to 4096 [ 95.621132][ T5473] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 95.624522][ T5473] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 95.630797][ T5473] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 95.635854][ T5473] ntfs: volume version 3.1. [ 96.319287][ T5486] syz.0.185 sent an empty control message without MSG_MORE. [ 96.518430][ T5490] ufs: You didn't specify the type of your ufs filesystem [ 96.518430][ T5490] [ 96.518430][ T5490] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 96.518430][ T5490] [ 96.518430][ T5490] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 96.523729][ T5490] ufs: ufstype=old is supported read-only [ 96.525382][ T5490] I/O error, dev loop9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 97.194240][ T5491] loop3: detected capacity change from 0 to 4096 [ 97.206742][ T4329] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 97.310503][ T5496] netlink: 'syz.4.188': attribute type 10 has an invalid length. [ 98.319986][ T5496] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 98.676887][ T5515] device syzkaller0 entered promiscuous mode [ 101.572725][ T5559] device syzkaller0 entered promiscuous mode [ 101.658412][ T5561] ufs: You didn't specify the type of your ufs filesystem [ 101.658412][ T5561] [ 101.658412][ T5561] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 101.658412][ T5561] [ 101.658412][ T5561] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 101.663654][ T5561] ufs: ufstype=old is supported read-only [ 101.666055][ T5561] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 102.006878][ T5546] loop3: detected capacity change from 0 to 32768 [ 102.072500][ T5546] JBD2: Ignoring recovery information on journal [ 102.122802][ T5546] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 102.206371][ T5572] loop4: detected capacity change from 0 to 16 [ 103.226118][ T5572] erofs: (device loop4): mounted with root inode @ nid 36. [ 103.241469][ T5569] syz.4.208: attempt to access beyond end of device [ 103.241469][ T5569] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 104.423640][ T4321] ocfs2: Unmounting device (7,3) on (node local) [ 105.531755][ T5610] loop0: detected capacity change from 0 to 1024 [ 105.720821][ T5610] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 105.733737][ T5603] loop2: detected capacity change from 0 to 40427 [ 106.672674][ T5603] F2FS-fs (loop2): invalid crc value [ 106.703493][ T5603] F2FS-fs (loop2): Found nat_bits in checkpoint [ 106.788773][ T5603] F2FS-fs (loop2): Start checkpoint disabled! [ 106.803585][ T5622] device syzkaller0 entered promiscuous mode [ 106.805643][ T5603] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 107.288394][ T4722] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 107.300141][ T4722] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 107.303518][ T4722] EXT4-fs (loop0): This should not happen!! Data will be lost [ 107.303518][ T4722] [ 107.305494][ T4515] kworker/u4:9: attempt to access beyond end of device [ 107.305494][ T4515] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 107.308599][ T4722] EXT4-fs (loop0): Total free blocks count 0 [ 107.309728][ T4722] EXT4-fs (loop0): Free/Dirty block details [ 107.310607][ T4722] EXT4-fs (loop0): free_blocks=4293918720 [ 107.311763][ T4722] EXT4-fs (loop0): dirty_blocks=16 [ 107.312740][ T4722] EXT4-fs (loop0): Block reservation details [ 107.313792][ T4722] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 107.326483][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 107.888003][ T5641] loop4: detected capacity change from 0 to 128 [ 109.548242][ T5656] loop4: detected capacity change from 0 to 32768 [ 109.562295][ T5656] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.240 (5656) [ 109.574395][ T5656] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.578314][ T5656] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 109.579838][ T5656] BTRFS info (device loop4): turning off barriers [ 109.584153][ T5656] BTRFS info (device loop4): setting nodatasum [ 109.586552][ T5656] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 109.590330][ T5656] BTRFS info (device loop4): use zstd compression, level 3 [ 109.591565][ T5656] BTRFS info (device loop4): using free space tree [ 110.009888][ T4328] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.585277][ T5694] loop2: detected capacity change from 0 to 32768 [ 111.951623][ T5696] ufs: You didn't specify the type of your ufs filesystem [ 111.951623][ T5696] [ 111.951623][ T5696] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 111.951623][ T5696] [ 111.951623][ T5696] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 111.956381][ T5696] ufs: ufstype=old is supported read-only [ 111.957395][ T5696] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 111.974760][ T5694] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 111.976173][ T5694] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 111.984299][ T5694] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 111.992432][ T4813] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 111.993720][ T4813] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 112.052228][ T4813] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 58ms [ 112.054044][ T4813] gfs2: fsid=syz:syz.0: jid=0: Done [ 112.055766][ T5694] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 112.123150][ T5694] gfs2: fsid=syz:syz.0: found 1 quota changes [ 112.147653][ T5703] gfs2: fsid=syz:syz.0: gfs2_quotad: sync error -57 [ 112.331778][ T4329] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 112.341641][ T4329] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 112.364806][ T4329] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 112.367232][ T4329] gfs2: fsid=syz:syz.0: File system withdrawn [ 112.368313][ T4329] CPU: 1 PID: 4329 Comm: syz-executor Not tainted syzkaller #0 [ 112.369479][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 112.370905][ T4329] Call trace: [ 112.371302][ T4329] dump_backtrace+0x1c8/0x1f4 [ 112.372287][ T4329] show_stack+0x2c/0x3c [ 112.372915][ T4329] __dump_stack+0x30/0x40 [ 112.373562][ T4329] dump_stack_lvl+0xf8/0x160 [ 112.374274][ T4329] dump_stack+0x1c/0x5c [ 112.374912][ T4329] gfs2_withdraw+0xf9c/0x13a8 [ 112.375578][ T4329] gfs2_log_flush+0x16e8/0x1aa0 [ 112.376312][ T4329] do_sync+0x88c/0xa94 [ 112.376916][ T4329] gfs2_quota_sync+0x2e0/0x528 [ 112.377643][ T4329] gfs2_sync_fs+0x4c/0xc4 [ 112.378280][ T4329] sync_filesystem+0xe8/0x218 [ 112.378877][ T4329] generic_shutdown_super+0x70/0x324 [ 112.379624][ T4329] kill_block_super+0x70/0xdc [ 112.380355][ T4329] gfs2_kill_sb+0xc0/0xd4 [ 112.381079][ T4329] deactivate_locked_super+0xac/0x124 [ 112.381849][ T4329] deactivate_super+0xe8/0x108 [ 112.382545][ T4329] cleanup_mnt+0x37c/0x404 [ 112.383181][ T4329] __cleanup_mnt+0x20/0x30 [ 112.383850][ T4329] task_work_run+0x1ec/0x270 [ 112.384502][ T4329] do_notify_resume+0x1f70/0x2b0c [ 112.385286][ T4329] el0_svc+0x98/0x138 [ 112.385936][ T4329] el0t_64_sync_handler+0x84/0xf0 [ 112.386823][ T4329] el0t_64_sync+0x18c/0x190 [ 112.460827][ T4329] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 112.471802][ T4329] CPU: 0 PID: 4329 Comm: syz-executor Not tainted syzkaller #0 [ 112.472932][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 112.474493][ T4329] Call trace: [ 112.474971][ T4329] dump_backtrace+0x1c8/0x1f4 [ 112.475702][ T4329] show_stack+0x2c/0x3c [ 112.476312][ T4329] __dump_stack+0x30/0x40 [ 112.476970][ T4329] dump_stack_lvl+0xf8/0x160 [ 112.477672][ T4329] dump_stack+0x1c/0x5c [ 112.478403][ T4329] gfs2_assert_warn_i+0x16c/0x26c [ 112.479201][ T4329] gfs2_quota_cleanup+0x454/0x65c [ 112.480062][ T4329] gfs2_put_super+0x1f0/0x764 [ 112.480825][ T4329] generic_shutdown_super+0x130/0x324 [ 112.481780][ T4329] kill_block_super+0x70/0xdc [ 112.482482][ T4329] gfs2_kill_sb+0xc0/0xd4 [ 112.483165][ T4329] deactivate_locked_super+0xac/0x124 [ 112.483967][ T4329] deactivate_super+0xe8/0x108 [ 112.484785][ T4329] cleanup_mnt+0x37c/0x404 [ 112.485514][ T4329] __cleanup_mnt+0x20/0x30 [ 112.486273][ T4329] task_work_run+0x1ec/0x270 [ 112.487040][ T4329] do_notify_resume+0x1f70/0x2b0c [ 112.487944][ T4329] el0_svc+0x98/0x138 [ 112.488643][ T4329] el0t_64_sync_handler+0x84/0xf0 [ 112.489538][ T4329] el0t_64_sync+0x18c/0x190 [ 112.501066][ T5701] loop0: detected capacity change from 0 to 40427 [ 112.508393][ T5701] F2FS-fs (loop0): invalid crc value [ 112.850658][ T5701] F2FS-fs (loop0): Found nat_bits in checkpoint [ 112.882485][ T5701] F2FS-fs (loop0): Start checkpoint disabled! [ 112.895198][ T5701] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 112.958744][ T5717] device syzkaller0 entered promiscuous mode [ 113.355477][ T5727] loop1: detected capacity change from 0 to 128 [ 113.362233][ T4470] kworker/u4:7: attempt to access beyond end of device [ 113.362233][ T4470] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 113.443750][ T5729] loop2: detected capacity change from 0 to 16 [ 113.477132][ T5729] erofs: (device loop2): mounted with root inode @ nid 36. [ 113.549349][ T5729] syz.2.239: attempt to access beyond end of device [ 113.549349][ T5729] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 114.495984][ T5731] loop3: detected capacity change from 0 to 32768 [ 114.529436][ T5731] XFS (loop3): Mounting V5 Filesystem [ 114.913372][ T5731] XFS (loop3): Ending clean mount [ 114.916682][ T5731] XFS (loop3): Quotacheck needed: Please wait. [ 114.937715][ T5731] XFS (loop3): Quotacheck: Done. [ 115.035364][ T5751] loop1: detected capacity change from 0 to 32768 [ 115.047205][ T5751] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.246 (5751) [ 115.052166][ T5751] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.054084][ T5751] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 115.055651][ T5751] BTRFS info (device loop1): turning off barriers [ 115.057283][ T5751] BTRFS info (device loop1): setting nodatasum [ 115.058651][ T5751] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 115.060295][ T5751] BTRFS info (device loop1): use zstd compression, level 3 [ 115.061535][ T5751] BTRFS info (device loop1): using free space tree [ 115.421900][ T4321] XFS (loop3): Unmounting Filesystem [ 116.499566][ T5785] loop0: detected capacity change from 0 to 32768 [ 118.018308][ T5785] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 118.019787][ T5785] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 118.030722][ T5785] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 118.034163][ T4517] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 118.035376][ T4517] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 118.363373][ T4517] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 327ms [ 118.365613][ T4517] gfs2: fsid=syz:syz.0: jid=0: Done [ 118.371834][ T5785] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 118.373709][ T4320] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.654291][ T5785] gfs2: fsid=syz:syz.0: found 1 quota changes [ 118.832771][ T4325] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 118.835023][ T4325] CPU: 0 PID: 4325 Comm: syz-executor Not tainted syzkaller #0 [ 118.836135][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 118.837677][ T4325] Call trace: [ 118.838149][ T4325] dump_backtrace+0x1c8/0x1f4 [ 118.838905][ T4325] show_stack+0x2c/0x3c [ 118.839534][ T4325] __dump_stack+0x30/0x40 [ 118.840204][ T4325] dump_stack_lvl+0xf8/0x160 [ 118.841033][ T4325] dump_stack+0x1c/0x5c [ 118.841707][ T4325] gfs2_assert_warn_i+0x16c/0x26c [ 118.842749][ T4325] gfs2_quota_cleanup+0x454/0x65c [ 118.843561][ T4325] gfs2_make_fs_ro+0x358/0x430 [ 118.844425][ T4325] gfs2_put_super+0x1e0/0x764 [ 118.845163][ T4325] generic_shutdown_super+0x130/0x324 [ 118.846043][ T4325] kill_block_super+0x70/0xdc [ 118.846817][ T4325] gfs2_kill_sb+0xc0/0xd4 [ 118.847536][ T4325] deactivate_locked_super+0xac/0x124 [ 118.848479][ T4325] deactivate_super+0xe8/0x108 [ 118.849318][ T4325] cleanup_mnt+0x37c/0x404 [ 118.850091][ T4325] __cleanup_mnt+0x20/0x30 [ 118.850854][ T4325] task_work_run+0x1ec/0x270 [ 118.851616][ T4325] do_notify_resume+0x1f70/0x2b0c [ 118.852492][ T4325] el0_svc+0x98/0x138 [ 118.853118][ T4325] el0t_64_sync_handler+0x84/0xf0 [ 118.853905][ T4325] el0t_64_sync+0x18c/0x190 [ 118.966065][ T5806] loop1: detected capacity change from 0 to 128 [ 119.064096][ T5806] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 119.066291][ T5806] hpfs: filesystem error: improperly stopped [ 119.067444][ T5806] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 119.068674][ T5806] hpfs: You really don't want any checks? You are crazy... [ 119.071046][ T5806] hpfs: hpfs_map_sector(): read error [ 119.071920][ T5806] hpfs: code page support is disabled [ 119.079853][ T5806] hpfs: hpfs_map_4sectors(): unaligned read [ 119.085990][ T5806] hpfs: hpfs_map_4sectors(): unaligned read [ 119.087009][ T5806] hpfs: filesystem error: unable to find root dir [ 119.249496][ T5810] loop2: detected capacity change from 0 to 128 [ 119.251487][ T5809] loop4: detected capacity change from 0 to 128 [ 119.319493][ T5816] device syzkaller0 entered promiscuous mode [ 119.331006][ T5809] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 119.445268][ T5820] device syzkaller0 entered promiscuous mode [ 120.315868][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 121.779231][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.782084][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.783358][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.768191][ T5851] loop1: detected capacity change from 0 to 32768 [ 122.771098][ T5851] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.265 (5851) [ 122.780291][ T5851] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.782155][ T5851] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 122.784563][ T5851] BTRFS info (device loop1): turning off barriers [ 122.785748][ T5848] loop2: detected capacity change from 0 to 32768 [ 122.787936][ T5851] BTRFS info (device loop1): setting nodatasum [ 122.788691][ T5848] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.266 (5848) [ 122.792969][ T5851] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 122.797091][ T5851] BTRFS info (device loop1): use zstd compression, level 3 [ 122.798391][ T5851] BTRFS info (device loop1): using free space tree [ 122.884458][ T4314] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 123.284850][ T4320] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.305348][ T5891] device syzkaller0 entered promiscuous mode [ 123.474116][ T4312] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (4312) [ 123.522464][ T5902] device syzkaller0 entered promiscuous mode [ 123.527760][ T5894] loop3: detected capacity change from 0 to 40427 [ 123.534777][ T5894] F2FS-fs (loop3): invalid crc value [ 123.548122][ T5894] F2FS-fs (loop3): Found nat_bits in checkpoint [ 123.559211][ T5894] F2FS-fs (loop3): Start checkpoint disabled! [ 123.585720][ T5894] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 124.214615][ T5907] loop4: detected capacity change from 0 to 32768 [ 124.281795][ T5927] loop2: detected capacity change from 0 to 1024 [ 124.297446][ T5907] XFS (loop4): Mounting V5 Filesystem [ 124.330648][ T5927] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 124.467932][ T5907] XFS (loop4): Ending clean mount [ 124.478734][ T5907] XFS (loop4): Quotacheck needed: Please wait. [ 124.493933][ T5939] loop0: detected capacity change from 0 to 128 [ 124.514368][ T5939] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 124.528503][ T5907] XFS (loop4): Quotacheck: Done. [ 125.569637][ T4707] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 1: comm kworker/u4:22: lblock 1 mapped to illegal pblock 1 (length 15) [ 125.921447][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 125.928379][ T4707] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 125.930333][ T4707] EXT4-fs (loop2): This should not happen!! Data will be lost [ 125.930333][ T4707] [ 125.936557][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.977578][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 126.701717][ T4328] XFS (loop4): Unmounting Filesystem [ 126.762945][ T4707] kworker/u4:22: attempt to access beyond end of device [ 126.762945][ T4707] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 127.137191][ T5951] loop0: detected capacity change from 0 to 32768 [ 127.144538][ T5951] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.291 (5951) [ 127.173945][ T5951] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.178015][ T5951] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 127.179514][ T5951] BTRFS info (device loop0): force clearing of disk cache [ 127.183939][ T5951] BTRFS info (device loop0): enabling auto defrag [ 127.186494][ T5951] BTRFS info (device loop0): max_inline at 0 [ 127.189587][ T5951] BTRFS info (device loop0): turning on sync discard [ 127.191895][ T5951] BTRFS info (device loop0): using free space tree [ 127.196554][ T5962] device syzkaller0 entered promiscuous mode [ 127.285846][ T5951] BTRFS info (device loop0): enabling ssd optimizations [ 127.291667][ T5951] BTRFS info (device loop0): rebuilding free space tree [ 127.920843][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.922994][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.165416][ T5973] loop3: detected capacity change from 0 to 32768 [ 128.265061][ T5973] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 128.267810][ T4325] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.339414][ T5993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.761989][ T4314] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 129.544042][ T6018] loop2: detected capacity change from 0 to 32768 [ 129.882785][ T4312] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 129.980334][ T6032] device syzkaller0 entered promiscuous mode [ 129.989398][ T6034] loop4: detected capacity change from 0 to 64 [ 130.023408][ T6026] loop3: detected capacity change from 0 to 40427 [ 130.049285][ T6026] F2FS-fs (loop3): invalid crc value [ 130.128451][ T6026] F2FS-fs (loop3): Found nat_bits in checkpoint [ 130.162725][ T6026] F2FS-fs (loop3): Start checkpoint disabled! [ 130.496119][ T6026] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 130.870855][ T6029] loop1: detected capacity change from 0 to 32768 [ 131.474105][ T6029] XFS (loop1): Mounting V5 Filesystem [ 131.480820][ T4684] kworker/u4:16: attempt to access beyond end of device [ 131.480820][ T4684] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.566236][ T6058] loop2: detected capacity change from 0 to 32768 [ 131.576174][ T6058] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 131.901690][ T4312] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 131.910827][ T6029] XFS (loop1): Ending clean mount [ 131.918028][ T6029] XFS (loop1): Quotacheck needed: Please wait. [ 131.933923][ T6029] XFS (loop1): Quotacheck: Done. [ 132.529576][ T6076] loop3: detected capacity change from 0 to 16 [ 132.550681][ T6076] erofs: (device loop3): mounted with root inode @ nid 36. [ 132.582120][ T6076] syz.3.302: attempt to access beyond end of device [ 132.582120][ T6076] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 133.145121][ T4320] XFS (loop1): Unmounting Filesystem [ 134.369125][ T6093] device syzkaller0 entered promiscuous mode [ 134.994000][ T6097] loop4: detected capacity change from 0 to 32768 [ 135.009254][ T6101] loop3: detected capacity change from 0 to 40427 [ 135.085742][ T6101] F2FS-fs (loop3): invalid crc value [ 135.100695][ T6101] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.167979][ T6101] F2FS-fs (loop3): Start checkpoint disabled! [ 135.371973][ T6101] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 135.759962][ T4314] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by udevd (4314) [ 135.779309][ T6119] loop0: detected capacity change from 0 to 32768 [ 135.798944][ T6119] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 135.889777][ T4704] kworker/u4:21: attempt to access beyond end of device [ 135.889777][ T4704] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 136.933675][ T4312] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 137.059323][ T6148] device syzkaller0 entered promiscuous mode [ 137.065509][ T6151] loop3: detected capacity change from 0 to 1024 [ 137.480380][ T6158] loop0: detected capacity change from 0 to 16 [ 137.489933][ T6158] erofs: (device loop0): mounted with root inode @ nid 36. [ 137.526900][ T6158] syz.0.321: attempt to access beyond end of device [ 137.526900][ T6158] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 137.760632][ T6151] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 139.507344][ T4686] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 1: comm kworker/u4:17: lblock 1 mapped to illegal pblock 1 (length 15) [ 139.514103][ T4686] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 139.516189][ T4686] EXT4-fs (loop3): This should not happen!! Data will be lost [ 139.516189][ T4686] [ 139.559149][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 139.609847][ T6162] loop2: detected capacity change from 0 to 32768 [ 140.337788][ T6176] loop1: detected capacity change from 0 to 32768 [ 140.345281][ T6176] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.348171][ T6176] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 140.350900][ T6176] BTRFS info (device loop1): turning off barriers [ 140.352080][ T6176] BTRFS info (device loop1): setting nodatasum [ 140.355310][ T6176] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 140.358031][ T6176] BTRFS info (device loop1): use zstd compression, level 3 [ 140.359931][ T6176] BTRFS info (device loop1): using free space tree [ 140.575798][ T6207] loop3: detected capacity change from 0 to 4096 [ 140.584239][ T6207] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 140.599047][ T6207] ntfs3: loop3: Failed to load $Extend. [ 140.725994][ T4320] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.228240][ T6223] loop0: detected capacity change from 0 to 64 [ 141.292698][ T6225] device syzkaller0 entered promiscuous mode [ 142.127445][ T6240] device syzkaller0 entered promiscuous mode [ 142.131107][ T6244] loop4: detected capacity change from 0 to 1024 [ 142.214042][ T6244] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 142.837743][ T6255] netlink: 'syz.3.343': attribute type 1 has an invalid length. [ 143.062195][ T6263] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.064155][ T6263] bond1: (slave bond2): making interface the new active one [ 143.066453][ T6263] bond1: (slave bond2): Enslaving as an active interface with an up link [ 143.079279][ T6264] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 143.121615][ T6255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.343'. [ 143.123635][ T6255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.441044][ T6266] loop2: detected capacity change from 0 to 32768 [ 143.449830][ T6266] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.345 (6266) [ 143.458701][ T6266] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.460590][ T6266] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 143.462211][ T6266] BTRFS info (device loop2): turning off barriers [ 143.464693][ T6266] BTRFS info (device loop2): setting nodatasum [ 143.466037][ T6266] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 143.467737][ T6266] BTRFS info (device loop2): use zstd compression, level 3 [ 143.469676][ T6266] BTRFS info (device loop2): using free space tree [ 143.678511][ T4591] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 15) [ 143.681235][ T4329] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.684438][ T4591] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 143.686823][ T4591] EXT4-fs (loop4): This should not happen!! Data will be lost [ 143.686823][ T4591] [ 143.694833][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 143.737630][ T6294] loop4: detected capacity change from 0 to 512 [ 143.742477][ T6294] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 143.763528][ T6294] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.152134][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 144.642195][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 144.735683][ T6322] device syzkaller0 entered promiscuous mode [ 144.945454][ T6329] loop3: detected capacity change from 0 to 32768 [ 144.959204][ T6329] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.359 (6329) [ 145.123179][ T6329] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.127190][ T6329] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 145.129844][ T6329] BTRFS info (device loop3): turning off barriers [ 145.131009][ T6329] BTRFS info (device loop3): setting nodatasum [ 145.132001][ T6329] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 145.139776][ T6329] BTRFS info (device loop3): use zstd compression, level 3 [ 145.141119][ T6329] BTRFS info (device loop3): using free space tree [ 145.144267][ T6337] netlink: 'syz.1.360': attribute type 1 has an invalid length. [ 145.207393][ T6337] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.213928][ T6337] bond1: (slave bond2): making interface the new active one [ 145.231919][ T6337] bond1: (slave bond2): Enslaving as an active interface with an up link [ 145.567007][ T6337] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 145.625711][ T6337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.360'. [ 145.628615][ T6337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.689579][ T4321] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.958167][ T6373] loop1: detected capacity change from 0 to 128 [ 145.959983][ T6373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.961958][ T6375] loop2: detected capacity change from 0 to 64 [ 146.117690][ T6373] EXT4-fs (loop1): Test dummy encryption mode enabled [ 146.251130][ T6373] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 146.342787][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 146.790948][ T6387] loop0: detected capacity change from 0 to 128 [ 146.800628][ T6387] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 146.913171][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 147.274954][ T6398] loop1: detected capacity change from 0 to 512 [ 147.363007][ T6400] loop4: detected capacity change from 0 to 128 [ 147.385062][ T6400] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 147.387098][ T6400] hpfs: filesystem error: improperly stopped [ 147.388176][ T6400] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 147.389531][ T6400] hpfs: You really don't want any checks? You are crazy... [ 147.390947][ T6400] hpfs: hpfs_map_sector(): read error [ 147.391925][ T6400] hpfs: code page support is disabled [ 147.395273][ T6400] hpfs: hpfs_map_4sectors(): unaligned read [ 147.397552][ T6400] hpfs: hpfs_map_4sectors(): unaligned read [ 147.398578][ T6400] hpfs: filesystem error: unable to find root dir [ 147.513541][ T6398] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.726539][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 147.738779][ T6398] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 147.827895][ T6408] device syzkaller0 entered promiscuous mode [ 148.259020][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 148.689109][ T6425] loop4: detected capacity change from 0 to 4096 [ 148.716820][ T6425] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 148.744203][ T6425] ntfs3: loop4: Failed to load $Extend. [ 149.132699][ T6431] loop2: detected capacity change from 0 to 128 [ 150.562146][ T6461] loop4: detected capacity change from 0 to 4096 [ 150.609451][ T6464] device syzkaller0 entered promiscuous mode [ 151.245157][ T6445] loop0: detected capacity change from 0 to 32768 [ 151.934909][ T6486] loop2: detected capacity change from 0 to 128 [ 152.110893][ T6489] loop2: detected capacity change from 0 to 4096 [ 152.112855][ T6489] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 152.124204][ T6489] ntfs3: loop2: Failed to load $Extend. [ 153.124312][ T6508] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.400'. [ 153.125966][ T6508] netlink: zone id is out of range [ 153.126831][ T6508] netlink: zone id is out of range [ 153.144410][ T6508] loop1: detected capacity change from 0 to 4096 [ 153.242008][ T6508] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 153.258515][ T6505] tipc: Started in network mode [ 153.259520][ T6505] tipc: Node identity 6a16b76b1bb7, cluster identity 4711 [ 153.264001][ T6505] tipc: Enabled bearer , priority 0 [ 153.271146][ T6505] tipc: Resetting bearer [ 153.298302][ T6504] tipc: Disabling bearer [ 153.325650][ T6511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.327461][ T6511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.511445][ T6518] loop4: detected capacity change from 0 to 128 [ 154.176455][ T4330] Bluetooth: hci1: command 0x0406 tx timeout [ 154.176474][ T4338] Bluetooth: hci2: command 0x0406 tx timeout [ 154.177518][ T4330] Bluetooth: hci3: command 0x0406 tx timeout [ 154.179474][ T4330] Bluetooth: hci0: command 0x0406 tx timeout [ 154.179902][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 154.215137][ T6522] loop0: detected capacity change from 0 to 128 [ 154.247057][ T4335] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 154.647753][ T6533] loop2: detected capacity change from 0 to 2048 [ 154.650390][ T6533] EXT4-fs: Ignoring removed oldalloc option [ 154.651555][ T6533] EXT4-fs: quotafile must be on filesystem root [ 156.551858][ T6558] tipc: Started in network mode [ 156.552713][ T6558] tipc: Node identity be40f844d1a3, cluster identity 4711 [ 156.553847][ T6558] tipc: Enabled bearer , priority 0 [ 156.567949][ T6558] tipc: Resetting bearer [ 156.651802][ T6555] tipc: Disabling bearer [ 156.765846][ T6551] loop4: detected capacity change from 0 to 32768 [ 157.486612][ T6572] ERROR: (device loop4): dbFindCtl: Corrupt dmapctl page [ 157.486612][ T6572] [ 157.489945][ T6572] ERROR: (device loop4): remounting filesystem as read-only [ 157.491302][ T6572] jfs_mkdir: dtInsert returned -EIO [ 157.492376][ T6572] ERROR: (device loop4): txAbort: [ 157.492376][ T6572] [ 157.793643][ T6576] loop1: detected capacity change from 0 to 128 [ 157.877116][ T6575] loop2: detected capacity change from 0 to 32768 [ 157.879619][ T6575] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.420 (6575) [ 157.883262][ T6575] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 157.884839][ T6575] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 157.886442][ T6575] BTRFS info (device loop2): setting nodatasum [ 157.887353][ T6575] BTRFS info (device loop2): force zlib compression, level 3 [ 157.888431][ T6575] BTRFS info (device loop2): enabling ssd optimizations [ 157.889495][ T6575] BTRFS info (device loop2): metadata ratio 8 [ 157.890452][ T6575] BTRFS info (device loop2): using free space tree [ 158.465558][ T4329] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.631807][ T6601] loop0: detected capacity change from 0 to 32768 [ 158.643959][ T6601] JBD2: Ignoring recovery information on journal [ 158.665510][ T6601] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 158.731419][ T6615] loop3: detected capacity change from 0 to 128 [ 159.354684][ T6624] loop1: detected capacity change from 0 to 1024 [ 159.377696][ T4325] ocfs2: Unmounting device (7,0) on (node local) [ 160.407937][ T6645] loop4: detected capacity change from 0 to 256 [ 160.412874][ T6645] exfat: Deprecated parameter 'utf8' [ 160.413784][ T6645] exfat: Deprecated parameter 'namecase' [ 160.414656][ T6645] exfat: Deprecated parameter 'namecase' [ 160.415570][ T6645] exfat: Deprecated parameter 'utf8' [ 160.554720][ T6645] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 160.595185][ T6633] loop3: detected capacity change from 0 to 256 [ 160.876962][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 160.899176][ T24] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.911445][ T6663] tipc: Started in network mode [ 160.913566][ T6663] tipc: Node identity 3a3b06d0fcf4, cluster identity 4711 [ 160.916687][ T6663] tipc: Enabled bearer , priority 0 [ 160.920406][ T6663] device syzkaller0 entered promiscuous mode [ 160.999216][ T6662] tipc: Resetting bearer [ 161.046967][ T6662] tipc: Disabling bearer [ 161.185137][ T6661] hid-generic 0000:0000:0000.0001: pid 6661 passed too large report [ 161.584287][ T6672] loop0: detected capacity change from 0 to 4096 [ 161.646836][ T6672] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 161.748131][ T6675] loop2: detected capacity change from 0 to 40427 [ 161.774191][ T6675] F2FS-fs (loop2): invalid crc value [ 162.248508][ T6675] F2FS-fs (loop2): Found nat_bits in checkpoint [ 162.366828][ T6675] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 162.493500][ T4327] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 162.495806][ T4327] Bluetooth: hci3: Injecting HCI hardware error event [ 162.500962][ T4327] Bluetooth: hci3: hardware error 0x00 [ 162.895133][ T6672] ntfs3: loop0: Failed to load $Extend. [ 163.797756][ T6692] loop3: detected capacity change from 0 to 64 [ 164.155541][ T6702] netlink: 'syz.1.444': attribute type 10 has an invalid length. [ 164.372332][ T6697] loop4: detected capacity change from 0 to 32768 [ 164.723340][ T6713] tipc: Enabled bearer , priority 0 [ 164.725059][ T6713] device syzkaller0 entered promiscuous mode [ 164.754381][ T6713] tipc: Resetting bearer [ 164.777115][ T6712] tipc: Resetting bearer [ 164.825500][ T6707] loop2: detected capacity change from 0 to 40427 [ 164.829767][ T6707] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 164.831141][ T6707] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 164.833467][ T6707] F2FS-fs (loop2): invalid crc value [ 164.876090][ T6712] tipc: Disabling bearer [ 164.892873][ T6707] F2FS-fs (loop2): Found nat_bits in checkpoint [ 164.956015][ T4327] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 164.989622][ T6707] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 164.990908][ T6707] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 165.390187][ T6726] loop0: detected capacity change from 0 to 32768 [ 166.175006][ T6744] ERROR: (device loop0): dbFindCtl: Corrupt dmapctl page [ 166.175006][ T6744] [ 166.177449][ T6744] ERROR: (device loop0): remounting filesystem as read-only [ 166.178632][ T6744] jfs_mkdir: dtInsert returned -EIO [ 166.179585][ T6744] ERROR: (device loop0): txAbort: [ 166.179585][ T6744] [ 166.333017][ T6742] loop4: detected capacity change from 0 to 4096 [ 166.343664][ T6742] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 166.381200][ T6742] ntfs3: loop4: Failed to load $Extend. [ 167.014758][ T6738] loop1: detected capacity change from 0 to 32768 [ 167.093486][ T6738] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.456 (6738) [ 167.109046][ T6738] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 167.111010][ T6738] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 167.114883][ T6738] BTRFS info (device loop1): using free space tree [ 168.032070][ T6782] loop2: detected capacity change from 0 to 2048 [ 168.041599][ T6782] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.058322][ T6779] loop0: detected capacity change from 0 to 4096 [ 170.273999][ T6738] BTRFS error (device loop1): open_ctree failed: -22 [ 170.452577][ T4312] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by udevd (4312) [ 173.031102][ T6823] device lo entered promiscuous mode [ 173.032725][ T6823] device tunl0 entered promiscuous mode [ 173.033927][ T6823] device gre0 entered promiscuous mode [ 173.035027][ T6823] device gretap0 entered promiscuous mode [ 173.036434][ T6823] device erspan0 entered promiscuous mode [ 173.037695][ T6823] device ip_vti0 entered promiscuous mode [ 173.038949][ T6823] device ip6_vti0 entered promiscuous mode [ 173.040119][ T6823] device sit0 entered promiscuous mode [ 173.042873][ T6823] device ip6tnl0 entered promiscuous mode [ 173.061692][ T6823] device ip6gre0 entered promiscuous mode [ 173.063676][ T6823] device syz_tun entered promiscuous mode [ 173.066097][ T6823] device ip6gretap0 entered promiscuous mode [ 173.068650][ T6823] device bridge0 entered promiscuous mode [ 173.071040][ T6823] device vcan0 entered promiscuous mode [ 173.072155][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.073953][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.075486][ T6823] device bond0 entered promiscuous mode [ 173.076425][ T6823] device bond_slave_0 entered promiscuous mode [ 173.077692][ T6823] device bond_slave_1 entered promiscuous mode [ 173.080566][ T6823] device team0 entered promiscuous mode [ 173.081487][ T6823] device team_slave_0 entered promiscuous mode [ 173.082531][ T6823] device team_slave_1 entered promiscuous mode [ 173.083966][ T6823] device dummy0 entered promiscuous mode [ 173.085525][ T6823] device nlmon0 entered promiscuous mode [ 173.537447][ T6823] device caif0 entered promiscuous mode [ 173.538479][ T6823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.673452][ T6831] tipc: Enabled bearer , priority 0 [ 173.684736][ T6831] device syzkaller0 entered promiscuous mode [ 173.719045][ T6831] tipc: Resetting bearer [ 173.733096][ T6835] tipc: Enabling of bearer rejected, failed to enable media [ 173.762630][ T6830] tipc: Resetting bearer [ 173.896637][ T6830] tipc: Disabling bearer [ 174.712589][ T6846] loop2: detected capacity change from 0 to 4096 [ 174.787283][ T6851] Zero length message leads to an empty skb [ 178.511090][ T6875] device lo entered promiscuous mode [ 178.512651][ T6875] device tunl0 entered promiscuous mode [ 178.513710][ T6875] device gre0 entered promiscuous mode [ 178.514867][ T6875] device gretap0 entered promiscuous mode [ 178.516514][ T6875] device erspan0 entered promiscuous mode [ 178.517871][ T6875] device ip_vti0 entered promiscuous mode [ 178.519030][ T6875] device ip6_vti0 entered promiscuous mode [ 178.520122][ T6875] device sit0 entered promiscuous mode [ 178.521182][ T6875] device ip6tnl0 entered promiscuous mode [ 178.522404][ T6875] device ip6gre0 entered promiscuous mode [ 178.523548][ T6875] device syz_tun entered promiscuous mode [ 178.525507][ T6875] device ip6gretap0 entered promiscuous mode [ 178.526962][ T6875] device bridge0 entered promiscuous mode [ 178.528232][ T6875] device vcan0 entered promiscuous mode [ 178.529164][ T6875] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.530246][ T6875] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.531713][ T6875] device bond0 entered promiscuous mode [ 178.532649][ T6875] device bond_slave_0 entered promiscuous mode [ 178.533797][ T6875] device bond_slave_1 entered promiscuous mode [ 178.534871][ T6875] device wlan1 entered promiscuous mode [ 178.536511][ T6875] device team0 entered promiscuous mode [ 178.537376][ T6875] device team_slave_0 entered promiscuous mode [ 178.538504][ T6875] device team_slave_1 entered promiscuous mode [ 178.539975][ T6875] device dummy0 entered promiscuous mode [ 178.541088][ T6875] device nlmon0 entered promiscuous mode [ 179.638919][ T6877] loop0: detected capacity change from 0 to 40427 [ 179.746490][ T6877] F2FS-fs (loop0): invalid crc value [ 179.807600][ T6877] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 180.286393][ T6875] device caif0 entered promiscuous mode [ 180.287409][ T6875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.674176][ T6885] lo speed is unknown, defaulting to 1000 [ 180.687437][ T6889] tipc: Enabled bearer , priority 0 [ 180.689119][ T4312] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.721584][ T6894] device syzkaller0 entered promiscuous mode [ 180.758808][ T6883] tipc: Resetting bearer [ 180.775398][ T6879] tipc: Resetting bearer [ 180.807027][ T6879] tipc: Disabling bearer [ 181.005700][ T6915] loop1: detected capacity change from 0 to 4096 [ 183.113122][ T6938] loop4: detected capacity change from 0 to 4096 [ 183.469258][ T4312] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 184.014277][ T6953] device bond0 entered promiscuous mode [ 184.015265][ T6953] device bond_slave_0 entered promiscuous mode [ 184.016409][ T6953] device bond_slave_1 entered promiscuous mode [ 187.356384][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.559346][ T7005] Injecting memory failure for pfn 0x139349 at process virtual address 0x20ffe000 [ 187.582773][ T7005] Memory failure: 0x139349: recovery action for dirty LRU page: Recovered [ 187.585257][ T7005] Injecting memory failure for pfn 0x13934a at process virtual address 0x20fff000 [ 187.603036][ T7005] Memory failure: 0x13934a: recovery action for dirty LRU page: Recovered [ 189.109374][ T7026] loop2: detected capacity change from 0 to 64 [ 190.132126][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'. [ 190.157809][ T7044] bridge2: port 1(veth3) entered blocking state [ 190.158988][ T7044] bridge2: port 1(veth3) entered disabled state [ 190.160437][ T7044] device veth3 entered promiscuous mode [ 190.228658][ T7044] bridge2: port 2(veth0_to_bond) entered blocking state [ 190.233032][ T7044] bridge2: port 2(veth0_to_bond) entered disabled state [ 190.234750][ T7044] device veth0_to_bond entered promiscuous mode [ 190.556156][ T7052] "syz.3.531" (7052) uses obsolete ecb(arc4) skcipher [ 190.922117][ T7044] bridge2: port 3(vlan2) entered blocking state [ 190.923226][ T7044] bridge2: port 3(vlan2) entered disabled state [ 190.924690][ T7044] device vlan2 entered promiscuous mode [ 190.925705][ T7044] device veth0_to_hsr entered promiscuous mode [ 192.491397][ T7082] tipc: Enabling of bearer rejected, failed to enable media [ 192.537789][ T7086] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 192.843099][ T7101] loop1: detected capacity change from 0 to 16 [ 192.852243][ T7101] erofs: (device loop1): mounted with root inode @ nid 36. [ 194.791875][ T7117] ceph: No mds server is up or the cluster is laggy [ 194.795681][ T4375] libceph: connect (1)[c::]:6789 error -101 [ 194.797591][ T4375] libceph: mon0 (1)[c::]:6789 connect error [ 194.913868][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 195.240250][ T7106] loop0: detected capacity change from 0 to 32768 [ 195.261682][ T7106] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.544 (7106) [ 195.293059][ T7125] bridge1: port 1(veth3) entered blocking state [ 195.297400][ T7125] bridge1: port 1(veth3) entered disabled state [ 195.303790][ T7125] device veth3 entered promiscuous mode [ 195.355942][ T7106] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.357753][ T7106] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 195.359954][ T7106] BTRFS info (device loop0): turning off barriers [ 195.360956][ T7106] BTRFS info (device loop0): setting nodatasum [ 195.368727][ T7106] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 195.375854][ T7106] BTRFS info (device loop0): use zstd compression, level 3 [ 195.379810][ T7106] BTRFS info (device loop0): using free space tree [ 195.400726][ T7125] bridge1: port 2(veth0_to_bond) entered blocking state [ 195.404206][ T7125] bridge1: port 2(veth0_to_bond) entered disabled state [ 195.792259][ T7125] device veth0_to_bond entered promiscuous mode [ 195.954626][ T7125] bridge1: port 3(vlan2) entered blocking state [ 195.966192][ T7125] bridge1: port 3(vlan2) entered disabled state [ 195.967876][ T7125] device vlan2 entered promiscuous mode [ 195.968867][ T7125] device veth0_to_hsr entered promiscuous mode [ 196.110908][ T7158] loop4: detected capacity change from 0 to 1024 [ 196.633243][ T7147] netlink: 92 bytes leftover after parsing attributes in process `syz.3.553'. [ 196.861799][ T7172] loop1: detected capacity change from 0 to 256 [ 197.352472][ T7178] tipc: Enabled bearer , priority 0 [ 197.354430][ T7178] device syzkaller0 entered promiscuous mode [ 197.819609][ T7178] tipc: Resetting bearer [ 197.825611][ T7185] tipc: Enabled bearer , priority 0 [ 197.831423][ T7185] device syzkaller0 entered promiscuous mode [ 197.836534][ T7177] tipc: Resetting bearer [ 197.850592][ T4325] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 197.919009][ T7177] tipc: Disabling bearer [ 198.105036][ T7187] tipc: Resetting bearer [ 198.145520][ T7184] tipc: Resetting bearer [ 198.164075][ T7193] loop0: detected capacity change from 0 to 32768 [ 198.171793][ T7193] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.571 (7193) [ 198.260328][ T7193] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.262057][ T7193] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 198.263419][ T7193] BTRFS info (device loop0): turning off barriers [ 198.264353][ T7193] BTRFS info (device loop0): setting nodatasum [ 198.265248][ T7193] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 198.601617][ T7193] BTRFS info (device loop0): use zstd compression, level 3 [ 198.602991][ T7193] BTRFS info (device loop0): using free space tree [ 198.636645][ T7184] tipc: Disabling bearer [ 199.173904][ T7227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.568'. [ 199.188106][ T7227] bridge1: port 1(veth3) entered blocking state [ 199.189309][ T7227] bridge1: port 1(veth3) entered disabled state [ 199.190899][ T7227] device veth3 entered promiscuous mode [ 199.218052][ T7227] bridge1: port 2(veth0_to_bond) entered blocking state [ 199.219312][ T7227] bridge1: port 2(veth0_to_bond) entered disabled state [ 199.223278][ T7227] device veth0_to_bond entered promiscuous mode [ 199.340446][ T7227] bridge1: port 3(vlan2) entered blocking state [ 199.342746][ T7227] bridge1: port 3(vlan2) entered disabled state [ 199.746846][ T7239] cifs: Unknown parameter 'cach' [ 200.067256][ T7227] device vlan2 entered promiscuous mode [ 200.068408][ T7227] device veth0_to_hsr entered promiscuous mode [ 201.625444][ T7267] loop4: detected capacity change from 0 to 32768 [ 201.683960][ T7267] XFS (loop4): Mounting V5 Filesystem [ 201.722507][ T7267] XFS (loop4): Ending clean mount [ 201.727026][ T7267] XFS (loop4): Quotacheck needed: Please wait. [ 201.730353][ T4325] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.752782][ T7267] XFS (loop4): Quotacheck: Done. [ 202.613109][ T4328] XFS (loop4): Unmounting Filesystem [ 203.270378][ T7296] syz.0.584 (7296): drop_caches: 2 [ 203.271778][ T7296] syz.0.584 (7296): drop_caches: 2 [ 204.443947][ T7322] tipc: Enabled bearer , priority 0 [ 204.445520][ T7322] device syzkaller0 entered promiscuous mode [ 204.495679][ T7322] tipc: Resetting bearer [ 204.546049][ T7321] tipc: Resetting bearer [ 204.628833][ T7321] tipc: Disabling bearer [ 204.640551][ T7320] loop1: detected capacity change from 0 to 32768 [ 204.649495][ T7320] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.590 (7320) [ 204.657772][ T7320] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 204.659592][ T7320] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 204.661027][ T7320] BTRFS info (device loop1): turning off barriers [ 204.663012][ T7320] BTRFS info (device loop1): setting nodatasum [ 204.664755][ T7320] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 204.685424][ T7320] BTRFS info (device loop1): use zstd compression, level 3 [ 204.690729][ T7320] BTRFS info (device loop1): using free space tree [ 205.122105][ T7347] ceph: No mds server is up or the cluster is laggy [ 205.147377][ T24] libceph: connect (1)[c::]:6789 error -101 [ 205.156717][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 206.393202][ T7375] loop2: detected capacity change from 0 to 32768 [ 206.401107][ T7375] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.600 (7375) [ 206.411481][ T7375] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 206.413083][ T7375] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 206.415583][ T7375] BTRFS info (device loop2): using free space tree [ 206.942052][ T4320] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 206.958993][ T7375] BTRFS info (device loop2): enabling ssd optimizations [ 208.041365][ T7430] loop4: detected capacity change from 0 to 4096 [ 208.184410][ T7426] loop0: detected capacity change from 0 to 32768 [ 208.472872][ T7426] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.607 (7426) [ 208.489464][ T7426] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 208.492692][ T7426] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 208.493983][ T4329] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 208.494215][ T7426] BTRFS info (device loop0): turning off barriers [ 208.504521][ T7426] BTRFS info (device loop0): setting nodatasum [ 208.505667][ T7426] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 208.512706][ T7426] BTRFS info (device loop0): use zstd compression, level 3 [ 208.546814][ T7426] BTRFS info (device loop0): using free space tree [ 209.394917][ T4325] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.980421][ T7500] loop4: detected capacity change from 0 to 24 [ 210.982143][ T7500] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 211.570208][ T7500] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 212.552599][ T7516] loop4: detected capacity change from 0 to 4096 [ 212.559155][ T7516] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 212.562950][ T7516] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 212.568440][ T7516] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 212.576054][ T7516] ntfs: volume version 3.1. [ 213.434517][ T4328] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 215.100810][ T7570] tipc: Enabled bearer , priority 0 [ 215.102808][ T7570] device syzkaller0 entered promiscuous mode [ 215.110181][ T7570] tipc: Resetting bearer [ 215.112778][ T7569] tipc: Resetting bearer [ 215.446593][ T7569] tipc: Disabling bearer [ 215.454707][ T7573] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.456153][ T7573] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.122096][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.649'. [ 217.879841][ T7604] loop2: detected capacity change from 0 to 32768 [ 217.901530][ T7604] [ 217.901530][ T7604] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.901530][ T7604] [ 217.934898][ T7611] tipc: Started in network mode [ 217.935728][ T7611] tipc: Node identity 0aba8de0ba5b, cluster identity 4711 [ 217.945985][ T7611] tipc: Enabled bearer , priority 0 [ 217.947934][ T7611] device syzkaller0 entered promiscuous mode [ 218.037412][ T7614] tipc: Resetting bearer [ 218.041986][ T7610] tipc: Resetting bearer [ 218.377420][ T7610] tipc: Disabling bearer [ 218.446605][ T7615] blkno = 0, nblocks = 40 [ 218.447599][ T7615] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 218.447599][ T7615] [ 218.449032][ T7617] tipc: Enabling of bearer rejected, failed to enable media [ 218.477965][ T4329] [ 218.477965][ T4329] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.477965][ T4329] [ 218.481725][ T4329] [ 218.481725][ T4329] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.481725][ T4329] [ 218.636026][ T7619] loop4: detected capacity change from 0 to 32768 [ 218.981231][ T7619] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.657 (7619) [ 218.987977][ T7619] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 218.989815][ T7619] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 218.991412][ T7619] BTRFS info (device loop4): turning off barriers [ 219.006866][ T7619] BTRFS info (device loop4): setting nodatasum [ 219.008004][ T7619] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 219.031894][ T7619] BTRFS info (device loop4): use zstd compression, level 3 [ 219.033138][ T7619] BTRFS info (device loop4): using free space tree [ 219.251055][ T7657] loop1: detected capacity change from 0 to 8 [ 219.476420][ T39] 0: reclassify loop, rule prio 0, protocol 800 [ 219.867347][ T7665] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.662' sets config #1 [ 220.217826][ T7675] tipc: Enabling of bearer rejected, failed to enable media [ 220.903581][ T4328] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.665114][ T7717] x_tables: duplicate underflow at hook 1 [ 223.105320][ T7723] loop4: detected capacity change from 0 to 64 [ 223.210439][ T7723] overlayfs: upper fs needs to support d_type. [ 223.215414][ T7723] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 223.217210][ T7723] overlayfs: failed to set xattr on upper [ 223.218484][ T7723] overlayfs: ...falling back to index=off,metacopy=off. [ 224.249505][ T4684] 0: reclassify loop, rule prio 0, protocol 800 [ 224.598107][ T7743] sctp: [Deprecated]: syz.0.683 (pid 7743) Use of int in max_burst socket option. [ 224.598107][ T7743] Use struct sctp_assoc_value instead [ 224.685346][ T4328] Trying to free block not in datazone [ 224.686782][ T4328] Trying to free block not in datazone [ 224.687632][ T4328] Trying to free block not in datazone [ 224.688503][ T4328] Trying to free block not in datazone [ 224.689381][ T4328] Trying to free block not in datazone [ 224.690122][ T4328] minix_free_block (loop4:6): bit already cleared [ 224.691274][ T4328] Trying to free block not in datazone [ 224.696351][ T4328] Trying to free block not in datazone [ 224.937647][ T7752] loop4: detected capacity change from 0 to 2048 [ 224.973917][ T7752] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 225.419803][ T4684] 0: reclassify loop, rule prio 0, protocol 800 [ 226.294942][ T4688] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:18: bg 0: block 234: padding at end of block bitmap is not set [ 226.499528][ T7761] loop2: detected capacity change from 0 to 40427 [ 226.501356][ T7761] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 226.502439][ T7761] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 226.504485][ T7761] F2FS-fs (loop2): invalid crc value [ 226.540877][ T4688] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 226.542921][ T4688] EXT4-fs (loop4): This should not happen!! Data will be lost [ 226.542921][ T4688] [ 226.544555][ T4688] EXT4-fs (loop4): Total free blocks count 0 [ 226.545588][ T4688] EXT4-fs (loop4): Free/Dirty block details [ 226.555942][ T4688] EXT4-fs (loop4): free_blocks=0 [ 226.556739][ T4688] EXT4-fs (loop4): dirty_blocks=8192 [ 226.557566][ T4688] EXT4-fs (loop4): Block reservation details [ 226.558559][ T4688] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 226.855447][ T7782] loop0: detected capacity change from 0 to 2048 [ 226.928601][ T7782] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2) [ 226.952854][ T7761] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 226.964667][ T4688] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 226.969915][ T4312] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.978349][ T7761] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 226.979559][ T7761] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 229.235580][ T7815] overlayfs: failed to clone lowerpath [ 229.448718][ T4329] syz-executor: attempt to access beyond end of device [ 229.448718][ T4329] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 229.596168][ T4686] 0: reclassify loop, rule prio 0, protocol 800 [ 230.455804][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.458395][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.609418][ T7839] loop1: detected capacity change from 0 to 1024 [ 230.771003][ T7830] loop4: detected capacity change from 0 to 32768 [ 230.878671][ T4684] 0: reclassify loop, rule prio 0, protocol 800 [ 231.047522][ T7830] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.703 (7830) [ 231.059522][ T7830] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 231.063376][ T7830] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 231.065614][ T7830] BTRFS info (device loop4): turning off barriers [ 231.069031][ T7830] BTRFS info (device loop4): setting nodatasum [ 231.070112][ T7830] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 231.071775][ T7830] BTRFS info (device loop4): use zstd compression, level 3 [ 231.073211][ T7830] BTRFS info (device loop4): using free space tree [ 233.313214][ T4328] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.566932][ T7890] loop0: detected capacity change from 0 to 32768 [ 233.638195][ T7890] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.723 (7890) [ 233.932136][ T7890] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.934037][ T7890] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 233.935439][ T7890] BTRFS info (device loop0): turning off barriers [ 233.936638][ T7890] BTRFS info (device loop0): setting nodatasum [ 233.937678][ T7890] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 233.941234][ T7890] BTRFS info (device loop0): use zstd compression, level 3 [ 233.943401][ T7890] BTRFS info (device loop0): using free space tree [ 234.475680][ T7902] netlink: 'syz.3.715': attribute type 10 has an invalid length. [ 234.478606][ T7902] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 234.717675][ T4704] 0: reclassify loop, rule prio 0, protocol 800 [ 234.739289][ T4325] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 235.063806][ T7942] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.719' sets config #1 [ 235.298266][ T7944] loop0: detected capacity change from 0 to 8 [ 235.998984][ T105] 0: reclassify loop, rule prio 0, protocol 800 [ 236.304020][ T7961] ALSA: mixer_oss: invalid OSS volume '' [ 236.835670][ T7962] loop0: detected capacity change from 0 to 512 [ 236.880686][ T7962] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.725: casefold flag without casefold feature [ 236.890051][ T7962] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.725: couldn't read orphan inode 15 (err -117) [ 236.897761][ T7962] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 237.008859][ T7968] loop2: detected capacity change from 0 to 8192 [ 237.567628][ T7968] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 237.573792][ T7968] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 237.582100][ T7968] REISERFS (device loop2): using ordered data mode [ 237.584834][ T7968] reiserfs: using flush barriers [ 237.586899][ T7968] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 237.589974][ T7968] REISERFS (device loop2): checking transaction log (loop2) [ 237.649832][ T7968] REISERFS (device loop2): Using tea hash to sort names [ 237.661263][ T7968] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 237.667992][ T7968] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 237.682222][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 237.697470][ T7968] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 237.877509][ T7986] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 237.880094][ T7986] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 240.541771][ T4686] 0: reclassify loop, rule prio 0, protocol 800 [ 240.736481][ T8023] netlink: 'syz.3.741': attribute type 10 has an invalid length. [ 240.819358][ T8022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.194157][ T4699] 0: reclassify loop, rule prio 0, protocol 800 [ 241.783379][ T8038] ceph: No mds server is up or the cluster is laggy [ 241.787047][ T4397] libceph: connect (1)[c::]:6789 error -101 [ 241.792465][ T4397] libceph: mon0 (1)[c::]:6789 connect error [ 242.000860][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.746'. [ 242.759851][ T8057] loop0: detected capacity change from 0 to 4096 [ 242.815092][ T8057] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 243.868864][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 244.357529][ T8077] loop2: detected capacity change from 0 to 64 [ 244.508352][ T8076] overlayfs: upper fs needs to support d_type. [ 244.509799][ T8076] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 244.510921][ T8076] overlayfs: failed to set xattr on upper [ 244.511762][ T8076] overlayfs: ...falling back to index=off,metacopy=off. [ 244.787463][ T4329] Trying to free block not in datazone [ 244.788568][ T4329] Trying to free block not in datazone [ 244.789404][ T4329] Trying to free block not in datazone [ 244.802563][ T4329] Trying to free block not in datazone [ 244.803382][ T4329] Trying to free block not in datazone [ 244.804226][ T4329] minix_free_block (loop2:6): bit already cleared [ 244.805223][ T4329] Trying to free block not in datazone [ 244.821567][ T4329] Trying to free block not in datazone [ 244.864135][ T8081] loop0: detected capacity change from 0 to 4096 [ 244.907335][ T8081] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 244.908867][ T8081] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 244.910880][ T8081] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 245.022880][ T8091] loop1: detected capacity change from 0 to 512 [ 245.082273][ T8091] EXT4-fs (loop1): can't read group descriptor 0 [ 245.262080][ T8081] ntfs: volume version 3.1. [ 245.299692][ T4325] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 246.238317][ T4470] 0: reclassify loop, rule prio 0, protocol 800 [ 246.282517][ T8102] loop4: detected capacity change from 0 to 4096 [ 246.313162][ T8102] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 246.380818][ T8102] ntfs3: loop4: Failed to load $Extend. [ 247.354007][ T4684] 0: reclassify loop, rule prio 0, protocol 800 [ 247.651941][ T8133] infiniband syz1: set active [ 247.948457][ T8131] netlink: 'syz.0.765': attribute type 10 has an invalid length. [ 247.958256][ T8133] infiniband syz1: added syz_tun [ 247.962203][ T8131] device wlan1 entered promiscuous mode [ 247.963839][ T8131] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 247.987632][ T8133] RDS/IB: syz1: added [ 247.988792][ T8133] smc: adding ib device syz1 with port count 1 [ 247.989962][ T8133] smc: ib device syz1 port 1 has pnetid [ 248.152392][ T8137] infiniband syz1: set down [ 248.230380][ T7] infiniband syz1: ib_query_port failed (-19) [ 248.232450][ T4470] smc: removing ib device syz1 [ 248.336314][ T8147] overlayfs: failed to clone upperpath [ 248.748385][ T8133] rdma_rxe: rxe_register_device failed with error -19 [ 248.749758][ T8133] rdma_rxe: failed to add syz_tun [ 248.798317][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.935146][ T8156] loop2: detected capacity change from 0 to 1024 [ 249.518680][ T8164] device lo entered promiscuous mode [ 249.522006][ T8164] device tunl0 entered promiscuous mode [ 249.523595][ T8164] device gre0 entered promiscuous mode [ 249.525115][ T8164] device gretap0 entered promiscuous mode [ 249.526861][ T8164] device erspan0 entered promiscuous mode [ 249.528411][ T8164] device ip_vti0 entered promiscuous mode [ 249.530081][ T8164] device ip6_vti0 entered promiscuous mode [ 249.531871][ T8164] device sit0 entered promiscuous mode [ 249.533491][ T8164] device ip6tnl0 entered promiscuous mode [ 249.535181][ T8164] device ip6gre0 entered promiscuous mode [ 249.536529][ T8164] device syz_tun entered promiscuous mode [ 249.538329][ T8164] device ip6gretap0 entered promiscuous mode [ 249.539917][ T8164] device bridge0 entered promiscuous mode [ 249.542496][ T8164] device vcan0 entered promiscuous mode [ 249.545263][ T8164] device team0 entered promiscuous mode [ 249.546153][ T8164] device team_slave_0 entered promiscuous mode [ 249.547410][ T8164] device team_slave_1 entered promiscuous mode [ 249.549887][ T8164] device dummy0 entered promiscuous mode [ 249.551259][ T8164] device nlmon0 entered promiscuous mode [ 249.587243][ T8164] device caif0 entered promiscuous mode [ 249.588248][ T8164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.030645][ T8174] loop0: detected capacity change from 0 to 16 [ 250.364269][ T8174] erofs: Unknown parameter '0x0000000000000000' [ 250.934463][ T8187] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 252.274727][ T8183] loop1: detected capacity change from 0 to 8192 [ 252.564402][ T8183] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 252.568594][ T8183] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 252.570071][ T8183] REISERFS (device loop1): using ordered data mode [ 252.571123][ T8183] reiserfs: using flush barriers [ 252.658329][ T8183] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 252.671662][ T8183] REISERFS (device loop1): checking transaction log (loop1) [ 252.797690][ T8196] syz.4.785 (8196): drop_caches: 2 [ 252.806582][ T8196] syz.4.785 (8196): drop_caches: 2 [ 252.912061][ T8205] lo speed is unknown, defaulting to 1000 [ 253.001352][ T8205] loop2: detected capacity change from 0 to 1024 [ 253.004455][ T8205] EXT4-fs: Ignoring removed orlov option [ 253.005480][ T8205] EXT4-fs: Ignoring removed nomblk_io_submit option [ 253.017578][ T4582] 0: reclassify loop, rule prio 0, protocol 800 [ 253.030787][ T4582] 0: reclassify loop, rule prio 0, protocol 800 [ 253.448488][ T8205] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 253.747977][ T8183] REISERFS (device loop1): Using tea hash to sort names [ 253.749502][ T8183] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 253.758008][ T8183] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 254.058319][ T8198] 9pnet_virtio: no channels available for device 127.0.0.1 [ 254.200858][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 255.344241][ T8238] loop1: detected capacity change from 0 to 2048 [ 255.356867][ T8238] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 256.458450][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.794'. [ 256.815729][ T8263] tipc: Enabled bearer , priority 0 [ 256.842715][ T8260] loop1: detected capacity change from 0 to 4096 [ 256.930412][ T8260] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 256.931921][ T8260] EXT4-fs (loop1): Test dummy encryption mode enabled [ 256.935483][ T8260] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 257.010535][ T8260] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 257.040481][ T8277] loop2: detected capacity change from 0 to 32768 [ 257.057143][ T8277] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.804 (8277) [ 257.098990][ T8277] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 257.100693][ T8277] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 257.102113][ T8277] BTRFS info (device loop2): using free space tree [ 257.619153][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 257.957371][ T4514] tipc: Node number set to 1906423659 [ 258.079646][ T8277] BTRFS info (device loop2): enabling ssd optimizations [ 258.091587][ T8305] tap0: tun_chr_ioctl cmd 35111 [ 258.396374][ T4582] 0: reclassify loop, rule prio 0, protocol 800 [ 258.398036][ T4688] 0: reclassify loop, rule prio 0, protocol 800 [ 259.208567][ T4329] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 259.661561][ T4312] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (4312) [ 260.942843][ T8347] sctp: [Deprecated]: syz.0.819 (pid 8347) Use of int in max_burst socket option. [ 260.942843][ T8347] Use struct sctp_assoc_value instead [ 260.946093][ T8346] loop1: detected capacity change from 0 to 512 [ 261.021824][ T8346] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.818: casefold flag without casefold feature [ 261.024953][ T8346] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.818: couldn't read orphan inode 15 (err -117) [ 261.031140][ T8346] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 261.758608][ T8363] loop2: detected capacity change from 0 to 4096 [ 262.152480][ T8363] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 262.647526][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 262.657710][ T8371] netlink: 'syz.2.823': attribute type 10 has an invalid length. [ 262.732659][ T8371] device wlan1 entered promiscuous mode [ 262.735327][ T8371] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 262.825994][ T8380] loop1: detected capacity change from 0 to 4096 [ 262.838632][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 262.853870][ T8380] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 262.861770][ T8380] ntfs3: loop1: Failed to load $Extend. [ 263.430487][ T8370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.501270][ T8377] loop4: detected capacity change from 0 to 32768 [ 263.512096][ T8377] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 263.701669][ T8390] netlink: 'syz.0.829': attribute type 1 has an invalid length. [ 263.702890][ T8390] netlink: 244 bytes leftover after parsing attributes in process `syz.0.829'. [ 264.222373][ T4591] 0: reclassify loop, rule prio 0, protocol 800 [ 264.250089][ T4704] 0: reclassify loop, rule prio 0, protocol 800 [ 264.687190][ T4312] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 264.771408][ T8408] sctp: [Deprecated]: syz.1.832 (pid 8408) Use of int in max_burst socket option. [ 264.771408][ T8408] Use struct sctp_assoc_value instead [ 264.778320][ T8402] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 264.787816][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.830'. [ 265.500439][ T8423] loop2: detected capacity change from 0 to 8192 [ 265.522479][ T8423] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 265.529063][ T8423] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 265.531428][ T8423] REISERFS (device loop2): using ordered data mode [ 265.532609][ T8423] reiserfs: using flush barriers [ 265.552151][ T8423] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 265.565815][ T8423] REISERFS (device loop2): checking transaction log (loop2) [ 265.713905][ T8435] tipc: Cannot configure node identity twice [ 267.071220][ T8423] REISERFS (device loop2): Using tea hash to sort names [ 267.072596][ T8423] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 267.093140][ T8439] loop4: detected capacity change from 0 to 2048 [ 267.103179][ T8439] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2) [ 267.141080][ T8448] loop0: detected capacity change from 0 to 512 [ 267.144176][ T8450] tipc: Enabling of bearer rejected, already enabled [ 267.148614][ T8449] loop1: detected capacity change from 0 to 512 [ 267.178710][ T4314] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 267.192445][ T8449] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.842: casefold flag without casefold feature [ 267.194843][ T8448] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 267.194970][ T8449] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.842: couldn't read orphan inode 15 (err -117) [ 267.209009][ T8449] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 267.243602][ T8456] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4) [ 268.365379][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 268.970051][ T8481] sctp: [Deprecated]: syz.4.848 (pid 8481) Use of int in max_burst socket option. [ 268.970051][ T8481] Use struct sctp_assoc_value instead [ 269.409935][ T4484] 0: reclassify loop, rule prio 0, protocol 800 [ 270.034914][ T4591] 0: reclassify loop, rule prio 0, protocol 800 [ 270.083818][ T8492] loop4: detected capacity change from 0 to 512 [ 270.110468][ T8492] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.852: casefold flag without casefold feature [ 270.112849][ T8492] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.852: couldn't read orphan inode 15 (err -117) [ 270.115579][ T8492] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 270.222443][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 270.251279][ T8497] loop0: detected capacity change from 0 to 128 [ 270.258693][ T8497] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4561: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 270.262097][ T8497] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 270.274424][ T8486] loop2: detected capacity change from 0 to 40427 [ 270.711578][ T8486] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 270.712854][ T8486] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 270.714892][ T8486] F2FS-fs (loop2): invalid crc value [ 271.082032][ T4314] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 271.086109][ T8486] F2FS-fs (loop2): Found nat_bits in checkpoint [ 271.186175][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 271.208523][ T8486] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 271.209770][ T8486] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 273.608589][ T8538] syz.1.862 (8538): drop_caches: 2 [ 273.609802][ T8538] syz.1.862 (8538): drop_caches: 2 [ 273.879547][ T8544] sctp: [Deprecated]: syz.2.863 (pid 8544) Use of int in max_burst socket option. [ 273.879547][ T8544] Use struct sctp_assoc_value instead [ 274.649298][ T4707] 0: reclassify loop, rule prio 0, protocol 800 [ 274.757187][ T8565] lo speed is unknown, defaulting to 1000 [ 274.788353][ T8565] loop4: detected capacity change from 0 to 1024 [ 274.790063][ T8565] EXT4-fs: Ignoring removed orlov option [ 274.791086][ T8565] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.197548][ T8565] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 275.686751][ T1575] 0: reclassify loop, rule prio 0, protocol 800 [ 276.140352][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 276.555952][ T8591] loop4: detected capacity change from 0 to 512 [ 276.803969][ T8591] EXT4-fs (loop4): can't read group descriptor 0 [ 276.890819][ T4977] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 277.239457][ T8604] sctp: [Deprecated]: syz.2.879 (pid 8604) Use of int in max_burst socket option. [ 277.239457][ T8604] Use struct sctp_assoc_value instead [ 277.799622][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 278.106844][ T8628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.885'. [ 278.478115][ T8637] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 280.025614][ T8666] loop2: detected capacity change from 0 to 512 [ 280.157494][ T4484] 0: reclassify loop, rule prio 0, protocol 800 [ 280.159806][ T8666] EXT4-fs (loop2): can't read group descriptor 0 [ 280.344717][ T8667] loop4: detected capacity change from 0 to 136 [ 280.456182][ T8647] loop0: detected capacity change from 0 to 32768 [ 280.469810][ T8647] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.891 (8647) [ 280.473534][ T8647] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 280.473694][ T8667] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 280.475163][ T8647] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 280.480630][ T8647] BTRFS info (device loop0): turning off barriers [ 280.481661][ T8647] BTRFS info (device loop0): setting nodatasum [ 280.482948][ T8647] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 280.484544][ T8647] BTRFS info (device loop0): use zstd compression, level 3 [ 280.485760][ T8647] BTRFS info (device loop0): using free space tree [ 280.706973][ T8674] lo speed is unknown, defaulting to 1000 [ 280.797825][ T8675] loop1: detected capacity change from 0 to 1024 [ 280.803295][ T8675] EXT4-fs: Ignoring removed orlov option [ 280.804350][ T8675] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.439139][ T4704] 0: reclassify loop, rule prio 0, protocol 800 [ 281.654089][ T8675] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 281.788656][ T8683] tipc: New replicast peer: 255.255.255.255 [ 281.790358][ T8683] tipc: Enabled bearer , priority 10 [ 281.791401][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.897'. [ 282.123580][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 282.140818][ T8704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.900'. [ 282.157419][ T8647] BTRFS error (device loop0): open_ctree failed: -12 [ 283.142955][ T8705] tipc: Node number set to 3335456464 [ 283.781226][ T8738] loop1: detected capacity change from 0 to 512 [ 283.788805][ T8738] EXT4-fs (loop1): #blocks per group too big: 466944 [ 283.793373][ T4312] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4312) [ 283.907942][ T4314] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 284.934466][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 285.156153][ T8758] loop0: detected capacity change from 0 to 32768 [ 285.157816][ T8758] jfs: Unrecognized mount option " [ 285.157816][ T8758] " or missing value [ 285.286390][ T8755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.915'. [ 285.380092][ T4707] 0: reclassify loop, rule prio 0, protocol 800 [ 285.431846][ T4312] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 285.740972][ T8765] loop2: detected capacity change from 0 to 512 [ 285.764545][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.929'. [ 285.782452][ T8771] loop4: detected capacity change from 0 to 64 [ 285.879772][ T8765] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 287.030038][ T8787] 0: reclassify loop, rule prio 0, protocol 800 [ 287.332131][ T4704] 0: reclassify loop, rule prio 0, protocol 800 [ 287.344355][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 287.918821][ T8809] loop2: detected capacity change from 0 to 32768 [ 287.978705][ T8809] XFS (loop2): Mounting V5 Filesystem [ 288.062440][ T8821] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 288.066571][ T8821] CIFS mount error: No usable UNC path provided in device string! [ 288.066571][ T8821] [ 288.068349][ T8821] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 288.356127][ T8809] XFS (loop2): Ending clean mount [ 288.544573][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'. [ 288.615181][ T8832] ptrace attach of "./syz-executor exec"[4329] was attempted by "./syz-executor exec"[8832] [ 289.028176][ T4329] XFS (loop2): Unmounting Filesystem [ 291.037280][ T4515] 0: reclassify loop, rule prio 0, protocol 800 [ 291.100838][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.944'. [ 291.333521][ T8883] autofs4:pid:8883:autofs_fill_super: called with bogus options [ 291.545040][ T8885] ubi31: attaching mtd0 [ 291.551379][ T8885] ubi31: scanning is finished [ 291.552304][ T8885] ubi31: empty MTD device detected [ 291.631590][ T8885] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 291.632872][ T8885] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 291.634325][ T8885] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 291.635533][ T8885] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 291.636977][ T8885] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 291.638139][ T8885] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 291.639492][ T8885] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2554690520 [ 291.641296][ T8885] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 291.644444][ T8886] ubi31: background thread "ubi_bgt31d" started, PID 8886 [ 291.828006][ T8877] loop1: detected capacity change from 0 to 32768 [ 291.832512][ T8877] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 291.877577][ T4312] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 291.918186][ T8892] loop1: detected capacity change from 0 to 512 [ 292.439274][ T8892] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 293.098594][ T4725] 0: reclassify loop, rule prio 0, protocol 800 [ 293.121773][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.957'. [ 293.448808][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 293.464784][ T8922] loop2: detected capacity change from 0 to 512 [ 293.470376][ T8922] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.958: casefold flag without casefold feature [ 293.472552][ T8922] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.958: couldn't read orphan inode 15 (err -117) [ 293.474449][ T8922] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 295.073704][ T8947] tipc: Enabling of bearer rejected, already enabled [ 295.322673][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 295.420836][ T8958] loop2: detected capacity change from 0 to 512 [ 295.432618][ T8958] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.965: casefold flag without casefold feature [ 295.436471][ T8958] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.965: couldn't read orphan inode 15 (err -117) [ 295.442188][ T8958] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 295.550987][ T8966] loop4: detected capacity change from 0 to 1024 [ 295.964230][ T8971] netlink: 44 bytes leftover after parsing attributes in process `syz.0.966'. [ 296.630595][ T4686] 0: reclassify loop, rule prio 0, protocol 800 [ 296.763765][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 298.180305][ T9002] tipc: New replicast peer: 255.255.255.255 [ 298.182920][ T9002] tipc: Enabled bearer , priority 10 [ 298.185445][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.973'. [ 299.621435][ T9008] loop4: detected capacity change from 0 to 512 [ 299.622769][ T9010] loop2: detected capacity change from 0 to 512 [ 299.717978][ T9010] EXT4-fs (loop2): #blocks per group too big: 466944 [ 299.730336][ T9008] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 300.850256][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 300.910703][ T9043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.914096][ T9043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.625074][ T9048] infiniband syz2: set down [ 301.625981][ T9048] infiniband syz2: added ipvlan0 [ 302.300084][ T9048] infiniband syz2: Couldn't open port 1 [ 302.751417][ T9048] RDS/IB: syz2: added [ 302.753538][ T9048] smc: adding ib device syz2 with port count 1 [ 302.754819][ T9048] smc: ib device syz2 port 1 has pnetid [ 302.889452][ T4484] 0: reclassify loop, rule prio 0, protocol 800 [ 302.890642][ T4484] 0: reclassify loop, rule prio 0, protocol 800 [ 306.261770][ T9085] loop2: detected capacity change from 0 to 4096 [ 306.303793][ T9084] tipc: New replicast peer: 255.255.255.255 [ 306.306723][ T9084] tipc: Enabled bearer , priority 10 [ 306.312282][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.991'. [ 306.629747][ T9095] 0: reclassify loop, rule prio 0, protocol 800 [ 307.375492][ T9085] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 307.398961][ T7] tipc: Node number set to 2967571936 [ 307.446282][ T9085] ntfs3: loop2: Failed to load $Extend. [ 307.593661][ T9108] loop4: detected capacity change from 0 to 32768 [ 308.107949][ T9113] lo speed is unknown, defaulting to 1000 [ 308.412867][ T9110] loop1: detected capacity change from 0 to 64 [ 308.463660][ T9117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.525103][ T4688] 0: reclassify loop, rule prio 0, protocol 800 [ 308.526608][ T4688] 0: reclassify loop, rule prio 0, protocol 800 [ 308.746423][ T9108] XFS (loop4): Mounting V5 Filesystem [ 309.327190][ T9108] XFS (loop4): Ending clean mount [ 309.416458][ T9117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.791638][ T9137] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 309.792983][ T9137] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 309.795857][ T9137] vhci_hcd vhci_hcd.0: Device attached [ 311.212657][ T9144] x_tables: unsorted underflow at hook 2 [ 311.217389][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.222495][ T9139] vhci_hcd: connection closed [ 311.501642][ T4328] XFS (loop4): Unmounting Filesystem [ 311.510055][ T4686] vhci_hcd: stop threads [ 311.511452][ T4686] vhci_hcd: release socket [ 311.512189][ T4686] vhci_hcd: disconnect device [ 312.157375][ T9158] netlink: 'syz.3.1008': attribute type 10 has an invalid length. [ 312.171542][ T9158] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 312.653078][ T9162] ptrace attach of "./syz-executor exec"[4325] was attempted by "./syz-executor exec"[9162] [ 313.250973][ T9173] 0: reclassify loop, rule prio 0, protocol 800 [ 313.692868][ T4591] 0: reclassify loop, rule prio 0, protocol 800 [ 314.966992][ T1618] 0: reclassify loop, rule prio 0, protocol 800 [ 314.973640][ T9190] loop2: detected capacity change from 0 to 16 [ 314.983436][ T9190] erofs: (device loop2): mounted with root inode @ nid 36. [ 315.114569][ T9197] loop1: detected capacity change from 0 to 512 [ 315.138001][ T9197] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 315.139409][ T9197] System zones: 1-12 [ 315.260176][ T9197] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 33261: comm syz.1.1017: invalid block [ 315.277319][ T9197] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1017: invalid indirect mapped block 8 (level 2) [ 315.357662][ T9202] loop2: detected capacity change from 0 to 32768 [ 315.665744][ T9197] EXT4-fs (loop1): 1 truncate cleaned up [ 315.691284][ T9197] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 315.880478][ T9202] XFS (loop2): Mounting V5 Filesystem [ 315.912037][ T9202] XFS (loop2): Ending clean mount [ 316.518714][ T9222] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 316.519907][ T9222] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 316.521120][ T9222] vhci_hcd vhci_hcd.0: Device attached [ 316.534226][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 316.664751][ T9223] vhci_hcd: connection closed [ 316.666315][ T1618] vhci_hcd: stop threads [ 316.667833][ T1618] vhci_hcd: release socket [ 316.669517][ T1618] vhci_hcd: disconnect device [ 317.205365][ T9230] loop1: detected capacity change from 0 to 32768 [ 317.208420][ T9230] jfs: Unrecognized mount option " [ 317.208420][ T9230] " or missing value [ 317.246120][ T7] vhci_hcd: vhci_device speed not set [ 317.258497][ T4329] XFS (loop2): Unmounting Filesystem [ 317.637397][ T4312] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 318.478247][ T9249] loop4: detected capacity change from 0 to 2048 [ 318.859319][ T9249] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 319.069805][ T9249] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1028: bg 0: block 234: padding at end of block bitmap is not set [ 319.076068][ T9249] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 319.078195][ T9249] EXT4-fs (loop4): This should not happen!! Data will be lost [ 319.078195][ T9249] [ 319.264898][ T4484] 0: reclassify loop, rule prio 0, protocol 800 [ 319.932415][ T9262] tipc: Enabled bearer , priority 0 [ 319.934549][ T9262] device syzkaller0 entered promiscuous mode [ 319.987905][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 320.479881][ T4684] 0: reclassify loop, rule prio 0, protocol 800 [ 320.756925][ T9275] tipc: Resetting bearer [ 321.671412][ T9295] loop4: detected capacity change from 0 to 32768 [ 321.672823][ T9295] jfs: Unrecognized mount option " [ 321.672823][ T9295] " or missing value [ 322.158327][ T4312] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 324.036339][ T4327] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 324.038337][ T4327] CPU: 0 PID: 4327 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 324.039557][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 324.041057][ T4327] Workqueue: hci0 hci_rx_work [ 324.041852][ T4327] Call trace: [ 324.042375][ T4327] dump_backtrace+0x1c8/0x1f4 [ 324.043088][ T4327] show_stack+0x2c/0x3c [ 324.043763][ T4327] __dump_stack+0x30/0x40 [ 324.044472][ T4327] dump_stack_lvl+0xf8/0x160 [ 324.045255][ T4327] dump_stack+0x1c/0x5c [ 324.045942][ T4327] sysfs_create_dir_ns+0x22c/0x24c [ 324.046699][ T4327] kobject_add_internal+0x5a8/0xb30 [ 324.047487][ T4327] kobject_add+0x134/0x1f8 [ 324.048211][ T4327] device_add+0x3f0/0xf94 [ 324.048901][ T4327] hci_conn_add_sysfs+0xbc/0x1cc [ 324.049686][ T4327] le_conn_complete_evt+0xcb0/0x1220 [ 324.050484][ T4327] hci_le_conn_complete_evt+0x114/0x3f8 [ 324.051387][ T4327] hci_le_meta_evt+0x2c0/0x4a4 [ 324.052031][ T4327] hci_event_packet+0x6ac/0xf08 [ 324.052755][ T4327] hci_rx_work+0x324/0xaa0 [ 324.053345][ T4327] process_one_work+0x7f4/0x13a8 [ 324.054157][ T4327] worker_thread+0x8c8/0xfbc [ 324.054972][ T4327] kthread+0x250/0x2d8 [ 324.055689][ T4327] ret_from_fork+0x10/0x20 [ 324.056639][ T4327] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 324.058855][ T4327] Bluetooth: hci0: failed to register connection device [ 324.520759][ T9334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1047'. [ 324.756707][ T9324] loop1: detected capacity change from 0 to 40427 [ 324.758822][ T9324] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 324.760139][ T9324] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 324.762377][ T9324] F2FS-fs (loop1): invalid crc value [ 324.764615][ T9324] F2FS-fs (loop1): Found nat_bits in checkpoint [ 324.774409][ T9324] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 324.775581][ T9324] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 325.028231][ T4686] 0: reclassify loop, rule prio 0, protocol 800 [ 325.700220][ T9345] rdma_rxe: rxe_register_device failed with error -23 [ 325.701830][ T9345] rdma_rxe: failed to add ipvlan0 [ 325.819508][ T4688] 0: reclassify loop, rule prio 0, protocol 800 [ 327.747003][ T9360] overlayfs: conflicting lowerdir path [ 328.769944][ T9388] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.415453][ T9391] xt_CT: No such helper "pptp" [ 329.471437][ T9398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.542594][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1058'. [ 330.189053][ T9398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.035329][ T4704] 0: reclassify loop, rule prio 0, protocol 800 [ 331.554620][ T4591] 0: reclassify loop, rule prio 0, protocol 800 [ 332.602917][ T4327] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 332.604528][ T4327] Bluetooth: hci4: Injecting HCI hardware error event [ 332.612649][ T47] Bluetooth: hci4: hardware error 0x00 [ 333.467936][ T9464] loop4: detected capacity change from 0 to 16 [ 333.527383][ T9464] erofs: (device loop4): mounted with root inode @ nid 36. [ 335.048426][ T9495] loop1: detected capacity change from 0 to 40427 [ 335.063824][ T9495] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 335.065062][ T9495] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 335.068298][ T9495] F2FS-fs (loop1): invalid crc value [ 335.377048][ T47] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 335.448250][ T9495] F2FS-fs (loop1): Found nat_bits in checkpoint [ 335.474006][ T9495] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 335.475322][ T9495] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 335.849101][ T9511] syz.1.1084: attempt to access beyond end of device [ 335.849101][ T9511] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 336.489634][ T4676] 0: reclassify loop, rule prio 0, protocol 800 [ 336.637903][ T4676] 0: reclassify loop, rule prio 0, protocol 800 [ 339.397790][ T9576] loop4: detected capacity change from 0 to 16 [ 339.407193][ T9576] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 340.110147][ T9571] overlayfs: upper fs is r/o, try multi-lower layers mount [ 341.369081][ T47] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 341.370782][ T47] CPU: 1 PID: 47 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 341.371883][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 341.373283][ T47] Workqueue: hci1 hci_rx_work [ 341.373955][ T47] Call trace: [ 341.374431][ T47] dump_backtrace+0x1c8/0x1f4 [ 341.375135][ T47] show_stack+0x2c/0x3c [ 341.375816][ T47] __dump_stack+0x30/0x40 [ 341.376482][ T47] dump_stack_lvl+0xf8/0x160 [ 341.377182][ T47] dump_stack+0x1c/0x5c [ 341.377840][ T47] sysfs_create_dir_ns+0x22c/0x24c [ 341.378661][ T47] kobject_add_internal+0x5a8/0xb30 [ 341.379455][ T47] kobject_add+0x134/0x1f8 [ 341.380126][ T47] device_add+0x3f0/0xf94 [ 341.380835][ T47] hci_conn_add_sysfs+0xbc/0x1cc [ 341.381601][ T47] le_conn_complete_evt+0xcb0/0x1220 [ 341.382512][ T47] hci_le_conn_complete_evt+0x114/0x3f8 [ 341.383424][ T47] hci_le_meta_evt+0x2c0/0x4a4 [ 341.384264][ T47] hci_event_packet+0x6ac/0xf08 [ 341.385080][ T47] hci_rx_work+0x324/0xaa0 [ 341.385811][ T47] process_one_work+0x7f4/0x13a8 [ 341.386551][ T47] worker_thread+0x8c8/0xfbc [ 341.387239][ T47] kthread+0x250/0x2d8 [ 341.387925][ T47] ret_from_fork+0x10/0x20 [ 341.390005][ T47] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 341.392067][ T47] Bluetooth: hci1: failed to register connection device [ 342.183228][ T9590] sctp: [Deprecated]: syz.4.1106 (pid 9590) Use of int in max_burst socket option. [ 342.183228][ T9590] Use struct sctp_assoc_value instead [ 342.236619][ T4676] 0: reclassify loop, rule prio 0, protocol 800 [ 342.241924][ T4704] 0: reclassify loop, rule prio 0, protocol 800 [ 343.482324][ T9618] loop1: detected capacity change from 0 to 1024 [ 344.318793][ T4707] hfsplus: b-tree write err: -5, ino 4 [ 344.331995][ T9620] loop2: detected capacity change from 0 to 32768 [ 344.344400][ T9635] sctp: [Deprecated]: syz.3.1119 (pid 9635) Use of int in max_burst socket option. [ 344.344400][ T9635] Use struct sctp_assoc_value instead [ 345.809561][ T9660] tipc: Enabling of bearer rejected, already enabled [ 347.997332][ T4707] 0: reclassify loop, rule prio 0, protocol 800 [ 348.060703][ T9702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.138475][ T4707] 0: reclassify loop, rule prio 0, protocol 800 [ 348.436498][ T9708] tipc: Enabled bearer , priority 0 [ 348.438125][ T9708] device syzkaller0 entered promiscuous mode [ 348.491436][ T9711] vxfs: WRONG superblock magic 00000000 at 1 [ 348.493154][ T9711] vxfs: WRONG superblock magic 00000000 at 8 [ 348.494141][ T9711] vxfs: can't find superblock. [ 348.508351][ T9708] tipc: Resetting bearer [ 348.514072][ T9707] tipc: Resetting bearer [ 348.686554][ T9707] tipc: Disabling bearer [ 348.940645][ T9717] sctp: [Deprecated]: syz.0.1139 (pid 9717) Use of int in max_burst socket option. [ 348.940645][ T9717] Use struct sctp_assoc_value instead [ 353.037071][ T39] 0: reclassify loop, rule prio 0, protocol 800 [ 353.758301][ T4582] 0: reclassify loop, rule prio 0, protocol 800 [ 354.984572][ T9768] loop2: detected capacity change from 0 to 32768 [ 354.989899][ T9768] [ 354.990376][ T9768] ====================================================== [ 354.991560][ T9768] WARNING: possible circular locking dependency detected [ 354.992634][ T9768] syzkaller #0 Not tainted [ 354.993338][ T9768] ------------------------------------------------------ [ 354.994375][ T9768] syz.2.1151/9768 is trying to acquire lock: [ 354.995286][ T9768] ffff0000c09208e0 (&type->i_mutex_dir_key#2){++++}-{3:3}, at: lookup_slow+0x4c/0x80 [ 354.996893][ T9768] [ 354.996893][ T9768] but task is already holding lock: [ 354.998162][ T9768] ffff0000d47780e0 (&fs_devs->device_list_mutex){+.+.}-{3:3}, at: device_list_add+0x7cc/0x1be0 [ 354.999859][ T9768] [ 354.999859][ T9768] which lock already depends on the new lock. [ 354.999859][ T9768] [ 355.001529][ T9768] [ 355.001529][ T9768] the existing dependency chain (in reverse order) is: [ 355.002917][ T9768] [ 355.002917][ T9768] -> #6 (&fs_devs->device_list_mutex){+.+.}-{3:3}: [ 355.004458][ T9768] __mutex_lock_common+0x190/0x1f38 [ 355.005398][ T9768] mutex_lock_nested+0x38/0x44 [ 355.006232][ T9768] btrfs_run_dev_stats+0xf0/0xd00 [ 355.007100][ T9768] commit_cowonly_roots+0x16c/0x714 [ 355.007934][ T9768] btrfs_commit_transaction+0x10bc/0x29f0 [ 355.008943][ T9768] btrfs_rebuild_free_space_tree+0x2dc/0x6d4 [ 355.010041][ T9768] btrfs_start_pre_rw_mount+0x2c8/0x658 [ 355.011002][ T9768] open_ctree+0x1ae8/0x224c [ 355.011764][ T9768] btrfs_fill_super+0x1b4/0x2d4 [ 355.012595][ T9768] btrfs_mount_root+0x730/0x780 [ 355.013428][ T9768] legacy_get_tree+0xd4/0x16c [ 355.014219][ T9768] vfs_get_tree+0x90/0x274 [ 355.015056][ T9768] vfs_kern_mount+0xdc/0x178 [ 355.015857][ T9768] btrfs_mount+0x2a0/0x8dc [ 355.016666][ T9768] legacy_get_tree+0xd4/0x16c [ 355.017543][ T9768] vfs_get_tree+0x90/0x274 [ 355.018359][ T9768] do_new_mount+0x228/0x810 [ 355.019279][ T9768] path_mount+0x5b4/0xe78 [ 355.020070][ T9768] __arm64_sys_mount+0x49c/0x584 [ 355.020947][ T9768] invoke_syscall+0x98/0x2bc [ 355.021716][ T9768] el0_svc_common+0x138/0x258 [ 355.022608][ T9768] do_el0_svc+0x58/0x13c [ 355.023443][ T9768] el0_svc+0x58/0x138 [ 355.024161][ T9768] el0t_64_sync_handler+0x84/0xf0 [ 355.025000][ T9768] el0t_64_sync+0x18c/0x190 [ 355.025884][ T9768] [ 355.025884][ T9768] -> #5 (&fs_info->reloc_mutex){+.+.}-{3:3}: [ 355.027249][ T9768] __mutex_lock_common+0x190/0x1f38 [ 355.028099][ T9768] mutex_lock_nested+0x38/0x44 [ 355.028852][ T9768] start_transaction+0x434/0x104c [ 355.029796][ T9768] btrfs_join_transaction+0x30/0x40 [ 355.030791][ T9768] btrfs_finish_ordered_io+0x494/0x162c [ 355.031819][ T9768] finish_ordered_fn+0x20/0x30 [ 355.032586][ T9768] btrfs_work_helper+0x328/0xce4 [ 355.033438][ T9768] process_one_work+0x7f4/0x13a8 [ 355.034219][ T9768] worker_thread+0x8c8/0xfbc [ 355.035022][ T9768] kthread+0x250/0x2d8 [ 355.035844][ T9768] ret_from_fork+0x10/0x20 [ 355.036637][ T9768] [ 355.036637][ T9768] -> #4 (btrfs_trans_num_extwriters){++++}-{0:0}: [ 355.038072][ T9768] join_transaction+0x180/0xb6c [ 355.038820][ T9768] start_transaction+0x854/0x104c [ 355.039722][ T9768] btrfs_start_transaction+0x34/0x44 [ 355.040664][ T9768] btrfs_rebuild_free_space_tree+0xb0/0x6d4 [ 355.041648][ T9768] btrfs_start_pre_rw_mount+0x2c8/0x658 [ 355.042599][ T9768] open_ctree+0x1ae8/0x224c [ 355.043351][ T9768] btrfs_fill_super+0x1b4/0x2d4 [ 355.044143][ T9768] btrfs_mount_root+0x730/0x780 [ 355.044945][ T9768] legacy_get_tree+0xd4/0x16c [ 355.045743][ T9768] vfs_get_tree+0x90/0x274 [ 355.046610][ T9768] vfs_kern_mount+0xdc/0x178 [ 355.047418][ T9768] btrfs_mount+0x2a0/0x8dc [ 355.048186][ T9768] legacy_get_tree+0xd4/0x16c [ 355.048936][ T9768] vfs_get_tree+0x90/0x274 [ 355.049867][ T9768] do_new_mount+0x228/0x810 [ 355.050726][ T9768] path_mount+0x5b4/0xe78 [ 355.051485][ T9768] __arm64_sys_mount+0x49c/0x584 [ 355.052401][ T9768] invoke_syscall+0x98/0x2bc [ 355.053238][ T9768] el0_svc_common+0x138/0x258 [ 355.054087][ T9768] do_el0_svc+0x58/0x13c [ 355.054903][ T9768] el0_svc+0x58/0x138 [ 355.055654][ T9768] el0t_64_sync_handler+0x84/0xf0 [ 355.056546][ T9768] el0t_64_sync+0x18c/0x190 [ 355.057300][ T9768] [ 355.057300][ T9768] -> #3 (btrfs_trans_num_writers){++++}-{0:0}: [ 355.058689][ T9768] lock_release+0x308/0x910 [ 355.059510][ T9768] sb_end_intwrite+0x54/0x360 [ 355.060296][ T9768] __btrfs_end_transaction+0x1f4/0x5fc [ 355.061201][ T9768] btrfs_end_transaction+0x24/0x34 [ 355.062052][ T9768] btrfs_dirty_inode+0x16c/0x1c0 [ 355.062859][ T9768] btrfs_update_time+0x170/0x18c [ 355.063789][ T9768] __file_update_time+0xc0/0x220 [ 355.064735][ T9768] file_update_time+0x26c/0x2e0 [ 355.065569][ T9768] btrfs_page_mkwrite+0x394/0xb78 [ 355.066349][ T9768] do_page_mkwrite+0x13c/0x358 [ 355.067218][ T9768] wp_page_shared+0x148/0x550 [ 355.068041][ T9768] do_wp_page+0xca0/0xef0 [ 355.068842][ T9768] handle_mm_fault+0x133c/0x2fd4 [ 355.069757][ T9768] do_page_fault+0x310/0x99c [ 355.070566][ T9768] do_mem_abort+0x70/0x194 [ 355.071344][ T9768] el0_da+0x70/0x154 [ 355.072011][ T9768] el0t_64_sync_handler+0x90/0xf0 [ 355.073035][ T9768] el0t_64_sync+0x18c/0x190 [ 355.073822][ T9768] [ 355.073822][ T9768] -> #2 (sb_pagefaults#2){.+.+}-{0:0}: [ 355.075161][ T9768] btrfs_page_mkwrite+0x194/0xb78 [ 355.076089][ T9768] do_page_mkwrite+0x13c/0x358 [ 355.077025][ T9768] wp_page_shared+0x148/0x550 [ 355.077789][ T9768] do_wp_page+0xca0/0xef0 [ 355.078558][ T9768] handle_mm_fault+0x133c/0x2fd4 [ 355.079306][ T9768] do_page_fault+0x310/0x99c [ 355.080023][ T9768] do_mem_abort+0x70/0x194 [ 355.080727][ T9768] el0_da+0x70/0x154 [ 355.081412][ T9768] el0t_64_sync_handler+0x90/0xf0 [ 355.082316][ T9768] el0t_64_sync+0x18c/0x190 [ 355.083107][ T9768] [ 355.083107][ T9768] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 355.084289][ T9768] __might_fault+0xc4/0x124 [ 355.085038][ T9768] filldir64+0x2cc/0x8fc [ 355.085750][ T9768] dcache_readdir+0x140/0x62c [ 355.086585][ T9768] iterate_dir+0x1f0/0x4cc [ 355.087363][ T9768] __arm64_sys_getdents64+0x11c/0x318 [ 355.088360][ T9768] invoke_syscall+0x98/0x2bc [ 355.089191][ T9768] el0_svc_common+0x138/0x258 [ 355.090077][ T9768] do_el0_svc+0x58/0x13c [ 355.090813][ T9768] el0_svc+0x58/0x138 [ 355.091494][ T9768] el0t_64_sync_handler+0x84/0xf0 [ 355.092312][ T9768] el0t_64_sync+0x18c/0x190 [ 355.093039][ T9768] [ 355.093039][ T9768] -> #0 (&type->i_mutex_dir_key#2){++++}-{3:3}: [ 355.094320][ T9768] __lock_acquire+0x293c/0x6544 [ 355.095124][ T9768] lock_acquire+0x20c/0x644 [ 355.095874][ T9768] down_read+0x64/0x304 [ 355.096638][ T9768] lookup_slow+0x4c/0x80 [ 355.097447][ T9768] walk_component+0x270/0x364 [ 355.098282][ T9768] path_lookupat+0x13c/0x3d0 [ 355.099086][ T9768] filename_lookup+0x190/0x42c [ 355.099929][ T9768] kern_path+0x48/0x6c [ 355.100721][ T9768] device_list_add+0x1208/0x1be0 [ 355.101509][ T9768] btrfs_scan_one_device+0x364/0x570 [ 355.102392][ T9768] btrfs_mount_root+0x404/0x780 [ 355.103320][ T9768] legacy_get_tree+0xd4/0x16c [ 355.104148][ T9768] vfs_get_tree+0x90/0x274 [ 355.104902][ T9768] vfs_kern_mount+0xdc/0x178 [ 355.105741][ T9768] btrfs_mount+0x2a0/0x8dc [ 355.106459][ T9768] legacy_get_tree+0xd4/0x16c [ 355.107291][ T9768] vfs_get_tree+0x90/0x274 [ 355.108026][ T9768] do_new_mount+0x228/0x810 [ 355.108734][ T9768] path_mount+0x5b4/0xe78 [ 355.109498][ T9768] __arm64_sys_mount+0x49c/0x584 [ 355.110377][ T9768] invoke_syscall+0x98/0x2bc [ 355.111130][ T9768] el0_svc_common+0x138/0x258 [ 355.111969][ T9768] do_el0_svc+0x58/0x13c [ 355.112735][ T9768] el0_svc+0x58/0x138 [ 355.113465][ T9768] el0t_64_sync_handler+0x84/0xf0 [ 355.114286][ T9768] el0t_64_sync+0x18c/0x190 [ 355.115071][ T9768] [ 355.115071][ T9768] other info that might help us debug this: [ 355.115071][ T9768] [ 355.116758][ T9768] Chain exists of: [ 355.116758][ T9768] &type->i_mutex_dir_key#2 --> &fs_info->reloc_mutex --> &fs_devs->device_list_mutex [ 355.116758][ T9768] [ 355.119084][ T9768] Possible unsafe locking scenario: [ 355.119084][ T9768] [ 355.120173][ T9768] CPU0 CPU1 [ 355.121073][ T9768] ---- ---- [ 355.121993][ T9768] lock(&fs_devs->device_list_mutex); [ 355.122865][ T9768] lock(&fs_info->reloc_mutex); [ 355.124153][ T9768] lock(&fs_devs->device_list_mutex); [ 355.125459][ T9768] lock(&type->i_mutex_dir_key#2); [ 355.126300][ T9768] [ 355.126300][ T9768] *** DEADLOCK *** [ 355.126300][ T9768] [ 355.127578][ T9768] 2 locks held by syz.2.1151/9768: [ 355.128411][ T9768] #0: ffff8000157d2fa8 (uuid_mutex){+.+.}-{3:3}, at: btrfs_mount_root+0x1f4/0x780 [ 355.129858][ T9768] #1: ffff0000d47780e0 (&fs_devs->device_list_mutex){+.+.}-{3:3}, at: device_list_add+0x7cc/0x1be0 [ 355.131411][ T9768] [ 355.131411][ T9768] stack backtrace: [ 355.132373][ T9768] CPU: 0 PID: 9768 Comm: syz.2.1151 Not tainted syzkaller #0 [ 355.133566][ T9768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 355.135332][ T9768] Call trace: [ 355.135886][ T9768] dump_backtrace+0x1c8/0x1f4 [ 355.136630][ T9768] show_stack+0x2c/0x3c [ 355.137214][ T9768] __dump_stack+0x30/0x40 [ 355.137980][ T9768] dump_stack_lvl+0xf8/0x160 [ 355.138773][ T9768] dump_stack+0x1c/0x5c [ 355.139455][ T9768] print_circular_bug+0x148/0x1b0 [ 355.140258][ T9768] check_noncircular+0x240/0x2d4 [ 355.141034][ T9768] __lock_acquire+0x293c/0x6544 [ 355.141835][ T9768] lock_acquire+0x20c/0x644 [ 355.142633][ T9768] down_read+0x64/0x304 [ 355.143366][ T9768] lookup_slow+0x4c/0x80 [ 355.143996][ T9768] walk_component+0x270/0x364 [ 355.144718][ T9768] path_lookupat+0x13c/0x3d0 [ 355.145464][ T9768] filename_lookup+0x190/0x42c [ 355.146225][ T9768] kern_path+0x48/0x6c [ 355.146828][ T9768] device_list_add+0x1208/0x1be0 [ 355.147526][ T9768] btrfs_scan_one_device+0x364/0x570 [ 355.148395][ T9768] btrfs_mount_root+0x404/0x780 [ 355.149222][ T9768] legacy_get_tree+0xd4/0x16c [ 355.149872][ T9768] vfs_get_tree+0x90/0x274 [ 355.150610][ T9768] vfs_kern_mount+0xdc/0x178 [ 355.151342][ T9768] btrfs_mount+0x2a0/0x8dc [ 355.152089][ T9768] legacy_get_tree+0xd4/0x16c [ 355.152806][ T9768] vfs_get_tree+0x90/0x274 [ 355.153511][ T9768] do_new_mount+0x228/0x810 [ 355.154270][ T9768] path_mount+0x5b4/0xe78 [ 355.154947][ T9768] __arm64_sys_mount+0x49c/0x584 [ 355.155706][ T9768] invoke_syscall+0x98/0x2bc [ 355.156440][ T9768] el0_svc_common+0x138/0x258 [ 355.157212][ T9768] do_el0_svc+0x58/0x13c [ 355.157918][ T9768] el0_svc+0x58/0x138 [ 355.158526][ T9768] el0t_64_sync_handler+0x84/0xf0 [ 355.159269][ T9768] el0t_64_sync+0x18c/0x190 [ 355.460994][ T9768] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 355.462898][ T9768] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 355.464447][ T9768] BTRFS info (device loop2): turning off barriers [ 355.465635][ T9768] BTRFS info (device loop2): setting nodatasum [ 355.468593][ T9768] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 355.470280][ T9768] BTRFS info (device loop2): use zstd compression, level 3 [ 355.471583][ T9768] BTRFS info (device loop2): using free space tree [ 355.748677][ T4329] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 358.236732][ T4688] 0: reclassify loop, rule prio 0, protocol 800 [ 358.796107][ T4686] 0: reclassify loop, rule prio 0, protocol 800 [ 364.006086][ T4484] 0: reclassify loop, rule prio 0, protocol 800 [ 364.636111][ T4688] 0: reclassify loop, rule prio 0, protocol 800