last executing test programs: 2.703921042s ago: executing program 3 (id=1517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0xa, 0x0, 0x408d}, @mpls={[], @ipv6=@udp={0x4, 0x6, "c80f59", 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4e24, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "2737f19c7d3c3653289a9104c02dbfdc70bea0431a23b0f8063fce146e39b05c", "869bbd9cf785d23a9cebb43d614789da", {"f3f0cb8057706a65a051f8b0ad365751", "eea00bcb0bfb26a397f5a312ea0bb6b1"}}}}}}}, 0x9a) 2.528467386s ago: executing program 1 (id=1518): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782", 0xc}], 0x1}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x169, 0x9, 0xfffffffffbfffffd, 0x0, 0x2, 0x1124dd89, 0x4022004c4, 0x1004, 0x45c7, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x9, 0x800000000000a], 0xffff1000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.424520944s ago: executing program 1 (id=1519): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.370034609s ago: executing program 3 (id=1520): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0xd35f}) 2.159945066s ago: executing program 1 (id=1523): mkdir(&(0x7f0000000380)='./file1\x00', 0xe) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 2.132432378s ago: executing program 3 (id=1524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0xa, 0x300) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r9, 0x0, 0x0, 0x0) 1.963979741s ago: executing program 1 (id=1526): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x10, 0x34, 0x1, 0x0, 0x25dfdbff}, 0x10}], 0x1}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x169, 0x9, 0xfffffffffbfffffd, 0x0, 0x2, 0x1124dd89, 0x4022004c4, 0x1004, 0x45c7, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x9, 0x800000000000a], 0xffff1000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.963492002s ago: executing program 3 (id=1527): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x1008004, 0x0, 0x0, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000000c0)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$eJzs3c1vFOUfAPDvbLfvv58txKh4kCbGQKK0tIIhxkS4G4IvN71UWgihUEJrYpHEkuhN48WDiScP4l9hJPHqP+DBiydDQozhIIbImpmdbaftbunb7pT280mGzsvuPN8Bvn2effZ5ZgLYt0bSPyoRhyLiWhIxVDhWjfzgSP119/+6eT5dkqjV3v0ziZufJovFcyX5zwP5m/8diiR9+8GJH9eUO7dw4/LkzMz09WyrN9+7cOPYpSuTF6cvTl+deG3i1MkTJ0+NH9/+9RUvJ+L97799mIz/8NvZJE7Ho676zvS6Vr+3d1slp2WPRK3uQXF/GsipbZ57t/h7aPkvtq4/kmpp4bBJF/L/j90R8WwMRVfhX3MoPn+71OCAtqol0aijgH0n2VL+9+18IECHNdoBjc/2zT4Hr1Vpc6sE6IR7Z+odAPXc746IRv5X876zvqxvYOB+sqKfJ4mI7fXM1aVl/PLz2c/SJVr0wwHtsXirN++3X13/J1luDkdftjVwv7Ii/yuFJd3/zhbLH1m1Lf+hcxZvRcRzef3fE5vK/5FC/n+4xfLlPwAAAAAAAOycO2ci4pVm4/8qS+N/epqM/xmMiNM7UP7jv/+r3M1Xkh0oDii4dybijabjf5fG+A535Vv/z8YDdCcXLs1MH4+IpyLiaHT3ptvjq85bHCF87MuD37Qqvzj+L13S8htjAfMz3a2umog7NTk/ud3rBiLu3Yp4Phv/ezjfs3L8T1r/J03q/zS/r22wjIMv3T7X6tjj8x9ol9p3EUea1v/Lze10bWz+yrWxuab35xjL2gNjjVZBw3IL4IVPvhpsVf46+e8uEtBmaf0/sH7+9ybF+/XMbe78PRHx6kK11ur4Vtv/Pcl7XY3zpz6enJ+/Ph7Rk7y1dv/E5mKGvaqRD418SfP/6Ivr9/8ttf8LedgfEYurT96ih+6ZR4O/t4pH+x/Kk+b/1Pr1//DK+n/zKxO3h39qVf65DdX/J7I6/Wi+R/8fFK29H8eaLByIpglaSrgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ISrRMT/IqmMLq1XKqOjEYMR8XQMVGZm5+ZfvjD70dWp9Fj2/P9K40m/Q/XtpPH8/+HC9sTK7f60rAMR8XVXf3Z89PzszFTZFw8AAAAAAAAAAAAAAAAAAAC7xGA257/Wu3r+f+qPrrKjA9qumv9czvee0mIBOivP/y8+2PQ7a707Hw3QSdWyAwBKs/H8725rHEDntc7/Bw9rmY6GA3SQ9j/sX1vMf18Pwh6g/of9aoN9en3tjgMog/ofAAAAAAD2lAOH7/yaRMTi6/3ZEoXJvwb7w95WKTsAoDTG8ML+VZ0tOwKgLD7jA8nS2j9NJ/u3Hv2ftCcgAAAAAAAAAAAAAGCNI4fM/4f9av35/8b2w162zvz/LPmzRwM8rG3g5cCTpvWjP9T9sNet8xnfA79gn3hcbW/+PwAAAAAAAAAAAADsAn03Lk/OzExfn1t48lbe3B1hbG5lcXJXhLHdlf6IWNrzqD1ldUdE+Ve6cyvViMrGXty4BUeJMZf8ewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFjyXwAAAP//CHogwg==") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) openat$sequencer(0xffffffffffffff9c, 0x0, 0x121201, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 1.934968544s ago: executing program 0 (id=1528): openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1.892074768s ago: executing program 1 (id=1529): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) 1.715877682s ago: executing program 0 (id=1530): syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x180800, 0x0, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000080) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000400)=@ethtool_rx_ntuple={0x21, {0xd, @ah_ip4_spec={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x9, 0x1}, @esp_ip4_spec={@local, @rand_addr=0x64010102, 0x9, 0xda}, 0x7fff, 0xb, 0x6, 0x2a50, 0xfffffffffffffffe}}}) prlimit64(0x0, 0x3, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000280)=ANY=[@ANYBLOB='nls=iso8859-13,nodecompose,nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',part=0x00000000000000ff,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c0000635e1b64046d706f5265"], 0xff, 0x6b3, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 1.715456302s ago: executing program 1 (id=1531): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB="00dae905dc2a8504b395c1043ead5fc99faf525bf20a43754536a4f00e7f0b4064df95abd5c9ba8ebcafe2c58a80945a2ae5d8d4a8821ad62118ab2fa92a3247a8dfa30198d6609ef6edddbfadc8485dd1d6eaada0017df98a6e1ab770bf851dc92c031844ef03e52044dc95bb1391d45fde66f173664dfa781c33376f661af0e0da7e30322472c94017d9faefdd390023ac290b47cd0ffa59b5359c5c992bf52f89f352c6c9df218c807043af27e9bec80ea65d0f6b0d115a36f5b0ad56c25f81d5f4af29236173c2"], 0x1, 0x551a, &(0x7f000000df00)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x80045440, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@gquota}, {@nolargeio}, {@prjquota}]}, 0x1, 0x9839, &(0x7f0000025e80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x141042, 0x58) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 1.317652593s ago: executing program 2 (id=1532): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r0, 0x0, 0x0) 1.11441964s ago: executing program 2 (id=1533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500540008005400000060ec970001983a"], 0xfdef) 958.350143ms ago: executing program 3 (id=1534): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) read(r1, &(0x7f0000000040)=""/59, 0x3b) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x1, 0x0, 0x9}) ioctl$VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000400)={0x0, 0xa}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x10, 0x1409, 0x262543c4cee33fe7, 0x70bd2b, 0x1000}, 0x10}}, 0x20008000) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000000)={r5, 0xfffffff8}, 0x8) r6 = open(0x0, 0x141080, 0x0) landlock_restrict_self(r0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/protocols\x00') r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r7, 0xffffffffffffffff, 0x0) 761.385048ms ago: executing program 0 (id=1535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x40000) 761.078309ms ago: executing program 2 (id=1536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0xa, 0x300) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r9, 0x0, 0x0, 0x0) 543.818636ms ago: executing program 0 (id=1537): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe803f0000000000a8aaaafffeaaaa3d01ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 534.153897ms ago: executing program 2 (id=1538): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0xfff}}, 0x30) 413.676036ms ago: executing program 0 (id=1539): syz_open_dev$dri(0x0, 0x0, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbd) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000ac0)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000380)={0x4000000, 0xf, &(0x7f0000000080)=[0x83, 0xffffffff, 0x4, 0x204, 0x660, 0xfffbfff9, 0x6, 0x8, 0x8, 0x7fff, 0xffffffff, 0x42, 0x9, 0x4, 0x6], 0x0, 0x1}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) 413.241136ms ago: executing program 2 (id=1540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0xd}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x1}}}}, 0x36) 271.931758ms ago: executing program 0 (id=1541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket(0x1a, 0x1, 0x3b) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRESHEX, @ANYRESOCT=r1], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) sched_setscheduler(0x0, 0x2, 0x0) 133.979639ms ago: executing program 2 (id=1542): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x1008004, 0x0, 0x0, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000000c0)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) openat$sequencer(0xffffffffffffff9c, 0x0, 0x121201, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1543): syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x180800, 0x0, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000080) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000400)=@ethtool_rx_ntuple={0x21, {0xd, @ah_ip4_spec={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x9, 0x1}, @esp_ip4_spec={@local, @rand_addr=0x64010102, 0x9, 0xda}, 0x7fff, 0xb, 0x6, 0x2a50, 0xfffffffffffffffe}}}) prlimit64(0x0, 0x3, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000280)=ANY=[@ANYBLOB='nls=iso8859-13,nodecompose,nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',part=0x00000000000000ff,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c0000635e1b64046d706f5265"], 0xff, 0x6b3, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): 33.505137][ T6266] BTRFS info (device loop3): turning on sync discard [ 133.535989][ T6266] BTRFS info (device loop3): turning off discard [ 133.554577][ T6266] BTRFS info (device loop3): disabling free space tree [ 133.862237][ T6266] BTRFS info (device loop3): enabling ssd optimizations [ 133.928900][ T6266] BTRFS info (device loop3): rebuilding free space tree [ 133.978666][ T6266] BTRFS info (device loop3): disabling free space tree [ 134.009712][ T6266] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.039187][ T6266] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.356428][ T5794] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 135.437633][ T6346] loop1: detected capacity change from 0 to 8 [ 135.699952][ T6346] SQUASHFS error: Unable to read directory block [629:26] [ 136.165938][ T6336] loop2: detected capacity change from 0 to 32768 [ 138.089158][ T6359] loop3: detected capacity change from 0 to 32768 [ 138.121315][ T6359] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.109 (6359) [ 138.173711][ T6359] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 138.202119][ T6377] loop2: detected capacity change from 0 to 256 [ 138.220800][ T6359] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 138.240459][ T6377] exfat: Deprecated parameter 'namecase' [ 138.246283][ T6377] exfat: Deprecated parameter 'utf8' [ 138.251818][ T6359] BTRFS info (device loop3): enabling auto defrag [ 138.267830][ T6359] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 138.288656][ T6377] exfat: Unknown parameter '`' [ 138.312658][ T6359] BTRFS info (device loop3): use zstd compression, level 3 [ 138.344765][ T6359] BTRFS info (device loop3): max_inline at 0 [ 138.380432][ T6359] BTRFS info (device loop3): force clearing of disk cache [ 138.413505][ T6359] BTRFS info (device loop3): turning on sync discard [ 138.434921][ T6359] BTRFS info (device loop3): turning off discard [ 138.463145][ T6359] BTRFS info (device loop3): disabling free space tree [ 138.699010][ T6359] BTRFS info (device loop3): enabling ssd optimizations [ 138.783172][ T6359] BTRFS info (device loop3): rebuilding free space tree [ 138.861933][ T6359] BTRFS info (device loop3): disabling free space tree [ 138.901968][ T6359] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 138.933446][ T6359] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 139.004415][ T6372] loop1: detected capacity change from 0 to 32768 [ 139.023574][ T6372] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.114 (6372) [ 139.065828][ T6372] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.086707][ T6372] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 139.121640][ T6372] BTRFS info (device loop1): using free space tree [ 139.190378][ T5794] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.263139][ T6372] BTRFS info (device loop1): enabling ssd optimizations [ 139.287768][ T6372] BTRFS info (device loop1): auto enabling async discard [ 139.351417][ T5994] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop3 scanned by udevd (5994) [ 139.565198][ T6424] loop2: detected capacity change from 0 to 512 [ 139.734112][ T6424] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.119: bad orphan inode 13 [ 139.838621][ T6424] ext4_test_bit(bit=12, block=4) = 1 [ 139.852119][ T5789] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.865871][ T6424] is_bad_inode(inode)=0 [ 139.896901][ T6424] NEXT_ORPHAN(inode)=0 [ 139.923697][ T6424] max_ino=32 [ 139.940367][ T6424] i_nlink=1 [ 139.972611][ T6424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.086172][ T6424] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.119: Unrecognised inode hash code 20 [ 140.124745][ T6424] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.119: Corrupt directory, running e2fsck is recommended [ 140.174255][ T6424] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.119: corrupted in-inode xattr: e_value out of bounds [ 140.198352][ T6430] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.119: Unrecognised inode hash code 20 [ 140.232892][ T5792] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (5792) [ 140.265205][ T6430] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.119: Corrupt directory, running e2fsck is recommended [ 140.317902][ T6430] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.119: corrupted in-inode xattr: e_value out of bounds [ 140.372802][ T6431] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.119: Unrecognised inode hash code 20 [ 140.408747][ T6431] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.119: Corrupt directory, running e2fsck is recommended [ 140.433218][ T6431] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.119: corrupted in-inode xattr: e_value out of bounds [ 140.472726][ T6424] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.119: Unrecognised inode hash code 20 [ 140.513742][ T6424] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.119: Corrupt directory, running e2fsck is recommended [ 140.528025][ T6424] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.119: corrupted in-inode xattr: e_value out of bounds [ 140.549010][ T6423] loop3: detected capacity change from 0 to 32768 [ 140.570102][ T6433] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.119: Unrecognised inode hash code 20 [ 140.599613][ T6433] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.119: Corrupt directory, running e2fsck is recommended [ 140.631272][ T6433] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.119: corrupted in-inode xattr: e_value out of bounds [ 140.817140][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.278874][ T6436] loop1: detected capacity change from 0 to 32768 [ 143.382424][ T6436] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 143.529444][ T6436] XFS (loop1): Ending clean mount [ 144.300583][ T5789] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 144.628207][ T6451] loop2: detected capacity change from 0 to 32768 [ 145.230991][ T6465] loop3: detected capacity change from 0 to 32768 [ 145.364171][ T6465] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 145.401531][ T6465] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 145.453912][ T6465] BTRFS info (device loop3): enabling auto defrag [ 145.487921][ T6467] loop0: detected capacity change from 0 to 32768 [ 145.491488][ T6465] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 145.563611][ T6465] BTRFS info (device loop3): use zstd compression, level 3 [ 145.598671][ T6465] BTRFS info (device loop3): max_inline at 0 [ 145.628136][ T6465] BTRFS info (device loop3): force clearing of disk cache [ 145.650075][ T6465] BTRFS info (device loop3): turning on sync discard [ 145.656856][ T6465] BTRFS info (device loop3): turning off discard [ 145.697947][ T6465] BTRFS info (device loop3): disabling free space tree [ 145.822743][ T6465] BTRFS info (device loop3): enabling ssd optimizations [ 145.948176][ T6465] BTRFS info (device loop3): rebuilding free space tree [ 146.023906][ T6465] BTRFS info (device loop3): disabling free space tree [ 146.041134][ T6465] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 146.052965][ T6465] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 147.268746][ T5794] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 148.430981][ T6510] loop3: detected capacity change from 0 to 32768 [ 148.521301][ T6510] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 148.623544][ T6510] XFS (loop3): Ending clean mount [ 148.855961][ T6510] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 148.897451][ T6510] overlayfs: failed to set xattr on upper [ 148.916951][ T6510] overlayfs: ...falling back to redirect_dir=nofollow. [ 148.930809][ T6510] overlayfs: ...falling back to index=off. [ 148.936896][ T6510] overlayfs: ...falling back to uuid=null. [ 149.225644][ T5794] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 150.023729][ T6498] netlink: 'syz.0.133': attribute type 10 has an invalid length. [ 150.204777][ T6529] loop1: detected capacity change from 0 to 512 [ 150.254502][ T6529] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.141: bad orphan inode 13 [ 150.290384][ T6529] ext4_test_bit(bit=12, block=4) = 1 [ 150.295847][ T6529] is_bad_inode(inode)=0 [ 150.365990][ T6529] NEXT_ORPHAN(inode)=0 [ 150.378004][ T6529] max_ino=32 [ 150.381272][ T6529] i_nlink=1 [ 150.416878][ T6529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.542748][ T6529] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.141: Unrecognised inode hash code 20 [ 150.556717][ T6529] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.141: Corrupt directory, running e2fsck is recommended [ 150.570446][ T6529] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.141: corrupted in-inode xattr: e_value out of bounds [ 150.618349][ T6537] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.141: Unrecognised inode hash code 20 [ 150.657955][ T6537] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.141: Corrupt directory, running e2fsck is recommended [ 150.692558][ T6537] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.141: corrupted in-inode xattr: e_value out of bounds [ 150.738052][ T6529] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.141: Unrecognised inode hash code 20 [ 150.772186][ T6529] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.141: Corrupt directory, running e2fsck is recommended [ 150.798796][ T6529] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.141: corrupted in-inode xattr: e_value out of bounds [ 150.867258][ T6537] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.141: Unrecognised inode hash code 20 [ 150.888729][ T6537] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.141: Corrupt directory, running e2fsck is recommended [ 150.909449][ T6537] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.141: corrupted in-inode xattr: e_value out of bounds [ 150.933007][ T6538] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.141: Unrecognised inode hash code 20 [ 150.949123][ T6538] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.141: Corrupt directory, running e2fsck is recommended [ 150.973318][ T6538] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.141: corrupted in-inode xattr: e_value out of bounds [ 151.095871][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.849702][ T6531] loop0: detected capacity change from 0 to 32768 [ 151.906244][ T6531] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.143 (6531) [ 151.994864][ T6531] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 152.018001][ T6531] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 152.026805][ T6531] BTRFS info (device loop0): enabling auto defrag [ 152.057510][ T6531] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 152.078120][ T6531] BTRFS info (device loop0): use zstd compression, level 3 [ 152.085454][ T6531] BTRFS info (device loop0): max_inline at 0 [ 152.100059][ T6531] BTRFS info (device loop0): force clearing of disk cache [ 152.137795][ T6531] BTRFS info (device loop0): turning on sync discard [ 152.155308][ T6531] BTRFS info (device loop0): turning off discard [ 152.175105][ T6531] BTRFS info (device loop0): disabling free space tree [ 152.325090][ T6531] BTRFS info (device loop0): enabling ssd optimizations [ 152.365950][ T6531] BTRFS info (device loop0): rebuilding free space tree [ 152.433369][ T6531] BTRFS info (device loop0): disabling free space tree [ 152.438417][ T6569] netlink: 'syz.3.149': attribute type 10 has an invalid length. [ 152.448797][ T6531] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 152.477799][ T6531] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 152.740480][ T5799] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 152.950765][ T5792] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop0 scanned by udevd (5792) [ 155.269994][ T6577] loop0: detected capacity change from 0 to 32768 [ 155.304983][ T6577] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 155.377647][ T6577] XFS (loop0): Ending clean mount [ 155.516479][ T6577] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 155.533236][ T6577] overlayfs: failed to set xattr on upper [ 155.546528][ T6577] overlayfs: ...falling back to redirect_dir=nofollow. [ 155.565759][ T6577] overlayfs: ...falling back to index=off. [ 155.571977][ T6577] overlayfs: ...falling back to uuid=null. [ 155.846839][ T5799] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 155.859125][ T6602] netlink: 'syz.3.159': attribute type 10 has an invalid length. [ 156.354773][ T6610] loop0: detected capacity change from 0 to 512 [ 156.405636][ T6610] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.155: bad orphan inode 13 [ 156.438442][ T6610] ext4_test_bit(bit=12, block=4) = 1 [ 156.443892][ T6610] is_bad_inode(inode)=0 [ 156.487849][ T6610] NEXT_ORPHAN(inode)=0 [ 156.492008][ T6610] max_ino=32 [ 156.527112][ T6610] i_nlink=1 [ 156.536922][ T6610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.561504][ T6604] loop1: detected capacity change from 0 to 32768 [ 156.621088][ T6604] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 156.669102][ T6610] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.155: Unrecognised inode hash code 20 [ 156.698514][ T6610] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.155: Corrupt directory, running e2fsck is recommended [ 156.730549][ T6610] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.155: corrupted in-inode xattr: e_value out of bounds [ 156.760048][ T6608] loop3: detected capacity change from 0 to 32768 [ 156.780213][ T6613] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.155: Unrecognised inode hash code 20 [ 156.808430][ T6608] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.161 (6608) [ 156.844789][ T6613] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.155: Corrupt directory, running e2fsck is recommended [ 156.861926][ T6608] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.875049][ T6606] loop2: detected capacity change from 0 to 32768 [ 156.882018][ T5994] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 156.887280][ T6608] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 156.903319][ T6613] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.155: corrupted in-inode xattr: e_value out of bounds [ 156.923246][ T6608] BTRFS info (device loop3): turning on sync discard [ 156.931363][ T6608] BTRFS info (device loop3): setting nodatacow, compression disabled [ 156.940780][ T6610] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.155: Unrecognised inode hash code 20 [ 156.959456][ T6606] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 156.987262][ T6608] BTRFS info (device loop3): turning off barriers [ 157.008045][ T6610] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.155: Corrupt directory, running e2fsck is recommended [ 157.036441][ T6608] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 157.097814][ T6608] BTRFS info (device loop3): trying to use backup root at mount time [ 157.122899][ T6610] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.155: corrupted in-inode xattr: e_value out of bounds [ 157.157771][ T6608] BTRFS info (device loop3): metadata ratio 32769 [ 157.164334][ T6608] BTRFS info (device loop3): max_inline at 0 [ 157.193230][ T6614] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.155: Unrecognised inode hash code 20 [ 157.207907][ T6608] BTRFS info (device loop3): using free space tree [ 157.209109][ T5803] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 157.278043][ T6614] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.155: Corrupt directory, running e2fsck is recommended [ 157.347957][ T6614] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.155: corrupted in-inode xattr: e_value out of bounds [ 157.453711][ T6613] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.155: Unrecognised inode hash code 20 [ 157.515094][ T58] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 157.522559][ T6613] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.155: Corrupt directory, running e2fsck is recommended [ 157.717894][ T6608] BTRFS error (device loop3): failed to load root extent [ 157.783395][ T6613] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.155: corrupted in-inode xattr: e_value out of bounds [ 157.825906][ T6608] BTRFS warning (device loop3): try to load backup roots slot 1 [ 158.019630][ T3515] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 158.243211][ T6608] BTRFS warning (device loop3): couldn't read tree root [ 158.281501][ T6608] BTRFS warning (device loop3): try to load backup roots slot 2 [ 158.343130][ T48] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 158.413122][ T6608] BTRFS warning (device loop3): couldn't read tree root [ 158.428329][ T6608] BTRFS warning (device loop3): try to load backup roots slot 3 [ 158.468314][ T6608] BTRFS info (device loop3): enabling ssd optimizations [ 158.477256][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.503893][ T6608] BTRFS info (device loop3): rebuilding free space tree [ 158.589538][ T6608] BTRFS info (device loop3): checking UUID tree [ 158.886520][ T5794] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.269136][ T6653] netlink: 'syz.0.169': attribute type 10 has an invalid length. [ 159.770819][ T6641] loop1: detected capacity change from 0 to 40427 [ 159.788233][ T6641] F2FS-fs (loop1): heap/no_heap options were deprecated [ 159.824626][ T6641] F2FS-fs (loop1): build fault injection attr: rate: 19, type: 0x7ffff [ 160.398548][ T6658] loop0: detected capacity change from 0 to 32768 [ 160.457975][ T6658] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 160.483862][ T6658] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 160.487089][ T6666] loop1: detected capacity change from 0 to 64 [ 160.509200][ T6658] BTRFS info (device loop0): enabling auto defrag [ 160.517784][ T6658] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 160.531560][ T6658] BTRFS info (device loop0): use zstd compression, level 3 [ 160.571459][ T6658] BTRFS info (device loop0): max_inline at 0 [ 160.591491][ T6658] BTRFS info (device loop0): force clearing of disk cache [ 160.623552][ T6658] BTRFS info (device loop0): turning on sync discard [ 160.637898][ T6658] BTRFS info (device loop0): turning off discard [ 160.644308][ T6658] BTRFS info (device loop0): disabling free space tree [ 160.769704][ T6658] BTRFS info (device loop0): enabling ssd optimizations [ 160.804919][ T6658] BTRFS info (device loop0): rebuilding free space tree [ 160.854855][ T6658] BTRFS info (device loop0): disabling free space tree [ 160.879016][ T6658] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.905511][ T6658] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 161.184456][ T5799] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.398289][ T6662] loop3: detected capacity change from 0 to 32768 [ 161.427236][ T6662] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.171 (6662) [ 161.479989][ T6662] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.496076][ T6662] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 161.510843][ T6662] BTRFS info (device loop3): setting nodatacow, compression disabled [ 161.521461][ T6662] BTRFS info (device loop3): max_inline at 0 [ 161.544181][ T6662] BTRFS info (device loop3): enabling disk space caching [ 161.572142][ T6662] BTRFS info (device loop3): turning off barriers [ 161.596632][ T6662] BTRFS info (device loop3): turning on flush-on-commit [ 161.620341][ T6662] BTRFS info (device loop3): doing ref verification [ 161.664829][ T6662] BTRFS info (device loop3): force clearing of disk cache [ 161.694358][ T6662] BTRFS info (device loop3): enabling ssd optimizations [ 161.718898][ T6662] BTRFS info (device loop3): max_inline at 4096 [ 161.739205][ T6662] BTRFS info (device loop3): disk space caching is enabled [ 162.125472][ T6662] BTRFS info (device loop3): auto enabling async discard [ 162.191295][ T6662] BTRFS info (device loop3): rebuilding free space tree [ 162.271247][ T6662] BTRFS info (device loop3): disabling free space tree [ 162.305649][ T6662] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 162.345486][ T6662] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 162.754197][ T5794] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.856080][ T6725] loop1: detected capacity change from 0 to 32768 [ 163.875389][ T6725] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.185 (6725) [ 164.127441][ T6725] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 164.164742][ T6725] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 164.208111][ T6725] BTRFS info (device loop1): enabling auto defrag [ 164.246269][ T6725] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 164.293432][ T6725] BTRFS info (device loop1): use zstd compression, level 3 [ 164.333686][ T6725] BTRFS info (device loop1): max_inline at 0 [ 164.368578][ T6725] BTRFS info (device loop1): force clearing of disk cache [ 164.403591][ T6725] BTRFS info (device loop1): turning on sync discard [ 164.443629][ T6725] BTRFS info (device loop1): turning off discard [ 164.476272][ T6725] BTRFS info (device loop1): disabling free space tree [ 164.767869][ T6725] BTRFS info (device loop1): enabling ssd optimizations [ 164.832062][ T6725] BTRFS info (device loop1): rebuilding free space tree [ 164.885129][ T6725] BTRFS info (device loop1): disabling free space tree [ 164.906081][ T6725] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 164.929975][ T6725] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 165.317441][ T5789] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 166.992045][ T6771] loop1: detected capacity change from 0 to 32768 [ 167.012920][ T6771] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.192 (6771) [ 167.050783][ T6771] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.064028][ T6771] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 167.092025][ T6771] BTRFS info (device loop1): setting nodatacow, compression disabled [ 167.128912][ T6771] BTRFS info (device loop1): max_inline at 0 [ 167.143793][ T6771] BTRFS info (device loop1): enabling disk space caching [ 167.158682][ T6771] BTRFS info (device loop1): turning off barriers [ 167.173867][ T6771] BTRFS info (device loop1): turning on flush-on-commit [ 167.195892][ T6771] BTRFS info (device loop1): doing ref verification [ 167.206661][ T6771] BTRFS info (device loop1): force clearing of disk cache [ 167.218944][ T6771] BTRFS info (device loop1): enabling ssd optimizations [ 167.226096][ T6771] BTRFS info (device loop1): max_inline at 4096 [ 167.244162][ T6771] BTRFS info (device loop1): disk space caching is enabled [ 167.416572][ T6771] BTRFS info (device loop1): auto enabling async discard [ 167.444135][ T6771] BTRFS info (device loop1): rebuilding free space tree [ 167.490352][ T6771] BTRFS info (device loop1): disabling free space tree [ 167.498263][ T6771] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 167.509515][ T6771] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 167.696736][ T5789] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.184464][ T6808] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 169.660582][ T6810] loop1: detected capacity change from 0 to 32768 [ 169.679513][ T6810] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.201 (6810) [ 169.722589][ T6810] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 169.736250][ T6810] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 169.746210][ T6810] BTRFS info (device loop1): enabling auto defrag [ 169.753169][ T6810] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 169.763421][ T6810] BTRFS info (device loop1): use zstd compression, level 3 [ 169.771079][ T6810] BTRFS info (device loop1): max_inline at 0 [ 169.777296][ T6810] BTRFS info (device loop1): force clearing of disk cache [ 169.785179][ T6810] BTRFS info (device loop1): turning on sync discard [ 169.796881][ T6810] BTRFS info (device loop1): turning off discard [ 169.803852][ T6810] BTRFS info (device loop1): disabling free space tree [ 169.962690][ T6810] BTRFS info (device loop1): enabling ssd optimizations [ 169.972057][ T6810] BTRFS info (device loop1): rebuilding free space tree [ 170.007572][ T6810] BTRFS info (device loop1): disabling free space tree [ 170.023797][ T6810] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 170.043405][ T6810] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 170.282555][ T5789] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 171.933838][ T6840] netlink: 'syz.3.205': attribute type 10 has an invalid length. [ 173.237018][ T6833] loop1: detected capacity change from 0 to 32768 [ 174.613352][ T6851] loop3: detected capacity change from 0 to 32768 [ 174.637199][ T6851] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.210 (6851) [ 174.695201][ T6853] loop2: detected capacity change from 0 to 32768 [ 174.724456][ T6853] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.211 (6853) [ 174.843097][ T6853] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.862559][ T6851] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 174.897941][ T6853] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 174.906729][ T6853] BTRFS info (device loop2): setting nodatacow, compression disabled [ 174.915089][ T6851] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 174.937912][ T6851] BTRFS info (device loop3): enabling auto defrag [ 174.944502][ T6851] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 174.970514][ T6853] BTRFS info (device loop2): max_inline at 0 [ 174.976585][ T6853] BTRFS info (device loop2): enabling disk space caching [ 175.010738][ T6851] BTRFS info (device loop3): use zstd compression, level 3 [ 175.038962][ T6853] BTRFS info (device loop2): turning off barriers [ 175.045504][ T6853] BTRFS info (device loop2): turning on flush-on-commit [ 175.053136][ T6851] BTRFS info (device loop3): max_inline at 0 [ 175.063720][ T6851] BTRFS info (device loop3): force clearing of disk cache [ 175.097822][ T6851] BTRFS info (device loop3): turning on sync discard [ 175.104598][ T6851] BTRFS info (device loop3): turning off discard [ 175.111386][ T6853] BTRFS info (device loop2): doing ref verification [ 175.127990][ T6853] BTRFS info (device loop2): force clearing of disk cache [ 175.135236][ T6853] BTRFS info (device loop2): enabling ssd optimizations [ 175.143560][ T6851] BTRFS info (device loop3): disabling free space tree [ 175.162673][ T6853] BTRFS info (device loop2): max_inline at 4096 [ 175.171422][ T6853] BTRFS info (device loop2): disk space caching is enabled [ 175.342773][ T6851] BTRFS info (device loop3): enabling ssd optimizations [ 175.372677][ T6851] BTRFS info (device loop3): rebuilding free space tree [ 175.382522][ T6853] BTRFS info (device loop2): auto enabling async discard [ 175.412800][ T6851] BTRFS info (device loop3): disabling free space tree [ 175.428764][ T6851] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 175.439644][ T6851] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 175.441671][ T6853] BTRFS info (device loop2): rebuilding free space tree [ 175.489323][ T6853] BTRFS info (device loop2): disabling free space tree [ 175.506547][ T6853] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 175.531452][ T6853] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 175.657056][ T5793] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 175.732858][ T5794] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 179.487225][ T6919] netlink: 'syz.2.221': attribute type 10 has an invalid length. [ 181.178660][ T6946] nbd0: detected capacity change from 0 to 549764202496 [ 181.951712][ T5798] block nbd0: Receive control failed (result -32) [ 182.058291][ T54] block nbd0: Dead connection, failed to find a fallback [ 182.065767][ T54] block nbd0: shutting down sockets [ 182.071491][ T54] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.082068][ T54] Buffer I/O error on dev nbd0, logical block 0, async page read [ 182.099871][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.109128][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 182.118960][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.128080][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 182.136169][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.145419][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 182.167092][ T6954] netlink: 'syz.1.233': attribute type 10 has an invalid length. [ 182.167760][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.184508][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 182.192706][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.207778][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 182.216063][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.226993][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 182.235178][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.244403][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 182.252235][ T5792] ldm_validate_partition_table(): Disk read failed. [ 182.262659][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.272046][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 182.305685][ T6932] loop2: detected capacity change from 0 to 40427 [ 182.313944][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.323249][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 182.328257][ T6932] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 182.331473][ T5792] Dev nbd0: unable to read RDB block 0 [ 182.345375][ T5792] nbd0: unable to read partition table [ 182.369893][ T5792] ldm_validate_partition_table(): Disk read failed. [ 182.408939][ T6957] loop0: detected capacity change from 0 to 4096 [ 182.416858][ T5792] Dev nbd0: unable to read RDB block 0 [ 182.424464][ T6932] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 182.441845][ T6932] F2FS-fs (loop2): invalid crc value [ 182.455099][ T5792] nbd0: unable to read partition table [ 182.463761][ T6957] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 182.475335][ T6932] F2FS-fs (loop2): Found nat_bits in checkpoint [ 182.518538][ T6957] ntfs3: loop0: Failed to load $BadClus (-22). [ 182.711084][ T6932] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 182.755645][ T6932] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 184.937007][ T6983] syz_tun: entered allmulticast mode [ 184.945162][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'. [ 184.975437][ T6980] loop3: detected capacity change from 0 to 1024 [ 184.995124][ T6980] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.010163][ T6985] nbd1: detected capacity change from 0 to 549764202496 [ 185.030124][ T5798] block nbd1: Receive control failed (result -32) [ 185.050288][ T95] block nbd1: Dead connection, failed to find a fallback [ 185.057390][ T95] block nbd1: shutting down sockets [ 185.069325][ T5994] ldm_validate_partition_table(): Disk read failed. [ 185.090197][ T6983] syz_tun (unregistering): left allmulticast mode [ 185.106008][ T5994] Dev nbd1: unable to read RDB block 0 [ 185.106286][ T6980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.114256][ T5994] nbd1: unable to read partition table [ 185.144951][ T5994] ldm_validate_partition_table(): Disk read failed. [ 185.152865][ T5994] Dev nbd1: unable to read RDB block 0 [ 185.159487][ T5994] nbd1: unable to read partition table [ 185.175657][ T6980] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.183418][ T5792] ldm_validate_partition_table(): Disk read failed. [ 185.200808][ T6980] capability: warning: `syz.3.240' uses deprecated v2 capabilities in a way that may be insecure [ 185.252422][ T6991] netlink: 'syz.2.243': attribute type 10 has an invalid length. [ 185.260819][ T5792] Dev nbd1: unable to read RDB block 0 [ 185.269647][ T5792] nbd1: unable to read partition table [ 185.278620][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.299522][ T5792] ldm_validate_partition_table(): Disk read failed. [ 185.368360][ T5792] Dev nbd1: unable to read RDB block 0 [ 185.420505][ T5792] nbd1: unable to read partition table [ 185.529020][ T6998] loop0: detected capacity change from 0 to 64 [ 186.960970][ T7012] nbd2: detected capacity change from 0 to 549764202496 [ 186.986084][ T5798] block nbd2: Receive control failed (result -104) [ 187.192332][ T7004] loop0: detected capacity change from 0 to 32768 [ 187.242814][ T6994] loop1: detected capacity change from 0 to 40427 [ 187.281622][ T6994] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 187.308255][ T6994] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 187.348459][ T6994] F2FS-fs (loop1): invalid crc value [ 187.373632][ T6994] F2FS-fs (loop1): Found nat_bits in checkpoint [ 187.448611][ T5846] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 187.608436][ T6994] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 187.615776][ T6994] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 187.676240][ T5846] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 187.702538][ T5846] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 187.781979][ T5846] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.819431][ T7027] loop0: detected capacity change from 0 to 64 [ 187.837259][ T5846] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 187.964022][ T5846] usb 3-1: config 64 interface 0 has no altsetting 0 [ 188.105668][ T5846] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 188.311812][ T5846] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.454481][ T5846] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 188.507971][ T5846] usb 3-1: config 64 interface 0 has no altsetting 0 [ 188.532878][ T5846] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 188.594123][ T5846] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.653505][ T5846] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 188.691292][ T5846] usb 3-1: config 64 interface 0 has no altsetting 0 [ 188.704375][ T5846] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 188.727528][ T5846] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.743858][ T5846] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 188.759746][ T5846] usb 3-1: config 64 interface 0 has no altsetting 0 [ 188.793252][ T5846] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 188.828118][ T5846] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.898435][ T5846] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 188.938406][ T5846] usb 3-1: config 64 interface 0 has no altsetting 0 [ 189.767103][ T5846] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 189.788763][ T5846] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.800288][ T5846] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 189.827731][ T5846] usb 3-1: config 64 interface 0 has no altsetting 0 [ 189.845721][ T5846] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 189.874144][ T5846] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.903203][ T5846] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 189.929999][ T5846] usb 3-1: config 64 interface 0 has no altsetting 0 [ 190.220881][ T5846] usb 3-1: unable to read config index 7 descriptor/all [ 190.229236][ T7044] netlink: 'syz.1.258': attribute type 10 has an invalid length. [ 190.237300][ T5846] usb 3-1: can't read configurations, error -71 [ 191.530141][ T7054] loop3: detected capacity change from 0 to 2048 [ 191.573193][ T7054] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.575673][ T7056] loop0: detected capacity change from 0 to 64 [ 191.883449][ T7049] loop2: detected capacity change from 0 to 32768 [ 192.075928][ T7062] loop3: detected capacity change from 0 to 1024 [ 192.703191][ T7064] hfsplus: trying to free free bnode 0(1) [ 193.133784][ T48] hfsplus: b-tree write err: -5, ino 4 [ 193.215567][ T7060] loop0: detected capacity change from 0 to 40427 [ 193.255815][ T7060] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 193.265657][ T7059] loop1: detected capacity change from 0 to 32768 [ 193.285052][ T7060] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 193.318166][ T7059] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.269 (7059) [ 193.337405][ T7060] F2FS-fs (loop0): invalid crc value [ 193.392969][ T7068] syz_tun: entered allmulticast mode [ 193.430853][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 193.493023][ T7060] F2FS-fs (loop0): Found nat_bits in checkpoint [ 193.577508][ T7059] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.598068][ T7059] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 193.606855][ T7059] BTRFS info (device loop1): setting nodatacow, compression disabled [ 193.625994][ T7060] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 193.634459][ T7059] BTRFS info (device loop1): max_inline at 0 [ 193.645223][ T7060] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 193.668017][ T7059] BTRFS info (device loop1): enabling disk space caching [ 193.675135][ T7059] BTRFS info (device loop1): turning off barriers [ 193.687497][ T7068] syz_tun (unregistering): left allmulticast mode [ 193.697555][ T7059] BTRFS info (device loop1): turning on flush-on-commit [ 193.711418][ T7059] BTRFS info (device loop1): doing ref verification [ 193.718580][ T7059] BTRFS info (device loop1): force clearing of disk cache [ 193.725884][ T7059] BTRFS info (device loop1): enabling ssd optimizations [ 193.737258][ T7059] BTRFS info (device loop1): max_inline at 4096 [ 193.767774][ T7059] BTRFS info (device loop1): disk space caching is enabled [ 193.878543][ T7059] BTRFS info (device loop1): auto enabling async discard [ 193.904304][ T7059] BTRFS info (device loop1): rebuilding free space tree [ 193.963694][ T7059] BTRFS info (device loop1): disabling free space tree [ 193.976417][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.275'. [ 194.001019][ T7059] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 194.027852][ T7059] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 194.280354][ T5789] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.532952][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.539504][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.633461][ T5994] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop1 scanned by udevd (5994) [ 196.140813][ T7112] loop2: detected capacity change from 0 to 4096 [ 197.064883][ T7112] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 197.097232][ T7112] ntfs3: loop2: Failed to load $BadClus (-22). [ 197.421181][ T7117] syz_tun: entered allmulticast mode [ 197.451109][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 197.471538][ T7107] loop1: detected capacity change from 0 to 32768 [ 197.518443][ T7107] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.280 (7107) [ 197.586506][ T7107] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 197.589444][ T7120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'. [ 197.619180][ T7117] syz_tun (unregistering): left allmulticast mode [ 197.619962][ T7107] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 197.670504][ T7107] BTRFS info (device loop1): using free space tree [ 197.925431][ T7107] BTRFS info (device loop1): enabling ssd optimizations [ 197.932676][ T7107] BTRFS info (device loop1): auto enabling async discard [ 198.097302][ T7143] loop2: detected capacity change from 0 to 1024 [ 198.119259][ T5789] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.694416][ T7147] hfsplus: trying to free free bnode 0(1) [ 199.080842][ T7151] loop1: detected capacity change from 0 to 64 [ 200.954320][ T7153] loop0: detected capacity change from 0 to 40427 [ 200.982891][ T7153] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 200.990851][ T7153] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 201.121670][ T7153] F2FS-fs (loop0): Found nat_bits in checkpoint [ 201.280851][ T7153] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 201.288111][ T7153] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 201.363174][ T7153] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 202.290781][ T3478] hfsplus: b-tree write err: -5, ino 4 [ 202.574439][ T7160] loop3: detected capacity change from 0 to 1024 [ 202.867630][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.293'. [ 203.689905][ T3515] hfsplus: b-tree write err: -5, ino 4 [ 205.032584][ T7187] loop3: detected capacity change from 0 to 1024 [ 205.154559][ T7187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.442651][ T7168] loop0: detected capacity change from 0 to 40427 [ 205.469084][ T7168] F2FS-fs (loop0): invalid crc value [ 205.547808][ T7168] F2FS-fs (loop0): Found nat_bits in checkpoint [ 205.652218][ T7168] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 205.685051][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.820831][ T7184] loop1: detected capacity change from 0 to 40427 [ 206.937214][ T7184] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 206.946651][ T5799] syz-executor: attempt to access beyond end of device [ 206.946651][ T5799] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 206.962115][ T7184] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 206.983740][ T5799] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 207.023078][ T7184] F2FS-fs (loop1): invalid crc value [ 207.067521][ T7184] F2FS-fs (loop1): Found nat_bits in checkpoint [ 207.235923][ T7184] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 207.258617][ T7184] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 207.349736][ T7216] netlink: 'syz.2.307': attribute type 10 has an invalid length. [ 208.189971][ T7227] loop0: detected capacity change from 0 to 1024 [ 208.634229][ T7232] hfsplus: trying to free free bnode 0(1) [ 209.199910][ T7233] loop1: detected capacity change from 0 to 4096 [ 209.232846][ T7233] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.243818][ T1150] hfsplus: b-tree write err: -5, ino 4 [ 209.393203][ T7225] loop2: detected capacity change from 0 to 32768 [ 209.536701][ T7233] EXT4-fs (loop1): Test dummy encryption mode enabled [ 209.610788][ T7225] (syz.2.311,7225,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 209.641995][ T7225] (syz.2.311,7225,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 209.645103][ T7233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.309773][ T7225] JBD2: Ignoring recovery information on journal [ 210.533653][ T7225] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 210.665401][ T7233] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 210.880630][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.322719][ T7235] loop3: detected capacity change from 0 to 40427 [ 211.395758][ T7235] F2FS-fs (loop3): invalid crc value [ 211.425687][ T7235] F2FS-fs (loop3): Found nat_bits in checkpoint [ 211.521063][ T5793] ocfs2: Unmounting device (7,2) on (node local) [ 211.728046][ T7235] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 211.730078][ T7270] netlink: 'syz.1.319': attribute type 10 has an invalid length. [ 211.750938][ T7250] loop0: detected capacity change from 0 to 40427 [ 211.813935][ T7250] F2FS-fs (loop0): invalid crc value [ 211.889175][ T7250] F2FS-fs (loop0): Found nat_bits in checkpoint [ 212.057824][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 212.065688][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 212.072230][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 212.078822][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 212.261309][ T7250] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 213.078765][ T5794] syz-executor: attempt to access beyond end of device [ 213.078765][ T5794] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 213.146328][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 213.685381][ T5846] IPVS: starting estimator thread 0... [ 213.828436][ T7287] IPVS: using max 16 ests per chain, 38400 per kthread [ 214.028153][ T5799] syz-executor: attempt to access beyond end of device [ 214.028153][ T5799] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 214.067501][ T5799] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 214.074015][ T7281] loop2: detected capacity change from 0 to 40427 [ 214.093045][ T5799] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 214.101705][ T7281] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 214.110307][ T7281] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 214.162788][ T7281] F2FS-fs (loop2): invalid crc value [ 214.214126][ T7281] F2FS-fs (loop2): Found nat_bits in checkpoint [ 214.487744][ T7281] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 214.494857][ T7281] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 215.467158][ T7306] loop2: detected capacity change from 0 to 1024 [ 216.259537][ T7292] loop1: detected capacity change from 0 to 32768 [ 217.023401][ T31] hfsplus: b-tree write err: -5, ino 4 [ 217.046350][ T7312] netlink: 'syz.3.329': attribute type 10 has an invalid length. [ 217.577902][ T54] block nbd2: Possible stuck request ffff888021e88000: control (read@0,4096B). Runtime 30 seconds [ 218.405866][ T7348] netlink: 'syz.3.341': attribute type 10 has an invalid length. [ 218.694668][ T7338] loop1: detected capacity change from 0 to 32768 [ 218.864356][ T7338] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 218.873351][ T7352] loop0: detected capacity change from 0 to 1024 [ 218.905385][ T141] (kworker/u4:5,141,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 219.248196][ T3478] hfsplus: b-tree write err: -5, ino 4 [ 220.462489][ T7368] Zero length message leads to an empty skb [ 220.762300][ T7377] netlink: 'syz.0.351': attribute type 10 has an invalid length. [ 221.283516][ T7382] loop3: detected capacity change from 0 to 40427 [ 221.308433][ T7382] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 221.316336][ T7382] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 221.431535][ T7382] F2FS-fs (loop3): Found nat_bits in checkpoint [ 221.602449][ T7382] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 221.609733][ T7382] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 221.792483][ T7382] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 223.335667][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 224.206610][ T7404] loop3: detected capacity change from 0 to 1024 [ 224.206619][ T7391] loop0: detected capacity change from 0 to 32768 [ 224.231028][ T7391] (syz.0.355,7391,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 224.267344][ T7391] (syz.0.355,7391,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 224.503324][ T7391] JBD2: Ignoring recovery information on journal [ 224.735311][ T7414] hfsplus: trying to free free bnode 0(1) [ 225.097361][ T7391] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 225.254429][ T7417] netlink: 'syz.1.363': attribute type 10 has an invalid length. [ 225.283037][ T3478] hfsplus: b-tree write err: -5, ino 4 [ 226.772420][ T5799] ocfs2: Unmounting device (7,0) on (node local) [ 228.479092][ T7438] loop3: detected capacity change from 0 to 32768 [ 228.546013][ T7435] loop2: detected capacity change from 0 to 40427 [ 228.573555][ T7435] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 228.597006][ T7435] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 228.663063][ T7435] F2FS-fs (loop2): invalid crc value [ 228.718222][ T7435] F2FS-fs (loop2): Found nat_bits in checkpoint [ 228.888124][ T7435] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 228.902157][ T7435] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 228.903273][ T7455] netlink: 'syz.0.373': attribute type 10 has an invalid length. [ 229.845431][ T7471] netlink: 'syz.0.385': attribute type 10 has an invalid length. [ 230.431614][ T7467] loop1: detected capacity change from 0 to 32768 [ 230.456916][ T7467] (syz.1.377,7467,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 230.481466][ T7467] (syz.1.377,7467,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 230.542634][ T7467] JBD2: Ignoring recovery information on journal [ 230.734515][ T7467] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 231.299238][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 231.517024][ T7485] loop0: detected capacity change from 0 to 32768 [ 231.784803][ T7497] netlink: 'syz.0.388': attribute type 10 has an invalid length. [ 231.811250][ T7493] loop2: detected capacity change from 0 to 40427 [ 231.883634][ T7493] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 231.906554][ T7493] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 231.940762][ T7493] F2FS-fs (loop2): invalid crc value [ 232.003391][ T7493] F2FS-fs (loop2): Found nat_bits in checkpoint [ 232.083166][ T7493] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 232.302099][ T7493] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 234.493690][ T7531] netlink: 'syz.1.398': attribute type 10 has an invalid length. [ 234.533784][ T7527] loop2: detected capacity change from 0 to 32768 [ 234.843772][ T5102] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 235.019910][ T7529] loop0: detected capacity change from 0 to 32768 [ 235.064319][ T7529] (syz.0.397,7529,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 235.129941][ T7529] (syz.0.397,7529,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 235.270769][ T7529] JBD2: Ignoring recovery information on journal [ 235.409096][ T7529] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 235.576829][ T5799] ocfs2: Unmounting device (7,0) on (node local) [ 235.724943][ T7540] loop8: detected capacity change from 0 to 8 [ 235.743539][ T7540] Dev loop8: unable to read RDB block 8 [ 235.757907][ T7540] loop8: unable to read partition table [ 235.769218][ T7540] loop8: partition table beyond EOD, truncated [ 235.786008][ T7540] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 236.352001][ T7536] loop1: detected capacity change from 0 to 40427 [ 236.361562][ T7536] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 236.375830][ T7536] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 236.400344][ T7536] F2FS-fs (loop1): invalid crc value [ 236.420020][ T7536] F2FS-fs (loop1): Found nat_bits in checkpoint [ 236.514924][ T7536] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 236.522719][ T7536] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 237.764253][ T7562] netlink: 'syz.0.408': attribute type 10 has an invalid length. [ 238.030556][ T54] blk_print_req_error: 92 callbacks suppressed [ 238.030572][ T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.046827][ T54] buffer_io_error: 89 callbacks suppressed [ 238.046840][ T54] Buffer I/O error on dev nbd1, logical block 0, async page read [ 238.063944][ T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.073266][ T54] Buffer I/O error on dev nbd1, logical block 0, async page read [ 238.084882][ T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.095733][ T54] Buffer I/O error on dev nbd1, logical block 0, async page read [ 238.115137][ T95] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.134012][ T95] Buffer I/O error on dev nbd1, logical block 0, async page read [ 238.142420][ T95] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.152264][ T95] Buffer I/O error on dev nbd1, logical block 0, async page read [ 238.160843][ T95] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.170585][ T95] Buffer I/O error on dev nbd1, logical block 0, async page read [ 238.179675][ T95] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.191475][ T95] Buffer I/O error on dev nbd1, logical block 0, async page read [ 238.207245][ T95] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.216649][ T95] Buffer I/O error on dev nbd1, logical block 0, async page read [ 238.224992][ T7567] ldm_validate_partition_table(): Disk read failed. [ 238.259180][ T95] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.268433][ T95] Buffer I/O error on dev nbd1, logical block 0, async page read [ 238.279813][ T95] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.289145][ T95] Buffer I/O error on dev nbd1, logical block 0, async page read [ 238.480279][ T7567] Dev nbd1: unable to read RDB block 0 [ 238.604158][ T7567] nbd1: unable to read partition table [ 238.986539][ T5102] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 238.995502][ T5102] Bluetooth: hci1: Injecting HCI hardware error event [ 239.005799][ T50] Bluetooth: hci1: hardware error 0x00 [ 239.076641][ T7569] ldm_validate_partition_table(): Disk read failed. [ 239.098481][ T7569] Dev nbd1: unable to read RDB block 0 [ 239.104847][ T7569] nbd1: unable to read partition table [ 239.390105][ T7587] loop0: detected capacity change from 0 to 128 [ 239.413547][ T7587] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.503450][ T7587] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 239.681289][ T5799] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.064420][ T7581] loop3: detected capacity change from 0 to 40427 [ 240.086321][ T7581] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 240.119219][ T7581] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 240.148862][ T7581] F2FS-fs (loop3): invalid crc value [ 240.162990][ T7581] F2FS-fs (loop3): Found nat_bits in checkpoint [ 240.299135][ T7585] loop2: detected capacity change from 0 to 40427 [ 240.314901][ T7581] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 240.334908][ T7581] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 240.351486][ T7585] F2FS-fs (loop2): invalid crc value [ 240.381119][ T7585] F2FS-fs (loop2): Found nat_bits in checkpoint [ 240.637904][ T7585] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 241.336100][ T7614] loop1: detected capacity change from 0 to 4096 [ 241.367833][ T50] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 241.391013][ T7614] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 241.753553][ T7616] netlink: 'syz.0.427': attribute type 10 has an invalid length. [ 242.261644][ T8] IPVS: starting estimator thread 0... [ 242.407972][ T7620] IPVS: using max 15 ests per chain, 36000 per kthread [ 242.558577][ T5793] syz-executor: attempt to access beyond end of device [ 242.558577][ T5793] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 242.605298][ T5793] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 242.618245][ T5793] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 242.989221][ T7631] loop8: detected capacity change from 0 to 8 [ 243.120264][ T7631] Dev loop8: unable to read RDB block 8 [ 243.125957][ T7631] loop8: unable to read partition table [ 243.162714][ T7631] loop8: partition table beyond EOD, truncated [ 243.189465][ T7631] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 243.983519][ T7634] loop0: detected capacity change from 0 to 40427 [ 243.998013][ T7634] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 244.019026][ T7634] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 244.082763][ T7634] F2FS-fs (loop0): invalid crc value [ 244.118035][ T7634] F2FS-fs (loop0): Found nat_bits in checkpoint [ 244.252079][ T7634] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 244.269066][ T7634] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 244.320374][ T7652] netlink: 'syz.3.439': attribute type 10 has an invalid length. [ 244.499268][ T7643] loop2: detected capacity change from 0 to 32768 [ 244.510745][ T7643] (syz.2.437,7643,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 244.546915][ T7643] (syz.2.437,7643,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 244.650719][ T7643] JBD2: Ignoring recovery information on journal [ 244.805429][ T7643] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 245.403723][ T7643] ocfs2: Unmounting device (7,2) on (node local) [ 245.450209][ T7654] loop1: detected capacity change from 0 to 40427 [ 245.508619][ T7654] F2FS-fs (loop1): invalid crc value [ 245.555429][ T7654] F2FS-fs (loop1): Found nat_bits in checkpoint [ 245.726079][ T7654] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 246.481228][ T7661] loop3: detected capacity change from 0 to 32768 [ 246.544900][ T95] blk_print_req_error: 22 callbacks suppressed [ 246.544917][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.560558][ T95] buffer_io_error: 22 callbacks suppressed [ 246.560573][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 246.576308][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.585647][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 246.594397][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.603883][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 246.660949][ T7661] (syz.3.443,7661,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 246.716110][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.723375][ T7661] (syz.3.443,7661,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 246.766092][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 246.774963][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.781547][ T7661] JBD2: Ignoring recovery information on journal [ 246.784518][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 246.799713][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.809131][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 246.904887][ T5860] IPVS: starting estimator thread 0... [ 248.532999][ T54] block nbd2: Possible stuck request ffff888021e88000: control (read@0,4096B). Runtime 60 seconds [ 248.577801][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.590406][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.603770][ T7678] ldm_validate_partition_table(): Disk read failed. [ 248.613713][ T54] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.622992][ T7684] IPVS: using max 17 ests per chain, 40800 per kthread [ 248.630070][ T54] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.680473][ T5789] syz-executor: attempt to access beyond end of device [ 248.680473][ T5789] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 248.707381][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.716621][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.724658][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.733914][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.738144][ T5789] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 248.742084][ T7678] Dev nbd0: unable to read RDB block 0 [ 248.754728][ T7661] JBD2: journal reset failed [ 248.756035][ T7678] nbd0: unable to read partition table [ 248.772311][ T7661] (syz.3.443,7661,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 248.780513][ T5789] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 248.821154][ T7661] (syz.3.443,7661,0):ocfs2_check_volume:2434 ERROR: ocfs2 journal load failed! -4 [ 249.914117][ T7701] loop0: detected capacity change from 0 to 32768 [ 249.936096][ T7701] (syz.0.452,7701,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 249.983906][ T7701] (syz.0.452,7701,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 250.054347][ T7701] JBD2: Ignoring recovery information on journal [ 250.193987][ T7701] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 250.559260][ T7712] loop1: detected capacity change from 0 to 40427 [ 250.574055][ T7712] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 250.582322][ T7712] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 250.593192][ T7712] F2FS-fs (loop1): invalid crc value [ 250.625821][ T7712] F2FS-fs (loop1): Found nat_bits in checkpoint [ 250.718985][ T7712] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 250.726242][ T7712] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 250.753566][ T5799] ocfs2: Unmounting device (7,0) on (node local) [ 253.002472][ T7748] loop0: detected capacity change from 0 to 1024 [ 253.345138][ T7749] hfsplus: trying to free free bnode 0(1) [ 254.047455][ T141] hfsplus: b-tree write err: -5, ino 4 [ 254.204001][ T7744] loop1: detected capacity change from 0 to 32768 [ 254.288109][ T7744] (syz.1.459,7744,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 254.376304][ T7744] (syz.1.459,7744,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 254.476446][ T7744] JBD2: Ignoring recovery information on journal [ 254.639736][ T7744] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 254.796517][ T7746] loop3: detected capacity change from 0 to 32768 [ 254.841289][ T7746] (syz.3.466,7746,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 255.479128][ T7746] (syz.3.466,7746,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 255.530028][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 255.583927][ T7746] JBD2: Ignoring recovery information on journal [ 255.784219][ T7746] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 255.962813][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.970664][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.297103][ T5794] ocfs2: Unmounting device (7,3) on (node local) [ 256.314807][ T7753] loop0: detected capacity change from 0 to 40427 [ 256.360543][ T7753] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 256.389083][ T7753] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 256.425941][ T7753] F2FS-fs (loop0): invalid crc value [ 256.452332][ T7753] F2FS-fs (loop0): Found nat_bits in checkpoint [ 256.647463][ T7753] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 256.678540][ T7753] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 257.813881][ T7778] loop1: detected capacity change from 0 to 65536 [ 257.882552][ T7792] loop3: detected capacity change from 0 to 32768 [ 257.918173][ T7778] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 257.969894][ T7792] (syz.3.477,7792,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 258.046333][ T7792] (syz.3.477,7792,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 258.082554][ T7778] XFS (loop1): Ending clean mount [ 258.409696][ T7792] JBD2: Ignoring recovery information on journal [ 258.455704][ T7778] XFS (loop1): Quotacheck needed: Please wait. [ 259.012241][ T7792] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 259.068231][ T7778] XFS (loop1): Quotacheck: Done. [ 259.277441][ T5794] ocfs2: Unmounting device (7,3) on (node local) [ 259.475912][ T7820] cifs: Unknown parameter 'norecovery' [ 259.596242][ T7795] loop0: detected capacity change from 0 to 40427 [ 259.709031][ T7795] F2FS-fs (loop0): invalid crc value [ 259.730878][ T5789] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 259.743328][ T7795] F2FS-fs (loop0): Found nat_bits in checkpoint [ 259.899738][ T7795] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 260.108009][ T5781] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 260.378403][ T5781] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 260.397892][ T5781] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.442912][ T5781] usb 4-1: config 0 interface 0 has no altsetting 0 [ 260.471259][ T5781] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 260.517838][ T5781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.590307][ T5781] usb 4-1: config 0 descriptor?? [ 261.310035][ T5799] syz-executor: attempt to access beyond end of device [ 261.310035][ T5799] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 261.319300][ T5781] usbhid 4-1:0.0: can't add hid device: -71 [ 261.334176][ T5781] usbhid: probe of 4-1:0.0 failed with error -71 [ 261.352765][ T5781] usb 4-1: USB disconnect, device number 2 [ 261.368393][ T5799] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 261.376869][ T5799] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 263.016328][ T7843] loop1: detected capacity change from 0 to 32768 [ 263.054362][ T7843] (syz.1.489,7843,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 263.102158][ T7843] (syz.1.489,7843,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 263.163019][ T7843] JBD2: Ignoring recovery information on journal [ 263.326881][ T7843] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 263.394429][ T7858] loop0: detected capacity change from 0 to 1024 [ 263.537501][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 263.726104][ T7865] hfsplus: trying to free free bnode 0(1) [ 264.281680][ T58] hfsplus: b-tree write err: -5, ino 4 [ 265.569875][ T7871] loop3: detected capacity change from 0 to 40427 [ 265.603183][ T7871] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 265.644899][ T7871] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 265.694267][ T7871] F2FS-fs (loop3): invalid crc value [ 265.755862][ T7871] F2FS-fs (loop3): Found nat_bits in checkpoint [ 266.058382][ T7871] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 266.108028][ T7871] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 267.580420][ T7897] loop0: detected capacity change from 0 to 32768 [ 267.586365][ T7891] loop1: detected capacity change from 0 to 32768 [ 267.655754][ T7891] (syz.1.504,7891,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 267.681604][ T7897] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 267.730891][ T7891] (syz.1.504,7891,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 267.927265][ T7897] XFS (loop0): Ending clean mount [ 267.931797][ T7891] JBD2: Ignoring recovery information on journal [ 267.988203][ T7897] XFS (loop0): Quotacheck needed: Please wait. [ 268.019853][ T7891] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 268.161693][ T7897] XFS (loop0): Quotacheck: Done. [ 269.173692][ T5799] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 269.224071][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 270.838765][ T7938] netlink: 'syz.0.517': attribute type 10 has an invalid length. [ 271.043136][ T7940] loop1: detected capacity change from 0 to 1024 [ 271.525566][ T7942] hfsplus: trying to free free bnode 0(1) [ 271.900621][ T7932] loop3: detected capacity change from 0 to 40427 [ 271.953848][ T7932] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 271.973541][ T3515] hfsplus: b-tree write err: -5, ino 4 [ 272.007688][ T7932] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 272.060053][ T7932] F2FS-fs (loop3): invalid crc value [ 272.137694][ T7932] F2FS-fs (loop3): Found nat_bits in checkpoint [ 272.343158][ T7932] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 272.377751][ T7932] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 272.794286][ T7944] loop0: detected capacity change from 0 to 32768 [ 272.983121][ T7944] (syz.0.519,7944,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 273.455546][ T7944] (syz.0.519,7944,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 273.830099][ T7944] JBD2: Ignoring recovery information on journal [ 273.913788][ T7944] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 274.149703][ T5799] ocfs2: Unmounting device (7,0) on (node local) [ 274.272884][ T7962] loop0: detected capacity change from 0 to 256 [ 274.348089][ T7962] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 274.397741][ T7962] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 274.471939][ T7962] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x640de592, utbl_chksum : 0xe619d30d) [ 274.681921][ T7968] netlink: 'syz.1.527': attribute type 10 has an invalid length. [ 275.055272][ T7972] loop0: detected capacity change from 0 to 1024 [ 276.021438][ T7978] hfsplus: trying to free free bnode 0(1) [ 276.632305][ T11] hfsplus: b-tree write err: -5, ino 4 [ 277.801461][ T7977] loop1: detected capacity change from 0 to 40427 [ 277.827210][ T7977] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 277.850213][ T7977] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 277.875033][ T7996] netlink: 'syz.0.538': attribute type 10 has an invalid length. [ 277.898279][ T7977] F2FS-fs (loop1): invalid crc value [ 277.947456][ T7977] F2FS-fs (loop1): Found nat_bits in checkpoint [ 278.113359][ T7977] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 278.127785][ T7977] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 278.177293][ T7985] loop3: detected capacity change from 0 to 32768 [ 278.226615][ T7985] (syz.3.533,7985,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 278.262152][ T7985] (syz.3.533,7985,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 278.374684][ T7985] JBD2: Ignoring recovery information on journal [ 278.465271][ T7985] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 278.790199][ T8009] loop0: detected capacity change from 0 to 16 [ 278.823162][ T8009] erofs: (device loop0): mounted with root inode @ nid 36. [ 278.998052][ T54] block nbd2: Possible stuck request ffff888021e88000: control (read@0,4096B). Runtime 90 seconds [ 279.012038][ T5794] ocfs2: Unmounting device (7,3) on (node local) [ 279.494030][ T8017] loop0: detected capacity change from 0 to 1024 [ 279.781667][ T8017] hfsplus: trying to free free bnode 0(1) [ 280.591211][ T48] hfsplus: b-tree write err: -5, ino 4 [ 280.696450][ T8028] netlink: 'syz.0.549': attribute type 10 has an invalid length. [ 281.543464][ T8023] loop1: detected capacity change from 0 to 40427 [ 281.570501][ T8023] F2FS-fs (loop1): invalid crc value [ 281.620676][ T8023] F2FS-fs (loop1): Found nat_bits in checkpoint [ 281.782434][ T8023] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 281.954515][ T8032] loop3: detected capacity change from 0 to 32768 [ 282.001560][ T8032] (syz.3.551,8032,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 282.114647][ T8032] (syz.3.551,8032,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 282.260523][ T8032] JBD2: Ignoring recovery information on journal [ 282.401703][ T8032] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 283.248609][ T5789] syz-executor: attempt to access beyond end of device [ 283.248609][ T5789] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 283.300100][ T5794] ocfs2: Unmounting device (7,3) on (node local) [ 283.320924][ T5789] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 283.363882][ T5789] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 283.462056][ T8065] netlink: 'syz.0.560': attribute type 10 has an invalid length. [ 284.905380][ T8080] loop0: detected capacity change from 0 to 256 [ 284.985396][ T8080] FAT-fs (loop0): Directory bread(block 64) failed [ 285.007739][ T8080] FAT-fs (loop0): Directory bread(block 65) failed [ 285.017873][ T8080] FAT-fs (loop0): Directory bread(block 66) failed [ 285.024445][ T8080] FAT-fs (loop0): Directory bread(block 67) failed [ 285.066814][ T8080] FAT-fs (loop0): Directory bread(block 68) failed [ 285.087991][ T8080] FAT-fs (loop0): Directory bread(block 69) failed [ 285.094675][ T8080] FAT-fs (loop0): Directory bread(block 70) failed [ 285.111914][ T8080] FAT-fs (loop0): Directory bread(block 71) failed [ 285.124857][ T8080] FAT-fs (loop0): Directory bread(block 72) failed [ 285.132138][ T8080] FAT-fs (loop0): Directory bread(block 73) failed [ 286.356738][ T8092] netlink: 56 bytes leftover after parsing attributes in process `syz.0.568'. [ 286.492600][ T8086] loop1: detected capacity change from 0 to 32768 [ 286.543726][ T8086] (syz.1.566,8086,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 286.566740][ T8086] (syz.1.566,8086,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 286.624256][ T8086] JBD2: Ignoring recovery information on journal [ 286.657397][ T8094] loop0: detected capacity change from 0 to 1024 [ 286.811708][ T8088] loop3: detected capacity change from 0 to 40427 [ 286.829766][ T8088] F2FS-fs (loop3): invalid crc value [ 286.938946][ T8086] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 287.018503][ T8094] hfsplus: trying to free free bnode 0(1) [ 287.026372][ T8088] F2FS-fs (loop3): Found nat_bits in checkpoint [ 287.158421][ T11] hfsplus: b-tree write err: -5, ino 4 [ 287.364648][ T8088] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 287.399166][ T8105] netlink: 'syz.0.571': attribute type 10 has an invalid length. [ 288.638434][ T9] IPVS: starting estimator thread 0... [ 288.804115][ T8110] IPVS: using max 15 ests per chain, 36000 per kthread [ 288.996098][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 289.218310][ T5794] syz-executor: attempt to access beyond end of device [ 289.218310][ T5794] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 289.257757][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 289.274923][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 290.993482][ T8122] loop0: detected capacity change from 0 to 40427 [ 291.028077][ T8122] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 291.035919][ T8122] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 291.083718][ T8131] loop1: detected capacity change from 0 to 1024 [ 291.117045][ T8122] F2FS-fs (loop0): invalid crc value [ 291.172691][ T8122] F2FS-fs (loop0): Found nat_bits in checkpoint [ 291.190059][ T8131] hfsplus: trying to free free bnode 0(1) [ 291.233227][ T141] hfsplus: b-tree write err: -5, ino 4 [ 291.402665][ T8122] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 291.452909][ T8122] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 291.479320][ T8144] netlink: 'syz.1.584': attribute type 10 has an invalid length. [ 292.242561][ T8145] loop3: detected capacity change from 0 to 32768 [ 292.281198][ T8145] (syz.3.585,8145,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 292.328278][ T8145] (syz.3.585,8145,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 292.365332][ T8145] JBD2: Ignoring recovery information on journal [ 292.442174][ T8145] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 292.797342][ T8147] loop1: detected capacity change from 0 to 32768 [ 292.849769][ T8147] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.587 (8147) [ 293.151723][ T5794] ocfs2: Unmounting device (7,3) on (node local) [ 293.161518][ T8147] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 293.188711][ T8147] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 293.197413][ T8147] BTRFS info (device loop1): using free space tree [ 293.712175][ T8147] BTRFS info (device loop1): enabling ssd optimizations [ 293.760245][ T8147] BTRFS info (device loop1): auto enabling async discard [ 294.014733][ T8174] kernel write not supported for file /video6 (pid: 8174 comm: syz.1.587) [ 294.150506][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 294.167807][ T50] CPU: 0 PID: 50 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 294.175251][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.185350][ T50] Workqueue: hci2 hci_rx_work [ 294.190101][ T50] Call Trace: [ 294.193412][ T50] [ 294.196378][ T50] dump_stack_lvl+0x16c/0x230 [ 294.201107][ T50] ? show_regs_print_info+0x20/0x20 [ 294.206347][ T50] ? load_image+0x3b0/0x3b0 [ 294.210892][ T50] sysfs_create_dir_ns+0x256/0x280 [ 294.216048][ T50] ? hci_rx_work+0x43a/0xd80 [ 294.220665][ T50] ? sysfs_warn_dup+0xa0/0xa0 [ 294.225398][ T50] ? do_raw_spin_unlock+0x121/0x230 [ 294.230671][ T50] kobject_add_internal+0x6b8/0xc70 [ 294.235918][ T50] kobject_add+0x156/0x220 [ 294.240371][ T50] ? __rwlock_init+0x150/0x150 [ 294.245193][ T50] ? kobject_init+0x1e0/0x1e0 [ 294.249897][ T50] ? _raw_spin_unlock+0x28/0x40 [ 294.254785][ T50] ? get_device_parent+0x366/0x390 [ 294.259927][ T50] device_add+0x408/0xc20 [ 294.264284][ T50] hci_conn_add_sysfs+0xd5/0x1e0 [ 294.269343][ T50] le_conn_complete_evt+0xc37/0x1220 [ 294.274647][ T50] ? hci_event_packet+0x4a7/0x1210 [ 294.279883][ T50] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 294.286149][ T50] ? __copy_skb_header+0xa7/0x550 [ 294.291203][ T50] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 294.296887][ T50] ? skb_pull_data+0xfb/0x200 [ 294.301599][ T50] hci_le_conn_complete_evt+0x187/0x440 [ 294.307190][ T50] ? hci_remote_host_features_evt+0x160/0x160 [ 294.313373][ T50] hci_event_packet+0x795/0x1210 [ 294.318353][ T50] ? bis_list+0x290/0x290 [ 294.322705][ T50] ? lockdep_hardirqs_on+0x98/0x150 [ 294.327940][ T50] ? hci_send_to_monitor+0xd7/0x4f0 [ 294.333161][ T50] hci_rx_work+0x43a/0xd80 [ 294.337610][ T50] ? process_scheduled_works+0x957/0x15b0 [ 294.343357][ T50] process_scheduled_works+0xa45/0x15b0 [ 294.348947][ T50] ? assign_work+0x400/0x400 [ 294.353563][ T50] ? assign_work+0x39e/0x400 [ 294.358177][ T50] worker_thread+0xa55/0xfc0 [ 294.363088][ T50] kthread+0x2fa/0x390 [ 294.367186][ T50] ? pr_cont_work+0x560/0x560 [ 294.371895][ T50] ? kthread_blkcg+0xd0/0xd0 [ 294.376511][ T50] ret_from_fork+0x48/0x80 [ 294.380958][ T50] ? kthread_blkcg+0xd0/0xd0 [ 294.385576][ T50] ret_from_fork_asm+0x11/0x20 [ 294.390387][ T50] [ 294.394954][ T50] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 294.409374][ T50] Bluetooth: hci2: failed to register connection device [ 294.477954][ T5789] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 294.754707][ T5994] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5994) [ 296.511188][ T8184] loop0: detected capacity change from 0 to 32768 [ 296.577135][ T8184] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 296.778118][ T8184] XFS (loop0): Ending clean mount [ 296.827271][ T8184] XFS (loop0): Quotacheck needed: Please wait. [ 296.900710][ T8201] netlink: 'syz.3.595': attribute type 10 has an invalid length. [ 296.911934][ T8184] XFS (loop0): Quotacheck: Done. [ 297.325589][ T5799] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 297.507232][ T8191] loop1: detected capacity change from 0 to 40427 [ 297.563925][ T8191] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 297.607918][ T8191] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 297.669959][ T8191] F2FS-fs (loop1): invalid crc value [ 297.717225][ T8191] F2FS-fs (loop1): Found nat_bits in checkpoint [ 297.885092][ T8191] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 297.896872][ T8191] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 297.994639][ T8212] loop0: detected capacity change from 0 to 1024 [ 298.063808][ T8212] hfsplus: trying to free free bnode 0(1) [ 298.099748][ T141] hfsplus: b-tree write err: -5, ino 4 [ 298.515944][ T8204] loop3: detected capacity change from 0 to 40427 [ 298.608984][ T8204] F2FS-fs (loop3): invalid crc value [ 298.662790][ T8204] F2FS-fs (loop3): Found nat_bits in checkpoint [ 299.468477][ T8204] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 300.115266][ T8228] loop0: detected capacity change from 0 to 1024 [ 300.281766][ T8228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.335808][ T8228] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.598460][ T5102] Bluetooth: hci2: command 0x0406 tx timeout [ 300.619430][ T8228] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 1: comm syz.0.603: lblock 1 mapped to illegal pblock 1 (length 3) [ 300.923581][ T5794] syz-executor: attempt to access beyond end of device [ 300.923581][ T5794] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 300.923662][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 300.929119][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 300.959514][ T8228] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 300.959582][ T8228] EXT4-fs (loop0): This should not happen!! Data will be lost [ 300.959582][ T8228] [ 300.962399][ T8228] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 300.970795][ T8228] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 4 with error 28 [ 301.222480][ T8228] EXT4-fs (loop0): This should not happen!! Data will be lost [ 301.222480][ T8228] [ 301.222736][ T8228] EXT4-fs (loop0): Total free blocks count 0 [ 301.222894][ T8228] EXT4-fs (loop0): Free/Dirty block details [ 301.236687][ T8228] EXT4-fs (loop0): free_blocks=4293918720 [ 301.236826][ T8228] EXT4-fs (loop0): dirty_blocks=16 [ 301.236868][ T8228] EXT4-fs (loop0): Block reservation details [ 301.900749][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'. [ 302.338711][ T8250] loop1: detected capacity change from 0 to 1024 [ 302.350698][ T8252] netlink: 'syz.3.605': attribute type 10 has an invalid length. [ 302.394705][ T8250] hfsplus: trying to free free bnode 0(1) [ 302.436387][ T48] hfsplus: b-tree write err: -5, ino 4 [ 303.603340][ T8247] loop0: detected capacity change from 0 to 32768 [ 303.632594][ T8247] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.606 (8247) [ 303.741217][ T8247] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 303.753089][ T8247] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 303.763520][ T8247] BTRFS info (device loop0): setting nodatacow, compression disabled [ 303.773216][ T8247] BTRFS info (device loop0): setting datacow [ 303.779730][ T8247] BTRFS info (device loop0): doing ref verification [ 303.786377][ T8247] BTRFS info (device loop0): force clearing of disk cache [ 303.822696][ T8247] BTRFS info (device loop0): turning off barriers [ 303.839544][ T8247] BTRFS info (device loop0): enabling ssd optimizations [ 303.846676][ T8247] BTRFS info (device loop0): using spread ssd allocation scheme [ 303.897674][ T8247] BTRFS info (device loop0): using free space tree [ 304.178751][ T8247] BTRFS info (device loop0): rebuilding free space tree [ 304.713799][ T5799] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 304.991434][ T8260] loop1: detected capacity change from 0 to 32768 [ 305.069290][ T8260] (syz.1.612,8260,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 305.120190][ T8260] (syz.1.612,8260,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 305.203811][ T5994] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (5994) [ 305.218272][ T8260] JBD2: Ignoring recovery information on journal [ 305.377101][ T8260] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 305.570772][ T8258] loop3: detected capacity change from 0 to 40427 [ 305.618577][ T8258] F2FS-fs (loop3): invalid crc value [ 305.657277][ T8258] F2FS-fs (loop3): Found nat_bits in checkpoint [ 305.842613][ T8258] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 305.971882][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 306.391272][ T8281] loop0: detected capacity change from 0 to 32768 [ 306.546777][ T8281] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 307.195075][ T8298] loop1: detected capacity change from 0 to 64 [ 307.425718][ T5794] syz-executor: attempt to access beyond end of device [ 307.425718][ T5794] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 307.469586][ T5799] ocfs2: Unmounting device (7,0) on (node local) [ 307.540052][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 307.556002][ T8300] syz.2.615 uses obsolete (PF_INET,SOCK_PACKET) [ 307.637400][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 309.422704][ T54] block nbd2: Possible stuck request ffff888021e88000: control (read@0,4096B). Runtime 120 seconds [ 309.549519][ T8314] netlink: 'syz.2.621': attribute type 10 has an invalid length. [ 309.646704][ T8304] loop0: detected capacity change from 0 to 32768 [ 309.683947][ T8304] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.617 (8304) [ 309.740442][ T8304] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 309.769022][ T8304] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 309.858128][ T8304] BTRFS info (device loop0): using free space tree [ 310.404062][ T8304] BTRFS info (device loop0): enabling ssd optimizations [ 310.535959][ T8304] BTRFS info (device loop0): auto enabling async discard [ 311.104094][ T5799] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 312.129059][ T8343] loop0: detected capacity change from 0 to 32768 [ 312.140272][ T8339] loop3: detected capacity change from 0 to 40427 [ 312.182374][ T8339] F2FS-fs (loop3): Image doesn't support compression [ 312.189927][ T8343] (syz.0.625,8343,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 312.236884][ T8339] F2FS-fs (loop3): invalid crc value [ 312.266433][ T8343] (syz.0.625,8343,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 312.315242][ T8339] F2FS-fs (loop3): Found nat_bits in checkpoint [ 312.480672][ T8343] JBD2: Ignoring recovery information on journal [ 312.597899][ T8339] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 312.684604][ T8343] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 313.044330][ T8347] loop1: detected capacity change from 0 to 40427 [ 313.075265][ T8347] F2FS-fs (loop1): invalid crc value [ 313.102282][ T8347] F2FS-fs (loop1): Found nat_bits in checkpoint [ 313.234173][ T8347] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 313.368364][ T5799] ocfs2: Unmounting device (7,0) on (node local) [ 313.834264][ T8367] syz.3.624: attempt to access beyond end of device [ 313.834264][ T8367] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 313.977082][ T8355] f2fs_ckpt-7:3: attempt to access beyond end of device [ 313.977082][ T8355] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 314.130286][ T8355] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 314.440326][ T8371] loop0: detected capacity change from 0 to 1024 [ 314.688842][ T5789] syz-executor: attempt to access beyond end of device [ 314.688842][ T5789] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 314.737876][ T5789] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 314.776407][ T5789] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 314.871555][ T8373] hfsplus: trying to free free bnode 0(1) [ 315.498965][ T58] hfsplus: b-tree write err: -5, ino 4 [ 315.849244][ T8375] loop0: detected capacity change from 0 to 4096 [ 316.607922][ T8379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.630'. [ 317.397392][ T8391] netlink: 'syz.3.632': attribute type 10 has an invalid length. [ 317.403442][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.412149][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.964798][ T8394] loop0: detected capacity change from 0 to 32768 [ 317.974172][ T8394] (syz.0.637,8394,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 317.997968][ T8394] (syz.0.637,8394,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 318.062572][ T8398] loop3: detected capacity change from 0 to 1024 [ 318.078882][ T8394] JBD2: Ignoring recovery information on journal [ 318.186636][ T8401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.641'. [ 318.293042][ T8394] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 318.542919][ T8405] hfsplus: trying to free free bnode 0(1) [ 319.141490][ T58] hfsplus: b-tree write err: -5, ino 4 [ 319.172042][ T8407] loop1: detected capacity change from 0 to 16 [ 319.183366][ T8407] erofs: (device loop1): mounted with root inode @ nid 36. [ 319.202196][ T8407] overlayfs: failed to get redirect (-117) [ 319.387313][ T5799] ocfs2: Unmounting device (7,0) on (node local) [ 320.176576][ T8420] loop0: detected capacity change from 0 to 512 [ 320.479416][ T8420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.547930][ T8420] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.617990][ T8420] Quota error (device loop0): do_check_range: Getting block 3997698 out of range 1-5 [ 320.655741][ T8420] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 320.692415][ T8420] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.644: Failed to acquire dquot type 0 [ 320.949373][ T8432] netlink: 'syz.2.649': attribute type 10 has an invalid length. [ 321.169169][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.251820][ T8418] loop3: detected capacity change from 0 to 32768 [ 321.261490][ T8418] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.647 (8418) [ 321.335504][ T8418] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 321.362379][ T8418] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 321.405760][ T8418] BTRFS info (device loop3): using free space tree [ 321.419129][ T8434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.650'. [ 321.677119][ T8443] loop0: detected capacity change from 0 to 1024 [ 321.951959][ T8418] BTRFS info (device loop3): enabling ssd optimizations [ 321.981676][ T8418] BTRFS info (device loop3): auto enabling async discard [ 322.168345][ T8459] hfsplus: trying to free free bnode 0(1) [ 322.567249][ T5794] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 325.759354][ T58] hfsplus: b-tree write err: -5, ino 4 [ 326.295621][ T8485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.660'. [ 326.302581][ T8477] loop3: detected capacity change from 0 to 40427 [ 326.337012][ T8477] F2FS-fs (loop3): invalid crc value [ 326.399073][ T8477] F2FS-fs (loop3): Found nat_bits in checkpoint [ 326.456523][ T8487] netlink: 'syz.1.661': attribute type 10 has an invalid length. [ 326.544445][ T8477] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 328.137593][ T5794] syz-executor: attempt to access beyond end of device [ 328.137593][ T5794] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 328.195042][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 328.215305][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 328.595796][ T8509] loop1: detected capacity change from 0 to 1024 [ 329.062184][ T8507] loop0: detected capacity change from 0 to 32768 [ 329.071141][ T8514] hfsplus: trying to free free bnode 0(1) [ 329.104362][ T8507] (syz.0.666,8507,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 329.145594][ T8507] (syz.0.666,8507,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 329.216913][ T8507] JBD2: Ignoring recovery information on journal [ 329.279537][ T8519] netlink: 'syz.2.671': attribute type 10 has an invalid length. [ 329.389095][ T8507] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 329.705840][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'. [ 329.730509][ T8507] ocfs2: Unmounting device (7,0) on (node local) [ 329.787231][ T8522] loop3: detected capacity change from 0 to 4096 [ 329.938293][ T8527] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 330.868926][ T11] hfsplus: b-tree write err: -5, ino 4 [ 331.058891][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.681'. [ 331.178865][ T8544] netlink: 'syz.1.680': attribute type 10 has an invalid length. [ 331.853799][ T8548] loop3: detected capacity change from 0 to 256 [ 331.980414][ T8548] FAT-fs (loop3): Directory bread(block 64) failed [ 332.015183][ T8548] FAT-fs (loop3): Directory bread(block 65) failed [ 332.054135][ T8548] FAT-fs (loop3): Directory bread(block 66) failed [ 332.090915][ T8548] FAT-fs (loop3): Directory bread(block 67) failed [ 332.097933][ T8548] FAT-fs (loop3): Directory bread(block 68) failed [ 332.104538][ T8548] FAT-fs (loop3): Directory bread(block 69) failed [ 332.111337][ T8548] FAT-fs (loop3): Directory bread(block 70) failed [ 332.118426][ T8548] FAT-fs (loop3): Directory bread(block 71) failed [ 332.167822][ T8548] FAT-fs (loop3): Directory bread(block 72) failed [ 332.210001][ T8548] FAT-fs (loop3): Directory bread(block 73) failed [ 332.630059][ T8552] loop1: detected capacity change from 0 to 128 [ 332.652496][ T8552] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 335.068298][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'. [ 335.264138][ T8579] loop3: detected capacity change from 0 to 1024 [ 335.587545][ T8581] netlink: 'syz.1.693': attribute type 10 has an invalid length. [ 335.718248][ T8583] hfsplus: trying to free free bnode 0(1) [ 336.373472][ T8587] loop1: detected capacity change from 0 to 16 [ 336.409273][ T8587] erofs: (device loop1): mounted with root inode @ nid 36. [ 336.487807][ T8587] overlayfs: missing 'workdir' [ 336.722283][ T8591] tipc: Started in network mode [ 336.737888][ T8591] tipc: Node identity ac1414aa, cluster identity 4711 [ 336.772920][ T8591] tipc: Enabled bearer , priority 10 [ 337.168513][ T8597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.700'. [ 337.192434][ T3515] hfsplus: b-tree write err: -5, ino 4 [ 337.770199][ T5781] tipc: Node number set to 2886997162 [ 337.859309][ T8593] loop1: detected capacity change from 0 to 32768 [ 337.918557][ T8604] netlink: 'syz.3.703': attribute type 10 has an invalid length. [ 338.044454][ T8593] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 338.276673][ T8593] XFS (loop1): Ending clean mount [ 338.331238][ T8593] XFS (loop1): Quotacheck needed: Please wait. [ 338.596541][ T8593] XFS (loop1): Quotacheck: Done. [ 339.118683][ T5789] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 339.280940][ T8616] trusted_key: syz.3.705 sent an empty control message without MSG_MORE. [ 339.797964][ T54] block nbd2: Possible stuck request ffff888021e88000: control (read@0,4096B). Runtime 150 seconds [ 339.868726][ T8630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.710'. [ 340.185422][ T8635] netlink: 92 bytes leftover after parsing attributes in process `syz.0.713'. [ 340.336495][ T8620] loop3: detected capacity change from 0 to 40427 [ 340.360789][ T8620] F2FS-fs (loop3): heap/no_heap options were deprecated [ 340.389307][ T8620] F2FS-fs (loop3): build fault injection attr: rate: 19, type: 0x7ffff [ 340.728687][ T8642] netlink: 'syz.0.714': attribute type 10 has an invalid length. [ 340.905788][ T8647] loop1: detected capacity change from 0 to 1024 [ 340.939498][ T8647] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 341.023262][ T8647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.096102][ T8647] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 341.173836][ T8647] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 341.428075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 341.806641][ T8644] loop3: detected capacity change from 0 to 40427 [ 341.870863][ T8644] F2FS-fs (loop3): invalid crc value [ 341.911772][ T8644] F2FS-fs (loop3): Found nat_bits in checkpoint [ 342.165022][ T8644] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 343.338737][ T5794] syz-executor: attempt to access beyond end of device [ 343.338737][ T5794] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 343.432764][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 343.460680][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 343.659793][ T8647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 343.901740][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.079682][ T8668] overlayfs: failed to clone upperpath [ 344.331884][ T8671] loop1: detected capacity change from 0 to 4096 [ 344.766209][ T8679] netlink: 'syz.3.725': attribute type 10 has an invalid length. [ 346.436284][ T8688] loop3: detected capacity change from 0 to 256 [ 346.495004][ T8688] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 346.578659][ T8688] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 348.354899][ T8696] loop1: detected capacity change from 0 to 2048 [ 351.078198][ T8710] netlink: 'syz.3.735': attribute type 10 has an invalid length. [ 351.155727][ T8698] loop1: detected capacity change from 0 to 32768 [ 351.194777][ T8698] (syz.1.731,8698,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 351.213542][ T8698] (syz.1.731,8698,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 352.490450][ T8698] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 352.490895][ T8698] (syz.1.731,8698,0):ocfs2_initialize_super:2287 ERROR: status = -12 [ 352.594117][ T8698] (syz.1.731,8698,0):ocfs2_fill_super:1178 ERROR: status = -12 [ 352.796985][ T8723] loop3: detected capacity change from 0 to 1024 [ 353.222502][ T8734] hfsplus: trying to free free bnode 0(1) [ 354.410925][ T8745] loop1: detected capacity change from 0 to 4096 [ 354.429947][ T8745] EXT4-fs (loop1): Test dummy encryption mode enabled [ 354.436792][ T8745] EXT4-fs (loop1): unsupported descriptor size 255 [ 354.507720][ T5994] blk_print_req_error: 6 callbacks suppressed [ 354.507737][ T5994] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 355.047511][ T3515] hfsplus: b-tree write err: -5, ino 4 [ 355.509928][ T8749] netlink: 'syz.3.748': attribute type 10 has an invalid length. [ 356.965082][ T8752] loop1: detected capacity change from 0 to 32768 [ 357.035774][ T8752] (syz.1.749,8752,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 357.102539][ T8752] (syz.1.749,8752,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 357.170133][ T8752] JBD2: Ignoring recovery information on journal [ 357.268149][ T8752] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 357.540587][ T8751] ocfs2: Unmounting device (7,1) on (node local) [ 358.278894][ T8760] loop3: detected capacity change from 0 to 40427 [ 358.341111][ T8760] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 358.382488][ T8760] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 358.721217][ T8760] F2FS-fs (loop3): invalid crc value [ 359.268827][ T8760] F2FS-fs (loop3): Found nat_bits in checkpoint [ 359.314352][ T8782] netlink: 'syz.2.758': attribute type 10 has an invalid length. [ 359.710046][ T8760] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 359.747958][ T8760] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 360.523106][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.760'. [ 361.015473][ T8792] bond0: (slave team0): Releasing backup interface [ 361.095592][ T8792] team0 (unregistering): Port device team_slave_0 removed [ 361.123434][ T8792] team0 (unregistering): Port device team_slave_1 removed [ 362.805605][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'. [ 363.079631][ T8814] netlink: 'syz.3.769': attribute type 10 has an invalid length. [ 364.444490][ T8821] loop3: detected capacity change from 0 to 32768 [ 364.475828][ T8821] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.772 (8821) [ 364.513416][ T8821] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 364.533697][ T8821] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 364.553648][ T8821] BTRFS info (device loop3): using free space tree [ 364.667855][ T8821] BTRFS info (device loop3): enabling ssd optimizations [ 364.796768][ T8821] BTRFS info (device loop3): auto enabling async discard [ 365.596485][ T5794] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 366.042273][ T5994] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop3 scanned by udevd (5994) [ 366.378501][ T8856] netlink: 'syz.2.779': attribute type 10 has an invalid length. [ 367.244260][ T8849] loop3: detected capacity change from 0 to 40427 [ 367.339893][ T8849] F2FS-fs (loop3): invalid crc value [ 367.467189][ T8849] F2FS-fs (loop3): Found nat_bits in checkpoint [ 367.637853][ T8849] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 369.042466][ T5794] syz-executor: attempt to access beyond end of device [ 369.042466][ T5794] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 369.067819][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 369.074773][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 369.877821][ T54] block nbd2: Possible stuck request ffff888021e88000: control (read@0,4096B). Runtime 180 seconds [ 370.026961][ T8875] loop3: detected capacity change from 0 to 16 [ 370.054179][ T8875] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 370.390867][ T8877] loop3: detected capacity change from 0 to 1024 [ 370.423981][ T8877] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 370.445976][ T8877] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 370.488862][ T8877] EXT4-fs error (device loop3): ext4_get_journal_inode:5807: inode #5: comm syz.3.785: unexpected bad inode w/o EXT4_IGET_BAD [ 370.518076][ T8877] EXT4-fs (loop3): no journal found [ 370.533637][ T8877] EXT4-fs (loop3): can't get journal size [ 370.548036][ T8877] EXT4-fs error (device loop3): ext4_protect_reserved_inode:160: inode #5: comm syz.3.785: unexpected bad inode w/o EXT4_IGET_BAD [ 370.574455][ T8877] EXT4-fs (loop3): failed to initialize system zone (-117) [ 370.587726][ T8877] EXT4-fs (loop3): mount failed [ 371.938063][ T8888] netlink: 'syz.0.788': attribute type 10 has an invalid length. [ 372.819202][ T8894] loop3: detected capacity change from 0 to 4096 [ 372.906850][ T8897] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 372.993735][ T8894] overlayfs: upper fs does not support tmpfile. [ 373.025408][ T8894] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 373.041461][ T8899] warning: `syz.0.793' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 373.071093][ T8894] overlayfs: failed to set xattr on upper [ 373.090113][ T8900] loop2: detected capacity change from 0 to 7 [ 373.104665][ T8894] overlayfs: ...falling back to redirect_dir=nofollow. [ 373.122024][ T8894] overlayfs: ...falling back to index=off. [ 373.137723][ T8900] loop2: [POWERTEC] p1 [ 373.147652][ T8894] overlayfs: ...falling back to uuid=null. [ 373.162408][ T8900] loop2: p1 start 1701603686 is beyond EOD, truncated [ 373.692500][ T8907] loop3: detected capacity change from 0 to 1024 [ 374.092243][ T8912] netlink: 'syz.1.798': attribute type 10 has an invalid length. [ 374.643414][ T8916] hfsplus: trying to free free bnode 0(1) [ 376.502260][ T3515] hfsplus: b-tree write err: -5, ino 4 [ 377.143317][ T8943] netlink: 'syz.3.808': attribute type 10 has an invalid length. [ 378.874505][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.881102][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.123169][ T8946] loop3: detected capacity change from 0 to 40427 [ 379.144182][ T8946] F2FS-fs (loop3): invalid crc value [ 379.172851][ T8946] F2FS-fs (loop3): Found nat_bits in checkpoint [ 379.271961][ T8946] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 380.323873][ T5794] syz-executor: attempt to access beyond end of device [ 380.323873][ T5794] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 380.372583][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 380.387827][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 381.168321][ T8974] netlink: 'syz.0.817': attribute type 10 has an invalid length. [ 382.093911][ T8976] loop3: detected capacity change from 0 to 40427 [ 382.136886][ T8976] F2FS-fs (loop3): invalid crc value [ 382.161317][ T8976] F2FS-fs (loop3): Found nat_bits in checkpoint [ 382.298569][ T8976] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 382.475030][ T5794] syz-executor: attempt to access beyond end of device [ 382.475030][ T5794] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 382.522991][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 384.002437][ T9002] loop3: detected capacity change from 0 to 65536 [ 384.054436][ T9002] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 384.102225][ T9002] XFS (loop3): Ending clean mount [ 385.482198][ T28] audit: type=1800 audit(1756611518.738:2): pid=9016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.821" name="file1" dev="loop3" ino=38 res=0 errno=0 [ 385.541320][ T5794] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 385.951261][ T9021] netlink: 'syz.1.829': attribute type 10 has an invalid length. [ 386.345096][ T9023] loop3: detected capacity change from 0 to 512 [ 386.383442][ T9023] EXT4-fs: Ignoring removed oldalloc option [ 386.399897][ T9023] EXT4-fs: inline encryption not supported [ 386.408320][ T9023] EXT4-fs: Ignoring removed mblk_io_submit option [ 386.444456][ T9023] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 386.599257][ T9023] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.828: bg 0: block 64: padding at end of block bitmap is not set [ 386.668784][ T9023] Quota error (device loop3): write_blk: dquota write failed [ 386.846056][ T9023] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 386.873168][ T9023] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.828: Failed to acquire dquot type 0 [ 386.905595][ T9023] EXT4-fs (loop3): 1 truncate cleaned up [ 386.923661][ T9023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.957488][ T9023] Quota error (device loop3): write_blk: dquota write failed [ 386.972881][ T9023] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 386.987819][ T9023] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.828: Failed to acquire dquot type 0 [ 387.064798][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.958214][ T9041] loop3: detected capacity change from 0 to 32768 [ 387.976682][ T9051] netlink: 'syz.2.839': attribute type 10 has an invalid length. [ 387.995427][ T9041] (syz.3.834,9041,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 388.179840][ T9041] (syz.3.834,9041,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 388.653416][ T9041] JBD2: Ignoring recovery information on journal [ 388.987533][ T9041] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 389.345019][ T9041] ocfs2: Unmounting device (7,3) on (node local) [ 389.985018][ T28] audit: type=1326 audit(1756611523.298:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9066 comm="syz.0.845" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f541478ebe9 code=0x0 [ 391.162904][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.848'. [ 391.545224][ T9083] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 392.467735][ T5157] udevd[5157]: worker [5792] /devices/virtual/block/nbd2 timeout; kill it [ 392.469269][ T9091] overlayfs: failed to resolve './file0': -2 [ 392.498048][ T5157] udevd[5157]: seq 11292 '/devices/virtual/block/nbd2' killed [ 395.707902][ T9117] capability: warning: `syz.2.861' uses 32-bit capabilities (legacy support in use) [ 396.673355][ T9120] netlink: 'syz.1.863': attribute type 10 has an invalid length. [ 396.742801][ T9122] netlink: 40 bytes leftover after parsing attributes in process `syz.2.864'. [ 397.704533][ T9126] netlink: 'syz.2.865': attribute type 1 has an invalid length. [ 401.548761][ T54] block nbd2: Possible stuck request ffff888021e88000: control (read@0,4096B). Runtime 210 seconds [ 402.484959][ T9153] overlayfs: failed to clone upperpath [ 402.634496][ T9155] netlink: 'syz.1.875': attribute type 10 has an invalid length. [ 405.348562][ T9188] netlink: 'syz.2.888': attribute type 10 has an invalid length. [ 409.659933][ T9225] netlink: 'syz.1.901': attribute type 10 has an invalid length. [ 414.119700][ T9257] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 418.951529][ T9289] netlink: 'syz.2.924': attribute type 10 has an invalid length. [ 423.100486][ T9331] netlink: 'syz.3.937': attribute type 10 has an invalid length. [ 424.236548][ T9338] dvmrp8: entered allmulticast mode [ 424.297114][ T9338] dvmrp8: left allmulticast mode [ 426.031397][ T9367] netlink: 'syz.0.950': attribute type 10 has an invalid length. [ 428.619349][ T9388] tipc: Enabling of bearer rejected, failed to enable media [ 428.915665][ T9399] netlink: 'syz.3.962': attribute type 10 has an invalid length. [ 429.034110][ T9402] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 431.962937][ T54] block nbd2: Possible stuck request ffff888021e88000: control (read@0,4096B). Runtime 240 seconds [ 432.539615][ T9429] netlink: 'syz.1.973': attribute type 10 has an invalid length. [ 433.363194][ T9435] netlink: 'syz.0.975': attribute type 29 has an invalid length. [ 433.383142][ T9435] netlink: 'syz.0.975': attribute type 29 has an invalid length. [ 433.407970][ T9435] netlink: 'syz.0.975': attribute type 29 has an invalid length. [ 435.801784][ T9462] netlink: 'syz.1.985': attribute type 10 has an invalid length. [ 436.160360][ T9448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.207822][ T9486] 9pnet: p9_errstr2errno: server reported unknown error @cF S+ [ 439.558962][ T9493] netlink: 'syz.0.995': attribute type 10 has an invalid length. [ 440.322969][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.330757][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.512948][ T9523] netlink: 'syz.1.1005': attribute type 10 has an invalid length. [ 444.951515][ T9552] netlink: 'syz.3.1018': attribute type 10 has an invalid length. [ 446.609585][ T9567] process 'syz.3.1023' launched '/dev/fd/5' with NULL argv: empty string added [ 447.918902][ T9584] netlink: 'syz.1.1031': attribute type 10 has an invalid length. [ 450.718782][ T9605] Invalid option length (1047378) for dns_resolver key [ 451.964087][ T9618] netlink: 'syz.0.1042': attribute type 10 has an invalid length. [ 454.362250][ T9645] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 455.248603][ T9653] netlink: 'syz.3.1054': attribute type 10 has an invalid length. [ 457.853229][ T9680] netlink: 'syz.2.1066': attribute type 10 has an invalid length. [ 462.038078][ T54] block nbd2: Possible stuck request ffff888021e88000: control (read@0,4096B). Runtime 270 seconds [ 462.619350][ T9717] netlink: 'syz.0.1078': attribute type 10 has an invalid length. [ 465.333358][ T9743] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 466.044881][ T9752] netlink: 'syz.1.1090': attribute type 10 has an invalid length. [ 469.748616][ T9779] netlink: 'syz.0.1100': attribute type 10 has an invalid length. [ 473.294077][ T9804] netlink: 'syz.0.1109': attribute type 10 has an invalid length. [ 475.531983][ T9810] overlayfs: missing 'lowerdir' [ 482.230581][ T9889] netlink: 'syz.2.1140': attribute type 8 has an invalid length. [ 484.159943][ T9909] overlayfs: failed to clone upperpath [ 484.169931][ T9909] overlayfs: failed to clone upperpath [ 492.127758][ T54] block nbd2: Possible stuck request ffff888021e88000: control (read@0,4096B). Runtime 300 seconds [ 495.780284][T10054] overlayfs: failed to clone upperpath [ 501.722793][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.729310][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.738460][T10133] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1234'. [ 503.903250][T10162] overlayfs: failed to clone upperpath [ 506.378484][T10193] fuse: Bad value for 'fd' [ 506.652272][T10203] netlink: 'syz.2.1258': attribute type 4 has an invalid length. [ 507.514667][T10215] netlink: 'syz.2.1265': attribute type 10 has an invalid length. [ 507.558399][T10215] netlink: 'syz.2.1265': attribute type 10 has an invalid length. [ 510.848051][ T5102] Bluetooth: hci0: unexpected event for opcode 0x200d [ 514.365949][ T5102] Bluetooth: hci0: unexpected event for opcode 0x0c23 [ 516.427074][T10332] netlink: 'syz.2.1313': attribute type 5 has an invalid length. [ 517.003428][ T5102] Bluetooth: hci0: command 0x0406 tx timeout [ 519.361692][T10373] netlink: 'syz.2.1331': attribute type 6 has an invalid length. [ 522.199436][ T54] block nbd2: Possible stuck request ffff888021e88000: control (read@0,4096B). Runtime 330 seconds [ 524.059909][T10443] tipc: Started in network mode [ 524.064999][T10443] tipc: Node identity 4, cluster identity 4711 [ 524.075114][T10443] tipc: Node number set to 4 [ 529.759731][T10521] fuse: Bad value for 'fd' [ 533.018323][T10577] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1414'. [ 533.059348][T10577] unsupported nla_type 224 [ 533.775806][ T5102] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 537.330173][T10651] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1444'. [ 537.797696][ T5102] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 537.808025][ T5102] Bluetooth: hci0: Injecting HCI hardware error event [ 537.817141][ T5102] Bluetooth: hci0: hardware error 0x00 [ 538.225415][T10668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1451'. [ 539.285459][T10685] overlayfs: failed to clone upperpath [ 539.887897][ T5102] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 542.894380][T10729] netlink: 'syz.1.1473': attribute type 4 has an invalid length. [ 544.359191][T10742] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1479'. [ 545.045389][T10754] netlink: 'syz.1.1484': attribute type 10 has an invalid length. [ 546.027799][T10778] netlink: 'syz.2.1495': attribute type 10 has an invalid length. [ 546.080765][T10778] team0: Port device macvlan1 added [ 546.099919][T10780] netlink: 'syz.3.1494': attribute type 10 has an invalid length. [ 546.957192][T10800] netlink: 'syz.3.1504': attribute type 10 has an invalid length. [ 548.800688][T10831] netlink: 'syz.3.1514': attribute type 10 has an invalid length. [ 549.598148][T10849] overlayfs: failed to clone upperpath [ 549.701240][T10853] netlink: 'syz.3.1524': attribute type 10 has an invalid length. [ 550.561239][T10871] overlayfs: failed to clone upperpath [ 551.099082][ T28] audit: type=1326 audit(1756611684.488:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.3.1534" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb99d8ebe9 code=0x0 [ 551.178165][T10885] netlink: 'syz.2.1536': attribute type 10 has an invalid length. [ 551.231671][T10887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 551.239571][T10887] IPv6: NLM_F_CREATE should be set when creating new route [ 551.246915][T10887] IPv6: NLM_F_CREATE should be set when creating new route [ 551.254410][T10887] IPv6: NLM_F_CREATE should be set when creating new route [ 551.293300][T10889] fuse: Bad value for 'fd' [ 552.278114][ T54] block nbd2: Possible stuck request ffff888021e88000: control (read@0,4096B). Runtime 360 seconds [ 552.287887][ T29] INFO: task udevd:5792 blocked for more than 143 seconds. [ 552.296365][ T29] Not tainted syzkaller #0 [ 552.306758][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 552.326805][ T29] task:udevd state:D stack:24136 pid:5792 ppid:5157 flags:0x00004006 [ 552.348083][ T29] Call Trace: [ 552.351436][ T29] [ 552.354410][ T29] __schedule+0x14d2/0x44d0 [ 552.388075][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 552.406236][ T29] ? asan.module_dtor+0x20/0x20 [ 552.424746][ T29] ? mark_lock+0x94/0x320 [ 552.444979][ T29] ? lock_chain_count+0x20/0x20 [ 552.457697][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 552.462808][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 552.497581][ T29] schedule+0xbd/0x170 [ 552.501829][ T29] io_schedule+0x80/0xd0 [ 552.506127][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 552.535490][ T29] ? folio_wait_bit+0x30/0x30 [ 552.542149][ T29] ? _compound_head+0x120/0x120 [ 552.547322][ T29] ? filemap_add_folio+0x192/0x3c0 [ 552.553305][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 552.559192][ T29] ? blkdev_writepage+0x30/0x30 [ 552.564280][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 552.570659][ T29] ? blkdev_writepage+0x30/0x30 [ 552.575742][ T29] read_part_sector+0xd2/0x350 [ 552.590447][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 552.602690][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 552.614519][ T29] ? put_partition+0x350/0x350 [ 552.625842][ T29] ? alloc_pages+0x4dc/0x740 [ 552.635804][ T29] bdev_disk_changed+0x73a/0x1410 [ 552.652637][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 552.670884][ T29] ? iput+0x347/0x920 [ 552.685361][ T29] blkdev_get_whole+0x30d/0x390 [ 552.696990][ T29] blkdev_get_by_dev+0x279/0x600 [ 552.713395][ T29] blkdev_open+0x152/0x360 [ 552.726161][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 552.739422][ T29] do_dentry_open+0x8c6/0x1500 [ 552.753695][ T29] path_openat+0x274b/0x3190 [ 552.773517][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 552.780752][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.786912][ T29] ? verify_lock_unused+0x140/0x140 [ 552.792250][ T29] ? do_filp_open+0x3d0/0x3d0 [ 552.797012][ T29] ? __virt_addr_valid+0x18c/0x540 [ 552.802297][ T29] do_filp_open+0x1c5/0x3d0 [ 552.807034][ T29] ? vfs_tmpfile+0x490/0x490 [ 552.811815][ T29] ? _raw_spin_unlock+0x28/0x40 [ 552.816727][ T29] ? alloc_fd+0x58f/0x630 [ 552.821179][ T29] do_sys_openat2+0x12c/0x1c0 [ 552.825916][ T29] ? do_sys_open+0xe0/0xe0 [ 552.830457][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 552.836491][ T29] ? lock_chain_count+0x20/0x20 [ 552.841662][ T29] __x64_sys_openat+0x139/0x160 [ 552.846577][ T29] do_syscall_64+0x55/0xb0 [ 552.851106][ T29] ? clear_bhb_loop+0x40/0x90 [ 552.855829][ T29] ? clear_bhb_loop+0x40/0x90 [ 552.860637][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.866582][ T29] RIP: 0033:0x7f8752ca7407 [ 552.871109][ T29] RSP: 002b:00007ffdff4ebad0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 552.879778][ T29] RAX: ffffffffffffffda RBX: 00007f8753488880 RCX: 00007f8752ca7407 [ 552.887940][ T29] RDX: 00000000000a0800 RSI: 000055c7ec8404d0 RDI: ffffffffffffff9c [ 552.895963][ T29] RBP: 000055c7ec83f910 R08: 0000000000000000 R09: 0000000000000000 [ 552.905114][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c7ec859320 [ 552.913309][ T29] R13: 000055c7ec857410 R14: 0000000000000000 R15: 000055c7ec859320 [ 552.922530][ T29] [ 552.925657][ T29] [ 552.925657][ T29] Showing all locks held in the system: [ 552.933588][ T29] 1 lock held by khungtaskd/29: [ 552.938541][ T29] #0: ffffffff8cd2fbe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 552.948615][ T29] 4 locks held by kworker/u4:6/1150: [ 552.953981][ T29] 2 locks held by getty/5555: [ 552.963310][ T29] #0: ffff88802ce4c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 552.973290][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 552.983514][ T29] 1 lock held by udevd/5792: [ 552.995457][ T29] #0: ffff888021d2f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 553.005697][ T29] [ 553.011124][ T29] ============================================= [ 553.011124][ T29] [ 553.023607][ T29] NMI backtrace for cpu 1 [ 553.027974][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 553.035207][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 553.045381][ T29] Call Trace: [ 553.048693][ T29] [ 553.051649][ T29] dump_stack_lvl+0x16c/0x230 [ 553.056382][ T29] ? show_regs_print_info+0x20/0x20 [ 553.061645][ T29] ? load_image+0x3b0/0x3b0 [ 553.066192][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 553.071176][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 553.077365][ T29] ? _printk+0xd0/0x110 [ 553.081552][ T29] ? load_image+0x3b0/0x3b0 [ 553.086089][ T29] ? load_image+0x3b0/0x3b0 [ 553.090624][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 553.096736][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 553.102758][ T29] watchdog+0xf41/0xf80 [ 553.106954][ T29] ? watchdog+0x1e1/0xf80 [ 553.111363][ T29] kthread+0x2fa/0x390 [ 553.115470][ T29] ? hungtask_pm_notify+0x90/0x90 [ 553.120532][ T29] ? kthread_blkcg+0xd0/0xd0 [ 553.125153][ T29] ret_from_fork+0x48/0x80 [ 553.129601][ T29] ? kthread_blkcg+0xd0/0xd0 [ 553.134206][ T29] ret_from_fork_asm+0x11/0x20 [ 553.138997][ T29] [ 553.142584][ T29] Sending NMI from CPU 1 to CPUs 0: [ 553.147891][ C0] NMI backtrace for cpu 0 [ 553.147901][ C0] CPU: 0 PID: 5146 Comm: klogd Not tainted syzkaller #0 [ 553.147917][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 553.147927][ C0] RIP: 0010:vsnprintf+0x124e/0x1a40 [ 553.147957][ C0] Code: 4c 8b 64 24 18 4c 89 ef 4c 89 e6 48 89 d9 e8 99 2f 00 00 49 89 c5 48 89 e8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 1a 01 00 00 <80> 7d 00 00 0f 84 cd 06 00 00 e8 d3 d7 26 f7 49 89 ef e9 78 ee ff [ 553.147973][ C0] RSP: 0018:ffffc90003247838 EFLAGS: 00000246 [ 553.147987][ C0] RAX: 0000000000000000 RBX: ffff0a0000000500 RCX: 000000000000002e [ 553.147999][ C0] RDX: 0000000000000000 RSI: ffffffff8aab7b85 RDI: ffffc90003247b09 [ 553.148010][ C0] RBP: ffffffff8aab7b86 R08: ffffc90003247b09 R09: 1ffff92000648f61 [ 553.148023][ C0] R10: dffffc0000000000 R11: fffff52000648f62 R12: ffffc90083247b02 [ 553.148035][ C0] R13: ffffc90003247b0a R14: dffffc0000000000 R15: ffffffff8aab7b85 [ 553.148047][ C0] FS: 00007f90f972dc80(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 553.148062][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 553.148074][ C0] CR2: 0000555594870608 CR3: 000000002dc89000 CR4: 00000000003506f0 [ 553.148088][ C0] Call Trace: [ 553.148094][ C0] [ 553.148107][ C0] sprintf+0xda/0x120 [ 553.148143][ C0] ? vsprintf+0x30/0x30 [ 553.148169][ C0] ? desc_read+0x1b8/0x3f0 [ 553.148195][ C0] info_print_prefix+0x156/0x300 [ 553.148218][ C0] ? msg_add_dict_text+0x3d0/0x3d0 [ 553.148245][ C0] record_print_text+0x155/0x420 [ 553.148268][ C0] ? syslog_print+0x46b/0x590 [ 553.148287][ C0] ? kmsg_dump_get_line+0x340/0x340 [ 553.148310][ C0] ? __might_fault+0xaa/0x120 [ 553.148325][ C0] ? __might_fault+0xc6/0x120 [ 553.148343][ C0] syslog_print+0x36a/0x590 [ 553.148363][ C0] ? do_syslog+0x7f0/0x7f0 [ 553.148391][ C0] ? wake_bit_function+0x200/0x200 [ 553.148410][ C0] ? bpf_lsm_capable+0x9/0x10 [ 553.148433][ C0] ? security_capable+0x89/0xb0 [ 553.148456][ C0] do_syslog+0x576/0x7f0 [ 553.148476][ C0] ? log_buf_vmcoreinfo_setup+0x450/0x450 [ 553.148500][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 553.148521][ C0] ? lock_chain_count+0x20/0x20 [ 553.148543][ C0] __x64_sys_syslog+0x7c/0x90 [ 553.148563][ C0] do_syscall_64+0x55/0xb0 [ 553.148582][ C0] ? clear_bhb_loop+0x40/0x90 [ 553.148597][ C0] ? clear_bhb_loop+0x40/0x90 [ 553.148614][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.148640][ C0] RIP: 0033:0x7f90f98f7a37 [ 553.148653][ C0] Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 [ 553.148667][ C0] RSP: 002b:00007fff4ce08338 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 553.148682][ C0] RAX: ffffffffffffffda RBX: 00007f90f9a97490 RCX: 00007f90f98f7a37 [ 553.148694][ C0] RDX: 00000000000003ff RSI: 00007f90f9a97490 RDI: 0000000000000002 [ 553.148705][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 553.148714][ C0] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f90f9a97490 [ 553.148725][ C0] R13: 00007f90f9a74dfe R14: 00007f90f9a9750e R15: 00007f90f9a9750e [ 553.148745][ C0] [ 553.201070][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 553.201087][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 553.201109][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 553.201124][ T29] Call Trace: [ 553.201134][ T29] [ 553.201144][ T29] dump_stack_lvl+0x16c/0x230 [ 553.201181][ T29] ? show_regs_print_info+0x20/0x20 [ 553.201208][ T29] ? load_image+0x3b0/0x3b0 [ 553.201244][ T29] panic+0x2c0/0x710 [ 553.201277][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 553.201311][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 553.201343][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 553.201375][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 553.201412][ T29] watchdog+0xf80/0xf80 [ 553.201441][ T29] ? watchdog+0x1e1/0xf80 [ 553.201477][ T29] kthread+0x2fa/0x390 [ 553.201498][ T29] ? hungtask_pm_notify+0x90/0x90 [ 553.201527][ T29] ? kthread_blkcg+0xd0/0xd0 [ 553.201548][ T29] ret_from_fork+0x48/0x80 [ 553.201574][ T29] ? kthread_blkcg+0xd0/0xd0 [ 553.201597][ T29] ret_from_fork_asm+0x11/0x20 [ 553.201643][ T29] [ 553.204010][ T29] Kernel Offset: disabled [ 553.583800][ T29] Rebooting in 86400 seconds..