last executing test programs: 5.579505508s ago: executing program 3 (id=631): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xc0) 5.449931881s ago: executing program 3 (id=634): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsopen(0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @local}, 0x2}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x3, 0x20000000, 0x4) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r8, &(0x7f0000000600)='fd/4\x00') 5.380720117s ago: executing program 1 (id=635): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/16, 0x10}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2, &(0x7f0000003700)={0x77359400}) recvmmsg(r0, &(0x7f00000080c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/110, 0x6e}}], 0x1, 0x0, 0x0) 5.294205245s ago: executing program 1 (id=637): r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 5.23046308s ago: executing program 1 (id=638): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsopen(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @local}, 0x2}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x3, 0x20000000, 0x4) r7 = inotify_init1(0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000140)) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x154, 0x0) 5.066912016s ago: executing program 2 (id=641): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e120900180003", 0x29}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 4.936886457s ago: executing program 2 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x32) getsockopt$bt_BT_SECURITY(r3, 0x111, 0x4, 0x0, 0x20001f00) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x58, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x2, 0x2, 0xe, 0xc, "26317ff3dd28c7f3f61b3df52b4f81f662bf46344514596e79dfe9a9d10d89a78716afde837ca0a73ae7e47e5d9d5f8c4f3df8b4f9e2e2311e50d592c32b91be", "e4071f0efc48bf27aa6b95a48c4c890b516f8b81032641690eafc03a5ffc436a", [0x100000000, 0x3]}) r6 = getpid() syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040f040600070448682b3572ce17111318c847c8055e34cf5c2386927e54b1583cd0d30b611e5458ceb7fd2a4b5b661c0283ea104f441aae3761609d2d61e09429df014fab7351bf06b1cb978a0c100e3d28d2c527a557a7bb94277f90f2d60ca2217172caea26020a0ab8b79c535f2f5a5e755a2b4fd86e"], 0x7) getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3.965748036s ago: executing program 2 (id=648): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x95) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x2) sched_setaffinity(0x0, 0xfffffda9, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfe49) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='host1x_channel_submit\x00', r3}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) write(r4, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$802154_dgram(r4, &(0x7f0000000600)={&(0x7f00000003c0)={0x24, @short={0x2, 0xffff, 0x3}}, 0x14, &(0x7f0000000400)={&(0x7f0000000500)="e52ecc3513d5f592c4d4bb128bd0ebfdec6203f695779c1b30dcbc958efdb66a2735031a300f892e1e452888dd862dc55fe6f275d2c0446f86cb39d7c40d536fbfa8e780bf9a2113a47e14cb442c9334db4b3f4ae96a46c7cd5067bc51e1fc445960b0e3515873e0d42116e9d180598ce2c1d66781093e4a755ae5633354ccc4d224eb4daaddb4a522c3833cf822079f38d465b2590e24b4b0bc6b6455c1211b6af5f03539c59b49d0ef7720e8df81a12a52d5fef8098458e38863ff013d7bba0b6221b11791cc8901efedbca3f96c93dc34c60189b49a7b1baf9fb650f4d56ab0dc43c3d354d862d948d35e9aa1eb714aa40b91aa21", 0xf6}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050) recvmmsg(r4, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.413911017s ago: executing program 4 (id=653): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) set_mempolicy(0x2, &(0x7f0000000040)=0x10001, 0x6) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000040)={0x30}, 0x30) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB='2\x00\x00\x00\x00\x00\x00x'], 0x10) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@posixacl}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000001940)=""/4098) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x8, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xfffffffb}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x5}]}}]}, 0x40}}, 0x800) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x0, &(0x7f0000000640)={0x25, 0x0, 0x3}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002e981f274810aa2800a001400aaaaaaaaaaaa0000060009007b000000e358281d7fd111ffc4bc269802f15c3fd6dafba837d44ded61620c83320b2ce7ba46bce5c612bf538b00457e7fee8adf14cffd00000000b399244bd6e9a80fe468f526baa3c41ded189fabeac0cd42d9f007b6999c06e31451a5a8ca12041dafcfdb300c0ae3e2e720de1d43f053f2a915bd23befe5577fbd45a8716c938a61712f85d50f9f3f4d8447abd47f74c046b171918424456818fb408297c3c8c25f272dd8030d8dc3b8a24de9c8f9978a7c114561b14d6fe65506466a011f45d9acc5322b5b90a306ef47e9eddcb807bf5c812bdf55f926d0cc88ea62478c7d77cb422d1be80d7399ee4bcff4830852db95e6ef3e47a1075431c5ca302cda58ee2fefc84cac4a2df7177b4ccd4c9fab323e16777dc8dceb5cab5b160e2301326974d3aef3708a3d3af6710df6e07cbee435841eb0efbbd0dc7016d6eba8c475d63567d066f30a9795b344618f47452ed070996c4eb90"], 0x48}}, 0x0) 3.238193813s ago: executing program 4 (id=655): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x6e}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/16, 0x10}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2, &(0x7f0000003700)={0x77359400}) 3.068078839s ago: executing program 2 (id=656): socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000000), 0x4) r6 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) socket$isdn(0x22, 0x2, 0x0) 3.05690449s ago: executing program 4 (id=657): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000200)={0x2, 'vlan1\x00'}) 2.29337666s ago: executing program 3 (id=658): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000000cc0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRES8=r2, @ANYRES16, @ANYRES8=r1, @ANYRESOCT], 0x1, 0x1d2, &(0x7f0000000700)="$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") 2.203388468s ago: executing program 4 (id=660): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYRES64=0x0], 0x0, 0x238, &(0x7f0000000500)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x6cc, 0x6b9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x400, 0x10000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) r8 = accept4$inet(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000300)=0x10, 0x800) bind$inet(r8, &(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB="2c64656275673d3078383030303030303030303030302a30312c002c0317c96ab72968d7f81d22be31acc3f9d5528da04d53615470840fbca37d200dcc302b4b2734635717436ae2e9194882ccfd7d132f7bbe58e73de8564df7b066aafb18785bd6ba11c5a88ff197fbc4018b395c119bd1b7ae80ee0d3b3681a0c6d0d068f56921d00bdc0693c5603c6d074004d462ddbe7f53737b74a81e4fd363bf672cac47d58dfa759b8b474cb4b3c27cff688f1f969e86e6d18274a68448650abfbb47a72e1ec338bb6ab2aa10ec6074e1e693caa38df45d3cb499133fb5299c376df8b274ef4e81c1c0a6579cb7d2d9bea9ea8b2d95d8c89b3b9fbaa057e0678c787a0543d1458ba77dc281c71047e5764e202484525de7a4981acfa9eaecea6eb3a94a7e63670ec3db3edeeb673c5d42103805645517500f85da4a9405cfc05d4a6055ef8f79f9"]) sendmsg$nl_xfrm(r9, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x695, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), &(0x7f00000003c0), 0x1100) getdents64(r1, 0xfffffffffffffffe, 0x29) 2.138472954s ago: executing program 3 (id=661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x32) getsockopt$bt_BT_SECURITY(r3, 0x111, 0x4, 0x0, 0x20001f00) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x58, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x2, 0x2, 0xe, 0xc, "26317ff3dd28c7f3f61b3df52b4f81f662bf46344514596e79dfe9a9d10d89a78716afde837ca0a73ae7e47e5d9d5f8c4f3df8b4f9e2e2311e50d592c32b91be", "e4071f0efc48bf27aa6b95a48c4c890b516f8b81032641690eafc03a5ffc436a", [0x100000000, 0x3]}) r6 = getpid() syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040f040600070448682b3572ce17111318c847c8055e34cf5c2386927e54b1583cd0d30b611e5458ceb7fd2a4b5b661c0283ea104f441aae3761609d2d61e09429df014fab7351bf06b1cb978a0c100e3d28d2c527a557a7bb94277f90f2d60ca2217172caea26020a0ab8b79c535f2f5a5e755a2b4fd86e"], 0x7) getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2.014602145s ago: executing program 0 (id=663): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010121}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) 1.989962727s ago: executing program 1 (id=664): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="e80002803800010024000100d9476c625f66746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008"], 0x104}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000010000305000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e64000000005400028008001f"], 0x84}}, 0x0) 1.895378226s ago: executing program 0 (id=665): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) 904.592977ms ago: executing program 0 (id=666): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) set_mempolicy(0x2, &(0x7f0000000040)=0x10001, 0x6) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000040)={0x30}, 0x30) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB='2\x00\x00\x00\x00\x00\x00x'], 0x10) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@posixacl}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000001940)=""/4098) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x8, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xfffffffb}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x5}]}}]}, 0x40}}, 0x800) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x0, &(0x7f0000000640)={0x25, 0x0, 0x3}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002e981f274810aa2800a001400aaaaaaaaaaaa0000060009007b000000e358281d7fd111ffc4bc269802f15c3fd6dafba837d44ded61620c83320b2ce7ba46bce5c612bf538b00457e7fee8adf14cffd00000000b399244bd6e9a80fe468f526baa3c41ded189fabeac0cd42d9f007b6999c06e31451a5a8ca12041dafcfdb300c0ae3e2e720de1d43f053f2a915bd23befe5577fbd45a8716c938a61712f85d50f9f3f4d8447abd47f74c046b171918424456818fb408297c3c8c25f272dd8030d8dc3b8a24de9c8f9978a7c114561b14d6fe65506466a011f45d9acc5322b5b90a306ef47e9eddcb807bf5c812bdf55f926d0cc88ea62478c7d77cb422d1be80d7399ee4bcff4830852db95e6ef3e47a1075431c5ca302cda58ee2fefc84cac4a2df7177b4ccd4c9fab323e16777dc8dceb5cab5b160e2301326974d3aef3708a3d3af6710df6e07cbee435841eb0efbbd0dc7016d6eba8c475d63567d066f30a9795b344618f47452ed070996c4eb90"], 0x48}}, 0x0) 904.011737ms ago: executing program 1 (id=667): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x95) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x2) sched_setaffinity(0x0, 0xfffffda9, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfe49) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='host1x_channel_submit\x00', r3}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) write(r4, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$802154_dgram(r4, &(0x7f0000000600)={&(0x7f00000003c0)={0x24, @short={0x2, 0xffff, 0x3}}, 0x14, &(0x7f0000000400)={&(0x7f0000000500)="e52ecc3513d5f592c4d4bb128bd0ebfdec6203f695779c1b30dcbc958efdb66a2735031a300f892e1e452888dd862dc55fe6f275d2c0446f86cb39d7c40d536fbfa8e780bf9a2113a47e14cb442c9334db4b3f4ae96a46c7cd5067bc51e1fc445960b0e3515873e0d42116e9d180598ce2c1d66781093e4a755ae5633354ccc4d224eb4daaddb4a522c3833cf822079f38d465b2590e24b4b0bc6b6455c1211b6af5f03539c59b49d0ef7720e8df81a12a52d5fef8098458e38863ff013d7bba0b6221b11791cc8901efedbca3f96c93dc34c60189b49a7b1baf9fb650f4d56ab0dc43c3d354d862d948d35e9aa1eb714aa40b91aa21", 0xf6}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050) recvmmsg(r4, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 897.519718ms ago: executing program 4 (id=668): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c90"], 0x0) 685.867167ms ago: executing program 3 (id=669): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000200)='./file0\x00', 0x4) 669.130548ms ago: executing program 0 (id=670): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x20, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8179fd1fca0e91dbd64c6a4a4e00d9683d9a1a7fda79de2b71894e20000000000cc0000030091a2009f00000000010000000000000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b4205fea3c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000000000f0ffffff00"}}) 645.29589ms ago: executing program 2 (id=671): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 559.124698ms ago: executing program 2 (id=672): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x2800400, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f63616c616c6c6f633d31383434363734343037333730393535313630382c726573765f6c6576656c3d30303030303030303030303030303030303030322c6865617274626561743d6e6f6e652c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c6e6f696e74722c636f686572656e63793d66756c6c2c6e6f61636c2c636f686572656e63793d66756c6c2c646174613d6f7264657265642c00a6bbbf4f1c4504306b696ca03fb375edc4c5f0f579bf2195c3cc88165b8c279abaa84a848971253cb6e898fee96fa6"], 0x8, 0x446c, &(0x7f0000004780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 550.054799ms ago: executing program 0 (id=673): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21081e, &(0x7f0000000200), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x20001419) 246.390897ms ago: executing program 0 (id=674): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsopen(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @local}, 0x2}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x3, 0x20000000, 0x4) r7 = inotify_init1(0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000140)) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x154, 0x0) 235.154838ms ago: executing program 3 (id=675): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 65.027124ms ago: executing program 4 (id=676): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x17) 0s ago: executing program 1 (id=677): socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) kernel console output (not intermixed with test programs): T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.915981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.918138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.926094][ T4303] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.938754][ T4296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.941120][ T4296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.944823][ T4300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.012362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.014600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.016659][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.018064][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.019891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.021808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.024183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.026831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.029386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.031608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.034973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.036930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.039565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.041782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.044536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.046819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.049011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.051312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.089480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.091967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.094507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.096583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.098832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.101069][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.102764][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.110854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.114869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.116945][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.118449][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.120172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.124214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.126587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.128956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.131307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.134874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.136999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.139199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.141303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.159741][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.173474][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.175980][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.180387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.184236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.186561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.203357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.205538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.207626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.209623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.220151][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.250624][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.279458][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.290560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.293443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.303363][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.314004][ T4302] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.319334][ T4300] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.320941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.323686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.325633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.327590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.359751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.363077][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.365534][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.367052][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.369333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.371587][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.376327][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.377798][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.379598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.382383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.384601][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.385983][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.387815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.389964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.393470][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.394994][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.396873][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.399113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.401393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.405575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.408080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.428801][ T4293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.437868][ T4300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.440136][ T4300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.453924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.456208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.458670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.461198][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.464318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.466614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.468800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.471573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.474757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.476846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.478875][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.480419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.489531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.493820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.496204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.518174][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.521107][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.525893][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.528098][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.537826][ T4296] device veth0_vlan entered promiscuous mode [ 39.541456][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.544517][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.548892][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.550969][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.554549][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.556735][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.558828][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.560968][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.564120][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.570686][ T4302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.580382][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.597870][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.599993][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.602891][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.604592][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.615692][ T4303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.627550][ T4296] device veth1_vlan entered promiscuous mode [ 39.630341][ T4293] device veth0_vlan entered promiscuous mode [ 39.635337][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.637475][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.639581][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.653608][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.656206][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.670144][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.675003][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.687437][ T4293] device veth1_vlan entered promiscuous mode [ 39.707803][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.710500][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.713519][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.715687][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.717834][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.720776][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.723908][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.729632][ T4303] device veth0_vlan entered promiscuous mode [ 39.733666][ T4296] device veth0_macvtap entered promiscuous mode [ 39.744654][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.753317][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.755480][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.757915][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.760063][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.763285][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.767769][ T4303] device veth1_vlan entered promiscuous mode [ 39.776970][ T4296] device veth1_macvtap entered promiscuous mode [ 39.781075][ T4293] device veth0_macvtap entered promiscuous mode [ 39.786289][ T4293] device veth1_macvtap entered promiscuous mode [ 39.788589][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.790616][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.794496][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.796659][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.798789][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.800767][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.805020][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.831323][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.838547][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.840637][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.843218][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.845342][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.854664][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.856871][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.860054][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.863242][ T4303] device veth0_macvtap entered promiscuous mode [ 39.867628][ T4303] device veth1_macvtap entered promiscuous mode [ 39.869731][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.876588][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.878780][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.880413][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.886527][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.888820][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.897030][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.900403][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.903798][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.905920][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.908862][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.919133][ T4293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.921004][ T4293] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.923643][ T4293] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.925503][ T4293] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.944171][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.946549][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.948739][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.951323][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.956234][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.958462][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.961950][ T4296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.963733][ T4296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.965637][ T4296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.967504][ T4296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.010354][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.014122][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.016146][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.018261][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.021415][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.044607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.046724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.048847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.058778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.060986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.064057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.067399][ T4302] device veth0_vlan entered promiscuous mode [ 40.070655][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.073708][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.075755][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.077994][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.081326][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.106202][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.108447][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.112211][ T47] Bluetooth: hci0: command tx timeout [ 40.134451][ T4303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.136517][ T4303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.138240][ T4303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.140023][ T4303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.145624][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.147445][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.152371][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.154645][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.156835][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.165865][ T4300] device veth0_vlan entered promiscuous mode [ 40.173478][ T4300] device veth1_vlan entered promiscuous mode [ 40.176572][ T4302] device veth1_vlan entered promiscuous mode [ 40.192146][ T4294] Bluetooth: hci2: command tx timeout [ 40.192862][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.193351][ T4294] Bluetooth: hci1: command tx timeout [ 40.194907][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.198862][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.205659][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.208281][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.210417][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.213953][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.216083][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.218063][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.220200][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.224787][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.258947][ T4302] device veth0_macvtap entered promiscuous mode [ 40.261263][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.264342][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.266615][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.268854][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.271153][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.273575][ T47] Bluetooth: hci3: command tx timeout [ 40.274706][ T47] Bluetooth: hci4: command tx timeout [ 40.286263][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.287794][ T4300] device veth0_macvtap entered promiscuous mode [ 40.288008][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.291533][ T4300] device veth1_macvtap entered promiscuous mode [ 40.304751][ T4302] device veth1_macvtap entered promiscuous mode [ 40.320500][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.323722][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.325752][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.327822][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.329810][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.333467][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.338264][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.340077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.343689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.345816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.347791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.350122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.353371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.369579][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.374716][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.376822][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.379090][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.381250][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.388588][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.390817][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.393157][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.396975][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.404770][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.407081][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.409435][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.411510][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.414418][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.416518][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.419787][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.429687][ T4302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.431613][ T4302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.440982][ T4302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.443689][ T4302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.450055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.452712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.454891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.457115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.460289][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.463104][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.465063][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.467266][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.469202][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.471560][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.474739][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.477191][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.480491][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.487499][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.489297][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.491526][ T4300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.493598][ T4300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.495442][ T4300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.497296][ T4300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.517362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.519747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.522278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.534648][ T1821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.536346][ T1821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.608351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.616146][ T1821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.617951][ T1821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.633000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.672463][ T4371] random: crng reseeded on system resumption [ 40.683059][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.685299][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.696338][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.732103][ T1821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.734025][ T1821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.759441][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.761230][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.764493][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.776975][ T4373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 40.794834][ T1821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.796641][ T1821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.799239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.801503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.867913][ T4377] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 41.036691][ T4387] loop0: detected capacity change from 0 to 256 [ 41.038550][ T4387] ======================================================= [ 41.038550][ T4387] WARNING: The mand mount option has been deprecated and [ 41.038550][ T4387] and is ignored by this kernel. Remove the mand [ 41.038550][ T4387] option from the mount to silence this warning. [ 41.038550][ T4387] ======================================================= [ 41.121329][ T4387] FAT-fs (loop0): Directory bread(block 64) failed [ 41.123970][ T4387] FAT-fs (loop0): Directory bread(block 65) failed [ 41.125549][ T4387] FAT-fs (loop0): Directory bread(block 66) failed [ 41.126919][ T4387] FAT-fs (loop0): Directory bread(block 67) failed [ 41.128292][ T4387] FAT-fs (loop0): Directory bread(block 68) failed [ 41.129660][ T4387] FAT-fs (loop0): Directory bread(block 69) failed [ 41.131064][ T4387] FAT-fs (loop0): Directory bread(block 70) failed [ 41.145679][ T4394] loop3: detected capacity change from 0 to 512 [ 41.159498][ T4383] loop4: detected capacity change from 0 to 8192 [ 41.164684][ T4387] FAT-fs (loop0): Directory bread(block 71) failed [ 41.166190][ T4387] FAT-fs (loop0): Directory bread(block 72) failed [ 41.167482][ T4387] FAT-fs (loop0): Directory bread(block 73) failed [ 41.185005][ T4383] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 41.185479][ T4395] loop2: detected capacity change from 0 to 1024 [ 41.187783][ T4383] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 41.191024][ T4383] REISERFS (device loop4): using ordered data mode [ 41.215230][ T4394] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.219342][ T4394] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.225810][ T4383] reiserfs: using flush barriers [ 41.242534][ T4383] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.247003][ T4383] REISERFS (device loop4): checking transaction log (loop4) [ 41.259391][ T4395] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 41.302860][ T4394] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.12: corrupted in-inode xattr [ 41.306147][ T4383] REISERFS (device loop4): Using tea hash to sort names [ 41.323231][ T4394] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.12: couldn't read orphan inode 15 (err -117) [ 41.334141][ T4394] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.392707][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 41.463356][ T4287] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.469801][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 41.515050][ T4405] loop2: detected capacity change from 0 to 1024 [ 41.594178][ T4407] loop3: detected capacity change from 0 to 1024 [ 41.724686][ T4399] loop1: detected capacity change from 0 to 32768 [ 41.726764][ T9] hfsplus: b-tree write err: -5, ino 8 [ 41.830964][ T9] hfsplus: b-tree write err: -5, ino 4 [ 41.834208][ T4399] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 41.933269][ T4415] loop3: detected capacity change from 0 to 512 [ 41.950860][ T4293] ocfs2: Unmounting device (7,1) on (node local) [ 41.966650][ T4409] loop4: detected capacity change from 0 to 32768 [ 42.010900][ T4409] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 42.030547][ T4415] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 42.140814][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 42.202601][ T4294] Bluetooth: hci0: command tx timeout [ 42.233076][ T4300] ocfs2: Unmounting device (7,4) on (node local) [ 42.238988][ T4430] loop2: detected capacity change from 0 to 512 [ 42.254532][ T4431] capability: warning: `syz.1.21' uses deprecated v2 capabilities in a way that may be insecure [ 42.274363][ T47] Bluetooth: hci1: command tx timeout [ 42.275595][ T47] Bluetooth: hci2: command tx timeout [ 42.315143][ T4430] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.25: bg 0: block 5: invalid block bitmap [ 42.342237][ T4430] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 42.353741][ T4294] Bluetooth: hci4: command tx timeout [ 42.354933][ T4294] Bluetooth: hci3: command tx timeout [ 42.363461][ T4430] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.25: invalid indirect mapped block 3 (level 2) [ 42.366563][ T4430] EXT4-fs (loop2): 1 orphan inode deleted [ 42.367975][ T4430] EXT4-fs (loop2): 1 truncate cleaned up [ 42.369151][ T4430] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 42.397789][ T4438] random: crng reseeded on system resumption [ 42.565061][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 42.879923][ T4463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.40'. [ 43.088290][ T4411] loop0: detected capacity change from 0 to 65536 [ 43.110317][ T4480] loop4: detected capacity change from 0 to 256 [ 43.146119][ T4486] loop2: detected capacity change from 0 to 512 [ 43.157627][ T4486] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.51: invalid indirect mapped block 256 (level 2) [ 43.169112][ T4480] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 43.187134][ T4411] XFS (loop0): Mounting V5 Filesystem [ 43.199229][ T4486] EXT4-fs (loop2): 2 truncates cleaned up [ 43.200529][ T4486] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.206050][ T4494] loop3: detected capacity change from 0 to 512 [ 43.254499][ T4494] EXT2-fs (loop3): nobh option not supported [ 43.278378][ T4494] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 43.311032][ T4496] loop4: detected capacity change from 0 to 164 [ 43.336225][ T4411] XFS (loop0): Ending clean mount [ 43.352384][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 43.385051][ T4411] Process accounting resumed [ 43.451530][ T4498] loop2: detected capacity change from 0 to 64 [ 43.490661][ T4296] XFS (loop0): Unmounting Filesystem [ 43.547367][ T4502] loop3: detected capacity change from 0 to 164 [ 43.579108][ T4500] loop4: detected capacity change from 0 to 4096 [ 43.615166][ T4500] ntfs: volume version 3.1. [ 43.813795][ T4484] loop1: detected capacity change from 0 to 32768 [ 43.850282][ T4484] XFS (loop1): Mounting V5 Filesystem [ 43.959552][ T4484] XFS (loop1): Ending clean mount [ 43.964739][ T4484] XFS (loop1): Quotacheck needed: Please wait. [ 44.029036][ T4484] XFS (loop1): Quotacheck: Done. [ 44.062814][ T4484] syz.1.48: attempt to access beyond end of device [ 44.062814][ T4484] loop1: rw=4096, sector=22608914004574207, nr_sectors = 1 limit=32768 [ 44.176707][ T4522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.201053][ T4504] loop2: detected capacity change from 0 to 32768 [ 44.238958][ T4506] loop3: detected capacity change from 0 to 32768 [ 44.243161][ T4522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.249839][ T4506] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.58 (4506) [ 44.273021][ T47] Bluetooth: hci0: command tx timeout [ 44.293547][ T4506] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 44.296086][ T4506] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 44.297963][ T4506] BTRFS info (device loop3): using free space tree [ 44.353610][ T4294] Bluetooth: hci2: command tx timeout [ 44.354812][ T4294] Bluetooth: hci1: command tx timeout [ 44.369859][ T4504] XFS (loop2): Mounting V5 Filesystem [ 44.427920][ T4504] XFS (loop2): Ending clean mount [ 44.442977][ T47] Bluetooth: hci3: command tx timeout [ 44.444118][ T47] Bluetooth: hci4: command tx timeout [ 44.524870][ T4293] XFS (loop1): Unmounting Filesystem [ 44.528226][ T4302] XFS (loop2): Unmounting Filesystem [ 44.534333][ T4555] loop0: detected capacity change from 0 to 256 [ 44.536210][ T4555] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.540354][ T4506] BTRFS info (device loop3): enabling ssd optimizations [ 44.632707][ T4506] BTRFS info (device loop3): balance: start -f -sconvert=raid0,profiles=data|system|metadata|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=8,usage=8..0,devid=0,vrange=0..0,limit=0,stripes=0..0 [ 44.642842][ T4506] BTRFS info (device loop3): balance: ended with status: 0 [ 44.730609][ T4560] loop0: detected capacity change from 0 to 16 [ 44.733031][ T4303] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 44.743819][ T4560] erofs: (device loop0): mounted with root inode @ nid 36. [ 44.834907][ T4562] loop4: detected capacity change from 0 to 256 [ 44.883023][ T4562] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 44.907618][ T4567] loop0: detected capacity change from 0 to 256 [ 44.962953][ T4567] FAT-fs (loop0): Directory bread(block 64) failed [ 44.976058][ T4567] FAT-fs (loop0): Directory bread(block 65) failed [ 44.977519][ T4567] FAT-fs (loop0): Directory bread(block 66) failed [ 44.978857][ T4567] FAT-fs (loop0): Directory bread(block 67) failed [ 44.980174][ T4567] FAT-fs (loop0): Directory bread(block 68) failed [ 44.981469][ T4567] FAT-fs (loop0): Directory bread(block 69) failed [ 45.018004][ T4567] FAT-fs (loop0): Directory bread(block 70) failed [ 45.019444][ T4567] FAT-fs (loop0): Directory bread(block 71) failed [ 45.020857][ T4567] FAT-fs (loop0): Directory bread(block 72) failed [ 45.046033][ T4567] FAT-fs (loop0): Directory bread(block 73) failed [ 45.306602][ T4575] process 'syz.4.69' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 46.189880][ T4573] loop1: detected capacity change from 0 to 4096 [ 46.412254][ T4573] ntfs3: loop1: failed to convert "0080" to macgaelic [ 46.452007][ T4573] ntfs3: loop1: failed to convert name for inode 1e. [ 46.566132][ T4592] loop1: detected capacity change from 0 to 512 [ 46.589586][ T4592] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.591579][ T4595] loop3: detected capacity change from 0 to 64 [ 46.610388][ T4596] loop4: detected capacity change from 0 to 64 [ 46.684994][ T4592] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2808: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 46.691587][ T4592] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.75: invalid indirect mapped block 4294967295 (level 0) [ 46.716559][ T4592] EXT4-fs (loop1): Remounting filesystem read-only [ 46.717962][ T4592] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.75: invalid indirect mapped block 4294967295 (level 1) [ 46.742520][ T4592] EXT4-fs (loop1): 1 orphan inode deleted [ 46.764206][ T4592] EXT4-fs (loop1): 1 truncate cleaned up [ 46.765407][ T4592] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 46.842970][ T4590] loop2: detected capacity change from 0 to 32768 [ 46.858763][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 47.659301][ T4590] XFS (loop2): Mounting V5 Filesystem [ 47.802740][ T4590] XFS (loop2): Ending clean mount [ 47.807395][ T4590] XFS (loop2): Quotacheck needed: Please wait. [ 47.831212][ T4590] XFS (loop2): Quotacheck: Done. [ 47.837244][ T4590] syz.2.74: attempt to access beyond end of device [ 47.837244][ T4590] loop2: rw=4096, sector=22608914004574207, nr_sectors = 1 limit=32768 [ 47.882814][ T4623] loop3: detected capacity change from 0 to 256 [ 47.918744][ T4623] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 48.871165][ T4589] loop0: detected capacity change from 0 to 32768 [ 48.874919][ T4589] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.72 (4589) [ 48.886446][ T4589] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 48.888575][ T4589] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 48.890332][ T4589] BTRFS info (device loop0): using free space tree [ 49.646345][ T4619] loop4: detected capacity change from 0 to 32768 [ 49.703149][ T4589] BTRFS error (device loop0): open_ctree failed [ 49.710730][ T4403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4403) [ 49.868768][ T4302] XFS (loop2): Unmounting Filesystem [ 49.891177][ T4619] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 50.000216][ T4300] ocfs2: Unmounting device (7,4) on (node local) [ 50.173810][ T4666] loop3: detected capacity change from 0 to 1764 [ 50.810999][ T4666] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 50.824269][ T4675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 50.826211][ T4675] IPv6: NLM_F_CREATE should be set when creating new route [ 50.963878][ T4683] loop2: detected capacity change from 0 to 256 [ 51.794847][ T4688] loop3: detected capacity change from 0 to 256 [ 51.815232][ T4690] loop4: detected capacity change from 0 to 128 [ 51.825060][ T4688] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 51.873614][ T4690] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 51.924463][ T4690] syz.4.97: attempt to access beyond end of device [ 51.924463][ T4690] loop4: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 51.927407][ T4690] sysv_free_block: trying to free block not in datazone [ 52.690927][ T4300] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 52.914783][ T4673] loop0: detected capacity change from 0 to 32768 [ 53.018521][ T4705] loop3: detected capacity change from 0 to 1024 [ 53.050997][ T4705] EXT4-fs: Ignoring removed nobh option [ 53.074281][ T4703] loop4: detected capacity change from 0 to 4096 [ 53.081793][ T4703] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 53.085835][ T4705] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.103: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 53.089764][ T4705] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.103: couldn't read orphan inode 11 (err -117) [ 53.107921][ T4703] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 53.112984][ T4705] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 53.148331][ T4705] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.103: Invalid block bitmap block 0 in block_group 0 [ 53.150327][ T4703] ntfs3: loop4: Failed to load $Extend. [ 53.153077][ T4705] Quota error (device loop3): write_blk: dquota write failed [ 53.154803][ T4705] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 53.156886][ T4705] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.103: Failed to acquire dquot type 0 [ 53.207461][ T4679] loop1: detected capacity change from 0 to 32768 [ 53.209213][ T4679] XFS: attr2 mount option is deprecated. [ 53.210372][ T4679] XFS: ikeep mount option is deprecated. [ 53.211625][ T4679] XFS: noikeep mount option is deprecated. [ 53.216629][ T4692] loop2: detected capacity change from 0 to 32768 [ 53.240048][ T4692] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 53.242830][ T4692] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 53.244547][ T4692] BTRFS info (device loop2): using free space tree [ 53.245577][ T4703] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 53.286126][ T4697] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 53.288190][ T4697] EXT4-fs error (device loop3): ext4_release_dquot:6823: comm kworker/u4:13: Failed to release dquot type 0 [ 53.299069][ T4679] XFS (loop1): Mounting V5 Filesystem [ 53.301047][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 53.345997][ T4300] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 53.348885][ T4300] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22. [ 53.370160][ T4726] loop0: detected capacity change from 0 to 2048 [ 53.413977][ T4679] XFS (loop1): Ending clean mount [ 53.415907][ T4692] BTRFS info (device loop2): enabling ssd optimizations [ 53.436339][ T4679] XFS (loop1): Quotacheck needed: Please wait. [ 53.483540][ T4679] XFS (loop1): Quotacheck: Done. [ 53.508355][ T4740] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 53.623741][ T4302] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 53.628111][ T4293] XFS (loop1): Unmounting Filesystem [ 53.810241][ T4744] loop3: detected capacity change from 0 to 4096 [ 54.667227][ T4751] loop0: detected capacity change from 0 to 1024 [ 54.684246][ T4751] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.731939][ T4751] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 54.744914][ T4757] loop2: detected capacity change from 0 to 256 [ 54.753820][ T4757] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 54.793706][ T4741] loop4: detected capacity change from 0 to 32768 [ 54.887065][ T4296] EXT4-fs (loop0): unmounting filesystem. [ 54.966210][ T4741] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 55.693611][ T4774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 55.695436][ T4774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.115'. [ 55.722188][ T4774] netlink: 'syz.3.115': attribute type 18 has an invalid length. [ 55.820681][ T4300] ocfs2: Unmounting device (7,4) on (node local) [ 56.010695][ T4781] loop3: detected capacity change from 0 to 4096 [ 56.090779][ T4781] ntfs3: loop3: failed to convert "0080" to maccroatian [ 56.096549][ T4781] ntfs3: loop3: failed to convert name for inode 1e. [ 56.206798][ T4789] loop1: detected capacity change from 0 to 2048 [ 56.741439][ T4789] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 56.861549][ T4767] loop0: detected capacity change from 0 to 32768 [ 56.865415][ T4767] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.114 (4767) [ 56.878027][ T4767] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 56.880131][ T4767] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 56.881985][ T4767] BTRFS info (device loop0): using free space tree [ 56.929206][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 56.988630][ T4809] loop3: detected capacity change from 0 to 256 [ 57.010987][ T4809] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 57.058013][ T4814] loop4: detected capacity change from 0 to 1024 [ 57.118857][ T4814] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.124: Invalid block bitmap block 0 in block_group 0 [ 57.133369][ T4814] Quota error (device loop4): write_blk: dquota write failed [ 57.135085][ T4814] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 57.160853][ T4814] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.124: Failed to acquire dquot type 0 [ 57.167410][ T4818] loop2: detected capacity change from 0 to 4096 [ 57.187885][ T4814] EXT4-fs error (device loop4): ext4_free_blocks:6212: comm syz.4.124: Freeing blocks not in datazone - block = 0, count = 4096 [ 57.959919][ T4814] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.124: Invalid inode bitmap blk 0 in block_group 0 [ 57.977760][ T4830] loop1: detected capacity change from 0 to 256 [ 57.979151][ T4814] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 57.981271][ T4814] EXT4-fs (loop4): 1 orphan inode deleted [ 57.997795][ T11] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 58.002522][ T4814] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 58.003596][ T4831] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.006527][ T11] EXT4-fs error (device loop4): ext4_release_dquot:6823: comm kworker/u4:1: Failed to release dquot type 0 [ 58.105394][ T4767] BTRFS error (device loop0): open_ctree failed [ 58.221640][ T4837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 58.255648][ T4843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.134'. [ 58.332990][ T4517] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4517) [ 59.570699][ T4294] Bluetooth: hci1: unexpected cc 0x1001 length: 65 > 9 [ 59.626325][ T4839] loop1: detected capacity change from 0 to 32768 [ 59.689932][ T4839] JBD2: Ignoring recovery information on journal [ 59.782010][ T4839] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 59.827142][ T4293] ocfs2: Unmounting device (7,1) on (node local) [ 59.918601][ T4857] loop2: detected capacity change from 0 to 32768 [ 59.934473][ T4857] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.141 (4857) [ 59.938617][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 59.980772][ T4857] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 59.988540][ T4857] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 59.990252][ T4857] BTRFS info (device loop2): setting nodatacow, compression disabled [ 60.000820][ T4857] BTRFS info (device loop2): force clearing of disk cache [ 60.013674][ T4857] BTRFS info (device loop2): setting datacow [ 60.014907][ T4857] BTRFS info (device loop2): doing ref verification [ 60.016280][ T4857] BTRFS info (device loop2): turning off barriers [ 60.017594][ T4857] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 60.019658][ T4857] BTRFS info (device loop2): use zstd compression, level 3 [ 60.021182][ T4857] BTRFS info (device loop2): enabling ssd optimizations [ 60.045143][ T4857] BTRFS info (device loop2): using spread ssd allocation scheme [ 60.046756][ T4857] BTRFS info (device loop2): not using ssd optimizations [ 60.050629][ T4857] BTRFS info (device loop2): not using spread ssd allocation scheme [ 60.059079][ T4857] BTRFS info (device loop2): using free space tree [ 60.879594][ T4893] loop3: detected capacity change from 0 to 2048 [ 60.893861][ T4857] BTRFS info (device loop2): rebuilding free space tree [ 60.937480][ T4893] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 60.962681][ T4917] loop4: detected capacity change from 0 to 512 [ 60.992190][ T4917] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.005317][ T4922] tipc: Started in network mode [ 61.006383][ T4922] tipc: Node identity , cluster identity 4711 [ 61.020679][ T4917] EXT4-fs (loop4): 1 truncate cleaned up [ 61.022090][ T4917] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 61.045008][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 62.438695][ T4302] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 62.478921][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 62.855284][ T4948] loop3: detected capacity change from 0 to 64 [ 64.166894][ T4968] loop3: detected capacity change from 0 to 64 [ 64.514803][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.516526][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.558081][ T4970] loop1: detected capacity change from 0 to 1024 [ 65.855599][ T4294] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 65.859533][ T4294] Bluetooth: hci1: Injecting HCI hardware error event [ 65.863490][ T4294] Bluetooth: hci1: hardware error 0x00 [ 66.027053][ T4964] loop4: detected capacity change from 0 to 32768 [ 66.101370][ T4970] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 66.102420][ T4976] loop3: detected capacity change from 0 to 32768 [ 66.115349][ T4989] loop0: detected capacity change from 0 to 4096 [ 66.130806][ T4976] XFS (loop3): Mounting V5 Filesystem [ 66.140817][ T4993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 66.172032][ T4989] ntfs: volume version 3.1. [ 66.277935][ T4976] XFS (loop3): Ending clean mount [ 66.293201][ T4976] XFS (loop3): Quotacheck needed: Please wait. [ 66.337852][ T4976] XFS (loop3): Quotacheck: Done. [ 66.464324][ T4303] XFS (loop3): Unmounting Filesystem [ 66.486588][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 66.619795][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'. [ 66.640170][ T5023] loop2: detected capacity change from 0 to 2048 [ 66.657657][ T5028] loop1: detected capacity change from 0 to 256 [ 66.795421][ T5028] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 67.130149][ T5023] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.636910][ T5036] loop0: detected capacity change from 0 to 4096 [ 67.658582][ T5036] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 67.695049][ T5036] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 67.953692][ T11] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22. [ 67.958085][ T4296] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 68.202014][ T4294] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 68.942566][ T4294] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 68.945059][ T4294] Bluetooth: hci3: Injecting HCI hardware error event [ 68.946948][ T4294] Bluetooth: hci3: hardware error 0x00 [ 69.141548][ T5069] loop0: detected capacity change from 0 to 64 [ 69.252105][ T5070] loop1: detected capacity change from 0 to 512 [ 69.281497][ T5076] loop3: detected capacity change from 0 to 1024 [ 69.297880][ T5074] loop4: detected capacity change from 0 to 2048 [ 69.335128][ T5070] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 69.346088][ T5074] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.368273][ T5049] loop2: detected capacity change from 0 to 32768 [ 69.429410][ T5083] loop0: detected capacity change from 0 to 256 [ 69.456586][ T5049] XFS (loop2): Mounting V5 Filesystem [ 69.467587][ T4696] hfsplus: b-tree write err: -5, ino 4 [ 69.481802][ T5093] loop4: detected capacity change from 0 to 256 [ 69.493382][ T5093] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 69.515241][ T5083] FAT-fs (loop0): Directory bread(block 64) failed [ 69.516650][ T5083] FAT-fs (loop0): Directory bread(block 65) failed [ 69.518000][ T5083] FAT-fs (loop0): Directory bread(block 66) failed [ 69.519442][ T5083] FAT-fs (loop0): Directory bread(block 67) failed [ 69.520829][ T5083] FAT-fs (loop0): Directory bread(block 68) failed [ 69.569712][ T5083] FAT-fs (loop0): Directory bread(block 69) failed [ 69.571134][ T5083] FAT-fs (loop0): Directory bread(block 70) failed [ 69.575629][ T5049] XFS (loop2): Ending clean mount [ 69.578104][ T5049] XFS (loop2): Quotacheck needed: Please wait. [ 69.583406][ T5083] FAT-fs (loop0): Directory bread(block 71) failed [ 69.584890][ T5083] FAT-fs (loop0): Directory bread(block 72) failed [ 69.586232][ T5083] FAT-fs (loop0): Directory bread(block 73) failed [ 69.633901][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 69.644265][ T24] cfg80211: failed to load regulatory.db [ 69.651022][ T5095] loop3: detected capacity change from 0 to 256 [ 69.685886][ T5095] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 69.691229][ T5049] XFS (loop2): Quotacheck: Done. [ 69.713535][ T5049] syz.2.191: attempt to access beyond end of device [ 69.713535][ T5049] loop2: rw=4096, sector=22608914004574207, nr_sectors = 1 limit=32768 [ 69.996511][ T5105] loop0: detected capacity change from 0 to 512 [ 70.024780][ T5104] vhci_hcd: invalid port number 74 [ 70.099516][ T5105] EXT2-fs (loop0): error: revision level too high, forcing read-only mode [ 70.130101][ T5105] EXT2-fs (loop0): error: revision level too high, forcing read-only mode [ 70.134308][ T4302] XFS (loop2): Unmounting Filesystem [ 71.478328][ T4294] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 71.673045][ T5116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.213'. [ 71.904649][ T5124] loop3: detected capacity change from 0 to 512 [ 71.919535][ T5122] loop0: detected capacity change from 0 to 2048 [ 71.969253][ T5128] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.997329][ T5124] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 72.025532][ T5134] loop2: detected capacity change from 0 to 256 [ 72.054495][ T5124] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 72.056899][ T5124] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 72.058841][ T5124] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.217: Failed to acquire dquot type 0 [ 72.062439][ T5126] loop4: detected capacity change from 0 to 4096 [ 72.065181][ T5134] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 72.081765][ T5126] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 73.009668][ T4294] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 73.013042][ T4294] Bluetooth: hci2: Injecting HCI hardware error event [ 73.014046][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 73.021213][ T47] Bluetooth: hci2: hardware error 0x00 [ 73.060988][ T5142] loop0: detected capacity change from 0 to 1024 [ 73.115241][ T5144] loop3: detected capacity change from 0 to 8 [ 73.287051][ T5144] SQUASHFS error: Unable to read directory block [631:26] [ 73.361281][ T5137] loop1: detected capacity change from 0 to 32768 [ 73.505061][ T4294] Bluetooth: hci2: unexpected event for opcode 0x0407 [ 74.610825][ T5160] loop3: detected capacity change from 0 to 1024 [ 74.658419][ T5160] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.675243][ T5137] XFS (loop1): Mounting V5 Filesystem [ 74.700414][ T5160] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 74.863029][ T5137] XFS (loop1): Ending clean mount [ 74.892821][ T5137] XFS (loop1): Quotacheck needed: Please wait. [ 74.944105][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 74.972077][ T5137] XFS (loop1): Quotacheck: Done. [ 75.017528][ T5137] syz.1.220: attempt to access beyond end of device [ 75.017528][ T5137] loop1: rw=4096, sector=22608914004574207, nr_sectors = 1 limit=32768 [ 75.278951][ T5187] loop4: detected capacity change from 0 to 256 [ 75.288337][ T5146] loop2: detected capacity change from 0 to 32768 [ 75.292638][ T5146] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.223 (5146) [ 75.310316][ T5187] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 75.313719][ T5146] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.315682][ T5146] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 75.317424][ T5146] BTRFS info (device loop2): use no compression [ 75.322411][ T5146] BTRFS info (device loop2): force zlib compression, level 3 [ 75.324101][ T5146] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 75.326158][ T5146] BTRFS info (device loop2): use lzo compression, level 0 [ 75.327750][ T5146] BTRFS info (device loop2): turning on flush-on-commit [ 75.352001][ T5146] BTRFS info (device loop2): enabling auto defrag [ 75.353568][ T5146] BTRFS info (device loop2): using free space tree [ 75.391928][ T47] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 75.531084][ T4293] XFS (loop1): Unmounting Filesystem [ 75.597520][ T5146] BTRFS info (device loop2): enabling ssd optimizations [ 75.711519][ T4302] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.918375][ T5214] usb usb8: usbfs: process 5214 (syz.2.239) did not claim interface 0 before use [ 75.972861][ T5216] –eth0_vlan: renamed from ipvlan0 [ 76.094675][ T5222] netlink: 'syz.3.242': attribute type 29 has an invalid length. [ 76.113150][ T5222] netlink: 'syz.3.242': attribute type 29 has an invalid length. [ 76.182609][ T5222] netlink: 'syz.3.242': attribute type 29 has an invalid length. [ 76.352137][ T5234] netlink: 'syz.2.248': attribute type 153 has an invalid length. [ 76.386127][ T5236] netlink: 'syz.3.249': attribute type 12 has an invalid length. [ 76.387787][ T5236] netlink: 132 bytes leftover after parsing attributes in process `syz.3.249'. [ 76.495823][ T5242] netlink: 'syz.3.252': attribute type 1 has an invalid length. [ 76.605326][ T5249] loop3: detected capacity change from 0 to 256 [ 76.668191][ T5251] netlink: 'syz.2.256': attribute type 16 has an invalid length. [ 76.669824][ T5251] netlink: 64130 bytes leftover after parsing attributes in process `syz.2.256'. [ 76.712588][ T5253] loop1: detected capacity change from 0 to 64 [ 76.759070][ T5249] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 78.282784][ T5266] sp0: Synchronizing with TNC [ 78.385615][ T5273] loop2: detected capacity change from 0 to 256 [ 78.691514][ T5290] loop4: detected capacity change from 0 to 16 [ 78.712248][ T5290] erofs: (device loop4): erofs_read_inode: unsupported i_format 16 of nid 36 [ 78.932368][ T5300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 78.944387][ T5300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.275'. [ 78.946275][ T5300] netlink: 'syz.3.275': attribute type 15 has an invalid length. [ 78.990597][ T5304] netlink: 68 bytes leftover after parsing attributes in process `syz.4.277'. [ 79.081609][ T5308] netlink: 168 bytes leftover after parsing attributes in process `syz.4.280'. [ 79.119446][ T5313] loop4: detected capacity change from 0 to 256 [ 79.129657][ T5311] loop3: detected capacity change from 0 to 2048 [ 79.190886][ T5313] FAT-fs (loop4): Directory bread(block 64) failed [ 79.199695][ T5313] FAT-fs (loop4): Directory bread(block 65) failed [ 79.201298][ T5313] FAT-fs (loop4): Directory bread(block 66) failed [ 79.217234][ T5313] FAT-fs (loop4): Directory bread(block 67) failed [ 79.218774][ T5313] FAT-fs (loop4): Directory bread(block 68) failed [ 79.220103][ T5313] FAT-fs (loop4): Directory bread(block 69) failed [ 79.221475][ T5313] FAT-fs (loop4): Directory bread(block 70) failed [ 79.238269][ T5313] FAT-fs (loop4): Directory bread(block 71) failed [ 79.239801][ T5313] FAT-fs (loop4): Directory bread(block 72) failed [ 79.241145][ T5313] FAT-fs (loop4): Directory bread(block 73) failed [ 80.629335][ T5326] loop2: detected capacity change from 0 to 256 [ 80.650152][ T5326] exfat: Deprecated parameter 'utf8' [ 80.750411][ T5326] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 80.897998][ T5328] loop1: detected capacity change from 0 to 4096 [ 80.907829][ T5328] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 81.061170][ T5338] loop4: detected capacity change from 0 to 256 [ 81.065964][ T5328] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 81.072689][ T5328] ntfs3: loop1: ino=1d, "file1" attr_set_size [ 81.120591][ T5338] FAT-fs (loop4): Directory bread(block 64) failed [ 81.125191][ T5338] FAT-fs (loop4): Directory bread(block 65) failed [ 81.126729][ T5338] FAT-fs (loop4): Directory bread(block 66) failed [ 81.128135][ T5338] FAT-fs (loop4): Directory bread(block 67) failed [ 81.129560][ T5338] FAT-fs (loop4): Directory bread(block 68) failed [ 81.131025][ T5338] FAT-fs (loop4): Directory bread(block 69) failed [ 81.141099][ T4293] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 81.166580][ T5318] loop3: detected capacity change from 0 to 32768 [ 81.173034][ T5338] FAT-fs (loop4): Directory bread(block 70) failed [ 81.174500][ T5338] FAT-fs (loop4): Directory bread(block 71) failed [ 81.175809][ T5338] FAT-fs (loop4): Directory bread(block 72) failed [ 81.181672][ T4293] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 81.192662][ T5338] FAT-fs (loop4): Directory bread(block 73) failed [ 81.210264][ T5340] loop2: detected capacity change from 0 to 256 [ 81.242468][ T5318] XFS (loop3): Mounting V5 Filesystem [ 81.263292][ T5340] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 81.366353][ T5349] loop1: detected capacity change from 0 to 512 [ 81.459497][ T5349] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.292: inode #1: comm syz.1.292: iget: illegal inode # [ 81.505496][ T5318] XFS (loop3): Ending clean mount [ 81.517009][ T5349] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.292: error while reading EA inode 1 err=-117 [ 81.528786][ T5318] XFS (loop3): Quotacheck needed: Please wait. [ 81.568122][ T5349] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.292: inode #1: comm syz.1.292: iget: illegal inode # [ 81.575811][ T5318] XFS (loop3): Quotacheck: Done. [ 81.577988][ T5349] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.292: error while reading EA inode 1 err=-117 [ 81.589139][ T5318] syz.3.282: attempt to access beyond end of device [ 81.589139][ T5318] loop3: rw=4096, sector=22608914004574207, nr_sectors = 1 limit=32768 [ 81.593365][ T5349] EXT4-fs (loop1): 1 orphan inode deleted [ 81.594619][ T5349] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 81.709650][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 81.777948][ T5359] loop0: detected capacity change from 0 to 256 [ 81.801230][ T5362] loop1: detected capacity change from 0 to 512 [ 81.857944][ T5359] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 81.951519][ T4303] XFS (loop3): Unmounting Filesystem [ 82.015117][ T5353] loop4: detected capacity change from 0 to 40427 [ 82.023185][ T5353] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 82.025050][ T5353] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 82.031535][ T5362] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 82.057587][ T5353] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 82.113723][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 82.127513][ T5353] F2FS-fs (loop4): Found nat_bits in checkpoint [ 82.227543][ T5353] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 82.229237][ T5353] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 82.269303][ T5374] loop2: detected capacity change from 0 to 1024 [ 82.298790][ T5353] syz.4.293: attempt to access beyond end of device [ 82.298790][ T5353] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 82.444458][ T4576] hfsplus: b-tree write err: -5, ino 4 [ 82.521807][ T5384] loop3: detected capacity change from 0 to 1024 [ 82.648125][ T5384] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 82.745674][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 83.635945][ T47] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 83.638503][ T47] Bluetooth: hci0: Injecting HCI hardware error event [ 83.650193][ T4294] Bluetooth: hci0: hardware error 0x00 [ 83.689854][ T5400] loop2: detected capacity change from 0 to 256 [ 83.798304][ T5400] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 85.007825][ T5420] loop1: detected capacity change from 0 to 512 [ 85.019855][ T5392] loop4: detected capacity change from 0 to 32768 [ 85.048694][ T5420] EXT4-fs (loop1): orphan cleanup on readonly fs [ 85.055170][ T5420] EXT4-fs error (device loop1): ext4_find_extent:936: inode #4: comm syz.1.314: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 85.102982][ T5420] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 85.105087][ T5420] EXT4-fs warning (device loop1): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 85.107950][ T5420] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 85.109290][ T5420] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 85.118947][ T5426] loop3: detected capacity change from 0 to 512 [ 85.134979][ T5425] loop0: detected capacity change from 0 to 4096 [ 85.143224][ T5425] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 85.158483][ T5425] ntfs3: loop0: Failed to load $Extend. [ 85.199233][ T5426] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 85.211438][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 85.228420][ T5426] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 85.239157][ T5425] ntfs3: loop0: ino=21, "blkio.bfq.io_service_time_recursive" fallocate(0x41) is not supported [ 86.236725][ T5432] loop3: detected capacity change from 0 to 32768 [ 86.439048][ T5432] XFS (loop3): Mounting V5 Filesystem [ 86.557407][ T5432] XFS (loop3): Ending clean mount [ 86.600358][ T5432] XFS (loop3): Quotacheck needed: Please wait. [ 88.471376][ T4294] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 88.550521][ T5432] XFS (loop3): Quotacheck: Done. [ 88.607582][ T4303] XFS (loop3): Unmounting Filesystem [ 88.672043][ T4294] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 88.673937][ T4294] Bluetooth: hci4: Injecting HCI hardware error event [ 88.679798][ T47] Bluetooth: hci4: hardware error 0x00 [ 88.690186][ T5479] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 88.691751][ T5479] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 88.715969][ T5479] vhci_hcd vhci_hcd.0: Device attached [ 88.807404][ T5480] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 88.812352][ T4368] vhci_hcd: stop threads [ 88.814977][ T4368] vhci_hcd: release socket [ 88.815919][ T4368] vhci_hcd: disconnect device [ 88.896405][ T5476] loop1: detected capacity change from 0 to 32768 [ 88.927971][ T5489] loop4: detected capacity change from 0 to 128 [ 88.930330][ T5476] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 88.959167][ T5489] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 89.044609][ T4293] ocfs2: Unmounting device (7,1) on (node local) [ 89.050102][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 89.149147][ T5494] loop4: detected capacity change from 0 to 1024 [ 89.196497][ T5494] hfsplus: bad catalog entry type [ 89.247759][ T4576] hfsplus: b-tree write err: -5, ino 4 [ 89.330310][ T5501] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.332606][ T5501] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.334413][ T5501] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.336206][ T5501] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.382221][ T5501] Zero length message leads to an empty skb [ 89.402975][ T5503] loop2: detected capacity change from 0 to 1024 [ 89.442079][ T5503] hfsplus: bad catalog entry type [ 89.507816][ T4368] hfsplus: b-tree write err: -5, ino 4 [ 89.691695][ T5499] loop1: detected capacity change from 0 to 32768 [ 89.699369][ T5499] JBD2: Ignoring recovery information on journal [ 89.846018][ T4294] Bluetooth: hci4: unexpected event for opcode 0x0407 [ 90.887084][ T5499] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 90.912980][ T47] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 91.048908][ T4293] ocfs2: Unmounting device (7,1) on (node local) [ 91.059036][ T5522] loop3: detected capacity change from 0 to 2048 [ 91.098105][ T5522] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 91.125355][ T5528] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.126695][ T5522] syz.3.346: attempt to access beyond end of device [ 91.126695][ T5522] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 91.162247][ T5529] loop1: detected capacity change from 0 to 512 [ 91.176332][ T5524] loop0: detected capacity change from 0 to 4096 [ 91.190059][ T5524] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 91.207486][ T5524] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 91.224351][ T5524] ntfs3: loop0: Failed to load $Extend. [ 91.244285][ T5529] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 91.372517][ T5527] loop2: detected capacity change from 0 to 32768 [ 91.381638][ T4296] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 91.403680][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 91.416095][ T5527] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 91.514533][ T5542] loop3: detected capacity change from 0 to 256 [ 91.523386][ T4302] ocfs2: Unmounting device (7,2) on (node local) [ 91.537807][ T5542] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 91.732682][ T5545] loop0: detected capacity change from 0 to 1024 [ 91.762219][ T5547] loop1: detected capacity change from 0 to 1024 [ 91.767454][ T5545] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 91.909493][ T4296] EXT4-fs (loop0): unmounting filesystem. [ 91.935706][ T5552] loop3: detected capacity change from 0 to 512 [ 91.997992][ T5552] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.357: invalid indirect mapped block 256 (level 2) [ 92.019576][ T5552] EXT4-fs (loop3): 2 truncates cleaned up [ 92.020826][ T5552] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 92.181346][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 92.379006][ T5568] loop4: detected capacity change from 0 to 512 [ 92.399017][ T5570] netlink: 17 bytes leftover after parsing attributes in process `syz.3.362'. [ 92.525391][ T5568] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.363: corrupted inode contents [ 92.536370][ T5568] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #16: comm syz.4.363: mark_inode_dirty error [ 92.556271][ T5568] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.363: corrupted inode contents [ 92.576451][ T5568] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.363: mark_inode_dirty error [ 92.589940][ T5568] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.363: corrupted inode contents [ 92.596781][ T5558] loop0: detected capacity change from 0 to 32768 [ 92.606977][ T5558] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.610259][ T5558] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 92.612762][ T5558] BTRFS info (device loop0): allowing degraded mounts [ 92.615384][ T5558] BTRFS info (device loop0): metadata ratio 4 [ 92.616784][ T5558] BTRFS info (device loop0): turning on sync discard [ 92.620466][ T5558] BTRFS info (device loop0): turning off discard [ 92.622866][ T5558] BTRFS info (device loop0): turning on sync discard [ 92.625586][ T5558] BTRFS info (device loop0): disabling tree log [ 92.626986][ T5558] BTRFS info (device loop0): using free space tree [ 92.630327][ T5568] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 92.638929][ T5568] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.363: corrupted inode contents [ 92.650648][ T5568] EXT4-fs error (device loop4): ext4_truncate:4311: inode #16: comm syz.4.363: mark_inode_dirty error [ 92.653962][ T5568] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 92.677772][ T5568] EXT4-fs (loop4): 1 truncate cleaned up [ 92.679056][ T5568] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 92.720291][ T39] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 92.727892][ T39] EXT4-fs error (device loop4): ext4_release_dquot:6823: comm kworker/u4:2: Failed to release dquot type 1 [ 92.810305][ T5558] BTRFS info (device loop0): enabling ssd optimizations [ 92.811394][ T5592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.857783][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 92.872589][ T5592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.957093][ T4296] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.044986][ T5600] loop4: detected capacity change from 0 to 256 [ 93.082343][ T5600] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 93.139857][ T5602] loop3: detected capacity change from 0 to 512 [ 93.158618][ T5602] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.248822][ T5602] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 93.253221][ T5602] System zones: 1-12 [ 93.259171][ T5602] EXT4-fs (loop3): 1 truncate cleaned up [ 93.260407][ T5602] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 93.448027][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 93.539606][ T5611] loop3: detected capacity change from 0 to 256 [ 93.562410][ T5611] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 93.781121][ T5598] loop2: detected capacity change from 0 to 32768 [ 93.808273][ T5598] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.366 (5598) [ 93.844316][ T5598] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.846628][ T5598] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 93.868301][ T5598] BTRFS info (device loop2): using free space tree [ 93.958764][ T5609] loop4: detected capacity change from 0 to 32768 [ 93.962872][ T5609] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.371 (5609) [ 93.980029][ T5609] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 93.982443][ T5609] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 93.984135][ T5609] BTRFS info (device loop4): enabling ssd optimizations [ 93.985495][ T5609] BTRFS info (device loop4): not using ssd optimizations [ 93.990543][ T5609] BTRFS info (device loop4): turning off barriers [ 93.994308][ T5609] BTRFS info (device loop4): use no compression [ 93.996676][ T5625] loop3: detected capacity change from 0 to 512 [ 93.998368][ T5609] BTRFS info (device loop4): using free space tree [ 94.009461][ T5625] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 94.107011][ T5598] BTRFS info (device loop2): enabling ssd optimizations [ 94.168627][ T4302] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.350749][ T4300] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 94.640712][ T5666] mkiss: ax0: crc mode is auto. [ 94.765900][ T5668] loop1: detected capacity change from 0 to 2048 [ 94.812467][ T5671] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.928827][ T5677] loop1: detected capacity change from 0 to 256 [ 94.960175][ T5677] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 95.017419][ T5673] loop4: detected capacity change from 0 to 8192 [ 95.027766][ T5673] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 95.030659][ T5673] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 95.036016][ T5673] REISERFS (device loop4): using ordered data mode [ 95.038541][ T5673] reiserfs: using flush barriers [ 95.040449][ T5673] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 95.049290][ T5673] REISERFS (device loop4): checking transaction log (loop4) [ 95.054498][ T5673] REISERFS (device loop4): Using r5 hash to sort names [ 95.056283][ T5673] REISERFS (device loop4): using 3.5.x disk format [ 95.058579][ T5673] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 95.317179][ T5681] loop3: detected capacity change from 0 to 4096 [ 95.318928][ T5681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.350307][ T5681] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.463239][ T5681] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #15: comm syz.3.385: corrupted inode contents [ 95.501621][ T5681] EXT4-fs error (device loop3): ext4_dirty_inode:6086: inode #15: comm syz.3.385: mark_inode_dirty error [ 95.517845][ T5681] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #15: comm syz.3.385: corrupted inode contents [ 95.520777][ T5681] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.385: mark_inode_dirty error [ 95.530557][ T5681] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #15: comm syz.3.385: corrupted inode contents [ 95.542224][ T5681] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.385: mark_inode_dirty error [ 95.545172][ T5681] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #15: comm syz.3.385: corrupted inode contents [ 95.572632][ T5681] EXT4-fs error (device loop3): ext4_truncate:4311: inode #15: comm syz.3.385: mark_inode_dirty error [ 95.587565][ T5681] EXT4-fs error (device loop3) in ext4_setattr:5625: Corrupt filesystem [ 95.605324][ T5685] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #15: comm syz.3.385: corrupted inode contents [ 95.658064][ T5676] loop2: detected capacity change from 0 to 40427 [ 95.692566][ T4303] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 95.693850][ T5676] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.698045][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 95.725319][ T5687] loop4: detected capacity change from 0 to 4096 [ 95.761380][ T5676] F2FS-fs (loop2): recover fsync data on readonly fs [ 95.767993][ T5676] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 95.784141][ T5676] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 95.971297][ T5692] loop4: detected capacity change from 0 to 64 [ 96.120751][ T5684] loop1: detected capacity change from 0 to 40427 [ 96.163461][ T5684] F2FS-fs (loop1): invalid crc value [ 96.218812][ T5684] F2FS-fs (loop1): Found nat_bits in checkpoint [ 96.257068][ T5684] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 96.272051][ T5684] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 96.326133][ T5684] syz.1.386: attempt to access beyond end of device [ 96.326133][ T5684] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.462773][ T5690] loop3: detected capacity change from 0 to 32768 [ 96.536415][ T5690] XFS (loop3): Mounting V5 Filesystem [ 96.663506][ T5690] XFS (loop3): Ending clean mount [ 96.670806][ T5690] XFS (loop3): Quotacheck needed: Please wait. [ 96.696055][ T5690] XFS (loop3): Quotacheck: Done. [ 96.799621][ T4303] XFS (loop3): Unmounting Filesystem [ 96.832864][ T5703] loop0: detected capacity change from 0 to 32768 [ 96.918446][ T5703] XFS (loop0): Mounting V5 Filesystem [ 97.069308][ T5702] loop2: detected capacity change from 0 to 65536 [ 97.083601][ T5702] XFS (loop2): Mounting V5 Filesystem [ 97.122854][ T5703] XFS (loop0): Ending clean mount [ 97.125196][ T5703] XFS (loop0): Quotacheck needed: Please wait. [ 97.180451][ T5703] XFS (loop0): Quotacheck: Done. [ 97.228818][ T5703] syz.0.392: attempt to access beyond end of device [ 97.228818][ T5703] loop0: rw=4096, sector=22608914004574207, nr_sectors = 1 limit=32768 [ 97.249532][ T5702] XFS (loop2): Ending clean mount [ 97.264727][ T5742] loop1: detected capacity change from 0 to 164 [ 97.269097][ T5742] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 97.411086][ T4302] XFS (loop2): Unmounting Filesystem [ 97.545176][ T5757] loop3: detected capacity change from 0 to 128 [ 97.565077][ T5755] loop4: detected capacity change from 0 to 4096 [ 97.608093][ T5757] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 97.626757][ T5755] NILFS (loop4): invalid segment: Checksum error in segment payload [ 97.638133][ T5755] NILFS (loop4): trying rollback from an earlier position [ 97.687006][ T5755] NILFS (loop4): recovery complete [ 97.706890][ T5763] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.812182][ T4296] XFS (loop0): Unmounting Filesystem [ 97.979426][ T5774] loop3: detected capacity change from 0 to 256 [ 97.982402][ T5774] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 98.700389][ T5791] loop0: detected capacity change from 0 to 256 [ 98.710034][ T5791] FAT-fs (loop0): unable to read block(38654705664) for building NFS inode [ 100.197479][ T5802] loop2: detected capacity change from 0 to 128 [ 100.213339][ T5802] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 100.477831][ T5777] loop4: detected capacity change from 0 to 40427 [ 100.502107][ T5777] F2FS-fs (loop4): invalid crc value [ 100.517958][ T5777] F2FS-fs (loop4): Found nat_bits in checkpoint [ 100.574617][ T5811] loop3: detected capacity change from 0 to 4096 [ 100.579005][ T5777] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 100.590867][ T5811] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 100.614740][ T5798] loop0: detected capacity change from 0 to 32768 [ 100.679482][ T4300] syz-executor: attempt to access beyond end of device [ 100.679482][ T4300] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.720309][ T5798] XFS (loop0): Mounting V5 Filesystem [ 100.968965][ T5798] XFS (loop0): Ending clean mount [ 100.971252][ T5798] XFS (loop0): Quotacheck needed: Please wait. [ 101.016730][ T5798] XFS (loop0): Quotacheck: Done. [ 101.098509][ T4296] XFS (loop0): Unmounting Filesystem [ 101.175929][ T5829] loop1: detected capacity change from 0 to 2048 [ 101.203065][ T5809] loop2: detected capacity change from 0 to 32768 [ 101.209407][ T5830] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.250933][ T5829] NILFS (loop1): bad btree root (ino=16): level = 164, flags = 0x1, nchildren = 1 [ 101.351769][ T5809] XFS (loop2): Mounting V5 Filesystem [ 101.502854][ T5809] XFS (loop2): Ending clean mount [ 101.561178][ T5809] XFS (loop2): Quotacheck needed: Please wait. [ 101.591560][ T5809] XFS (loop2): Quotacheck: Done. [ 101.608394][ T5809] syz.2.413: attempt to access beyond end of device [ 101.608394][ T5809] loop2: rw=4096, sector=22608914004574207, nr_sectors = 1 limit=32768 [ 102.101637][ T4302] XFS (loop2): Unmounting Filesystem [ 102.162957][ T5842] loop0: detected capacity change from 0 to 40427 [ 102.197304][ T5842] F2FS-fs (loop0): invalid crc value [ 102.215813][ T5825] loop3: detected capacity change from 0 to 65536 [ 102.248268][ T5842] F2FS-fs (loop0): Found nat_bits in checkpoint [ 102.275092][ T5842] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 102.287090][ T5842] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 102.324031][ T5825] XFS (loop3): Mounting V5 Filesystem [ 102.324456][ T5827] loop4: detected capacity change from 0 to 65536 [ 102.360368][ T5827] XFS (loop4): Mounting V5 Filesystem [ 102.376020][ T5825] XFS (loop3): Ending clean mount [ 102.379321][ T5825] XFS (loop3): Quotacheck needed: Please wait. [ 102.399883][ T1603] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2c8/0xd2c, inode 0x25 dinode [ 102.409485][ T1603] XFS (loop3): Unmount and run xfs_repair [ 102.411027][ T1603] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 102.419759][ T1603] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 102.421707][ T1603] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 102.425038][ T1603] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 102.426935][ T1603] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 102.428942][ T1603] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 102.431022][ T1603] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 102.434082][ T1603] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 102.436278][ T1603] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 102.472672][ T5827] XFS (loop4): Ending clean mount [ 102.495787][ T5827] XFS (loop4): Quotacheck needed: Please wait. [ 102.501556][ T5825] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 102.508211][ T4368] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x2c8/0xd2c, inode 0x25 dinode [ 102.510642][ T4368] XFS (loop4): Unmount and run xfs_repair [ 102.544419][ T5868] loop0: detected capacity change from 0 to 1024 [ 102.546951][ T4368] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 102.557237][ T4368] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 102.569425][ T4368] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 102.571197][ T4368] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 102.598002][ T4368] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 102.605199][ T4368] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 102.607090][ T4368] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 102.608864][ T4368] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 102.633991][ T4368] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 102.656989][ T5827] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 102.705697][ T4300] XFS (loop4): Unmounting Filesystem [ 102.742904][ T4303] XFS (loop3): Unmounting Filesystem [ 102.787075][ T1603] hfsplus: b-tree write err: -5, ino 3 [ 102.829374][ T5870] loop2: detected capacity change from 0 to 4096 [ 103.032277][ T5873] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.437651][ T5881] loop3: detected capacity change from 0 to 256 [ 103.459895][ T5882] loop4: detected capacity change from 0 to 1024 [ 103.465878][ T5881] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 103.485532][ T5882] hfsplus: request for non-existent node 3 in B*Tree [ 103.487257][ T5882] hfsplus: request for non-existent node 3 in B*Tree [ 103.576211][ T5882] hfsplus: b-tree write err: -5, ino 3 [ 103.686611][ T5884] loop3: detected capacity change from 0 to 4096 [ 103.695266][ T5884] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 103.709949][ T5884] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 103.926383][ T4303] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 104.293743][ T5896] loop3: detected capacity change from 0 to 512 [ 104.313776][ T5896] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.332725][ T5896] EXT4-fs (loop3): 1 truncate cleaned up [ 104.334035][ T5896] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 104.398085][ T5896] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 100663296 > max in inode 13 [ 104.470632][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 104.617131][ T5888] loop0: detected capacity change from 0 to 32768 [ 104.699265][ T5888] XFS (loop0): Mounting V5 Filesystem [ 104.792528][ T5888] XFS (loop0): Ending clean mount [ 104.801311][ T5888] XFS (loop0): Quotacheck needed: Please wait. [ 104.825867][ T5892] loop1: detected capacity change from 0 to 32768 [ 104.874819][ T5888] XFS (loop0): Quotacheck: Done. [ 104.915640][ T5892] XFS (loop1): Mounting V5 Filesystem [ 104.956083][ T4296] XFS (loop0): Unmounting Filesystem [ 105.046551][ T5892] XFS (loop1): Ending clean mount [ 105.048840][ T5892] XFS (loop1): Quotacheck needed: Please wait. [ 105.116893][ T5892] XFS (loop1): Quotacheck: Done. [ 105.178457][ T4293] XFS (loop1): Unmounting Filesystem [ 105.196247][ T5878] loop2: detected capacity change from 0 to 131072 [ 105.218672][ T5878] F2FS-fs (loop2): invalid crc value [ 105.236019][ T5878] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.310519][ T5878] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 105.324132][ T5920] loop3: detected capacity change from 0 to 32768 [ 105.424000][ T5920] XFS (loop3): Mounting V5 Filesystem [ 105.460315][ T5926] loop4: detected capacity change from 0 to 32768 [ 105.548302][ T5920] XFS (loop3): Ending clean mount [ 105.634983][ T5920] XFS (loop3): Quotacheck needed: Please wait. [ 105.694822][ T5920] XFS (loop3): Quotacheck: Done. [ 105.770710][ T4303] XFS (loop3): Unmounting Filesystem [ 106.038828][ T5950] loop4: detected capacity change from 0 to 256 [ 106.046998][ T5950] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 107.812858][ T5953] loop2: detected capacity change from 0 to 32768 [ 108.209083][ T5974] loop3: detected capacity change from 0 to 4096 [ 108.229893][ T5974] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 108.247789][ T5974] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 108.261755][ T5974] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 108.263669][ T5974] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 108.266204][ T5974] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 108.283071][ T5974] ntfs: volume version 3.1. [ 108.284315][ T5974] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 108.286704][ T5974] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 108.513641][ T5968] loop2: detected capacity change from 0 to 32768 [ 108.756705][ T5972] loop0: detected capacity change from 0 to 32768 [ 108.836740][ T5972] XFS (loop0): Mounting V5 Filesystem [ 108.991512][ T5972] XFS (loop0): Ending clean mount [ 108.994135][ T5972] XFS (loop0): Quotacheck needed: Please wait. [ 109.052522][ T5972] XFS (loop0): Quotacheck: Done. [ 109.088847][ T5976] loop3: detected capacity change from 0 to 32768 [ 109.110131][ T5976] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.453 (5976) [ 109.135420][ T5976] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.143813][ T5976] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 109.151558][ T5976] BTRFS info (device loop3): setting nodatacow, compression disabled [ 109.158565][ T5976] BTRFS info (device loop3): disabling tree log [ 109.162455][ T5976] BTRFS info (device loop3): turning on sync discard [ 109.167349][ T5976] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 109.172552][ T5993] loop1: detected capacity change from 0 to 17 [ 109.175195][ T5976] BTRFS info (device loop3): force zstd compression, level 3 [ 109.177312][ T5976] BTRFS info (device loop3): using free space tree [ 109.228787][ T4296] XFS (loop0): Unmounting Filesystem [ 109.272592][ T5993] loop1: detected capacity change from 0 to 1024 [ 109.433402][ T5976] BTRFS info (device loop3): enabling ssd optimizations [ 109.578982][ T4303] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.022867][ T6036] loop0: detected capacity change from 0 to 8192 [ 110.052386][ T6036] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 110.055108][ T6036] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 110.057025][ T6036] REISERFS (device loop0): using ordered data mode [ 110.069172][ T6036] reiserfs: using flush barriers [ 110.118757][ T6036] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.128985][ T6036] REISERFS (device loop0): checking transaction log (loop0) [ 110.159665][ T6036] REISERFS (device loop0): Using r5 hash to sort names [ 110.161312][ T6036] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 110.212857][ T6029] loop1: detected capacity change from 0 to 40427 [ 110.245224][ T6029] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 110.246896][ T6029] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 110.249736][ T6029] F2FS-fs (loop1): invalid crc value [ 110.279802][ T6029] F2FS-fs (loop1): Found nat_bits in checkpoint [ 110.351559][ T6029] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 110.353687][ T6029] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 110.563863][ T6026] loop4: detected capacity change from 0 to 32768 [ 110.683405][ T6038] loop3: detected capacity change from 0 to 40427 [ 110.703159][ T6069] loop0: detected capacity change from 0 to 2048 [ 110.714655][ T6069] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.733614][ T6026] XFS (loop4): Mounting V5 Filesystem [ 110.749951][ T6038] F2FS-fs (loop3): invalid crc value [ 110.781101][ T6038] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.872648][ T6038] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 110.901330][ T6026] XFS (loop4): Ending clean mount [ 110.903714][ T6026] XFS (loop4): Quotacheck needed: Please wait. [ 110.939054][ T6026] XFS (loop4): Quotacheck: Done. [ 111.044655][ T4300] XFS (loop4): Unmounting Filesystem [ 111.097161][ T6060] loop2: detected capacity change from 0 to 32768 [ 111.163051][ T4303] syz-executor: attempt to access beyond end of device [ 111.163051][ T4303] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.245126][ T6060] XFS (loop2): Mounting V5 Filesystem [ 111.338074][ T6060] XFS (loop2): Ending clean mount [ 111.340448][ T6060] XFS (loop2): Quotacheck needed: Please wait. [ 111.411556][ T6060] XFS (loop2): Quotacheck: Done. [ 111.578669][ T4302] XFS (loop2): Unmounting Filesystem [ 111.831151][ T6098] loop4: detected capacity change from 0 to 256 [ 111.836976][ T6098] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 112.286232][ T6096] loop3: detected capacity change from 0 to 32768 [ 112.297201][ T6096] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.471 (6096) [ 112.313397][ T6096] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.317255][ T6096] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 112.321273][ T6096] BTRFS info (device loop3): setting nodatacow, compression disabled [ 112.325429][ T6096] BTRFS info (device loop3): enabling auto defrag [ 112.328186][ T6096] BTRFS info (device loop3): max_inline at 0 [ 112.330398][ T6096] BTRFS info (device loop3): using free space tree [ 112.631219][ T4303] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.311965][ T5656] atkbd serio0: keyboard reset failed on [ 113.325814][ T6145] loop3: detected capacity change from 0 to 40427 [ 113.348071][ T6145] F2FS-fs (loop3): invalid crc value [ 113.371562][ T6145] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.414521][ T6145] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 113.417897][ T6145] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 113.424235][ T6159] loop1: detected capacity change from 0 to 8192 [ 113.441355][ T6159] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 113.444188][ T6159] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 113.446222][ T6159] REISERFS (device loop1): using ordered data mode [ 113.447499][ T6159] reiserfs: using flush barriers [ 113.459560][ T6159] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 113.468811][ T6159] REISERFS (device loop1): checking transaction log (loop1) [ 113.480203][ T6159] REISERFS (device loop1): Using r5 hash to sort names [ 113.483263][ T6159] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 113.815104][ T6175] loop2: detected capacity change from 0 to 1764 [ 113.871210][ T6175] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 113.936126][ T6178] loop1: detected capacity change from 0 to 2048 [ 114.070231][ T6178] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.512149][ T6158] loop0: detected capacity change from 0 to 40427 [ 114.523429][ T6158] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 114.532574][ T6158] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 114.552777][ T6158] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 114.691597][ T6158] F2FS-fs (loop0): Found nat_bits in checkpoint [ 115.438607][ T6158] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 115.440081][ T6158] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 115.497453][ T6195] loop2: detected capacity change from 0 to 4096 [ 115.523636][ T6158] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 115.523796][ T6158] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 115.525689][ T6158] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 115.527139][ T6158] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 115.528814][ T6158] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 115.530365][ T6158] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 115.540811][ T6195] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 115.554888][ T6195] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 115.565885][ T6158] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 115.565908][ T6158] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 115.567705][ T6158] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 115.569510][ T6158] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 115.590164][ T6195] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 115.603923][ T6195] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 115.606565][ T6195] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 115.634876][ T6195] ntfs: volume version 3.1. [ 115.637376][ T6195] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 115.668517][ T6195] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 115.852258][ T6204] loop2: detected capacity change from 0 to 128 [ 115.911053][ T6204] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 115.953914][ T6198] loop3: detected capacity change from 0 to 32768 [ 115.980650][ T6209] loop0: detected capacity change from 0 to 128 [ 115.997730][ T6198] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 116.046125][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 116.137999][ T6212] loop2: detected capacity change from 0 to 256 [ 116.150017][ T6212] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 116.199007][ T4303] ocfs2: Unmounting device (7,3) on (node local) [ 116.479312][ T6222] loop0: detected capacity change from 0 to 256 [ 116.519393][ T6222] FAT-fs (loop0): Directory bread(block 1285) failed [ 116.546971][ T6222] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 116.813359][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'. [ 117.139079][ T6220] loop1: detected capacity change from 0 to 32768 [ 117.140416][ T6216] loop3: detected capacity change from 0 to 32768 [ 117.153863][ T6216] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 117.187441][ T6216] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 117.238247][ T6220] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 117.375046][ T4303] ocfs2: Unmounting device (7,3) on (node local) [ 117.410293][ T4293] ocfs2: Unmounting device (7,1) on (node local) [ 118.555306][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 118.557443][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.507'. [ 118.559590][ T6260] netlink: 'syz.4.507': attribute type 18 has an invalid length. [ 118.588385][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 119.161154][ T6257] loop1: detected capacity change from 0 to 32768 [ 119.239192][ T6257] XFS (loop1): Mounting V5 Filesystem [ 119.349644][ T6257] XFS (loop1): Ending clean mount [ 119.358148][ T6257] XFS (loop1): Quotacheck needed: Please wait. [ 119.414527][ T6257] XFS (loop1): Quotacheck: Done. [ 119.469275][ T6271] loop3: detected capacity change from 0 to 32768 [ 119.513710][ T4293] XFS (loop1): Unmounting Filesystem [ 119.835431][ T6302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.875327][ T6306] loop4: detected capacity change from 0 to 256 [ 119.882457][ T6302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.890746][ T6306] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 119.951415][ T6282] loop2: detected capacity change from 0 to 40427 [ 119.963950][ T6282] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 119.965568][ T6282] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 119.983113][ T6282] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 119.999513][ T6282] F2FS-fs (loop2): Found nat_bits in checkpoint [ 120.027558][ T6282] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 120.029186][ T6282] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 120.551399][ T6320] loop0: detected capacity change from 0 to 32768 [ 120.565758][ T6320] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.519 (6320) [ 120.579009][ T6320] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.585022][ T6320] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 120.588800][ T6320] BTRFS info (device loop0): setting nodatacow, compression disabled [ 120.597326][ T6320] BTRFS info (device loop0): enabling auto defrag [ 120.601680][ T6320] BTRFS info (device loop0): max_inline at 0 [ 120.619947][ T6320] BTRFS info (device loop0): using free space tree [ 120.897826][ T4296] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.115304][ T6363] tipc: Started in network mode [ 121.116486][ T6363] tipc: Node identity , cluster identity 4711 [ 121.156472][ T6341] loop2: detected capacity change from 0 to 32768 [ 121.327624][ T6341] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 121.327624][ T6341] [ 121.372221][ T6341] ERROR: (device loop2): remounting filesystem as read-only [ 121.373928][ T6341] ialloc: diAlloc returned -5! [ 121.553503][ T6369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.572207][ T6369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.748031][ T6372] loop4: detected capacity change from 0 to 32768 [ 121.840272][ T6370] loop0: detected capacity change from 0 to 32768 [ 121.926791][ T6372] XFS (loop4): Mounting V5 Filesystem [ 121.928361][ T6370] XFS (loop0): Mounting V5 Filesystem [ 122.018889][ T6372] XFS (loop4): Ending clean mount [ 122.040414][ T6370] XFS (loop0): Ending clean mount [ 122.042822][ T6370] XFS (loop0): Quotacheck needed: Please wait. [ 122.051274][ T6372] XFS (loop4): Quotacheck needed: Please wait. [ 122.070814][ T6370] XFS (loop0): Quotacheck: Done. [ 122.092413][ T6370] syz.0.524: attempt to access beyond end of device [ 122.092413][ T6370] loop0: rw=4096, sector=22608914004574207, nr_sectors = 1 limit=32768 [ 122.130564][ T6372] XFS (loop4): Quotacheck: Done. [ 122.169037][ T6422] loop3: detected capacity change from 0 to 256 [ 122.192791][ T6421] loop1: detected capacity change from 0 to 256 [ 122.195181][ T4300] XFS (loop4): Unmounting Filesystem [ 122.222903][ T6422] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 122.226235][ T6421] FAT-fs (loop1): Directory bread(block 1285) failed [ 122.241242][ T6421] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 122.530892][ T6415] loop2: detected capacity change from 0 to 32768 [ 122.537218][ T6427] loop1: detected capacity change from 0 to 512 [ 122.547249][ T6415] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.526 (6415) [ 122.665240][ T6415] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.667325][ T6415] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 122.672522][ T6415] BTRFS info (device loop2): setting nodatacow, compression disabled [ 122.677001][ T6415] BTRFS info (device loop2): disabling tree log [ 122.678583][ T6415] BTRFS info (device loop2): turning on sync discard [ 122.679955][ T6415] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 122.696023][ T4296] XFS (loop0): Unmounting Filesystem [ 122.704447][ T6415] BTRFS info (device loop2): force zstd compression, level 3 [ 122.706203][ T6415] BTRFS info (device loop2): using free space tree [ 122.773116][ T6427] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 122.854487][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 123.100146][ T6415] BTRFS info (device loop2): enabling ssd optimizations [ 123.330144][ T4302] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.726679][ T6454] loop1: detected capacity change from 0 to 40427 [ 123.730738][ T6454] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 123.755989][ T6454] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 123.763143][ T6472] loop2: detected capacity change from 0 to 512 [ 123.780702][ T6454] F2FS-fs (loop1): invalid crc value [ 123.785390][ T6472] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.542: casefold flag without casefold feature [ 123.809534][ T6472] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.542: couldn't read orphan inode 15 (err -117) [ 123.846173][ T6454] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.858777][ T6472] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 123.910290][ T6454] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 123.915484][ T6454] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.999812][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 124.106697][ T1603] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 124.124462][ T1603] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 124.416866][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 124.656411][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 124.859206][ T6525] loop4: detected capacity change from 0 to 64 [ 125.305186][ T6500] loop0: detected capacity change from 0 to 32768 [ 126.397580][ T6501] loop3: detected capacity change from 0 to 32768 [ 126.442018][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.442092][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.563483][ T6501] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 126.650157][ T6500] XFS (loop0): Mounting V5 Filesystem [ 126.702569][ T4303] ocfs2: Unmounting device (7,3) on (node local) [ 126.764253][ T6567] loop1: detected capacity change from 0 to 256 [ 126.770821][ T6567] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 126.798763][ T6500] XFS (loop0): Ending clean mount [ 126.810913][ T6500] XFS (loop0): Quotacheck needed: Please wait. [ 126.847190][ T6500] XFS (loop0): Quotacheck: Done. [ 127.019755][ T4296] XFS (loop0): Unmounting Filesystem [ 128.305975][ T6599] loop4: detected capacity change from 0 to 4096 [ 128.321034][ T6599] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 128.333474][ T6579] loop2: detected capacity change from 0 to 32768 [ 128.352695][ T6599] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 128.391036][ T6579] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 128.485147][ T4368] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22. [ 128.486522][ T4300] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 128.671595][ T4302] ocfs2: Unmounting device (7,2) on (node local) [ 129.304171][ T6622] loop4: detected capacity change from 0 to 32768 [ 129.458029][ T6632] loop2: detected capacity change from 0 to 32768 [ 129.517621][ T6632] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 129.639690][ T6622] XFS (loop4): Mounting V5 Filesystem [ 129.754177][ T6622] XFS (loop4): Ending clean mount [ 129.768209][ T6622] XFS (loop4): Quotacheck needed: Please wait. [ 129.816160][ T4302] ocfs2: Unmounting device (7,2) on (node local) [ 129.821524][ T6630] loop0: detected capacity change from 0 to 32768 [ 129.840250][ T6622] XFS (loop4): Quotacheck: Done. [ 129.972179][ T6630] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 129.972179][ T6630] [ 130.015343][ T4300] XFS (loop4): Unmounting Filesystem [ 130.050371][ T6630] ERROR: (device loop0): remounting filesystem as read-only [ 130.052111][ T6630] ialloc: diAlloc returned -5! [ 130.227756][ T6661] loop0: detected capacity change from 0 to 256 [ 130.230741][ T6661] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 130.963419][ T6675] loop1: detected capacity change from 0 to 512 [ 130.996463][ T6675] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.592: casefold flag without casefold feature [ 131.005895][ T6675] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.592: couldn't read orphan inode 15 (err -117) [ 131.020842][ T6675] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 131.029512][ T6679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.075867][ T6679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.149791][ T6669] loop4: detected capacity change from 0 to 32768 [ 131.160255][ T6669] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 131.209018][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 131.324501][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 131.335589][ T6683] netem: incorrect gi model size [ 131.340166][ T6683] netem: change failed [ 131.505448][ T4300] ocfs2: Unmounting device (7,4) on (node local) [ 131.666794][ T6691] loop3: detected capacity change from 0 to 1024 [ 131.762514][ T6691] capability: warning: `syz.3.598' uses 32-bit capabilities (legacy support in use) [ 132.643603][ T6704] loop2: detected capacity change from 0 to 8 [ 132.707127][ T6704] SQUASHFS error: Unable to read directory block [631:26] [ 133.732090][ T6726] usb usb8: usbfs: process 6726 (syz.1.609) did not claim interface 0 before use [ 133.827535][ T6717] loop0: detected capacity change from 0 to 32768 [ 133.836877][ T6717] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.604 (6717) [ 133.903582][ T6717] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.911950][ T6717] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 133.913681][ T6717] BTRFS info (device loop0): metadata ratio 1025 [ 133.915043][ T6717] BTRFS info (device loop0): doing ref verification [ 133.916355][ T6717] BTRFS info (device loop0): force clearing of disk cache [ 133.917738][ T6717] BTRFS info (device loop0): turning off barriers [ 133.919034][ T6717] BTRFS info (device loop0): setting nodatacow, compression disabled [ 133.920676][ T6717] BTRFS info (device loop0): enabling ssd optimizations [ 133.923942][ T6717] BTRFS info (device loop0): using spread ssd allocation scheme [ 133.925645][ T6717] BTRFS info (device loop0): not using ssd optimizations [ 133.927232][ T6717] BTRFS info (device loop0): not using spread ssd allocation scheme [ 133.928941][ T6717] BTRFS info (device loop0): using free space tree [ 133.957870][ T6717] BTRFS info (device loop0): rebuilding free space tree [ 133.989318][ T6717] BTRFS info (device loop0): balance: start -s [ 133.991500][ T6717] BTRFS info (device loop0): left=0, need=98304, flags=2 [ 133.994029][ T6717] BTRFS info (device loop0): space_info SYSTEM has 0 free, is not full [ 133.995979][ T6717] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 133.998687][ T6717] BTRFS info (device loop0): global_block_rsv: size 917504 reserved 917504 [ 134.000685][ T6717] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 134.002399][ T6717] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 134.003978][ T6717] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 134.005574][ T6717] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 134.025278][ T6717] BTRFS info (device loop0): relocating block group 1048576 flags system [ 134.151628][ T6717] BTRFS info (device loop0): balance: ended with status: 0 [ 134.307372][ T6757] loop4: detected capacity change from 0 to 1024 [ 134.327319][ T6757] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.338468][ T6757] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 134.385235][ T4296] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 134.551432][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 134.915459][ T6750] loop2: detected capacity change from 0 to 32768 [ 135.040907][ T6750] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 135.043029][ T6750] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 135.177318][ T6750] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 135.210003][ T6765] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 135.212191][ T6765] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 135.351078][ T6765] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 138ms [ 135.368490][ T6765] gfs2: fsid=syz:syz.0: jid=0: Done [ 135.376375][ T6750] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 135.385992][ T6801] loop0: detected capacity change from 0 to 256 [ 135.406669][ T6801] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 135.452752][ T6801] exFAT-fs (loop0): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295) [ 135.452752][ T6801] [ 135.482688][ T6801] exFAT-fs (loop0): error, failed to bmap (inode : 0000000030e797c2 iblock : 0, err : -5) [ 135.521151][ T6750] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 135.524514][ T6750] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 135.524514][ T6750] inode = 12 2341 [ 135.524514][ T6750] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 135.551587][ T6750] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 135.562410][ T6750] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:6750 [syz.2.612] __gfs2_lookup+0xb0/0x28c [ 135.566240][ T6750] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 135.570146][ T6750] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 135.579347][ T6750] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 135.588790][ T6750] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 135.601696][ T6750] gfs2: fsid=syz:syz.0: File system withdrawn [ 135.604349][ T6750] CPU: 1 PID: 6750 Comm: syz.2.612 Not tainted 6.1.111-syzkaller #0 [ 135.606019][ T6750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 135.608049][ T6750] Call trace: [ 135.608728][ T6750] dump_backtrace+0x1c8/0x1f4 [ 135.609740][ T6750] show_stack+0x2c/0x3c [ 135.610643][ T6750] dump_stack_lvl+0x108/0x170 [ 135.611708][ T6750] dump_stack+0x1c/0x58 [ 135.612573][ T6750] gfs2_withdraw+0xdcc/0x140c [ 135.613730][ T6750] gfs2_consist_inode_i+0xf0/0x10c [ 135.614835][ T6750] gfs2_dirent_scan+0x458/0x584 [ 135.615747][ T6750] gfs2_dirent_search+0x28c/0x790 [ 135.616801][ T6750] gfs2_dir_search+0xb8/0x280 [ 135.617920][ T6750] gfs2_lookupi+0x3ec/0x564 [ 135.618853][ T6750] __gfs2_lookup+0xb0/0x28c [ 135.619788][ T6750] gfs2_atomic_open+0x9c/0x1c4 [ 135.620771][ T6750] path_openat+0xbf8/0x2548 [ 135.621664][ T6750] do_filp_open+0x1bc/0x3cc [ 135.622598][ T6750] do_sys_openat2+0x128/0x3e0 [ 135.623659][ T6750] __arm64_sys_openat+0x1f0/0x240 [ 135.624817][ T6750] invoke_syscall+0x98/0x2c0 [ 135.625841][ T6750] el0_svc_common+0x138/0x258 [ 135.626939][ T6750] do_el0_svc+0x64/0x218 [ 135.627805][ T6750] el0_svc+0x58/0x168 [ 135.628620][ T6750] el0t_64_sync_handler+0x84/0xf0 [ 135.629700][ T6750] el0t_64_sync+0x18c/0x190 [ 135.816845][ T6791] loop4: detected capacity change from 0 to 32768 [ 135.856790][ T6791] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 135.935168][ T6791] (syz.4.617,6791,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 136.118702][ T6829] sp0: Synchronizing with TNC [ 136.128791][ T4300] ocfs2: Unmounting device (7,4) on (node local) [ 136.201049][ T6834] loop2: detected capacity change from 0 to 1024 [ 136.350203][ T6842] netlink: 'syz.2.636': attribute type 9 has an invalid length. [ 136.622757][ T6853] netlink: 'syz.4.642': attribute type 12 has an invalid length. [ 136.624316][ T6853] netlink: 132 bytes leftover after parsing attributes in process `syz.4.642'. [ 136.635553][ T6856] netlink: 168 bytes leftover after parsing attributes in process `syz.2.641'. [ 137.489072][ T6869] loop4: detected capacity change from 0 to 32768 [ 137.537627][ T6869] JBD2: Ignoring recovery information on journal [ 137.751487][ T6869] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 137.754139][ T6890] netlink: 16 bytes leftover after parsing attributes in process `syz.0.647'. [ 137.909800][ T4300] ocfs2: Unmounting device (7,4) on (node local) [ 138.217623][ T6908] netlink: 'syz.0.652': attribute type 16 has an invalid length. [ 138.231946][ T6908] netlink: 64130 bytes leftover after parsing attributes in process `syz.0.652'. [ 138.348761][ T6913] loop0: detected capacity change from 0 to 256 [ 138.372093][ T6913] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 139.378012][ T6924] loop3: detected capacity change from 0 to 16 [ 139.395825][ T6924] erofs: (device loop3): erofs_read_inode: unsupported i_format 16 of nid 36 [ 139.523465][ T6929] loop4: detected capacity change from 0 to 256 [ 139.535636][ T6929] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 140.554790][ T6942] netlink: 68 bytes leftover after parsing attributes in process `syz.1.664'. [ 140.612001][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'. [ 140.613850][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.665'. [ 140.620641][ T6945] netlink: 'syz.0.665': attribute type 15 has an invalid length. [ 140.974413][ T6965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.022129][ T6965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.029779][ T6967] loop3: detected capacity change from 0 to 512 [ 141.119334][ T6967] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 141.180074][ T6980] loop0: detected capacity change from 0 to 512 [ 141.239611][ T6967] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 141.254901][ T6967] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 141.260076][ T6980] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 141.286625][ T6967] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.669: Failed to acquire dquot type 0 [ 141.365367][ T6977] loop2: detected capacity change from 0 to 32768 [ 141.405791][ T4296] EXT4-fs (loop0): unmounting filesystem. [ 141.419362][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 141.421222][ T6977] JBD2: Ignoring recovery information on journal [ 141.498879][ T6977] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 141.663344][ T6977] overlayfs: upper fs does not support tmpfile. [ 141.681481][ T6977] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 141.691407][ T6977] [ 141.691986][ T6977] ====================================================== [ 141.693407][ T6977] WARNING: possible circular locking dependency detected [ 141.694847][ T6977] 6.1.111-syzkaller #0 Not tainted [ 141.695871][ T6977] ------------------------------------------------------ [ 141.697368][ T6977] syz.2.672/6977 is trying to acquire lock: [ 141.698607][ T6977] ffff0000d3e4d488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x180/0x6b8 [ 141.700878][ T6977] [ 141.700878][ T6977] but task is already holding lock: [ 141.702431][ T6977] ffff0000fb411538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x4e4/0x1478 [ 141.704477][ T6977] [ 141.704477][ T6977] which lock already depends on the new lock. [ 141.704477][ T6977] [ 141.706800][ T6977] [ 141.706800][ T6977] the existing dependency chain (in reverse order) is: [ 141.708678][ T6977] [ 141.708678][ T6977] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}: [ 141.710375][ T6977] down_read+0x64/0x308 [ 141.711392][ T6977] ocfs2_init_acl+0x2c8/0x764 [ 141.712549][ T6977] ocfs2_mknod+0x1574/0x2560 [ 141.713611][ T6977] ocfs2_create+0x1a8/0x560 [ 141.714755][ T6977] path_openat+0xeac/0x2548 [ 141.715931][ T6977] do_filp_open+0x1bc/0x3cc [ 141.717041][ T6977] do_sys_openat2+0x128/0x3e0 [ 141.718056][ T6977] __arm64_sys_openat+0x1f0/0x240 [ 141.719269][ T6977] invoke_syscall+0x98/0x2c0 [ 141.720434][ T6977] el0_svc_common+0x138/0x258 [ 141.721652][ T6977] do_el0_svc+0x64/0x218 [ 141.722627][ T6977] el0_svc+0x58/0x168 [ 141.723651][ T6977] el0t_64_sync_handler+0x84/0xf0 [ 141.724874][ T6977] el0t_64_sync+0x18c/0x190 [ 141.726006][ T6977] [ 141.726006][ T6977] -> #4 (jbd2_handle){++++}-{0:0}: [ 141.727681][ T6977] start_this_handle+0x1140/0x13ac [ 141.728862][ T6977] jbd2__journal_start+0x298/0x544 [ 141.730143][ T6977] jbd2_journal_start+0x3c/0x4c [ 141.731145][ T6977] ocfs2_start_trans+0x3e8/0x73c [ 141.732256][ T6977] ocfs2_shutdown_local_alloc+0x1d8/0x8d8 [ 141.733666][ T6977] ocfs2_dismount_volume+0x1fc/0x99c [ 141.734872][ T6977] ocfs2_put_super+0x110/0x3e8 [ 141.735993][ T6977] generic_shutdown_super+0x130/0x328 [ 141.737258][ T6977] kill_block_super+0x70/0xdc [ 141.738331][ T6977] deactivate_locked_super+0xac/0x124 [ 141.739598][ T6977] deactivate_super+0xf0/0x110 [ 141.740636][ T6977] cleanup_mnt+0x394/0x41c [ 141.741743][ T6977] __cleanup_mnt+0x20/0x30 [ 141.742870][ T6977] task_work_run+0x240/0x2f0 [ 141.744066][ T6977] do_notify_resume+0x2148/0x3474 [ 141.745307][ T6977] el0_svc+0x9c/0x168 [ 141.746211][ T6977] el0t_64_sync_handler+0x84/0xf0 [ 141.747423][ T6977] el0t_64_sync+0x18c/0x190 [ 141.748481][ T6977] [ 141.748481][ T6977] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 141.750303][ T6977] down_read+0x64/0x308 [ 141.751307][ T6977] ocfs2_start_trans+0x3dc/0x73c [ 141.752505][ T6977] ocfs2_shutdown_local_alloc+0x1d8/0x8d8 [ 141.753792][ T6977] ocfs2_dismount_volume+0x1fc/0x99c [ 141.755025][ T6977] ocfs2_put_super+0x110/0x3e8 [ 141.756220][ T6977] generic_shutdown_super+0x130/0x328 [ 141.757385][ T6977] kill_block_super+0x70/0xdc [ 141.758416][ T6977] deactivate_locked_super+0xac/0x124 [ 141.759624][ T6977] deactivate_super+0xf0/0x110 [ 141.760751][ T6977] cleanup_mnt+0x394/0x41c [ 141.761740][ T6977] __cleanup_mnt+0x20/0x30 [ 141.762853][ T6977] task_work_run+0x240/0x2f0 [ 141.764117][ T6977] do_notify_resume+0x2148/0x3474 [ 141.765311][ T6977] el0_svc+0x9c/0x168 [ 141.766297][ T6977] el0t_64_sync_handler+0x84/0xf0 [ 141.767457][ T6977] el0t_64_sync+0x18c/0x190 [ 141.768503][ T6977] [ 141.768503][ T6977] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 141.770006][ T6977] ocfs2_start_trans+0x260/0x73c [ 141.771236][ T6977] ocfs2_setattr+0xb14/0x1b3c [ 141.772321][ T6977] notify_change+0xb58/0xe1c [ 141.773454][ T6977] chown_common+0x4e8/0x7d8 [ 141.774450][ T6977] ksys_fchown+0xe0/0x158 [ 141.775410][ T6977] __arm64_sys_fchown+0x7c/0x94 [ 141.776583][ T6977] invoke_syscall+0x98/0x2c0 [ 141.777659][ T6977] el0_svc_common+0x138/0x258 [ 141.778738][ T6977] do_el0_svc+0x64/0x218 [ 141.779772][ T6977] el0_svc+0x58/0x168 [ 141.780736][ T6977] el0t_64_sync_handler+0x84/0xf0 [ 141.781871][ T6977] el0t_64_sync+0x18c/0x190 [ 141.783012][ T6977] [ 141.783012][ T6977] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 141.784954][ T6977] down_read+0x64/0x308 [ 141.785996][ T6977] ocfs2_read_virt_blocks+0x2bc/0x9f8 [ 141.787235][ T6977] ocfs2_find_entry+0x3ac/0x2620 [ 141.788426][ T6977] ocfs2_find_files_on_disk+0x130/0x468 [ 141.789778][ T6977] ocfs2_lookup_ino_from_name+0xb8/0x1d4 [ 141.791013][ T6977] ocfs2_get_system_file_inode+0x2c8/0x6b8 [ 141.792271][ T6977] ocfs2_init_global_system_inodes+0x2bc/0x618 [ 141.793714][ T6977] ocfs2_fill_super+0x278c/0x4a0c [ 141.794812][ T6977] mount_bdev+0x274/0x370 [ 141.795791][ T6977] ocfs2_mount+0x44/0x58 [ 141.796788][ T6977] legacy_get_tree+0xd4/0x16c [ 141.797869][ T6977] vfs_get_tree+0x90/0x274 [ 141.798907][ T6977] do_new_mount+0x278/0x8fc [ 141.800111][ T6977] path_mount+0x590/0xe5c [ 141.801119][ T6977] __arm64_sys_mount+0x45c/0x594 [ 141.802259][ T6977] invoke_syscall+0x98/0x2c0 [ 141.803288][ T6977] el0_svc_common+0x138/0x258 [ 141.804328][ T6977] do_el0_svc+0x64/0x218 [ 141.805327][ T6977] el0_svc+0x58/0x168 [ 141.806253][ T6977] el0t_64_sync_handler+0x84/0xf0 [ 141.807554][ T6977] el0t_64_sync+0x18c/0x190 [ 141.808669][ T6977] [ 141.808669][ T6977] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}: [ 141.810503][ T6977] __lock_acquire+0x3338/0x7680 [ 141.811886][ T6977] lock_acquire+0x26c/0x7cc [ 141.813029][ T6977] __mutex_lock_common+0x190/0x21a0 [ 141.814205][ T6977] mutex_lock_nested+0x38/0x44 [ 141.815343][ T6977] ocfs2_get_system_file_inode+0x180/0x6b8 [ 141.816727][ T6977] ocfs2_reserve_suballoc_bits+0x14c/0x4428 [ 141.817979][ T6977] ocfs2_reserve_new_metadata_blocks+0x384/0x848 [ 141.819580][ T6977] ocfs2_init_xattr_set_ctxt+0x3b0/0x9f8 [ 141.821073][ T6977] ocfs2_xattr_set+0xc08/0x1478 [ 141.822371][ T6977] ocfs2_xattr_trusted_set+0x4c/0x64 [ 141.823626][ T6977] __vfs_setxattr+0x388/0x3a4 [ 141.824692][ T6977] __vfs_setxattr_noperm+0x110/0x528 [ 141.825915][ T6977] __vfs_setxattr_locked+0x1ec/0x218 [ 141.827253][ T6977] vfs_setxattr+0x1a8/0x344 [ 141.828255][ T6977] ovl_get_workdir+0xc00/0x13d4 [ 141.829374][ T6977] ovl_fill_super+0x15b4/0x2254 [ 141.830779][ T6977] mount_nodev+0x68/0x104 [ 141.831891][ T6977] ovl_mount+0x3c/0x50 [ 141.832907][ T6977] legacy_get_tree+0xd4/0x16c [ 141.834020][ T6977] vfs_get_tree+0x90/0x274 [ 141.835225][ T6977] do_new_mount+0x278/0x8fc [ 141.836280][ T6977] path_mount+0x590/0xe5c [ 141.837249][ T6977] __arm64_sys_mount+0x45c/0x594 [ 141.838524][ T6977] invoke_syscall+0x98/0x2c0 [ 141.839619][ T6977] el0_svc_common+0x138/0x258 [ 141.840722][ T6977] do_el0_svc+0x64/0x218 [ 141.841661][ T6977] el0_svc+0x58/0x168 [ 141.842406][ T6977] el0t_64_sync_handler+0x84/0xf0 [ 141.843315][ T6977] el0t_64_sync+0x18c/0x190 [ 141.844154][ T6977] [ 141.844154][ T6977] other info that might help us debug this: [ 141.844154][ T6977] [ 141.845843][ T6977] Chain exists of: [ 141.845843][ T6977] &osb->system_file_mutex --> jbd2_handle --> &oi->ip_xattr_sem [ 141.845843][ T6977] [ 141.848672][ T6977] Possible unsafe locking scenario: [ 141.848672][ T6977] [ 141.850333][ T6977] CPU0 CPU1 [ 141.851395][ T6977] ---- ---- [ 141.852418][ T6977] lock(&oi->ip_xattr_sem); [ 141.853376][ T6977] lock(jbd2_handle); [ 141.854765][ T6977] lock(&oi->ip_xattr_sem); [ 141.856295][ T6977] lock(&osb->system_file_mutex); [ 141.857440][ T6977] [ 141.857440][ T6977] *** DEADLOCK *** [ 141.857440][ T6977] [ 141.859133][ T6977] 4 locks held by syz.2.672/6977: [ 141.860197][ T6977] #0: ffff0000c415e0e0 (&type->s_umount_key#92/1){+.+.}-{3:3}, at: alloc_super+0x1b4/0x824 [ 141.862445][ T6977] #1: ffff0000db03e460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 141.864311][ T6977] #2: ffff0000fb411808 (&sb->s_type->i_mutex_key#28){+.+.}-{3:3}, at: vfs_setxattr+0x17c/0x344 [ 141.866632][ T6977] #3: ffff0000fb411538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x4e4/0x1478 [ 141.868725][ T6977] [ 141.868725][ T6977] stack backtrace: [ 141.869999][ T6977] CPU: 1 PID: 6977 Comm: syz.2.672 Not tainted 6.1.111-syzkaller #0 [ 141.871813][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 141.874060][ T6977] Call trace: [ 141.874731][ T6977] dump_backtrace+0x1c8/0x1f4 [ 141.875686][ T6977] show_stack+0x2c/0x3c [ 141.876572][ T6977] dump_stack_lvl+0x108/0x170 [ 141.877564][ T6977] dump_stack+0x1c/0x58 [ 141.878434][ T6977] print_circular_bug+0x150/0x1b8 [ 141.879463][ T6977] check_noncircular+0x2cc/0x378 [ 141.880591][ T6977] __lock_acquire+0x3338/0x7680 [ 141.881637][ T6977] lock_acquire+0x26c/0x7cc [ 141.882665][ T6977] __mutex_lock_common+0x190/0x21a0 [ 141.883917][ T6977] mutex_lock_nested+0x38/0x44 [ 141.885028][ T6977] ocfs2_get_system_file_inode+0x180/0x6b8 [ 141.886296][ T6977] ocfs2_reserve_suballoc_bits+0x14c/0x4428 [ 141.887596][ T6977] ocfs2_reserve_new_metadata_blocks+0x384/0x848 [ 141.888932][ T6977] ocfs2_init_xattr_set_ctxt+0x3b0/0x9f8 [ 141.890175][ T6977] ocfs2_xattr_set+0xc08/0x1478 [ 141.891238][ T6977] ocfs2_xattr_trusted_set+0x4c/0x64 [ 141.892343][ T6977] __vfs_setxattr+0x388/0x3a4 [ 141.893375][ T6977] __vfs_setxattr_noperm+0x110/0x528 [ 141.894602][ T6977] __vfs_setxattr_locked+0x1ec/0x218 [ 141.895817][ T6977] vfs_setxattr+0x1a8/0x344 [ 141.896817][ T6977] ovl_get_workdir+0xc00/0x13d4 [ 141.897909][ T6977] ovl_fill_super+0x15b4/0x2254 [ 141.898967][ T6977] mount_nodev+0x68/0x104 [ 141.899899][ T6977] ovl_mount+0x3c/0x50 [ 141.900849][ T6977] legacy_get_tree+0xd4/0x16c [ 141.901805][ T6977] vfs_get_tree+0x90/0x274 [ 141.902798][ T6977] do_new_mount+0x278/0x8fc [ 141.903751][ T6977] path_mount+0x590/0xe5c [ 141.904792][ T6977] __arm64_sys_mount+0x45c/0x594 [ 141.905809][ T6977] invoke_syscall+0x98/0x2c0 [ 141.906757][ T6977] el0_svc_common+0x138/0x258 [ 141.907807][ T6977] do_el0_svc+0x64/0x218 [ 141.908943][ T6977] el0_svc+0x58/0x168 [ 141.909820][ T6977] el0t_64_sync_handler+0x84/0xf0 [ 141.911044][ T6977] el0t_64_sync+0x18c/0x190 [ 142.001549][ T6977] OCFS2: ERROR (device loop2): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 142.008271][ T6977] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 142.010391][ T6977] OCFS2: Returning error to the calling process. [ 142.012430][ T6977] (syz.2.672,6977,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -5 [ 142.014467][ T6977] (syz.2.672,6977,1):__ocfs2_claim_clusters:2355 ERROR: status = -5 [ 142.016225][ T6977] (syz.2.672,6977,1):__ocfs2_claim_clusters:2363 ERROR: status = -5 [ 142.018019][ T6977] (syz.2.672,6977,1):ocfs2_block_group_alloc_contig:433 ERROR: status = -5 [ 142.019949][ T6977] (syz.2.672,6977,1):ocfs2_block_group_alloc:705 ERROR: status = -5 [ 142.021676][ T6977] (syz.2.672,6977,1):ocfs2_block_group_alloc:758 ERROR: status = -5 [ 142.024069][ T6977] (syz.2.672,6977,1):ocfs2_reserve_suballoc_bits:833 ERROR: status = -5 [ 142.025944][ T6977] (syz.2.672,6977,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -5 [ 142.027934][ T6977] (syz.2.672,6977,1):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -5 [ 142.029948][ T6977] (syz.2.672,6977,1):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -5 [ 142.033501][ T6977] (syz.2.672,6977,1):ocfs2_init_xattr_set_ctxt:3276 ERROR: status = -5 [ 142.035667][ T6977] (syz.2.672,6977,1):ocfs2_xattr_set:3633 ERROR: status = -5 [ 142.037357][ T6977] overlayfs: failed to set xattr on upper [ 142.038626][ T6977] overlayfs: ...falling back to index=off,metacopy=off. [ 142.040272][ T6977] overlayfs: upper fs missing required features. [ 142.059655][ T4302] ocfs2: Unmounting device (7,2) on (node local)