last executing test programs: 9.050475666s ago: executing program 1 (id=535): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086610, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getpriority(0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r3, r3, 0x0, 0xe3aa6ea) 7.831040657s ago: executing program 1 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000040000000300"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.108101879s ago: executing program 4 (id=542): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000030c0)={0x18, {"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", 0x1000}}, 0x1006) 6.482571659s ago: executing program 0 (id=544): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000040)={[{@fat=@discard}, {@fat=@nfs}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x401}}, {@fat=@uid}]}, 0x1, 0x22d, &(0x7f0000000680)="$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") 5.886233878s ago: executing program 3 (id=545): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = getpid() ppoll(0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 5.885343924s ago: executing program 1 (id=546): r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=r2, @ANYBLOB="2c63726561746f723dbd3d66f12c63726561746f723d64eb8ba92c6e6f6465636f6d706f73652c756d61736b3d3030303030303030303030303030303030303030303032000000003d", @ANYRESHEX=r1, @ANYRESOCT], 0x3, 0x6a4, &(0x7f0000001b40)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x200008, &(0x7f0000000600)={[{@noload}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@errors_continue}, {@jqfmt_vfsv1}, {@lazytime}, {@usrjquota}, {@resgid={'resgid', 0x3d, r2}}, {@nobh}]}, 0x1, 0x45b, &(0x7f0000000b00)="$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") r3 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x40200, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000340)=@userptr={0x6, 0x5, 0x4, 0x100, 0x3, {r5, r6/1000+60000}, {0x1, 0xc, 0x9, 0x5, 0x1, 0x4, "f7e9ed10"}, 0x80, 0x2, {0x0}, 0x9, 0x0, r4}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r8, &(0x7f0000000180)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r8, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffff9, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x25, 0x8000f, 0x80000006, 0xfffffffffffffffc}, 0x0, 0x0) 5.729167097s ago: executing program 0 (id=547): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='system.posix_acl_access\x00', 0x0, 0x24, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) socket(0x15, 0x5, 0x0) listxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140)=""/27, 0x1b) 5.651360223s ago: executing program 1 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000001c0)={0x7}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x2e, &(0x7f0000000240)=0x802) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 5.626191728s ago: executing program 2 (id=549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x97, 0x0, 0xb2, 0xe9, 0x8, 0x2}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.956189766s ago: executing program 3 (id=550): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086610, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getpriority(0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r3, r3, 0x0, 0xe3aa6ea) 4.955906167s ago: executing program 4 (id=551): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3a, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nouid32}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") 4.835435765s ago: executing program 2 (id=552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffe6, 0xb}, {0xe, 0xc}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xc000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.018024038s ago: executing program 1 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) get_robust_list(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_getattr(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/139, 0x8b) syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18042, 0x0) sendfile(r4, r4, 0x0, 0x18800) 4.011046001s ago: executing program 0 (id=563): socket$netlink(0x10, 0x3, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x1}, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x90000}, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) socket$netlink(0x10, 0x3, 0xf) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 4.010166609s ago: executing program 4 (id=554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000013a40)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000003740)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000000040)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x240000d1}, 0x14) 2.991247876s ago: executing program 3 (id=555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0x26b7, 0x8, 0x7c}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xfff3, 0xb}, {0x8, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x9, 0xb9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.990795339s ago: executing program 4 (id=556): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x2000004) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2.047120196s ago: executing program 0 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad3, 0x400, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000000)={0xfeffffff, r3, 0x23, {0x3b4, 0xc}, 0x6}, 0x1) 1.687426969s ago: executing program 4 (id=558): syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x8000, &(0x7f0000000180)=ANY=[@ANYBLOB="636f6d7072657373696f6e3d677a69702c725d1700007374727563745f616c6c6f632c00"], 0x1, 0x6739, &(0x7f00000067c0)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x99) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200002, &(0x7f0000000d40)={[{@shortname_winnt}, {@numtail}, {@shortname_mixed}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@fat=@uid}, {@uni_xlate}]}, 0x26, 0x336, &(0x7f00000001c0)="$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") openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/devices\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendfile(r0, r0, 0x0, 0x7a680000) 1.685848897s ago: executing program 1 (id=559): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) close(0x4) shutdown(r0, 0x1) 1.611553086s ago: executing program 2 (id=560): syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x0, 0x3a6}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0xb928, 0x39, @empty, @dev={0xfe, 0x80, '\x00', 0xe}, 0x40, 0x0, 0x0, 0xfffe}}) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r5, 0x0, r0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.610993378s ago: executing program 3 (id=561): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_USERDATA={0x12, 0x6, "32ee037cac8f981c030829539572"}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x14}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xac}}, 0x0) socket(0x10, 0x80003, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x800, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_UNLOCK(r2, 0x6406) readv(r2, &(0x7f0000002880), 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000240)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x108}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="52d75590b7988e965a6d2c86676c4ca3", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.374776257s ago: executing program 2 (id=562): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 1.336552203s ago: executing program 2 (id=564): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f00000007c0)={[{@test_dummy_encryption_v1}, {@oldalloc}, {@grpid}, {@grpjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}, {@noinit_itable}, {@nodelalloc}, {@norecovery}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x8994, &(0x7f0000000040)={'veth1_macvtap\x00', @ifru_data=0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, {0xfffd, 0x2}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040000}, 0x2000c8c0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, @mcast1, @private1, 0x700, 0x0, 0x3}}) pwrite64(r4, &(0x7f0000000140)='Q', 0x1, 0x200980) write$khugepaged_scan(r4, &(0x7f00000000c0), 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x0) fchown(r6, 0x0, 0xee01) 1.330671808s ago: executing program 3 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000), &(0x7f0000000000)) write$char_usb(r3, &(0x7f0000000040)="e2", 0xff0f) openat(0xffffffffffffff9c, 0x0, 0x42, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 904.163196ms ago: executing program 0 (id=566): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x7, 0xc, 0xffffffff, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 790.372186ms ago: executing program 2 (id=567): syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYBLOB="343f1f5beace799a21485c3947a26727fd7c0aba997e73a2db1b85350ea826d0769e1d1f150ed7c5b0fd9023bcd9dc94369db209bd5860fd0a0b7f9618c0bec9334134c2403dd80c4e8d30d82b6942e74a826fdd2d943ddd1eb99074173cb9b96b096cb0e20f7c0e72c9493a17ca38b51a4ef0a5a0bd67f91ed487e8e9bc7d032cb854b137", @ANYBLOB="40d4823deffdbbeb65eeddb31203a829679a7a18f01faefa691c80df4e49f2c92d0c9708f605177b1f5699eeabb703cc126adf2f9c5167d17178b4e0c590345bad5de906894ef754ec7a8c3b32c7b9d0f74abf43c4dee78decff644fd28d7d874518bd960a098875b53d2005df3fb15a953031adb9887615b59f3caef2de95c9495a7154700055ef1a72", @ANYRESOCT, @ANYRES32=0x0, @ANYRES16], 0xec, 0x5ac4, &(0x7f0000008380)="$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") ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffd}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x8008bc40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x14, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0x1, 0x0, 0x3}}}}}}}, 0x0) 415.516364ms ago: executing program 3 (id=568): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x801, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) 415.167747ms ago: executing program 0 (id=569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x7600) 0s ago: executing program 4 (id=570): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): @ nid 36 [ 46.066469][ T6908] erofs (device loop3): readahead error at folio 63 @ nid 36 [ 46.066492][ T6908] erofs (device loop3): readahead error at folio 61 @ nid 36 [ 46.066507][ T6908] erofs (device loop3): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 46.066516][ T6908] erofs (device loop3): readahead error at folio 59 @ nid 36 [ 46.066525][ T6908] erofs (device loop3): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 46.066534][ T6908] erofs (device loop3): readahead error at folio 58 @ nid 36 [ 46.066549][ T6908] erofs (device loop3): readahead error at folio 56 @ nid 36 [ 46.066598][ T6908] erofs (device loop3): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 46.066607][ T6908] erofs (device loop3): readahead error at folio 47 @ nid 36 [ 46.066616][ T6908] erofs (device loop3): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 46.066624][ T6908] erofs (device loop3): readahead error at folio 46 @ nid 36 [ 46.066636][ T6908] erofs (device loop3): readahead error at folio 45 @ nid 36 [ 46.067017][ T6908] syz.3.62: attempt to access beyond end of device [ 46.067017][ T6908] loop3: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 46.067067][ T6908] syz.3.62: attempt to access beyond end of device [ 46.067067][ T6908] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 46.067165][ T6908] syz.3.62: attempt to access beyond end of device [ 46.067165][ T6908] loop3: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 46.067835][ T6908] erofs (device loop3): failed to decompress -3 in[47, 4049] out[5297] [ 46.121065][ T6913] loop1: detected capacity change from 0 to 256 [ 46.139217][ T6913] FAT-fs (loop1): Directory bread(block 64) failed [ 46.139240][ T6913] FAT-fs (loop1): Directory bread(block 65) failed [ 46.139261][ T6913] FAT-fs (loop1): Directory bread(block 66) failed [ 46.139271][ T6913] FAT-fs (loop1): Directory bread(block 67) failed [ 46.141175][ T6913] FAT-fs (loop1): Directory bread(block 68) failed [ 46.141196][ T6913] FAT-fs (loop1): Directory bread(block 69) failed [ 46.141229][ T6913] FAT-fs (loop1): Directory bread(block 70) failed [ 46.141244][ T6913] FAT-fs (loop1): Directory bread(block 71) failed [ 46.141380][ T6913] FAT-fs (loop1): Directory bread(block 72) failed [ 46.141393][ T6913] FAT-fs (loop1): Directory bread(block 73) failed [ 46.420729][ T6913] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.841523][ T11] tipc: Node number set to 2887647236 [ 48.645715][ T6921] loop2: detected capacity change from 0 to 32768 [ 48.648943][ T6921] btrfs: Deprecated parameter 'usebackuproot' [ 48.651209][ T6921] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 48.655751][ T6921] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.50 (6921) [ 48.664755][ T6921] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 48.664816][ T6921] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 49.599433][ T4154] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 49.602505][ T6921] BTRFS error (device loop2): failed to load root extent [ 49.602540][ T6921] BTRFS warning (device loop2): try to load backup roots slot 1 [ 49.607585][ T4154] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 49.614003][ T6921] BTRFS warning (device loop2): couldn't read tree root [ 49.614062][ T6921] BTRFS warning (device loop2): try to load backup roots slot 2 [ 49.618450][ T12] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 49.620428][ T6921] BTRFS warning (device loop2): couldn't read tree root [ 49.620469][ T6921] BTRFS warning (device loop2): try to load backup roots slot 3 [ 49.642584][ T6921] BTRFS info (device loop2): rebuilding free space tree [ 49.663135][ T6921] BTRFS info (device loop2): disabling free space tree [ 49.663180][ T6921] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 49.663204][ T6921] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 49.670639][ T6982] loop1: detected capacity change from 0 to 64 [ 49.689597][ T6921] BTRFS info (device loop2): setting nodatasum [ 49.689629][ T6921] BTRFS info (device loop2): setting nodatacow [ 49.689650][ T6921] BTRFS info (device loop2): enabling ssd optimizations [ 49.689663][ T6921] BTRFS info (device loop2): turning off barriers [ 49.689676][ T6921] BTRFS info (device loop2): turning on sync discard [ 49.689686][ T6921] BTRFS info (device loop2): force clearing of disk cache [ 49.689695][ T6921] BTRFS info (device loop2): enabling auto defrag [ 49.689704][ T6921] BTRFS info (device loop2): trying to use backup root at mount time [ 49.689714][ T6921] BTRFS info (device loop2): max_inline set to 0 [ 51.152701][ T6996] Soft offlining pfn 0x125f19 at process virtual address 0x20000000 [ 51.156430][ T6996] Soft offlining pfn 0x12256c at process virtual address 0x20001000 [ 51.156539][ T6996] Soft offlining pfn 0x1226ac at process virtual address 0x20002000 [ 51.156707][ T6996] Soft offlining pfn 0x122561 at process virtual address 0x20003000 [ 51.156878][ T6996] Soft offlining pfn 0x12255c at process virtual address 0x20004000 [ 51.157202][ T6996] Soft offlining pfn 0x12255a at process virtual address 0x20005000 [ 51.157857][ T6996] Soft offlining pfn 0x138a5b at process virtual address 0x20006000 [ 51.158775][ T6996] Soft offlining pfn 0x138a5a at process virtual address 0x20007000 [ 51.159690][ T6996] Soft offlining pfn 0x138a59 at process virtual address 0x20008000 [ 51.160615][ T6996] Soft offlining pfn 0x138a58 at process virtual address 0x20009000 [ 51.161574][ T6996] Soft offlining pfn 0x138a57 at process virtual address 0x2000a000 [ 51.162447][ T6996] Soft offlining pfn 0x138a56 at process virtual address 0x2000b000 [ 51.163313][ T6996] Soft offlining pfn 0x138a55 at process virtual address 0x2000c000 [ 51.164175][ T6996] Soft offlining pfn 0x138a54 at process virtual address 0x2000d000 [ 51.165041][ T6996] Soft offlining pfn 0x138a53 at process virtual address 0x2000e000 [ 51.165905][ T6996] Soft offlining pfn 0x138a52 at process virtual address 0x2000f000 [ 51.166768][ T6996] Soft offlining pfn 0x138a51 at process virtual address 0x20010000 [ 51.167632][ T6996] Soft offlining pfn 0x138a50 at process virtual address 0x20011000 [ 51.168497][ T6996] Soft offlining pfn 0x138a4f at process virtual address 0x20012000 [ 51.169362][ T6996] Soft offlining pfn 0x138a4e at process virtual address 0x20013000 [ 51.170227][ T6996] Soft offlining pfn 0x138a4d at process virtual address 0x20014000 [ 51.171089][ T6996] Soft offlining pfn 0x138a4c at process virtual address 0x20015000 [ 51.171968][ T6996] Soft offlining pfn 0x138a4b at process virtual address 0x20016000 [ 51.172839][ T6996] Soft offlining pfn 0x138a4a at process virtual address 0x20017000 [ 51.173705][ T6996] Soft offlining pfn 0x138a49 at process virtual address 0x20018000 [ 51.174575][ T6996] Soft offlining pfn 0x138a48 at process virtual address 0x20019000 [ 51.175445][ T6996] Soft offlining pfn 0x138a47 at process virtual address 0x2001a000 [ 51.218963][ T6996] Soft offlining pfn 0x138a46 at process virtual address 0x2001b000 [ 51.219092][ T6996] Soft offlining pfn 0x138a45 at process virtual address 0x2001c000 [ 51.219237][ T6996] Soft offlining pfn 0x138a44 at process virtual address 0x2001d000 [ 51.219476][ T6996] Soft offlining pfn 0x138a43 at process virtual address 0x2001e000 [ 51.219868][ T6996] Soft offlining pfn 0x138a42 at process virtual address 0x2001f000 [ 51.220655][ T6996] Soft offlining pfn 0x138a41 at process virtual address 0x20020000 [ 51.221907][ T6996] Soft offlining pfn 0x138a40 at process virtual address 0x20021000 [ 51.223076][ T6996] Soft offlining pfn 0x138a3f at process virtual address 0x20022000 [ 51.224255][ T6996] Soft offlining pfn 0x138a3e at process virtual address 0x20023000 [ 51.225449][ T6996] Soft offlining pfn 0x138a3d at process virtual address 0x20024000 [ 51.226628][ T6996] Soft offlining pfn 0x138a3c at process virtual address 0x20025000 [ 51.227794][ T6996] Soft offlining pfn 0x138a3b at process virtual address 0x20026000 [ 51.228975][ T6996] Soft offlining pfn 0x138a3a at process virtual address 0x20027000 [ 51.230153][ T6996] Soft offlining pfn 0x138a39 at process virtual address 0x20028000 [ 51.231333][ T6996] Soft offlining pfn 0x138a38 at process virtual address 0x20029000 [ 51.232503][ T6996] Soft offlining pfn 0x138a37 at process virtual address 0x2002a000 [ 51.233693][ T6996] Soft offlining pfn 0x138a35 at process virtual address 0x2002b000 [ 51.234871][ T6996] Soft offlining pfn 0x11f545 at process virtual address 0x2002c000 [ 51.236041][ T6996] Soft offlining pfn 0x11f544 at process virtual address 0x2002d000 [ 51.237184][ T6996] Soft offlining pfn 0x11f543 at process virtual address 0x2002e000 [ 51.238353][ T6996] Soft offlining pfn 0x11f542 at process virtual address 0x2002f000 [ 51.239520][ T6996] Soft offlining pfn 0x11f541 at process virtual address 0x20030000 [ 51.240701][ T6996] Soft offlining pfn 0x11f540 at process virtual address 0x20031000 [ 51.241883][ T6996] Soft offlining pfn 0x125597 at process virtual address 0x20032000 [ 51.243062][ T6996] Soft offlining pfn 0x125596 at process virtual address 0x20033000 [ 51.244257][ T6996] Soft offlining pfn 0x125595 at process virtual address 0x20034000 [ 51.245464][ T6996] Soft offlining pfn 0x125594 at process virtual address 0x20035000 [ 51.246651][ T6996] Soft offlining pfn 0x125593 at process virtual address 0x20036000 [ 51.247817][ T6996] Soft offlining pfn 0x125592 at process virtual address 0x20037000 [ 51.248999][ T6996] Soft offlining pfn 0x125591 at process virtual address 0x20038000 [ 51.250193][ T6996] Soft offlining pfn 0x125590 at process virtual address 0x20039000 [ 51.251399][ T6996] Soft offlining pfn 0x1376a7 at process virtual address 0x2003a000 [ 51.252601][ T6996] Soft offlining pfn 0x1376a6 at process virtual address 0x2003b000 [ 51.253793][ T6996] Soft offlining pfn 0x1376a5 at process virtual address 0x2003c000 [ 51.254984][ T6996] Soft offlining pfn 0x1376a4 at process virtual address 0x2003d000 [ 51.256160][ T6996] Soft offlining pfn 0x1376a3 at process virtual address 0x2003e000 [ 51.257316][ T6996] Soft offlining pfn 0x1376a2 at process virtual address 0x2003f000 [ 51.258527][ T6996] Soft offlining pfn 0x1376a1 at process virtual address 0x20040000 [ 51.259702][ T6996] Soft offlining pfn 0x1376a0 at process virtual address 0x20041000 [ 51.260892][ T6996] Soft offlining pfn 0x1223f8 at process virtual address 0x20042000 [ 51.262060][ T6996] Soft offlining pfn 0x1223f7 at process virtual address 0x20043000 [ 51.263238][ T6996] Soft offlining pfn 0x1223f6 at process virtual address 0x20044000 [ 51.264420][ T6996] Soft offlining pfn 0x123f02 at process virtual address 0x20045000 [ 51.265608][ T6996] Soft offlining pfn 0x122edf at process virtual address 0x20046000 [ 51.266767][ T6996] Soft offlining pfn 0x123f17 at process virtual address 0x20047000 [ 51.267925][ T6996] Soft offlining pfn 0x123efc at process virtual address 0x20048000 [ 51.269081][ T6996] Soft offlining pfn 0x1252c2 at process virtual address 0x20049000 [ 51.270263][ T6996] Soft offlining pfn 0x121ec4 at process virtual address 0x2004a000 [ 51.276008][ T6996] Soft offlining pfn 0x122edc at process virtual address 0x2004b000 [ 51.278196][ T6996] Soft offlining pfn 0x121ec5 at process virtual address 0x2004c000 [ 51.279418][ T6996] Soft offlining pfn 0x120c4e at process virtual address 0x2004d000 [ 51.280610][ T6996] Soft offlining pfn 0x12572b at process virtual address 0x2004e000 [ 51.281762][ T6996] Soft offlining pfn 0x125720 at process virtual address 0x2004f000 [ 51.282625][ T6996] Soft offlining pfn 0x125723 at process virtual address 0x20050000 [ 51.283495][ T6996] Soft offlining pfn 0x122edb at process virtual address 0x20051000 [ 51.284354][ T6996] Soft offlining pfn 0x120c20 at process virtual address 0x20052000 [ 51.285213][ T6996] Soft offlining pfn 0x120ca7 at process virtual address 0x20053000 [ 51.286074][ T6996] Soft offlining pfn 0x1252c1 at process virtual address 0x20054000 [ 51.286933][ T6996] Soft offlining pfn 0x120c50 at process virtual address 0x20055000 [ 51.287793][ T6996] Soft offlining pfn 0x125739 at process virtual address 0x20056000 [ 51.288668][ T6996] Soft offlining pfn 0x12618b at process virtual address 0x20057000 [ 51.289530][ T6996] Soft offlining pfn 0x125736 at process virtual address 0x20058000 [ 51.290390][ T6996] Soft offlining pfn 0x125737 at process virtual address 0x20059000 [ 51.291251][ T6996] Soft offlining pfn 0x120c51 at process virtual address 0x2005a000 [ 51.292191][ T6996] Soft offlining pfn 0x122edd at process virtual address 0x2005b000 [ 51.293051][ T6996] Soft offlining pfn 0x123efb at process virtual address 0x2005c000 [ 51.293912][ T6996] Soft offlining pfn 0x125704 at process virtual address 0x2005d000 [ 51.294776][ T6996] Soft offlining pfn 0x125701 at process virtual address 0x2005e000 [ 51.295637][ T6996] Soft offlining pfn 0x125708 at process virtual address 0x2005f000 [ 51.296498][ T6996] Soft offlining pfn 0x120af0 at process virtual address 0x20060000 [ 51.297358][ T6996] Soft offlining pfn 0x120ca6 at process virtual address 0x20061000 [ 51.298216][ T6996] Soft offlining pfn 0x1256de at process virtual address 0x20062000 [ 51.299081][ T6996] Soft offlining pfn 0x1384e6 at process virtual address 0x20063000 [ 51.316001][ T6996] Soft offlining pfn 0x122286 at process virtual address 0x20064000 [ 51.316074][ T6996] Soft offlining pfn 0x1223e4 at process virtual address 0x20065000 [ 51.316167][ T6996] Soft offlining pfn 0x1223e5 at process virtual address 0x20066000 [ 51.316333][ T6996] Soft offlining pfn 0x122292 at process virtual address 0x20067000 [ 51.316639][ T6996] Soft offlining pfn 0x122293 at process virtual address 0x20068000 [ 51.317260][ T6996] Soft offlining pfn 0x12630a at process virtual address 0x20069000 [ 51.318126][ T6996] Soft offlining pfn 0x12630b at process virtual address 0x2006a000 [ 51.318995][ T6996] Soft offlining pfn 0x125b0c at process virtual address 0x2006b000 [ 51.319859][ T6996] Soft offlining pfn 0x125b0d at process virtual address 0x2006c000 [ 51.320723][ T6996] Soft offlining pfn 0x1223f0 at process virtual address 0x2006d000 [ 51.321656][ T6996] Soft offlining pfn 0x1223f1 at process virtual address 0x2006e000 [ 51.322534][ T6996] Soft offlining pfn 0x122284 at process virtual address 0x2006f000 [ 51.323404][ T6996] Soft offlining pfn 0x122285 at process virtual address 0x20070000 [ 51.324270][ T6996] Soft offlining pfn 0x122272 at process virtual address 0x20071000 [ 51.325141][ T6996] Soft offlining pfn 0x122273 at process virtual address 0x20072000 [ 51.326033][ T6996] Soft offlining pfn 0x13862a at process virtual address 0x20073000 [ 51.326906][ T6996] Soft offlining pfn 0x13862b at process virtual address 0x20074000 [ 51.327779][ T6996] Soft offlining pfn 0x1384e4 at process virtual address 0x20075000 [ 51.328651][ T6996] Soft offlining pfn 0x1384e5 at process virtual address 0x20076000 [ 51.329524][ T6996] Soft offlining pfn 0x1384e2 at process virtual address 0x20077000 [ 51.330396][ T6996] Soft offlining pfn 0x1384e3 at process virtual address 0x20078000 [ 51.331315][ T6996] Soft offlining pfn 0x121e46 at process virtual address 0x20079000 [ 51.332199][ T6996] Soft offlining pfn 0x121e47 at process virtual address 0x2007a000 [ 51.333099][ T6996] Soft offlining pfn 0x138688 at process virtual address 0x2007b000 [ 51.334312][ T6996] Soft offlining pfn 0x138689 at process virtual address 0x2007c000 [ 51.335500][ T6996] Soft offlining pfn 0x120c22 at process virtual address 0x2007d000 [ 51.336706][ T6996] Soft offlining pfn 0x122194 at process virtual address 0x2007e000 [ 51.337882][ T6996] Soft offlining pfn 0x122195 at process virtual address 0x2007f000 [ 51.339074][ T6996] Soft offlining pfn 0x125982 at process virtual address 0x20080000 [ 51.340263][ T6996] Soft offlining pfn 0x125983 at process virtual address 0x20081000 [ 51.341529][ T6996] Soft offlining pfn 0x1223fa at process virtual address 0x20082000 [ 51.342715][ T6996] Soft offlining pfn 0x1223fb at process virtual address 0x20083000 [ 51.343904][ T6996] Soft offlining pfn 0x124518 at process virtual address 0x20084000 [ 51.345072][ T6996] Soft offlining pfn 0x124519 at process virtual address 0x20085000 [ 51.346288][ T6996] Soft offlining pfn 0x125cac at process virtual address 0x20086000 [ 51.347449][ T6996] Soft offlining pfn 0x125cad at process virtual address 0x20087000 [ 51.348656][ T6996] Soft offlining pfn 0x124854 at process virtual address 0x20088000 [ 51.349840][ T6996] Soft offlining pfn 0x124855 at process virtual address 0x20089000 [ 51.351017][ T6996] Soft offlining pfn 0x12450c at process virtual address 0x2008a000 [ 51.352195][ T6996] Soft offlining pfn 0x12450d at process virtual address 0x2008b000 [ 51.353404][ T6996] Soft offlining pfn 0x122dee at process virtual address 0x2008c000 [ 51.354596][ T6996] Soft offlining pfn 0x122def at process virtual address 0x2008d000 [ 51.355781][ T6996] Soft offlining pfn 0x1228ca at process virtual address 0x2008e000 [ 51.356980][ T6996] Soft offlining pfn 0x1228cb at process virtual address 0x2008f000 [ 51.358180][ T6996] Soft offlining pfn 0x120ad2 at process virtual address 0x20090000 [ 51.359381][ T6996] Soft offlining pfn 0x120ad3 at process virtual address 0x20091000 [ 51.360589][ T6996] Soft offlining pfn 0x1226a4 at process virtual address 0x20092000 [ 51.361812][ T6996] Soft offlining pfn 0x1226a5 at process virtual address 0x20093000 [ 51.362994][ T6996] Soft offlining pfn 0x1386e0 at process virtual address 0x20094000 [ 51.364203][ T6996] Soft offlining pfn 0x1386e1 at process virtual address 0x20095000 [ 51.365419][ T6996] Soft offlining pfn 0x124506 at process virtual address 0x20096000 [ 51.366627][ T6996] Soft offlining pfn 0x124507 at process virtual address 0x20097000 [ 51.367797][ T6996] Soft offlining pfn 0x12276c at process virtual address 0x20098000 [ 51.368999][ T6996] Soft offlining pfn 0x12276d at process virtual address 0x20099000 [ 51.370172][ T6996] Soft offlining pfn 0x125af4 at process virtual address 0x2009a000 [ 51.371390][ T6996] Soft offlining pfn 0x125af5 at process virtual address 0x2009b000 [ 51.372592][ T6996] Soft offlining pfn 0x124c2b at process virtual address 0x2009c000 [ 51.373788][ T6996] Soft offlining pfn 0x1389f4 at process virtual address 0x2009d000 [ 51.374973][ T6996] Soft offlining pfn 0x1389f5 at process virtual address 0x2009e000 [ 51.376179][ T6996] Soft offlining pfn 0x1389f6 at process virtual address 0x2009f000 [ 51.377398][ T6996] Soft offlining pfn 0x1389f7 at process virtual address 0x200a0000 [ 51.378608][ T6996] Soft offlining pfn 0x1220e8 at process virtual address 0x200a1000 [ 51.379787][ T6996] Soft offlining pfn 0x1220e9 at process virtual address 0x200a2000 [ 51.381011][ T6996] Soft offlining pfn 0x1220ea at process virtual address 0x200a3000 [ 51.382219][ T6996] Soft offlining pfn 0x1220eb at process virtual address 0x200a4000 [ 51.383427][ T6996] Soft offlining pfn 0x137658 at process virtual address 0x200a5000 [ 51.384644][ T6996] Soft offlining pfn 0x137659 at process virtual address 0x200a6000 [ 51.385833][ T6996] Soft offlining pfn 0x13765a at process virtual address 0x200a7000 [ 51.387032][ T6996] Soft offlining pfn 0x13765b at process virtual address 0x200a8000 [ 51.388232][ T6996] Soft offlining pfn 0x12572c at process virtual address 0x200a9000 [ 51.389430][ T6996] Soft offlining pfn 0x12572d at process virtual address 0x200aa000 [ 51.390636][ T6996] Soft offlining pfn 0x12572e at process virtual address 0x200ab000 [ 51.930614][ T7005] tipc: Started in network mode [ 51.930632][ T7005] tipc: Node identity dac870b1b6db, cluster identity 4711 [ 51.935198][ T7005] tipc: Enabled bearer , priority 0 [ 51.939952][ T7005] syzkaller0: entered promiscuous mode [ 51.939968][ T7005] syzkaller0: entered allmulticast mode [ 51.953416][ T6535] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 51.972186][ T7005] tipc: Resetting bearer [ 51.980297][ T7003] tipc: Resetting bearer [ 51.986811][ T7003] tipc: Disabling bearer [ 52.048725][ T7015] binder: 7014:7015 tried to acquire reference to desc 0, got 1 instead [ 52.050842][ T7015] binder: 7014:7015 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 52.053186][ T7015] binder: 7015 RLIMIT_NICE not set [ 52.054256][ T7015] binder: 7015 RLIMIT_NICE not set [ 52.055066][ T7015] binder: send failed reply for transaction 17 to 7014:7015 [ 52.056379][ T7015] binder: 7014:7015 ioctl c0306201 20000180 returned -14 [ 52.064749][ T7015] binder: 7014:7015 got transaction to context manager from process owning it [ 52.066488][ T7015] binder: 7014:7015 transaction async to 7014:0 failed 18/29201/-22, code 0 size 0-0 line 3142 [ 52.092296][ T11] binder: undelivered TRANSACTION_COMPLETE [ 52.092381][ T11] binder: undelivered TRANSACTION_ERROR: 29201 [ 52.092404][ T11] binder: undelivered TRANSACTION_ERROR: 29201 [ 52.517916][ T7019] loop2: detected capacity change from 0 to 32768 [ 52.519779][ T7019] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.86 (7019) [ 52.528348][ T7019] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 52.528413][ T7019] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 52.551909][ T7032] Zero length message leads to an empty skb [ 52.795219][ T7019] BTRFS info (device loop2): rebuilding free space tree [ 52.802038][ T7019] BTRFS info (device loop2): allowing degraded mounts [ 52.802067][ T7019] BTRFS info (device loop2): enabling ssd optimizations [ 52.802086][ T7019] BTRFS info (device loop2): enabling free space tree [ 52.802093][ T7019] BTRFS info (device loop2): force clearing of disk cache [ 52.802100][ T7019] BTRFS info (device loop2): use zstd compression, level 3 [ 52.802107][ T7019] BTRFS info (device loop2): max_inline set to 0 [ 52.810863][ T7032] loop1: detected capacity change from 0 to 2048 [ 52.827297][ T7032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.930284][ T7053] tipc: Enabled bearer , priority 0 [ 52.933930][ T7053] syzkaller0: entered promiscuous mode [ 52.933967][ T7053] syzkaller0: entered allmulticast mode [ 52.987022][ T6529] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.996285][ T7053] tipc: Resetting bearer [ 53.016505][ T7052] tipc: Resetting bearer [ 53.025509][ T7052] tipc: Disabling bearer [ 53.089615][ T7055] loop3: detected capacity change from 0 to 2048 [ 53.117147][ T7055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 53.513272][ T6535] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 53.581935][ T7071] netlink: 'syz.4.96': attribute type 1 has an invalid length. [ 53.587435][ T7071] vlan2: entered allmulticast mode [ 53.590634][ T7071] veth1: entered allmulticast mode [ 53.606200][ T7066] syzkaller0: entered promiscuous mode [ 53.606239][ T7066] syzkaller0: entered allmulticast mode [ 53.702883][ T7076] binder: 7075:7076 ioctl 4018620d 0 returned -22 [ 53.707778][ T7059] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.714002][ T7059] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 3074 with max blocks 1022 with error 28 [ 53.714029][ T7059] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.714029][ T7059] [ 53.714042][ T7059] EXT4-fs (loop3): Total free blocks count 0 [ 53.714054][ T7059] EXT4-fs (loop3): Free/Dirty block details [ 53.714067][ T7059] EXT4-fs (loop3): free_blocks=2415919104 [ 53.714079][ T7059] EXT4-fs (loop3): dirty_blocks=2048 [ 53.714087][ T7059] EXT4-fs (loop3): Block reservation details [ 53.714094][ T7059] EXT4-fs (loop3): i_reserved_data_blocks=128 [ 53.792729][ T7074] loop2: detected capacity change from 0 to 32768 [ 54.162696][ T7074] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 54.441853][ T7086] loop1: detected capacity change from 0 to 1024 [ 54.477269][ T41] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 54.715807][ T7087] (syz.2.95,7087,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 54.915314][ T6535] ocfs2: Unmounting device (7,2) on (node local) [ 55.487717][ T7103] netlink: 132 bytes leftover after parsing attributes in process `syz.4.101'. [ 56.210367][ T7117] loop2: detected capacity change from 0 to 16 [ 56.226580][ T7117] erofs (device loop2): mounted with root inode @ nid 36. [ 56.319787][ T7125] syzkaller0: entered promiscuous mode [ 56.319827][ T7125] syzkaller0: entered allmulticast mode [ 56.322375][ T7108] loop0: detected capacity change from 0 to 40427 [ 56.326482][ T7108] F2FS-fs (loop0): Image doesn't support compression [ 56.326519][ T7108] F2FS-fs (loop0): build fault injection rate: 690 [ 56.326542][ T7108] F2FS-fs (loop0): build fault injection type: 0x35f7 [ 56.327734][ T7108] F2FS-fs (loop0): invalid crc value [ 56.337628][ T7127] loop2: detected capacity change from 0 to 4096 [ 56.369343][ T7128] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 56.386603][ T7108] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 56.395809][ T7108] F2FS-fs (loop0): Start checkpoint disabled! [ 56.406201][ T7108] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 56.492896][ T7132] mmap: syz.2.112 (7132) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.947371][ T7143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.947592][ T7143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.009303][ T7143] loop3: detected capacity change from 0 to 256 [ 57.009715][ T7143] vfat: Bad value for 'uni_xlate' [ 57.028058][ T7141] loop1: detected capacity change from 0 to 32768 [ 57.030585][ T7141] ocfs2: Bad value for 'localalloc' [ 57.615504][ T7151] tipc: Started in network mode [ 57.615543][ T7151] tipc: Node identity 2a171f5a8862, cluster identity 4711 [ 57.615600][ T7151] tipc: Enabled bearer , priority 0 [ 57.616185][ T7151] syzkaller0: entered promiscuous mode [ 57.616197][ T7151] syzkaller0: entered allmulticast mode [ 57.628246][ T7151] tipc: Resetting bearer [ 57.633813][ T6535] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 57.640778][ T7150] tipc: Resetting bearer [ 57.645967][ T7150] tipc: Disabling bearer [ 58.075228][ T7163] loop1: detected capacity change from 0 to 128 [ 58.076863][ T7163] vfat: Unknown parameter '18446744073709551615ÿÿÿ' [ 58.099780][ T7165] random: crng reseeded on system resumption [ 58.132104][ T7165] loop3: detected capacity change from 0 to 1024 [ 58.211007][ T7171] loop0: detected capacity change from 0 to 128 [ 58.215803][ T7171] FAT-fs (loop0): Invalid FSINFO signature: 0x09615252, 0x614101ff (sector = 1) [ 58.240811][ T7171] FAT-fs (loop0): error, invalid access to FAT (entry 0x0affffff) [ 58.241137][ T7171] FAT-fs (loop0): Filesystem has been set read-only [ 58.243519][ T7171] FAT-fs (loop0): error, invalid access to FAT (entry 0x0affffff) [ 58.257970][ T7171] FAT-fs (loop0): Invalid FSINFO signature: 0x09615252, 0x614101ff (sector = 1) [ 58.348485][ T7173] loop3: detected capacity change from 0 to 32768 [ 58.356096][ T7173] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 58.364148][ T7173] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 58.840051][ T7175] loop0: detected capacity change from 0 to 65536 [ 59.157585][ T6536] ocfs2: Unmounting device (7,3) on (node local) [ 59.165204][ T7175] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 59.213133][ T7175] XFS (loop0): Ending clean mount [ 59.367949][ T7205] loop3: detected capacity change from 0 to 256 [ 59.380097][ T7205] FAT-fs (loop3): count of clusters too big (178174) [ 59.380486][ T7205] FAT-fs (loop3): Can't find a valid FAT filesystem [ 60.564061][ T6534] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 60.634078][ T7220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.798277][ T7222] loop3: detected capacity change from 0 to 32768 [ 60.892655][ T7228] loop0: detected capacity change from 0 to 4096 [ 60.918096][ T7222] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 60.918137][ T7222] allowing incompatible features above 0.0: (unknown version) [ 60.927780][ T7222] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 60.928079][ T7222] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 60.928131][ T7222] bcachefs (loop3): initializing new filesystem [ 60.929654][ T7222] bcachefs (loop3): going read-write [ 61.031644][ T7222] bcachefs (loop3): marking superblocks [ 61.278669][ T7222] bcachefs (loop3): initializing freespace [ 61.281103][ T7222] bcachefs (loop3): done initializing freespace [ 61.292271][ T7222] bcachefs (loop3): reading snapshots table [ 61.292323][ T7222] bcachefs (loop3): reading snapshots done [ 61.306305][ T7222] bcachefs (loop3): done starting filesystem [ 61.423059][ T7247] binder: 7246:7247 tried to acquire reference to desc 0, got 1 instead [ 61.425436][ T6519] binder: release 7246:7247 transaction 23 out, still active [ 61.425448][ T6519] binder: undelivered TRANSACTION_COMPLETE [ 61.445692][ T6519] binder: send failed reply for transaction 23, target dead [ 61.474540][ T7211] loop2: detected capacity change from 0 to 262144 [ 61.477097][ T7211] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.133 (7211) [ 61.482476][ T7211] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 61.482545][ T7211] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 61.589347][ T7211] BTRFS info (device loop2): enabling ssd optimizations [ 61.589410][ T7211] BTRFS info (device loop2): enabling free space tree [ 61.659921][ T7266] loop1: detected capacity change from 0 to 8 [ 61.661968][ T7266] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 61.750024][ T7266] block nbd1: Attempted send on invalid socket [ 61.750085][ T7266] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 61.912006][ T6730] udevd[6730]: incorrect cramfs checksum on /dev/loop1 [ 62.445948][ T6730] udevd[6730]: incorrect cramfs checksum on /dev/loop1 [ 62.457369][ T6532] Bluetooth: hci4: hcon 000000005e74a98a sent 1 < count 511 [ 62.485357][ T6535] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 62.530767][ T6536] bcachefs (loop3): shutting down [ 62.533180][ T6536] bcachefs (loop3): going read-only [ 62.536402][ T6536] bcachefs (loop3): finished waiting for writes to stop [ 62.563518][ T6536] bcachefs (loop3): flushing journal and stopping allocators, journal seq 5 [ 62.657475][ T6536] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 5 [ 62.658657][ T7284] loop1: detected capacity change from 0 to 8 [ 62.664244][ T6536] bcachefs (loop3): clean shutdown complete, journal seq 6 [ 62.666132][ T6536] bcachefs (loop3): marking filesystem clean [ 63.023139][ T6536] bcachefs (loop3): shutdown complete [ 63.518562][ T7300] loop2: detected capacity change from 0 to 256 [ 63.533010][ T7300] loop2: detected capacity change from 0 to 64 [ 64.392888][ T7319] loop2: detected capacity change from 0 to 764 [ 64.425986][ T7319] iso9660: Unknown parameter 'sysfs' [ 64.483385][ T2413] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.484571][ T2413] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.488367][ T9] cfg80211: failed to load regulatory.db [ 64.554313][ T7325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.160'. [ 65.175215][ T7331] loop4: detected capacity change from 0 to 32768 [ 65.175988][ T7331] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.162 (7331) [ 65.178342][ T7331] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 65.178383][ T7331] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 65.178404][ T7331] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 65.209525][ T7331] BTRFS info (device loop4): rebuilding free space tree [ 65.218718][ T7331] BTRFS info (device loop4): disabling free space tree [ 65.220211][ T7331] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 65.222447][ T7331] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 65.225960][ T7331] BTRFS info (device loop4): setting nodatasum [ 65.227330][ T7331] BTRFS info (device loop4): setting nodatacow [ 65.228677][ T7331] BTRFS info (device loop4): enabling ssd optimizations [ 65.230134][ T7331] BTRFS info (device loop4): turning off barriers [ 65.231739][ T7331] BTRFS info (device loop4): turning on flush-on-commit [ 65.232163][ T7331] BTRFS info (device loop4): enabling disk space caching [ 65.232185][ T7331] BTRFS info (device loop4): force clearing of disk cache [ 65.232204][ T7331] BTRFS info (device loop4): doing ref verification [ 65.232217][ T7331] BTRFS info (device loop4): max_inline set to 4096 [ 65.715242][ T6528] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 65.766898][ T7365] trusted_key: syz.0.168 sent an empty control message without MSG_MORE. [ 65.784304][ T7363] syz.1.167 uses obsolete (PF_INET,SOCK_PACKET) [ 66.202058][ T7375] netlink: 'syz.3.147': attribute type 11 has an invalid length. [ 66.202097][ T7375] netlink: 140 bytes leftover after parsing attributes in process `syz.3.147'. [ 66.237445][ T7380] netlink: 'syz.1.171': attribute type 1 has an invalid length. [ 66.245778][ T7369] loop4: detected capacity change from 0 to 32768 [ 66.249160][ T7380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.252081][ T7369] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.166 (7369) [ 66.260230][ T7369] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 66.266120][ T7369] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 66.275640][ T7380] bond1: (slave ip6erspan0): making interface the new active one [ 66.276422][ T7380] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 66.293493][ T7380] gretap1: entered promiscuous mode [ 66.295248][ T7380] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 66.311885][ T7380] macvlan2: entered promiscuous mode [ 66.311918][ T7380] macvlan2: entered allmulticast mode [ 66.312805][ T7380] bond1: entered promiscuous mode [ 66.312815][ T7380] ip6erspan0: entered promiscuous mode [ 66.313208][ T7380] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 66.313551][ T7380] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 66.313807][ T7380] bond1: left promiscuous mode [ 66.313814][ T7380] ip6erspan0: left promiscuous mode [ 66.329538][ T7369] BTRFS info (device loop4): rebuilding free space tree [ 66.338371][ T7369] BTRFS info (device loop4): disabling free space tree [ 66.339702][ T7369] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 66.342933][ T7369] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 66.346385][ T7369] BTRFS info (device loop4): enabling ssd optimizations [ 66.348064][ T7369] BTRFS info (device loop4): force clearing of disk cache [ 66.349646][ T7369] BTRFS info (device loop4): enabling auto defrag [ 66.351049][ T7369] BTRFS info (device loop4): doing ref verification [ 66.353575][ T7369] BTRFS info (device loop4): max_inline set to 4096 [ 66.382836][ T7369] BTRFS info (device loop4): balance: start -d -m [ 66.389050][ T7369] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 66.415677][ T7369] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 66.449557][ T7369] BTRFS info (device loop4): found 9 extents, stage: move data extents [ 66.476178][ T7369] BTRFS info (device loop4): found 1 extents, stage: update data pointers [ 66.487705][ T7369] BTRFS info (device loop4): balance: ended with status: 0 [ 66.518147][ T6528] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 67.520047][ T7416] loop4: detected capacity change from 0 to 32768 [ 67.588872][ T7422] netlink: 'syz.1.179': attribute type 12 has an invalid length. [ 67.588947][ T7422] netlink: 132 bytes leftover after parsing attributes in process `syz.1.179'. [ 67.793961][ T7426] loop2: detected capacity change from 0 to 2048 [ 67.798465][ T7426] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2) [ 67.911889][ T7416] bcachefs (loop4): starting version 1.13: inode_has_child_snapshots opts=compression=zstd [ 67.911927][ T7416] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 67.911959][ T7416] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 67.912009][ T7416] bcachefs (loop4): recovering from clean shutdown, journal seq 8 [ 67.912043][ T7416] bcachefs (loop4): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 67.912043][ T7416] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 68.177041][ T7416] bcachefs (loop4): error reading btree root btree=accounting level=0: btree_node_read_error, fixing [ 68.177170][ T7416] bcachefs (loop4): check_topology... done [ 68.179696][ T7416] bcachefs (loop4): accounting_read... done [ 68.203212][ T7416] bcachefs (loop4): alloc_read... done [ 68.204597][ T7416] bcachefs (loop4): snapshots_read... done [ 68.205963][ T7416] bcachefs (loop4): check_allocations... [ 68.208207][ T7416] bcachefs (loop4): bucket 0:78 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 68.212579][ T7416] bcachefs (loop4): bucket 0:78 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing [ 68.334716][ T7441] IPVS: Error connecting to the multicast addr [ 68.935550][ T7416] done [ 68.952846][ T7416] bcachefs (loop4): going read-write [ 68.955803][ T7416] bcachefs (loop4): journal_replay... done [ 69.065431][ T7416] bcachefs (loop4): check_lrus... done [ 69.066450][ T7416] bcachefs (loop4): check_backpointers_to_extents... done [ 69.076065][ T7416] bcachefs (loop4): check_extents_to_backpointers... done [ 69.083693][ T7416] bcachefs (loop4): check_inodes... [ 69.088526][ T6532] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 69.088599][ T6532] CPU: 0 UID: 0 PID: 6532 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT [ 69.088609][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 69.088615][ T6532] Workqueue: hci1 hci_rx_work [ 69.088632][ T6532] Call trace: [ 69.088634][ T6532] show_stack+0x2c/0x3c (C) [ 69.088645][ T6532] __dump_stack+0x30/0x40 [ 69.088652][ T6532] dump_stack_lvl+0xd8/0x12c [ 69.088657][ T6532] dump_stack+0x1c/0x28 [ 69.088663][ T6532] sysfs_create_dir_ns+0x22c/0x24c [ 69.088673][ T6532] kobject_add_internal+0x5a8/0xb20 [ 69.088682][ T6532] kobject_add+0x134/0x200 [ 69.088687][ T6532] device_add+0x394/0xa60 [ 69.088697][ T6532] hci_conn_add_sysfs+0xc0/0x1d0 [ 69.088706][ T6532] le_conn_complete_evt+0x98c/0xe84 [ 69.088715][ T6532] hci_le_conn_complete_evt+0x114/0x3f8 [ 69.088723][ T6532] hci_le_meta_evt+0x2cc/0x4b0 [ 69.088733][ T6532] hci_event_packet+0x6bc/0xf04 [ 69.088742][ T6532] hci_rx_work+0x320/0xb18 [ 69.088749][ T6532] process_one_work+0x7e8/0x155c [ 69.088755][ T6532] worker_thread+0x958/0xed8 [ 69.088761][ T6532] kthread+0x5fc/0x75c [ 69.088771][ T6532] ret_from_fork+0x10/0x20 [ 69.088805][ T6532] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 69.088823][ T6532] Bluetooth: hci1: failed to register connection device [ 69.333568][ T7454] lo: entered allmulticast mode [ 69.334182][ T7454] tunl0: entered allmulticast mode [ 69.334424][ T7454] gre0: entered allmulticast mode [ 69.334667][ T7454] gretap0: entered allmulticast mode [ 69.334950][ T7454] erspan0: entered allmulticast mode [ 69.335244][ T7454] ip_vti0: entered allmulticast mode [ 69.335465][ T7454] ip6_vti0: entered allmulticast mode [ 69.335686][ T7454] sit0: entered allmulticast mode [ 69.335887][ T7454] ip6tnl0: entered allmulticast mode [ 69.336191][ T7454] ip6gre0: entered allmulticast mode [ 69.336944][ T7454] syz_tun: entered allmulticast mode [ 69.337201][ T7454] ip6gretap0: entered allmulticast mode [ 69.337490][ T7454] bridge0: entered allmulticast mode [ 69.338266][ T7454] vcan0: entered allmulticast mode [ 69.338418][ T7454] bond0: entered allmulticast mode [ 69.338428][ T7454] bond_slave_0: entered allmulticast mode [ 69.338439][ T7454] bond_slave_1: entered allmulticast mode [ 69.338924][ T7454] team0: entered allmulticast mode [ 69.338935][ T7454] team_slave_0: entered allmulticast mode [ 69.338945][ T7454] team_slave_1: entered allmulticast mode [ 69.339325][ T7454] dummy0: entered allmulticast mode [ 69.339511][ T7454] nlmon0: entered allmulticast mode [ 69.465464][ T7416] done [ 69.466919][ T7416] bcachefs (loop4): resume_logged_ops... done [ 69.467363][ T7416] bcachefs (loop4): delete_dead_inodes... done [ 69.479978][ T7416] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean [ 69.480018][ T7416] bcachefs (loop4): check_extents_to_backpointers... [ 69.480535][ T7416] bcachefs (loop4): scanning for missing backpointers in 1/512 buckets [ 69.491233][ T7416] done [ 69.493248][ T7454] caif0: entered allmulticast mode [ 69.493310][ T7454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.528878][ T7416] bcachefs (loop4): check_inodes... done [ 69.532609][ T7416] bcachefs (loop4): resume_logged_ops... done [ 69.534822][ T7416] bcachefs (loop4): delete_dead_inodes... done [ 69.541224][ T7416] bcachefs (loop4): done starting filesystem [ 70.890559][ T6528] bcachefs (loop4): shutting down [ 70.890592][ T6528] bcachefs (loop4): going read-only [ 70.890610][ T6528] bcachefs (loop4): finished waiting for writes to stop [ 70.924286][ T6528] bcachefs (loop4): flushing journal and stopping allocators, journal seq 19 [ 70.924386][ T6528] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 19 [ 70.927685][ T6528] bcachefs (loop4): clean shutdown complete, journal seq 20 [ 70.929662][ T6528] bcachefs (loop4): marking filesystem clean [ 70.991840][ T7486] Injecting memory failure for pfn 0x20aa90 at process virtual address 0x20ffe000 [ 71.229506][ T7486] Memory failure: 0x20aa90: recovery action for reserved kernel page: Ignored [ 71.263203][ T6528] bcachefs (loop4): shutdown complete [ 71.281549][ T7482] tipc: Started in network mode [ 71.281585][ T7482] tipc: Node identity a63e1cb608cb, cluster identity 4711 [ 71.281658][ T7482] tipc: Enabled bearer , priority 0 [ 71.287485][ T7482] syzkaller0: entered promiscuous mode [ 71.289585][ T7482] syzkaller0: entered allmulticast mode [ 71.296414][ T7482] tipc: Resetting bearer [ 71.304016][ T7481] tipc: Resetting bearer [ 71.324527][ T7481] tipc: Disabling bearer [ 71.484543][ T7476] loop0: detected capacity change from 0 to 40427 [ 71.485692][ T7476] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 71.485715][ T7476] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 71.506609][ T7476] F2FS-fs (loop0): invalid crc value [ 71.772370][ T7476] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 71.776953][ T7476] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 71.778333][ T7476] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 71.803534][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'. [ 71.805615][ T7496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.847901][ T7491] loop2: detected capacity change from 0 to 128 [ 71.855828][ T7496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.406661][ T7517] 9pnet_fd: Insufficient options for proto=fd [ 73.012417][ T7525] loop2: detected capacity change from 0 to 1024 [ 73.517582][ T7532] loop3: detected capacity change from 0 to 128 [ 73.526351][ T7533] lo speed is unknown, defaulting to 1000 [ 73.530960][ T7533] lo speed is unknown, defaulting to 1000 [ 73.532861][ T7533] lo speed is unknown, defaulting to 1000 [ 73.583460][ T7534] lo: entered promiscuous mode [ 73.583497][ T7534] lo: left allmulticast mode [ 73.637669][ T7532] loop3: detected capacity change from 0 to 2048 [ 73.664728][ T6538] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 73.664759][ T6538] loop3: partition table partially beyond EOD, truncated [ 73.664886][ T6538] loop3: p1 start 4278190080 is beyond EOD, truncated [ 73.664897][ T6538] loop3: p2 start 16908800 is beyond EOD, truncated [ 73.667415][ T6538] loop3: p4 start 11326 is beyond EOD, truncated [ 73.667430][ T6538] loop3: p5 start 16908800 is beyond EOD, truncated [ 73.667461][ T6538] loop3: p6 start 11326 is beyond EOD, truncated [ 73.680485][ T7532] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 73.680513][ T7532] loop3: partition table partially beyond EOD, truncated [ 73.680952][ T7532] loop3: p1 start 4278190080 is beyond EOD, truncated [ 73.680962][ T7532] loop3: p2 start 16908800 is beyond EOD, truncated [ 73.685884][ T9] lo speed is unknown, defaulting to 1000 [ 73.685914][ T9] syz0: Port: 1 Link DOWN [ 73.687633][ T7533] infiniband syz0: set down [ 73.687645][ T7533] infiniband syz0: added lo [ 73.689317][ T7532] loop3: p4 start 11326 is beyond EOD, truncated [ 73.689355][ T7532] loop3: p5 start 16908800 is beyond EOD, truncated [ 73.689367][ T7532] loop3: p6 start 11326 is beyond EOD, truncated [ 73.806886][ T7533] RDS/IB: syz0: added [ 73.807025][ T7533] smc: adding ib device syz0 with port count 1 [ 73.807054][ T7533] smc: ib device syz0 port 1 has pnetid [ 73.808970][ T9] lo speed is unknown, defaulting to 1000 [ 73.824859][ T7533] lo speed is unknown, defaulting to 1000 [ 73.829661][ T6538] udevd[6538]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 73.863123][ T6538] udevd[6538]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 73.880270][ T12] hfsplus: b-tree write err: -5, ino 4 [ 74.576026][ T7533] lo speed is unknown, defaulting to 1000 [ 74.616021][ T7533] lo speed is unknown, defaulting to 1000 [ 74.670562][ T7533] lo speed is unknown, defaulting to 1000 [ 74.798558][ T7555] loop8: detected capacity change from 0 to 8 [ 74.801521][ T7555] Dev loop8: unable to read RDB block 8 [ 74.801551][ T7555] loop8: unable to read partition table [ 74.801621][ T7555] loop8: partition table beyond EOD, truncated [ 74.801638][ T7555] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 74.816834][ T7533] lo speed is unknown, defaulting to 1000 [ 74.895257][ T31] audit: type=1326 audit(74.880:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7552 comm="syz.1.212" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5b3a8 code=0x0 [ 76.673431][ T7576] loop3: detected capacity change from 0 to 40427 [ 76.723671][ T7576] F2FS-fs (loop3): build fault injection type: 0x7 [ 76.728468][ T7576] F2FS-fs (loop3): invalid crc value [ 76.775653][ T7576] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 76.781145][ T7576] F2FS-fs (loop3): Start checkpoint disabled! [ 76.830337][ T7576] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 77.610379][ T7582] loop4: detected capacity change from 0 to 4096 [ 77.621812][ T52] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 77.621867][ T52] Bluetooth: hci4: Injecting HCI hardware error event [ 77.625314][ T52] Bluetooth: hci4: hardware error 0x00 [ 77.629311][ T7586] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.619155][ T7605] netlink: 'syz.1.226': attribute type 1 has an invalid length. [ 78.921761][ T7608] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 78.921795][ T7608] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 78.921806][ T7608] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 78.988607][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 79.161176][ T7613] loop1: detected capacity change from 0 to 16 [ 79.168068][ T7613] erofs (device loop1): mounted with root inode @ nid 36. [ 79.203516][ T6532] Bluetooth: hci1: link tx timeout [ 79.203933][ T6532] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 79.672681][ T7619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.229'. [ 79.683188][ T7619] netlink: 'syz.3.229': attribute type 7 has an invalid length. [ 79.683236][ T7619] netlink: 'syz.3.229': attribute type 8 has an invalid length. [ 79.683254][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 79.685142][ T7619] team0: entered promiscuous mode [ 79.685160][ T7619] team_slave_0: entered promiscuous mode [ 79.685247][ T7619] team_slave_1: entered promiscuous mode [ 79.685977][ T7619] bond0: entered promiscuous mode [ 79.685992][ T7619] bond_slave_0: entered promiscuous mode [ 79.686060][ T7619] bond_slave_1: entered promiscuous mode [ 79.703995][ T7619] team0: left promiscuous mode [ 79.705415][ T7619] team_slave_0: left promiscuous mode [ 79.706548][ T7619] team_slave_1: left promiscuous mode [ 79.708884][ T7619] bond0: left promiscuous mode [ 79.709802][ T7619] bond_slave_0: left promiscuous mode [ 79.710870][ T7619] bond_slave_1: left promiscuous mode [ 80.289314][ T52] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 80.830048][ T7603] loop0: detected capacity change from 0 to 131072 [ 80.834695][ T7603] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 80.836278][ T7603] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 80.844481][ T7603] F2FS-fs (loop0): invalid crc value [ 80.905352][ T7603] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 80.910057][ T7603] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 80.910098][ T7603] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 80.929139][ T7637] loop2: detected capacity change from 0 to 32768 [ 80.950348][ T7637] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 80.975474][ T7637] XFS (loop2): Ending clean mount [ 81.050518][ T7653] netlink: 28 bytes leftover after parsing attributes in process `syz.3.236'. [ 81.301451][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 81.684156][ T6535] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 82.365516][ T7667] loop2: detected capacity change from 0 to 1024 [ 82.381134][ T7669] syz_tun: entered allmulticast mode [ 82.386039][ T7671] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 82.398947][ T7669] dvmrp8: entered allmulticast mode [ 82.405771][ T7667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.432944][ T7668] syz_tun: left allmulticast mode [ 82.471000][ T7671] bond3: (slave geneve2): making interface the new active one [ 82.474223][ T7671] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 82.476615][ T512] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 82.476697][ T512] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 82.476733][ T512] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 82.476756][ T512] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 82.502021][ T7671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.241'. [ 82.502688][ T7671] 8021q: adding VLAN 0 to HW filter on device bond3 [ 84.302130][ T4154] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 15) [ 84.307577][ T4154] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 84.307660][ T4154] EXT4-fs (loop2): This should not happen!! Data will be lost [ 84.307660][ T4154] [ 84.328661][ T6535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.713387][ T7704] loop2: detected capacity change from 0 to 32768 [ 84.809575][ T7713] netlink: 52 bytes leftover after parsing attributes in process `syz.4.254'. [ 84.825790][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'. [ 85.847623][ T7735] loop2: detected capacity change from 0 to 32768 [ 86.282023][ T7735] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 86.282054][ T7735] allowing incompatible features above 0.0: (unknown version) [ 86.282076][ T7735] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 86.282093][ T7735] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 86.282117][ T7735] bcachefs (loop2): initializing new filesystem [ 86.283576][ T7735] bcachefs (loop2): going read-write [ 86.331583][ T7735] bcachefs (loop2): marking superblocks [ 86.334209][ T7735] bcachefs (loop2): initializing freespace [ 86.335244][ T7735] bcachefs (loop2): done initializing freespace [ 86.335702][ T7735] bcachefs (loop2): reading snapshots table [ 86.335725][ T7735] bcachefs (loop2): reading snapshots done [ 86.574939][ T7735] bcachefs (loop2): done starting filesystem [ 87.352252][ T7771] Injecting memory failure for pfn 0x20aa90 at process virtual address 0x20ffe000 [ 87.353771][ T7771] Memory failure: 0x20aa90: Sending SIGBUS to syz.4.266:7771 due to hardware memory corruption [ 87.354066][ T7771] Memory failure: 0x20aa90: recovery action for already poisoned page: Failed [ 87.723809][ T6535] bcachefs (loop2): shutting down [ 87.723831][ T6535] bcachefs (loop2): going read-only [ 87.723852][ T6535] bcachefs (loop2): finished waiting for writes to stop [ 87.802085][ T6535] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2 [ 87.806465][ T7776] netlink: 52 bytes leftover after parsing attributes in process `syz.3.269'. [ 87.865054][ T7778] netlink: 'syz.1.270': attribute type 1 has an invalid length. [ 87.881175][ T7778] 8021q: adding VLAN 0 to HW filter on device bond4 [ 87.886958][ T7782] team0: Port device vxlan0 added [ 87.889502][ T4154] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.889553][ T4154] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.889575][ T4154] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.889589][ T4154] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.908210][ T6535] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 87.908701][ T6535] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 87.909050][ T6535] bcachefs (loop2): marking filesystem clean [ 87.917366][ T7778] vlan2: entered promiscuous mode [ 87.918268][ T7778] bond4: entered promiscuous mode [ 87.919209][ T7778] vlan2: entered allmulticast mode [ 87.920129][ T7778] bond4: entered allmulticast mode [ 88.142329][ T6535] bcachefs (loop2): shutdown complete [ 88.145275][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 88.146793][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 88.148270][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 88.150285][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 88.151782][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 88.173323][ T7778] bond4: (slave gretap2): making interface the new active one [ 88.174577][ T7778] gretap2: entered promiscuous mode [ 88.175687][ T7778] gretap2: entered allmulticast mode [ 88.178497][ T7778] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 88.214389][ T7788] loop1: detected capacity change from 0 to 1024 [ 88.215897][ T7788] EXT4-fs: Ignoring removed oldalloc option [ 88.215933][ T7788] EXT4-fs: Ignoring removed oldalloc option [ 88.223447][ T7788] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 89.023974][ T7804] loop1: detected capacity change from 0 to 2048 [ 89.026560][ T7804] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 89.030330][ T7804] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.066561][ T7821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.282'. [ 90.114052][ T7829] loop3: detected capacity change from 0 to 1024 [ 90.735143][ T7829] EXT4-fs: Ignoring removed orlov option [ 90.738283][ T7829] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 90.744131][ T7834] tipc: Enabling of bearer rejected, failed to enable media [ 90.750620][ T7829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.968237][ T7845] loop4: detected capacity change from 0 to 512 [ 90.990791][ T7845] EXT4-fs error (device loop4): __ext4_fill_super:5504: inode #2: comm syz.4.288: invalid fast symlink length 39 [ 90.991977][ T7845] EXT4-fs (loop4): get root inode failed [ 90.991989][ T7845] EXT4-fs (loop4): mount failed [ 91.004996][ T7847] loop2: detected capacity change from 0 to 4096 [ 91.106084][ T7847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.408324][ T6536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.000891][ T6122] Bluetooth: hci3: link tx timeout [ 92.002736][ T6122] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 92.198057][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 92.246761][ T6535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.293774][ T7879] loop4: detected capacity change from 0 to 64 [ 93.340813][ T7893] tipc: Enabling of bearer rejected, failed to enable media [ 93.344671][ T7893] tipc: Enabling of bearer rejected, failed to enable media [ 94.194810][ T6532] Bluetooth: hci3: command 0x0406 tx timeout [ 94.251066][ T7907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.254678][ T7907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.533193][ T7916] loop3: detected capacity change from 0 to 4096 [ 94.559484][ T7914] loop2: detected capacity change from 0 to 32768 [ 94.561148][ T7916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.888601][ T7921] 9pnet: bogus RWRITE count (512 > 32) [ 94.942968][ T7914] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 94.946707][ T7914] allowing incompatible features above 0.0: (unknown version) [ 94.948342][ T7914] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 94.952361][ T7914] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 94.954080][ T7914] bcachefs (loop2): initializing new filesystem [ 94.959114][ T7914] bcachefs (loop2): going read-write [ 95.293305][ T7914] bcachefs (loop2): marking superblocks [ 95.370450][ T6536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.371211][ T7914] bcachefs (loop2): initializing freespace [ 95.395557][ T7914] bcachefs (loop2): done initializing freespace [ 95.403981][ T7914] bcachefs (loop2): reading snapshots table [ 95.404024][ T7914] bcachefs (loop2): reading snapshots done [ 95.684563][ T7914] bcachefs (loop2): done starting filesystem [ 95.689683][ T7945] binder: 7943:7945 tried to acquire reference to desc 0, got 1 instead [ 95.751539][ T7945] binder: 7943:7945 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 95.751618][ T7945] binder: 7945 RLIMIT_NICE not set [ 95.751631][ T7945] binder: 7945 RLIMIT_NICE not set [ 95.751644][ T7945] binder: send failed reply for transaction 28 to 7943:7945 [ 95.751662][ T7945] binder: 7943:7945 ioctl c0306201 20000180 returned -14 [ 95.774116][ T9] binder: undelivered TRANSACTION_COMPLETE [ 95.774157][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.774203][ T9] binder: send failed reply for transaction 35 to 7943:7945 [ 96.079620][ T7952] lo speed is unknown, defaulting to 1000 [ 96.113353][ T9] binder: undelivered TRANSACTION_COMPLETE [ 96.113387][ T9] binder: undelivered TRANSACTION_ERROR: 29189 [ 96.213277][ T7956] loop3: detected capacity change from 0 to 512 [ 96.242147][ T7956] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.242169][ T7956] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.322031][ T7956] EXT4-fs (loop3): 1 truncate cleaned up [ 96.326155][ T7956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.779571][ T7965] GUP no longer grows the stack in syz.0.317 (7965): 20005000-20008000 (20004000) [ 96.779607][ T7965] CPU: 0 UID: 0 PID: 7965 Comm: syz.0.317 Not tainted syzkaller #0 PREEMPT [ 96.779621][ T7965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 96.779626][ T7965] Call trace: [ 96.779629][ T7965] show_stack+0x2c/0x3c (C) [ 96.779643][ T7965] __dump_stack+0x30/0x40 [ 96.779650][ T7965] dump_stack_lvl+0xd8/0x12c [ 96.779656][ T7965] dump_stack+0x1c/0x28 [ 96.779662][ T7965] __get_user_pages+0x2c04/0x2da0 [ 96.779671][ T7965] __gup_longterm_locked+0xaf8/0x11ec [ 96.779678][ T7965] gup_fast_fallback+0x2188/0x2394 [ 96.779686][ T7965] get_user_pages_fast+0x6c/0xb4 [ 96.779693][ T7965] get_futex_key+0x8d0/0x14a4 [ 96.779700][ T7965] futex_wake_op+0x110/0xcd0 [ 96.779707][ T7965] do_futex+0x1b0/0x35c [ 96.779712][ T7965] __arm64_sys_futex+0x378/0x3f0 [ 96.779719][ T7965] invoke_syscall+0x98/0x254 [ 96.779725][ T7965] el0_svc_common+0x130/0x23c [ 96.779731][ T7965] do_el0_svc+0x48/0x58 [ 96.779737][ T7965] el0_svc+0x5c/0x254 [ 96.779749][ T7965] el0t_64_sync_handler+0x84/0x12c [ 96.779759][ T7965] el0t_64_sync+0x198/0x19c [ 97.205439][ T7968] tipc: Enabled bearer , priority 0 [ 97.231069][ T7962] lo speed is unknown, defaulting to 1000 [ 97.233516][ T7963] syzkaller0: entered promiscuous mode [ 97.233548][ T7963] syzkaller0: entered allmulticast mode [ 97.272361][ T6536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.274214][ T7963] tipc: Resetting bearer [ 97.281093][ T7960] tipc: Resetting bearer [ 97.311054][ T7960] tipc: Disabling bearer [ 97.438326][ T6535] bcachefs (loop2): shutting down [ 97.438357][ T6535] bcachefs (loop2): going read-only [ 97.438382][ T6535] bcachefs (loop2): finished waiting for writes to stop [ 97.456646][ T6535] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 97.516147][ T6535] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4 [ 97.520443][ T6535] bcachefs (loop2): clean shutdown complete, journal seq 5 [ 97.520850][ T6535] bcachefs (loop2): marking filesystem clean [ 97.548729][ T7974] loop3: detected capacity change from 0 to 128 [ 97.590396][ T6535] bcachefs (loop2): shutdown complete [ 97.867078][ T7981] loop1: detected capacity change from 0 to 32768 [ 97.867706][ T7981] btrfs: Deprecated parameter 'usebackuproot' [ 97.867718][ T7981] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 98.088747][ T7981] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.323 (7981) [ 98.112330][ T7981] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.114356][ T7981] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 98.204996][ T7091] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 98.205111][ T7981] BTRFS error (device loop1): failed to load root extent [ 98.205126][ T7981] BTRFS warning (device loop1): try to load backup roots slot 1 [ 98.205434][ T41] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 98.205875][ T7981] BTRFS warning (device loop1): couldn't read tree root [ 98.205892][ T7981] BTRFS warning (device loop1): try to load backup roots slot 2 [ 98.206691][ T7091] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 98.207673][ T7981] BTRFS warning (device loop1): couldn't read tree root [ 98.207697][ T7981] BTRFS warning (device loop1): try to load backup roots slot 3 [ 98.240970][ T7981] BTRFS info (device loop1): rebuilding free space tree [ 98.498676][ T7981] BTRFS info (device loop1): checking UUID tree [ 98.515142][ T7981] BTRFS info (device loop1): setting nodatasum [ 98.516426][ T7981] BTRFS info (device loop1): setting nodatacow [ 98.518023][ T7981] BTRFS info (device loop1): enabling ssd optimizations [ 98.519478][ T7981] BTRFS info (device loop1): turning off barriers [ 98.521086][ T7981] BTRFS info (device loop1): turning on sync discard [ 98.521125][ T7981] BTRFS info (device loop1): enabling free space tree [ 98.521143][ T7981] BTRFS info (device loop1): force clearing of disk cache [ 98.521158][ T7981] BTRFS info (device loop1): trying to use backup root at mount time [ 98.521173][ T7981] BTRFS info (device loop1): max_inline set to 0 [ 99.077671][ T8018] Soft offlining pfn 0x13e013 at process virtual address 0x20000000 [ 99.088795][ T8018] Soft offlining pfn 0x13e014 at process virtual address 0x20001000 [ 99.089377][ T8018] Soft offlining pfn 0x13e015 at process virtual address 0x20002000 [ 99.089681][ T8018] Soft offlining pfn 0x13e016 at process virtual address 0x20003000 [ 99.090382][ T8018] Soft offlining pfn 0x13e017 at process virtual address 0x20004000 [ 99.091345][ T8018] Soft offlining pfn 0x13e008 at process virtual address 0x20005000 [ 99.092399][ T8018] Soft offlining pfn 0x13e009 at process virtual address 0x20006000 [ 99.093972][ T8018] Soft offlining pfn 0x13e00a at process virtual address 0x20007000 [ 99.095548][ T8018] Soft offlining pfn 0x1211f4 at process virtual address 0x20008000 [ 99.097100][ T8018] Soft offlining pfn 0x13e00b at process virtual address 0x20009000 [ 99.098669][ T8018] Soft offlining pfn 0x13e00c at process virtual address 0x2000a000 [ 99.100243][ T8018] Soft offlining pfn 0x13e00d at process virtual address 0x2000b000 [ 99.101829][ T8018] Soft offlining pfn 0x13e00e at process virtual address 0x2000c000 [ 99.103351][ T8018] Soft offlining pfn 0x13e00f at process virtual address 0x2000d000 [ 99.104754][ T8018] Soft offlining pfn 0x146400 at process virtual address 0x2000e000 [ 99.106307][ T8018] Soft offlining pfn 0x146401 at process virtual address 0x2000f000 [ 99.107858][ T8018] Soft offlining pfn 0x146402 at process virtual address 0x20010000 [ 99.109428][ T8018] Soft offlining pfn 0x146403 at process virtual address 0x20011000 [ 99.110974][ T8018] Soft offlining pfn 0x146404 at process virtual address 0x20012000 [ 99.112531][ T8018] Soft offlining pfn 0x146405 at process virtual address 0x20013000 [ 99.114107][ T8018] Soft offlining pfn 0x146406 at process virtual address 0x20014000 [ 99.115667][ T8018] Soft offlining pfn 0x146407 at process virtual address 0x20015000 [ 99.117252][ T8018] Soft offlining pfn 0x145bf8 at process virtual address 0x20016000 [ 99.118787][ T8018] Soft offlining pfn 0x145bf9 at process virtual address 0x20017000 [ 99.120367][ T8018] Soft offlining pfn 0x145bfa at process virtual address 0x20018000 [ 99.121956][ T8018] Soft offlining pfn 0x145bfb at process virtual address 0x20019000 [ 99.123526][ T8018] Soft offlining pfn 0x145bfc at process virtual address 0x2001a000 [ 99.125074][ T8018] Soft offlining pfn 0x145bfd at process virtual address 0x2001b000 [ 99.126645][ T8018] Soft offlining pfn 0x145bfe at process virtual address 0x2001c000 [ 99.128210][ T8018] Soft offlining pfn 0x145bff at process virtual address 0x2001d000 [ 99.129770][ T8018] Soft offlining pfn 0x141350 at process virtual address 0x2001e000 [ 99.131329][ T8018] Soft offlining pfn 0x141351 at process virtual address 0x2001f000 [ 99.132916][ T8018] Soft offlining pfn 0x141352 at process virtual address 0x20020000 [ 99.134521][ T8018] Soft offlining pfn 0x141353 at process virtual address 0x20021000 [ 99.135954][ T8018] Soft offlining pfn 0x141354 at process virtual address 0x20022000 [ 99.137538][ T8018] Soft offlining pfn 0x145b32 at process virtual address 0x20023000 [ 99.139085][ T8018] Soft offlining pfn 0x1238ca at process virtual address 0x20024000 [ 99.140662][ T8018] Soft offlining pfn 0x145b76 at process virtual address 0x20025000 [ 99.142251][ T8018] Soft offlining pfn 0x1454df at process virtual address 0x20026000 [ 99.143803][ T8018] Soft offlining pfn 0x1238c6 at process virtual address 0x20027000 [ 99.145365][ T8018] Soft offlining pfn 0x1238cc at process virtual address 0x20028000 [ 99.146928][ T8018] Soft offlining pfn 0x1253b2 at process virtual address 0x20029000 [ 99.148490][ T8018] Soft offlining pfn 0x1253b1 at process virtual address 0x2002a000 [ 99.150036][ T8018] Soft offlining pfn 0x1253b9 at process virtual address 0x2002b000 [ 99.151712][ T8018] Soft offlining pfn 0x1253bb at process virtual address 0x2002c000 [ 99.153301][ T8018] Soft offlining pfn 0x1238cf at process virtual address 0x2002d000 [ 99.154868][ T8018] Soft offlining pfn 0x1253b8 at process virtual address 0x2002e000 [ 99.156448][ T8018] Soft offlining pfn 0x1238cd at process virtual address 0x2002f000 [ 99.158016][ T8018] Soft offlining pfn 0x1238ce at process virtual address 0x20030000 [ 99.159593][ T8018] Soft offlining pfn 0x1253b5 at process virtual address 0x20031000 [ 99.161176][ T8018] Soft offlining pfn 0x1253b0 at process virtual address 0x20032000 [ 99.162752][ T8018] Soft offlining pfn 0x1253b6 at process virtual address 0x20033000 [ 99.164331][ T8018] Soft offlining pfn 0x1253b7 at process virtual address 0x20034000 [ 99.165903][ T8018] Soft offlining pfn 0x1253bc at process virtual address 0x20035000 [ 99.167462][ T8018] Soft offlining pfn 0x1253ba at process virtual address 0x20036000 [ 99.169077][ T8018] Soft offlining pfn 0x1253b4 at process virtual address 0x20037000 [ 99.170657][ T8018] Soft offlining pfn 0x1450ca at process virtual address 0x20038000 [ 99.172269][ T8018] Soft offlining pfn 0x1450c9 at process virtual address 0x20039000 [ 99.173844][ T8018] Soft offlining pfn 0x1450c8 at process virtual address 0x2003a000 [ 99.175407][ T8018] Soft offlining pfn 0x1450c7 at process virtual address 0x2003b000 [ 99.176976][ T8018] Soft offlining pfn 0x1450c6 at process virtual address 0x2003c000 [ 99.178529][ T8018] Soft offlining pfn 0x1450c5 at process virtual address 0x2003d000 [ 99.180110][ T8018] Soft offlining pfn 0x1450c4 at process virtual address 0x2003e000 [ 99.181709][ T8018] Soft offlining pfn 0x1450c3 at process virtual address 0x2003f000 [ 99.183267][ T8018] Soft offlining pfn 0x1450c2 at process virtual address 0x20040000 [ 99.184819][ T8018] Soft offlining pfn 0x1450c1 at process virtual address 0x20041000 [ 99.186374][ T8018] Soft offlining pfn 0x1450c0 at process virtual address 0x20042000 [ 99.187929][ T8018] Soft offlining pfn 0x14507f at process virtual address 0x20043000 [ 99.189485][ T8018] Soft offlining pfn 0x14507e at process virtual address 0x20044000 [ 99.191052][ T8018] Soft offlining pfn 0x14507d at process virtual address 0x20045000 [ 99.192660][ T8018] Soft offlining pfn 0x14507c at process virtual address 0x20046000 [ 99.194253][ T8018] Soft offlining pfn 0x14507b at process virtual address 0x20047000 [ 99.195804][ T8018] Soft offlining pfn 0x14507a at process virtual address 0x20048000 [ 99.197370][ T8018] Soft offlining pfn 0x145079 at process virtual address 0x20049000 [ 99.198925][ T8018] Soft offlining pfn 0x145078 at process virtual address 0x2004a000 [ 99.200490][ T8018] Soft offlining pfn 0x145077 at process virtual address 0x2004b000 [ 99.205225][ T8018] Soft offlining pfn 0x145076 at process virtual address 0x2004c000 [ 99.205305][ T8018] Soft offlining pfn 0x145075 at process virtual address 0x2004d000 [ 99.205403][ T8018] Soft offlining pfn 0x145074 at process virtual address 0x2004e000 [ 99.205571][ T8018] Soft offlining pfn 0x145073 at process virtual address 0x2004f000 [ 99.205894][ T8018] Soft offlining pfn 0x145072 at process virtual address 0x20050000 [ 99.206559][ T8018] Soft offlining pfn 0x145071 at process virtual address 0x20051000 [ 100.037139][ T6529] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.388268][ T8033] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 100.425150][ T8037] loop4: detected capacity change from 0 to 512 [ 100.435921][ T8037] EXT4-fs (loop4): Test dummy encryption mode enabled [ 100.438111][ T8037] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 100.442086][ T8037] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 100.442567][ T8037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.444925][ T8043] loop3: detected capacity change from 0 to 512 [ 100.445289][ T8043] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.445313][ T8043] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.452447][ T8043] EXT4-fs (loop3): Test dummy encryption mode enabled [ 100.452497][ T8043] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.456506][ T8043] EXT4-fs (loop3): 1 truncate cleaned up [ 100.456975][ T8043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.541117][ T8042] team0: No ports can be present during mode change [ 101.312835][ T6536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.103074][ T8063] loop2: detected capacity change from 0 to 40427 [ 102.105945][ T8063] F2FS-fs: heap/no_heap options were deprecated [ 102.116249][ T8063] F2FS-fs (loop2): invalid crc value [ 102.116300][ T8063] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 102.134112][ T8063] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 102.138842][ T8063] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 102.245130][ T8077] loop3: detected capacity change from 0 to 512 [ 102.252304][ T8077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.264921][ T8077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 102.300142][ T8077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.313163][ T8081] loop1: detected capacity change from 0 to 4096 [ 102.348178][ T8077] EXT4-fs error (device loop3): __ext4_remount:6740: comm syz.3.344: Abort forced by user [ 102.348978][ T8077] EXT4-fs (loop3): Remounting filesystem read-only [ 102.349021][ T8077] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000d40000 ro. [ 103.200633][ T6536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 104.046211][ T8103] loop1: detected capacity change from 0 to 32768 [ 104.081006][ T8103] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.349 (8103) [ 104.148313][ T8103] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.148374][ T8103] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 104.148411][ T8103] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 104.227078][ T8103] BTRFS info (device loop1): rebuilding free space tree [ 104.235638][ T8103] BTRFS info (device loop1): disabling free space tree [ 104.235686][ T8103] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 104.235709][ T8103] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 104.255389][ T8103] BTRFS info (device loop1): setting nodatasum [ 104.255421][ T8103] BTRFS info (device loop1): setting nodatacow [ 104.255441][ T8103] BTRFS info (device loop1): enabling ssd optimizations [ 104.255454][ T8103] BTRFS info (device loop1): using spread ssd allocation scheme [ 104.255467][ T8103] BTRFS info (device loop1): turning off barriers [ 104.255477][ T8103] BTRFS info (device loop1): enabling disk space caching [ 104.255487][ T8103] BTRFS info (device loop1): force clearing of disk cache [ 104.622736][ T8109] loop3: detected capacity change from 0 to 4096 [ 104.701888][ T6528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.816737][ T8133] random: crng reseeded on system resumption [ 105.175693][ T6529] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 106.323308][ T8128] Set syz1 is full, maxelem 65536 reached [ 106.929557][ T8152] loop1: detected capacity change from 0 to 128 [ 106.974203][ T8152] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 106.980555][ T8152] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.115389][ T8146] loop2: detected capacity change from 0 to 32768 [ 107.337143][ T8146] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 107.340561][ T8146] allowing incompatible features above 0.0: (unknown version) [ 107.340576][ T8146] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 107.340608][ T8146] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 107.340670][ T8146] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 107.340741][ T8146] bcachefs (loop2): Version upgrade required: [ 107.340741][ T8146] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 107.340741][ T8146] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 107.340741][ T8146] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 107.364458][ T8146] bcachefs (loop2): dropping and reconstructing all alloc info [ 107.380158][ T8146] bcachefs (loop2): accounting_read... done [ 107.408048][ T8146] bcachefs (loop2): alloc_read... done [ 107.408901][ T8146] bcachefs (loop2): snapshots_read... done [ 107.409441][ T8146] bcachefs (loop2): check_allocations... done [ 107.431214][ T8146] bcachefs (loop2): going read-write [ 107.439007][ T8146] bcachefs (loop2): done starting filesystem [ 107.495042][ T8164] loop4: detected capacity change from 0 to 40427 [ 107.532710][ T8164] F2FS-fs (loop4): invalid crc value [ 107.631706][ T8164] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 107.639976][ T8164] F2FS-fs (loop4): Start checkpoint disabled! [ 107.652457][ T8164] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 107.663919][ T8175] loop3: detected capacity change from 0 to 16 [ 107.666288][ T8175] erofs (device loop3): mounted with root inode @ nid 36. [ 107.959258][ T8178] erofs (device loop3): bogus i_mode (4355) @ nid 46 [ 107.974201][ T8164] F2FS-fs (loop4): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 108.253824][ T42] kworker/u8:3: attempt to access beyond end of device [ 108.253824][ T42] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.262882][ T42] CPU: 0 UID: 0 PID: 42 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT [ 108.262909][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 108.262918][ T42] Workqueue: writeback wb_workfn (flush-7:4) [ 108.262940][ T42] Call trace: [ 108.262943][ T42] show_stack+0x2c/0x3c (C) [ 108.262953][ T42] __dump_stack+0x30/0x40 [ 108.262959][ T42] dump_stack_lvl+0xd8/0x12c [ 108.262964][ T42] dump_stack+0x1c/0x28 [ 108.262969][ T42] f2fs_handle_critical_error+0x34c/0x4b8 [ 108.262977][ T42] f2fs_stop_checkpoint+0x5c/0x70 [ 108.262982][ T42] f2fs_write_end_io+0x768/0xa70 [ 108.262988][ T42] bio_endio+0x858/0x894 [ 108.262996][ T42] submit_bio_noacct+0x158/0x177c [ 108.263001][ T42] submit_bio+0x3b4/0x550 [ 108.263006][ T42] f2fs_submit_write_bio+0x13c/0x324 [ 108.263012][ T42] __submit_merged_bio+0x254/0x704 [ 108.263018][ T42] __submit_merged_write_cond+0x23c/0x4ac [ 108.263023][ T42] f2fs_write_data_pages+0x1d28/0x2634 [ 108.263030][ T42] do_writepages+0x270/0x468 [ 108.263037][ T42] __writeback_single_inode+0x15c/0x13e8 [ 108.263044][ T42] writeback_sb_inodes+0x55c/0xe40 [ 108.263050][ T42] wb_writeback+0x3cc/0xd70 [ 108.263056][ T42] wb_workfn+0x338/0xdc0 [ 108.263062][ T42] process_one_work+0x7e8/0x155c [ 108.263067][ T42] worker_thread+0x958/0xed8 [ 108.263072][ T42] kthread+0x5fc/0x75c [ 108.263079][ T42] ret_from_fork+0x10/0x20 [ 108.291104][ T42] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 108.769210][ T6535] bcachefs (loop2): shutting down [ 108.769238][ T6535] bcachefs (loop2): going read-only [ 108.769266][ T6535] bcachefs (loop2): finished waiting for writes to stop [ 109.343008][ T6535] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 109.346842][ T6535] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 11 [ 109.352925][ T6535] bcachefs (loop2): unclean shutdown complete, journal seq 12 [ 109.403083][ T6535] bcachefs (loop2): done going read-only, filesystem not clean [ 110.025022][ T6535] bcachefs (loop2): shutdown complete [ 110.069637][ T8207] tipc: Enabled bearer , priority 0 [ 110.070223][ T8207] syzkaller0: entered promiscuous mode [ 110.070254][ T8207] syzkaller0: entered allmulticast mode [ 110.116729][ T8210] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 110.119449][ T8207] tipc: Resetting bearer [ 110.137836][ T8206] tipc: Resetting bearer [ 110.150073][ T8206] tipc: Disabling bearer [ 110.254456][ T8213] netlink: 2 bytes leftover after parsing attributes in process `syz.3.372'. [ 110.317061][ T8235] tipc: Enabled bearer , priority 0 [ 110.318566][ T8235] syzkaller0: entered promiscuous mode [ 110.319501][ T8235] syzkaller0: entered allmulticast mode [ 110.378285][ T8235] tipc: Resetting bearer [ 110.863258][ T8234] tipc: Resetting bearer [ 110.883673][ T8234] tipc: Disabling bearer [ 110.896646][ T8246] tipc: Enabled bearer , priority 0 [ 110.896964][ T8246] syzkaller0: entered promiscuous mode [ 110.896977][ T8246] syzkaller0: entered allmulticast mode [ 110.910342][ T8246] tipc: Resetting bearer [ 110.917005][ T8245] tipc: Resetting bearer [ 110.926072][ T8245] tipc: Disabling bearer [ 112.119653][ T6519] kernel write not supported for file bpf-prog (pid: 6519 comm: kworker/0:3) [ 112.550509][ T8287] loop4: detected capacity change from 0 to 32768 [ 114.313480][ T8315] loop3: detected capacity change from 0 to 512 [ 115.098909][ T8315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.295581][ T8287] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop4": -EINTR [ 115.786685][ T6536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.949058][ T8336] loop4: detected capacity change from 0 to 65536 [ 116.965742][ T8336] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 116.986228][ T8336] XFS (loop4): Ending clean mount [ 117.119166][ T8367] loop3: detected capacity change from 0 to 32768 [ 117.172861][ T8367] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 117.497906][ T8394] netlink: 'syz.3.397': attribute type 2 has an invalid length. [ 117.497939][ T8394] netlink: 'syz.3.397': attribute type 8 has an invalid length. [ 117.497963][ T8394] netlink: 132 bytes leftover after parsing attributes in process `syz.3.397'. [ 117.970096][ T6536] ocfs2: Unmounting device (7,3) on (node local) [ 118.114524][ T8336] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x6 [ 118.114571][ T8336] XFS (loop4): Unmount and run xfs_repair [ 118.114591][ T8336] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 118.114607][ T8336] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 118.114619][ T8336] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 118.114629][ T8336] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 118.114639][ T8336] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 118.114648][ T8336] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 118.114657][ T8336] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 118.114665][ T8336] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 118.114673][ T8336] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 118.114774][ T8336] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x6 len 2 error 74 [ 118.114936][ T8336] XFS (loop4): page discard on page 00000000a70bc69b, inode 0x29, pos 0. [ 118.166414][ T6528] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 118.720293][ T6528] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 118.749547][ T8421] tipc: Enabled bearer , priority 0 [ 118.750329][ T8421] syzkaller0: entered promiscuous mode [ 118.750356][ T8421] syzkaller0: entered allmulticast mode [ 118.788018][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 118.967344][ T8421] tipc: Resetting bearer [ 118.972006][ T8428] netlink: 'syz.2.406': attribute type 1 has an invalid length. [ 118.977060][ T8420] tipc: Resetting bearer [ 118.983784][ T8420] tipc: Disabling bearer [ 119.244461][ T8428] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 119.258981][ T8428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.260948][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 119.577320][ T8428] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 119.578686][ T8428] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 119.591985][ T8432] loop3: detected capacity change from 0 to 32768 [ 119.605624][ T8428] bond1 (unregistering): Released all slaves [ 120.126072][ T8443] tipc: Enabled bearer , priority 0 [ 120.127145][ T8443] syzkaller0: entered promiscuous mode [ 120.127387][ T8443] syzkaller0: entered allmulticast mode [ 120.136988][ T8443] tipc: Resetting bearer [ 120.140836][ T8442] tipc: Resetting bearer [ 120.146405][ T8442] tipc: Disabling bearer [ 120.188420][ T8450] loop1: detected capacity change from 0 to 32768 [ 120.269136][ T8450] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 120.269175][ T8450] allowing incompatible features above 0.0: (unknown version) [ 120.269201][ T8450] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 120.269214][ T8450] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 120.269238][ T8450] bcachefs (loop1): initializing new filesystem [ 120.270696][ T8450] bcachefs (loop1): going read-write [ 120.353202][ T8450] bcachefs (loop1): marking superblocks [ 120.354992][ T8450] bcachefs (loop1): initializing freespace [ 120.356069][ T8450] bcachefs (loop1): done initializing freespace [ 120.356514][ T8450] bcachefs (loop1): reading snapshots table [ 120.356538][ T8450] bcachefs (loop1): reading snapshots done [ 120.373462][ T8450] bcachefs (loop1): done starting filesystem [ 120.769086][ T8467] loop3: detected capacity change from 0 to 512 [ 120.947919][ T8467] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.955477][ T8467] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 120.955548][ T8467] System zones: 1-12 [ 120.958567][ T8467] EXT4-fs (loop3): 1 truncate cleaned up [ 120.960344][ T8467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.067826][ T6529] bcachefs (loop1): shutting down [ 121.067857][ T6529] bcachefs (loop1): going read-only [ 121.067884][ T6529] bcachefs (loop1): finished waiting for writes to stop [ 121.266808][ T6529] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2 [ 121.395226][ T6529] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 121.397757][ T6529] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 121.398689][ T6529] bcachefs (loop1): marking filesystem clean [ 121.401683][ T8484] tipc: Enabled bearer , priority 0 [ 121.403494][ T8484] syzkaller0: entered promiscuous mode [ 121.404658][ T8484] syzkaller0: entered allmulticast mode [ 121.407502][ T8484] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 121.648117][ T8484] tipc: Resetting bearer [ 121.649362][ T8483] tipc: Resetting bearer [ 121.657449][ T6529] bcachefs (loop1): shutdown complete [ 121.667650][ T8483] tipc: Disabling bearer [ 121.717221][ T8488] fuse: Unknown parameter 'user_i00000000000000000000' [ 121.861841][ T6536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.863693][ T8492] loop4: detected capacity change from 0 to 1024 [ 121.865902][ T8492] EXT4-fs: Ignoring removed orlov option [ 121.875869][ T8492] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 121.901061][ T8492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.922352][ T8496] tipc: Enabled bearer , priority 0 [ 121.922754][ T8496] syzkaller0: entered promiscuous mode [ 121.924347][ T8496] syzkaller0: entered allmulticast mode [ 121.979997][ T8496] tipc: Resetting bearer [ 121.985978][ T8495] tipc: Resetting bearer [ 121.993448][ T8495] tipc: Disabling bearer [ 122.357301][ T8505] tipc: Enabled bearer , priority 0 [ 122.358807][ T8505] syzkaller0: entered promiscuous mode [ 122.358832][ T8505] syzkaller0: entered allmulticast mode [ 122.370248][ T8505] tipc: Resetting bearer [ 122.373617][ T8504] tipc: Resetting bearer [ 122.380230][ T8504] tipc: Disabling bearer [ 122.448915][ T8507] loop3: detected capacity change from 0 to 512 [ 122.464380][ T8507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.715471][ T6528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.790938][ T8517] loop4: detected capacity change from 0 to 1024 [ 122.808523][ T8517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.482195][ T8526] syzkaller0: entered promiscuous mode [ 123.500369][ T8526] syzkaller0 (unregistering): left promiscuous mode [ 124.223419][ T6536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.257623][ T6528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.918319][ T6122] Bluetooth: hci1: command 0x0406 tx timeout [ 126.001946][ T2413] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.040528][ T2413] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.201576][ T8549] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.201620][ T8549] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.404926][ T8549] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.405153][ T8549] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.846878][ T8549] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.846923][ T8549] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.867061][ T8555] tipc: Enabling of bearer rejected, failed to enable media [ 126.986367][ T8549] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.986413][ T8549] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.077555][ T8554] loop3: detected capacity change from 0 to 32768 [ 127.434074][ T8551] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.436247][ T8551] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.443953][ T8551] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.445536][ T8551] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.447191][ T8551] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.448724][ T8551] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.450328][ T8551] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.450361][ T8551] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.883259][ T31] audit: type=1400 audit(128.860:3): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8600 comm="syz.3.448" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 128.894389][ T8597] loop2: detected capacity change from 0 to 32768 [ 129.062982][ T8597] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 129.063016][ T8597] allowing incompatible features above 0.0: (unknown version) [ 129.063445][ T8597] features: [ 129.063474][ T8597] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 129.063501][ T8597] bcachefs (loop2): initializing new filesystem [ 129.064971][ T8597] bcachefs (loop2): going read-write [ 129.310557][ T8597] bcachefs (loop2): marking superblocks [ 129.329111][ T8597] bcachefs (loop2): initializing freespace [ 129.336072][ T8597] bcachefs (loop2): done initializing freespace [ 129.338809][ T8597] bcachefs (loop2): reading snapshots table [ 129.339238][ T8597] bcachefs (loop2): reading snapshots done [ 129.375138][ T8597] bcachefs (loop2): done starting filesystem [ 129.774749][ T8631] loop4: detected capacity change from 0 to 32768 [ 129.836757][ T6535] bcachefs (loop2): shutting down [ 129.836787][ T6535] bcachefs (loop2): going read-only [ 129.836819][ T6535] bcachefs (loop2): finished waiting for writes to stop [ 129.868757][ T8631] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=/dev/loop4,nojournal_transaction_names [ 129.893144][ T8631] allowing incompatible features above 0.0: (unknown version) [ 129.893195][ T8631] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 129.893213][ T8631] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 129.893244][ T8631] bcachefs (loop4): initializing new filesystem [ 129.894748][ T8631] bcachefs (loop4): going read-write [ 129.903501][ T6535] bcachefs (loop2): flushing journal and stopping allocators, journal seq 4 [ 129.928667][ T6535] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4 [ 129.929810][ T6535] bcachefs (loop2): clean shutdown complete, journal seq 5 [ 129.930188][ T6535] bcachefs (loop2): marking filesystem clean [ 129.934751][ T8631] bcachefs (loop4): marking superblocks [ 129.944875][ T8631] bcachefs (loop4): initializing freespace [ 129.947171][ T8631] bcachefs (loop4): done initializing freespace [ 129.952827][ T8631] bcachefs (loop4): reading snapshots table [ 129.954138][ T8631] bcachefs (loop4): reading snapshots done [ 129.955870][ T6535] bcachefs (loop2): shutdown complete [ 129.974875][ T31] audit: type=1326 audit(129.950:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8641 comm="syz.3.455" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c75b3a8 code=0x0 [ 130.299704][ T8631] bcachefs (loop4): done starting filesystem [ 130.340454][ T8654] tipc: Enabled bearer , priority 0 [ 130.340812][ T8654] syzkaller0: entered promiscuous mode [ 130.341989][ T8654] syzkaller0: entered allmulticast mode [ 130.426226][ T8654] tipc: Resetting bearer [ 130.441926][ T8653] tipc: Resetting bearer [ 130.715557][ T8653] tipc: Disabling bearer [ 130.726256][ T6528] bcachefs (loop4): shutting down [ 130.726280][ T6528] bcachefs (loop4): going read-only [ 130.726305][ T6528] bcachefs (loop4): finished waiting for writes to stop [ 130.757399][ T6528] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 130.848239][ T6528] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 4 [ 130.851840][ T6528] bcachefs (loop4): clean shutdown complete, journal seq 5 [ 130.853630][ T6528] bcachefs (loop4): marking filesystem clean [ 130.864959][ T6528] bcachefs (loop4): shutdown complete [ 132.590370][ T8677] tipc: Started in network mode [ 132.591545][ T8677] tipc: Node identity 96c5f641e239, cluster identity 4711 [ 132.591601][ T8677] tipc: Enabled bearer , priority 0 [ 132.591959][ T8677] syzkaller0: entered promiscuous mode [ 132.591970][ T8677] syzkaller0: entered allmulticast mode [ 132.728353][ T8677] tipc: Resetting bearer [ 132.729543][ T8676] tipc: Resetting bearer [ 133.121902][ T8676] tipc: Disabling bearer [ 133.464927][ T8689] loop1: detected capacity change from 0 to 32768 [ 133.885993][ T8689] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 134.381536][ T6529] ocfs2: Unmounting device (7,1) on (node local) [ 134.767690][ T8724] tipc: Enabled bearer , priority 0 [ 134.770571][ T8724] syzkaller0: entered promiscuous mode [ 134.772993][ T8724] syzkaller0: entered allmulticast mode [ 134.777826][ T8724] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 134.789138][ T8724] tipc: Resetting bearer [ 134.794967][ T8723] tipc: Resetting bearer [ 135.013312][ T8723] tipc: Disabling bearer [ 135.629818][ T8735] lo: entered allmulticast mode [ 135.638965][ T8735] tunl0: entered allmulticast mode [ 135.640125][ T8735] gre0: entered allmulticast mode [ 135.641004][ T8735] gretap0: entered allmulticast mode [ 135.641910][ T8735] erspan0: entered allmulticast mode [ 135.642731][ T8735] ip_vti0: entered allmulticast mode [ 135.643508][ T8735] ip6_vti0: entered allmulticast mode [ 135.644412][ T8735] sit0: entered allmulticast mode [ 135.645024][ T8735] ip6tnl0: entered allmulticast mode [ 135.645746][ T8735] ip6gre0: entered allmulticast mode [ 135.646626][ T8735] syz_tun: entered allmulticast mode [ 135.648483][ T8735] ip6gretap0: entered allmulticast mode [ 135.649347][ T8735] bridge0: entered allmulticast mode [ 135.650785][ T8735] vcan0: entered allmulticast mode [ 135.651534][ T8735] bond0: entered allmulticast mode [ 135.651578][ T8735] bond_slave_0: entered allmulticast mode [ 135.651611][ T8735] bond_slave_1: entered allmulticast mode [ 135.653199][ T8735] team0: entered allmulticast mode [ 135.653231][ T8735] team_slave_0: entered allmulticast mode [ 135.653265][ T8735] team_slave_1: entered allmulticast mode [ 135.655154][ T8735] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.656997][ T8735] dummy0: entered allmulticast mode [ 135.659813][ T8735] nlmon0: entered allmulticast mode [ 135.691657][ T8735] caif0: entered allmulticast mode [ 135.691669][ T8735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.937534][ T8738] loop3: detected capacity change from 0 to 32768 [ 136.310112][ T8738] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 136.310150][ T8738] allowing incompatible features above 0.0: (unknown version) [ 136.310172][ T8738] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 136.310190][ T8738] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 136.310215][ T8738] bcachefs (loop3): initializing new filesystem [ 136.312019][ T8738] bcachefs (loop3): going read-write [ 136.348696][ T8738] bcachefs (loop3): marking superblocks [ 136.350417][ T8738] bcachefs (loop3): initializing freespace [ 136.351083][ T8738] bcachefs (loop3): done initializing freespace [ 136.351748][ T8738] bcachefs (loop3): reading snapshots table [ 136.352001][ T8738] bcachefs (loop3): reading snapshots done [ 136.651810][ T8738] bcachefs (loop3): done starting filesystem [ 136.720489][ T8754] loop4: detected capacity change from 0 to 4096 [ 136.720875][ T8754] ntfs3: Unknown parameter '\2.WŒ«Æ5ãºqøiÜ2nwŒ»Æ' [ 137.481137][ T6536] bcachefs (loop3): shutting down [ 137.481186][ T6536] bcachefs (loop3): going read-only [ 137.486260][ T6536] bcachefs (loop3): finished waiting for writes to stop [ 137.964254][ T6536] bcachefs (loop3): flushing journal and stopping allocators, journal seq 4 [ 138.080033][ T6536] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4 [ 138.083503][ T6536] bcachefs (loop3): clean shutdown complete, journal seq 5 [ 138.083900][ T6536] bcachefs (loop3): marking filesystem clean [ 138.094022][ T6536] bcachefs (loop3): shutdown complete [ 140.086971][ T8818] lo: entered allmulticast mode [ 140.087790][ T8818] tunl0: entered allmulticast mode [ 140.088031][ T8818] gre0: entered allmulticast mode [ 140.088261][ T8818] gretap0: entered allmulticast mode [ 140.088642][ T8818] erspan0: entered allmulticast mode [ 140.088874][ T8818] ip_vti0: entered allmulticast mode [ 140.089088][ T8818] ip6_vti0: entered allmulticast mode [ 140.089307][ T8818] sit0: entered allmulticast mode [ 140.089520][ T8818] ip6tnl0: entered allmulticast mode [ 140.089863][ T8818] ip6gre0: entered allmulticast mode [ 140.090073][ T8818] syz_tun: entered allmulticast mode [ 140.090315][ T8818] ip6gretap0: entered allmulticast mode [ 140.091252][ T8818] bridge0: entered allmulticast mode [ 140.091559][ T8818] vcan0: entered allmulticast mode [ 140.091694][ T8818] bond0: entered allmulticast mode [ 140.091705][ T8818] bond_slave_0: entered allmulticast mode [ 140.091717][ T8818] bond_slave_1: entered allmulticast mode [ 140.092377][ T8818] team0: entered allmulticast mode [ 140.092389][ T8818] team_slave_0: entered allmulticast mode [ 140.092400][ T8818] team_slave_1: entered allmulticast mode [ 140.092411][ T8818] vxlan0: entered allmulticast mode [ 140.092826][ T8818] dummy0: entered allmulticast mode [ 140.093196][ T8818] nlmon0: entered allmulticast mode [ 140.123648][ T8818] caif0: entered allmulticast mode [ 140.123704][ T8818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.447975][ T8821] loop1: detected capacity change from 0 to 32768 [ 140.487299][ T8821] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 140.916072][ T6529] ocfs2: Unmounting device (7,1) on (node local) [ 140.987494][ T8832] netlink: 36 bytes leftover after parsing attributes in process `syz.2.495'. [ 140.990114][ T8832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.495'. [ 140.992062][ T8832] netlink: 36 bytes leftover after parsing attributes in process `syz.2.495'. [ 140.994076][ T8832] netlink: 36 bytes leftover after parsing attributes in process `syz.2.495'. [ 141.016727][ T8834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.072761][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'. [ 141.096678][ T8834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.432919][ T8843] loop1: detected capacity change from 0 to 512 [ 141.445845][ T8843] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.491204][ T8843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 141.498917][ T8843] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.523289][ T8843] EXT4-fs error (device loop1): __ext4_remount:6740: comm syz.1.499: Abort forced by user [ 141.524677][ T8843] EXT4-fs (loop1): Remounting filesystem read-only [ 141.524690][ T8843] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000d40000 ro. [ 141.901008][ T8853] syzkaller0: entered promiscuous mode [ 141.902251][ T8853] syzkaller0: entered allmulticast mode [ 142.480908][ T6529] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 142.581396][ T8867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.502'. [ 142.748868][ T8864] tipc: Enabled bearer , priority 0 [ 142.749288][ T8864] syzkaller0: entered promiscuous mode [ 142.749299][ T8864] syzkaller0: entered allmulticast mode [ 142.763517][ T8864] tipc: Resetting bearer [ 142.765608][ T8863] tipc: Resetting bearer [ 142.839024][ T8863] tipc: Disabling bearer [ 142.857494][ T8866] loop3: detected capacity change from 0 to 40427 [ 142.863884][ T8866] F2FS-fs (loop3): Image doesn't support compression [ 142.863922][ T8866] F2FS-fs (loop3): build fault injection rate: 690 [ 142.865679][ T8866] F2FS-fs (loop3): invalid crc value [ 142.881066][ T8866] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 142.883422][ T8866] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 143.485332][ T8884] netlink: 'syz.4.508': attribute type 1 has an invalid length. [ 143.516320][ T8884] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 143.531922][ T512] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 143.533369][ T8884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.635757][ T6536] syz-executor: attempt to access beyond end of device [ 143.635757][ T6536] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.635987][ T6536] CPU: 1 UID: 0 PID: 6536 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 143.635999][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 143.636004][ T6536] Call trace: [ 143.636007][ T6536] show_stack+0x2c/0x3c (C) [ 143.636024][ T6536] __dump_stack+0x30/0x40 [ 143.636031][ T6536] dump_stack_lvl+0xd8/0x12c [ 143.636036][ T6536] dump_stack+0x1c/0x28 [ 143.636041][ T6536] f2fs_handle_critical_error+0x34c/0x4b8 [ 143.636050][ T6536] f2fs_stop_checkpoint+0x5c/0x70 [ 143.636055][ T6536] f2fs_write_end_io+0x768/0xa70 [ 143.636062][ T6536] bio_endio+0x858/0x894 [ 143.636069][ T6536] submit_bio_noacct+0x158/0x177c [ 143.636074][ T6536] submit_bio+0x3b4/0x550 [ 143.636079][ T6536] f2fs_submit_write_bio+0x13c/0x324 [ 143.636085][ T6536] __submit_merged_bio+0x254/0x704 [ 143.636091][ T6536] __submit_merged_write_cond+0x23c/0x4ac [ 143.636097][ T6536] f2fs_write_data_pages+0x1d28/0x2634 [ 143.636104][ T6536] do_writepages+0x270/0x468 [ 143.636111][ T6536] filemap_fdatawrite+0x14c/0x1f4 [ 143.636118][ T6536] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 143.636124][ T6536] f2fs_write_checkpoint+0x690/0x16a0 [ 143.636129][ T6536] kill_f2fs_super+0x21c/0x584 [ 143.636135][ T6536] deactivate_locked_super+0xc4/0x12c [ 143.636141][ T6536] deactivate_super+0xe0/0x100 [ 143.636145][ T6536] cleanup_mnt+0x31c/0x3ac [ 143.636151][ T6536] __cleanup_mnt+0x20/0x30 [ 143.636156][ T6536] task_work_run+0x1dc/0x260 [ 143.636162][ T6536] exit_to_user_mode_loop+0xfc/0x168 [ 143.636169][ T6536] el0_svc+0x170/0x254 [ 143.636177][ T6536] el0t_64_sync_handler+0x84/0x12c [ 143.636184][ T6536] el0t_64_sync+0x198/0x19c [ 143.636205][ T6536] F2FS-fs (loop3): Remounting filesystem read-only [ 143.697585][ T8889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.699586][ T8889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.733775][ T8884] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 143.734133][ T8884] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 144.026495][ T8884] bond1 (unregistering): Released all slaves [ 144.150205][ T8896] loop1: detected capacity change from 0 to 256 [ 144.150754][ T8896] exfat: Unknown parameter '' [ 144.213944][ T6122] Bluetooth: hci1: hcon 00000000bb37d7f9 sent 0 < count 79 [ 144.214072][ T6122] Bluetooth: hci1: hcon 00000000bb37d7f9 sent 0 < count 1025 [ 144.215418][ T6122] Bluetooth: hci1: hcon 00000000bb37d7f9 sent 0 < count 2 [ 144.215435][ T6122] Bluetooth: hci1: hcon 00000000bb37d7f9 sent 0 < count 127 [ 145.059121][ T8912] loop4: detected capacity change from 0 to 1024 [ 145.447456][ T8912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.878552][ T8938] rdma_rxe: rxe_newlink: failed to add lo [ 146.886502][ T8938] lo: entered promiscuous mode [ 146.901137][ T8551] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 15) [ 146.904195][ T8551] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 146.904225][ T8551] EXT4-fs (loop4): This should not happen!! Data will be lost [ 146.904225][ T8551] [ 146.906795][ T6528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.153587][ T8943] loop4: detected capacity change from 0 to 1024 [ 147.249504][ T31] audit: type=1326 audit(147.230:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8944 comm="syz.2.523" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb075b3a8 code=0x0 [ 147.716062][ T8955] tipc: Enabling of bearer rejected, failed to enable media [ 148.151661][ T1962] hfsplus: b-tree write err: -5, ino 4 [ 148.759170][ T8976] loop1: detected capacity change from 0 to 1024 [ 148.761828][ T8976] EXT4-fs: Ignoring removed orlov option [ 148.764104][ T8976] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 148.798288][ T8976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.818502][ T8970] loop2: detected capacity change from 0 to 32768 [ 148.826053][ T8970] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.530 (8970) [ 148.870695][ T8970] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 148.873940][ T8970] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 148.876662][ T8970] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 148.898301][ T8970] BTRFS info (device loop2): rebuilding free space tree [ 148.906991][ T8970] BTRFS info (device loop2): disabling free space tree [ 148.907056][ T8970] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 148.907075][ T8970] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 148.913553][ T8970] BTRFS info (device loop2): setting nodatasum [ 148.914187][ T8970] BTRFS info (device loop2): setting nodatacow [ 148.914200][ T8970] BTRFS info (device loop2): enabling ssd optimizations [ 148.914208][ T8970] BTRFS info (device loop2): using spread ssd allocation scheme [ 148.914215][ T8970] BTRFS info (device loop2): turning off barriers [ 148.914224][ T8970] BTRFS info (device loop2): enabling disk space caching [ 148.914230][ T8970] BTRFS info (device loop2): force clearing of disk cache [ 149.490489][ T9002] random: crng reseeded on system resumption [ 149.533485][ T6529] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.588323][ T9012] loop1: detected capacity change from 0 to 1024 [ 149.634765][ T9010] loop4: detected capacity change from 0 to 4096 [ 149.635416][ T9010] EXT4-fs: Ignoring removed nobh option [ 149.644472][ T9010] EXT4-fs (loop4): Test dummy encryption mode enabled [ 149.649098][ T6535] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 149.654127][ T9012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.665971][ T9010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.778539][ T9010] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 150.755497][ T8551] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 15) [ 150.758385][ T8551] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 150.758446][ T8551] EXT4-fs (loop1): This should not happen!! Data will be lost [ 150.758446][ T8551] [ 150.772918][ T6529] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.433036][ T9028] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 151.462920][ T6528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.867597][ T9054] loop1: detected capacity change from 0 to 1024 [ 152.892689][ T2085] hfsplus: b-tree write err: -5, ino 4 [ 152.916270][ T9058] loop3: detected capacity change from 0 to 1024 [ 153.032320][ T9058] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 153.032393][ T9058] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 153.032787][ T9058] EXT4-fs error (device loop3): ext4_get_journal_inode:5800: inode #32: comm syz.3.545: iget: special inode unallocated [ 153.033149][ T9058] EXT4-fs (loop3): Remounting filesystem read-only [ 153.033204][ T9058] EXT4-fs (loop3): no journal found [ 153.033217][ T9058] EXT4-fs (loop3): can't get journal size [ 153.039938][ T9058] EXT4-fs (loop3): filesystem is read-only [ 153.040383][ T9058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 153.045770][ T9064] tipc: Enabled bearer , priority 0 [ 153.046454][ T9064] syzkaller0: entered promiscuous mode [ 153.046465][ T9064] syzkaller0: entered allmulticast mode [ 153.058869][ T9058] EXT4-fs (loop3): shut down requested (2) [ 153.067754][ T9064] tipc: Resetting bearer [ 153.073809][ T9062] tipc: Resetting bearer [ 153.584280][ T9062] tipc: Disabling bearer [ 153.609840][ T9069] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.611785][ T6530] Bluetooth: hci2: command 0x0406 tx timeout [ 153.611849][ T6530] Bluetooth: hci0: command 0x0406 tx timeout [ 153.736085][ T9075] tipc: Enabled bearer , priority 0 [ 153.736492][ T9075] syzkaller0: entered promiscuous mode [ 153.736933][ T9075] syzkaller0: entered allmulticast mode [ 154.159394][ T9077] loop4: detected capacity change from 0 to 512 [ 154.159787][ T9077] journal_path: Lookup failure for './file0/../file0' [ 154.159800][ T9077] EXT4-fs: error: could not find journal device path [ 155.154561][ T9090] loop1: detected capacity change from 0 to 40427 [ 155.178051][ T6587] tipc: Node number set to 1962735169 [ 155.373336][ T6532] Bluetooth: hci3: command 0x0406 tx timeout [ 155.531054][ T9090] F2FS-fs (loop1): build fault injection type: 0x7 [ 155.535052][ T9090] F2FS-fs (loop1): invalid crc value [ 155.619571][ T9075] tipc: Resetting bearer [ 155.629452][ T9074] tipc: Resetting bearer [ 155.707862][ T9090] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 155.717471][ T9090] F2FS-fs (loop1): Start checkpoint disabled! [ 155.725984][ T9090] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 156.500187][ T9074] tipc: Disabling bearer [ 156.536244][ T9100] tipc: Enabling of bearer rejected, failed to enable media [ 156.930777][ T4154] kworker/u8:7: attempt to access beyond end of device [ 156.930777][ T4154] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 156.944541][ T4154] CPU: 0 UID: 0 PID: 4154 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT [ 156.944565][ T4154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 156.944574][ T4154] Workqueue: writeback wb_workfn (flush-7:1) [ 156.944599][ T4154] Call trace: [ 156.944602][ T4154] show_stack+0x2c/0x3c (C) [ 156.944613][ T4154] __dump_stack+0x30/0x40 [ 156.944620][ T4154] dump_stack_lvl+0xd8/0x12c [ 156.944625][ T4154] dump_stack+0x1c/0x28 [ 156.944630][ T4154] f2fs_handle_critical_error+0x34c/0x4b8 [ 156.944639][ T4154] f2fs_stop_checkpoint+0x5c/0x70 [ 156.944645][ T4154] f2fs_write_end_io+0x768/0xa70 [ 156.944652][ T4154] bio_endio+0x858/0x894 [ 156.944661][ T4154] submit_bio_noacct+0x158/0x177c [ 156.944668][ T4154] submit_bio+0x3b4/0x550 [ 156.944673][ T4154] f2fs_submit_write_bio+0x13c/0x324 [ 156.944679][ T4154] __submit_merged_bio+0x254/0x704 [ 156.944686][ T4154] __submit_merged_write_cond+0x23c/0x4ac [ 156.944692][ T4154] f2fs_write_data_pages+0x1d28/0x2634 [ 156.944698][ T4154] do_writepages+0x270/0x468 [ 156.944706][ T4154] __writeback_single_inode+0x15c/0x13e8 [ 156.944714][ T4154] writeback_sb_inodes+0x55c/0xe40 [ 156.944720][ T4154] wb_writeback+0x3cc/0xd70 [ 156.944727][ T4154] wb_workfn+0x338/0xdc0 [ 156.944733][ T4154] process_one_work+0x7e8/0x155c [ 156.944739][ T4154] worker_thread+0x958/0xed8 [ 156.944744][ T4154] kthread+0x5fc/0x75c [ 156.944751][ T4154] ret_from_fork+0x10/0x20 [ 156.978416][ T4154] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 157.304878][ T9109] loop4: detected capacity change from 0 to 32768 [ 157.327789][ T9121] loop2: detected capacity change from 0 to 4096 [ 157.329330][ T9121] EXT4-fs: Ignoring removed oldalloc option [ 157.332102][ T9121] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.333789][ T9121] EXT4-fs (loop2): Test dummy encryption mode enabled [ 157.354237][ T9121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.617456][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 157.632180][ T9109] bcachefs (loop4): starting version 1.13: inode_has_child_snapshots opts=compression=gzip [ 157.634950][ T9109] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 157.634993][ T9109] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 157.635064][ T9109] bcachefs (loop4): recovering from clean shutdown, journal seq 8 [ 157.635108][ T9109] bcachefs (loop4): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 157.635108][ T9109] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 157.689140][ T9109] bcachefs (loop4): error reading btree root btree=accounting level=0: btree_node_read_error, fixing [ 157.689286][ T9109] bcachefs (loop4): check_topology... done [ 157.689680][ T9109] bcachefs (loop4): accounting_read... done [ 157.715239][ T9109] bcachefs (loop4): alloc_read... done [ 157.715592][ T9109] bcachefs (loop4): snapshots_read... done [ 157.715869][ T9109] bcachefs (loop4): check_allocations... [ 157.719412][ T9109] bcachefs (loop4): bucket 0:78 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 157.719497][ T9109] bcachefs (loop4): bucket 0:78 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing [ 157.722871][ T9109] done [ 157.725429][ T9109] bcachefs (loop4): going read-write [ 157.742574][ T9109] bcachefs (loop4): journal_replay... [ 157.800437][ T6535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.804114][ T9109] done [ 157.805090][ T9109] bcachefs (loop4): check_lrus... done [ 157.805516][ T9109] bcachefs (loop4): check_backpointers_to_extents... done [ 157.812691][ T9109] bcachefs (loop4): check_extents_to_backpointers... done [ 157.816982][ T9109] bcachefs (loop4): check_inodes... done [ 157.820716][ T9109] bcachefs (loop4): resume_logged_ops... done [ 157.825093][ T9109] bcachefs (loop4): delete_dead_inodes... done [ 157.836627][ T9109] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean [ 157.836663][ T9109] bcachefs (loop4): check_extents_to_backpointers... [ 157.837215][ T9109] bcachefs (loop4): scanning for missing backpointers in 1/512 buckets [ 157.839326][ T9109] done [ 157.849278][ T9109] bcachefs (loop4): check_inodes... done [ 157.849850][ T9109] bcachefs (loop4): resume_logged_ops... done [ 157.850600][ T9109] bcachefs (loop4): delete_dead_inodes... done [ 157.856175][ T9109] bcachefs (loop4): done starting filesystem [ 157.973834][ T9146] loop2: detected capacity change from 0 to 32768 [ 158.014178][ T9146] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 158.015175][ T9146] allowing incompatible features above 0.0: (unknown version) [ 158.015192][ T9146] features: [ 158.015226][ T9146] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 158.015261][ T9146] bcachefs (loop2): initializing new filesystem [ 158.017528][ T9146] bcachefs (loop2): going read-write [ 158.021208][ T9146] bcachefs (loop2): marking superblocks [ 158.030191][ T9146] bcachefs (loop2): initializing freespace [ 158.033357][ T9146] bcachefs (loop2): done initializing freespace [ 158.036983][ T9146] bcachefs (loop2): reading snapshots table [ 158.037022][ T9146] bcachefs (loop2): reading snapshots done [ 158.049646][ T9146] bcachefs (loop2): done starting filesystem [ 158.147900][ T6528] bcachefs (loop4): shutting down [ 158.147930][ T6528] bcachefs (loop4): going read-only [ 158.149213][ T6528] bcachefs (loop4): finished waiting for writes to stop [ 158.359879][ T9165] ================================================================== [ 158.359892][ T9165] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x3628/0x4170 [ 158.359910][ T9165] Read of size 1 at addr ffff0000f5810330 by task syz.0.569/9165 [ 158.359917][ T9165] [ 158.359921][ T9165] CPU: 1 UID: 0 PID: 9165 Comm: syz.0.569 Not tainted syzkaller #0 PREEMPT [ 158.359928][ T9165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 158.359933][ T9165] Call trace: [ 158.359935][ T9165] show_stack+0x2c/0x3c (C) [ 158.359945][ T9165] __dump_stack+0x30/0x40 [ 158.359952][ T9165] dump_stack_lvl+0xd8/0x12c [ 158.359957][ T9165] print_address_description+0xa8/0x238 [ 158.359971][ T9165] print_report+0x68/0x84 [ 158.359981][ T9165] kasan_report+0xb0/0x110 [ 158.359993][ T9165] __asan_report_load1_noabort+0x20/0x2c [ 158.360000][ T9165] xfrm_state_find+0x3628/0x4170 [ 158.360007][ T9165] xfrm_resolve_and_create_bundle+0x60c/0x2a30 [ 158.360014][ T9165] xfrm_lookup_with_ifid+0x234/0x1a5c [ 158.360024][ T9165] xfrm_lookup_route+0x4c/0x1c0 [ 158.360030][ T9165] ip_route_output_flow+0xd4/0x160 [ 158.360037][ T9165] udp_sendmsg+0x109c/0x1d18 [ 158.360047][ T9165] inet_sendmsg+0x154/0x284 [ 158.360056][ T9165] ____sys_sendmsg+0x490/0x7b8 [ 158.360067][ T9165] ___sys_sendmsg+0x204/0x278 [ 158.360077][ T9165] __sys_sendmmsg+0x1f4/0x548 [ 158.360082][ T9165] __arm64_sys_sendmmsg+0xa0/0xbc [ 158.360087][ T9165] invoke_syscall+0x98/0x254 [ 158.360094][ T9165] el0_svc_common+0x130/0x23c [ 158.360099][ T9165] do_el0_svc+0x48/0x58 [ 158.360105][ T9165] el0_svc+0x5c/0x254 [ 158.360115][ T9165] el0t_64_sync_handler+0x84/0x12c [ 158.360125][ T9165] el0t_64_sync+0x198/0x19c [ 158.360132][ T9165] [ 158.360134][ T9165] Allocated by task 7298: [ 158.360138][ T9165] kasan_save_track+0x40/0x78 [ 158.360146][ T9165] kasan_save_alloc_info+0x44/0x54 [ 158.360152][ T9165] __kasan_slab_alloc+0x70/0x88 [ 158.360160][ T9165] kmem_cache_alloc_noprof+0x238/0x3e8 [ 158.360170][ T9165] xfrm_state_alloc+0x2c/0x264 [ 158.360175][ T9165] __find_acq_core+0x720/0x1540 [ 158.360181][ T9165] xfrm_find_acq+0x94/0xcc [ 158.360187][ T9165] xfrm_alloc_userspi+0x52c/0x9c8 [ 158.360193][ T9165] xfrm_user_rcv_msg+0x588/0x7c4 [ 158.360197][ T9165] netlink_rcv_skb+0x220/0x3fc [ 158.360204][ T9165] xfrm_netlink_rcv+0x80/0x9c [ 158.360208][ T9165] netlink_unicast+0x694/0x8c4 [ 158.360213][ T9165] netlink_sendmsg+0x648/0x930 [ 158.360219][ T9165] ____sys_sendmsg+0x490/0x7b8 [ 158.360228][ T9165] ___sys_sendmsg+0x204/0x278 [ 158.360242][ T9165] __arm64_sys_sendmsg+0x184/0x238 [ 158.360251][ T9165] invoke_syscall+0x98/0x254 [ 158.360256][ T9165] el0_svc_common+0x130/0x23c [ 158.360261][ T9165] do_el0_svc+0x48/0x58 [ 158.360266][ T9165] el0_svc+0x5c/0x254 [ 158.360274][ T9165] el0t_64_sync_handler+0x84/0x12c [ 158.360283][ T9165] el0t_64_sync+0x198/0x19c [ 158.360288][ T9165] [ 158.360289][ T9165] Freed by task 1817: [ 158.360292][ T9165] kasan_save_track+0x40/0x78 [ 158.360300][ T9165] kasan_save_free_info+0x58/0x70 [ 158.360305][ T9165] __kasan_slab_free+0x74/0x98 [ 158.360313][ T9165] kmem_cache_free+0x184/0x550 [ 158.360322][ T9165] xfrm_state_gc_task+0x468/0x560 [ 158.360330][ T9165] process_one_work+0x7e8/0x155c [ 158.360335][ T9165] worker_thread+0x990/0xed8 [ 158.360340][ T9165] kthread+0x5fc/0x75c [ 158.360349][ T9165] ret_from_fork+0x10/0x20 [ 158.360355][ T9165] [ 158.360356][ T9165] The buggy address belongs to the object at ffff0000f5810000 [ 158.360356][ T9165] which belongs to the cache xfrm_state of size 928 [ 158.360361][ T9165] The buggy address is located 816 bytes inside of [ 158.360361][ T9165] freed 928-byte region [ffff0000f5810000, ffff0000f58103a0) [ 158.360367][ T9165] [ 158.360369][ T9165] The buggy address belongs to the physical page: [ 158.360373][ T9165] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000f5810000 pfn:0x135810 [ 158.360379][ T9165] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 158.360384][ T9165] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 158.360390][ T9165] page_type: f5(slab) [ 158.360396][ T9165] raw: 05ffc00000000040 ffff0000c2f79b40 dead000000000122 0000000000000000 [ 158.360401][ T9165] raw: ffff0000f5810000 00000000800f000e 00000000f5000000 0000000000000000 [ 158.360407][ T9165] head: 05ffc00000000040 ffff0000c2f79b40 dead000000000122 0000000000000000 [ 158.360412][ T9165] head: ffff0000f5810000 00000000800f000e 00000000f5000000 0000000000000000 [ 158.360417][ T9165] head: 05ffc00000000002 fffffdffc3d60401 00000000ffffffff 00000000ffffffff [ 158.360422][ T9165] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 158.360425][ T9165] page dumped because: kasan: bad access detected [ 158.360428][ T9165] [ 158.360429][ T9165] Memory state around the buggy address: [ 158.360433][ T9165] ffff0000f5810200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.360437][ T9165] ffff0000f5810280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.360441][ T9165] >ffff0000f5810300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.360444][ T9165] ^ [ 158.360447][ T9165] ffff0000f5810380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 158.360451][ T9165] ffff0000f5810400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 158.360454][ T9165] ================================================================== [ 158.360468][ T9165] Disabling lock debugging due to kernel taint [ 158.600166][ T6528] bcachefs (loop4): flushing journal and stopping allocators, journal seq 19 [ 158.624305][ T6528] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 21 [ 158.624602][ T6528] bcachefs (loop4): clean shutdown complete, journal seq 22 [ 158.625038][ T6528] bcachefs (loop4): marking filesystem clean [ 158.693291][ T9167] lo: entered allmulticast mode [ 158.693827][ T9167] tunl0: entered allmulticast mode [ 158.694047][ T9167] gre0: entered allmulticast mode [ 158.694349][ T9167] gretap0: entered allmulticast mode [ 158.694582][ T9167] erspan0: entered allmulticast mode [ 158.695286][ T9167] ip_vti0: entered allmulticast mode [ 158.696210][ T9167] ip6_vti0: entered allmulticast mode [ 158.696965][ T9167] sit0: entered allmulticast mode [ 158.697820][ T9167] ip6tnl0: entered allmulticast mode [ 158.698676][ T9167] ip6gre0: entered allmulticast mode [ 158.699465][ T9167] syz_tun: entered allmulticast mode [ 158.700487][ T9167] ip6gretap0: entered allmulticast mode [ 158.701416][ T9167] bridge0: entered allmulticast mode [ 158.702281][ T9167] vcan0: entered allmulticast mode [ 158.702650][ T9167] bond0: entered allmulticast mode [ 158.702680][ T9167] bond_slave_0: entered allmulticast mode [ 158.702702][ T9167] bond_slave_1: entered allmulticast mode [ 158.704387][ T9167] team0: entered allmulticast mode [ 158.704409][ T9167] team_slave_0: entered allmulticast mode [ 158.704434][ T9167] team_slave_1: entered allmulticast mode [ 158.705935][ T9167] dummy0: entered allmulticast mode [ 158.706718][ T9167] nlmon0: entered allmulticast mode [ 158.817606][ T6528] bcachefs (loop4): shutdown complete [ 158.824008][ T9167] caif0: entered allmulticast mode [ 158.824020][ T9167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.845679][ T6535] bcachefs (loop2): shutting down [ 158.845708][ T6535] bcachefs (loop2): going read-only [ 158.846376][ T6535] bcachefs (loop2): finished waiting for writes to stop [ 158.863657][ T6535] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 158.905781][ T6535] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 158.912236][ T6535] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 158.912509][ T6535] bcachefs (loop2): marking filesystem clean [ 158.918899][ T6535] bcachefs (loop2): shutdown complete [ 159.681371][ T6532] Bluetooth: hci3: command 0x0406 tx timeout