last executing test programs: 1m14.008435998s ago: executing program 0 (id=130): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) clock_adjtime(0x41, &(0x7f0000000e00)={0xa627, 0x0, 0x4000000000000003}) 1m13.912066569s ago: executing program 0 (id=131): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xd, 0x4, 0x4, 0x6, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m13.73378938s ago: executing program 0 (id=134): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x0, 0x0, 0x300}, 0x9c) 1m13.61854132s ago: executing program 0 (id=135): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000580)={[{@lfs_mode}, {@inline_dentry}, {@acl}, {@grpjquota={'grpjquota', 0x3d, 'grpquota'}}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@acl}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@adaptive_mode}]}, 0x1, 0x5514, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, &(0x7f0000000480)={[{@grpquota}]}) 1m12.667069205s ago: executing program 0 (id=147): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000001080)='X', 0x1, 0x4048800, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4065, &(0x7f0000001200)=0xfe1) 1m11.453236631s ago: executing program 0 (id=159): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x40000}, 0x20) 1m11.381641431s ago: executing program 32 (id=159): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x40000}, 0x20) 1.925156813s ago: executing program 2 (id=1039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x38}}, 0x0) 1.885800313s ago: executing program 4 (id=1040): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 1.869975963s ago: executing program 2 (id=1041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x55}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdf}]}]}]}, 0x34}}, 0x0) 1.677223444s ago: executing program 2 (id=1043): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b87043000000000000000160af365040014000d0002008bc3a0e640e51753cd60bc24eab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.594291204s ago: executing program 2 (id=1046): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000040c0)=[{{&(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000003a40)=[{&(0x7f00000028c0)="f9", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.219111756s ago: executing program 4 (id=1052): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x125}, 0x14}}, 0x0) 1.114654736s ago: executing program 4 (id=1055): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000000)=0x1, 0x4) 988.555466ms ago: executing program 5 (id=1060): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0x0, 0x296, &(0x7f0000000540)="$eJzs3M1qE1EUwPFj0o80tU0WIiiIB92oi6GNL2CQFsSAUhtRF8LUTjRkTMrMWImI7c6tz1FcuhPUF+jGnQt30k0XCm66UCOdjzatQ6u2yYTm/4Myp3Pvydz5CmcGctfvvHpcq7hGxfQklVFJiSzLhkh+MwodC5cpPx6SdstycfT7pzO37t67XiyVpmZUp4uzlwuqOn723dPnr8998EZvvxl/Oyyr+fvr3wpfVk+unlr/NRt9esNTU+caDc+csy2dr7o1Q/WmbZmupdW6azk72it2Y2GhqWZ9fiy74Fiuq2a9qTWrqV5DPaep5kOzWlfDMHQsK/0m/c8Z5ZWZGbPYkcEgCSNxKx2naKZjG8sr3RgUAADoLUnV/4+qrlZdre9X/6eE+r9zqP+PkuNrEvsUuFn/Z8P7d8uln10cGQAAAAAAAAAAAAAAAAAAAAAAOIiNVivXarVy0TL6GxaRjIhE/yc9TnTGQc7/cPeHi0PW9sO9jIj9crG8WA6WQXuxIlWxxZKJQZEf/vUQCuLpa6WpCfXl5b29FOYvLZbT/vXh50fy8fmTQb7uzB+UbPv2C5KTE/I5Lr8Qmz8kF8635RuSk48PpCG2zPvX9Xb+i0nVqzdKu/JH/H4AAAAAABwFhm754/ndbzc0mjZkV3uwcvv9gOT2eT+w6/l6QE4PJLffAAAAAAD0E7f5rGbatuUQ7AiuiMiefZI+dCM9cqA6GKQ2z0HXt/41ujV64yAcarD2JNi1v+mc4JcSAAAAgI7YLvqTHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1rj2nAMmEXf03U/3/mHmvbXLr7ewgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0jt8BAAD//ysQG/U=") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 976.101756ms ago: executing program 4 (id=1061): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffc, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 861.234307ms ago: executing program 1 (id=1062): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x147) close(r0) 834.238467ms ago: executing program 5 (id=1064): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 733.887787ms ago: executing program 1 (id=1065): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_sigqueueinfo(r0, 0x31, &(0x7f0000000ac0)={0x0, 0xc4, 0xff7ffffe}) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0xfffffffffffffffd, 0x1}, 0x0) 712.797767ms ago: executing program 3 (id=1066): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @remote, 0x9}}, 0x0, 0x0, 0x1b, 0x0, "f100000000000000933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b989a2392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a700"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="e4", 0x1, 0x20000841, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 698.411167ms ago: executing program 5 (id=1067): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001980)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x5, 0x4, 0x9, 0x1, 0x6, 0x40}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffff8, 0xf2}}, @TCA_NETEM_RATE={0x14, 0x6, {0x9, 0x5, 0x7f, 0x3}}]}}}]}, 0x6c}}, 0x0) 673.220957ms ago: executing program 2 (id=1068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 598.369598ms ago: executing program 3 (id=1069): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)='z', 0x1}], 0x1) 564.567588ms ago: executing program 5 (id=1070): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x4c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x4c}}, 0x0) 563.088738ms ago: executing program 1 (id=1071): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002b00)=@newqdisc={0x4a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x63}, {0x458, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x12ed}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x4a8}}, 0x0) 485.317128ms ago: executing program 2 (id=1072): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 462.893958ms ago: executing program 5 (id=1073): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x5, &(0x7f0000000100)={[{@bsdgroups}, {@i_version}, {@usrquota}, {@dioread_nolock}, {@nobarrier}, {@errors_remount}, {@jqfmt_vfsold}]}, 0x1, 0x402, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000540)={[{@journal_checksum}, {@delalloc}, {@nomblk_io_submit}, {@dax_always}, {@resgid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nodiscard}, {@data_writeback}]}, 0x1, 0x24f, &(0x7f0000000600)="$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") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x1a80a1, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) 462.647488ms ago: executing program 3 (id=1074): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000800)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0xf, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 332.934448ms ago: executing program 3 (id=1075): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x147) close(r0) 332.684088ms ago: executing program 1 (id=1076): r0 = socket$inet(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @local, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x0, 0x10, "f79eb4cf48b5a5788fc15a45b5b1"}, {0x0, 0xf, "749018c9a54b61394327f11535"}]}]}}}}}}}, 0x0) 331.778398ms ago: executing program 3 (id=1077): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) ppoll(&(0x7f0000000000)=[{r0, 0x105}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 275.675099ms ago: executing program 3 (id=1078): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r0, 0x5509, 0x0) 253.102499ms ago: executing program 5 (id=1079): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000280)={[{@nossd_spread}, {@compress_force_algo={'compress-force', 0x3d, 'no'}}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400), 0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) 205.174079ms ago: executing program 1 (id=1089): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x0, 0x4, 'wrr\x00', 0x0, 0x80000}, 0x2c) sendmmsg$sock(r0, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x4) 43.849729ms ago: executing program 4 (id=1080): openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b406000000000000791090000000000061000000000000009500000000000000a43abba0b245385a1964b904e462de52978556ced37445a4cd61a7a0d25ddfd38b8b9a36c14ae1ee5ae29051b28b53a43bc2644f3f1689bf768e9d786b746b0025abb901765f30c1d039e73af80f39ba982e44fe40c17211db9c82e6da61712f41775115599d65c29cfcd0bffd10d2c62aebfbf41dd375c71938ddfaa1df3017a99ecbddbfee7f7abeba22c29a9cb001001079a87ed58d2cbaf30b8fe4b5fd1fb63bafef7d7bdd5b02e520202253ad81e40379623de900000000002d306a2ab944935390685cfc1e57a6e5d4a1d4456cd3631013f84654a5f1c38180a3d651ccaa9a5f751d07dbb8"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) 42.394369ms ago: executing program 1 (id=1081): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x11, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb3f7}, [@call={0x85, 0x0, 0x0, 0x17}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 4 (id=1082): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x90, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x0, 0x0, 0x6c, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0x0, 0x0, 0x3}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x7, 0x9, 0x2}}]}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004888}, 0x0) kernel console output (not intermixed with test programs): [ 48.089705][ T4297] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 48.089705][ T4297] [ 48.100359][ T4648] XFS (loop0): Quotacheck needed: Please wait. [ 48.196323][ T4648] XFS (loop0): Quotacheck: Done. [ 48.253046][ T4664] loop2: detected capacity change from 0 to 32768 [ 48.266876][ T4664] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.73 (4664) [ 48.284826][ T4664] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 48.287027][ T4664] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 48.288778][ T4664] BTRFS info (device loop2): using free space tree [ 48.429513][ T4664] BTRFS info (device loop2): enabling ssd optimizations [ 48.600744][ T4304] XFS (loop0): Unmounting Filesystem [ 48.666727][ T4664] capability: warning: `syz.2.73' uses 32-bit capabilities (legacy support in use) [ 48.677073][ T4703] loop3: detected capacity change from 0 to 8 [ 48.749479][ T4311] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 49.234991][ T4717] loop4: detected capacity change from 0 to 256 [ 49.519727][ T4725] loop1: detected capacity change from 0 to 2048 [ 49.558951][ T4725] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 49.673889][ T4715] loop0: detected capacity change from 0 to 40427 [ 49.690555][ T4731] Zero length message leads to an empty skb [ 49.715911][ T4715] F2FS-fs (loop0): build fault injection attr: rate: 694, type: 0x3ffff [ 49.719098][ T4715] F2FS-fs (loop0): invalid crc value [ 49.730154][ T4733] netlink: 'syz.2.95': attribute type 5 has an invalid length. [ 49.751368][ T4715] F2FS-fs (loop0): Found nat_bits in checkpoint [ 49.795398][ T4715] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 49.959411][ T4744] device macvlan2 entered promiscuous mode [ 49.960805][ T4744] device virt_wifi0 entered promiscuous mode [ 49.963429][ T4744] team0: Port device macvlan2 added [ 50.147017][ T4722] loop4: detected capacity change from 0 to 32768 [ 50.222973][ T4722] XFS (loop4): Mounting V5 Filesystem [ 50.301958][ T4737] loop1: detected capacity change from 0 to 32768 [ 50.308561][ T4737] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.94 (4737) [ 50.313588][ T4722] XFS (loop4): Ending clean mount [ 50.317906][ T4737] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 50.320133][ T4737] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 50.323226][ T4737] BTRFS info (device loop1): use no compression [ 50.329778][ T4737] BTRFS info (device loop1): force zlib compression, level 3 [ 50.332279][ T4737] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 50.338685][ T4737] BTRFS info (device loop1): use lzo compression, level 0 [ 50.344599][ T4737] BTRFS info (device loop1): turning on flush-on-commit [ 50.347978][ T4765] bond0: Unable to set down delay as MII monitoring is disabled [ 50.350679][ T4737] BTRFS info (device loop1): enabling auto defrag [ 50.352577][ T4737] BTRFS info (device loop1): using free space tree [ 50.386527][ T4773] loop2: detected capacity change from 0 to 256 [ 50.430615][ T4307] XFS (loop4): Unmounting Filesystem [ 50.556428][ T4737] BTRFS info (device loop1): enabling ssd optimizations [ 50.605997][ T4298] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 50.636732][ T55] tipc: Subscription rejected, illegal request [ 50.831686][ T4802] netlink: 40 bytes leftover after parsing attributes in process `syz.2.113'. [ 50.833588][ T4802] netlink: 40 bytes leftover after parsing attributes in process `syz.2.113'. [ 51.093152][ T4814] loop0: detected capacity change from 0 to 512 [ 51.144880][ T4814] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.119: invalid indirect mapped block 2185560079 (level 0) [ 51.158842][ T4814] EXT4-fs (loop0): Remounting filesystem read-only [ 51.166490][ T4814] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.119: invalid indirect mapped block 2683928664 (level 1) [ 51.174812][ T4814] EXT4-fs (loop0): Remounting filesystem read-only [ 51.189189][ T4814] EXT4-fs (loop0): 1 truncate cleaned up [ 51.190432][ T4814] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 51.326868][ T4304] EXT4-fs (loop0): unmounting filesystem. [ 51.503030][ T4800] loop1: detected capacity change from 0 to 32768 [ 51.542881][ T4800] XFS: ikeep mount option is deprecated. [ 51.602781][ T4800] XFS (loop1): Mounting V5 Filesystem [ 51.644108][ T4800] XFS (loop1): Ending clean mount [ 51.680064][ T4837] loop2: detected capacity change from 0 to 1024 [ 51.686452][ T4833] Illegal XDP return value 4294967294 on prog (id 7) dev N/A, expect packet loss! [ 51.694596][ T4800] XFS (loop1): Quotacheck needed: Please wait. [ 51.776676][ T4837] hfsplus: bad catalog folder thread [ 51.780595][ T4820] loop4: detected capacity change from 0 to 32768 [ 51.784128][ T4800] XFS (loop1): Quotacheck: Done. [ 51.802655][ T4820] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.120 (4820) [ 51.834029][ T4820] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 51.843114][ T4820] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 51.844852][ T4820] BTRFS info (device loop4): using free space tree [ 51.971081][ T4298] XFS (loop1): Unmounting Filesystem [ 52.201014][ T4798] loop3: detected capacity change from 0 to 65536 [ 52.209154][ T4820] BTRFS info (device loop4): enabling ssd optimizations [ 52.245696][ T4798] XFS (loop3): Mounting V5 Filesystem [ 52.304817][ T4798] XFS (loop3): Ending clean mount [ 52.381246][ T4307] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 52.481217][ T4798] XFS (loop3): EXPERIMENTAL online shrink feature in use. Use at your own risk! [ 52.501642][ T4877] loop2: detected capacity change from 0 to 2048 [ 52.571563][ T4877] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.686336][ T4297] XFS (loop3): Unmounting Filesystem [ 52.724286][ T4896] loop1: detected capacity change from 0 to 4096 [ 52.772219][ T4896] ntfs: volume version 3.1. [ 52.803489][ T4311] EXT4-fs (loop2): unmounting filesystem. [ 53.097519][ T4906] Soft offlining pfn 0x13ac00 at process virtual address 0x20000000 [ 53.133119][ T4906] Soft offlining pfn 0x13a800 at process virtual address 0x20200000 [ 53.192863][ T4906] Memory failure: 0x13a800: unhandlable page. [ 53.199640][ T4889] loop0: detected capacity change from 0 to 40427 [ 53.205070][ T4909] loop4: detected capacity change from 0 to 4096 [ 53.212128][ T4889] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 1) [ 53.215056][ T4909] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 53.217073][ T4889] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 53.231002][ T4889] F2FS-fs (loop0): invalid crc value [ 53.249057][ T4889] F2FS-fs (loop0): Found nat_bits in checkpoint [ 53.275506][ T4889] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 53.301474][ T4889] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 53.303161][ T4889] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 53.342138][ T4914] loop3: detected capacity change from 0 to 256 [ 53.360743][ T4914] MINIX-fs: mounting file system with errors, running fsck is recommended [ 53.375884][ T4909] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 53.378149][ T4909] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 53.400116][ T4909] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 53.442332][ T4307] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 53.445938][ T4307] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 53.463071][ T4304] syz-executor: attempt to access beyond end of device [ 53.463071][ T4304] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 53.481997][ T4304] syz-executor: attempt to access beyond end of device [ 53.481997][ T4304] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 53.553101][ T4304] syz-executor: attempt to access beyond end of device [ 53.553101][ T4304] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 53.929588][ T4929] loop2: detected capacity change from 0 to 256 [ 53.965390][ T4929] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 54.123125][ T4931] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 54.442502][ T4943] loop2: detected capacity change from 0 to 512 [ 54.455301][ T4943] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.471630][ T4943] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 54.473132][ T4943] System zones: 1-12 [ 54.476123][ T4943] EXT4-fs (loop2): 1 truncate cleaned up [ 54.477232][ T4943] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 54.527425][ T4936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.529441][ T4936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.643250][ T4939] loop4: detected capacity change from 0 to 40427 [ 54.684742][ T4939] F2FS-fs (loop4): Found nat_bits in checkpoint [ 54.711714][ T4311] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 54.716357][ T4939] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 54.737346][ T4311] EXT4-fs (loop2): unmounting filesystem. [ 54.813626][ T4955] loop2: detected capacity change from 0 to 64 [ 54.899234][ T4955] Trying to free block not in datazone [ 54.912686][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.075283][ T4299] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.078782][ T4299] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.081033][ T4299] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.085671][ T4299] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.088971][ T4299] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.090929][ T4299] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.112657][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.277055][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.451680][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.467560][ T4983] loop2: detected capacity change from 0 to 512 [ 55.469792][ T4983] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.532247][ T4983] EXT4-fs (loop2): 1 truncate cleaned up [ 55.533482][ T4983] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 55.729456][ T4311] EXT4-fs (loop2): unmounting filesystem. [ 55.852617][ T4999] loop2: detected capacity change from 0 to 512 [ 55.893959][ T4999] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.178: iget: bad i_size value: -67835469387268086 [ 55.907704][ T4999] EXT4-fs (loop2): Remounting filesystem read-only [ 55.909170][ T4999] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.178: couldn't read orphan inode 15 (err -117) [ 55.920261][ T4999] EXT4-fs (loop2): Remounting filesystem read-only [ 55.923664][ T4960] chnl_net:caif_netlink_parms(): no params data found [ 55.939464][ T4999] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 56.073587][ T4989] loop3: detected capacity change from 0 to 32768 [ 56.082897][ T4989] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.174 (4989) [ 56.093431][ T4989] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 56.100795][ T4989] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 56.101306][ T4311] EXT4-fs (loop2): unmounting filesystem. [ 56.102756][ T4989] BTRFS info (device loop3): using free space tree [ 56.232868][ T5034] loop4: detected capacity change from 0 to 512 [ 56.241600][ T5034] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 56.260250][ T5034] syz.4.183: attempt to access beyond end of device [ 56.260250][ T5034] loop4: rw=0, sector=3606377190, nr_sectors = 2 limit=512 [ 56.264938][ T5034] EXT2-fs (loop4): error: ext2_free_blocks: Freeing blocks not in datazone - block = 1701604449, count = 1 [ 56.274568][ T5034] EXT2-fs (loop4): error: ext2_free_blocks: Freeing blocks not in datazone - block = 29554, count = 1 [ 56.274792][ T4960] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.293281][ T4960] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.295807][ T4960] device bridge_slave_0 entered promiscuous mode [ 56.351960][ T4960] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.353501][ T4960] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.356731][ T4960] device bridge_slave_1 entered promiscuous mode [ 56.372440][ T4989] BTRFS info (device loop3): enabling ssd optimizations [ 56.585709][ T4960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.591809][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 56.644004][ T4297] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 56.717270][ T4960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.804190][ T5054] netlink: 'syz.1.187': attribute type 1 has an invalid length. [ 56.805977][ T5054] netlink: 'syz.1.187': attribute type 2 has an invalid length. [ 56.807879][ T5054] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 56.844735][ T5045] loop2: detected capacity change from 0 to 32768 [ 56.891689][ T4960] team0: Port device team_slave_0 added [ 56.911003][ T5045] I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.913118][ T5045] lbmIODone: I/O error in JFS log [ 56.914405][ T5045] *** Log Format Error ! *** [ 56.930015][ T5045] lmLogInit: exit(-22) [ 56.931005][ T5045] lmLogOpen: exit(-22) [ 56.931039][ T4960] team0: Port device team_slave_1 added [ 57.040238][ T4960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.048145][ T4960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.068387][ T4960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.135765][ T4299] Bluetooth: hci2: command 0x0409 tx timeout [ 57.142370][ T4960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.143796][ T4960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.159922][ T4960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.162624][ T5065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'. [ 57.244244][ T5057] loop3: detected capacity change from 0 to 32768 [ 57.255556][ T5057] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop3 scanned by syz.3.188 (5057) [ 57.261441][ T5057] BTRFS info (device loop3): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 57.263470][ T5057] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 57.272800][ T5057] BTRFS info (device loop3): disabling tree log [ 57.274158][ T5057] BTRFS info (device loop3): turning on sync discard [ 57.275551][ T5057] BTRFS info (device loop3): force clearing of disk cache [ 57.280220][ T5057] BTRFS info (device loop3): enabling ssd optimizations [ 57.281608][ T5057] BTRFS info (device loop3): using spread ssd allocation scheme [ 57.283511][ T5057] BTRFS info (device loop3): using free space tree [ 57.342344][ T4960] device hsr_slave_0 entered promiscuous mode [ 57.385670][ T4960] device hsr_slave_1 entered promiscuous mode [ 57.425434][ T4960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.427041][ T4960] Cannot create hsr debugfs directory [ 57.477527][ T5057] BTRFS info (device loop3): rebuilding free space tree [ 57.502809][ T5090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'. [ 57.506256][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.587656][ T4297] BTRFS info (device loop3): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 57.775538][ T4626] atkbd serio0: keyboard reset failed on [ 57.887385][ T5114] loop2: detected capacity change from 0 to 512 [ 57.896758][ T5114] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.930722][ T5114] EXT4-fs (loop2): 1 truncate cleaned up [ 57.932115][ T5114] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 58.114748][ T4311] EXT4-fs (loop2): unmounting filesystem. [ 58.613063][ T5151] loop3: detected capacity change from 0 to 2048 [ 58.640178][ T5151] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 58.669588][ T5151] fs-verity: sha512 using implementation "sha512-arm64" [ 58.683081][ T5151] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.212: bg 0: block 345: padding at end of block bitmap is not set [ 58.688349][ T4960] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.711013][ T5151] fs-verity (loop3, inode 13): Error -117 writing Merkle tree block 0 [ 58.712915][ T5151] fs-verity (loop3, inode 13): Error -117 building Merkle tree [ 58.746336][ T5158] loop4: detected capacity change from 0 to 512 [ 58.753556][ T5158] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.798433][ T5158] EXT4-fs (loop4): 1 truncate cleaned up [ 58.799686][ T5158] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 58.816534][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 58.855894][ T39] device hsr_slave_0 left promiscuous mode [ 58.921532][ T5163] mmap: syz.2.216 (5163) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.938249][ T39] device hsr_slave_1 left promiscuous mode [ 58.941167][ T5167] loop3: detected capacity change from 0 to 8 [ 58.963055][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 59.036688][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.038418][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.061804][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.063387][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.088322][ T39] device bridge_slave_1 left promiscuous mode [ 59.090736][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.207470][ T39] device bridge_slave_0 left promiscuous mode [ 59.209539][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.215916][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 59.445758][ T39] device veth1_macvtap left promiscuous mode [ 59.447350][ T39] device veth0_macvtap left promiscuous mode [ 59.448612][ T39] device veth1_vlan left promiscuous mode [ 59.449865][ T39] device veth0_vlan left promiscuous mode [ 59.642421][ T5171] loop4: detected capacity change from 0 to 32768 [ 59.744760][ T5171] XFS (loop4): Mounting V5 Filesystem [ 59.813851][ T5171] XFS (loop4): Ending clean mount [ 59.858001][ T5184] loop2: detected capacity change from 0 to 32768 [ 59.888958][ T5184] find_entry called with index = 0 [ 59.902551][ T5184] find_entry called with index = 0 [ 59.976057][ T4307] XFS (loop4): Unmounting Filesystem [ 60.445975][ T5202] support for cryptoloop has been removed. Use dm-crypt instead. [ 60.498694][ T5204] loop4: detected capacity change from 0 to 1024 [ 60.554839][ T55] hfsplus: b-tree write err: -5, ino 4 [ 60.819651][ T5206] loop4: detected capacity change from 0 to 40427 [ 60.827815][ T5206] F2FS-fs (loop4): Found nat_bits in checkpoint [ 60.846995][ T5206] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 60.890279][ T4307] syz-executor: attempt to access beyond end of device [ 60.890279][ T4307] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 61.305358][ T4299] Bluetooth: hci2: command 0x040f tx timeout [ 61.419283][ T39] team0 (unregistering): Port device team_slave_1 removed [ 61.609556][ T39] team0 (unregistering): Port device team_slave_0 removed [ 61.807901][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.006187][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.386095][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 64.347183][ T39] bond0 (unregistering): Released all slaves [ 64.498158][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.499613][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.568765][ T4960] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 64.607962][ T4960] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.646967][ T4960] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.715317][ T5217] netlink: 40 bytes leftover after parsing attributes in process `syz.4.236'. [ 65.026635][ T4960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.028322][ T5234] netlink: 'syz.2.242': attribute type 10 has an invalid length. [ 65.056635][ T5234] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 65.089994][ T4960] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.091704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.093611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.123020][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.125166][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.127528][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.128910][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.130619][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.143071][ T5242] (unnamed net_device) (uninitialized): (slave veth1_macvtap): Device is not bonding slave [ 65.145123][ T5242] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1_macvtap) [ 65.164035][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.166324][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.168219][ T1668] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.169618][ T1668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.172593][ T5234] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 65.220570][ T5244] tipc: Invalid UDP bearer configuration [ 65.220603][ T5244] tipc: Enabling of bearer rejected, failed to enable media [ 65.223588][ T283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.240011][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.263437][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.289355][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.316523][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.318508][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.320887][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.322966][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.325079][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.354851][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.373293][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.397539][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.417817][ T5255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.250'. [ 65.483164][ T5258] loop1: detected capacity change from 0 to 2048 [ 65.565607][ T5265] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.568597][ T5263] loop2: detected capacity change from 0 to 1024 [ 65.662348][ T5263] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 65.681225][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.682957][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.687201][ T4960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.950344][ T5250] loop3: detected capacity change from 0 to 32768 [ 66.029126][ T4311] EXT4-fs (loop2): unmounting filesystem. [ 66.092028][ T5250] XFS (loop3): Mounting V5 Filesystem [ 66.214836][ T5306] loop4: detected capacity change from 0 to 512 [ 66.226134][ T5306] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.231557][ T5306] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.242718][ T5250] XFS (loop3): Ending clean mount [ 66.264598][ T5311] netlink: 'syz.1.259': attribute type 10 has an invalid length. [ 66.280296][ T5306] EXT4-fs (loop4): 1 truncate cleaned up [ 66.281595][ T5306] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 66.283005][ T5311] device veth1_macvtap left promiscuous mode [ 66.295877][ T5250] XFS (loop3): Quotacheck needed: Please wait. [ 66.376194][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.378310][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.382399][ T5250] XFS (loop3): Quotacheck: Done. [ 66.427701][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.429831][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.431984][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.434578][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.456364][ T4960] device veth0_vlan entered promiscuous mode [ 66.486786][ T4960] device veth1_vlan entered promiscuous mode [ 66.497673][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 66.538979][ T5313] loop2: detected capacity change from 0 to 4096 [ 66.548641][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.550792][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.562851][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.564983][ T5313] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 66.566067][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.567683][ T5313] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 66.574544][ T4960] device veth0_macvtap entered promiscuous mode [ 66.583586][ T5313] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 66.593783][ T5313] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 66.610151][ T5313] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 66.623849][ T4960] device veth1_macvtap entered promiscuous mode [ 66.630694][ T5313] ntfs: volume version 3.1. [ 66.642889][ T5313] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 66.645420][ T5313] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 66.662372][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.664528][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.681186][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.683461][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.685520][ T5313] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 66.685540][ T5313] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 66.689983][ T5313] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 66.691928][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.702861][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.704855][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.721117][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.753236][ T4960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.756985][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.759192][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.761248][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.764602][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.776186][ T4297] XFS (loop3): Unmounting Filesystem [ 66.776358][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.799206][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.801053][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.818512][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.820373][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.822408][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.824359][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.852034][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.872005][ T4960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.874782][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.878761][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.906129][ T4960] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.908022][ T4960] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.909719][ T4960] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.911499][ T4960] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.102613][ T5340] hugetlbfs: syz.1.269 (5340): Using mlock ulimits for SHM_HUGETLB is obsolete [ 67.113972][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.122553][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.156856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.193294][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.199174][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.203413][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.347545][ T5351] loop3: detected capacity change from 0 to 64 [ 67.421676][ T5351] syz.3.264: attempt to access beyond end of device [ 67.421676][ T5351] loop3: rw=0, sector=32783, nr_sectors = 1 limit=64 [ 67.642025][ T113] kernel write not supported for file /snd/seq (pid: 113 comm: kworker/0:2) [ 68.043843][ T5372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.278'. [ 68.774303][ T5424] loop5: detected capacity change from 0 to 4096 [ 68.941690][ T5437] loop2: detected capacity change from 0 to 764 [ 68.947065][ T5424] ntfs3: loop5: ino=5, "/" attr_set_size [ 68.948795][ T5424] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 69.023984][ T5438] loop1: detected capacity change from 0 to 4096 [ 69.491117][ T5460] loop3: detected capacity change from 0 to 512 [ 69.492888][ T5460] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.503367][ T5461] loop1: detected capacity change from 0 to 2048 [ 69.505009][ T5460] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 69.526503][ T5460] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 69.528174][ T5460] System zones: 1-12 [ 69.534981][ T5460] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.309: corrupted in-inode xattr [ 69.573082][ T5460] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.309: couldn't read orphan inode 15 (err -117) [ 69.589255][ T5461] loop1: p1 < > p3 [ 69.591522][ T5461] loop1: p3 size 134217728 extends beyond EOD, truncated [ 69.625129][ T5460] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 69.629965][ T3421] cfg80211: failed to load regulatory.db [ 69.821744][ T5303] udevd[5303]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 69.857836][ T5303] udevd[5303]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 70.140931][ T5479] syz.1.313 (5479): drop_caches: 2 [ 70.166478][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 70.274322][ T5463] loop2: detected capacity change from 0 to 40427 [ 70.352637][ T5463] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 70.372689][ T5463] F2FS-fs (loop2): invalid crc value [ 70.382376][ T5463] F2FS-fs (loop2): Found nat_bits in checkpoint [ 70.457692][ T5463] F2FS-fs (loop2): Start checkpoint disabled! [ 70.505392][ T5463] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 70.506539][ T5479] syz.1.313 (5479): drop_caches: 2 [ 70.529858][ T5476] loop5: detected capacity change from 0 to 32768 [ 70.618577][ T5463] F2FS-fs (loop2) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x278/0x55c [ 70.624385][ T5463] syz.2.310: attempt to access beyond end of device [ 70.624385][ T5463] loop2: rw=2049, sector=77824, nr_sectors = 408 limit=40427 [ 70.669629][ T5476] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 70.672378][ T5476] XFS (loop5): Mounting V5 Filesystem [ 70.849423][ T5476] XFS (loop5): Ending clean mount [ 70.853925][ T5476] XFS (loop5): Quotacheck needed: Please wait. [ 70.895013][ T11] kworker/u4:1: attempt to access beyond end of device [ 70.895013][ T11] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 70.902187][ T5476] XFS (loop5): Quotacheck: Done. [ 71.087611][ T4960] XFS (loop5): Unmounting Filesystem [ 71.182869][ T5516] loop4: detected capacity change from 0 to 512 [ 71.257040][ T5516] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.321: inode #1: comm syz.4.321: iget: illegal inode # [ 71.263260][ T5516] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.321: error while reading EA inode 1 err=-117 [ 71.289505][ T5516] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.321: inode #1: comm syz.4.321: iget: illegal inode # [ 71.294008][ T5516] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.321: error while reading EA inode 1 err=-117 [ 71.335723][ T5516] EXT4-fs (loop4): 1 orphan inode deleted [ 71.336921][ T5516] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 71.517022][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 71.587533][ T5523] loop3: detected capacity change from 0 to 4096 [ 71.602242][ T5523] __ntfs_error: 6 callbacks suppressed [ 71.602256][ T5523] ntfs: (device loop3): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 71.627955][ T5523] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 71.629804][ T5523] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 71.632458][ T5523] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 71.658753][ T5523] ntfs: volume version 3.1. [ 71.878238][ T5534] syz.4.326 (5534): drop_caches: 2 [ 71.879547][ T5534] syz.4.326 (5534): drop_caches: 2 [ 71.955327][ T5514] loop1: detected capacity change from 0 to 32768 [ 71.989645][ T5514] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.319 (5514) [ 71.996703][ T5514] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 71.998888][ T5514] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 72.014616][ T5514] BTRFS info (device loop1): use no compression [ 72.025227][ T5514] BTRFS info (device loop1): force clearing of disk cache [ 72.026603][ T5514] BTRFS info (device loop1): setting nodatasum [ 72.027822][ T5514] BTRFS info (device loop1): allowing degraded mounts [ 72.029174][ T5514] BTRFS info (device loop1): enabling disk space caching [ 72.030528][ T5514] BTRFS info (device loop1): disk space caching is enabled [ 72.189805][ T5514] BTRFS info (device loop1): rebuilding free space tree [ 72.200185][ T5514] BTRFS info (device loop1): disabling free space tree [ 72.206480][ T5514] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 72.216253][ T5514] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 72.221863][ T5521] loop2: detected capacity change from 0 to 40427 [ 72.245134][ T5521] F2FS-fs (loop2): Found nat_bits in checkpoint [ 72.279094][ T5521] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 72.325637][ T4311] syz-executor: attempt to access beyond end of device [ 72.325637][ T4311] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 72.328900][ T5514] BTRFS info (device loop1): balance: start -d -m [ 72.343590][ T5514] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 72.361674][ T4297] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 72.442334][ T5514] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 72.613824][ T5514] BTRFS info (device loop1): balance: canceled [ 72.640187][ T5567] loop3: detected capacity change from 0 to 1024 [ 72.670668][ T5536] loop4: detected capacity change from 0 to 40427 [ 72.681427][ T5536] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 72.691032][ T4298] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 72.697696][ T5536] F2FS-fs (loop4): invalid crc value [ 72.715120][ T5536] F2FS-fs (loop4): Found nat_bits in checkpoint [ 72.775671][ T5536] F2FS-fs (loop4): Start checkpoint disabled! [ 72.811105][ T5536] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 72.873974][ T5536] F2FS-fs (loop4) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x278/0x55c [ 72.929436][ T5536] syz.4.328: attempt to access beyond end of device [ 72.929436][ T5536] loop4: rw=2049, sector=77824, nr_sectors = 408 limit=40427 [ 73.021386][ T4971] hfsplus: b-tree write err: -5, ino 4 [ 73.124410][ T4971] kworker/u4:7: attempt to access beyond end of device [ 73.124410][ T4971] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 73.180585][ T5587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'. [ 73.222734][ T5585] syz.5.337 (5585): drop_caches: 2 [ 73.257738][ T5585] syz.5.337 (5585): drop_caches: 2 [ 73.799583][ T5596] loop3: detected capacity change from 0 to 32768 [ 73.811547][ T5596] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.342 (5596) [ 73.832172][ T5596] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 73.834554][ T5596] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 73.838315][ T5596] BTRFS info (device loop3): use no compression [ 73.840819][ T5596] BTRFS info (device loop3): force clearing of disk cache [ 73.849944][ T5596] BTRFS info (device loop3): setting nodatasum [ 73.854681][ T5596] BTRFS info (device loop3): allowing degraded mounts [ 73.858731][ T5596] BTRFS info (device loop3): enabling disk space caching [ 73.862459][ T5596] BTRFS info (device loop3): disk space caching is enabled [ 73.931758][ T5592] loop2: detected capacity change from 0 to 40427 [ 73.944350][ T5592] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 73.952367][ T5592] F2FS-fs (loop2): invalid crc value [ 73.963326][ T5592] F2FS-fs (loop2): Found nat_bits in checkpoint [ 74.013484][ T5592] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 74.050217][ T5596] BTRFS info (device loop3): rebuilding free space tree [ 74.065110][ T5596] BTRFS info (device loop3): disabling free space tree [ 74.066755][ T5596] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 74.068682][ T5596] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 74.123541][ T5596] BTRFS info (device loop3): balance: start -d -m [ 74.126228][ T5596] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 74.132067][ T4311] syz-executor: attempt to access beyond end of device [ 74.132067][ T4311] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 74.170496][ T5596] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 74.242264][ T5614] loop4: detected capacity change from 0 to 32768 [ 74.258234][ T5596] BTRFS info (device loop3): found 9 extents, stage: move data extents [ 74.312637][ T5614] XFS (loop4): Mounting V5 Filesystem [ 74.333073][ T5596] BTRFS info (device loop3): found 1 extents, stage: update data pointers [ 74.383107][ T5596] BTRFS info (device loop3): balance: ended with status: 0 [ 74.426723][ T5645] loop2: detected capacity change from 0 to 16 [ 74.433149][ T5614] XFS (loop4): Ending clean mount [ 74.434627][ T4297] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 74.522844][ T5645] erofs: (device loop2): mounted with root inode @ nid 36. [ 74.622942][ T4307] XFS (loop4): Unmounting Filesystem [ 75.172274][ T5647] loop1: detected capacity change from 0 to 40427 [ 75.191971][ T5664] loop5: detected capacity change from 0 to 2048 [ 75.211675][ T5647] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 75.216206][ T5647] F2FS-fs (loop1): invalid crc value [ 75.224367][ T5664] EXT4-fs: Ignoring removed i_version option [ 75.226623][ T5647] F2FS-fs (loop1): Found nat_bits in checkpoint [ 75.234067][ T5664] EXT4-fs: Ignoring removed nobh option [ 75.272674][ T5647] F2FS-fs (loop1): Start checkpoint disabled! [ 75.289904][ T5647] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 75.316282][ T5664] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 75.341732][ T5647] F2FS-fs (loop1) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x278/0x55c [ 75.351426][ T5647] syz.1.349: attempt to access beyond end of device [ 75.351426][ T5647] loop1: rw=2049, sector=77824, nr_sectors = 408 limit=40427 [ 75.429545][ T5653] loop2: detected capacity change from 0 to 32768 [ 75.487678][ T5664] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.518315][ T5680] loop3: detected capacity change from 0 to 256 [ 75.527528][ T4971] kworker/u4:7: attempt to access beyond end of device [ 75.527528][ T4971] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 75.549270][ T5653] XFS (loop2): Mounting V5 Filesystem [ 75.609906][ T5653] XFS (loop2): Ending clean mount [ 75.612380][ T5653] XFS (loop2): Quotacheck needed: Please wait. [ 75.613687][ T5680] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 75.635848][ T5665] loop4: detected capacity change from 0 to 32768 [ 75.645591][ T5665] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.352 (5665) [ 75.654297][ T5665] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 75.657031][ T5665] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 75.658775][ T5665] BTRFS info (device loop4): using free space tree [ 75.658925][ T4960] EXT4-fs (loop5): unmounting filesystem. [ 75.718942][ T5653] XFS (loop2): Quotacheck: Done. [ 75.813642][ T5695] loop5: detected capacity change from 0 to 2048 [ 75.868097][ T4311] XFS (loop2): Unmounting Filesystem [ 75.886533][ T5695] loop5: p1 < > p4 [ 75.888333][ T5695] loop5: p4 size 8388608 extends beyond EOD, truncated [ 75.902051][ T3915] loop5: p1 < > p4 [ 75.904414][ T3915] loop5: p4 size 8388608 extends beyond EOD, truncated [ 75.975127][ T5665] BTRFS info (device loop4): enabling ssd optimizations [ 76.012003][ T5704] loop3: detected capacity change from 0 to 4096 [ 76.030244][ T5704] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 76.089019][ T5704] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 76.097491][ T5704] ntfs3: loop3: Failed to load $Extend. [ 76.356215][ T5720] loop1: detected capacity change from 0 to 1024 [ 76.358101][ T5720] EXT4-fs: inline encryption not supported [ 76.369601][ T5720] EXT4-fs: Mount option(s) incompatible with ext3 [ 76.515559][ T4307] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 76.624179][ T5483] udevd[5483]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 76.657547][ T5303] udevd[5303]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 76.757357][ T5740] loop1: detected capacity change from 0 to 64 [ 77.035141][ T5730] loop5: detected capacity change from 0 to 32768 [ 77.440112][ T5741] loop2: detected capacity change from 0 to 32768 [ 77.559024][ T5744] loop4: detected capacity change from 0 to 32768 [ 77.570596][ T5744] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.375 (5744) [ 77.579527][ T5744] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 77.614667][ T5744] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 77.618408][ T5744] BTRFS info (device loop4): use zlib compression, level 3 [ 77.619965][ T5744] BTRFS info (device loop4): using free space tree [ 77.638515][ T5742] loop3: detected capacity change from 0 to 40427 [ 77.640963][ T5742] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 77.670045][ T5742] F2FS-fs (loop3): invalid crc value [ 77.677059][ T5749] loop1: detected capacity change from 0 to 32768 [ 77.678748][ T5749] XFS: noikeep mount option is deprecated. [ 77.700692][ T5742] F2FS-fs (loop3): Found nat_bits in checkpoint [ 77.751113][ T5742] F2FS-fs (loop3): Start checkpoint disabled! [ 77.774858][ T5749] XFS (loop1): Mounting V5 Filesystem [ 77.778409][ T5742] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 77.791451][ T5776] netlink: 'syz.5.382': attribute type 32 has an invalid length. [ 77.886595][ T5788] loop5: detected capacity change from 0 to 512 [ 77.902398][ T5742] F2FS-fs (loop3) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x278/0x55c [ 77.917924][ T5749] XFS (loop1): Ending clean mount [ 77.919504][ T5784] loop2: detected capacity change from 0 to 1024 [ 77.922887][ T5749] XFS (loop1): Quotacheck needed: Please wait. [ 77.926008][ T5788] EXT2-fs (loop5): warning: mounting ext3 filesystem as ext2 [ 77.947372][ T5742] syz.3.374: attempt to access beyond end of device [ 77.947372][ T5742] loop3: rw=2049, sector=77824, nr_sectors = 408 limit=40427 [ 77.968263][ T5784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.987906][ T5749] XFS (loop1): Quotacheck: Done. [ 78.044629][ T5744] BTRFS info (device loop4): enabling ssd optimizations [ 78.165340][ T5744] BTRFS info (device loop4): scrub: started on devid 1 [ 78.170089][ T4298] XFS (loop1): Unmounting Filesystem [ 78.172734][ T5744] BTRFS info (device loop4): left=0, need=98304, flags=2 [ 78.174123][ T5744] BTRFS info (device loop4): space_info SYSTEM has 0 free, is not full [ 78.175862][ T5744] BTRFS info (device loop4): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 78.178637][ T5744] BTRFS info (device loop4): global_block_rsv: size 1441792 reserved 1441792 [ 78.180549][ T5744] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 78.182083][ T5744] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 78.183634][ T5744] BTRFS info (device loop4): delayed_block_rsv: size 0 reserved 0 [ 78.185157][ T5744] BTRFS info (device loop4): delayed_refs_rsv: size 0 reserved 0 [ 78.212486][ T4971] kworker/u4:7: attempt to access beyond end of device [ 78.212486][ T4971] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 78.282456][ T5744] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [ 78.395015][ T4307] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 78.538937][ T5810] loop2: detected capacity change from 0 to 4096 [ 78.553253][ T5810] ntfs: volume version 3.1. [ 78.672413][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 79.442405][ T5835] loop2: detected capacity change from 0 to 32768 [ 79.456895][ T5835] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.398 (5835) [ 79.465610][ T5835] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 79.468449][ T5835] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 79.483552][ T5835] BTRFS info (device loop2): using free space tree [ 79.506404][ T5836] loop5: detected capacity change from 0 to 40427 [ 79.513942][ T5836] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 79.516164][ T5836] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 79.549445][ T5840] loop4: detected capacity change from 0 to 32768 [ 79.552308][ T5836] F2FS-fs (loop5): Found nat_bits in checkpoint [ 79.575689][ T5836] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 79.577235][ T5836] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 79.621574][ T5840] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 79.647494][ T5835] BTRFS info (device loop2): enabling ssd optimizations [ 79.860235][ T4311] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 80.113371][ T4307] ocfs2: Unmounting device (7,4) on (node local) [ 80.169861][ T1751] tipc: Subscription rejected, illegal request [ 80.174070][ T5879] input: syz0 as /devices/virtual/input/input3 [ 80.276082][ T5884] loop3: detected capacity change from 0 to 256 [ 80.306890][ T5884] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011eee, chksum : 0x5374553f, utbl_chksum : 0xe619d30d) [ 80.949669][ T1751] tipc: Subscription rejected, illegal request [ 81.104042][ T5919] loop4: detected capacity change from 0 to 2048 [ 81.154022][ T5883] loop2: detected capacity change from 0 to 40427 [ 81.158538][ T5926] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.169272][ T5883] F2FS-fs (loop2): invalid crc value [ 81.231778][ T5883] F2FS-fs (loop2): Found nat_bits in checkpoint [ 81.273753][ T5883] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 81.320665][ T5883] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 81.342341][ T5900] loop1: detected capacity change from 0 to 32768 [ 81.444785][ T5900] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 81.516582][ T5942] loop3: detected capacity change from 0 to 4096 [ 81.583149][ T4311] syz-executor: attempt to access beyond end of device [ 81.583149][ T4311] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 81.591009][ T4298] ocfs2: Unmounting device (7,1) on (node local) [ 81.631212][ T5949] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.698259][ T5953] loop4: detected capacity change from 0 to 64 [ 81.761310][ T5942] NILFS error (device loop3): nilfs_readdir: zero-length directory entry [ 81.781030][ T5942] Remounting filesystem read-only [ 81.994202][ T5966] loop4: detected capacity change from 0 to 512 [ 82.039497][ T5971] loop2: detected capacity change from 0 to 256 [ 82.041221][ T5971] exfat: Deprecated parameter 'namecase' [ 82.054961][ T5966] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.433: invalid indirect mapped block 2185560079 (level 0) [ 82.079245][ T5966] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.433: invalid indirect mapped block 2683928664 (level 1) [ 82.108420][ T5966] EXT4-fs (loop4): 1 truncate cleaned up [ 82.122754][ T5966] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 82.141564][ T5971] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 82.332482][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 82.817480][ T6004] loop4: detected capacity change from 0 to 128 [ 82.825587][ T6004] FAT-fs (loop4): bogus logical sector size 0 [ 82.827219][ T6004] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 82.829190][ T6004] FAT-fs (loop4): Can't find a valid FAT filesystem [ 82.886635][ T6007] loop5: detected capacity change from 0 to 128 [ 82.896849][ T6004] tmpfs: Bad value for 'gid' [ 82.897960][ T5483] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 83.270986][ T5992] loop2: detected capacity change from 0 to 32768 [ 83.285449][ T5992] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.440 (5992) [ 83.299058][ T5992] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 83.307803][ T5992] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 83.309673][ T5992] BTRFS info (device loop2): using free space tree [ 83.612581][ T5992] BTRFS info (device loop2): enabling ssd optimizations [ 83.911955][ T4311] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 84.012999][ T6012] loop3: detected capacity change from 0 to 40427 [ 84.018271][ T6012] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 84.019863][ T6012] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 84.033671][ T6019] loop4: detected capacity change from 0 to 32768 [ 84.037170][ T6012] F2FS-fs (loop3): invalid crc value [ 84.041634][ T6019] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.450 (6019) [ 84.071419][ T6012] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.101627][ T6019] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.103686][ T6019] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 84.112076][ T6012] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 84.113551][ T6012] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 84.130572][ T6019] BTRFS info (device loop4): use no compression [ 84.132347][ T6019] BTRFS info (device loop4): force zlib compression, level 3 [ 84.134091][ T6019] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 84.155364][ T6019] BTRFS info (device loop4): use lzo compression, level 0 [ 84.156802][ T6019] BTRFS info (device loop4): turning on flush-on-commit [ 84.158188][ T6019] BTRFS info (device loop4): enabling auto defrag [ 84.159440][ T6019] BTRFS info (device loop4): using free space tree [ 84.336592][ T6069] loop1: detected capacity change from 0 to 4096 [ 84.550040][ T6019] BTRFS info (device loop4): enabling ssd optimizations [ 84.605305][ T6071] loop2: detected capacity change from 0 to 32768 [ 84.614625][ T6071] (syz.2.458,6071,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 84.632712][ T6071] (syz.2.458,6071,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 84.667895][ T6071] JBD2: Ignoring recovery information on journal [ 84.727810][ T4307] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.861008][ T6077] loop5: detected capacity change from 0 to 40427 [ 84.885691][ T6077] F2FS-fs (loop5): build fault injection attr: rate: 691, type: 0x3ffff [ 84.887553][ T6077] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x4 [ 84.889526][ T4298] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 84.890950][ T4298] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 84.894092][ T6071] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 84.931394][ T6077] F2FS-fs (loop5): invalid crc value [ 84.961285][ T6077] F2FS-fs (loop5): Found nat_bits in checkpoint [ 85.001384][ T6077] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 85.092254][ T6115] loop3: detected capacity change from 0 to 512 [ 85.101377][ T6115] EXT4-fs (loop3): filesystem is read-only [ 85.102917][ T6115] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 85.122403][ T6115] EXT4-fs (loop3): filesystem is read-only [ 85.123700][ T6115] EXT4-fs (loop3): orphan cleanup on readonly fs [ 85.126333][ T6115] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.464: bg 0: block 64: padding at end of block bitmap is not set [ 85.139990][ T6115] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 85.142395][ T6115] EXT4-fs (loop3): 1 orphan inode deleted [ 85.143655][ T6115] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 85.234972][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 85.346071][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.351897][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.352037][ T4311] ocfs2: Unmounting device (7,2) on (node local) [ 85.357479][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.362009][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.366701][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.369066][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.375694][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.384392][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.393741][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.408860][ T6128] device batadv_slave_0 entered promiscuous mode [ 85.431930][ T6128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.467'. [ 85.770931][ T6143] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 85.781023][ T6143] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 85.789054][ T6143] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume. [ 85.965827][ T6117] loop1: detected capacity change from 0 to 40427 [ 85.981486][ T6117] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 85.982961][ T6117] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 86.024509][ T6117] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.112792][ T6117] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 86.114413][ T6117] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 86.167740][ T6151] f2fs_ckpt-7:1: attempt to access beyond end of device [ 86.167740][ T6151] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.270980][ T6161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.312142][ T6161] bond0: (slave rose0): Enslaving as an active interface with an up link [ 86.314062][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 86.432449][ T6174] loop5: detected capacity change from 0 to 1024 [ 86.630205][ T4971] hfsplus: b-tree write err: -5, ino 8 [ 86.772388][ T6186] loop5: detected capacity change from 0 to 2048 [ 86.774327][ T6186] UDF-fs: bad mount option "dont_appraise" or missing value [ 86.929114][ T6186] loop5: detected capacity change from 0 to 1024 [ 87.225475][ T4971] hfsplus: b-tree write err: -5, ino 4 [ 87.690067][ T6226] loop3: detected capacity change from 0 to 1024 [ 87.691786][ T6226] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.750112][ T6226] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.827146][ T6172] loop2: detected capacity change from 0 to 65536 [ 87.858597][ T6233] netlink: 16 bytes leftover after parsing attributes in process `syz.5.495'. [ 87.877067][ T6172] XFS (loop2): Mounting V5 Filesystem [ 88.003682][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 88.050439][ T6172] XFS (loop2): Ending clean mount [ 88.138628][ T6172] XFS (loop2): EXPERIMENTAL online shrink feature in use. Use at your own risk! [ 88.210976][ T4311] XFS (loop2): Unmounting Filesystem [ 88.212476][ T6265] loop1: detected capacity change from 0 to 1024 [ 88.254620][ T6265] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 88.534637][ T4298] EXT4-fs (loop1): unmounting filesystem. [ 89.067085][ T6295] loop1: detected capacity change from 0 to 4096 [ 89.321705][ T4298] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 89.323063][ T4298] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 89.408316][ T6320] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 89.410893][ T6320] netdevsim netdevsim4 netdevsim0: Failed to get key data for SA table [ 89.751029][ T6342] loop5: detected capacity change from 0 to 512 [ 89.781301][ T6342] EXT4-fs: Ignoring removed orlov option [ 89.795380][ T6342] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 89.814220][ T6342] EXT4-fs (loop5): 1 truncate cleaned up [ 89.834394][ T6342] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 90.038013][ T4960] EXT4-fs (loop5): unmounting filesystem. [ 90.054334][ T6328] loop1: detected capacity change from 0 to 32768 [ 90.116059][ T6328] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 90.139222][ T6333] loop4: detected capacity change from 0 to 32768 [ 90.207502][ T6328] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (3, expected 74) [ 90.215316][ T6328] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 90.217391][ T6328] OCFS2: File system is now read-only. [ 90.218560][ T6328] (syz.1.524,6328,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 90.220051][ T6328] (syz.1.524,6328,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 90.221554][ T6328] (syz.1.524,6328,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 90.242262][ T6359] loop5: detected capacity change from 0 to 2048 [ 90.254387][ T6328] (syz.1.524,6328,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 90.265861][ T6328] (syz.1.524,6328,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 90.267619][ T6328] (syz.1.524,6328,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 90.269214][ T6328] (syz.1.524,6328,1):ocfs2_mknod_locked:637 ERROR: status = -30 [ 90.304370][ T6328] (syz.1.524,6328,1):ocfs2_mknod:383 ERROR: status = -30 [ 90.307711][ T6359] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 90.314754][ T6365] loop2: detected capacity change from 0 to 128 [ 90.316260][ T6328] (syz.1.524,6328,1):ocfs2_mknod:500 ERROR: status = -30 [ 90.317865][ T6328] (syz.1.524,6328,1):ocfs2_mkdir:657 ERROR: status = -30 [ 90.362893][ T6359] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 90.395346][ T6359] EXT4-fs (loop5): Remounting filesystem read-only [ 90.440027][ T4960] EXT4-fs (loop5): unmounting filesystem. [ 90.493665][ T4298] ocfs2: Unmounting device (7,1) on (node local) [ 90.533644][ T6372] loop4: detected capacity change from 0 to 512 [ 90.546710][ T6372] EXT4-fs: Ignoring removed nobh option [ 90.555560][ T6373] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 90.582986][ T6372] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 90.606692][ T6379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.540'. [ 90.797537][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 90.901987][ T6394] loop2: detected capacity change from 0 to 512 [ 90.997444][ T6394] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.026121][ T6397] loop4: detected capacity change from 0 to 4096 [ 91.043446][ T6397] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 91.056211][ T6394] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #2: comm syz.2.545: corrupted inode contents [ 91.061222][ T6394] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #2: comm syz.2.545: mark_inode_dirty error [ 91.111515][ T6394] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #2: comm syz.2.545: corrupted inode contents [ 91.142295][ T6402] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #2: comm syz.2.545: corrupted inode contents [ 91.181050][ T6402] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #2: comm syz.2.545: mark_inode_dirty error [ 91.184741][ T6402] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #2: comm syz.2.545: corrupted inode contents [ 91.205703][ T6397] Process accounting resumed [ 91.256907][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 91.305056][ T4311] EXT4-fs (loop2): unmounting filesystem. [ 91.700218][ T6428] loop3: detected capacity change from 0 to 4096 [ 91.794620][ T6428] ntfs: volume version 3.1. [ 92.144678][ T27] audit: type=1326 audit(92.120:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.3.571" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc953a68 code=0x0 [ 92.413707][ T6439] loop1: detected capacity change from 0 to 32768 [ 92.502200][ T6471] loop2: detected capacity change from 0 to 4096 [ 92.559334][ T6471] ntfs: volume version 3.1. [ 92.933431][ T6473] loop4: detected capacity change from 0 to 32768 [ 92.987704][ T6473] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 93.093814][ T4307] ocfs2: Unmounting device (7,4) on (node local) [ 93.148471][ T6489] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 93.149899][ T6489] vhci_hcd: invalid port number 23 [ 93.310573][ T6493] loop1: detected capacity change from 0 to 2048 [ 93.339620][ T6493] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.349909][ T6497] loop5: detected capacity change from 0 to 64 [ 93.401150][ T6497] Trying to free block not in datazone [ 93.416419][ T6477] loop2: detected capacity change from 0 to 32768 [ 93.419499][ T6477] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.582 (6477) [ 93.435572][ T6477] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.437672][ T6477] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 93.439432][ T6477] BTRFS info (device loop2): enabling auto defrag [ 93.440740][ T6477] BTRFS info (device loop2): doing ref verification [ 93.442097][ T6477] BTRFS info (device loop2): force clearing of disk cache [ 93.443817][ T6477] BTRFS info (device loop2): turning on sync discard [ 93.456675][ T6477] BTRFS info (device loop2): setting nodatacow, compression disabled [ 93.458497][ T6477] BTRFS info (device loop2): using free space tree [ 93.500530][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.594'. [ 93.513803][ T6507] loop1: detected capacity change from 0 to 512 [ 93.532987][ T6507] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 93.650796][ T6477] BTRFS info (device loop2): enabling ssd optimizations [ 93.654358][ T6477] BTRFS info (device loop2): rebuilding free space tree [ 93.666469][ T6507] EXT2-fs (loop1): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 93.698450][ T1751] EXT2-fs (loop1): error: ext2_get_inode: bad inode number: 15 [ 93.751019][ T6507] EXT2-fs (loop1): error: ext2_free_blocks: Freeing blocks not in datazone - block = 1701604449, count = 1 [ 93.768185][ T6507] EXT2-fs (loop1): error: ext2_free_blocks: Freeing blocks not in datazone - block = 29554, count = 1 [ 93.805973][ T6507] EXT2-fs (loop1): error: ext2_free_blocks: Freeing blocks not in datazone - block = 93, count = 1 [ 93.809171][ T6507] EXT2-fs (loop1): error: ext2_free_branches: Read failure, inode=15, block=131072 [ 93.823189][ T6507] EXT2-fs (loop1): error: ext2_free_blocks: Freeing blocks not in datazone - block = 3, count = 1 [ 93.842642][ T6507] EXT2-fs (loop1): error: ext2_free_blocks: Freeing blocks not in datazone - block = 2, count = 1 [ 93.848431][ T6531] Injecting memory failure for pfn 0x1366d4 at process virtual address 0x20ffe000 [ 93.861845][ T6507] EXT2-fs (loop1): error: ext2_free_blocks: Freeing blocks not in datazone - block = 1, count = 1 [ 93.869438][ T6531] Memory failure: 0x1366d4: recovery action for dirty LRU page: Recovered [ 93.875349][ T6531] Injecting memory failure for pfn 0x1ae213 at process virtual address 0x20fff000 [ 93.882275][ T6531] Memory failure: 0x1ae213: recovery action for reserved kernel page: Ignored [ 93.954261][ T4311] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.966433][ T4971] EXT2-fs (loop1): error: ext2_get_inode: bad inode number: 15 [ 94.644445][ T6542] loop1: detected capacity change from 0 to 32768 [ 94.651432][ T6542] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.603 (6542) [ 94.662193][ T6542] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 94.668790][ T6542] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 94.675109][ T6542] BTRFS info (device loop1): enabling disk space caching [ 94.681108][ T6542] BTRFS info (device loop1): enabling auto defrag [ 94.683820][ T6542] BTRFS info (device loop1): doing ref verification [ 94.693069][ T6542] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 94.700757][ T6542] BTRFS info (device loop1): use lzo compression, level 0 [ 94.711156][ T6542] BTRFS info (device loop1): force clearing of disk cache [ 94.715282][ T6542] BTRFS info (device loop1): disabling auto defrag [ 94.719168][ T6542] BTRFS info (device loop1): disabling disk space caching [ 94.721094][ T6575] loop3: detected capacity change from 0 to 512 [ 94.728687][ T6575] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 94.982403][ T6542] BTRFS info (device loop1): enabling ssd optimizations [ 94.984602][ T6542] BTRFS info (device loop1): rebuilding free space tree [ 95.010427][ T6542] BTRFS info (device loop1): disabling free space tree [ 95.012004][ T6542] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 95.013990][ T6542] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 95.149967][ T6616] netlink: 32 bytes leftover after parsing attributes in process `syz.4.626'. [ 95.152130][ T6616] netem: unknown loss type 13 [ 95.153409][ T6616] netem: change failed [ 95.339213][ T4626] kernel write not supported for file [eventfd] (pid: 4626 comm: kworker/1:9) [ 95.545652][ T6633] loop3: detected capacity change from 0 to 512 [ 95.565332][ T6633] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.592606][ T6633] EXT4-fs (loop3): 1 truncate cleaned up [ 95.594030][ T6633] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.760955][ T6640] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 95.760955][ T6640] The task syz.4.635 (6640) triggered the difference, watch for misbehavior. [ 95.763639][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 95.875158][ T6644] netlink: 52 bytes leftover after parsing attributes in process `syz.3.637'. [ 95.880599][ T6644] netlink: 68 bytes leftover after parsing attributes in process `syz.3.637'. [ 95.963182][ T6542] BTRFS info (device loop1: state M): allowing degraded mounts [ 95.971861][ T6542] BTRFS info (device loop1: state M): not using ssd optimizations [ 95.977839][ T6542] BTRFS info (device loop1: state M): turning on sync discard [ 95.979370][ T6542] BTRFS info (device loop1: state M): enabling disk space caching [ 95.985419][ T6542] BTRFS info (device loop1: state M): turning on async discard [ 96.103339][ T4298] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 96.203993][ T47] Bluetooth: hci5: sending frame failed (-49) [ 96.206758][ T4299] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 96.253690][ T6618] loop5: detected capacity change from 0 to 65536 [ 96.333846][ T6618] XFS (loop5): Mounting V5 Filesystem [ 96.387904][ T6618] XFS (loop5): Ending clean mount [ 96.400811][ T6618] XFS (loop5): Quotacheck needed: Please wait. [ 96.433951][ T6618] XFS (loop5): Quotacheck: Done. [ 96.524367][ T6668] netlink: 'syz.1.646': attribute type 1 has an invalid length. [ 96.536851][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 96.545029][ T4960] XFS (loop5): Unmounting Filesystem [ 96.647830][ T6674] loop4: detected capacity change from 0 to 64 [ 96.654918][ T6674] hfs: unable to parse mount options [ 96.814003][ T6680] netlink: 20 bytes leftover after parsing attributes in process `syz.4.652'. [ 97.135154][ T6670] loop3: detected capacity change from 0 to 32768 [ 97.307226][ T6670] XFS (loop3): Mounting V5 Filesystem [ 97.426417][ T6670] XFS (loop3): Ending clean mount [ 97.524215][ T24] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x8 [ 97.531963][ T24] XFS (loop3): Unmount and run xfs_repair [ 97.533077][ T24] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 97.534489][ T24] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 97.556495][ T24] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 97.558446][ T24] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 97.560314][ T24] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 97.562119][ T24] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 97.563881][ T24] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 97.563940][ T6689] loop2: detected capacity change from 0 to 40427 [ 97.590163][ T6689] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 97.596677][ T24] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 97.598544][ T6689] F2FS-fs (loop2): invalid crc value [ 97.603575][ T24] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 97.611699][ T6670] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x8 len 8 error 74 [ 97.618785][ T6689] F2FS-fs (loop2): Found nat_bits in checkpoint [ 97.672982][ T4297] XFS (loop3): Unmounting Filesystem [ 97.675103][ T6689] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 97.786174][ T4311] syz-executor: attempt to access beyond end of device [ 97.786174][ T4311] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 97.914142][ T6698] loop5: detected capacity change from 0 to 32768 [ 97.926487][ T6698] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.648 (6698) [ 97.970621][ T6698] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 97.972689][ T6698] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 97.974532][ T6698] BTRFS info (device loop5): using free space tree [ 98.276583][ T6761] input: syz1 as /devices/virtual/input/input4 [ 98.295292][ T6698] BTRFS info (device loop5): enabling ssd optimizations [ 98.499346][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 98.517583][ T4960] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 99.173604][ T6773] loop2: detected capacity change from 0 to 32768 [ 99.279595][ T6773] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 99.490477][ T4311] ocfs2: Unmounting device (7,2) on (node local) [ 99.509867][ T6824] loop3: detected capacity change from 0 to 512 [ 99.579169][ T6824] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 99.665044][ T6807] loop5: detected capacity change from 0 to 32768 [ 99.706908][ T6807] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.689 (6807) [ 99.707230][ T6801] loop4: detected capacity change from 0 to 32768 [ 99.736010][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 99.747402][ T6807] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.749400][ T6807] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 99.751267][ T6807] BTRFS info (device loop5): enabling disk space caching [ 99.752732][ T6807] BTRFS info (device loop5): enabling auto defrag [ 99.754411][ T6807] BTRFS info (device loop5): doing ref verification [ 99.756368][ T6801] XFS (loop4): Mounting V5 Filesystem [ 99.763371][ T6807] BTRFS info (device loop5): use no compression [ 99.764672][ T6807] BTRFS info (device loop5): force clearing of disk cache [ 99.775344][ T6807] BTRFS info (device loop5): disabling disk space caching [ 99.799808][ T6801] XFS (loop4): Ending clean mount [ 99.871031][ T4307] XFS (loop4): Unmounting Filesystem [ 99.950751][ T6855] loop1: detected capacity change from 0 to 1024 [ 99.952475][ T6855] EXT4-fs: Ignoring removed nobh option [ 99.953507][ T6855] EXT4-fs: Ignoring removed bh option [ 99.964422][ T6855] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.024159][ T6855] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.037590][ T6807] BTRFS info (device loop5): enabling ssd optimizations [ 100.040931][ T6807] BTRFS info (device loop5): rebuilding free space tree [ 100.057707][ T6807] BTRFS info (device loop5): disabling free space tree [ 100.064086][ T6807] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 100.078102][ T6807] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 100.082219][ T6871] loop3: detected capacity change from 0 to 512 [ 100.100045][ T6871] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.112830][ T6871] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.702: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 100.141075][ T6871] EXT4-fs error (device loop3): ext4_quota_enable:6995: comm syz.3.702: Bad quota inode: 4, type: 1 [ 100.149306][ T4298] EXT4-fs (loop1): unmounting filesystem. [ 100.156815][ T6871] EXT4-fs warning (device loop3): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 100.172553][ T6871] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 100.180017][ T6871] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 100.271073][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 100.301651][ T4960] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 100.747952][ T6891] mkiss: ax0: crc mode is auto. [ 100.890714][ T6874] loop1: detected capacity change from 0 to 32768 [ 100.906280][ T6874] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.703 (6874) [ 100.935659][ T6874] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.938122][ T6874] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 100.939859][ T6874] BTRFS info (device loop1): using free space tree [ 101.164982][ T27] audit: type=1326 audit(101.140:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.720" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff92953a68 code=0x0 [ 101.224889][ T6874] BTRFS info (device loop1): enabling ssd optimizations [ 101.306673][ T4298] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.829077][ T6914] loop3: detected capacity change from 0 to 32768 [ 101.845289][ T6914] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.719 (6914) [ 101.853736][ T6914] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.856911][ T6914] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 101.858634][ T6914] BTRFS info (device loop3): use zlib compression, level 3 [ 101.860051][ T6914] BTRFS info (device loop3): using free space tree [ 102.025724][ T6914] BTRFS info (device loop3): enabling ssd optimizations [ 102.159709][ T4297] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.260962][ T6944] loop5: detected capacity change from 0 to 40427 [ 102.301886][ T6944] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 102.313578][ T6944] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 102.330343][ T6944] F2FS-fs (loop5): invalid crc_offset: 33558524 [ 102.368616][ T6944] F2FS-fs (loop5): Found nat_bits in checkpoint [ 102.391921][ T6981] loop2: detected capacity change from 0 to 128 [ 102.398649][ T6944] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 102.400352][ T6944] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 102.451098][ T6944] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 102.451239][ T6944] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 102.452905][ T6944] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 102.454479][ T6944] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 102.455156][ T6981] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 102.456392][ T6944] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 102.462387][ T6944] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 102.467564][ T6944] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 102.471427][ T6944] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 102.475947][ T6944] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 102.483757][ T6944] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 102.493309][ T6981] sysv_count_free_blocks: cannot read free-list block [ 102.592451][ T6981] sysv_count_free_inodes: unable to read inode table [ 102.593936][ T6981] Process accounting resumed [ 102.631939][ T6981] sysv_free_block: trying to free block not in datazone [ 102.663788][ T6981] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 103.270414][ T7021] loop4: detected capacity change from 0 to 512 [ 103.283882][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.746'. [ 103.356545][ T7021] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz.4.747: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 103.366319][ T7021] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.747: couldn't read orphan inode 15 (err -117) [ 103.411156][ T7021] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 103.419570][ T7021] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.747: Directory hole found for htree leaf block 0 [ 103.468519][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 103.550606][ T7009] loop3: detected capacity change from 0 to 32768 [ 103.552469][ T7009] XFS: ikeep mount option is deprecated. [ 103.553607][ T7009] XFS: ikeep mount option is deprecated. [ 103.613683][ T7003] loop1: detected capacity change from 0 to 32768 [ 103.616547][ T7009] XFS (loop3): Mounting V5 Filesystem [ 103.620014][ T7003] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.742 (7003) [ 103.623912][ T7031] loop4: detected capacity change from 0 to 4096 [ 103.633537][ T7003] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.635701][ T7003] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 103.637533][ T7003] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 103.639379][ T7003] BTRFS info (device loop1): use zstd compression, level 3 [ 103.640800][ T7003] BTRFS info (device loop1): using free space tree [ 103.661602][ T7031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.707817][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.750'. [ 103.722928][ T7046] loop2: detected capacity change from 0 to 1024 [ 103.724669][ T7046] EXT4-fs: Ignoring removed nobh option [ 103.734789][ T7046] EXT4-fs: Ignoring removed bh option [ 103.753409][ T7046] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.763342][ T7009] XFS (loop3): Ending clean mount [ 103.774150][ T7009] XFS (loop3): Quotacheck needed: Please wait. [ 103.775093][ T7031] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 103.824223][ T7046] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 103.848016][ T7009] XFS (loop3): Quotacheck: Done. [ 103.868087][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 103.930263][ T7066] loop5: detected capacity change from 0 to 512 [ 103.945392][ T7003] BTRFS info (device loop1): enabling ssd optimizations [ 103.982803][ T4297] XFS (loop3): Unmounting Filesystem [ 104.029351][ T4311] EXT4-fs (loop2): unmounting filesystem. [ 104.039860][ T7066] EXT4-fs (loop5): orphan cleanup on readonly fs [ 104.055502][ T7066] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #4: comm syz.5.753: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 104.078810][ T7066] EXT4-fs error (device loop5): ext4_quota_enable:6995: comm syz.5.753: Bad quota inode: 4, type: 1 [ 104.087913][ T7066] EXT4-fs warning (device loop5): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 104.090865][ T7066] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 104.092178][ T7066] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 104.158193][ T7075] loop2: detected capacity change from 0 to 164 [ 104.196938][ T4298] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.205165][ T4960] EXT4-fs (loop5): unmounting filesystem. [ 104.408920][ T7077] mkiss: ax0: crc mode is auto. [ 104.866451][ T7099] loop1: detected capacity change from 0 to 8 [ 104.942829][ T7101] loop3: detected capacity change from 0 to 256 [ 105.343190][ T7094] loop4: detected capacity change from 0 to 32768 [ 105.364998][ T7094] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.764 (7094) [ 105.369094][ T7094] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 105.371152][ T7094] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 105.372929][ T7094] BTRFS info (device loop4): using free space tree [ 105.655520][ T7094] BTRFS info (device loop4): enabling ssd optimizations [ 105.734288][ T4307] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 105.978247][ T7166] loop1: detected capacity change from 0 to 128 [ 105.980650][ T7166] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 105.986827][ T7165] loop2: detected capacity change from 0 to 2048 [ 106.021830][ T7166] sysv_count_free_blocks: cannot read free-list block [ 106.046052][ T7168] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.052183][ T27] audit: type=1326 audit(106.030:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.3.802" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc953a68 code=0x0 [ 106.105636][ T7166] sysv_count_free_inodes: unable to read inode table [ 106.107110][ T7166] Process accounting resumed [ 106.130447][ T7166] sysv_free_block: trying to free block not in datazone [ 106.143291][ T7166] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 106.381480][ T7183] loop4: detected capacity change from 0 to 4096 [ 106.383429][ T7183] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.428475][ T7183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 106.514236][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 106.814851][ T7185] loop5: detected capacity change from 0 to 40427 [ 106.824608][ T7185] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 106.833147][ T7185] F2FS-fs (loop5): invalid crc value [ 106.861824][ T7185] F2FS-fs (loop5): Found nat_bits in checkpoint [ 106.934218][ T7185] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 106.947478][ T7188] loop1: detected capacity change from 0 to 40427 [ 106.950394][ T7188] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 106.952586][ T7188] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 106.986509][ T7188] F2FS-fs (loop1): Found nat_bits in checkpoint [ 107.019503][ T7188] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 107.020985][ T7188] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 107.034417][ T4960] syz-executor: attempt to access beyond end of device [ 107.034417][ T4960] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.043081][ T7206] loop3: detected capacity change from 0 to 512 [ 107.096078][ T7206] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz.3.803: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 107.123138][ T7206] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.803: couldn't read orphan inode 15 (err -117) [ 107.144341][ T7206] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 107.255062][ T7206] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.803: Directory hole found for htree leaf block 0 [ 107.353618][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 107.859816][ T7223] loop3: detected capacity change from 0 to 32768 [ 107.869689][ T7223] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.812 (7223) [ 107.890072][ T7223] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.892149][ T7223] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 107.893895][ T7223] BTRFS info (device loop3): using free space tree [ 108.014636][ T7223] BTRFS info (device loop3): enabling ssd optimizations [ 108.096912][ T4297] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.667147][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'. [ 108.700165][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'. [ 108.897772][ T7269] loop5: detected capacity change from 0 to 4096 [ 108.899493][ T7269] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.939511][ T7269] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 109.133262][ T4960] EXT4-fs (loop5): unmounting filesystem. [ 109.161866][ T7286] loop4: detected capacity change from 0 to 4096 [ 109.164654][ T7286] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 109.449318][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.839'. [ 109.574960][ T7275] loop1: detected capacity change from 0 to 32768 [ 109.576010][ T7304] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 109.580238][ T7275] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.825 (7275) [ 109.597004][ T7275] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.598996][ T7275] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 109.600714][ T7275] BTRFS info (device loop1): use zlib compression, level 3 [ 109.602153][ T7275] BTRFS info (device loop1): using free space tree [ 109.630315][ T7308] netlink: 244 bytes leftover after parsing attributes in process `syz.4.844'. [ 109.632283][ T7308] netlink: 65 bytes leftover after parsing attributes in process `syz.4.844'. [ 109.735906][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.845'. [ 109.828185][ T7275] BTRFS info (device loop1): enabling ssd optimizations [ 109.910113][ T7332] loop4: detected capacity change from 0 to 736 [ 109.931184][ T7292] loop5: detected capacity change from 0 to 32768 [ 110.052753][ T7292] XFS (loop5): Mounting V5 Filesystem [ 110.077965][ T7311] loop2: detected capacity change from 0 to 40427 [ 110.086808][ T7311] F2FS-fs (loop2): invalid crc value [ 110.101311][ T4298] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.105317][ T7311] F2FS-fs (loop2): Found nat_bits in checkpoint [ 110.146541][ T7311] F2FS-fs (loop2): Start checkpoint disabled! [ 110.176131][ T7311] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 110.190885][ T7311] Process accounting resumed [ 110.268005][ T7292] XFS (loop5): Ending clean mount [ 110.343071][ T4960] XFS (loop5): Unmounting Filesystem [ 110.372184][ T283] kworker/u4:4: attempt to access beyond end of device [ 110.372184][ T283] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 110.385723][ T283] kworker/u4:4: attempt to access beyond end of device [ 110.385723][ T283] loop2: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 110.867468][ T7363] loop3: detected capacity change from 0 to 2048 [ 110.928313][ T7365] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.973699][ T7366] loop5: detected capacity change from 0 to 2048 [ 111.019929][ T7366] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 111.036346][ T7347] loop4: detected capacity change from 0 to 40427 [ 111.048745][ T7347] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 111.050634][ T7347] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 111.059281][ T7347] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 111.097033][ T7347] F2FS-fs (loop4): Found nat_bits in checkpoint [ 111.146288][ T4960] EXT4-fs (loop5): unmounting filesystem. [ 111.147731][ T7373] loop3: detected capacity change from 0 to 128 [ 111.165743][ T7347] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 111.167148][ T7347] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 111.227895][ T7353] loop1: detected capacity change from 0 to 40427 [ 111.231460][ T7361] loop2: detected capacity change from 0 to 32768 [ 111.233827][ T7353] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 111.248747][ T7353] F2FS-fs (loop1): invalid crc value [ 111.281788][ T7347] f2fs_fill_dentries: 25 callbacks suppressed [ 111.281801][ T7347] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 111.283082][ T7353] F2FS-fs (loop1): Found nat_bits in checkpoint [ 111.283126][ T7347] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 111.295920][ T7380] nbd: couldn't find a device at index 131072 [ 111.298715][ T7347] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 111.298733][ T7347] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 111.300164][ T7347] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 111.301593][ T7347] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 111.308690][ T7347] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 111.311009][ T7361] XFS (loop2): Mounting V5 Filesystem [ 111.314303][ T7353] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 111.315692][ T7347] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 111.315836][ T7347] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 111.317900][ T7347] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 111.483138][ T7361] XFS (loop2): Ending clean mount [ 111.515860][ T7361] XFS (loop2): Quotacheck needed: Please wait. [ 111.568709][ T7361] XFS (loop2): Quotacheck: Done. [ 111.646556][ T4298] syz-executor: attempt to access beyond end of device [ 111.646556][ T4298] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 111.675877][ T4311] XFS (loop2): Unmounting Filesystem [ 112.311418][ T7412] loop2: detected capacity change from 0 to 4096 [ 112.336082][ T7412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.391958][ T7412] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 112.533041][ T7415] loop5: detected capacity change from 0 to 32768 [ 112.543057][ T7415] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.870 (7415) [ 112.569361][ T7415] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 112.571461][ T7415] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm [ 112.579497][ T7415] BTRFS info (device loop5): using free space tree [ 112.693110][ T4311] EXT4-fs (loop2): unmounting filesystem. [ 112.874126][ T7409] loop4: detected capacity change from 0 to 32768 [ 112.878549][ T7409] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.871 (7409) [ 112.882366][ T7409] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.884591][ T7409] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 112.886450][ T7409] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 112.890289][ T7409] BTRFS info (device loop4): use zstd compression, level 3 [ 112.892532][ T7409] BTRFS info (device loop4): using free space tree [ 112.941128][ T7415] BTRFS info (device loop5): enabling ssd optimizations [ 113.108030][ T4960] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 113.306460][ T7409] BTRFS info (device loop4): enabling ssd optimizations [ 113.544480][ T7447] loop2: detected capacity change from 0 to 32768 [ 113.545741][ T4307] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.556888][ T7471] loop1: detected capacity change from 0 to 32768 [ 113.559538][ T7447] XFS: ikeep mount option is deprecated. [ 113.569251][ T7447] XFS: ikeep mount option is deprecated. [ 113.731408][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.886'. [ 113.738217][ T7471] XFS (loop1): Mounting V5 Filesystem [ 113.740395][ T7447] XFS (loop2): Mounting V5 Filesystem [ 113.768350][ T7469] loop3: detected capacity change from 0 to 40427 [ 113.775965][ T7469] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 113.778629][ T7469] F2FS-fs (loop3): invalid crc value [ 113.788181][ T7469] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.826066][ T7471] XFS (loop1): Ending clean mount [ 113.862106][ T7447] XFS (loop2): Ending clean mount [ 113.864648][ T7447] XFS (loop2): Quotacheck needed: Please wait. [ 113.876317][ T7469] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.897817][ T4568] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x8 [ 113.900328][ T4568] XFS (loop1): Unmount and run xfs_repair [ 113.901457][ T4568] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 113.902996][ T4568] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 113.913011][ T4568] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 113.914817][ T4568] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 113.932799][ T4568] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 113.934592][ T4568] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 113.954159][ T4568] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.956374][ T4568] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.958190][ T4568] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.973682][ T7471] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x8 len 8 error 74 [ 113.982220][ T7447] XFS (loop2): Quotacheck: Done. [ 113.985352][ T4297] syz-executor: attempt to access beyond end of device [ 113.985352][ T4297] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 114.078135][ T4298] XFS (loop1): Unmounting Filesystem [ 114.153916][ T4311] XFS (loop2): Unmounting Filesystem [ 114.394176][ T7519] loop5: detected capacity change from 0 to 4096 [ 114.414377][ T7519] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 114.614317][ T7525] netlink: 244 bytes leftover after parsing attributes in process `syz.1.904'. [ 114.627318][ T7525] netlink: 65 bytes leftover after parsing attributes in process `syz.1.904'. [ 114.725391][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.899'. [ 114.830991][ T7533] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 115.014992][ T7521] loop4: detected capacity change from 0 to 32768 [ 115.128361][ T7521] XFS (loop4): Mounting V5 Filesystem [ 115.141113][ T7546] loop3: detected capacity change from 0 to 736 [ 115.246126][ T7521] XFS (loop4): Ending clean mount [ 115.264381][ T7529] loop2: detected capacity change from 0 to 40427 [ 115.281413][ T7529] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 115.283218][ T7529] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 115.359547][ T4307] XFS (loop4): Unmounting Filesystem [ 115.395824][ T7559] loop5: detected capacity change from 0 to 256 [ 115.404145][ T7529] F2FS-fs (loop2): Found nat_bits in checkpoint [ 115.411541][ T7537] loop1: detected capacity change from 0 to 40427 [ 115.433284][ T7537] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 115.436307][ T7529] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 115.437784][ T7529] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 115.454428][ T7537] F2FS-fs (loop1): invalid crc value [ 115.481266][ T7537] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.523584][ T7537] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 115.693149][ T7569] netlink: 24 bytes leftover after parsing attributes in process `syz.5.922'. [ 115.702531][ T4298] syz-executor: attempt to access beyond end of device [ 115.702531][ T4298] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.105672][ T7580] nbd: couldn't find a device at index 131072 [ 116.123574][ T7583] sctp: [Deprecated]: syz.1.914 (pid 7583) Use of int in maxseg socket option. [ 116.123574][ T7583] Use struct sctp_assoc_value instead [ 116.293574][ T7590] loop4: detected capacity change from 0 to 128 [ 116.403756][ T7568] loop3: detected capacity change from 0 to 32768 [ 116.458028][ T7568] XFS (loop3): Mounting V5 Filesystem [ 116.521345][ T7568] XFS (loop3): Ending clean mount [ 116.657679][ T4297] XFS (loop3): Unmounting Filesystem [ 116.754263][ T7577] loop5: detected capacity change from 0 to 40427 [ 116.792945][ T7577] F2FS-fs (loop5): invalid crc value [ 116.802990][ T7577] F2FS-fs (loop5): Found nat_bits in checkpoint [ 116.838301][ T7577] F2FS-fs (loop5): Start checkpoint disabled! [ 116.842053][ T7577] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 116.851659][ T7607] loop4: detected capacity change from 0 to 40427 [ 116.867686][ T7607] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 116.870308][ T7607] F2FS-fs (loop4): invalid crc value [ 116.888239][ T7607] F2FS-fs (loop4): Found nat_bits in checkpoint [ 116.895831][ T7577] Process accounting resumed [ 116.952270][ T7607] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 116.981951][ T283] kworker/u4:4: attempt to access beyond end of device [ 116.981951][ T283] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 116.990977][ T283] kworker/u4:4: attempt to access beyond end of device [ 116.990977][ T283] loop5: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 117.082324][ T4307] syz-executor: attempt to access beyond end of device [ 117.082324][ T4307] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 117.231192][ T7618] loop3: detected capacity change from 0 to 4096 [ 117.381468][ T7622] loop2: detected capacity change from 0 to 2048 [ 117.412952][ T7618] ntfs3: loop3: ino=5, "/" attr_set_size [ 117.414116][ T7618] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 117.512009][ T7622] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 117.649076][ T4311] EXT4-fs (loop2): unmounting filesystem. [ 117.874123][ T7643] loop1: detected capacity change from 0 to 8192 [ 117.904050][ T7643] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 117.919131][ T7635] loop3: detected capacity change from 0 to 32768 [ 117.926085][ T7643] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 117.928155][ T7643] REISERFS (device loop1): using journaled data mode [ 117.930659][ T7643] reiserfs: using flush barriers [ 117.943253][ T7643] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.960106][ T7643] REISERFS (device loop1): checking transaction log (loop1) [ 117.974226][ T7643] REISERFS (device loop1): Using r5 hash to sort names [ 117.983405][ T7635] XFS (loop3): Mounting V5 Filesystem [ 117.987400][ T7643] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 117.990614][ T7643] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 118.063257][ T7643] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 118.090429][ T7635] XFS (loop3): Ending clean mount [ 118.092803][ T7635] XFS (loop3): Quotacheck needed: Please wait. [ 118.158795][ T7635] XFS (loop3): Quotacheck: Done. [ 118.165546][ T7668] loop2: detected capacity change from 0 to 4096 [ 118.281185][ T4297] XFS (loop3): Unmounting Filesystem [ 118.306937][ T7668] ntfs3: loop2: ino=5, "/" attr_set_size [ 118.308132][ T7668] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 118.417314][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.954'. [ 118.614596][ T7690] loop2: detected capacity change from 0 to 256 [ 119.521007][ T7702] loop1: detected capacity change from 0 to 32768 [ 119.576445][ T7710] loop5: detected capacity change from 0 to 32768 [ 119.604885][ T7702] XFS (loop1): Mounting V5 Filesystem [ 119.749068][ T7702] XFS (loop1): Ending clean mount [ 119.752791][ T7702] XFS (loop1): Quotacheck needed: Please wait. [ 119.805672][ T7702] XFS (loop1): Quotacheck: Done. [ 119.913238][ T4298] XFS (loop1): Unmounting Filesystem [ 119.949204][ T7731] loop4: detected capacity change from 0 to 32768 [ 120.026263][ T7731] find_entry called with index = 0 [ 120.027356][ T7731] find_entry called with index = 0 [ 120.034533][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'. [ 120.043364][ T7763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.234079][ T27] audit: type=1326 audit(120.210:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7768 comm="syz.2.988" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff92953a68 code=0x0 [ 120.335858][ T4299] Bluetooth: hci2: command 0x0406 tx timeout [ 120.348815][ T47] Bluetooth: hci2: link tx timeout [ 120.350131][ T47] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.471954][ T47] Bluetooth: hci2: link tx timeout [ 120.473073][ T47] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.496888][ T47] Bluetooth: hci2: link tx timeout [ 120.497932][ T47] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.784868][ T7771] loop5: detected capacity change from 0 to 32768 [ 120.815613][ T47] Bluetooth: hci2: link tx timeout [ 120.816772][ T47] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.858922][ T47] Bluetooth: hci2: link tx timeout [ 120.860048][ T47] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.121977][ T7775] loop3: detected capacity change from 0 to 32768 [ 121.193867][ T7806] loop4: detected capacity change from 0 to 8192 [ 121.214708][ T7775] XFS (loop3): Mounting V5 Filesystem [ 121.225621][ T7806] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 121.228369][ T7806] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 121.230202][ T7806] REISERFS (device loop4): using ordered data mode [ 121.231515][ T7806] reiserfs: using flush barriers [ 121.247131][ T7806] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 121.250464][ T7806] REISERFS (device loop4): checking transaction log (loop4) [ 121.293758][ T7806] REISERFS (device loop4): Using r5 hash to sort names [ 121.306631][ T7806] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 121.343266][ T7775] XFS (loop3): Ending clean mount [ 121.458643][ T47] Bluetooth: hci2: link tx timeout [ 121.459773][ T47] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.479022][ T7807] loop2: detected capacity change from 0 to 32768 [ 121.508565][ T4297] XFS (loop3): Unmounting Filesystem [ 121.567963][ T7807] XFS (loop2): Mounting V5 Filesystem [ 121.675271][ T7807] XFS (loop2): Ending clean mount [ 121.855105][ T4311] XFS (loop2): Unmounting Filesystem [ 121.863524][ T7844] loop1: detected capacity change from 0 to 16 [ 121.882923][ T7844] erofs: (device loop1): mounted with root inode @ nid 36. [ 121.909028][ T7844] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 121.926707][ T7844] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 121.929215][ T7844] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 121.938907][ T47] Bluetooth: hci2: link tx timeout [ 121.939936][ T47] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.952611][ T47] Bluetooth: hci2: link tx timeout [ 121.953609][ T47] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.964468][ T7844] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 121.976153][ T7844] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 121.978060][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 121.985839][ T7844] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 121.988021][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 121.989897][ T7844] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 121.999674][ T7831] loop4: detected capacity change from 0 to 32768 [ 122.007415][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 122.051212][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 122.053373][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 122.079154][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 122.081299][ T7844] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 122.083268][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 122.102815][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 122.104998][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 122.120501][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 122.122591][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 122.124672][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 122.140434][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 122.142523][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 122.144530][ T7844] syz.1.1004: attempt to access beyond end of device [ 122.144530][ T7844] loop1: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 122.165461][ T7844] syz.1.1004: attempt to access beyond end of device [ 122.165461][ T7844] loop1: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 122.171737][ T7831] XFS (loop4): Mounting V5 Filesystem [ 122.173403][ T7844] syz.1.1004: attempt to access beyond end of device [ 122.173403][ T7844] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 122.185870][ T7844] syz.1.1004: attempt to access beyond end of device [ 122.185870][ T7844] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 122.204193][ T7844] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[4055] [ 122.208172][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 122.210385][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 122.212262][ T7844] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 122.214180][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 122.216483][ T7844] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 122.218493][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 122.220690][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 122.222551][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 122.224644][ T7844] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 122.226742][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 122.228751][ T7844] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 122.230918][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 122.233196][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 122.235466][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 122.237382][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 122.239336][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 122.241238][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 122.243061][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 122.245033][ T7844] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 122.247585][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 122.249510][ T7844] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 122.251540][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 122.253499][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 122.257224][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 122.259189][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 122.261201][ T7844] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 122.263065][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 122.265118][ T7844] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 122.268756][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 122.270770][ T7844] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 122.272793][ T7844] syz.1.1004: attempt to access beyond end of device [ 122.272793][ T7844] loop1: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 122.278923][ T7844] syz.1.1004: attempt to access beyond end of device [ 122.278923][ T7844] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 122.282738][ T7844] syz.1.1004: attempt to access beyond end of device [ 122.282738][ T7844] loop1: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 122.291582][ T7844] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[5297] [ 122.314961][ T7831] XFS (loop4): Ending clean mount [ 122.324765][ T7831] XFS (loop4): Quotacheck needed: Please wait. [ 122.401960][ T7831] XFS (loop4): Quotacheck: Done. [ 122.563760][ T4307] XFS (loop4): Unmounting Filesystem [ 122.592630][ T7867] loop1: detected capacity change from 0 to 128 [ 122.637851][ T7852] loop5: detected capacity change from 0 to 32768 [ 122.640297][ T7852] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.1007 (7852) [ 122.653078][ T7852] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 122.657996][ T7852] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 122.660059][ T7852] BTRFS info (device loop5): using free space tree [ 122.761565][ T7852] BTRFS info (device loop5): enabling ssd optimizations [ 122.858559][ T7881] loop2: detected capacity change from 0 to 8192 [ 122.865973][ T7892] loop1: detected capacity change from 0 to 2048 [ 122.880524][ T7881] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 122.883515][ T7881] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 122.893461][ T7881] REISERFS (device loop2): using journaled data mode [ 122.897917][ T47] Bluetooth: hci2: link tx timeout [ 122.899015][ T47] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.905123][ T7881] reiserfs: using flush barriers [ 122.939085][ T7881] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.942533][ T7881] REISERFS (device loop2): checking transaction log (loop2) [ 122.947305][ T4960] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 122.947488][ T7881] REISERFS (device loop2): Using r5 hash to sort names [ 122.951260][ T7881] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 122.965528][ T7881] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 122.987913][ T7892] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 123.000398][ T7881] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 123.181818][ T4298] EXT4-fs (loop1): unmounting filesystem. [ 123.638402][ T7923] netlink: 'syz.3.1025': attribute type 10 has an invalid length. [ 123.658821][ T7923] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 123.665907][ T7925] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 123.779405][ T7933] loop3: detected capacity change from 0 to 256 [ 123.811222][ T7933] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006005) [ 123.925488][ T7936] sctp: [Deprecated]: syz.5.1030 (pid 7936) Use of int in maxseg socket option. [ 123.925488][ T7936] Use struct sctp_assoc_value instead [ 123.947629][ T7915] loop4: detected capacity change from 0 to 32768 [ 124.025765][ T7948] loop3: detected capacity change from 0 to 128 [ 124.032836][ T7915] XFS (loop4): Mounting V5 Filesystem [ 124.056358][ T7948] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 124.057526][ T7949] IPVS: wrr: FWM 4 0x00000004 - no destination available [ 124.115101][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 124.131671][ T7915] XFS (loop4): Ending clean mount [ 124.138073][ T7915] XFS (loop4): Quotacheck needed: Please wait. [ 124.202959][ T7960] loop3: detected capacity change from 0 to 512 [ 124.204342][ T7915] XFS (loop4): Quotacheck: Done. [ 124.251797][ T4307] XFS (loop4): Unmounting Filesystem [ 124.253361][ T7960] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 124.328249][ T7960] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz.3.1038: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 124.356165][ T7960] EXT4-fs (loop3): Remounting filesystem read-only [ 124.359884][ T7960] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz.3.1038: directory missing '.' [ 124.416869][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 124.431303][ T47] Bluetooth: hci2: link tx timeout [ 124.432820][ T47] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.495809][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 124.506914][ T7968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1043'. [ 124.523613][ T7970] loop5: detected capacity change from 0 to 2048 [ 124.598030][ T7970] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 124.649435][ T7982] sctp: [Deprecated]: syz.2.1046 (pid 7982) Use of int in maxseg socket option. [ 124.649435][ T7982] Use struct sctp_assoc_value instead [ 124.708305][ T4960] EXT4-fs (loop5): unmounting filesystem. [ 125.012871][ T7999] loop5: detected capacity change from 0 to 256 [ 125.077918][ T7999] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 125.196999][ T8009] loop1: detected capacity change from 0 to 256 [ 125.215143][ T8013] loop5: detected capacity change from 0 to 128 [ 125.222891][ T8009] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006005) [ 125.648941][ T8035] netlink: 1056 bytes leftover after parsing attributes in process `syz.1.1071'. [ 125.727673][ T8041] loop5: detected capacity change from 0 to 512 [ 125.729613][ T8041] EXT4-fs: Ignoring removed i_version option [ 125.731501][ T8041] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.739947][ T8041] EXT4-fs (loop5): orphan cleanup on readonly fs [ 125.741248][ T8041] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.1073: bad orphan inode 1 [ 125.745059][ T8041] EXT4-fs (loop5): Remounting filesystem read-only [ 125.749428][ T8041] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 125.777227][ T8041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.782403][ T8041] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 125.792384][ T8041] EXT4-fs: can't change dax mount option while remounting [ 125.884805][ T4960] EXT4-fs error (device loop5): ext4_readdir:260: inode #11: block 21: comm syz-executor: path /159/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=64815104, rec_len=1024, size=1024 fake=0 [ 125.903147][ T8054] IPVS: wrr: FWM 4 0x00000004 - no destination available [ 125.909788][ T4960] EXT4-fs error (device loop5): ext4_lookup:1858: inode #16: comm syz-executor: iget: bad extra_isize 2080 (inode size 256) [ 125.914554][ T4960] EXT4-fs error (device loop5): ext4_lookup:1858: inode #16: comm syz-executor: iget: bad extra_isize 2080 (inode size 256) [ 125.937511][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.938839][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.951071][ T4299] Bluetooth: hci2: link tx timeout [ 125.952165][ T4299] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.144873][ T8052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.147965][ T8052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.211405][ T7711] ------------[ cut here ]------------ [ 126.212803][ T7711] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 126.214385][ T7711] WARNING: CPU: 0 PID: 7711 at fs/sysfs/group.c:280 sysfs_remove_group+0x174/0x288 [ 126.216363][ T7711] Modules linked in: [ 126.217264][ T7711] CPU: 0 PID: 7711 Comm: kbnepd bnep0 Not tainted 6.1.119-syzkaller #0 [ 126.219024][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.221148][ T7711] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 126.222667][ T7711] pc : sysfs_remove_group+0x174/0x288 [ 126.223819][ T7711] lr : sysfs_remove_group+0x174/0x288 [ 126.225031][ T7711] sp : ffff800021c97840 [ 126.225945][ T7711] x29: ffff800021c97840 x28: 1fffe0001e4060ca x27: 1fffe0001e406088 [ 126.227634][ T7711] x26: 0000000000000000 x25: 00000000ffffffff x24: 1ffff00002874750 [ 126.229192][ T7711] x23: dfff800000000000 x22: dfff800000000000 x21: ffff0000f0522020 [ 126.230921][ T7711] x20: ffff0000f060fe80 x19: ffff8000143a4160 x18: ffff800021c96c40 [ 126.232716][ T7711] x17: 0000000000000000 x16: ffff800012325074 x15: 0000000000000000 [ 126.234476][ T7711] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000000001 [ 126.236139][ T7711] x11: 0000000000ff0100 x10: 0000000000000000 x9 : 497bf14732ef4c00 [ 126.237949][ T7711] x8 : 497bf14732ef4c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 126.239676][ T7711] x5 : ffff800021c97138 x4 : ffff800015b630e0 x3 : ffff800008585a08 [ 126.241319][ T7711] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 126.242987][ T7711] Call trace: [ 126.243632][ T7711] sysfs_remove_group+0x174/0x288 [ 126.244756][ T7711] netdev_queue_update_kobjects+0x3d4/0x470 [ 126.246055][ T7711] netdev_unregister_kobject+0x100/0x204 [ 126.247259][ T7711] unregister_netdevice_many+0x11b8/0x175c [ 126.248502][ T7711] unregister_netdev+0x178/0x1f0 [ 126.249479][ T7711] bnep_session+0x23c4/0x2584 [ 126.250429][ T7711] kthread+0x250/0x2d8 [ 126.251235][ T7711] ret_from_fork+0x10/0x20 [ 126.252151][ T7711] irq event stamp: 7708 [ 126.253007][ T7711] hardirqs last enabled at (7707): [] __up_console_sem+0xb4/0x100 [ 126.254857][ T7711] hardirqs last disabled at (7708): [] el1_dbg+0x24/0x80 [ 126.256842][ T7711] softirqs last enabled at (7604): [] dev_mc_flush+0x1b4/0x1f8 [ 126.258748][ T7711] softirqs last disabled at (7602): [] local_bh_disable+0x10/0x34 [ 126.260878][ T7711] ---[ end trace 0000000000000000 ]--- [ 126.267132][ T7711] ================================================================== [ 126.268719][ T7711] BUG: KASAN: use-after-free in device_for_each_child+0xa8/0x174 [ 126.270257][ T7711] Read of size 8 at addr ffff0000d9a414b8 by task kbnepd bnep0/7711 [ 126.271909][ T7711] [ 126.272345][ T7711] CPU: 0 PID: 7711 Comm: kbnepd bnep0 Tainted: G W 6.1.119-syzkaller #0 [ 126.274270][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.276335][ T7711] Call trace: [ 126.277057][ T7711] dump_backtrace+0x1c8/0x1f4 [ 126.278036][ T7711] show_stack+0x2c/0x3c [ 126.278994][ T7711] dump_stack_lvl+0x108/0x170 [ 126.280000][ T7711] print_report+0x174/0x4c0 [ 126.280968][ T7711] kasan_report+0xd4/0x130 [ 126.281912][ T7711] __asan_report_load8_noabort+0x2c/0x38 [ 126.283099][ T7711] device_for_each_child+0xa8/0x174 [ 126.284145][ T7711] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 126.285349][ T7711] netdev_unregister_kobject+0x144/0x204 [ 126.286644][ T7711] unregister_netdevice_many+0x11b8/0x175c [ 126.287877][ T7711] unregister_netdev+0x178/0x1f0 [ 126.288998][ T7711] bnep_session+0x23c4/0x2584 [ 126.289898][ T7711] kthread+0x250/0x2d8 [ 126.290712][ T7711] ret_from_fork+0x10/0x20 [ 126.291553][ T7711] [ 126.292046][ T7711] Allocated by task 4960: [ 126.292908][ T7711] kasan_set_track+0x4c/0x80 [ 126.293765][ T7711] kasan_save_alloc_info+0x24/0x30 [ 126.294792][ T7711] __kasan_kmalloc+0xac/0xc4 [ 126.295716][ T7711] __kmalloc+0xd8/0x1c4 [ 126.296530][ T7711] hci_alloc_dev_priv+0x30/0x18a8 [ 126.297574][ T7711] vhci_create_device+0xf8/0x6d0 [ 126.298575][ T7711] vhci_write+0x318/0x3b8 [ 126.299510][ T7711] vfs_write+0x610/0x91c [ 126.300427][ T7711] ksys_write+0x15c/0x26c [ 126.301362][ T7711] __arm64_sys_write+0x7c/0x90 [ 126.302314][ T7711] invoke_syscall+0x98/0x2bc [ 126.303371][ T7711] el0_svc_common+0x138/0x258 [ 126.304327][ T7711] do_el0_svc+0x58/0x13c [ 126.305276][ T7711] el0_svc+0x58/0x168 [ 126.306261][ T7711] el0t_64_sync_handler+0x84/0xf0 [ 126.307239][ T7711] el0t_64_sync+0x18c/0x190 [ 126.308164][ T7711] [ 126.308672][ T7711] Freed by task 4960: [ 126.309515][ T7711] kasan_set_track+0x4c/0x80 [ 126.310465][ T7711] kasan_save_free_info+0x38/0x5c [ 126.311508][ T7711] ____kasan_slab_free+0x144/0x1c0 [ 126.312696][ T7711] __kasan_slab_free+0x18/0x28 [ 126.313677][ T7711] __kmem_cache_free+0x2c0/0x4b4 [ 126.314684][ T7711] kfree+0xcc/0x1b8 [ 126.315430][ T7711] hci_release_dev+0x1040/0x11a8 [ 126.316459][ T7711] bt_host_release+0x70/0x88 [ 126.317425][ T7711] device_release+0x8c/0x1ac [ 126.318487][ T7711] kobject_put+0x2a8/0x41c [ 126.319377][ T7711] put_device+0x28/0x40 [ 126.320221][ T7711] hci_free_dev+0x24/0x34 [ 126.321115][ T7711] vhci_release+0x84/0xcc [ 126.321958][ T7711] __fput+0x1c8/0x7c8 [ 126.322811][ T7711] ____fput+0x20/0x30 [ 126.323690][ T7711] task_work_run+0x240/0x2f0 [ 126.324584][ T7711] do_exit+0x554/0x1a88 [ 126.325475][ T7711] do_group_exit+0x194/0x22c [ 126.326373][ T7711] __wake_up_parent+0x0/0x60 [ 126.327316][ T7711] invoke_syscall+0x98/0x2bc [ 126.328241][ T7711] el0_svc_common+0x138/0x258 [ 126.329210][ T7711] do_el0_svc+0x58/0x13c [ 126.330021][ T7711] el0_svc+0x58/0x168 [ 126.330933][ T7711] el0t_64_sync_handler+0x84/0xf0 [ 126.331886][ T7711] el0t_64_sync+0x18c/0x190 [ 126.332769][ T7711] [ 126.333222][ T7711] Last potentially related work creation: [ 126.334397][ T7711] kasan_save_stack+0x40/0x70 [ 126.335460][ T7711] __kasan_record_aux_stack+0xcc/0xe8 [ 126.336691][ T7711] kasan_record_aux_stack_noalloc+0x14/0x20 [ 126.337882][ T7711] insert_work+0x64/0x384 [ 126.338752][ T7711] __queue_work+0xd48/0x136c [ 126.339727][ T7711] queue_work_on+0xc0/0x16c [ 126.340618][ T7711] hci_send_acl+0x904/0xc48 [ 126.341534][ T7711] l2cap_do_send+0x238/0x350 [ 126.342498][ T7711] l2cap_chan_send+0x190c/0x1e5c [ 126.343481][ T7711] l2cap_sock_sendmsg+0x184/0x2a8 [ 126.344486][ T7711] kernel_sendmsg+0x1c8/0x2a0 [ 126.345451][ T7711] bnep_session+0x1f28/0x2584 [ 126.346428][ T7711] kthread+0x250/0x2d8 [ 126.347305][ T7711] ret_from_fork+0x10/0x20 [ 126.348211][ T7711] [ 126.348715][ T7711] Second to last potentially related work creation: [ 126.350099][ T7711] kasan_save_stack+0x40/0x70 [ 126.351008][ T7711] __kasan_record_aux_stack+0xcc/0xe8 [ 126.352176][ T7711] kasan_record_aux_stack_noalloc+0x14/0x20 [ 126.353408][ T7711] insert_work+0x64/0x384 [ 126.354295][ T7711] __queue_work+0xd48/0x136c [ 126.355249][ T7711] queue_work_on+0xc0/0x16c [ 126.356134][ T7711] hci_send_acl+0x904/0xc48 [ 126.357062][ T7711] l2cap_do_send+0x238/0x350 [ 126.357982][ T7711] l2cap_chan_send+0x190c/0x1e5c [ 126.359070][ T7711] l2cap_sock_sendmsg+0x184/0x2a8 [ 126.360199][ T7711] kernel_sendmsg+0x1c8/0x2a0 [ 126.361054][ T7711] bnep_session+0x1f28/0x2584 [ 126.362018][ T7711] kthread+0x250/0x2d8 [ 126.362887][ T7711] ret_from_fork+0x10/0x20 [ 126.363712][ T7711] [ 126.364162][ T7711] The buggy address belongs to the object at ffff0000d9a40000 [ 126.364162][ T7711] which belongs to the cache kmalloc-8k of size 8192 [ 126.366900][ T7711] The buggy address is located 5304 bytes inside of [ 126.366900][ T7711] 8192-byte region [ffff0000d9a40000, ffff0000d9a42000) [ 126.369528][ T7711] [ 126.370011][ T7711] The buggy address belongs to the physical page: [ 126.371431][ T7711] page:000000005010863f refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119a40 [ 126.373633][ T7711] head:000000005010863f order:3 compound_mapcount:0 compound_pincount:0 [ 126.375264][ T7711] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 126.376859][ T7711] raw: 05ffc00000010200 fffffc000364aa00 dead000000000003 ffff0000c0002c00 [ 126.378578][ T7711] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 126.380283][ T7711] page dumped because: kasan: bad access detected [ 126.381546][ T7711] [ 126.382012][ T7711] Memory state around the buggy address: [ 126.383157][ T7711] ffff0000d9a41380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.384717][ T7711] ffff0000d9a41400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.386366][ T7711] >ffff0000d9a41480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.387948][ T7711] ^ [ 126.389161][ T7711] ffff0000d9a41500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.390832][ T7711] ffff0000d9a41580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.392478][ T7711] ================================================================== [ 126.395124][ T7711] Disabling lock debugging due to kernel taint [ 126.396555][ T7711] ================================================================================ [ 126.398474][ T7711] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:131:9 [ 126.400054][ T7711] index 15383 is out of range for type 'unsigned long[8]' [ 126.401623][ T7711] CPU: 0 PID: 7711 Comm: kbnepd bnep0 Tainted: G B W 6.1.119-syzkaller #0 [ 126.403593][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.405699][ T7711] Call trace: [ 126.406352][ T7711] dump_backtrace+0x1c8/0x1f4 [ 126.407385][ T7711] show_stack+0x2c/0x3c [ 126.408217][ T7711] dump_stack_lvl+0x108/0x170 [ 126.409127][ T7711] dump_stack+0x1c/0x58 [ 126.409872][ T7711] __ubsan_handle_out_of_bounds+0xfc/0x148 [ 126.411056][ T7711] queued_spin_lock_slowpath+0x9fc/0xe48 [ 126.412167][ T7711] do_raw_spin_lock+0x330/0x358 [ 126.413111][ T7711] _raw_spin_lock_irqsave+0x74/0xb4 [ 126.414108][ T7711] klist_next+0x8c/0x2e4 [ 126.414951][ T7711] device_for_each_child+0xc0/0x174 [ 126.415968][ T7711] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 126.417064][ T7711] netdev_unregister_kobject+0x144/0x204 [ 126.418145][ T7711] unregister_netdevice_many+0x11b8/0x175c [ 126.419384][ T7711] unregister_netdev+0x178/0x1f0 [ 126.420400][ T7711] bnep_session+0x23c4/0x2584 [ 126.421335][ T7711] kthread+0x250/0x2d8 [ 126.422145][ T7711] ret_from_fork+0x10/0x20 [ 126.423096][ T7711] ================================================================================ [ 126.424880][ T7711] Unable to handle kernel paging request at virtual address 0021aa16d052e904 [ 126.426725][ T7711] Mem abort info: [ 126.427451][ T7711] ESR = 0x0000000096000004 [ 126.428378][ T7711] EC = 0x25: DABT (current EL), IL = 32 bits [ 126.429542][ T7711] SET = 0, FnV = 0 [ 126.430357][ T7711] EA = 0, S1PTW = 0 [ 126.431105][ T7711] FSC = 0x04: level 0 translation fault [ 126.432267][ T7711] Data abort info: [ 126.433010][ T7711] ISV = 0, ISS = 0x00000004 [ 126.433921][ T7711] CM = 0, WnR = 0 [ 126.434694][ T7711] [0021aa16d052e904] address between user and kernel address ranges [ 126.436272][ T7711] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 126.437825][ T7711] Modules linked in: [ 126.438664][ T7711] CPU: 0 PID: 7711 Comm: kbnepd bnep0 Tainted: G B W 6.1.119-syzkaller #0 [ 126.440643][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.442615][ T7711] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 126.444170][ T7711] pc : queued_spin_lock_slowpath+0x3dc/0xe48 [ 126.445396][ T7711] lr : queued_spin_lock_slowpath+0x9fc/0xe48 [ 126.446658][ T7711] sp : ffff800021c975a0 [ 126.447495][ T7711] x29: ffff800021c97640 x28: 000000000000f060 x27: 1ffff00004392ec0 [ 126.449020][ T7711] x26: dfff800000000000 x25: 1fffe0001e4c1b00 x24: 0000000000040000 [ 126.450632][ T7711] x23: ffff0001b3cf5f48 x22: d11150b682974822 x21: ffff0001b3cf5f40 [ 126.452315][ T7711] x20: 1fffe0003679ebe8 x19: ffff0000f260d800 x18: 1fffe0003679c376 [ 126.454002][ T7711] x17: 3d3d3d3d3d3d3d3d x16: ffff800012325074 x15: 0000000000000000 [ 126.455698][ T7711] x14: 00000000ffffffff x13: 0000000000000001 x12: ffff7000030c3ab0 [ 126.457238][ T7711] x11: 0000000000ff0100 x10: ffff8000159e7f40 x9 : 0000000000000000 [ 126.458789][ T7711] x8 : 1a222a16d052e904 x7 : 0000000000000001 x6 : 0000000000000001 [ 126.460491][ T7711] x5 : ffff800021c96e58 x4 : ffff800015b630e0 x3 : ffff8000081a7abc [ 126.462129][ T7711] x2 : 0000000000000001 x1 : 0000000000000003 x0 : 00000000ffffffff [ 126.463767][ T7711] Call trace: [ 126.464380][ T7711] queued_spin_lock_slowpath+0x3dc/0xe48 [ 126.465544][ T7711] do_raw_spin_lock+0x330/0x358 [ 126.466515][ T7711] _raw_spin_lock_irqsave+0x74/0xb4 [ 126.467593][ T7711] klist_next+0x8c/0x2e4 [ 126.468478][ T7711] device_for_each_child+0xc0/0x174 [ 126.469486][ T7711] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 126.470604][ T7711] netdev_unregister_kobject+0x144/0x204 [ 126.471758][ T7711] unregister_netdevice_many+0x11b8/0x175c [ 126.472836][ T7711] unregister_netdev+0x178/0x1f0 [ 126.473816][ T7711] bnep_session+0x23c4/0x2584 [ 126.474721][ T7711] kthread+0x250/0x2d8 [ 126.475592][ T7711] ret_from_fork+0x10/0x20 [ 126.476466][ T7711] Code: f94002c8 8b190116 f9400bf9 d343fec8 (387a6908) [ 126.477836][ T7711] ---[ end trace 0000000000000000 ]--- [ 127.097505][ T7711] Kernel panic - not syncing: Oops: Fatal exception [ 127.098901][ T7711] SMP: stopping secondary CPUs [ 127.099883][ T7711] Kernel Offset: disabled [ 127.100710][ T7711] CPU features: 0x080000,02070084,26017203 [ 127.101997][ T7711] Memory Limit: none [ 127.697726][ T7711] Rebooting in 86400 seconds..