last executing test programs: 1m49.622099112s ago: executing program 1 (id=137): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x3000002, &(0x7f00000001c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c66696c655f756d61736b3d30303030303030303030303030303030303030303030312c696f636861727365743d6d6163726f6d616e2c706172743d3078303030303030303030303030613565662c63726561746f723da0a54db32c706172743d3078303030303030303030303030306666662c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',codepage=macinuit,dir_umask=0000000000000codepage=cp737,func=POLICY_CHECK,\x00'/87], 0x1, 0x2f2, &(0x7f00000006c0)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) 1m49.476616862s ago: executing program 1 (id=140): sysinfo(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1m48.587881851s ago: executing program 1 (id=159): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x6044}, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={r3, @in={{0x2, 0x4e23, @loopback}}, 0x0, 0x101, 0x0, 0x0, 0x54, 0xffffffff}, 0x9c) 1m48.457457516s ago: executing program 1 (id=161): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x4d100000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) 1m47.97138687s ago: executing program 1 (id=171): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x6044}, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={r3, @in={{0x2, 0x4e23, @loopback}}, 0x0, 0x101, 0x0, 0x0, 0x54, 0xffffffff}, 0x9c) 1m47.868179191s ago: executing program 1 (id=173): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540)) 1m32.644470666s ago: executing program 32 (id=173): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540)) 11.604200137s ago: executing program 3 (id=617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 11.381709942s ago: executing program 3 (id=619): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0000e900000000001c001a8018000580140006800800020000000000080001"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x7, 0x3, 0x10000, 0x721d, 0xffffffffffffffff, 0x5, '\x00', r5, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6c}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r8 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x170}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r8, 0x48e9, 0x0, 0x0, 0x0, 0x1e) writev(r7, &(0x7f0000000580)=[{&(0x7f0000000300)="d8", 0x1}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) 10.516097452s ago: executing program 3 (id=623): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x10000, 0x1}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0xf0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000d00)={0x1, 0x5, 0x0, 0x0, 0xfa}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={0x0, 0x94, 0x46}, &(0x7f0000000b00)={'enc=', 'oaep', ' hash=', {'sha384-neon\x00'}}, &(0x7f0000000b80)="4cab92e6f24158a10b2b183636b52d130b9a8ea941c80c86d5625cc32ff84dd8dbcfb986dca26c2d4a65906372e61b28acbea53b8b6fa5012c067a8e66ac75fcc749b2f2527eef9ffb1ee23f72a00c181fea57626f1c1b5ec3d71b0a806a466a529c82666443ae844b24029e87f51578de7efc065a60c5772b04809960feac6cf2360465f3243bb2eae53681a8bf8c050c34fcb4", &(0x7f0000000c40)=""/70) 10.361309843s ago: executing program 2 (id=627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x3d76, 0x0, 0x8, 'syz1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x90000026) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x18b100, 0x44) renameat2(r5, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000200)='./file0\x00', 0x0) 9.392240025s ago: executing program 2 (id=629): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, 0x0, 0x0, 0xe7b, 0x0, 0x0) 9.391567056s ago: executing program 4 (id=630): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4040000) syz_usb_connect(0x5, 0x24, 0x0, 0x0) setpriority(0x0, 0x0, 0xfffffbc9) r1 = socket$nl_route(0x10, 0x3, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000ac0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f27") r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000200), 0x8) sendto$inet6(r3, &(0x7f0000000180), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c) r4 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000080), 0x0) r5 = syz_open_dev$video(&(0x7f0000000240), 0x8, 0x800) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx2\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x2161) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0, 0xfc, 0x0, 0x0, 0x10}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x50, 0x2e, 0xffff, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x7, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008808}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 9.189631195s ago: executing program 2 (id=632): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb23641492"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec970204982b00fe8000000000000000000000000000aaff0200"/51], 0xffe) 8.409410659s ago: executing program 4 (id=634): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000640)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x44, 0x33, 0x78, 0x39, 0x74, 0x36]}}, {@space_cache}, {@ssd_spread}, {@nobarrier}, {@flushoncommit}, {@noacl}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x65, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f0000000940)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0xe7b, 0x0, 0x0) 7.964385035s ago: executing program 2 (id=636): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000480)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {}, {@compress_force}, {@nodiscard}, {@space_cache_v2}, {@clear_cache}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x67, 0x2d, 0x33, 0x74, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r3, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.266863952s ago: executing program 5 (id=637): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x400, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_genetlink_get_family_id$batadv(0x0, r0) r1 = socket$xdp(0x2c, 0x3, 0x0) close(r1) 6.845660537s ago: executing program 5 (id=639): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x42, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000500)={[{@utf8no}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@uni_xlateno}, {@rodir}, {@fat=@debug}, {@shortname_lower}, {@uni_xlateno}, {@fat=@nfs_nostale_ro}, {@rodir}, {@fat=@gid}, {@fat=@showexec}, {@shortname_winnt}]}, 0x6, 0x2d8, &(0x7f0000001300)="$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") r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$sock_int(r7, 0x1, 0x22, &(0x7f0000000200)=0xfffffffb, 0x4) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x0, 0x80}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket(0x2b, 0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x18, 0x4, 0xffffffff, 0x8, 0x1089, 0xffffffffffffffff, 0x27, '\x00', r9, r5, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 5.622690306s ago: executing program 0 (id=641): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9064e}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) 5.521354637s ago: executing program 0 (id=642): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1b, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff000, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xe0f, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x28062420, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000030000004379b712ce8c0f70"], 0x0, 0x27, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8, 0x4) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000540)=0x74a5, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}}, 0x0) 5.393772642s ago: executing program 3 (id=643): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, 0x0, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={r3, @in={{0x2, 0x4e23, @loopback}}, 0x0, 0x101, 0x0, 0x0, 0x54, 0xffffffff}, 0x9c) 5.104453831s ago: executing program 4 (id=644): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x3, @remote, 0x48}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000280)="6147adf4e650cb9b20fbdfea9533ad1700c15006c211e61b977643d35fe6630451015017bfff2833b4e600d5f1a218a112a943d1c8b69e412bf0e14874fd351ab3195d37cfdd789f08a05cf8d616a84e11b169eff063206f07874e36937604d928e841625edc955a16394bdd8f4ef5569501a534dde83927fe730027d08cc6eb068fd6a86c3b5cfdddfa9be6a7a8156f925e356e26ffe2c8b195127f4267a0205e7c986e74833d02b4fa1598bf83bcddbc01ac2b6be8a5ede575f37f34a62d1063e8c6e27f90f44c9e40896948affbd2f8", 0xd1}, {&(0x7f0000000140)="1e4728d9e0e5b7841b7c2285a07b74dfbe2e5ee2a35f392903", 0x19}, {&(0x7f00000001c0)="42ec62930b9efc2dfd247cd3252570778e9ff1be14a3ba079d1611a5e8d996ac34a6404bcad60f7f3cf098ab", 0x2c}, {&(0x7f0000000380)="8aa685cf46d86d5e83f55bcf8be0d3c1f0250a430f82023452b2a33e0ae43bd43f8d315f0e91a8ce23e29eaf6c9e3f36d99af3e862b398aba2e185bfb8b7a17b4e5fa02a311922ef879dc917f693c85035d29f92297049894400724d17ee237240e6a2d05a1b0a984ae846ea8efa96eba0de3f15d7ff9a1aab0b6ae2631182e0da05af50a5b8fc5f8801d0c54d54ef6287afadb8ace4f647681fc793430ec16c8e36417180ad79", 0xa7}, {&(0x7f0000000200)="a28f31bd9b275bb324da5ffe26732f317a9af7031ddf6f4f05ec", 0x1a}, {&(0x7f0000000440)="e96ce70a4ca2e193a829ea1f79227eee5cd69763acd49ea8059a16638db976d2b4802bfc7725d733e284b985e09d1cc37c11d92a00c19f0e7ef88059a3099506475f9542ca0f422b58186c8660738c0a89651572cf426d40f563e71b2a487caee58467a8c9aab4470dfe4389a87ac8f8841ec998e5977e3311972047e7ceb27e33", 0x81}, {&(0x7f0000002b40)="6f55eb64b87c10afa6ec43ff3e86fee19c76dcf7cda13622b65228997c3d2a01473fb906c585e92a739811b94bc43aca8e5e8c2fb09fba3b76e4b57839234c6862b97ab9d0f28b6e9e4109d86b660f500758c358c98a70f10f17887a505da26ba522920418018fdb764f69e7a1e28c1ac95fbd84862dea89cd469a5a24512acc61429f188c72ce84731203f34a9b02fa898e0982b407a6838deda6bbf011d0acfc6b585a86c19bc28ef9a21cc099f61f7baccc0444466d8067602d110f1a5263", 0xc0}], 0x7, &(0x7f0000000500)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0xd16b6777ba924a06, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x28}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000006c0)="e58c64b0f893e1651fa2ebec2dc44f9bd3f0866d375049af36e778dbe3a8e47befd024bf9c9e3548bc1d82ff2234da3ecd7114df453e6093b2a4c2fd70bc366bfb9193ef5e02dff57f59a18334e2cd6c7d499de7f2ac7a3238555deb2fe1680b2c7a8e4552b649380540e0dd2d62ea372d9ec2084a92a29e297c601a1aa80c20195af5072f92b59fb763f860082f26469a21138d9b29021a806012bf51cff08393460544fea36036925a01318a2877a9c4f5a824656c0061cde1b50630bb0c3072c480f392211e", 0xc7}, {&(0x7f00000007c0)="627b4b6cc747dd7e6b0963b45e30", 0xe}], 0x2, &(0x7f0000000840)=[@tclass={{0x14, 0x29, 0x43, 0x6}}, @dstopts={{0x20, 0x29, 0x37, {0x89, 0x0, '\x00', [@ra={0x5, 0x2, 0x8}]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x32, 0x12, 0x2, 0x2, 0x0, [@private2, @remote, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0, @private0]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xa0}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x73, 0x2, 0x0, 0x2, 0x0, [@private0]}}}, @dstopts={{0x20, 0x29, 0x37, {0x87, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x567}]}}}, @dstopts={{0x178, 0x29, 0x37, {0x946b505f98cd5fe3, 0x2b, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0x0, 0x1, [0x4339, 0x6, 0x81, 0x1, 0xd9, 0x4, 0x800, 0x6]}}, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @local}, @generic={0x5, 0xd9, "53981ec6aa2b94727e00bf5f330479c98a9b73200a3648f67955c475b9ed344bc77c7d86820f45c679987a5dac241467c3f405e40ebdce204b81388e7ac0abf36b0df52ffab0f3c1d8b4f01ff1778dd62dc2bb1ff92b2d3b341fa6faaa9ffe0f92308ddc7c9402b7bc462ad7a442c935ef275bcdd65867f816f989e000768fb4e63ce17d0b78bc672e4b13a4bae5981266e07a6cd212d7e23f3d4a82f56d7611cce7428500602a765218bc0daa27c21e8a38539ae4e432252cbe241ce283fde733800415f3cb41f59989252d1513a620e8ee4613f39f6d7174"}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}], 0x2b8}}, {{&(0x7f0000000b00)={0xa, 0x4e20, 0x10001, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000b40)="611c392929d328578ce474f8fcf0db813f0c61776036815fb93820a033c40534a077c32c6582f9b1e10e411ec4e3207c6f45d6cbac851ab7ff11cd87534469d9cf0cb7ae559e903a9ec9dab7e2348c4be3066f30c7dcaf783e67f37aa485e3f7de1c2e54f3d842f409999e653591f0935018de97c30fe8", 0x77}, {&(0x7f0000000bc0)="09417dbfbaca89674a2a78a37174789515c9b85e645ed8ef67a2b7d049d39679e45b83ebe43a3a98e7f5106044f7d022e607a173fa4c402d90f32ffaa23d0c7b01f581ae12301be217461fcafeab42a7bd968eab46ac91899c7c17d634681be2f1e3d8a1957bf24de5003539d36f34f43add4bca56d74a5743e08bd37c133c300725c247ee39019f00e58159e4dc661eb63259673aa13b", 0x97}], 0x2}}, {{&(0x7f0000000cc0)={0xa, 0x4e21, 0x8, @loopback, 0x7}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000d00)="b633124ba33fd7822f65abc46cc54d049f30d388a100d1b25eb31c96d831e73daad812816d81d217585d73c2f34710d4bd80ffc1d46f30fa4c8a091a74cd3ee89288ed2285a3571220a81d7e74b51514cfe75bafe6b509090512e38b8b667ca2a64f08f6583528368b5e923b9876598653e4ea03df9cec53b0139522de3f02902ad71c5ba0d45a2b1074cb3d22ff17c94e1343d693a047ebcc8f03c12a2f1a881003ad3df43c08c025e07b0ff15a7818ff248fa5a4d08c91ff2c31fe1316e5275bad4b07ec", 0xc5}, {&(0x7f0000000e00)="337e139b1a4ddc060612bf8a07a0593fc5b9f157bbbe983d90319c145fab46acc6c3040c9238764a03e95886265ebd1de517e65b509f85cd0d871aebaea98307a35a338c0658acb56524a5864278f8d307693b0df0c20f34c4181035c7921a7c5264bf4de937749109893753f9ce9d0b4081309c197f2c85ccba71da42137c9272adc18b7a2e055e89c64df357251a1a3e862a162f56c3573393ca7b2b56fadfd5b198fe428b77492afa9372cf", 0xad}], 0x2, &(0x7f0000000f00)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x89, 0x1, '\x00', [@ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x7}]}}}, @dstopts_2292={{0xe0, 0x29, 0x4, {0x3b, 0x18, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @generic={0x4, 0xb6, "2e83a53369e3b82583909fecb74bc724ca8dc268087ea352ea9d84ed8369f08ee2b782f3037dbff333b7fd7ad1aa90c982de992f42274206a244de5793ea70c20da786b9d748ceea33f4b49395c73a9a3311e0ae457b8d5ef2e68d03b7d4df33e192949e32b7e8599afdee1bc36c8176b0e628b066a1f76807d89406fb3b4ce792b1effc5d8dd03bb3933cb8212df2165a8760fe6ec9311a62d4bda32950562bc463f171f43430b80a6851cb0cf3c272a91edff43134"}, @jumbo={0xc2, 0x4, 0x4}]}}}], 0x100}}, {{&(0x7f0000001000)={0xa, 0x4e24, 0x2, @empty, 0xd4}, 0x1c, &(0x7f00000010c0)=[{&(0x7f0000002ac0)="93f248713029c922223c7c00f3a23f993d58a3f06a860afdb33df7ede77fbdefe78d926412d805397ff9f1e2a3aa9012309d81c1c34741689d8a328ce873edbe38661b2b5333ed6d73d3841a9d30b52eb17cd91c64dcef44", 0x58}], 0x1, &(0x7f0000001100)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x1, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x4}, @pad1]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0xa3, 0x1, '\x00', [@ra={0x5, 0x2, 0xf01f}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xc}]}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000011c0)="5a854e2ae71b74ae54d74152f9513cf69cb7cd95f5", 0x15}, {&(0x7f0000001200)="76ba6a8348f69bc0aab575f8de66e04fdba09b59141cea17d0b25216d0f1c4a16a91c0d0f9c40a8e9db43c478bd7a2cc2ad1f159e13721546a2b02b0b3bcf73a5aebb11f7c983ce3ff967a5bbd523f31a8a4bbd2ab598f75ce91ad801a6ef4bc70960cd7b724183a0163112f9ca8190c9218378f00ccec4908bec5cf985bb4b117869e75fc68055ee2e253c370d1645eb6ca7d186806455442de109a0fae9e4f53a40f2d7a8b450a25334c54e7f60e74f960ca4689fe9f8db8f524d356c77ab32ef061e2427b84e7fd1344b62b19236c2a89d31bd8604858538ea02550c25b78e84ebdd096da653ab62eb27d9f8346cdacc27316babd2c", 0xf7}, {&(0x7f0000001300)="8cf16ec6720798c49a4ffa7f0b133f6aa1008aa93880bfb1549d9428a5e13b371368de6b6a9724bad47deba8bb1ccfb90cec14be0d870eeb0771b622747130941d441f20de9e0777b8830bd0337fe13a66b643f07418674d020ba6dc97abad31b1dc2f7af66981fed07f369ccb84a9ff49b8e86c3900af3209b5f69718496ea594b645627b3e4886d5ca2a11bd1e77b10846b9e2f2902e72ea257c18", 0x9c}, {&(0x7f00000013c0)="eb3be6b5b842948780eca054e40638f681784ef3b29f09d65ea2c26a71792c89e22333e2795b214dfe9a493f7be1423749085570d8893dfa7059fe6c75086c5aead17d1c464476a018f747ee5c7be68809bc51a12adfbf", 0x57}, {&(0x7f0000001440)="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", 0x27e}], 0x5, &(0x7f0000002680)=[@dstopts_2292={{0x80, 0x29, 0x4, {0x2b, 0xc, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @generic={0xeb, 0x4d, "527269231cf53f07c0ef9f1077b0f0fc694abf15d24446bc1fe252c911f603fcf0c432bfd82485b320429fdd90098db1930ae6e5c375d7b16573d4d4cb69821e2710a3c974e46e4242b6a6ca86"}, @hao={0xc9, 0x10, @loopback}]}}}, @tclass={{0x14, 0x29, 0x43, 0x10}}, @hopopts_2292={{0x180, 0x29, 0x36, {0x1, 0x2c, '\x00', [@generic={0x2, 0x85, "9513d77bf5f0a62d018ead3ccd0dfdffb31dece9cb0feb5f86ce006f9f2ee5986b0196d6f27dce1479dcf6b901a9dab786e93f7ab43afddeb944ceb22b94adecc60fcac7f844ba794dbc44a4f89febe22199c25cda944d7a54038b255f160ab531a2aa2ffffa015be91b6a6aa5407beffb630b4444b5be52d061a482605d3cb3cf6e6d405a"}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0xb6, "fa4d40c0316df668c24cc7ee498be5dab7c03e31842c2ca5ac6af789e7bc8082975be135670362e97875cf1f7b998176d1563e03201481d9357405113fbccc3c23029f3a2059ccd17eb147866204530bcb06f83721e3ca4bd3d5636b8b171b91b8ecfe2380a89501baac68e5d3d142f9273d97016ec549f9cf03dd399ecbcfec292d7130cc85615f4c46b904a189e7cc6411fa466c2e810ae5d0fd5d4bfb12f13c8ba5abdfad3137dba197cbbbc4401721e1f4a4c661"}, @calipso={0x7, 0x10, {0x2, 0x2, 0x0, 0xd, [0xfffffffffffffff1]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @rthdr={{0x28, 0x29, 0x39, {0x33, 0x2, 0x1, 0x0, 0x0, [@local]}}}], 0x270}}], 0x7, 0x400c404) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sendto$inet6(r0, &(0x7f0000000000)="05a84985", 0x4, 0x200000c0, 0x0, 0x0) 4.854416991s ago: executing program 2 (id=645): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x42, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000500)={[{@utf8no}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@uni_xlateno}, {@rodir}, {@fat=@debug}, {@shortname_lower}, {@uni_xlateno}, {@fat=@nfs_nostale_ro}, {@rodir}, {@fat=@gid}, {@fat=@showexec}, {@shortname_winnt}]}, 0x6, 0x2d8, &(0x7f0000001300)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) 4.670874417s ago: executing program 5 (id=646): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r4, 0x0) socket$tipc(0x1e, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x800) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ppoll(&(0x7f0000000100)=[{r5, 0x8284}, {0xffffffffffffffff, 0xd082}], 0x2, &(0x7f0000000140), &(0x7f00000002c0)={[0xfffffffffffff800]}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000956900000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000001400038008000240000000000800014000000000140000001100010073b1735e4bed43e2d07ddf724a906c1600f20000000000000000000a"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x70}}, 0x24040880) sendmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[{0x10, 0x108, 0x7ff}], 0x10}}], 0x2, 0x4044000) syz_emit_vhci(&(0x7f0000000f80)=ANY=[@ANYBLOB="02c8007801740101000bc22800070000003baa2aaffc0f515a2d42396661941db6bd3a4cde690a1f5ae875d8cb010669494dc800000c06050000dd0900ba030108000700040000010400064c04000e000900050830000008fffb01800202feff04090003f5040007000d00050100050100070205000501010501010102020007027c9d050101038108004845050079008d0a01ef02"], 0x17d) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) 4.628042594s ago: executing program 0 (id=647): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0000e900000000001c001a8018000580140006800800020000000000080001"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x7, 0x3, 0x10000, 0x721d, 0xffffffffffffffff, 0x5, '\x00', r4, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6c}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r7 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x170}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r7, 0x48e9, 0x0, 0x0, 0x0, 0x1e) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000300)="d8", 0x1}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 3.500853259s ago: executing program 4 (id=648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x40, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x16, 0x1}, {0x24}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) 3.160195653s ago: executing program 3 (id=649): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x400, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_genetlink_get_family_id$batadv(0x0, r0) r1 = socket$xdp(0x2c, 0x3, 0x0) close(r1) 3.016145424s ago: executing program 5 (id=650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x40, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x16, 0x1}, {0x24}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) 2.894593901s ago: executing program 0 (id=651): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000), 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.378303775s ago: executing program 4 (id=652): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x799d, 0x0, 0x0, 0x48000000, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) 2.113769149s ago: executing program 3 (id=653): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000180)={0x9, 0x8, 0x3, 0x7fff}) 1.306677125s ago: executing program 0 (id=654): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32=r4, @ANYRES32=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x799d, 0x0, 0x0, 0x48000000, 0x0, 0xfffffffe, 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0x22, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) 1.083635826s ago: executing program 5 (id=655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x40, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x16, 0x1}, {0x24}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) 1.07932901s ago: executing program 2 (id=656): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000480)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {}, {@compress_force}, {@nodiscard}, {@space_cache_v2}, {@clear_cache}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x67, 0x2d, 0x33, 0x74, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 844.04212ms ago: executing program 5 (id=657): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0], 0x48) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200800, &(0x7f0000000180), 0xfb, 0x5bb, &(0x7f0000000b40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = syz_open_procfs(0x0, &(0x7f00000012c0)='fdinfo/3\x00') preadv(r4, &(0x7f0000000640)=[{0x0}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r7], 0x20}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='hrtimer_start\x00', r9, 0x0, 0x1ced}, 0x18) fgetxattr(r2, &(0x7f0000000080)=@known='user.incfs.id\x00', &(0x7f0000000180)=""/113, 0x71) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='sit0\x00'}) 688.373537ms ago: executing program 4 (id=658): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32=r4, @ANYRES32=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x799d, 0x0, 0x0, 0x48000000, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) 0s ago: executing program 0 (id=659): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00d0867e65d443152ee691a70d225b73c01164645c70ff689f607da7a169dbbfebbeb349b043f54d088bcd11a44f2074aa41532279b5718bc4d89fe5010d6bf465008743337cddaefbc0f0293d06483bec82e15366358709c5d5c0049ff9dcb7ea7e855e3c24bc3b4173720476fb379ce25c0ea42027ba6a7d"], 0x1, 0x134, &(0x7f0000000940)="$eJzs2r9Kw1AUBvCjFoQ+glMhAauQ/1oHd0Fw8gkMbZJevPGWRJB2Kr6A4nAdHV3dRDcfIbNPoC9xJW1qbe5uC/1+yz30XL7eLGc6ViZSL84tor3xw/nXZibSVic46sZeHNLUKRG1yqJQ6tEmzcVvv1BjW7tgvFdnO5FnbzHjka9nAAAAAAAAAAAAAAAAAAAAAACsCeO7Kpp9KZ5jxiPvTzcfji5DzqMsn/1iUrWjQ/tP4ri8HyzktRtE5mR/h8mT27LvLvTNWdJuX4qN+v851+nAyYcji6VhEiXRle8HHffAdQ99Z5Ll1BPN++pNVKjXgb5PZL7M94k+XX2fiJrTo7HD5N1NPX3+/SjWrFBbK/EMFKtZ1OcH9bYD46OcH3ZX8N4/zg9togEsyU8AAAD//wxqOHo=") add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000200)="ea842c12b520d67376e047a0280d5996cdf8c47c0a7862208fa28238721715f9843bf980a2073b4d15aa2a20f2b787bdb44e8878d972756c76683f0630821b7e9f49acca8de20841bcc23f5e569960a5611bae", 0x53, 0xffffffffffffffff) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): on: batadv_slave_0 [ 39.436667][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.449626][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.452384][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.454830][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.462882][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.465424][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.468718][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.472042][ T6444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.486003][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.488796][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.491209][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.505567][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.511132][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.513771][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.516221][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.522960][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.526220][ T6444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.531193][ T569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.533250][ T569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.570235][ T6444] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.572497][ T6444] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.574563][ T6444] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.576780][ T6444] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.671641][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.680464][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.786562][ T569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.810236][ T569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.846036][ T249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.848764][ T249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.856096][ T6532] loop0: detected capacity change from 0 to 32768 [ 39.890743][ T6532] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1 (6532) [ 39.942221][ T6532] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 39.945743][ T6532] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 39.947953][ T6532] BTRFS info (device loop0): using free-space-tree [ 39.972081][ T6540] loop3: detected capacity change from 0 to 512 [ 40.025563][ T6534] loop1: detected capacity change from 0 to 32768 [ 40.041413][ T6540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.069950][ T6534] syz.1.2: attempt to access beyond end of device [ 40.069950][ T6534] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 40.107496][ T6534] lbmIODone: I/O error in JFS log [ 40.118800][ T6534] *** Log Format Error ! *** [ 40.120288][ T6534] lmLogInit: exit(-22) [ 40.121388][ T6534] lmLogOpen: exit(-22) [ 40.278006][ T6536] loop2: detected capacity change from 0 to 40427 [ 40.281835][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.303974][ T6536] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 40.306066][ T6536] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 40.349211][ T6536] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.405422][ T6571] loop3: detected capacity change from 0 to 512 [ 40.422997][ T6536] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 40.424934][ T6536] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 40.429698][ T6571] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.7: corrupted in-inode xattr: invalid ea_ino [ 40.440286][ T6571] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.7: couldn't read orphan inode 15 (err -117) [ 40.464293][ T6571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.532418][ T6559] loop4: detected capacity change from 0 to 40427 [ 40.533764][ T6454] syz-executor: attempt to access beyond end of device [ 40.533764][ T6454] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 40.560098][ T6559] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff [ 40.563849][ T6454] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 40.565686][ T6454] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 40.577838][ T6559] F2FS-fs (loop4): invalid crc value [ 40.581017][ T6559] F2FS-fs (loop4): Found nat_bits in checkpoint [ 40.599227][ T6453] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 40.615963][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.641797][ T6559] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 40.709684][ T6444] syz-executor: attempt to access beyond end of device [ 40.709684][ T6444] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 40.720126][ T6444] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 40.898244][ T6460] Bluetooth: hci0: command tx timeout [ 40.899751][ T6460] Bluetooth: hci1: command tx timeout [ 40.901141][ T6460] Bluetooth: hci3: command tx timeout [ 40.902396][ T6460] Bluetooth: hci2: command tx timeout [ 40.968504][ T6460] Bluetooth: hci4: command tx timeout [ 41.199731][ T6573] loop1: detected capacity change from 0 to 32768 [ 41.284343][ T6573] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 41.294774][ T831] (kworker/u8:11,831,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 41.328709][ T6582] loop0: detected capacity change from 0 to 32768 [ 41.455066][ T6580] loop3: detected capacity change from 0 to 32768 [ 41.474647][ T6445] ocfs2: Unmounting device (7,1) on (node local) [ 41.521422][ T6592] loop2: detected capacity change from 0 to 32768 [ 41.533574][ T6582] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow,no_data_io [ 41.548409][ T6582] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 41.550653][ T6582] bcachefs (loop0): Version upgrade required: [ 41.550653][ T6582] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 41.550653][ T6582] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 41.550653][ T6582] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 41.579442][ T6582] bcachefs (loop0): dropping and reconstructing all alloc info [ 41.628260][ T6586] loop4: detected capacity change from 0 to 32768 [ 41.630853][ T6582] bcachefs (loop0): accounting_read... [ 41.656581][ T6580] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 41.664956][ T6614] loop1: detected capacity change from 0 to 2048 [ 41.667268][ T6614] ======================================================= [ 41.667268][ T6614] WARNING: The mand mount option has been deprecated and [ 41.667268][ T6614] and is ignored by this kernel. Remove the mand [ 41.667268][ T6614] option from the mount to silence this warning. [ 41.667268][ T6614] ======================================================= [ 41.676800][ T6580] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 41.688739][ T6582] done [ 41.689490][ T6582] bcachefs (loop0): alloc_read... done [ 41.690924][ T6582] bcachefs (loop0): stripes_read... done [ 41.692374][ T6582] bcachefs (loop0): snapshots_read... done [ 41.694442][ T6582] bcachefs (loop0): done starting filesystem [ 41.695147][ T6586] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 41.755751][ T6614] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 41.771804][ T6453] bcachefs (loop0): shutting down [ 41.789665][ T6453] bcachefs (loop0): shutdown complete [ 41.861774][ T6620] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 41.864619][ T6614] syz.1.15: attempt to access beyond end of device [ 41.864619][ T6614] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 41.883175][ T6622] loop2: detected capacity change from 0 to 512 [ 41.900808][ T6586] XFS (loop4): Starting recovery (logdev: internal) [ 41.943209][ T6586] XFS (loop4): Ending recovery (logdev: internal) [ 41.944028][ T6622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.001479][ T6454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.021478][ T6444] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 42.156274][ T6580] bcachefs: bch2_fs_get_tree() error: EINVAL [ 42.163259][ T6634] mmap: +}[@ (6634) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.207382][ T6636] loop4: detected capacity change from 0 to 128 [ 42.512661][ T6638] hub 9-0:1.0: USB hub found [ 42.514524][ T6638] hub 9-0:1.0: 8 ports detected [ 42.998169][ T6460] Bluetooth: hci2: command tx timeout [ 42.999644][ T6460] Bluetooth: hci3: command tx timeout [ 43.001003][ T6460] Bluetooth: hci1: command tx timeout [ 43.002308][ T6460] Bluetooth: hci0: command tx timeout [ 43.052654][ T6446] Bluetooth: hci4: command tx timeout [ 43.105231][ T6643] loop2: detected capacity change from 0 to 256 [ 43.135230][ T6643] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.145254][ T6643] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 43.166264][ T6643] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 43.175133][ T6633] loop1: detected capacity change from 0 to 32768 [ 43.217468][ T101] ERROR: (device loop1): diUpdatePMap: the inode is not allocated in the working map [ 43.217468][ T101] [ 43.244847][ T101] ERROR: (device loop1): remounting filesystem as read-only [ 43.307309][ T6651] loop2: detected capacity change from 0 to 512 [ 43.376330][ T6651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.441220][ T6454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.452581][ T6645] loop4: detected capacity change from 0 to 32768 [ 43.497754][ T6655] loop2: detected capacity change from 0 to 256 [ 43.511534][ T6655] exfat: Deprecated parameter 'namecase' [ 43.527796][ T6655] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 43.747833][ T6645] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 43.766532][ T6649] loop3: detected capacity change from 0 to 32768 [ 43.774018][ T6645] bcachefs (loop4): initializing new filesystem [ 43.777677][ T6645] bcachefs (loop4): going read-write [ 43.796774][ T6649] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 43.885552][ T6662] loop1: detected capacity change from 0 to 32768 [ 43.888531][ T6645] bcachefs (loop4): marking superblocks [ 43.905574][ T6645] bcachefs (loop4): initializing freespace [ 43.914926][ T6645] bcachefs (loop4): done initializing freespace [ 43.933817][ T6645] bcachefs (loop4): reading snapshots table [ 43.955277][ T6645] bcachefs (loop4): reading snapshots done [ 43.990632][ T6662] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 43.993053][ T6662] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 43.993511][ T6649] XFS (loop3): Ending clean mount [ 44.027308][ T6687] loop2: detected capacity change from 0 to 1764 [ 44.042964][ T6645] bcachefs (loop4): done starting filesystem [ 44.047965][ T6649] XFS (loop3): Quotacheck needed: Please wait. [ 44.052600][ T6687] iso9660: Bad value for 'dmode' [ 44.074765][ T6662] bcachefs: bch2_fs_get_tree() error: EINVAL [ 44.137526][ T6649] XFS (loop3): Quotacheck: Done. [ 44.155691][ T6444] bcachefs (loop4): shutting down [ 44.157041][ T6444] bcachefs (loop4): going read-only [ 44.170204][ T6444] bcachefs (loop4): finished waiting for writes to stop [ 44.358489][ T6444] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 44.403081][ T6444] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 44.544553][ T6697] hub 9-0:1.0: USB hub found [ 44.546411][ T6697] hub 9-0:1.0: 8 ports detected [ 45.050295][ T6446] Bluetooth: hci0: command tx timeout [ 45.052126][ T6446] Bluetooth: hci1: command tx timeout [ 45.052801][ T6444] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 45.054047][ T6446] Bluetooth: hci3: command tx timeout [ 45.056759][ T6444] bcachefs (loop4): marking filesystem clean [ 45.057930][ T6460] Bluetooth: hci2: command tx timeout [ 45.073624][ T6684] loop0: detected capacity change from 0 to 32768 [ 45.128752][ T54] Bluetooth: hci4: command tx timeout [ 45.131188][ T6444] bcachefs (loop4): shutdown complete [ 45.164209][ T6702] loop2: detected capacity change from 0 to 1024 [ 45.175347][ T6450] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 45.202584][ T6702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.259290][ T6706] loop0: detected capacity change from 0 to 2048 [ 45.262180][ T6454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.297357][ T6710] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 45.313191][ T6709] loop1: detected capacity change from 0 to 512 [ 45.409421][ T6709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.429050][ T6445] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.514806][ T6717] loop3: detected capacity change from 0 to 2048 [ 45.523043][ T6717] EXT4-fs: Ignoring removed bh option [ 45.551164][ T6717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.613660][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.788590][ T6712] loop2: detected capacity change from 0 to 32768 [ 45.806920][ T6712] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 45.826245][ T6712] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 45.894391][ T6732] loop3: detected capacity change from 0 to 8192 [ 45.956592][ T6732] loop3: p1 p2 p3 [ 45.957758][ T6732] loop3: partition table partially beyond EOD, truncated [ 45.968331][ T6732] loop3: p1 start 51379968 is beyond EOD, truncated [ 45.981514][ T6724] loop0: detected capacity change from 0 to 32768 [ 45.983783][ T6732] loop3: p3 size 100663552 extends beyond EOD, truncated [ 45.990408][ T6724] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.44 (6724) [ 46.009881][ T6724] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 46.016110][ T6454] ocfs2: Unmounting device (7,2) on (node local) [ 46.030284][ T6724] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 46.032522][ T6724] BTRFS info (device loop0): disk space caching is enabled [ 46.034529][ T6724] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 46.097262][ T6726] loop1: detected capacity change from 0 to 32768 [ 46.137537][ T6724] BTRFS info (device loop0): rebuilding free space tree [ 46.153194][ T6726] [ 46.153194][ T6726] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 46.153194][ T6726] [ 46.181552][ T6749] loop2: detected capacity change from 0 to 64 [ 46.187204][ T6724] BTRFS info (device loop0): disabling free space tree [ 46.194358][ T6724] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 46.196927][ T6724] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 46.204765][ T657] ERROR: (device loop1): diWrite: ixpxd invalid [ 46.204765][ T657] [ 46.222812][ T657] ERROR: (device loop1): txAbort: [ 46.222812][ T657] [ 46.224717][ T657] jfs_write_inode: jfs_commit_inode failed! [ 46.226508][ T6445] [ 46.226508][ T6445] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 46.226508][ T6445] [ 46.253644][ T6445] [ 46.253644][ T6445] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 46.253644][ T6445] [ 46.373964][ T6754] loop2: detected capacity change from 0 to 256 [ 46.510715][ T6453] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 46.589558][ T6756] loop2: detected capacity change from 0 to 64 [ 46.663730][ T6752] loop1: detected capacity change from 0 to 32768 [ 46.726076][ T6760] loop3: detected capacity change from 0 to 4096 [ 46.803697][ T6760] ntfs3(loop3): failed to convert "0080" to cp869 [ 46.832005][ T6760] ntfs3(loop3): failed to convert name for inode 1e. [ 46.834309][ T6760] ntfs3(loop3): ino=1f, mi_enum_attr [ 46.838480][ T6760] ntfs3(loop3): ino=1f, mi_enum_attr [ 46.855454][ T6562] udevd[6562]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 46.947838][ T6772] loop4: detected capacity change from 0 to 64 [ 47.103707][ T6779] loop2: detected capacity change from 0 to 1024 [ 47.146534][ T6779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.253394][ T6779] EXT4-fs error (device loop2): __ext4_remount:6738: comm syz.2.60: Abort forced by user [ 47.256965][ T6779] EXT4-fs (loop2): Remounting filesystem read-only [ 47.260043][ T6779] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 47.282502][ T6787] loop4: detected capacity change from 0 to 256 [ 47.331327][ T6787] FAT-fs (loop4): Directory bread(block 64) failed [ 47.333193][ T6787] FAT-fs (loop4): Directory bread(block 65) failed [ 47.334818][ T6787] FAT-fs (loop4): Directory bread(block 66) failed [ 47.336488][ T6787] FAT-fs (loop4): Directory bread(block 67) failed [ 47.338040][ T6787] FAT-fs (loop4): Directory bread(block 68) failed [ 47.358967][ T6454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.367161][ T6787] FAT-fs (loop4): Directory bread(block 69) failed [ 47.387840][ T6777] loop1: detected capacity change from 0 to 32768 [ 47.390818][ T6787] FAT-fs (loop4): Directory bread(block 70) failed [ 47.392917][ T6787] FAT-fs (loop4): Directory bread(block 71) failed [ 47.394595][ T6787] FAT-fs (loop4): Directory bread(block 72) failed [ 47.396258][ T6787] FAT-fs (loop4): Directory bread(block 73) failed [ 47.409666][ T6777] XFS: ikeep mount option is deprecated. [ 47.413252][ T6777] XFS: noikeep mount option is deprecated. [ 47.434218][ T6777] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 47.465844][ T6775] loop3: detected capacity change from 0 to 32768 [ 47.484755][ T6777] XFS (loop1): Ending clean mount [ 47.490306][ T6777] XFS (loop1): Quotacheck needed: Please wait. [ 47.522966][ T6777] XFS (loop1): Quotacheck: Done. [ 47.541256][ T6775] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 47.542365][ T6777] XFS: ikeep mount option is deprecated. [ 47.543810][ T6775] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 47.601976][ T6775] XFS (loop3): Ending clean mount [ 47.615833][ T6775] XFS (loop3): Quotacheck needed: Please wait. [ 47.642952][ T6445] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 47.669709][ T6775] XFS (loop3): Quotacheck: Done. [ 47.763672][ T6450] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 47.838010][ T6813] loop4: detected capacity change from 0 to 256 [ 47.855858][ T6813] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.865979][ T6813] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 47.900862][ T6813] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 48.060166][ T6807] loop0: detected capacity change from 0 to 32768 [ 48.288644][ T6790] loop2: detected capacity change from 0 to 65536 [ 48.301699][ T6809] loop1: detected capacity change from 0 to 32768 [ 48.355364][ T6790] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 48.359031][ T6807] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 48.388306][ T6807] bcachefs (loop0): initializing new filesystem [ 48.397172][ T6807] bcachefs (loop0): going read-write [ 48.428413][ T6807] bcachefs (loop0): marking superblocks [ 48.462427][ T6790] XFS (loop2): Ending clean mount [ 48.464634][ T6790] XFS (loop2): Quotacheck needed: Please wait. [ 48.515092][ T6807] bcachefs (loop0): initializing freespace [ 48.515173][ T6790] XFS (loop2): Quotacheck: Done. [ 48.527318][ T6807] bcachefs (loop0): done initializing freespace [ 48.571248][ T6807] bcachefs (loop0): reading snapshots table [ 48.572773][ T6807] bcachefs (loop0): reading snapshots done [ 48.585521][ T6454] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 48.651707][ T6807] bcachefs (loop0): done starting filesystem [ 48.743693][ T6453] bcachefs (loop0): shutting down [ 48.752827][ T6453] bcachefs (loop0): going read-only [ 48.754273][ T6453] bcachefs (loop0): finished waiting for writes to stop [ 48.786509][ T6844] loop4: detected capacity change from 0 to 32768 [ 48.792573][ T6453] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 48.801404][ T6844] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.75 (6844) [ 48.818300][ T6844] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 48.820824][ T6844] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 48.823094][ T6844] BTRFS info (device loop4): disk space caching is enabled [ 48.824858][ T6844] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 48.833767][ T6822] loop3: detected capacity change from 0 to 40427 [ 48.843473][ T6453] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 48.851313][ T6822] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 48.854104][ T6453] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 48.859032][ T6453] bcachefs (loop0): marking filesystem clean [ 48.862247][ T6822] F2FS-fs (loop3): Image doesn't support compression [ 48.863991][ T6822] F2FS-fs (loop3): Image doesn't support compression [ 48.889872][ T6822] F2FS-fs (loop3): invalid crc value [ 48.895065][ T6822] F2FS-fs (loop3): Found nat_bits in checkpoint [ 48.898525][ T6453] bcachefs (loop0): shutdown complete [ 48.910740][ T6844] BTRFS info (device loop4): rebuilding free space tree [ 48.927779][ T6844] BTRFS info (device loop4): disabling free space tree [ 48.930120][ T6844] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 48.934814][ T6844] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 48.947088][ T6822] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 49.016265][ T6844] BTRFS info (device loop4): balance: start -sprofiles=NONE,usage=0..0,drange=18446744073709551614..7,limit=12..10 [ 49.049075][ T6844] BTRFS info (device loop4): balance: ended with status: 0 [ 49.073533][ T6450] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x434/0x1b1c [ 49.076496][ T6871] loop2: detected capacity change from 0 to 2048 [ 49.080019][ T6450] F2FS-fs (loop3): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 49.094802][ T6444] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 49.117543][ T6871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.174053][ T6454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.224093][ T6875] loop4: detected capacity change from 0 to 1024 [ 49.259921][ T6875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.292532][ T6875] EXT4-fs error (device loop4): __ext4_new_inode:1071: comm syz.4.80: reserved inode found cleared - inode=1 [ 49.382281][ T6444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.484714][ T6892] loop4: detected capacity change from 0 to 256 [ 49.493144][ T6892] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.495996][ T6892] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 49.569101][ T6892] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 49.576155][ T6891] loop1: detected capacity change from 0 to 4096 [ 49.597604][ T6895] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 49.719653][ T6897] loop4: detected capacity change from 0 to 256 [ 49.776367][ T6897] FAT-fs (loop4): Directory bread(block 64) failed [ 49.798207][ T6897] FAT-fs (loop4): Directory bread(block 65) failed [ 49.800014][ T6897] FAT-fs (loop4): Directory bread(block 66) failed [ 49.801699][ T6897] FAT-fs (loop4): Directory bread(block 67) failed [ 49.803367][ T6897] FAT-fs (loop4): Directory bread(block 68) failed [ 49.805032][ T6897] FAT-fs (loop4): Directory bread(block 69) failed [ 49.806706][ T6897] FAT-fs (loop4): Directory bread(block 70) failed [ 49.825187][ T6894] loop3: detected capacity change from 0 to 32768 [ 49.843109][ T6894] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.87 (6894) [ 49.862247][ T6897] FAT-fs (loop4): Directory bread(block 71) failed [ 49.863993][ T6897] FAT-fs (loop4): Directory bread(block 72) failed [ 49.868300][ T6897] FAT-fs (loop4): Directory bread(block 73) failed [ 49.871815][ T6894] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 49.886334][ T6894] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 49.894760][ T6894] BTRFS info (device loop3): disk space caching is enabled [ 49.908878][ T6894] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 49.945122][ T6899] loop1: detected capacity change from 0 to 4096 [ 49.960213][ T6899] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 49.963171][ T6899] ntfs3(loop1): It is recommened to use chkdsk. [ 49.995457][ T6889] loop2: detected capacity change from 0 to 40427 [ 50.000447][ T6889] F2FS-fs (loop2): heap/no_heap options were deprecated [ 50.007076][ T6889] F2FS-fs (loop2): invalid crc value [ 50.023101][ T6916] loop4: detected capacity change from 0 to 64 [ 50.026249][ T6889] F2FS-fs (loop2): Found nat_bits in checkpoint [ 50.040338][ T6894] BTRFS info (device loop3): rebuilding free space tree [ 50.047383][ T6889] F2FS-fs (loop2): Start checkpoint disabled! [ 50.068694][ T6894] BTRFS info (device loop3): disabling free space tree [ 50.076341][ T6894] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 50.083065][ T6889] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 50.089399][ T6894] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 50.168670][ T6894] BTRFS info (device loop3): balance: start -f -sprofiles=data|system|metadata|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0x200000000000000,usage=72057594037927940,devid=0,drange=8388611..9223372036854808576 [ 50.174168][ T6894] BTRFS info (device loop3): balance: ended with status: 0 [ 50.177760][ T6923] loop1: detected capacity change from 0 to 256 [ 50.189683][ T6922] loop4: detected capacity change from 0 to 512 [ 50.240963][ T6922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.245371][ T6450] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 50.294513][ T6444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.346196][ T6929] loop4: detected capacity change from 0 to 256 [ 50.380680][ T6929] FAT-fs (loop4): Directory bread(block 64) failed [ 50.382450][ T6929] FAT-fs (loop4): Directory bread(block 65) failed [ 50.384112][ T6929] FAT-fs (loop4): Directory bread(block 66) failed [ 50.398263][ T6929] FAT-fs (loop4): Directory bread(block 67) failed [ 50.400067][ T6929] FAT-fs (loop4): Directory bread(block 68) failed [ 50.401774][ T6929] FAT-fs (loop4): Directory bread(block 69) failed [ 50.403482][ T6929] FAT-fs (loop4): Directory bread(block 70) failed [ 50.405118][ T6929] FAT-fs (loop4): Directory bread(block 71) failed [ 50.406845][ T6929] FAT-fs (loop4): Directory bread(block 72) failed [ 50.418249][ T6929] FAT-fs (loop4): Directory bread(block 73) failed [ 50.504074][ T6929] syz.4.94: attempt to access beyond end of device [ 50.504074][ T6929] loop4: rw=1, sector=1224, nr_sectors = 96 limit=256 [ 50.507538][ T6929] syz.4.94: attempt to access beyond end of device [ 50.507538][ T6929] loop4: rw=1, sector=1320, nr_sectors = 4 limit=256 [ 50.531409][ T6929] Buffer I/O error on dev loop4, logical block 330, lost async page write [ 50.561378][ T831] kworker/u8:11: attempt to access beyond end of device [ 50.561378][ T831] loop4: rw=1, sector=1224, nr_sectors = 8 limit=256 [ 50.567252][ T831] kworker/u8:11: attempt to access beyond end of device [ 50.567252][ T831] loop4: rw=1, sector=1320, nr_sectors = 4 limit=256 [ 50.639411][ T569] kworker/u8:6: attempt to access beyond end of device [ 50.639411][ T569] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 50.652468][ T569] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 50.652699][ T6940] loop3: detected capacity change from 0 to 256 [ 50.693011][ T6940] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 50.696549][ T6940] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 50.772433][ T6940] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 50.776783][ T6940] exFAT-fs (loop3): Filesystem has been set read-only [ 50.784420][ T6940] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 50.841046][ T6945] loop4: detected capacity change from 0 to 256 [ 50.886520][ T6945] FAT-fs (loop4): Directory bread(block 64) failed [ 50.896890][ T6945] FAT-fs (loop4): Directory bread(block 65) failed [ 50.904437][ T6945] FAT-fs (loop4): Directory bread(block 66) failed [ 50.912919][ T6945] FAT-fs (loop4): Directory bread(block 67) failed [ 50.916585][ T6945] FAT-fs (loop4): Directory bread(block 68) failed [ 50.925093][ T6945] FAT-fs (loop4): Directory bread(block 69) failed [ 50.930125][ T6945] FAT-fs (loop4): Directory bread(block 70) failed [ 50.936785][ T6945] FAT-fs (loop4): Directory bread(block 71) failed [ 50.949360][ T6945] FAT-fs (loop4): Directory bread(block 72) failed [ 50.953375][ T6945] FAT-fs (loop4): Directory bread(block 73) failed [ 51.110327][ T6953] loop4: detected capacity change from 0 to 256 [ 51.214407][ T6938] loop0: detected capacity change from 0 to 40427 [ 51.239229][ T6938] F2FS-fs (loop0): invalid crc value [ 51.256675][ T6938] F2FS-fs (loop0): Found nat_bits in checkpoint [ 51.305099][ T6957] loop4: detected capacity change from 0 to 512 [ 51.314394][ T6938] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 51.366311][ T6957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.453723][ T6444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.639948][ T6966] loop3: detected capacity change from 0 to 32768 [ 51.707461][ T6979] loop0: detected capacity change from 0 to 256 [ 51.729588][ T6979] exfat: Deprecated parameter 'namecase' [ 51.759989][ T6979] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 51.795055][ T6966] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,journal_flush_disabled,recovery_pass_last=set_may_go_rw,nojournal_transaction_names,reconstruct_alloc [ 51.804312][ T6987] loop1: detected capacity change from 0 to 256 [ 51.812595][ T6966] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 51.814700][ T6966] bcachefs (loop3): Version upgrade required: [ 51.814700][ T6966] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 51.814700][ T6966] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 51.814700][ T6966] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 51.818528][ T6949] loop2: detected capacity change from 0 to 65536 [ 51.848727][ T6966] bcachefs (loop3): dropping and reconstructing all alloc info [ 51.870236][ T6966] bcachefs (loop3): accounting_read... [ 51.877148][ T6987] FAT-fs (loop1): Directory bread(block 64) failed [ 51.894690][ T6987] FAT-fs (loop1): Directory bread(block 65) failed [ 51.896505][ T6987] FAT-fs (loop1): Directory bread(block 66) failed [ 51.901854][ T6987] FAT-fs (loop1): Directory bread(block 67) failed [ 51.908418][ T6966] done [ 51.909154][ T6966] bcachefs (loop3): alloc_read... done [ 51.910614][ T6966] bcachefs (loop3): stripes_read... done [ 51.912006][ T6966] bcachefs (loop3): snapshots_read... done [ 51.913521][ T6966] bcachefs (loop3): check_allocations... [ 51.915031][ T6987] FAT-fs (loop1): Directory bread(block 68) failed [ 51.918022][ T6987] FAT-fs (loop1): Directory bread(block 69) failed [ 51.930889][ T6949] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 51.948830][ T6987] FAT-fs (loop1): Directory bread(block 70) failed [ 51.950558][ T6987] FAT-fs (loop1): Directory bread(block 71) failed [ 51.952148][ T6987] FAT-fs (loop1): Directory bread(block 72) failed [ 51.953771][ T6987] FAT-fs (loop1): Directory bread(block 73) failed [ 51.973358][ T6966] done [ 52.011021][ T6966] bcachefs (loop3): going read-write [ 52.013068][ T6949] XFS (loop2): Ending clean mount [ 52.016618][ T6949] XFS (loop2): Quotacheck needed: Please wait. [ 52.017300][ T6984] loop4: detected capacity change from 0 to 32768 [ 52.030065][ T6966] bcachefs (loop3): done starting filesystem [ 52.085381][ T6949] XFS (loop2): Quotacheck: Done. [ 52.102147][ T6984] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 52.114059][ T6984] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 52.149382][ T6450] bcachefs (loop3): shutting down [ 52.150746][ T6450] bcachefs (loop3): going read-only [ 52.152046][ T6450] bcachefs (loop3): finished waiting for writes to stop [ 52.175264][ T6454] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 52.198669][ T6450] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 52.201026][ T6450] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 52.225339][ T6450] bcachefs (loop3): unclean shutdown complete, journal seq 11 [ 52.238623][ T6450] bcachefs (loop3): done going read-only, filesystem not clean [ 52.268678][ T6984] bcachefs: bch2_fs_get_tree() error: EINVAL [ 52.301102][ T7015] loop1: detected capacity change from 0 to 512 [ 52.315106][ T6450] bcachefs (loop3): shutdown complete [ 52.324700][ T7015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.382919][ T6445] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.656398][ T7030] loop1: detected capacity change from 0 to 256 [ 52.666578][ T7030] exfat: Deprecated parameter 'namecase' [ 52.703353][ T7030] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 53.219235][ T7044] loop0: detected capacity change from 0 to 32768 [ 53.230281][ T7044] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 53.257116][ T7063] loop4: detected capacity change from 0 to 64 [ 53.274374][ T7044] XFS (loop0): Ending clean mount [ 53.283268][ T7044] XFS (loop0): Quotacheck needed: Please wait. [ 53.345578][ T7044] XFS (loop0): Quotacheck: Done. [ 53.388583][ T7066] loop2: detected capacity change from 0 to 256 [ 53.390532][ T7066] exfat: Deprecated parameter 'namecase' [ 53.400588][ T7068] loop1: detected capacity change from 0 to 64 [ 53.439208][ T7066] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 53.459254][ T6453] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 53.800104][ T7091] loop0: detected capacity change from 0 to 64 [ 53.937645][ T7099] loop4: detected capacity change from 0 to 64 [ 54.023347][ T7103] loop3: detected capacity change from 0 to 256 [ 54.025379][ T7103] exfat: Deprecated parameter 'namecase' [ 54.052219][ T7103] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 54.394047][ T7101] loop0: detected capacity change from 0 to 32768 [ 54.399698][ T7112] loop2: detected capacity change from 0 to 4096 [ 54.423707][ T7101] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 54.471680][ T7101] XFS (loop0): Ending clean mount [ 54.541002][ T7130] pim6reg1: entered promiscuous mode [ 54.542358][ T7130] pim6reg1: entered allmulticast mode [ 54.566937][ T6453] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 54.720306][ T7140] loop0: detected capacity change from 0 to 64 [ 55.171937][ T7147] loop0: detected capacity change from 0 to 32768 [ 55.273714][ T7147] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 55.279697][ T7147] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 55.281956][ T7147] bcachefs (loop0): Version upgrade required: [ 55.281956][ T7147] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 55.281956][ T7147] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 55.281956][ T7147] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 55.303982][ T7147] bcachefs (loop0): dropping and reconstructing all alloc info [ 55.313945][ T7147] bcachefs (loop0): accounting_read... done [ 55.349949][ T7147] bcachefs (loop0): alloc_read... done [ 55.351495][ T7147] bcachefs (loop0): stripes_read... done [ 55.352937][ T7147] bcachefs (loop0): snapshots_read... done [ 55.354443][ T7147] bcachefs (loop0): check_allocations... done [ 55.367785][ T7147] bcachefs (loop0): going read-write [ 55.373738][ T7147] bcachefs (loop0): done starting filesystem [ 55.403797][ T6453] bcachefs (loop0): shutting down [ 55.405099][ T6453] bcachefs (loop0): going read-only [ 55.406394][ T6453] bcachefs (loop0): finished waiting for writes to stop [ 55.439370][ T6453] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10 [ 55.441953][ T6453] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10 [ 55.452362][ T6453] bcachefs (loop0): unclean shutdown complete, journal seq 11 [ 55.454831][ T6453] bcachefs (loop0): done going read-only, filesystem not clean [ 55.466995][ T6453] bcachefs (loop0): shutdown complete [ 55.864531][ T7183] loop4: detected capacity change from 0 to 512 [ 55.881069][ T7183] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.177: corrupted in-inode xattr: invalid ea_ino [ 55.893319][ T7183] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.177: couldn't read orphan inode 15 (err -117) [ 55.897284][ T7183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.930803][ T6444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.097624][ T7193] loop4: detected capacity change from 0 to 256 [ 56.105215][ T7193] exfat: Deprecated parameter 'namecase' [ 56.132722][ T7193] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 64.501682][ T2368] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.503418][ T2368] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.238296][ T7161] pim6reg1: entered promiscuous mode [ 66.239791][ T7161] pim6reg1: entered allmulticast mode [ 67.594470][ T7230] loop0: detected capacity change from 0 to 32768 [ 67.601980][ T7230] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 67.623833][ T7230] XFS (loop0): Ending clean mount [ 68.111728][ T6453] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 69.626797][ T11] cfg80211: failed to load regulatory.db [ 70.395557][ T6460] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 70.399192][ T6460] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 70.403663][ T6460] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 70.409940][ T6460] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 70.412415][ T6460] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 70.414427][ T6460] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.499717][ T54] Bluetooth: hci5: command tx timeout [ 74.578951][ T54] Bluetooth: hci5: command tx timeout [ 76.648240][ T54] Bluetooth: hci5: command tx timeout [ 78.695927][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.204'. [ 78.728864][ T54] Bluetooth: hci5: command tx timeout [ 78.846090][ T7245] chnl_net:caif_netlink_parms(): no params data found [ 79.002228][ T7281] loop3: detected capacity change from 0 to 32768 [ 79.036386][ T7245] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.040522][ T7245] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.042419][ T7245] bridge_slave_0: entered allmulticast mode [ 79.053868][ T7245] bridge_slave_0: entered promiscuous mode [ 79.060793][ T7245] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.065163][ T7245] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.088284][ T7245] bridge_slave_1: entered allmulticast mode [ 79.090394][ T7245] bridge_slave_1: entered promiscuous mode [ 79.124183][ T7281] overlayfs: missing 'lowerdir' [ 79.282771][ T7245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.286516][ T7245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.367645][ T7300] loop2: detected capacity change from 0 to 64 [ 79.383812][ T7245] team0: Port device team_slave_0 added [ 79.393428][ T7245] team0: Port device team_slave_1 added [ 79.397286][ T7302] loop3: detected capacity change from 0 to 64 [ 79.452219][ T7245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.452686][ T7304] loop0: detected capacity change from 0 to 256 [ 79.453987][ T7245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.481732][ T7304] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 79.485609][ T7245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.492014][ T7304] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 79.500858][ T7245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.508472][ T7245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.536125][ T7245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.641447][ T7245] hsr_slave_0: entered promiscuous mode [ 79.650316][ T7245] hsr_slave_1: entered promiscuous mode [ 79.652078][ T7245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.653905][ T7245] Cannot create hsr debugfs directory [ 79.903886][ T7306] loop3: detected capacity change from 0 to 32768 [ 79.925430][ T7306] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.216 (7306) [ 79.938815][ T7306] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 79.941404][ T7306] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 79.943611][ T7306] BTRFS info (device loop3): disk space caching is enabled [ 79.945410][ T7306] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 80.060760][ T7337] loop0: detected capacity change from 0 to 64 [ 80.063611][ T7245] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.075754][ T7245] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.097289][ T7245] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.105917][ T7306] BTRFS info (device loop3): rebuilding free space tree [ 80.116175][ T7314] loop4: detected capacity change from 0 to 32768 [ 80.117633][ T7306] BTRFS info (device loop3): disabling free space tree [ 80.119986][ T7306] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 80.122555][ T7306] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 80.127425][ T7245] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.183945][ T7314] overlayfs: missing 'lowerdir' [ 80.222234][ T6450] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 80.310250][ T7346] loop0: detected capacity change from 0 to 256 [ 80.345385][ T7346] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 80.355337][ T7346] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 80.920001][ T7369] loop4: detected capacity change from 0 to 64 [ 81.215702][ T7374] loop4: detected capacity change from 0 to 32768 [ 81.220107][ T7374] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.237 (7374) [ 81.231365][ T7374] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 81.236862][ T7374] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 81.239366][ T7374] BTRFS info (device loop4): disk space caching is enabled [ 81.241314][ T7374] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 81.334234][ T7374] BTRFS info (device loop4): rebuilding free space tree [ 81.341543][ T7374] BTRFS info (device loop4): disabling free space tree [ 81.343321][ T7374] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 81.345871][ T7374] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 81.407970][ T6444] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 81.680753][ T7393] loop4: detected capacity change from 0 to 32768 [ 81.699974][ T7393] overlayfs: missing 'lowerdir' [ 81.822139][ T7395] loop4: detected capacity change from 0 to 256 [ 81.834663][ T7395] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 81.838720][ T7395] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 91.678707][ T7357] pim6reg1: entered promiscuous mode [ 91.680149][ T7357] pim6reg1: entered allmulticast mode [ 91.729297][ T7408] loop2: detected capacity change from 0 to 256 [ 91.766166][ T7408] FAT-fs (loop2): Directory bread(block 64) failed [ 91.769598][ T7408] FAT-fs (loop2): Directory bread(block 65) failed [ 91.775305][ T7408] FAT-fs (loop2): Directory bread(block 66) failed [ 91.777155][ T7408] FAT-fs (loop2): Directory bread(block 67) failed [ 91.779822][ T7408] FAT-fs (loop2): Directory bread(block 68) failed [ 91.781594][ T7408] FAT-fs (loop2): Directory bread(block 69) failed [ 91.783334][ T7408] FAT-fs (loop2): Directory bread(block 70) failed [ 91.785110][ T7408] FAT-fs (loop2): Directory bread(block 71) failed [ 91.786804][ T7408] FAT-fs (loop2): Directory bread(block 72) failed [ 91.795283][ T7408] FAT-fs (loop2): Directory bread(block 73) failed [ 91.848409][ T7414] loop0: detected capacity change from 0 to 64 [ 91.872654][ T7245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.926135][ T7245] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.953726][ T7415] pim6reg1: entered promiscuous mode [ 91.955735][ T7415] pim6reg1: entered allmulticast mode [ 92.020962][ T7428] loop0: detected capacity change from 0 to 256 [ 92.031666][ T7428] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 92.034918][ T7428] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 92.083656][ T657] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.085547][ T657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.103116][ T805] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.105157][ T805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.174605][ T7245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.177462][ T7245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.355528][ T7245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.472338][ T7447] loop0: detected capacity change from 0 to 256 [ 92.515444][ T7424] loop2: detected capacity change from 0 to 32768 [ 92.523772][ T7447] FAT-fs (loop0): Directory bread(block 64) failed [ 92.528335][ T7447] FAT-fs (loop0): Directory bread(block 65) failed [ 92.530720][ T7447] FAT-fs (loop0): Directory bread(block 66) failed [ 92.532550][ T7447] FAT-fs (loop0): Directory bread(block 67) failed [ 92.539537][ T7424] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.247 (7424) [ 92.543424][ T7447] FAT-fs (loop0): Directory bread(block 68) failed [ 92.545378][ T7447] FAT-fs (loop0): Directory bread(block 69) failed [ 92.560358][ T7447] FAT-fs (loop0): Directory bread(block 70) failed [ 92.562525][ T7447] FAT-fs (loop0): Directory bread(block 71) failed [ 92.564361][ T7447] FAT-fs (loop0): Directory bread(block 72) failed [ 92.586692][ T7424] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.586776][ T7447] FAT-fs (loop0): Directory bread(block 73) failed [ 92.589680][ T7424] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 92.589711][ T7424] BTRFS info (device loop2): disk space caching is enabled [ 92.601022][ T7427] loop3: detected capacity change from 0 to 32768 [ 92.614349][ T7424] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 92.633717][ T7453] loop4: detected capacity change from 0 to 64 [ 92.634339][ T7427] overlayfs: missing 'workdir' [ 92.774974][ T7424] BTRFS info (device loop2): rebuilding free space tree [ 92.802622][ T7245] veth0_vlan: entered promiscuous mode [ 92.806853][ T7245] veth1_vlan: entered promiscuous mode [ 92.825709][ T7424] BTRFS info (device loop2): disabling free space tree [ 92.827618][ T7424] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 92.842025][ T7424] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 92.884540][ T7477] loop0: detected capacity change from 0 to 256 [ 92.903034][ T7477] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 92.917591][ T7245] veth0_macvtap: entered promiscuous mode [ 92.921771][ T7477] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 92.943914][ T7245] veth1_macvtap: entered promiscuous mode [ 92.962378][ T7479] pim6reg1: entered promiscuous mode [ 92.964254][ T7479] pim6reg1: entered allmulticast mode [ 92.976240][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.988255][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.002058][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.008488][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.010990][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.013710][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.016227][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.021733][ T6454] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.040348][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.046065][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.065538][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.069594][ T7245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.143303][ T7489] kAFS: No cell specified [ 93.221177][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.223934][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.257146][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.260258][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.262888][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.265620][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.279663][ T7494] loop4: detected capacity change from 0 to 64 [ 93.288739][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.291407][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.293800][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.296746][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.320677][ T7245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.333796][ T7245] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.336071][ T7245] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.368387][ T7245] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.370713][ T7245] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.623268][ T54] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 93.627012][ T54] Bluetooth: Wrong link type (-22) [ 93.631277][ T54] Bluetooth: hci2: link tx timeout [ 93.633390][ T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 93.777948][ T831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.785568][ T831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.832581][ T31] audit: type=1326 audit(93.820:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.4.271" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8035ad28 code=0x0 [ 93.844163][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.847435][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.848589][ T7485] loop0: detected capacity change from 0 to 32768 [ 93.895479][ T7485] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 93.942972][ T7492] loop2: detected capacity change from 0 to 32768 [ 93.966777][ T7485] XFS (loop0): Ending clean mount [ 93.975404][ T7492] overlayfs: missing 'workdir' [ 94.133169][ T7514] pim6reg1: entered promiscuous mode [ 94.137087][ T7514] pim6reg1: entered allmulticast mode [ 94.758314][ T54] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 94.760470][ T54] Bluetooth: Wrong link type (-22) [ 94.765359][ T54] Bluetooth: Unknown BR/EDR signaling command 0xff [ 94.767440][ T54] Bluetooth: Wrong link type (-22) [ 94.773974][ T54] Bluetooth: hci2: link tx timeout [ 94.775524][ T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 95.224155][ T7526] loop5: detected capacity change from 0 to 256 [ 95.266886][ T7526] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 95.288047][ T7526] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 95.318366][ T7528] overlayfs: failed to resolve './file0/../file0': -2 [ 95.321870][ T7530] kAFS: No cell specified [ 95.443014][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.277'. [ 95.689435][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 95.699988][ T7538] loop4: detected capacity change from 0 to 2048 [ 95.722786][ T7538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.774701][ T7538] fs-verity: sha512 using implementation "sha512-arm64" [ 96.698815][ T7551] netlink: 24 bytes leftover after parsing attributes in process `syz.5.282'. [ 96.934718][ T7549] loop3: detected capacity change from 0 to 32768 [ 96.954459][ T6453] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 96.993673][ T7549] overlayfs: missing 'workdir' [ 97.006233][ T6460] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 97.008893][ T6460] Bluetooth: Wrong link type (-22) [ 97.116358][ T7558] kAFS: No cell specified [ 97.157535][ T7562] loop2: detected capacity change from 0 to 256 [ 97.964414][ T6460] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 97.966224][ T6460] Bluetooth: Wrong link type (-22) [ 97.967630][ T6460] Bluetooth: Unknown BR/EDR signaling command 0xff [ 97.969315][ T6460] Bluetooth: Wrong link type (-22) [ 98.088879][ T7568] loop0: detected capacity change from 0 to 8 [ 98.103774][ T7562] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 98.106967][ T7562] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 98.119695][ T7568] SQUASHFS error: Failed to read block 0x4e8: -5 [ 98.121959][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.123687][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.125329][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.127099][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.129284][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.130915][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.132589][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.134285][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.136130][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.137776][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.139447][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.141041][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.142728][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.144426][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.146071][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.147687][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.149452][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.151012][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.152606][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.154287][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.155912][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.157581][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.159473][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.161146][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.162870][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.164393][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.165962][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.167607][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.169978][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.171893][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.173457][ T7568] SQUASHFS error: Failed to read block 0x4de: -5 [ 98.237630][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.289'. [ 98.340347][ T7574] overlayfs: failed to resolve './file0/../file0': -2 [ 98.476460][ T7579] netlink: 24 bytes leftover after parsing attributes in process `syz.5.293'. [ 98.859175][ T6444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.197750][ T7584] loop5: detected capacity change from 0 to 32768 [ 99.227614][ T7598] netlink: 44 bytes leftover after parsing attributes in process `syz.4.298'. [ 99.233412][ T7584] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 99.297504][ T7605] netlink: 104 bytes leftover after parsing attributes in process `syz.2.299'. [ 99.306472][ T7584] XFS (loop5): Ending clean mount [ 100.098206][ T54] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 100.101183][ T54] Bluetooth: Wrong link type (-22) [ 100.106560][ T54] Bluetooth: hci3: link tx timeout [ 100.108758][ T54] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 100.747668][ T7245] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 101.169050][ T7625] loop2: detected capacity change from 0 to 512 [ 101.189839][ T6496] IPVS: starting estimator thread 0... [ 101.299734][ T7626] IPVS: using max 32 ests per chain, 76800 per kthread [ 101.314570][ T7625] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.318050][ T7625] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.364875][ T7625] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 101.370051][ T7625] EXT4-fs (loop2): 1 truncate cleaned up [ 101.374606][ T7625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.768007][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'. [ 101.776262][ T6454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.826936][ T7634] loop4: detected capacity change from 0 to 2048 [ 101.868612][ T7634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.171636][ T6460] Bluetooth: hci3: command 0x0406 tx timeout [ 102.876478][ T7645] loop2: detected capacity change from 0 to 8 [ 102.896286][ T7645] SQUASHFS error: Failed to read block 0x4e8: -5 [ 102.897811][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.899769][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.901400][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.903116][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.904712][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.906389][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.907888][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.909713][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.911301][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.912793][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.914325][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.915878][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.917347][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.919197][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.921721][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.923272][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.926413][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.928028][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.929632][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.931222][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.932729][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.934225][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.935873][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.937445][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.939094][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.940580][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.942164][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.943617][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.945179][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.946963][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.949659][ T7645] SQUASHFS error: Failed to read block 0x4de: -5 [ 103.036235][ T7648] loop5: detected capacity change from 0 to 1024 [ 103.048796][ T7648] hfsplus: Unknown parameter 'smGckfshat' [ 103.050374][ T7623] loop3: detected capacity change from 0 to 40427 [ 103.069347][ T7623] F2FS-fs (loop3): invalid crc value [ 103.110755][ T7623] F2FS-fs (loop3): Found nat_bits in checkpoint [ 103.183162][ T7623] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 103.710309][ T7657] loop5: detected capacity change from 0 to 32768 [ 103.872273][ T6450] syz-executor: attempt to access beyond end of device [ 103.872273][ T6450] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.879810][ T6450] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 103.883216][ T7657] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.312 (7657) [ 103.914118][ T7657] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 103.916588][ T7657] BTRFS info (device loop5): using crc32c (crc32c-arm64) checksum algorithm [ 103.924377][ T7657] BTRFS info (device loop5): disk space caching is enabled [ 103.926117][ T7657] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 104.046048][ T54] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 104.048460][ T54] Bluetooth: Wrong link type (-22) [ 104.201895][ T7657] BTRFS info (device loop5): rebuilding free space tree [ 104.242127][ T7657] BTRFS info (device loop5): disabling free space tree [ 104.259832][ T7657] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 104.274866][ T7657] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 104.523447][ T6444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.555618][ T7245] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 104.829574][ T7686] loop3: detected capacity change from 0 to 32768 [ 104.863263][ T7690] loop4: detected capacity change from 0 to 4096 [ 104.880823][ T7693] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 104.886770][ T7686] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 104.897550][ T7690] ntfs3: Unknown parameter 'syztnl1' [ 104.919142][ T7690] loop4: detected capacity change from 0 to 64 [ 104.930633][ T7693] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 104.952224][ T7690] hfs: Unknown parameter 'codepage ' [ 104.989274][ T7686] XFS (loop3): Ending clean mount [ 105.059081][ T7706] netlink: 44 bytes leftover after parsing attributes in process `syz.5.317'. [ 105.151519][ T7693] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 105.230046][ T7693] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.251396][ T7693] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.331787][ T7693] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 105.350152][ T7693] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.406508][ T7693] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 105.418306][ T7693] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 105.434486][ T7693] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 105.447742][ T7693] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 105.451484][ T7693] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 105.461605][ T7693] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 105.857613][ T7719] loop2: detected capacity change from 0 to 22 [ 105.869434][ T7719] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 105.898218][ T7719] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 105.935765][ T7719] Cannot find set identified by id 0 to match [ 105.981575][ T6450] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 106.030146][ T7719] process 'syz.2.321' launched './file2' with NULL argv: empty string added [ 106.842088][ T7725] loop4: detected capacity change from 0 to 40427 [ 106.850103][ T7725] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 106.856739][ T7725] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 106.864729][ T7725] F2FS-fs (loop4): Image doesn't support compression [ 106.868666][ T7725] F2FS-fs (loop4): invalid crc value [ 106.888313][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.939283][ T7727] loop3: detected capacity change from 0 to 32768 [ 107.058018][ T7725] F2FS-fs (loop4): Found nat_bits in checkpoint [ 107.078364][ T7727] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 107.098885][ T7744] loop2: detected capacity change from 0 to 2048 [ 107.108288][ T7725] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 107.110230][ T7727] XFS (loop3): Ending clean mount [ 107.117977][ T7725] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 107.151815][ T7725] syz.4.323: attempt to access beyond end of device [ 107.151815][ T7725] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 107.156227][ T7725] syz.4.323: attempt to access beyond end of device [ 107.156227][ T7725] loop4: rw=2049, sector=53288, nr_sectors = 16 limit=40427 [ 107.160031][ T7725] syz.4.323: attempt to access beyond end of device [ 107.160031][ T7725] loop4: rw=2049, sector=53312, nr_sectors = 16 limit=40427 [ 107.176439][ T7744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.368616][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 107.379007][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 107.399030][ T6444] syz-executor: attempt to access beyond end of device [ 107.399030][ T6444] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.402424][ T6444] F2FS-fs (loop4): Remounting filesystem read-only [ 107.441642][ T7735] loop0: detected capacity change from 0 to 40427 [ 107.445113][ T7735] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 107.446909][ T7735] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 107.498958][ T6460] Bluetooth: hci4: command 0x0c1a tx timeout [ 107.501410][ T54] Bluetooth: hci5: command 0x0c1a tx timeout [ 107.507872][ T7735] F2FS-fs (loop0): Image doesn't support compression [ 107.522283][ T7735] F2FS-fs (loop0): invalid crc value [ 107.565548][ T7735] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.583354][ T7735] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 107.608733][ T7735] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.625412][ T7735] syz.0.327: attempt to access beyond end of device [ 107.625412][ T7735] loop0: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 107.647463][ T6453] syz-executor: attempt to access beyond end of device [ 107.647463][ T6453] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.490363][ T6453] F2FS-fs (loop0): Remounting filesystem read-only [ 108.769203][ T6454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.849378][ T7764] loop5: detected capacity change from 0 to 512 [ 108.851964][ T7764] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 108.857716][ T7764] EXT4-fs (loop5): 1 truncate cleaned up [ 108.860430][ T7764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.911815][ T6450] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 108.928589][ T11] IPVS: starting estimator thread 0... [ 108.979077][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.048506][ T7766] IPVS: using max 35 ests per chain, 84000 per kthread [ 109.272798][ T7771] Zero length message leads to an empty skb [ 109.320569][ T54] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 109.448272][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 109.449975][ T6460] Bluetooth: hci2: command 0x0406 tx timeout [ 109.598240][ T54] Bluetooth: hci5: command 0x0c1a tx timeout [ 109.599992][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 110.465526][ T7785] netlink: 44 bytes leftover after parsing attributes in process `syz.2.335'. [ 110.717775][ T7774] loop0: detected capacity change from 0 to 32768 [ 110.793484][ T7774] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 111.059205][ T6460] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.428704][ T7774] XFS (loop0): Ending clean mount [ 111.565367][ T7807] loop2: detected capacity change from 0 to 22 [ 111.583693][ T7807] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 111.608245][ T6460] Bluetooth: hci4: command 0x0c1a tx timeout [ 111.609803][ T6460] Bluetooth: hci5: command 0x0c1a tx timeout [ 111.688379][ T7807] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 111.728944][ T7807] Cannot find set identified by id 0 to match [ 112.292852][ T7245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.486700][ T7817] loop3: detected capacity change from 0 to 8 [ 112.626333][ T7817] SQUASHFS error: Failed to read block 0x4e8: -5 [ 112.628513][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.630349][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.632269][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.634100][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.635931][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.637678][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.639693][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.641449][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.643361][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.645129][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.646967][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.649389][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.651411][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.653300][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.655187][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.656912][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.658927][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.661375][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.663377][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.665222][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.667599][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.669537][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.671466][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.673279][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.675262][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.677063][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.679131][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.680924][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.682888][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.684748][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.686674][ T7817] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.866976][ T6453] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 113.275540][ T7822] loop5: detected capacity change from 0 to 2048 [ 113.380556][ T7822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.395711][ T54] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 113.521611][ T7832] loop0: detected capacity change from 0 to 1024 [ 113.528995][ T7832] EXT4-fs: Ignoring removed orlov option [ 113.541774][ T7832] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.597054][ T7832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.615873][ T7832] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 113.630193][ T7832] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 113.890401][ T6453] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.112173][ T7838] netlink: 64 bytes leftover after parsing attributes in process `syz.0.348'. [ 114.169800][ T7846] netlink: 44 bytes leftover after parsing attributes in process `syz.4.349'. [ 114.191834][ T7826] loop3: detected capacity change from 0 to 40427 [ 114.223961][ T7826] F2FS-fs (loop3): invalid crc value [ 114.247830][ T7826] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.358407][ T7826] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.094176][ T6450] syz-executor: attempt to access beyond end of device [ 115.094176][ T6450] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 115.107146][ T6450] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 115.135084][ T7860] loop4: detected capacity change from 0 to 22 [ 115.140109][ T7860] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 115.189668][ T7860] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 115.222424][ T7860] Cannot find set identified by id 0 to match [ 115.454114][ T7865] loop0: detected capacity change from 0 to 4096 [ 115.467842][ T7865] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 115.617177][ T7245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.666345][ T7870] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.753461][ T7872] loop5: detected capacity change from 0 to 4096 [ 115.756490][ T7872] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 115.923758][ T7867] loop3: detected capacity change from 0 to 32768 [ 116.093911][ T7867] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 116.118416][ T7867] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 116.120575][ T7867] bcachefs (loop3): Version upgrade required: [ 116.120575][ T7867] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 116.120575][ T7867] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 116.120575][ T7867] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 116.143615][ T7867] bcachefs (loop3): dropping and reconstructing all alloc info [ 116.157571][ T7867] bcachefs (loop3): accounting_read... done [ 116.201015][ T7867] bcachefs (loop3): alloc_read... done [ 116.205939][ T7867] bcachefs (loop3): stripes_read... done [ 116.212341][ T7867] bcachefs (loop3): snapshots_read... done [ 116.221667][ T7867] bcachefs (loop3): check_allocations... done [ 116.247816][ T7867] bcachefs (loop3): going read-write [ 116.263459][ T7867] bcachefs (loop3): done starting filesystem [ 116.390222][ T6450] bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 116.390248][ T6450] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0, shutting down [ 116.422295][ T54] bcachefs (loop3): unable to write journal to sufficient devices [ 116.424822][ T6496] bcachefs (loop3): going read-only [ 116.426353][ T6496] bcachefs (loop3): finished waiting for writes to stop [ 116.430559][ T6450] bcachefs (loop3): inconsistency detected - emergency read only at journal seq 11 [ 116.433449][ T6450] 3 transaction updates for bch2_inode_rm journal seq 0 [ 116.433469][ T6450] update: btree=extents cached=0 bch2_trans_update_extent_overwrite+0x14c4/0x22c4 [ 116.433478][ T6450] old u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0 [ 116.433490][ T6450] new u64s 5 type deleted 4099:8:U32_MAX len 0 ver 0 [ 116.433498][ T6450] update: btree=alloc cached=0 bch2_trans_start_alloc_update+0x178/0x224 [ 116.433506][ T6450] old u64s 5 type deleted 0:34:0 len 0 ver 0 [ 116.433514][ T6450] new u64s 13 type alloc_v4 0:34:0 len 0 ver 0: [ 116.433521][ T6450] gen 0 oldest_gen 0 data_type free [ 116.433529][ T6450] journal_seq_nonempty 0 [ 116.433536][ T6450] journal_seq_empty 0 [ 116.433543][ T6450] need_discard 0 [ 116.433550][ T6450] need_inc_gen 0 [ 116.433557][ T6450] dirty_sectors 0 [ 116.433564][ T6450] stripe_sectors 0 [ 116.433571][ T6450] cached_sectors 0 [ 116.433578][ T6450] stripe 0 [ 116.433585][ T6450] stripe_redundancy 0 [ 116.433592][ T6450] io_time[READ] 0 [ 116.433599][ T6450] io_time[WRITE] 0 [ 116.433606][ T6450] fragmentation 0 [ 116.433613][ T6450] bp_start 8 [ 116.433620][ T6450] [ 116.433626][ T6450] update: btree=alloc cached=1 bch2_trans_start_alloc_update+0x178/0x224 [ 116.433635][ T6450] old u64s 5 type deleted 0:34:0 len 0 ver 0 [ 116.433642][ T6450] new u64s 13 type alloc_v4 0:34:0 len 0 ver 0: [ 116.433650][ T6450] gen 0 oldest_gen 0 data_type free [ 116.433657][ T6450] journal_seq_nonempty 0 [ 116.433664][ T6450] journal_seq_empty 0 [ 116.433672][ T6450] need_discard 0 [ 116.433679][ T6450] need_inc_gen 0 [ 116.433686][ T6450] dirty_sectors 0 [ 116.433693][ T6450] stripe_sectors 0 [ 116.433700][ T6450] cached_sectors 0 [ 116.433707][ T6450] stripe 0 [ 116.433714][ T6450] stripe_redundancy 0 [ 116.433721][ T6450] io_time[READ] 0 [ 116.433728][ T6450] io_time[WRITE] 0 [ 116.433735][ T6450] fragmentation 0 [ 116.433742][ T6450] bp_start 8 [ 116.433749][ T6450] [ 116.433755][ T6450] [ 116.474496][ T7898] netlink: 44 bytes leftover after parsing attributes in process `syz.4.364'. [ 116.487673][ T7899] netlink: 64 bytes leftover after parsing attributes in process `syz.0.362'. [ 116.652174][ T6450] bcachefs (loop3): shutting down [ 116.669494][ T6496] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 116.671841][ T6496] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11 [ 116.674285][ T6496] bcachefs (loop3): unclean shutdown complete, journal seq 11 [ 116.676575][ T6496] bcachefs (loop3): done going read-only, filesystem not clean [ 116.712913][ T6450] bcachefs (loop3): shutdown complete [ 117.067402][ T7908] loop2: detected capacity change from 0 to 2048 [ 117.177382][ T7908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.420086][ T6454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.864634][ T6460] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 118.480122][ T7930] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.514739][ T7930] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.516627][ T7930] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.518276][ T7930] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 118.529008][ T7930] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 118.723205][ T7938] loop4: detected capacity change from 0 to 2048 [ 118.765595][ T7938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.050707][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.376'. [ 119.657563][ T6444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.136620][ T7960] netlink: 44 bytes leftover after parsing attributes in process `syz.4.379'. [ 120.424292][ T7967] loop5: detected capacity change from 0 to 2048 [ 120.459000][ T7967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.488526][ T6460] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.568173][ T6460] Bluetooth: hci5: command 0x0c1a tx timeout [ 120.569912][ T6460] Bluetooth: hci4: command 0x0c1a tx timeout [ 120.571483][ T6460] Bluetooth: hci3: command 0x0406 tx timeout [ 120.573230][ T6460] Bluetooth: hci2: command 0x0406 tx timeout [ 120.685152][ T7245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.741116][ T7976] loop5: detected capacity change from 0 to 22 [ 120.743135][ T7976] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 120.745245][ T7976] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 120.805659][ T7976] Cannot find set identified by id 0 to match [ 121.447020][ T7990] loop3: detected capacity change from 0 to 2048 [ 121.470943][ T7982] loop5: detected capacity change from 0 to 40427 [ 121.484860][ T7982] F2FS-fs (loop5): invalid crc value [ 121.487011][ T7990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.749834][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 122.343010][ T7982] F2FS-fs (loop5): Found nat_bits in checkpoint [ 122.429045][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.464399][ T7982] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 122.667419][ T7952] Set syz1 is full, maxelem 65536 reached [ 122.771824][ T8010] loop2: detected capacity change from 0 to 2048 [ 122.801711][ T8010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.844471][ T8017] netlink: 44 bytes leftover after parsing attributes in process `syz.3.396'. [ 122.978311][ T7245] syz-executor: attempt to access beyond end of device [ 122.978311][ T7245] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.018256][ T7245] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 123.034168][ T6454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.534890][ T8031] loop5: detected capacity change from 0 to 22 [ 123.544313][ T8031] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 123.554497][ T8031] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 123.579640][ T8031] Cannot find set identified by id 0 to match [ 123.730951][ T8037] loop3: detected capacity change from 0 to 128 [ 123.739129][ T8037] FAT-fs (loop3): bogus number of reserved sectors [ 123.740796][ T8037] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 123.743113][ T8037] FAT-fs (loop3): Can't find a valid FAT filesystem [ 123.876525][ T8024] loop0: detected capacity change from 0 to 40427 [ 123.905155][ T8024] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 123.906913][ T8024] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 123.915190][ T8024] F2FS-fs (loop0): Image doesn't support compression [ 123.922018][ T8024] F2FS-fs (loop0): invalid crc value [ 123.932658][ T8024] F2FS-fs (loop0): Found nat_bits in checkpoint [ 123.951439][ T8024] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 123.953179][ T8024] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.976105][ T8043] loop3: detected capacity change from 0 to 4096 [ 123.984725][ T8043] ntfs3: Unknown parameter 'syztnl1' [ 124.019003][ T8024] syz.0.399: attempt to access beyond end of device [ 124.019003][ T8024] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 124.022792][ T8024] syz.0.399: attempt to access beyond end of device [ 124.022792][ T8024] loop0: rw=2049, sector=53280, nr_sectors = 16 limit=40427 [ 124.026315][ T8024] syz.0.399: attempt to access beyond end of device [ 124.026315][ T8024] loop0: rw=2049, sector=53328, nr_sectors = 16 limit=40427 [ 124.054235][ T6453] syz-executor: attempt to access beyond end of device [ 124.054235][ T6453] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.096148][ T6453] F2FS-fs (loop0): Remounting filesystem read-only [ 124.145232][ T8048] loop3: detected capacity change from 0 to 2048 [ 124.177109][ T8048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.438047][ T8055] loop0: detected capacity change from 0 to 22 [ 124.440502][ T8055] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 124.597836][ T8055] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 124.695539][ T54] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 124.825734][ T8070] loop0: detected capacity change from 0 to 22 [ 124.829984][ T8070] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 124.835418][ T8070] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 124.854767][ T8072] netlink: 44 bytes leftover after parsing attributes in process `syz.2.411'. [ 124.990324][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.320728][ T8084] loop5: detected capacity change from 0 to 128 [ 125.324751][ T8084] FAT-fs (loop5): bogus number of reserved sectors [ 125.326430][ T8084] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 125.329663][ T8084] FAT-fs (loop5): Can't find a valid FAT filesystem [ 125.533874][ T8064] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.541532][ T8064] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.545687][ T8064] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.548522][ T8064] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 125.550350][ T8064] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 125.794356][ T8104] loop4: detected capacity change from 0 to 2048 [ 125.810362][ T8104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.918480][ T8099] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.920591][ T8099] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.922349][ T8099] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.923970][ T8099] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 125.928996][ T2368] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.932908][ T2368] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.948591][ T8099] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 126.012911][ T54] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 126.147626][ T8112] loop0: detected capacity change from 0 to 22 [ 126.154056][ T8112] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 126.163612][ T8112] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 126.507077][ T8118] loop2: detected capacity change from 0 to 128 [ 126.517048][ T8118] FAT-fs (loop2): bogus number of reserved sectors [ 126.539811][ T8118] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 126.550747][ T8118] FAT-fs (loop2): Can't find a valid FAT filesystem [ 126.639052][ T54] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 126.687471][ T6444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.785309][ T8131] netlink: 'syz.4.430': attribute type 10 has an invalid length. [ 126.808047][ T8131] veth0_vlan: left promiscuous mode [ 126.837333][ T8131] veth0_vlan: entered promiscuous mode [ 126.899505][ T8131] team0: Device veth0_vlan failed to register rx_handler [ 126.939649][ T8136] netlink: 'syz.2.433': attribute type 10 has an invalid length. [ 127.004836][ T8136] veth0_vlan: left promiscuous mode [ 127.062406][ T8136] veth0_vlan: entered promiscuous mode [ 127.145972][ T8136] team0: Device veth0_vlan failed to register rx_handler [ 127.959753][ T8152] loop3: detected capacity change from 0 to 128 [ 127.977052][ T8152] FAT-fs (loop3): bogus number of reserved sectors [ 127.991389][ T8152] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 128.008949][ T8152] FAT-fs (loop3): Can't find a valid FAT filesystem [ 128.009031][ T54] Bluetooth: hci5: command 0x0c1a tx timeout [ 128.011281][ T6460] Bluetooth: hci4: command 0x0c1a tx timeout [ 128.012874][ T6446] Bluetooth: hci3: command 0x0406 tx timeout [ 128.014292][ T6460] Bluetooth: hci2: command 0x0406 tx timeout [ 128.015624][ T6446] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.062816][ T8154] loop2: detected capacity change from 0 to 2048 [ 128.069255][ T8156] loop4: detected capacity change from 0 to 256 [ 128.103413][ T8154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.114467][ T8156] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 128.166260][ T8156] netlink: 104 bytes leftover after parsing attributes in process `syz.4.441'. [ 128.207650][ T8162] loop5: detected capacity change from 0 to 4096 [ 128.223818][ T8162] ntfs3: Unknown parameter 'syztnl1' [ 128.386573][ T8169] loop3: detected capacity change from 0 to 2048 [ 128.413856][ T8169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.938990][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 129.459357][ T6454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.624512][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.410894][ T54] Bluetooth: hci5: command 0x0c1a tx timeout [ 130.676265][ T54] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 131.261347][ T54] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 131.315114][ T8199] bridge0: port 3(syz_tun) entered blocking state [ 131.335306][ T8199] bridge0: port 3(syz_tun) entered disabled state [ 131.349507][ T8199] syz_tun: entered allmulticast mode [ 131.361728][ T8199] syz_tun: entered promiscuous mode [ 131.363491][ T8199] bridge0: port 3(syz_tun) entered blocking state [ 131.365681][ T8199] bridge0: port 3(syz_tun) entered forwarding state [ 131.416746][ T8204] loop0: detected capacity change from 0 to 256 [ 131.419260][ T8199] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.466250][ T8204] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 131.485239][ T8204] netlink: 104 bytes leftover after parsing attributes in process `syz.0.455'. [ 131.627939][ T8214] loop0: detected capacity change from 0 to 2048 [ 131.699549][ T8214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.906892][ T8226] bridge0: port 3(syz_tun) entered blocking state [ 131.910379][ T8226] bridge0: port 3(syz_tun) entered disabled state [ 131.912168][ T8226] syz_tun: entered allmulticast mode [ 131.914108][ T8226] syz_tun: entered promiscuous mode [ 131.915648][ T8226] bridge0: port 3(syz_tun) entered blocking state [ 131.917371][ T8226] bridge0: port 3(syz_tun) entered forwarding state [ 132.240641][ T8240] loop2: detected capacity change from 0 to 256 [ 132.272346][ T8240] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 132.297717][ T8240] netlink: 104 bytes leftover after parsing attributes in process `syz.2.469'. [ 132.504867][ T6453] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.510383][ T8245] loop4: detected capacity change from 0 to 22 [ 132.512418][ T8245] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 132.517452][ T8245] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 132.610973][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'. [ 132.933787][ T8264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.941921][ T8264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.119061][ T6497] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 133.284262][ T6497] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.294393][ T6497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 133.302785][ T6497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 133.317871][ T6497] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.329148][ T6497] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.339848][ T6497] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.362097][ T6497] usb 1-1: config 0 descriptor?? [ 133.366282][ T8260] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.663385][ T8252] Set syz1 is full, maxelem 65536 reached [ 133.782976][ T6497] usbhid 1-1:0.0: can't add hid device: -71 [ 133.792656][ T6497] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 133.807718][ T6497] usb 1-1: USB disconnect, device number 2 [ 133.832596][ T8273] loop5: detected capacity change from 0 to 40427 [ 133.835550][ T8273] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 133.837307][ T8273] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 133.840890][ T8273] F2FS-fs (loop5): Image doesn't support compression [ 133.847555][ T8273] F2FS-fs (loop5): invalid crc value [ 133.853858][ T8273] F2FS-fs (loop5): Found nat_bits in checkpoint [ 133.868779][ T8273] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 133.870685][ T8273] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 133.907308][ T8267] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.917867][ T8267] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.920130][ T8267] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 133.922112][ T7245] syz-executor: attempt to access beyond end of device [ 133.922112][ T7245] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.922614][ T8267] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 133.934197][ T7245] F2FS-fs (loop5): Remounting filesystem read-only [ 133.948010][ T8267] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 134.103107][ T8280] netlink: 44 bytes leftover after parsing attributes in process `syz.3.486'. [ 134.154765][ T8285] netlink: 'syz.5.484': attribute type 10 has an invalid length. [ 134.170208][ T8285] veth0_vlan: left promiscuous mode [ 134.175270][ T8285] veth0_vlan: entered promiscuous mode [ 134.179184][ T8285] team0: Device veth0_vlan failed to register rx_handler [ 134.288986][ T8289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.291385][ T8289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.811766][ T8305] loop3: detected capacity change from 0 to 22 [ 134.819809][ T8305] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 134.838568][ T8305] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 135.045049][ T8310] vlan2: entered allmulticast mode [ 135.106748][ T8314] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 135.222130][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.452956][ T8317] loop0: detected capacity change from 0 to 40427 [ 135.460549][ T8317] F2FS-fs (loop0): invalid crc value [ 135.467801][ T8317] F2FS-fs (loop0): Found nat_bits in checkpoint [ 135.486022][ T8306] loop2: detected capacity change from 0 to 40427 [ 135.491832][ T8306] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 135.495916][ T8306] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 135.502630][ T8306] F2FS-fs (loop2): Image doesn't support compression [ 135.507524][ T8306] F2FS-fs (loop2): invalid crc value [ 135.522486][ T8317] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 135.524068][ T8306] F2FS-fs (loop2): Found nat_bits in checkpoint [ 135.650558][ T8334] netlink: 'syz.5.504': attribute type 10 has an invalid length. [ 135.655143][ T8334] veth0_vlan: left promiscuous mode [ 135.659128][ T8334] veth0_vlan: entered promiscuous mode [ 135.669513][ T8334] team0: Device veth0_vlan failed to register rx_handler [ 135.696843][ T8306] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 135.702102][ T8306] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 135.760998][ T6453] syz-executor: attempt to access beyond end of device [ 135.760998][ T6453] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.768422][ T6454] syz-executor: attempt to access beyond end of device [ 135.768422][ T6454] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.770753][ T6453] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 135.772155][ T6454] F2FS-fs (loop2): Remounting filesystem read-only [ 135.819691][ T8323] loop4: detected capacity change from 0 to 32768 [ 135.824708][ T8323] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.502 (8323) [ 135.860142][ T8337] loop5: detected capacity change from 0 to 22 [ 135.863486][ T8323] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 135.866041][ T8323] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 135.866793][ T8337] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 135.879731][ T8337] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 135.882013][ T8323] BTRFS info (device loop4): using free-space-tree [ 135.897743][ T8337] Cannot find set identified by id 0 to match [ 135.938255][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 135.938615][ T6458] Bluetooth: hci3: command 0x0406 tx timeout [ 135.940019][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 136.008188][ T54] Bluetooth: hci5: command 0x0c1a tx timeout [ 136.056821][ T8357] vlan2: entered allmulticast mode [ 136.135022][ T8359] netlink: 44 bytes leftover after parsing attributes in process `syz.0.505'. [ 136.167123][ T6444] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 136.271336][ T8370] fuse: Bad value for 'fd' [ 136.273756][ T8369] netlink: 'syz.2.506': attribute type 10 has an invalid length. [ 136.278487][ T8369] veth0_vlan: left promiscuous mode [ 136.290387][ T8369] veth0_vlan: entered promiscuous mode [ 136.295214][ T8369] team0: Device veth0_vlan failed to register rx_handler [ 136.750044][ T8378] loop2: detected capacity change from 0 to 40427 [ 136.756050][ T8378] F2FS-fs (loop2): invalid crc value [ 136.762582][ T8378] F2FS-fs (loop2): Found nat_bits in checkpoint [ 136.783528][ T8378] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 136.918274][ T8353] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.923427][ T8353] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.930620][ T8353] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.933443][ T8353] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 136.945681][ T8353] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 137.010608][ T8386] loop0: detected capacity change from 0 to 32768 [ 137.020402][ T8386] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.519 (8386) [ 137.026264][ T6454] syz-executor: attempt to access beyond end of device [ 137.026264][ T6454] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.032974][ T6454] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 137.038271][ T8386] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 137.040756][ T8386] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 137.042803][ T8386] BTRFS info (device loop0): disk space caching is enabled [ 137.044481][ T8386] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 137.139887][ T8386] BTRFS info (device loop0): rebuilding free space tree [ 137.164458][ T8386] BTRFS info (device loop0): disabling free space tree [ 137.166126][ T8386] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 137.176101][ T8386] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 137.231550][ T8416] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 137.248892][ T8416] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.256166][ T8416] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.269064][ T6453] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 137.274381][ T8416] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 137.304502][ T8416] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 137.388758][ T8426] netlink: 'syz.0.524': attribute type 10 has an invalid length. [ 137.405302][ T8426] veth0_vlan: left promiscuous mode [ 137.415080][ T8426] veth0_vlan: entered promiscuous mode [ 137.425642][ T8426] team0: Device veth0_vlan failed to register rx_handler [ 137.487053][ T8430] netlink: 'syz.2.520': attribute type 10 has an invalid length. [ 137.593775][ T8430] veth0_vlan: left promiscuous mode [ 137.595540][ T8430] veth0_vlan: entered promiscuous mode [ 137.597699][ T8430] team0: Device veth0_vlan failed to register rx_handler [ 137.648495][ T8444] netlink: 44 bytes leftover after parsing attributes in process `syz.0.529'. [ 137.688853][ T8448] netlink: 64 bytes leftover after parsing attributes in process `syz.3.530'. [ 138.075867][ T8460] loop2: detected capacity change from 0 to 128 [ 138.955416][ T8460] EXT4-fs (loop2): Test dummy encryption mode enabled [ 139.034945][ T8460] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.416006][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.417615][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 139.419256][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 139.420705][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 139.422312][ T54] Bluetooth: hci5: command 0x0c1a tx timeout [ 139.656479][ T8471] netlink: 'syz.0.539': attribute type 10 has an invalid length. [ 139.664247][ T8471] veth0_vlan: left promiscuous mode [ 139.666099][ T8471] veth0_vlan: entered promiscuous mode [ 139.691695][ T8471] team0: Device veth0_vlan failed to register rx_handler [ 139.947995][ T8476] vlan2: entered promiscuous mode [ 139.956433][ T8476] bond0: entered promiscuous mode [ 139.966866][ T8476] bond_slave_0: entered promiscuous mode [ 139.973866][ T8476] bond_slave_1: entered promiscuous mode [ 140.029214][ T8476] bond0: left promiscuous mode [ 140.030528][ T8476] bond_slave_0: left promiscuous mode [ 140.032070][ T8476] bond_slave_1: left promiscuous mode [ 140.213524][ T6454] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.998742][ T8492] netlink: 44 bytes leftover after parsing attributes in process `syz.0.547'. [ 141.207274][ T8484] loop2: detected capacity change from 0 to 32768 [ 141.217123][ T8484] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.544 (8484) [ 141.286536][ T8484] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.297355][ T8484] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 141.318262][ T8484] BTRFS info (device loop2): disk space caching is enabled [ 141.320554][ T8484] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 141.388834][ T8514] loop4: detected capacity change from 0 to 22 [ 141.398777][ T8514] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 141.406781][ T8514] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 141.425210][ T8484] BTRFS info (device loop2): rebuilding free space tree [ 141.448690][ T6446] Bluetooth: hci5: command 0x0c1a tx timeout [ 141.456324][ T8484] BTRFS info (device loop2): disabling free space tree [ 141.469708][ T8484] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 141.482224][ T8484] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 141.606285][ T6454] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.635826][ T8521] netlink: 'syz.4.551': attribute type 10 has an invalid length. [ 141.638043][ T8521] veth0_vlan: left promiscuous mode [ 141.644333][ T8521] veth0_vlan: entered promiscuous mode [ 141.646653][ T8521] team0: Device veth0_vlan failed to register rx_handler [ 142.683388][ T8536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.557'. [ 142.695884][ T8536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.557'. [ 142.914822][ T8462] Set syz1 is full, maxelem 65536 reached [ 143.146736][ T8549] loop5: detected capacity change from 0 to 22 [ 143.160895][ T8549] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 143.406613][ T8549] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 143.632629][ T8561] netlink: 44 bytes leftover after parsing attributes in process `syz.5.564'. [ 143.719326][ T8551] loop3: detected capacity change from 0 to 32768 [ 143.739166][ T8551] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.562 (8551) [ 143.760449][ T8551] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.763201][ T8551] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 143.765312][ T8551] BTRFS info (device loop3): disk space caching is enabled [ 143.767106][ T8551] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 143.976689][ T8553] loop2: detected capacity change from 0 to 40427 [ 143.989527][ T8553] F2FS-fs (loop2): invalid crc value [ 144.109574][ T8553] F2FS-fs (loop2): Found nat_bits in checkpoint [ 144.127704][ T8553] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 144.919410][ T8551] BTRFS info (device loop3): rebuilding free space tree [ 144.942669][ T8551] BTRFS info (device loop3): disabling free space tree [ 144.944459][ T8551] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.946777][ T8551] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 145.001971][ T8592] netlink: 'syz.4.569': attribute type 10 has an invalid length. [ 145.014242][ T8592] veth0_vlan: left promiscuous mode [ 145.016125][ T8592] veth0_vlan: entered promiscuous mode [ 145.022706][ T8592] team0: Device veth0_vlan failed to register rx_handler [ 145.048567][ T6450] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.202130][ T8602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.204343][ T8602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.232210][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.574'. [ 145.300178][ T8608] loop2: detected capacity change from 0 to 2048 [ 145.315753][ T8608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.455039][ T8617] pim6reg: entered allmulticast mode [ 145.607404][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'. [ 146.173507][ T8620] netlink: 44 bytes leftover after parsing attributes in process `syz.5.577'. [ 146.218924][ T6454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.496817][ T8636] loop4: detected capacity change from 0 to 256 [ 146.550323][ T8636] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 146.570466][ T8636] netlink: 104 bytes leftover after parsing attributes in process `syz.4.584'. [ 146.670045][ T8630] loop2: detected capacity change from 0 to 32768 [ 146.673397][ T8630] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.580 (8630) [ 146.702419][ T8630] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.705002][ T8630] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 146.709591][ T8630] BTRFS info (device loop2): disk space caching is enabled [ 146.711889][ T8630] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 146.883866][ T8655] loop4: detected capacity change from 0 to 2048 [ 147.030688][ T8655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.093038][ T8630] BTRFS info (device loop2): rebuilding free space tree [ 147.106301][ T8630] BTRFS info (device loop2): disabling free space tree [ 147.110115][ T8630] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 147.117184][ T8630] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 147.247738][ T6454] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.621424][ T8689] loop0: detected capacity change from 0 to 256 [ 147.676218][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.591'. [ 147.689481][ T8689] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 147.713225][ T8689] netlink: 104 bytes leftover after parsing attributes in process `syz.0.598'. [ 147.739244][ T8694] bridge0: port 3(syz_tun) entered blocking state [ 147.743070][ T8694] bridge0: port 3(syz_tun) entered disabled state [ 147.744759][ T8694] syz_tun: entered allmulticast mode [ 147.746599][ T8694] syz_tun: entered promiscuous mode [ 147.768439][ T8694] bridge0: port 3(syz_tun) entered blocking state [ 147.770230][ T8694] bridge0: port 3(syz_tun) entered forwarding state [ 147.934399][ T8706] netlink: 44 bytes leftover after parsing attributes in process `syz.0.602'. [ 148.118691][ T8712] loop3: detected capacity change from 0 to 128 [ 148.139293][ T8712] EXT4-fs (loop3): Test dummy encryption mode enabled [ 148.333772][ T8712] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.425734][ T8698] loop5: detected capacity change from 0 to 32768 [ 149.451150][ T8698] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.601 (8698) [ 149.550240][ T8698] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 149.552849][ T8698] BTRFS info (device loop5): using crc32c (crc32c-arm64) checksum algorithm [ 149.593652][ T8698] BTRFS info (device loop5): disk space caching is enabled [ 149.595521][ T8698] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 150.306483][ T6450] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.309598][ T8698] BTRFS info (device loop5): rebuilding free space tree [ 150.354996][ T8698] BTRFS info (device loop5): disabling free space tree [ 150.356783][ T8698] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 150.372067][ T8698] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 150.423011][ T8715] loop0: detected capacity change from 0 to 32768 [ 150.458777][ T8715] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.605 (8715) [ 150.486232][ T8715] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.491105][ T8715] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 150.493305][ T8715] BTRFS info (device loop0): disk space caching is enabled [ 150.495126][ T8715] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 150.531672][ T7245] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 150.550401][ T31] audit: type=1326 audit(150.540:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8744 comm="syz.2.609" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa595ad28 code=0x0 [ 150.603645][ T8715] BTRFS info (device loop0): rebuilding free space tree [ 150.650505][ T8715] BTRFS info (device loop0): disabling free space tree [ 150.665477][ T8715] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 150.682095][ T8715] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 150.776193][ T8761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.782116][ T8761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.814510][ T6453] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.943569][ T8766] netlink: 104 bytes leftover after parsing attributes in process `syz.0.612'. [ 150.965644][ T6444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.178635][ T8777] netlink: 44 bytes leftover after parsing attributes in process `syz.4.615'. [ 151.438196][ T6446] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 151.547601][ T8785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.563840][ T8785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.699854][ T8775] loop0: detected capacity change from 0 to 32768 [ 151.712726][ T8775] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.616 (8775) [ 151.830442][ T8775] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.833688][ T8775] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 151.835947][ T8775] BTRFS info (device loop0): using free-space-tree [ 152.015889][ T8790] syz.4.620 uses obsolete (PF_INET,SOCK_PACKET) [ 152.127024][ T8775] BTRFS info (device loop0): rebuilding free space tree [ 152.548764][ T8819] loop3: detected capacity change from 0 to 2048 [ 152.565761][ T6453] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.594936][ T8819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.698743][ T31] audit: type=1326 audit(153.680:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8837 comm="syz.5.628" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8775ad28 code=0x0 [ 153.701403][ T8840] netlink: 44 bytes leftover after parsing attributes in process `syz.4.630'. [ 154.047760][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.623'. [ 154.108822][ T6446] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 156.004322][ T8866] bridge0: port 3(syz_tun) entered blocking state [ 156.012519][ T8866] bridge0: port 3(syz_tun) entered disabled state [ 156.020446][ T8866] syz_tun: entered allmulticast mode [ 156.026150][ T8866] syz_tun: entered promiscuous mode [ 156.027812][ T8866] bridge0: port 3(syz_tun) entered blocking state [ 156.029674][ T8866] bridge0: port 3(syz_tun) entered forwarding state [ 156.157259][ T8862] loop2: detected capacity change from 0 to 32768 [ 156.162307][ T8862] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.636 (8862) [ 156.187727][ T8862] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.191661][ T8862] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 156.197583][ T8862] BTRFS info (device loop2): using free-space-tree [ 156.276087][ T8876] loop5: detected capacity change from 0 to 128 [ 156.648510][ T8876] EXT4-fs (loop5): Test dummy encryption mode enabled [ 156.722411][ T8876] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.252749][ T8856] loop4: detected capacity change from 0 to 32768 [ 157.564400][ T8856] BTRFS: device /dev/loop4 (7:4) using temp-fsid 9fb2c02c-9449-483c-ac22-b5550d156db0 [ 157.567214][ T8856] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.634 (8856) [ 157.591116][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.610291][ T8862] BTRFS info (device loop2): rebuilding free space tree [ 157.957928][ T31] audit: type=1326 audit(157.940:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8902 comm="syz.4.644" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8035ad28 code=0x0 [ 158.273275][ T6454] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.282929][ T7245] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.578783][ T54] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 159.779923][ T8923] loop2: detected capacity change from 0 to 128 [ 159.864989][ T8923] EXT4-fs (loop2): Test dummy encryption mode enabled [ 160.111761][ T8923] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.865275][ T6454] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.879151][ T8940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.881250][ T8940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.160107][ T8948] loop5: detected capacity change from 0 to 1024 [ 162.180416][ T8948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.970970][ T8953] [ 162.971601][ T8953] ====================================================== [ 162.973323][ T8953] WARNING: possible circular locking dependency detected [ 162.975019][ T8953] 6.14.0-rc6-syzkaller-g0ed841ede7ac #0 Not tainted [ 162.976593][ T8953] ------------------------------------------------------ [ 162.978371][ T8953] syz.5.657/8953 is trying to acquire lock: [ 162.979864][ T8953] ffff0000d19aa570 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_device_down+0x138/0x6f8 [ 162.982347][ T8953] [ 162.982347][ T8953] but task is already holding lock: [ 162.984155][ T8953] ffff800092cc87f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xb8/0x6f8 [ 162.986569][ T8953] [ 162.986569][ T8953] which lock already depends on the new lock. [ 162.986569][ T8953] [ 162.989181][ T8953] [ 162.989181][ T8953] the existing dependency chain (in reverse order) is: [ 162.991593][ T8953] [ 162.991593][ T8953] -> #2 (nr_node_list_lock){+...}-{3:3}: [ 162.993638][ T8953] _raw_spin_lock_bh+0x48/0x60 [ 162.995057][ T8953] nr_rt_device_down+0xb8/0x6f8 [ 162.996383][ T8953] nr_device_event+0x138/0x170 [ 162.997764][ T8953] notifier_call_chain+0x1c4/0x550 [ 162.999287][ T8953] raw_notifier_call_chain+0x3c/0x50 [ 163.000838][ T8953] dev_close_many+0x308/0x474 [ 163.002237][ T8953] dev_close+0x174/0x250 [ 163.003477][ T8953] bpq_device_event+0x318/0x830 [ 163.004888][ T8953] notifier_call_chain+0x1c4/0x550 [ 163.005631][ T8965] loop0: detected capacity change from 0 to 22 [ 163.006438][ T8953] raw_notifier_call_chain+0x3c/0x50 [ 163.009593][ T8953] dev_close_many+0x308/0x474 [ 163.010899][ T8953] dev_close+0x174/0x250 [ 163.012168][ T8953] bond_setup_by_slave+0x70/0x39c [ 163.013671][ T8953] bond_enslave+0x620/0x2f0c [ 163.015132][ T8953] bond_do_ioctl+0x270/0xde8 [ 163.015362][ T8965] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 163.016484][ T8953] dev_ifsioc+0x748/0x9a0 [ 163.019338][ T8953] dev_ioctl+0x4d8/0xd34 [ 163.020336][ T8965] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 163.020602][ T8953] sock_do_ioctl+0x1d4/0x2d0 [ 163.023806][ T8953] sock_ioctl+0x4ec/0x838 [ 163.025129][ T8953] __arm64_sys_ioctl+0x14c/0x1cc [ 163.026577][ T8953] invoke_syscall+0x98/0x2b8 [ 163.027862][ T8953] el0_svc_common+0x130/0x23c [ 163.029296][ T8953] do_el0_svc+0x48/0x58 [ 163.030523][ T8953] el0_svc+0x54/0x168 [ 163.031704][ T8953] el0t_64_sync_handler+0x84/0x108 [ 163.033216][ T8953] el0t_64_sync+0x198/0x19c [ 163.034507][ T8953] [ 163.034507][ T8953] -> #1 (nr_neigh_list_lock){+...}-{3:3}: [ 163.036582][ T8953] _raw_spin_lock_bh+0x48/0x60 [ 163.037962][ T8953] nr_remove_neigh+0x30/0xec [ 163.039326][ T8953] nr_add_node+0x17f0/0x1fd0 [ 163.040700][ T8953] nr_rt_ioctl+0xb80/0xdf4 [ 163.042037][ T8953] nr_ioctl+0x19c/0x474 [ 163.043241][ T8953] sock_do_ioctl+0x134/0x2d0 [ 163.044647][ T8953] sock_ioctl+0x4ec/0x838 [ 163.045945][ T8953] __arm64_sys_ioctl+0x14c/0x1cc [ 163.047425][ T8953] invoke_syscall+0x98/0x2b8 [ 163.048755][ T8953] el0_svc_common+0x130/0x23c [ 163.050173][ T8953] do_el0_svc+0x48/0x58 [ 163.051343][ T8953] el0_svc+0x54/0x168 [ 163.052520][ T8953] el0t_64_sync_handler+0x84/0x108 [ 163.054075][ T8953] el0t_64_sync+0x198/0x19c [ 163.055484][ T8953] [ 163.055484][ T8953] -> #0 (&nr_node->node_lock){+...}-{3:3}: [ 163.057646][ T8953] __lock_acquire+0x34f0/0x7904 [ 163.059084][ T8953] lock_acquire+0x23c/0x724 [ 163.060384][ T8953] _raw_spin_lock_bh+0x48/0x60 [ 163.061781][ T8953] nr_rt_device_down+0x138/0x6f8 [ 163.063225][ T8953] nr_device_event+0x138/0x170 [ 163.064658][ T8953] notifier_call_chain+0x1c4/0x550 [ 163.066232][ T8953] raw_notifier_call_chain+0x3c/0x50 [ 163.067851][ T8953] dev_close_many+0x308/0x474 [ 163.069424][ T8953] dev_close+0x174/0x250 [ 163.070706][ T8953] bpq_device_event+0x318/0x830 [ 163.072193][ T8953] notifier_call_chain+0x1c4/0x550 [ 163.073686][ T8953] raw_notifier_call_chain+0x3c/0x50 [ 163.075263][ T8953] dev_close_many+0x308/0x474 [ 163.076689][ T8953] dev_close+0x174/0x250 [ 163.077947][ T8953] bond_setup_by_slave+0x70/0x39c [ 163.079457][ T8953] bond_enslave+0x620/0x2f0c [ 163.080856][ T8953] bond_do_ioctl+0x270/0xde8 [ 163.082309][ T8953] dev_ifsioc+0x748/0x9a0 [ 163.083628][ T8953] dev_ioctl+0x4d8/0xd34 [ 163.084933][ T8953] sock_do_ioctl+0x1d4/0x2d0 [ 163.086346][ T8953] sock_ioctl+0x4ec/0x838 [ 163.087679][ T8953] __arm64_sys_ioctl+0x14c/0x1cc [ 163.089205][ T8953] invoke_syscall+0x98/0x2b8 [ 163.089493][ T8946] loop2: detected capacity change from 0 to 32768 [ 163.090622][ T8953] el0_svc_common+0x130/0x23c [ 163.093682][ T8953] do_el0_svc+0x48/0x58 [ 163.094991][ T8953] el0_svc+0x54/0x168 [ 163.096212][ T8953] el0t_64_sync_handler+0x84/0x108 [ 163.097802][ T8953] el0t_64_sync+0x198/0x19c [ 163.099187][ T8953] [ 163.099187][ T8953] other info that might help us debug this: [ 163.099187][ T8953] [ 163.101897][ T8953] Chain exists of: [ 163.101897][ T8953] &nr_node->node_lock --> nr_neigh_list_lock --> nr_node_list_lock [ 163.101897][ T8953] [ 163.105548][ T8953] Possible unsafe locking scenario: [ 163.105548][ T8953] [ 163.107577][ T8953] CPU0 CPU1 [ 163.109085][ T8953] ---- ---- [ 163.110591][ T8953] lock(nr_node_list_lock); [ 163.111788][ T8953] lock(nr_neigh_list_lock); [ 163.113826][ T8953] lock(nr_node_list_lock); [ 163.115720][ T8953] lock(&nr_node->node_lock); [ 163.116990][ T8953] [ 163.116990][ T8953] *** DEADLOCK *** [ 163.116990][ T8953] [ 163.119199][ T8953] 3 locks held by syz.5.657/8953: [ 163.120553][ T8953] #0: ffff800092b722a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 163.122834][ T8953] #1: ffff800092cc8798 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x38/0x6f8 [ 163.125573][ T8953] #2: ffff800092cc87f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xb8/0x6f8 [ 163.128331][ T8953] [ 163.128331][ T8953] stack backtrace: [ 163.129916][ T8953] CPU: 0 UID: 0 PID: 8953 Comm: syz.5.657 Not tainted 6.14.0-rc6-syzkaller-g0ed841ede7ac #0 [ 163.129930][ T8953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.129938][ T8953] Call trace: [ 163.129941][ T8953] show_stack+0x2c/0x3c (C) [ 163.129959][ T8953] dump_stack_lvl+0xe4/0x150 [ 163.129982][ T8953] dump_stack+0x1c/0x28 [ 163.129995][ T8953] print_circular_bug+0x154/0x1c0 [ 163.130008][ T8953] check_noncircular+0x310/0x404 [ 163.130020][ T8953] __lock_acquire+0x34f0/0x7904 [ 163.130031][ T8953] lock_acquire+0x23c/0x724 [ 163.130041][ T8953] _raw_spin_lock_bh+0x48/0x60 [ 163.130053][ T8953] nr_rt_device_down+0x138/0x6f8 [ 163.130064][ T8953] nr_device_event+0x138/0x170 [ 163.130074][ T8953] notifier_call_chain+0x1c4/0x550 [ 163.130086][ T8953] raw_notifier_call_chain+0x3c/0x50 [ 163.130098][ T8953] dev_close_many+0x308/0x474 [ 163.130109][ T8953] dev_close+0x174/0x250 [ 163.130118][ T8953] bpq_device_event+0x318/0x830 [ 163.130131][ T8953] notifier_call_chain+0x1c4/0x550 [ 163.130142][ T8953] raw_notifier_call_chain+0x3c/0x50 [ 163.130154][ T8953] dev_close_many+0x308/0x474 [ 163.130164][ T8953] dev_close+0x174/0x250 [ 163.130173][ T8953] bond_setup_by_slave+0x70/0x39c [ 163.130186][ T8953] bond_enslave+0x620/0x2f0c [ 163.130198][ T8953] bond_do_ioctl+0x270/0xde8 [ 163.130211][ T8953] dev_ifsioc+0x748/0x9a0 [ 163.130223][ T8953] dev_ioctl+0x4d8/0xd34 [ 163.130234][ T8953] sock_do_ioctl+0x1d4/0x2d0 [ 163.130247][ T8953] sock_ioctl+0x4ec/0x838 [ 163.130259][ T8953] __arm64_sys_ioctl+0x14c/0x1cc [ 163.130271][ T8953] invoke_syscall+0x98/0x2b8 [ 163.130284][ T8953] el0_svc_common+0x130/0x23c [ 163.130296][ T8953] do_el0_svc+0x48/0x58 [ 163.130308][ T8953] el0_svc+0x54/0x168 [ 163.130319][ T8953] el0t_64_sync_handler+0x84/0x108 [ 163.130330][ T8953] el0t_64_sync+0x198/0x19c [ 163.161075][ T8946] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.656 (8946) [ 163.179178][ T8953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.183362][ T8953] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 163.186366][ T8953] bond0: (slave sit0): Error -95 calling set_mac_address [ 163.284849][ T8946] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.287656][ T8946] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 163.300705][ T8946] BTRFS info (device loop2): using free-space-tree [ 163.330117][ T7245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.384758][ T54] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 163.505104][ T8946] BTRFS info (device loop2): rebuilding free space tree [ 163.752557][ T8986] loop0: detected capacity change from 0 to 32768 [ 163.761321][ T8986] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 163.792085][ T8986] XFS (loop0): Ending clean mount [ 163.905288][ T6454] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.330923][ T6453] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab