last executing test programs: 12.674727014s ago: executing program 4 (id=2934): syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x1214080, &(0x7f0000000640)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',codepage=koi8-r,iocharset=macromanian,part=0x0000000000000001,quiet,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303000303015303004302c0075b90ae3f3da5d10be351e46d3797e2dc8e9d19e34c497765c3018c5061e6d3dca7251b2c2a13a"], 0x1, 0x339, &(0x7f0000001300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f00000000c0)=""/59, 0x3b) 12.588989206s ago: executing program 4 (id=2938): r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x20101) ioctl$BLKROSET(r0, 0x125d, 0x0) pwrite64(r0, 0x0, 0x0, 0x7) 12.513092398s ago: executing program 4 (id=2941): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) 12.437828389s ago: executing program 4 (id=2945): syz_mount_image$exfat(&(0x7f0000000340), &(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1001c, &(0x7f0000000440)={[{@namecase}, {@namecase}, {}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@namecase}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@gid}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'cp860'}}]}, 0x9, 0x1533, &(0x7f0000000500)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v5/N+Zj2z3mftZ88z73733vPyTZehNRrVrNqAiOAPwYtfEgAgFgAGAsA1ABAAQNm4snEZ89klJvyxjbA/10PJV7oCdiVx/7M27n/Wxv3P2rj/WRv3P2vj/mdt3P+sjfvPWFa2eXr+a/mRdR98/z8r4/f//yLpJcd+sbbk9V0BYv7VFO7////wD+Ry//9rBf/Kk7j/WRv3P6uKvdIFsP8F+PWfFWT7hzPc/6yN+89YVvbLe8GxcOXvR//VD4j8J/8G4ntd/Clf+f38h/vPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Bc74yxQAZI6vdF2MMcYYY4wxxhj78/hsV7oCxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyZy/FuLgOsgN10MeyAv5ID/EQwEoCBoMWCAIoRAUhijcAEXgRigKxaA4lAAHJaEU3ASl4WYoA7dAWbgVysFtUB4qQEWoBLdDZbgDqsCdUBXugmpQHWpATbgbasE9UBvuhTpwH9SF+6EePAD14UFoAA9BQ3gYGsEj0BgehSbQFJpBc2jxP8p/AXrAi9ATekEC9IY+8BL0hX7QHwbAQHgZBsErMBhehUQYAkPhNRgGr8NweANGwEgYBW/CaHgLxsBYGAfjIQkmwER4GybBOzAZpsBUmAbJMB1mwLswE2bBbHgP5sD7MBfmwXxYACnwASyERZAKH8Ji+AjSYAkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+Bh2wSewG/bAXvgU9sFn/2b+6b/L74qAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/GMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgXfj3dgba2NtrIN1sC7Wzbw9hQ2wATbEhtgIG2FjbIxNsAk2w2bYAltgS2yJrbAVtsE22BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbtht/QXsgG+iC9iL6wmemMf7IN9MTFbfxyAA/BlHISv4Cv4KibiEByKr+Fr+DoOx1M44sJIHIWjsLJ4C8fgWCQxHpMwCSfiRJyEk3AyTsEpOA2TcTrOwBk4E2fhLHwP5+D7+D7Ow3m4AFMwBRfiIkzFVFyMpzENl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7Aj1EB4Ce4B/dgIu7Dfbgf9+MBPIAH8SCmYzoewkN4GA/jETyCR/EoHsPjeAKP40k8iafwNJ7BM3gOz+F5fC7+q4YfF1uTCCKDEkrEiBgRK2JFDpFD5BQ5RS6RS0RERMSJOJFb5BZ5RB6RT+QT8SJeFBQFhRFGkAgzjhQiKqKiiCgiioqiorgoLpxwopQoJUqL0qKMKCPKiltFOXGbKC8qiNaukqgkKos2roq4U1QVVUU1UV3UEDVFTVFL1BK1RW1RR9QRdUVdUU88IOqL3tgfHxIZnWkkhmBjMRSbiKZCXjpCtRTDsZVoLdqIJ8RIHIHtREvXXjwtOogx2FH8TYzFZ0VnMR67iOdFV9FNdBcviB6ilespeonJ2Fv0EdOwr+gn+osBYiZWF+/hnOw1xKsiUQwRQ8VrYgG+LoaLN8QIMVKMEm+K0eItMUaMFePEeJEkJoiJ4m0xSbwjJospYqqYJpLFdDFDvCtmillitnhPzBHvi7linpgvFogU8YFYKBaJVPGhWCw+EmliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Ck+FrvEJ2K32CP2ik/FPvGZ2C8+FwfEF+Kg+FKki6/EIfG1OCy+EUfEt+Ko+E4cE8fFCfG9OCl+EKfEaXFGnBXnxI/ivPhJXBBegEQppJRKBjJGZpOxMrvMIa+SOWWQefyXcfI6mVteL/PIvDKfzC/jZQFZUGpppJUkQ1lIFpZReYMsIm+URWUxWVyWkE6WlKXkTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiF7dRTVaXNWRNebdMgHtkbXmvrCPvk3Xl/bKefEDWlw/KBvIh2VA+LBvJR2Rj+ahsIpvKZrK5bCEfky3l47KVbC3byCdkW/mkbCefku3l07KD9Jd+RZ6VneVzsot8XnaV3WR3+ZO8IL3sKXtJ6A2yj3xJ9pX9ZH85QA6UL8tB8hU5WL4qE+UQOVS+JofJ1+Vw+YYcIUfKUfJNOVq+JcfIsXKcHC+T5AQ5Ub4tJ8l35GQ5RU6V02SynC77X1pptpT/NP/t38kf/PPWN8nNcovcKrfJ7XKH3Ck/lrvkLrlb7pZ75V65T+6T++V+eUAekAflQZku0+UheUgeloflEXlEHpVH5TF5XJ6V38uT8gd5Sp6Wp+VZeU6ek+cv/QxAoRJKKqUCFaOyqViVXeVQV6mc6mqVS12jIupaFaeuU7nV9SqPyqvyqfwqXhVQBZVWRllFKlSFVGEVVTfgpV8YVVyVUE6VVKXUTf9OviqiblRFVbFf5WfWl/AP6muhWqiWqqVqpVqpNqqNaqvaqnaqnWqv2qsOqoPqqDqqTqqT6qw6qy6qi+qquqruqrvqoXqonqqnSlAJqo96SfVV/VR/NUANVC+LjH0YrAarRJWohqqhapgapoar4WqEGqFGqVFqtBqtxqgxapwap5JUkpqoJqpJapKarCarqWqqSlbJaoaaoWaqmWq2mq3mqDlqrpqr5qv5KkWlqIVqoUpVqWqxWqzS1BK1RC1Ty9QKtUKtUqvUGrVGrVPr1Aa1QaWpzWqz2qq2qu1qu9qpdqpdapfarXarvWqv2qf2qf1qvzqgDqiD6qBKV+nqkDqkDqvD6og6oo6qo+qYOqZOqBPqpDqpTqlT6ow6o86pc+q8Oq8uqAsZp32BCESgAhXEBDFBbBAb5AhyBDmDnEGuIFcQCSJBXBAX5A6uD/IEeYN8Qf4gPigQFAx0YAIbiEtNjwY3BEWCG4OiQbGgeFAicEHJoFRwU1A6uDkoE9wSlA1uDcoFtwXlgwpBxaBScHtQObgjqBLcGVQN7gqqBdWDGkHN4O6gVnBPUDu4N6gT3BfUDe4P6gUPBPWDB4MGwUNBw+DhoFHwSNA4eDRoEjQNmgXNgxZ/6vren8r7uOupe+kE3Vv30S/pvrqf7q8H6IH6ZT1Iv6IH61d1oh6ih+rX9DD9uh6u39Aj9Eg9Sr+pR+u39Bg9Vo/T43WSnqAn6rf1JP2Onqyn6Kl6mk7W0/UM/a6eqWfp2fo9PUe/r+fqeXq+XqBT9Ad6oV6kU/WHerH+SKfpJXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+sdeqf+WO/Sn+jdeo/eqz/V+/Rner/+XB/QX+iD+kudrr/Sh/TX+rD+Rh/R3+qj+jt9TB/XZfT3+qT+QZ/Sp/UZfVaf0z/q8/onfUH7jJP7jLd3o4wyMSbGxJpYk8PkMDlNTpPL5DIREzFxJs7kNrlNHpPH5DP5TLyJNwVNQZOBDJlCppCJmqgpYoqYoqaoKW6KG2ecKWVKmdKmtCljypiypqwpZ8qZ8qa8qWgqmtvN7eYOc4e509xp7jJ3meqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWln2pn2pr3pYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6mgSTYPqYPqav6Wv6m/5moBloBplBZrAZbBJNohlqhpphZpgZboabEWakGZVxomreMmPMWDPOjDdJJslMNBPNJDPJTDaTzVQz1SSbZDPDzDAzzUwz28w2c8wcM9fMNfPNfJNiUsxCs9CkmlSz2Cw2aSbNLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8OmAPmoDlo0k26OWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJu+l90tvYm12m8NeZXPaq20ue439+zifzW/jbQFb0Gqbx+b9VWystUVtMVvclrDOlrSl7E2/icvbCrairWRvt5XtHbbKb+Ja9h5b295r69j7bE1796/iuvZ+W88+YusjAtimtqFtbhvZR2xj+6htYpvaZra5bWuftO3sU7a9fdp2sM/8Jl5oF9nVdo1da9fZ3XaPPWPP2sP2G3vO/mh72l52oH3ZDrKv2MH2VZtoh/wmHmXftKPtW3aMHWvH2fG/iafaaTbZTrcz7Lt2pp31mzjFfmDn2FQ7186z8+2Cn+OMmlLth3ax/cim2QCW2mV2uV1hV9pV/7fWZXaD3Wg32V32E7vVbrPb7Q67M/NE2O6xe+2ndp/9zB6yX9sD9gt70B6x6farn+OM/Ttiv7VH7Xf2mD1uT9jv7Un7g8rMztj37+1P9oL1FggJSJKigGIoG8VSdspBV1FOuppy0TUUoWspjq6j3HQ95aG8lI/yUzwVoIKkyZAlopAKUWGK0g2UWV5xKkGOSlIpuolK081Uhm6hsnQrlaPbqDxVoIpUiW6nynQHVaE7qSrdRdWoOtWgmnQ31aJ7qDbdS3XoPqpL91M9eoDq04PUgB6ihvQwNaJHqDE9Sk2oKTWj5tSCHqOW9Di1otbUhp6gtvQktaOnqD09TR3oGepIf6NO9Cx1pueoCz1PXakbdacXqAe9SD2pFyVQb+pDL1Ff6kf9aQANpJdpEL1Cg+lVSqQhNJReo2H0Og2nN2gEjaRR9CaNprdoDI2lcTSekmgCTaS3aRK9Q5NpCk2laZRM02kGvUszaRbNpvdoDr1Pc2kezacFlEIf0EJaRKn0IS2mjyiNltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kj2kXfUK7aQ/tpU9pH31G++lzOkBf0EH6ktLpKzpEX9Nh+oaO0Le+F31Hx+g4naDv6ST9QKfoNJ2hs3SOfqTz9BNdIE8QYihCGaowCGPCbGFsmD3MEV4V5gyvDnOF14SR8NowLrwuzB1eH+YJ84b5wvxhfFggLBjq0IQ2pDAMC4WFw2h4Q1gkvDEsGhYLi4clQheWDEuFN4Wlw5vDMuEtYdnw1rBceFtYPqwQPnJfpfD2sHJ4R1glvDOsGt4VVgurhzXCmuHdYa3wnrB2eG9YJ7wvLBPeH9YLHwjrhw+GDcKHwobhw2Gj8JGwcfho2CRsGjYLm4ctwsfCluHjYauwddgmvCpsGz4ZtgufCtuHT4cdwmd+nr9/Ueb8E7+ZTwh7h33Cl8KXQu/vlfOjC6Ip0Q+iC6OLoqnRD6OLox9F06JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18wGDp1w0ikXuBiXzcW67C6Hu8rldFe7XO4aF3HXujh3ncvtrnd5XF6Xz+V38a6AK+i0M846cqEr5Aq7qLvBFXE3uqKumCvuSjjnSrpSrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPuw7uGdfR/c11cs+6zu4595x73nV13Vx394Lr4SbkuviaTHB9XB/X1/V1/V1/N9ANdIPcIDfYDXaJLtENdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbkkN9FNdJPcJDfZTXZT3VSX7JLdDDfDzXQzXeVZF7cy18118918l+JS3EKXcc6Y6ha7xS7Npbmlbqlb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+62u51up9vldrnd/pqLi7p9br/b7w64A+6g+9Klu6/cIfe1O+y+cUfct+6o+84dc8fdCfe9O+l+cKfcaXfGnXXn3I/uvPvJXXDeJUUmRCZG3o5MirwTmRyZEpkamRZJjkyPzIi8G5kZmRWZHXkvMifyfmRuZF5kfmRBJCXyQWRhZFEkNfJhZHHko0haZElkaWRZZHlkRcT7AltDX8gX9lF/gy/ib/RFfTFf3Jfwzpf0pfxNvvTFutO8v9WX87f58r6Cr+gf9U18U9/MN/ct/GO+pX/ct/KtfRv/hG/rn/Tt/FO+vX/ad/DP+I7+b76Tf9Z39s/5Lv5539V38939C76Hf9H39L18gu/t+/iXfF/fz/f3A/xA/7If5F/xg/2rPtEP8UP9a36Yf90P92/4EX6kHxXzph+deYkM432Sn+An+rf9JP+On+yn+Kl+mk/20/0M/66f6Wf52f49P8e/7+f6eX6+X+BT/Ad+oV/kU/2HfrH/yKf5JZk3jf1Kv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9zv8Tv+x3+U/8bv9Hr/Xf+r3+c/8fv+5P+C/8Af9lz7df+UP+a/9Yf+NP+K/9Uf9d/6YP+5P+O/9Sf+DP+VP+zP+rD/nf/Tn/U/+Av+bNcYYY4yxf8mEy0Px65mLt/N7/06O+MWT+wDA1dvyp/9yPuOMcn2ei+N+Ij424+vTvbo8lPmoVi0hIeHSc9MkBIXnAWT+JSjDzx89uBQvgTbwJLSH1lD6d+vvJ7qdo3+yfvRWgBy/yMkoKDO+vP7nAJjwO+s/9sSoheXCM3H/j/XnARQtfDknO1yOl0Cbn++vtIYy/6D+vC3/Sf3Zv0gCaPWLnJxwOb5cfyl4HJ6B9r96JmOMMcYYY4wxdlE/UbFT5vVn5ic+f+/6PF5dzskGl+N/dn3OGGOMMcYYY4yxK+/Zbt2feqx9+9ad/v1Blf9R1r88aAz/qZV58LsD7wEyv6MA4A8uCJAxkH/lXmz5S7aVeOml8/dTy8/6AP53tPLPGFzhAxNjjDHGGGPsT3f5pP/X31dXqiDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+iv+O7ErvY+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZ/AgAA//+1tfsI") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) 12.287896283s ago: executing program 4 (id=2950): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)="d2", 0x1}], 0x1}}], 0x2, 0x40) 11.695516298s ago: executing program 4 (id=2966): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f00000001c0)=ANY=[@ANYBLOB='volume=00000000000000000062,gid=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYBLOB="d7529c82a5dd3d553d834b4a6c5875c50e8c183e292d36a4976c21b259cb6f60ad1bf63aa487945917", @ANYRES16], 0x1, 0xc32, &(0x7f0000001a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000de40)='./file1\x00', 0x143841, 0x115) ioctl$FIBMAP(r0, 0x1, &(0x7f000000dec0)=0x3) 11.642522089s ago: executing program 32 (id=2966): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f00000001c0)=ANY=[@ANYBLOB='volume=00000000000000000062,gid=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYBLOB="d7529c82a5dd3d553d834b4a6c5875c50e8c183e292d36a4976c21b259cb6f60ad1bf63aa487945917", @ANYRES16], 0x1, 0xc32, &(0x7f0000001a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000de40)='./file1\x00', 0x143841, 0x115) ioctl$FIBMAP(r0, 0x1, &(0x7f000000dec0)=0x3) 602.850156ms ago: executing program 0 (id=3143): r0 = socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_int(r0, 0x10d, 0x8b, &(0x7f0000000000), &(0x7f0000000080)=0x4) 537.031427ms ago: executing program 0 (id=3144): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x7f}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 536.950297ms ago: executing program 5 (id=3146): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 518.143528ms ago: executing program 1 (id=3147): r0 = socket(0x2, 0x80805, 0x0) sendmmsg(r0, &(0x7f0000008400)=[{{&(0x7f00000011c0)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001240)="442e9de8", 0x4}], 0x1}}], 0x1, 0x8000) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 443.754259ms ago: executing program 0 (id=3149): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x51, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 399.598151ms ago: executing program 1 (id=3150): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x25, 0x800000000004, @thr={0x0, &(0x7f00000002c0)="0363bf21e4aaa530503f516582"}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) rt_sigtimedwait(&(0x7f0000000240)={[0x3be]}, 0x0, &(0x7f00000002c0)={0x0, 0x989680}, 0x8) 398.509981ms ago: executing program 3 (id=3160): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x1510, &(0x7f0000000140)={0x0, 0x24, 0x27, 0x0, 0xffffffff, 0x0, r0}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 393.067471ms ago: executing program 5 (id=3151): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="140000000000000029000000340000000700000000000000500000000000000029000000360000003c070000000000000730000000020a1109000800000000000000927900000000000000000000d0f502000900000000000000ff07000000000000000100000100140000000000000029000000080000000900000000000000140000000000000029000000430000000000000000000000300000000000000029000000370000003c02000000000000040100c91020010000000000000000000000000001000000140000000000000029000200080000000900000000000000280000000000000029000000370000009b01000000000000c2042299fecac204000004010000000098"], 0x1a0}}], 0x1, 0xc009cd0) 384.237561ms ago: executing program 1 (id=3152): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x200000005c831, 0xffffffffffffffff, 0x0) lseek(r0, 0x289e0cb5, 0x0) 351.647381ms ago: executing program 2 (id=3153): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000300)="21000000470010aaaaaaaaaa0000000000000000000000000000000000000000000000000000000000000000000300"/76, 0x4d) 350.872431ms ago: executing program 3 (id=3154): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x40001002, 0xffffffffffffffff, &(0x7f0000000000)) 344.719732ms ago: executing program 5 (id=3155): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)="000300000001", 0x6}, {&(0x7f0000000240)='8d', 0x2}, {&(0x7f0000000300)="ad65ed", 0x3}], 0x3}, 0x24000008) 331.125892ms ago: executing program 0 (id=3156): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r1}, [@IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x3, 0x100, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8) 309.952122ms ago: executing program 1 (id=3157): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2218448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) fstat(r0, &(0x7f0000000640)) 289.728293ms ago: executing program 2 (id=3158): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x20, r0, 0x321, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) 289.621923ms ago: executing program 3 (id=3159): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x7f}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 271.397653ms ago: executing program 0 (id=3161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000fcffffff0000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d88a8", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 230.830554ms ago: executing program 3 (id=3162): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYBLOB="00cdcefc1a40d923de01da43accf240f85000094"], 0x1, 0xc32, &(0x7f0000000680)="$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") setresuid(0xffffffffffffffff, 0xee01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) 230.762934ms ago: executing program 5 (id=3163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 215.066565ms ago: executing program 1 (id=3164): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) 214.128365ms ago: executing program 2 (id=3165): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000140)={0x0, 0x0}) 110.247537ms ago: executing program 2 (id=3166): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1f, 0x4) 110.150827ms ago: executing program 5 (id=3167): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x890b, 0xffffffffffffffff) 109.272837ms ago: executing program 1 (id=3168): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x51, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 93.002518ms ago: executing program 2 (id=3169): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x3d) write(r0, &(0x7f00000008c0)="41000200010001", 0x7) 92.952328ms ago: executing program 3 (id=3170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x14, r1, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000800) 27.241479ms ago: executing program 5 (id=3171): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}, 0x4, 0x1, 0x2}}, 0x26) 26.276629ms ago: executing program 3 (id=3172): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x1, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x1a92189d0dd42cd6) 26.176829ms ago: executing program 0 (id=3173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002e40)={0x28, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) read(r0, &(0x7f0000002e80)=""/4096, 0x1000) 0s ago: executing program 2 (id=3174): syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000001ec0)="$eJzs3U9sXEcdAOB5a68d16mzhgKmoYmBAqmgTrCtKrmkMZRrpN7KsQppiHBTlHBpVakpUsUNRap67IGqh1wQFeLSA1JEVUQvQZQ7CoVKVVGgFQipoNYo9sx6d+zH/rG99vp9n/Tz+L2ZfTPPu943fp6dCUBl1Va/Li7OFCG89PqLj/zkD698twghHG2WaLSUW9uqhxCKtsevuxUzPv7w2XObpUWYX/2atsPZ283HToYQrobZcCM0wsL7j829ubT08vWbj16efuH02zt0+gAAUCln3/jH7x94761vTP/nF0fOhPHm/tQ/b8TtydjvPxH793n/v2hJi5btZCwrNxIj//thJCs3mtUzWlJfPTtOvaTcWIf6Rlr2bXaeALAfrN/XK2pzbdu12tzc2nX/jlvjY8XcpYvLT1zZpYYCANvmXw+HEM4IIYQQokqxcmi3eyAAQNXl44U3uJqPLNia5tEOdFf/7aXa5o+HbTDo17/6h6v+V5/3jsP22a+vpnRe6fcojWPIxxGOZI/r9fe/lh1ntMd2lo0rHJbxhmXtzH+ue1VZ+3t9HndLWfvz8bB7VVn783G6e1VZ+8cH3I5+lbX/wIDb0a+y9k80v9uvV7jtcd/q1/V3iyNZfuv1M39PH5b3eACg3UfG/wkhhBCVi+d2uwMCAOw5+fw4K1HKz+fjyfPzeXjy/HxeoDx/vEP+gQ75AMBGC7+68PNrxfr/+bc6Hi6Nu7grppM9ticfrdFr/Vsd97TV+odl3BIA1fbUTxe/89aZpZG1+X/Xr2WfZPP/prl6r8XtNO7yYLbdnPt3tr2eWkm5gztxUgDA/5Wuv2Xz/94dt2dCvXji4vL5E3F7Kqa/G6+P39n/zQG3GwDoX7fz/8+E9vn/Dzb312ut/YJD6/uL1n5BI9s/X7J/IW5Px/T74xOr++fOPbX8ve0+eQCoqDe+dfC1D357Kazd/1///3e6/59u4zfiWLsPYoHUT0j3Bzbc/z/WXs9UWbkT7eUOlZU72V6ukZWrx8jn3cjHB05kj0vjFNK4h9TfSeMap8vak02QMZaVG41xd9aeqaw9G873RHt78nloUv2NbH8+7iGVmw4AsNGVp5/5wePLy+cv+8Y3vqngN8+FEDbL2u13JmCnHf/Rkz88fuXpZx68+OTjF85fOH9pYXH+1KmHFucXHzq+el//eOvdfQBgP1jv9O92SwAAAAAAAAAAAAAAgDKD+KTxbp8jANDu7w+HEM6ILEb2QBuEECk+2gNtEGKfxcpKvuIvAMBg9bre/lY1jxbn80/rHqT04IN/nL4Tqdjtpfb+kvWL2U6Dfv2rf7jqf/X57a2/ub5I1+9/tfYDzPZX761fnjzZWv+9o13Wn5//sf7q/3NW/9dCd/Wv/Cyrv8+pcd/J6r+ry/o3nP/J/ur/S6z/nrh97Mvd1t/+/Kf1dtJyOBPZ+UyW1P/Xevv5p7X9ej7/Az2cdIt34/kDQBXVdrsBOyT1ElI/OvVDWtfnCy3r7IWsfLf9/1p2nHy9vn6l46Z+0BfjdurupHUD8/UOe21/Wp9wKjtu0WW/tuz1Myz/VSpr/3Y9jzutrP35epB7VVn7xwbcjn6VtT//vdyrytrf559VA1fW/okBt2NYHY5p2fUwXX+mYl7abmTbk5s8F/u1bwEAw+7bp2/ef+3rozfy9fnTdT39GTgZ/6a+npXL+wsTWd+xyMp/KaY/jukrMf1NTN/Jjrez/20DgGp6z+f/hBBCiMpF1T//5/4CVVb113/Vz7/a7/6e/07S6yO/j5+Mdsivt+SPbJI/1uHx41l+/nwd6JB/T3bclSjlf6ZD/mc75H+uQ/5Mh/xDHfLv7ZB/uEP+FzrkH+mQf7RDPgDD6fMx9f4OANWRj/tz/QeA/S9NrOP6DwDV8amYll3/7+uQDwAMn0/H1PUdACqk2Hymx63O2wMMjzS/dPo9j8uBhPtj+pWYfjWmab2UPpdfAfaA//7713+7VqzP93c4y+92Pvmi1v7Ju3z9nwe6bE/++b1e57NvdFnPTtU/vcX6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABis2urXxcWZIoSXXn/xkX+e+tO7RQjhaLNEo6Xc2la9ZXu27TghvFaspR9/+Oy51vSTmBZhPhShaO4PZ283a5oMIVwNs+FGaISF9x+be3Np6eXrNx+9PP3C6bd38EcAAAAA+97/AgAA//87+jkE") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000040)={{&(0x7f00000000c0)=[{0x3, 0x0, 0x3, {0x2, 0xfb}, 0x58, 0xea}, {0x3, 0x9, 0x8, {0x2, 0x82f2}, 0x7, 0x3, 0x7}], 0x2, 0x40, 0xd, 0xde}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x28, 0x5, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0x8}}) kernel console output (not intermixed with test programs): ): Index entry out of bounds in directory inode 0x5. [ 54.807140][ T6696] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 54.990038][ T6726] set_capacity_and_notify: 15 callbacks suppressed [ 54.990048][ T6726] loop3: detected capacity change from 0 to 256 [ 54.996927][ T6726] exfat: Deprecated parameter 'utf8' [ 54.998010][ T6726] exfat: Deprecated parameter 'namecase' [ 54.999320][ T6726] exfat: Deprecated parameter 'utf8' [ 55.014710][ T6726] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 55.127148][ T6745] ip_tables: iptables: counters copy to user failed while replacing table [ 55.128461][ T6744] xt_l2tp: missing protocol rule (udp|l2tpip) [ 55.208838][ T6758] dlm: non-version read from control device 36 [ 55.267960][ T6769] jffs2: notice: (6769) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 55.295811][ T6774] netlink: 60 bytes leftover after parsing attributes in process `syz.3.956'. [ 55.297359][ T6774] netlink: 60 bytes leftover after parsing attributes in process `syz.3.956'. [ 55.307335][ T6774] netlink: 60 bytes leftover after parsing attributes in process `syz.3.956'. [ 55.352623][ T6786] loop0: detected capacity change from 0 to 16 [ 55.364105][ T6786] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 55.378520][ T6783] loop3: detected capacity change from 0 to 4096 [ 55.399711][ T5214] tipc: Node number set to 1 [ 55.421963][ T6789] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 55.546973][ T6785] loop1: detected capacity change from 0 to 32768 [ 55.568224][ T6785] XFS (loop1): Mounting V5 Filesystem [ 55.611998][ T6785] XFS (loop1): Ending clean mount [ 55.651154][ T6817] loop4: detected capacity change from 0 to 1024 [ 55.684021][ T6817] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 55.709978][ T4330] XFS (loop1): Unmounting Filesystem [ 55.718416][ T4351] EXT4-fs (loop4): unmounting filesystem. [ 55.815221][ T6808] loop0: detected capacity change from 0 to 32768 [ 55.821569][ T6808] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 55.855711][ T6831] loop4: detected capacity change from 0 to 1024 [ 55.873048][ T4334] ocfs2: Unmounting device (7,0) on (node local) [ 55.894292][ T6831] hfsplus: bad catalog entry type [ 55.939891][ T1654] hfsplus: b-tree write err: -5, ino 25 [ 55.941148][ T1654] hfsplus: b-tree write err: -5, ino 4 [ 55.942179][ T1654] hfsplus: b-tree write err: -5, ino 2 [ 56.237773][ T6847] loop0: detected capacity change from 0 to 32768 [ 56.304556][ T6847] XFS (loop0): Mounting V5 Filesystem [ 56.333787][ T6847] XFS (loop0): Ending clean mount [ 56.421016][ T4334] XFS (loop0): Unmounting Filesystem [ 56.458570][ T6878] loop4: detected capacity change from 0 to 32768 [ 56.469602][ T6878] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 56.471417][ T6878] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 56.493964][ T6878] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 56.497607][ T4406] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 56.498780][ T4406] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 56.517072][ T4406] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 18ms [ 56.523449][ T4406] gfs2: fsid=syz:syz.0: jid=0: Done [ 56.524459][ T6878] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 56.526832][ T6897] loop3: detected capacity change from 0 to 40427 [ 56.546785][ T6897] F2FS-fs (loop3): invalid crc value [ 56.586243][ T6897] F2FS-fs (loop3): Found nat_bits in checkpoint [ 56.612133][ T6897] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 56.646278][ T6878] gfs2: fsid=syz:syz.0: found 1 quota changes [ 56.683158][ T4336] syz-executor: attempt to access beyond end of device [ 56.683158][ T4336] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 56.750205][ T4351] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 56.750205][ T4351] inode = 11 2339 [ 56.750205][ T4351] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 56.756138][ T4351] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 56.757905][ T4351] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4351 [syz-executor] gfs2_quota_sync+0x2cc/0x4e8 [ 56.765362][ T4351] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 56.766851][ T4351] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 56.782513][ T4351] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 56.786435][ T4351] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 56.787758][ T4351] gfs2: fsid=syz:syz.0: File system withdrawn [ 56.788811][ T4351] CPU: 1 PID: 4351 Comm: syz-executor Not tainted syzkaller #0 [ 56.790195][ T4351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 56.792011][ T4351] Call trace: [ 56.792590][ T4351] dump_backtrace+0x1c4/0x1f0 [ 56.793448][ T4351] show_stack+0x2c/0x3c [ 56.794207][ T4351] __dump_stack+0x30/0x40 [ 56.794991][ T4351] dump_stack_lvl+0xf4/0x15c [ 56.795889][ T4351] dump_stack+0x1c/0x5c [ 56.796674][ T4351] gfs2_withdraw+0x9f8/0x1244 [ 56.797757][ T4351] gfs2_consist_inode_i+0xf8/0x114 [ 56.798733][ T4351] gfs2_inode_refresh+0x9a0/0xe64 [ 56.799665][ T4351] inode_go_instantiate+0x4c/0x68 [ 56.800627][ T4351] gfs2_instantiate+0x178/0x2b4 [ 56.801491][ T4351] gfs2_glock_wait+0x1b0/0x290 [ 56.802403][ T4351] gfs2_glock_nq+0x8bc/0x11c4 [ 56.803237][ T4351] do_sync+0x414/0xa68 [ 56.803969][ T4351] gfs2_quota_sync+0x2cc/0x4e8 [ 56.804838][ T4351] gfs2_sync_fs+0x50/0xc8 [ 56.805664][ T4351] sync_filesystem+0xe8/0x218 [ 56.806547][ T4351] generic_shutdown_super+0x74/0x32c [ 56.807561][ T4351] kill_block_super+0x78/0xe0 [ 56.808494][ T4351] gfs2_kill_sb+0xc4/0xd8 [ 56.809305][ T4351] deactivate_locked_super+0xb4/0x128 [ 56.810172][ T4351] deactivate_super+0xe4/0x104 [ 56.811085][ T4351] cleanup_mnt+0x3a8/0x430 [ 56.811910][ T4351] __cleanup_mnt+0x20/0x30 [ 56.812737][ T4351] task_work_run+0x1f4/0x280 [ 56.813586][ T4351] do_notify_resume+0x20f8/0x2c84 [ 56.814515][ T4351] el0_svc+0x9c/0x12c [ 56.815251][ T4351] el0t_64_sync_handler+0x84/0xf0 [ 56.816194][ T4351] el0t_64_sync+0x18c/0x190 [ 56.889296][ T4351] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 56.892332][ T4351] CPU: 1 PID: 4351 Comm: syz-executor Not tainted syzkaller #0 [ 56.893619][ T4351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 56.895547][ T4351] Call trace: [ 56.896193][ T4351] dump_backtrace+0x1c4/0x1f0 [ 56.897058][ T4351] show_stack+0x2c/0x3c [ 56.897858][ T4351] __dump_stack+0x30/0x40 [ 56.898665][ T4351] dump_stack_lvl+0xf4/0x15c [ 56.899523][ T4351] dump_stack+0x1c/0x5c [ 56.900293][ T4351] gfs2_assert_warn_i+0x16c/0x26c [ 56.901238][ T4351] gfs2_quota_cleanup+0x444/0x640 [ 56.902163][ T4351] gfs2_put_super+0x1ec/0x744 [ 56.903027][ T4351] generic_shutdown_super+0x138/0x32c [ 56.904046][ T4351] kill_block_super+0x78/0xe0 [ 56.904939][ T4351] gfs2_kill_sb+0xc4/0xd8 [ 56.905759][ T4351] deactivate_locked_super+0xb4/0x128 [ 56.906780][ T4351] deactivate_super+0xe4/0x104 [ 56.907722][ T4351] cleanup_mnt+0x3a8/0x430 [ 56.908582][ T4351] __cleanup_mnt+0x20/0x30 [ 56.909424][ T4351] task_work_run+0x1f4/0x280 [ 56.910262][ T4351] do_notify_resume+0x20f8/0x2c84 [ 56.911186][ T4351] el0_svc+0x9c/0x12c [ 56.911909][ T4351] el0t_64_sync_handler+0x84/0xf0 [ 56.912791][ T4351] el0t_64_sync+0x18c/0x190 [ 57.181577][ T6931] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 57.245123][ T4330] XFS (loop1): Unmounting Filesystem [ 57.267074][ T6980] ubi8: attaching mtd0 [ 57.269082][ T6980] ubi8: scanning is finished [ 57.280880][ T6980] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 57.370010][ T6980] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 57.417298][ T6990] jffs2: notice: (6990) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 57.634801][ T7018] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.044151][ T7064] hfsplus: request for non-existent node 1280 in B*Tree [ 58.044178][ T7064] hfsplus: request for non-existent node 1280 in B*Tree [ 58.062948][ T7066] EXT4-fs: inline encryption not supported [ 58.074280][ T7066] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.075994][ T7066] EXT4-fs (loop1): Test dummy encryption mode enabled [ 58.092657][ T7066] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 58.139549][ T7066] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 58.221296][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 58.314529][ T7105] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1097'. [ 58.369197][ T7111] tipc: Enabling of bearer rejected, failed to enable media [ 58.467941][ T7116] EXT4-fs: inline encryption not supported [ 58.493186][ T7116] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.494798][ T7116] EXT4-fs (loop3): Test dummy encryption mode enabled [ 58.516442][ T7116] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 58.620635][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 58.667544][ T7138] tipc: Enabling of bearer rejected, already enabled [ 58.683929][ T7142] erofs: (device loop0): mounted with root inode @ nid 36. [ 58.700159][ T7142] syz.0.1114: attempt to access beyond end of device [ 58.700159][ T7142] loop0: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 58.726348][ T7142] syz.0.1114: attempt to access beyond end of device [ 58.726348][ T7142] loop0: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 58.736409][ T7142] syz.0.1114: attempt to access beyond end of device [ 58.736409][ T7142] loop0: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 58.738884][ T7142] syz.0.1114: attempt to access beyond end of device [ 58.738884][ T7142] loop0: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 58.785494][ T7155] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 58.787045][ T7155] FAT-fs (loop4): Filesystem has been set read-only [ 58.788612][ T7155] syz.4.1122: attempt to access beyond end of device [ 58.788612][ T7155] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 58.810003][ T7155] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 58.811584][ T7155] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 58.814937][ T7155] syz.4.1122: attempt to access beyond end of device [ 58.814937][ T7155] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 58.817452][ T7155] syz.4.1122: attempt to access beyond end of device [ 58.817452][ T7155] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 58.838388][ T7155] syz.4.1122: attempt to access beyond end of device [ 58.838388][ T7155] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 58.977719][ T7176] tipc: Enabling of bearer rejected, already enabled [ 59.145553][ T7198] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 59.147013][ T7198] FAT-fs (loop1): Filesystem has been set read-only [ 59.148207][ T7198] syz.1.1142: attempt to access beyond end of device [ 59.148207][ T7198] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 59.163996][ T7198] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 59.165395][ T7198] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 59.335637][ T7226] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1159'. [ 59.343425][ T7230] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 59.345252][ T7230] FAT-fs (loop0): Filesystem has been set read-only [ 59.346476][ T7230] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 59.352103][ T7230] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 59.486694][ T7255] EXT4-fs: Ignoring removed bh option [ 59.499357][ T7255] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 59.512788][ T7255] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1172: bg 0: block 112: padding at end of block bitmap is not set [ 59.530299][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 59.870610][ T7308] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1193'. [ 60.023875][ T7289] XFS (loop4): Mounting V5 Filesystem [ 60.058518][ T7289] XFS (loop4): Ending clean mount [ 60.094838][ T7344] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1210'. [ 60.097809][ T4351] XFS (loop4): Unmounting Filesystem [ 60.288827][ T6353] input: syz1 as /devices/virtual/misc/uhid/0005:0B05:0006.0001/input/input5 [ 60.296418][ T6353] hid-generic 0005:0B05:0006.0001: input,hidraw0: BLUETOOTH HID v0.03 Mouse [syz1] on syz0 [ 60.330528][ T7366] fido_id[7366]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 60.375527][ T7372] set_capacity_and_notify: 18 callbacks suppressed [ 60.375537][ T7372] loop1: detected capacity change from 0 to 256 [ 60.418974][ T7374] [U] current cno (= 3) [ 76.088264][ T9008] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 76.103219][ T9008] Remounting filesystem read-only [ 76.134947][ T4351] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 76.154234][ T9018] loop0: detected capacity change from 0 to 764 [ 76.225083][ T9024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1927'. [ 76.352936][ T9042] loop0: detected capacity change from 0 to 1024 [ 76.370010][ T9041] loop1: detected capacity change from 0 to 2048 [ 76.405150][ T9045] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.416728][ T9049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1940'. [ 76.422092][ T9042] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 76.436945][ T9045] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 76.438993][ T9045] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 76.443931][ T9045] Remounting filesystem read-only [ 76.459070][ T4330] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 76.463024][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 76.473777][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 76.475656][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1942'. [ 76.477319][ T9053] netlink: 'syz.1.1942': attribute type 6 has an invalid length. [ 76.481471][ T9053] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.483404][ T9053] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.484865][ T9053] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.486440][ T9053] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.620153][ T9073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1960'. [ 76.622230][ T9073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1960'. [ 76.628142][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1960'. [ 76.692272][ T9082] loop0: detected capacity change from 0 to 2048 [ 76.720246][ T9086] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.728202][ T9086] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 76.732245][ T9086] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 76.734249][ T9086] Remounting filesystem read-only [ 76.760458][ T4334] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 76.791713][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1962'. [ 76.793457][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1962'. [ 76.804330][ T9094] netlink: 'syz.3.1962': attribute type 6 has an invalid length. [ 76.807753][ T9094] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.809391][ T9094] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.811560][ T9094] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.813331][ T9094] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.906561][ T9114] tipc: Enabling of bearer rejected, failed to enable media [ 76.928621][ T9118] loop3: detected capacity change from 0 to 256 [ 77.141081][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1989'. [ 77.142679][ T9152] netlink: 'syz.4.1989': attribute type 6 has an invalid length. [ 77.161663][ T9152] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.163046][ T9152] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.164697][ T9152] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.166083][ T9152] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.245516][ T9141] loop3: detected capacity change from 0 to 32768 [ 77.335734][ T9176] tipc: Enabling of bearer rejected, failed to enable media [ 77.530600][ T9185] netlink: 'syz.0.2006': attribute type 6 has an invalid length. [ 77.540560][ T9185] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.542159][ T9185] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.543602][ T9185] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.544939][ T9185] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.759070][ T9221] loop1: detected capacity change from 0 to 256 [ 78.145084][ T9232] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x3ffff [ 78.146681][ T9232] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x30e4 [ 78.154150][ T9232] F2FS-fs (loop0): invalid crc value [ 78.173166][ T9232] F2FS-fs (loop0): Found nat_bits in checkpoint [ 78.182572][ T9232] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x57c/0x8b8 [ 78.213091][ T9232] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 78.240455][ T9263] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.245578][ T9263] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 78.305793][ T9263] EXT4-fs (loop1): 1 truncate cleaned up [ 78.309293][ T9263] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 78.395968][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 78.486529][ T27] audit: type=1326 audit(78.470:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9290 comm="syz.3.2056" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabf7a228 code=0x7ffc0000 [ 78.492553][ T27] audit: type=1326 audit(78.470:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9290 comm="syz.3.2056" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabf7a228 code=0x7ffc0000 [ 78.504685][ T27] audit: type=1326 audit(78.480:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9290 comm="syz.3.2056" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffabf7a228 code=0x7ffc0000 [ 78.522932][ T27] audit: type=1326 audit(78.480:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9290 comm="syz.3.2056" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabf7a228 code=0x7ffc0000 [ 78.527087][ T27] audit: type=1326 audit(78.480:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9290 comm="syz.3.2056" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabf7a228 code=0x7ffc0000 [ 78.532780][ T9296] sch_fq: defrate 4294967295 ignored. [ 78.582755][ T9298] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 78.624252][ T9302] loop0: p1 p2 p3 p4[DM] [ 78.625361][ T9302] loop0: p1 size 835329 extends beyond EOD, truncated [ 78.633991][ T9302] loop0: p2 size 327680 extends beyond EOD, truncated [ 78.644216][ T9302] loop0: p3 start 1052673 is beyond EOD, truncated [ 78.645436][ T9302] loop0: p4 size 262144 extends beyond EOD, truncated [ 78.756435][ T4758] udevd[4758]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 78.759279][ T4323] udevd[4323]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 78.770136][ T4322] udevd[4322]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 78.905419][ T9308] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 78.906864][ T9308] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 78.912333][ T9308] F2FS-fs (loop1): invalid crc value [ 78.947409][ T9308] F2FS-fs (loop1): Found nat_bits in checkpoint [ 78.984955][ T9308] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 78.986402][ T9308] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 79.128782][ T9364] sctp: [Deprecated]: syz.2.2092 (pid 9364) Use of int in max_burst socket option. [ 79.128782][ T9364] Use struct sctp_assoc_value instead [ 79.284018][ T9386] 0x000000001a01-0x36e0a945cfe187c7 : "" [ 79.285249][ T9386] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1e5ff [ 79.339196][ T9386] ftl_cs: FTL header corrupt! [ 79.469949][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.502150][ T9422] ip_tables: iptables: counters copy to user failed while replacing table [ 79.648099][ T9442] tipc: Enabled bearer , priority 0 [ 79.659743][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 79.668625][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 79.676318][ T14] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 79.678695][ T14] usb 1-1: can't read configurations, error -71 [ 79.781995][ T9419] JBD2: Ignoring recovery information on journal [ 79.790866][ T9419] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 79.792557][ T9419] JBD2: bad block at offset 32 [ 79.823663][ T9419] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 79.857299][ T9468] syz.3.2128 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.894563][ T9419] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 79.898252][ T9419] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 79.916651][ T9419] OCFS2: File system is now read-only. [ 79.917661][ T9419] (syz.4.2111,9419,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 79.919139][ T9419] (syz.4.2111,9419,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 79.921316][ T9419] (syz.4.2111,9419,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 79.922749][ T9419] (syz.4.2111,9419,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 79.924416][ T9419] (syz.4.2111,9419,1):ocfs2_write_cluster:1155 ERROR: status = -30 [ 79.926115][ T9419] (syz.4.2111,9419,1):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 79.927787][ T9419] (syz.4.2111,9419,1):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 79.931099][ T9419] (syz.4.2111,9419,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 79.978799][ T4351] ocfs2: Unmounting device (7,4) on (node local) [ 80.007950][ T9477] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 80.022385][ T9477] ntfs3: loop1: Failed to load $Extend. [ 80.073321][ T9479] EXT4-fs: Ignoring removed orlov option [ 80.074370][ T9479] EXT4-fs: Ignoring removed oldalloc option [ 80.124807][ T9479] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 80.163956][ T4351] EXT4-fs (loop4): unmounting filesystem. [ 80.231568][ T9501] syz.0.2142 uses obsolete (PF_INET,SOCK_PACKET) [ 80.418237][ T9524] exfat: Deprecated parameter 'namecase' [ 80.422088][ T9524] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 80.509583][ T9515] JBD2: Ignoring recovery information on journal [ 80.559558][ T9515] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 80.601828][ T4351] ocfs2: Unmounting device (7,4) on (node local) [ 80.681125][ T9545] netlink: 'syz.2.2162': attribute type 29 has an invalid length. [ 80.683009][ T9545] netlink: 'syz.2.2162': attribute type 29 has an invalid length. [ 80.687211][ T9547] binder_alloc: binder_alloc_mmap_handler: 9546 20ffe000-21000000 already mapped failed -16 [ 80.690588][ T9545] netlink: 'syz.2.2162': attribute type 29 has an invalid length. [ 80.802795][ T14] logitech-hidpp-device 0003:046D:C082.0002: Device not connected [ 80.805156][ T6668] logitech-hidpp-device 0003:046D:C082.0002: Can not get the protocol version. [ 80.986028][ T9574] set_capacity_and_notify: 12 callbacks suppressed [ 80.986039][ T9574] loop0: detected capacity change from 0 to 32768 [ 81.018431][ T9574] ea_get: invalid extended attribute [ 81.023186][ T9574] 0000000096f0dec9: 04 00 00 00 .... [ 81.452785][ T9589] loop0: detected capacity change from 0 to 1024 [ 81.466878][ T9589] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.478588][ T9589] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.495808][ T9589] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0103] [ 81.498936][ T9589] System zones: 0-1, 3-36 [ 81.512123][ T9589] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 81.564523][ T9589] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 81.604806][ T9595] loop1: detected capacity change from 0 to 16 [ 81.616066][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 81.618324][ T9595] erofs: (device loop1): mounted with root inode @ nid 36. [ 81.635684][ T9595] bio_check_eod: 7 callbacks suppressed [ 81.635699][ T9595] syz.1.2185: attempt to access beyond end of device [ 81.635699][ T9595] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 81.695970][ T9601] loop0: detected capacity change from 0 to 256 [ 81.785058][ T9605] loop1: detected capacity change from 0 to 2048 [ 81.803109][ T9610] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.853296][ T9616] random: crng reseeded on system resumption [ 81.988085][ T9630] loop1: detected capacity change from 0 to 256 [ 82.192026][ T9648] loop1: detected capacity change from 0 to 512 [ 82.292877][ T9651] loop0: detected capacity change from 0 to 4096 [ 82.300076][ T9651] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 82.373767][ T9660] loop4: detected capacity change from 0 to 1024 [ 82.478376][ T9662] loop0: detected capacity change from 0 to 16 [ 82.485069][ T9662] erofs: (device loop0): mounted with root inode @ nid 36. [ 82.526981][ T9669] __nla_validate_parse: 9 callbacks suppressed [ 82.526992][ T9669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2220'. [ 82.697007][ T9685] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2229'. [ 82.765156][ T9699] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2235'. [ 82.930489][ T9725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2248'. [ 83.293331][ T9754] ip6tnl0: Master is either lo or non-ether device [ 83.381682][ T9771] SQUASHFS error: xz decompression failed, data probably corrupt [ 83.384543][ T9771] SQUASHFS error: Failed to read block 0x108: -5 [ 83.385627][ T9771] SQUASHFS error: Unable to read metadata cache entry [106] [ 83.386844][ T9771] SQUASHFS error: Unable to read inode 0x11f [ 83.504983][ T9778] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.521103][ T9778] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.2272: lblock 2 mapped to illegal pblock 2 (length 1) [ 83.524591][ T9778] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 83.529179][ T9778] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.2272: lblock 0 mapped to illegal pblock 48 (length 1) [ 83.541845][ T9778] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 83.543467][ T9778] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.2272: Failed to acquire dquot type 0 [ 83.549940][ T9778] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 83.554249][ T9778] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.2272: mark_inode_dirty error [ 83.569787][ T9778] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 83.571579][ T9778] EXT4-fs (loop3): 1 orphan inode deleted [ 83.572540][ T9778] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 83.574878][ T9790] ip6tnl0: Master is either lo or non-ether device [ 83.588422][ T86] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.594221][ T86] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 83.595877][ T86] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0 [ 83.628232][ T9778] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 16: comm syz.3.2272: lblock 262144 mapped to illegal pblock 16 (length 8) [ 83.634639][ T9799] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2279'. [ 83.685364][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 83.686625][ T4336] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 83.705982][ T4336] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 83.714507][ T4336] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 83.742332][ T9806] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2287'. [ 83.785328][ T9812] random: crng reseeded on system resumption [ 83.923483][ T9826] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2295'. [ 84.263061][ T9830] XFS (loop4): Mounting V5 Filesystem [ 84.307788][ T9830] XFS (loop4): Ending clean mount [ 84.312892][ T9830] XFS (loop4): Quotacheck needed: Please wait. [ 84.352240][ T9830] XFS (loop4): Quotacheck: Done. [ 84.433421][ T4351] XFS (loop4): Unmounting Filesystem [ 84.462450][ T9875] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.628359][ T9900] binder_alloc: binder_alloc_mmap_handler: 9896 20ffe000-21000000 already mapped failed -16 [ 84.749110][ T9912] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.005393][ T9914] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 85.106718][ T4351] ocfs2: Unmounting device (7,4) on (node local) [ 85.132522][ T9940] JBD2: Ignoring recovery information on journal [ 85.166945][ T9940] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 85.199063][ T9950] binder_alloc: binder_alloc_mmap_handler: 9949 20ffe000-21000000 already mapped failed -16 [ 85.246440][ T4334] ocfs2: Unmounting device (7,0) on (node local) [ 85.517230][ T9981] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 85.529813][ T9981] ntfs3: loop3: Failed to load $Extend. [ 85.584330][ T9965] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 85.586509][ T9965] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 85.588165][ T9965] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 85.596357][ T9965] BTRFS info (device loop0): use zstd compression, level 3 [ 85.597664][ T9965] BTRFS info (device loop0): using free space tree [ 85.778965][ T9965] BTRFS info (device loop0): enabling ssd optimizations [ 85.793035][ T9994] JBD2: Ignoring recovery information on journal [ 85.805402][ T9994] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 85.813406][ T9994] JBD2: bad block at offset 32 [ 85.827629][ T9994] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 85.893844][ T9994] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 85.902565][ T9994] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 85.913017][ T9994] OCFS2: File system is now read-only. [ 85.924187][ T9994] (syz.1.2368,9994,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 85.925885][ T9994] (syz.1.2368,9994,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 85.927480][ T9994] (syz.1.2368,9994,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 85.928889][ T9994] (syz.1.2368,9994,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 85.942869][ T9994] (syz.1.2368,9994,1):ocfs2_write_cluster:1155 ERROR: status = -30 [ 85.944348][ T9994] (syz.1.2368,9994,1):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 85.945790][ T9994] (syz.1.2368,9994,1):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 85.947250][ T9994] (syz.1.2368,9994,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 85.951701][ T4334] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 86.071761][ T4330] ocfs2: Unmounting device (7,1) on (node local) [ 86.386157][T10067] set_capacity_and_notify: 14 callbacks suppressed [ 86.386167][T10067] loop4: detected capacity change from 0 to 764 [ 86.474390][T10053] loop1: detected capacity change from 0 to 32768 [ 86.501031][T10053] JBD2: Ignoring recovery information on journal [ 86.523252][T10065] loop0: detected capacity change from 0 to 32768 [ 86.539462][T10065] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 86.568206][T10065] JBD2: Ignoring recovery information on journal [ 86.574830][T10065] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 86.579310][T10053] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 86.585495][T10065] JBD2: bad block at offset 32 [ 86.595137][T10065] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 86.693730][T10065] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 86.696053][ T4330] ocfs2: Unmounting device (7,1) on (node local) [ 86.697533][T10065] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 86.717643][T10065] OCFS2: File system is now read-only. [ 86.718711][T10065] (syz.0.2394,10065,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 86.733171][T10086] loop4: detected capacity change from 0 to 256 [ 86.739840][T10065] (syz.0.2394,10065,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 86.741501][T10065] (syz.0.2394,10065,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 86.759857][T10065] (syz.0.2394,10065,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 86.761359][T10086] FAT-fs (loop4): Directory bread(block 64) failed [ 86.761568][T10065] (syz.0.2394,10065,1):ocfs2_write_cluster:1155 ERROR: status = -30 [ 86.764216][T10065] (syz.0.2394,10065,1):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 86.765683][T10065] (syz.0.2394,10065,1):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 86.768406][T10086] FAT-fs (loop4): Directory bread(block 65) failed [ 86.776089][T10086] FAT-fs (loop4): Directory bread(block 66) failed [ 86.780566][T10086] FAT-fs (loop4): Directory bread(block 67) failed [ 86.787430][T10086] FAT-fs (loop4): Directory bread(block 68) failed [ 86.790195][T10065] (syz.0.2394,10065,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 86.799951][T10086] FAT-fs (loop4): Directory bread(block 69) failed [ 86.806624][T10086] FAT-fs (loop4): Directory bread(block 70) failed [ 86.807803][T10086] FAT-fs (loop4): Directory bread(block 71) failed [ 86.808909][T10086] FAT-fs (loop4): Directory bread(block 72) failed [ 86.821829][T10071] loop3: detected capacity change from 0 to 32768 [ 86.823812][T10086] FAT-fs (loop4): Directory bread(block 73) failed [ 86.840232][T10071] JBD2: Ignoring recovery information on journal [ 86.855190][ T4334] ocfs2: Unmounting device (7,0) on (node local) [ 86.912008][T10071] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 87.007319][T10102] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2410'. [ 87.034369][ T4336] ocfs2: Unmounting device (7,3) on (node local) [ 87.258572][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2428'. [ 87.423265][T10136] loop4: detected capacity change from 0 to 32768 [ 87.493208][T10136] ERROR: (device loop4): dbAdjCtl: Corrupt dmapctl page [ 87.493208][T10136] [ 87.500219][T10136] ERROR: (device loop4): remounting filesystem as read-only [ 87.501449][T10136] ERROR: (device loop4): dbDiscardAG: -EIO [ 87.501449][T10136] [ 87.660648][T10159] loop0: detected capacity change from 0 to 32768 [ 87.674131][T10138] loop1: detected capacity change from 0 to 65536 [ 87.680997][T10159] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 87.723380][T10138] XFS (loop1): Mounting V5 Filesystem [ 87.734489][ T4334] ocfs2: Unmounting device (7,0) on (node local) [ 87.778338][T10138] XFS (loop1): Ending clean mount [ 87.785156][T10138] XFS (loop1): Quotacheck needed: Please wait. [ 87.793839][ T6668] XFS (loop1): Metadata CRC error detected at xfs_agi_read_verify+0x160/0x234, xfs_agi block 0x8002 [ 87.796031][ T6668] XFS (loop1): Unmount and run xfs_repair [ 87.797010][ T6668] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 87.798281][ T6668] 00000000: 58 41 47 49 00 00 00 01 00 00 00 01 00 00 40 00 XAGI..........@. [ 87.812202][ T86] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x6 [ 87.815141][ T86] XFS (loop1): Unmount and run xfs_repair [ 87.816149][ T86] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 87.818719][ T6668] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 00 ................ [ 87.823973][ T6668] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 87.827961][ T6668] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 87.846386][ T6668] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 87.849894][ T86] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 87.853946][ T6668] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 87.855568][ T86] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 87.858586][ T6668] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 87.862888][T10182] loop3: detected capacity change from 0 to 40427 [ 87.864868][ T86] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 87.868720][ T86] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 87.872146][ T6668] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 87.877262][ T4432] XFS (loop1): metadata I/O error in "xfs_read_agi+0x24c/0x66c" at daddr 0x8002 len 1 error 74 [ 87.879302][T10182] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 87.880159][ T86] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 87.886005][ T86] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 87.887762][T10182] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 87.890821][ T86] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 87.895847][ T86] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 87.900612][ T86] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x6 len 2 error 74 [ 87.900810][T10182] F2FS-fs (loop3): invalid crc value [ 87.914382][T10138] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 87.948336][T10182] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.984140][T10182] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 87.985552][T10182] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 87.987089][T10138] XFS (loop1): EXPERIMENTAL online shrink feature in use. Use at your own risk! [ 88.012334][T10138] XFS (loop1): Metadata CRC error detected at xfs_agi_read_verify+0x160/0x234, xfs_agi block 0x8002 [ 88.014453][T10138] XFS (loop1): Unmount and run xfs_repair [ 88.036763][T10138] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 88.038121][T10138] 00000000: 58 41 47 49 00 00 00 01 00 00 00 01 00 00 40 00 XAGI..........@. [ 88.059745][T10138] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 00 ................ [ 88.061421][T10138] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 88.063030][T10138] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 88.064623][T10138] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 88.066228][T10138] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 88.067817][T10138] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 88.069348][T10138] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 88.095926][T10138] XFS (loop1): metadata I/O error in "xfs_read_agi+0x24c/0x66c" at daddr 0x8002 len 1 error 74 [ 88.129380][ T4330] XFS (loop1): Unmounting Filesystem [ 88.178912][T10195] loop4: detected capacity change from 0 to 32768 [ 88.187998][T10195] (syz.4.2438,10195,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.192886][T10195] (syz.4.2438,10195,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.215802][T10195] JBD2: Ignoring recovery information on journal [ 88.283221][T10195] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 88.370555][ T4351] ocfs2: Unmounting device (7,4) on (node local) [ 88.539794][T10242] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2457'. [ 88.601861][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2455'. [ 88.680600][T10260] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 88.758565][T10270] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2471'. [ 89.067316][T10287] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 89.104505][ T4336] ocfs2: Unmounting device (7,3) on (node local) [ 89.485496][ T4331] Bluetooth: hci4: link tx timeout [ 89.486654][ T4331] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 89.488810][ T4331] Bluetooth: hci4: link tx timeout [ 89.489716][ T4331] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 89.510879][T10313] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 89.512324][T10313] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 89.514212][T10313] F2FS-fs (loop3): invalid crc value [ 89.555036][T10313] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.605079][T10313] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 89.606523][T10313] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 89.818543][T10374] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.950272][T10384] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 89.981527][T10391] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.044159][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2516'. [ 90.122763][T10395] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 90.129473][T10395] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 90.149472][T10395] REISERFS (device loop4): using ordered data mode [ 90.160844][T10395] reiserfs: using flush barriers [ 90.169559][T10395] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.185105][T10395] REISERFS (device loop4): checking transaction log (loop4) [ 90.189180][T10395] REISERFS (device loop4): Using r5 hash to sort names [ 90.220300][T10395] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 90.220925][T10409] (syz.1.2523,10409,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 90.225578][T10409] (syz.1.2523,10409,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 90.243392][T10409] JBD2: Ignoring recovery information on journal [ 90.304694][T10409] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 90.342199][T10426] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.431390][ T4330] ocfs2: Unmounting device (7,1) on (node local) [ 90.502570][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2536'. [ 90.507629][T10443] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2539'. [ 90.519736][T10443] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2539'. [ 90.584673][T10447] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 90.587304][T10447] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 90.591547][T10447] REISERFS (device loop0): using ordered data mode [ 90.596037][T10447] reiserfs: using flush barriers [ 90.604485][T10447] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.614336][T10447] REISERFS (device loop0): checking transaction log (loop0) [ 90.619529][T10447] REISERFS (device loop0): Using r5 hash to sort names [ 90.626471][T10447] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 90.665423][T10462] exfat: Deprecated parameter 'utf8' [ 90.666434][T10462] exfat: Deprecated parameter 'utf8' [ 90.667420][T10462] exfat: Deprecated parameter 'namecase' [ 90.668505][T10462] exfat: Deprecated parameter 'namecase' [ 90.710937][T10462] exfat: Deprecated parameter 'namecase' [ 90.745641][T10462] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 90.972491][T10499] tipc: MTU too low for tipc bearer [ 91.036982][T10505] rdma_op 00000000d1d36b15 conn xmit_rdma 0000000000000000 [ 91.191988][T10495] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 91.195069][T10495] F2FS-fs (loop4): invalid crc value [ 91.197041][T10515] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 91.202517][T10495] F2FS-fs (loop4): Found nat_bits in checkpoint [ 91.215255][T10495] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 91.226608][T10495] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 91.235959][T10515] ntfs: volume version 3.1. [ 91.274542][T10515] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 91.294232][T10515] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 91.324210][T10524] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 91.334460][T10515] overlayfs: failed to resolve './bus': -2 [ 91.359985][T10524] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 91.368986][T10529] tipc: MTU too low for tipc bearer [ 91.380011][T10524] ntfs: (device loop0): __ntfs_bitmap_set_bits_in_run(): Failed to map first page (error -5), aborting. [ 91.387878][T10524] ntfs: (device loop0): __ntfs_cluster_free(): Failed to clear first run (error -5), aborting. [ 91.391522][T10517] (syz.3.2575,10517,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 91.395132][T10524] ntfs: (device loop0): ntfs_truncate(): Failed to release cluster(s) (error code -5). Unmount and run chkdsk to recover the lost cluster(s). [ 91.400248][T10517] (syz.3.2575,10517,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 91.415974][T10517] JBD2: Ignoring recovery information on journal [ 91.432174][ T4334] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 91.497503][T10538] netlink: 'syz.0.2583': attribute type 3 has an invalid length. [ 91.505187][T10517] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 91.517908][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2583'. [ 91.529814][ T4331] Bluetooth: hci4: command 0x0406 tx timeout [ 91.583737][ T4336] ocfs2: Unmounting device (7,3) on (node local) [ 91.813487][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2605'. [ 91.818724][T10582] rdma_op 000000004ab94b39 conn xmit_rdma 0000000000000000 [ 91.997528][T10600] vivid-000: disconnect [ 92.002508][T10599] vivid-000: reconnect [ 92.013301][T10602] set_capacity_and_notify: 17 callbacks suppressed [ 92.013311][T10602] loop3: detected capacity change from 0 to 512 [ 92.029188][T10602] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 92.051908][T10606] ax25_connect(): syz.2.2616 uses autobind, please contact jreuter@yaina.de [ 92.147013][T10598] loop4: detected capacity change from 0 to 32768 [ 92.182104][T10576] loop0: detected capacity change from 0 to 65536 [ 92.213461][T10598] XFS (loop4): Mounting V5 Filesystem [ 92.227561][T10576] XFS (loop0): Mounting V5 Filesystem [ 92.257518][T10598] XFS (loop4): Ending clean mount [ 92.262775][T10598] XFS (loop4): Quotacheck needed: Please wait. [ 92.274374][ T86] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x8 [ 92.276562][ T86] XFS (loop4): Unmount and run xfs_repair [ 92.277618][ T86] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 92.279015][ T86] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 92.280998][ T86] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 92.282588][ T86] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 ...*;yE..m...5.. [ 92.284229][ T86] 00000030: 00 00 00 00 39 a9 79 c7 00 00 00 0d 00 00 00 03 ....9.y......... [ 92.285738][ T86] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00 .......X........ [ 92.287200][ T86] 00000050: 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 ................ [ 92.288656][ T86] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 92.290328][ T86] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 92.291789][ T86] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x8 len 4 error 74 [ 92.296484][T10598] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 92.306837][T10576] XFS (loop0): Ending clean mount [ 92.345006][T10639] loop3: detected capacity change from 0 to 256 [ 92.364119][T10639] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 92.368473][ T4351] XFS (loop4): Unmounting Filesystem [ 92.418934][ T4334] XFS (loop0): Unmounting Filesystem [ 92.437931][T10612] loop1: detected capacity change from 0 to 32768 [ 92.467205][T10612] XFS (loop1): Mounting V5 Filesystem [ 92.521437][T10612] XFS (loop1): Ending clean mount [ 92.560868][ T4330] XFS (loop1): Unmounting Filesystem [ 92.648746][T10663] loop3: detected capacity change from 0 to 4096 [ 92.736153][T10663] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 92.799245][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 92.862550][T10682] loop0: detected capacity change from 0 to 1024 [ 92.864192][T10682] EXT4-fs: Ignoring removed bh option [ 92.910238][T10681] loop4: detected capacity change from 0 to 4096 [ 92.912000][T10681] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 92.915298][T10682] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 92.933025][T10681] ntfs: volume version 3.1. [ 92.941727][T10682] EXT4-fs: can't change dax mount option while remounting [ 93.006656][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 93.039116][T10681] overlayfs: failed to resolve './bus': -2 [ 93.116703][T10702] tipc: Enabling of bearer rejected, media not registered [ 93.177510][T10707] loop4: detected capacity change from 0 to 4096 [ 93.211201][T10707] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 93.334831][ T4351] EXT4-fs (loop4): unmounting filesystem. [ 93.364009][T10725] delete_channel: no stack [ 93.496742][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2668'. [ 93.599795][ T4331] Bluetooth: hci4: command 0x0406 tx timeout [ 93.721694][T10784] loop0: detected capacity change from 0 to 1024 [ 93.722518][T10786] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 93.755717][T10792] sock: sock_timestamping_bind_phc: sock not bind to device [ 93.836004][T10805] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 93.926436][ T14] kernel write not supported for file /dsp (pid: 14 comm: kworker/0:1) [ 93.936603][T10819] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.948598][T10816] NILFS (loop0): error -22 preparing GC: cannot mark copying blocks dirty [ 94.040481][T10812] XFS (loop3): Mounting V5 Filesystem [ 94.071878][T10812] XFS (loop3): Ending clean mount [ 94.120472][ T4336] XFS (loop3): Unmounting Filesystem [ 94.192725][T10845] netlink: 'syz.2.2714': attribute type 5 has an invalid length. [ 94.310267][T10853] EXT4-fs: Ignoring removed bh option [ 94.313602][T10853] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.317248][T10853] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 94.338540][T10853] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 94.340598][T10853] EXT4-fs (loop0): orphan cleanup on readonly fs [ 94.343202][T10853] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.347060][T10853] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 94.353311][T10853] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.2717: Invalid block bitmap block 0 in block_group 0 [ 94.365562][T10853] EXT4-fs (loop0): Remounting filesystem read-only [ 94.367957][T10853] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 94.383118][T10853] EXT4-fs (loop0): Remounting filesystem read-only [ 94.385169][T10853] EXT4-fs (loop0): 1 orphan inode deleted [ 94.388139][T10853] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 94.450671][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 94.455079][T10864] Bluetooth: MGMT ver 1.22 [ 94.523314][T10870] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.545491][T10870] EXT4-fs (loop3): 1 truncate cleaned up [ 94.546943][T10870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 94.568941][T10870] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 156 vs 220 free clusters [ 94.590062][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 94.661328][T10881] sock: sock_timestamping_bind_phc: sock not bind to device [ 94.895622][T10892] F2FS-fs (loop4): invalid crc value [ 94.901388][T10892] F2FS-fs (loop4): Found nat_bits in checkpoint [ 94.937663][T10892] F2FS-fs (loop4): Start checkpoint disabled! [ 94.944289][T10892] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 94.969165][ T9] kworker/u4:0: attempt to access beyond end of device [ 94.969165][ T9] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.256083][T10949] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.322116][T10942] NILFS (loop1): error -22 preparing GC: cannot mark copying blocks dirty [ 95.416353][T10967] netlink: 'syz.3.2771': attribute type 2 has an invalid length. [ 95.514265][T10975] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.523189][T10975] EXT4-fs (loop4): 1 truncate cleaned up [ 95.524405][T10975] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 95.589508][T10975] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 156 vs 220 free clusters [ 95.612634][T10971] (syz.0.2773,10971,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.615257][T10971] (syz.0.2773,10971,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.640041][T10971] JBD2: Ignoring recovery information on journal [ 95.681528][ T4351] EXT4-fs (loop4): unmounting filesystem. [ 95.725188][T10971] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 95.728299][T10965] XFS (loop1): Mounting V5 Filesystem [ 95.777993][T10965] XFS (loop1): Ending clean mount [ 95.787141][T10965] XFS (loop1): syz.1.2770 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 95.828996][ T4330] XFS (loop1): Unmounting Filesystem [ 95.865114][ T4334] ocfs2: Unmounting device (7,0) on (node local) [ 96.025872][T11012] Set syz1 is full, maxelem 3 reached [ 96.056388][T11016] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2791'. [ 96.201120][T11038] netlink: 'syz.1.2801': attribute type 2 has an invalid length. [ 96.290863][T11052] [U]  [ 96.291461][T11052] [U] K{ [ 96.292145][T11052] [U] T 1ŠFFˊ`GJǘGO/MC [ 96.300801][T11052] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 96.303850][T11052] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 96.311956][T11052] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 96.320743][T11054] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 96.330365][T11052] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 96.330684][ T14] hid-generic 0003:1B1C:1C1A.0003: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 96.335269][T11052] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 96.340327][T11052] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 96.343468][T11052] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 96.409027][T11054] EXT4-fs error (device loop1): __ext4_expand_extra_isize:5972: inode #15: comm syz.1.2808: bad extra_isize 62 (inode size 256) [ 96.430084][T11052] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 96.431931][T11052] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 96.434271][T11052] [U] 22Ʃ۩X?0;3U [ 96.435612][T11052] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 96.438801][T11061] fido_id[11061]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.445483][T11054] EXT4-fs (loop1): Remounting filesystem read-only [ 96.476726][T11052] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 96.478753][T11052] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 96.506076][T11052] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 96.507615][T11052] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 96.515399][T11052] [U] EC [ 96.516316][T11052] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 96.523077][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 96.565948][T11051] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 96.672970][T11067] F2FS-fs (loop0): invalid crc value [ 96.682290][T11067] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.701513][T11067] F2FS-fs (loop0): Start checkpoint disabled! [ 96.739532][T11067] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 96.793666][T11090] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 96.793898][T11103] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.823348][T11103] EXT4-fs (loop4): 1 truncate cleaned up [ 96.824537][T11103] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.830209][T11090] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 96.842145][ T1614] kworker/u4:5: attempt to access beyond end of device [ 96.842145][ T1614] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.869423][T11090] ntfs3: loop1: Inode r=b is not in use! [ 96.870833][T11090] ntfs3: loop1: Failed to load $Extend. [ 96.981978][T11106] XFS (loop3): Mounting V5 Filesystem [ 97.001174][ T4351] EXT4-fs (loop4): unmounting filesystem. [ 97.032440][T11106] XFS (loop3): Ending clean mount [ 97.069087][ T4336] XFS (loop3): Unmounting Filesystem [ 97.151843][ T113] hid-generic 0003:1B1C:1C1A.0004: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 97.239360][T11138] set_capacity_and_notify: 17 callbacks suppressed [ 97.239370][T11138] loop0: detected capacity change from 0 to 2048 [ 97.293695][T11135] fido_id[11135]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 97.306743][T11138] loop0: p1 < > p3 [ 97.307947][T11138] loop0: p3 size 134217728 extends beyond EOD, truncated [ 97.329469][ C1] operation not supported error, dev loop0, sector 135 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 97.436100][T11158] loop3: detected capacity change from 0 to 1024 [ 97.486438][T11158] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 97.570545][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 97.581727][T11160] loop4: detected capacity change from 0 to 32768 [ 97.611148][T11160] [ 97.611148][T11160] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.611148][T11160] [ 97.614805][T11173] Cannot find set identified by id 0 to match [ 97.622357][T11160] JFS: metapage_get_blocks failed [ 97.624181][T11160] ERROR: (device loop4): release_metapage: write_one_page() failed [ 97.624181][T11160] [ 97.642212][T11160] ERROR: (device loop4): remounting filesystem as read-only [ 97.648078][T11160] ERROR: (device loop4): diWrite: ixpxd invalid [ 97.648078][T11160] [ 97.651302][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2871'. [ 97.653093][T11160] ERROR: (device loop4): txAbort: [ 97.653093][T11160] [ 97.703083][T11180] binder: 11179:11180 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 97.846138][T11174] loop3: detected capacity change from 0 to 32768 [ 97.897802][T11174] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 97.897802][T11174] [ 97.907683][T11174] ERROR: (device loop3): remounting filesystem as read-only [ 97.963072][ T95] blkno = 1580, nblocks = 1 [ 97.964003][ T95] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 97.964003][ T95] [ 98.026531][T11187] loop4: detected capacity change from 0 to 32768 [ 98.092986][T11206] loop0: detected capacity change from 0 to 512 [ 98.140045][T11206] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.207050][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 98.288004][T11219] option changes via remount are deprecated (pid=11218 comm=syz.2.2881) [ 98.289607][T11219] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 98.442914][T11237] loop3: detected capacity change from 0 to 4096 [ 98.479448][T11240] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.579058][T11217] loop4: detected capacity change from 0 to 40427 [ 98.592179][T11217] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 98.593284][T11246] block device autoloading is deprecated and will be removed. [ 98.596065][T11217] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 98.627746][T11217] F2FS-fs (loop4): Found nat_bits in checkpoint [ 98.643129][T11217] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 98.644453][T11217] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 98.719774][T11265] loop3: detected capacity change from 0 to 1024 [ 98.758274][T11234] loop0: detected capacity change from 0 to 40427 [ 98.764100][T11234] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 98.765527][T11234] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 98.785664][T11234] F2FS-fs (loop0): invalid crc value [ 98.812781][T11234] F2FS-fs (loop0): Found nat_bits in checkpoint [ 98.814121][T11265] hfsplus: invalid length 1280 has been corrected to 255 [ 98.837186][T11234] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 98.838466][T11234] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 98.999571][T11289] binder: 11288:11289 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 99.161305][T11302] hfsplus: invalid length 1280 has been corrected to 255 [ 99.233365][T11317] ip_tables: iptables: counters copy to user failed while replacing table [ 99.299840][T11324] Dev loop9: unable to read RDB block 7 [ 99.302298][T11324] loop9: unable to read partition table [ 99.303629][T11324] loop9: partition table beyond EOD, truncated [ 99.304677][T11324] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 99.304677][T11324] ) failed (rc=-5) [ 99.327220][T11329] erofs: (device loop4): mounted with root inode @ nid 36. [ 99.333421][T11329] Invalid ELF header len 10 [ 99.588221][T11353] block device autoloading is deprecated and will be removed. [ 99.631527][T11358] exfat: Deprecated parameter 'namecase' [ 99.632640][T11358] exfat: Deprecated parameter 'namecase' [ 99.633593][T11358] exfat: Deprecated parameter 'namecase' [ 99.649394][T11358] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 99.666214][T11359] erofs: (device loop3): mounted with root inode @ nid 36. [ 99.679209][T11359] Invalid ELF header len 10 [ 99.729784][T11339] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 99.731299][T11339] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 99.748485][T11339] F2FS-fs (loop0): invalid crc value [ 99.771497][T11339] F2FS-fs (loop0): Found nat_bits in checkpoint [ 99.798843][T11371] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2948'. [ 99.802060][T11339] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 99.803342][T11339] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 99.848989][T11339] syz.0.2935: attempt to access beyond end of device [ 99.848989][T11339] loop0: rw=2049, sector=45096, nr_sectors = 408 limit=40427 [ 99.884115][ T86] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 99.887504][ T86] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 99.953868][T11383] netlink: 'syz.1.2957': attribute type 3 has an invalid length. [ 99.955305][T11383] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2957'. [ 100.195313][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2963'. [ 100.196969][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2963'. [ 100.237286][T11399] __ntfs_warning: 9 callbacks suppressed [ 100.237296][T11399] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 100.267444][T11399] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 100.282549][T11399] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 100.292756][T11399] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 100.294739][T11399] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 100.307449][T11399] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 100.318118][T11399] ntfs: volume version 3.1. [ 100.320123][T11399] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 100.322423][T11399] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 100.327756][T11399] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 100.347467][T11399] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 100.510494][ T4331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.517575][ T4331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.525154][ T4331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.527002][ T4331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.529839][ T4331] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 100.532531][ T4331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.574590][T11412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.600449][T11412] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 100.623300][T11412] EXT4-fs (loop1): orphan cleanup on readonly fs [ 100.625466][T11412] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 100.626825][T11412] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 100.651904][ T1577] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.654475][ T1577] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.658322][T11412] EXT4-fs (loop1): 1 truncate cleaned up [ 100.659553][T11412] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.722729][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 100.752082][T11406] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.2967 (11406) [ 100.762341][ T1577] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.764276][ T1577] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.773073][T11406] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 100.775011][T11406] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 100.776635][T11406] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 100.776877][T11409] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.778160][T11406] BTRFS info (device loop0): use zstd compression, level 3 [ 100.799447][T11406] BTRFS info (device loop0): using free space tree [ 100.827745][T11380] F2FS-fs (loop3): invalid crc value [ 100.875570][ T1577] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.877556][ T1577] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.904110][T11380] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.949837][T11380] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 100.954531][T11380] F2FS-fs (loop3): Corrupted max_depth of 3: 16842753 [ 100.965532][T11380] fscrypt (loop3, inode 8): Error -61 getting encryption context [ 101.031041][ T1577] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.032917][ T1577] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.070348][T11406] BTRFS info (device loop0): enabling ssd optimizations [ 101.101375][T11409] chnl_net:caif_netlink_parms(): no params data found [ 101.116179][T11442] XFS (loop1): Mounting V5 Filesystem [ 101.149383][T11442] XFS (loop1): Ending clean mount [ 101.155251][ T4334] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 101.158823][T11442] XFS (loop1): Quotacheck needed: Please wait. [ 101.271779][T11442] XFS (loop1): Quotacheck: Done. [ 101.309043][T11409] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.324063][T11409] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.342701][T11409] device bridge_slave_0 entered promiscuous mode [ 101.347987][T11409] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.349256][T11409] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.351743][T11409] device bridge_slave_1 entered promiscuous mode [ 101.359213][T11409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.363080][T11409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.370634][ T4330] XFS (loop1): Unmounting Filesystem [ 101.375065][T11409] team0: Port device team_slave_0 added [ 101.378614][T11409] team0: Port device team_slave_1 added [ 101.383390][T11466] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 101.432772][T11409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.436640][T11409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.451374][T11409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.476793][T11409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.478093][T11409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.482486][ T4323] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop0 scanned by udevd (4323) [ 101.502928][T11409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.518151][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 101.621147][T11409] device hsr_slave_0 entered promiscuous mode [ 101.640242][T11409] device hsr_slave_1 entered promiscuous mode [ 101.690240][T11409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.694762][T11409] Cannot create hsr debugfs directory [ 101.696950][ T1577] tipc: Left network mode [ 101.914796][T11514] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2992'. [ 101.916759][T11514] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2992'. [ 101.919277][T11514] netlink: 'syz.1.2992': attribute type 5 has an invalid length. [ 101.923119][T11514] netlink: 'syz.1.2992': attribute type 6 has an invalid length. [ 101.924694][T11514] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2992'. [ 102.031483][T11516] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 102.083422][ T4336] ocfs2: Unmounting device (7,3) on (node local) [ 102.164370][T11409] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.181925][T11528] EXT4-fs: inline encryption not supported [ 102.200552][T11528] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.2997: inode has both inline data and extents flags [ 102.211871][T11528] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.2997: couldn't read orphan inode 15 (err -117) [ 102.217438][T11528] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 102.236602][T11409] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 102.281151][T11409] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 102.285467][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 102.378579][T11552] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3002'. [ 102.386274][T11552] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3002'. [ 102.387972][T11552] netlink: 'syz.3.3002': attribute type 5 has an invalid length. [ 102.389412][T11552] netlink: 'syz.3.3002': attribute type 6 has an invalid length. [ 102.392210][T11552] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3002'. [ 102.409238][T11409] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 102.556020][T11573] set_capacity_and_notify: 16 callbacks suppressed [ 102.556031][T11573] loop0: detected capacity change from 0 to 512 [ 102.562398][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 102.600302][T11573] EXT4-fs: inline encryption not supported [ 102.615117][T11573] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.3011: inode has both inline data and extents flags [ 102.617562][T11573] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.3011: couldn't read orphan inode 15 (err -117) [ 102.637056][T11573] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.651890][T11409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.704546][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 102.716617][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.718702][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.740568][T11409] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.806831][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.808925][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.811855][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.813127][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.822227][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.829975][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.831871][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.833521][ T4432] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.834725][ T4432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.891517][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.896070][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.905537][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.917344][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.950827][T11603] loop0: detected capacity change from 0 to 512 [ 102.963727][T11603] EXT2-fs (loop0): (no)acl options not supported [ 102.971654][T11603] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 103.011871][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.014439][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.016931][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.022334][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.024266][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.029577][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.061125][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.066738][T11409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.301169][T11620] loop3: detected capacity change from 0 to 512 [ 103.307002][T11620] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.308735][T11620] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 103.313472][T11620] EXT4-fs (loop3): orphan cleanup on readonly fs [ 103.314789][T11620] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 103.316252][T11620] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 103.326067][T11620] EXT4-fs (loop3): 1 truncate cleaned up [ 103.327332][T11620] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 103.367895][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 103.504556][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.506158][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.514482][T11409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.804226][T11650] loop3: detected capacity change from 0 to 32768 [ 103.865543][T11650] XFS (loop3): Mounting V5 Filesystem [ 103.915386][T11661] loop1: detected capacity change from 0 to 32768 [ 103.943582][T11661] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 104.041969][T11650] XFS (loop3): Ending clean mount [ 104.062113][T11650] XFS (loop3): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 104.065177][T11481] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 104.073469][ T1577] device hsr_slave_0 left promiscuous mode [ 104.086496][T11678] loop1: detected capacity change from 0 to 2048 [ 104.114821][ T1577] device hsr_slave_1 left promiscuous mode [ 104.117243][ T4336] XFS (loop3): Unmounting Filesystem [ 104.125517][T11678] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 104.130434][T11678] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 104.155729][T11676] loop0: detected capacity change from 0 to 32768 [ 104.158311][T11678] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.191136][ T1577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.192590][ T1577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.196874][ T1577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.198255][ T1577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.203821][ T1577] device bridge_slave_1 left promiscuous mode [ 104.214504][ T1577] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.241602][T11676] XFS (loop0): Mounting V5 Filesystem [ 104.270846][ T1577] device bridge_slave_0 left promiscuous mode [ 104.272088][ T1577] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.318514][T11676] XFS (loop0): Ending clean mount [ 104.322329][T11676] XFS (loop0): Quotacheck needed: Please wait. [ 104.368363][T11676] XFS (loop0): Quotacheck: Done. [ 104.405675][ T4334] XFS (loop0): Unmounting Filesystem [ 104.460778][ T1577] device veth1_macvtap left promiscuous mode [ 104.462322][ T1577] device veth0_macvtap left promiscuous mode [ 104.463498][ T1577] device veth1_vlan left promiscuous mode [ 104.464643][ T1577] device veth0_vlan left promiscuous mode [ 104.607283][T11705] loop3: detected capacity change from 0 to 32768 [ 104.618514][T11705] XFS (loop3): Mounting V5 Filesystem [ 104.640867][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 104.647153][T11705] XFS (loop3): Ending clean mount [ 104.649560][T11705] XFS (loop3): Quotacheck needed: Please wait. [ 104.674819][T11705] XFS (loop3): Quotacheck: Done. [ 104.734529][ T4336] XFS (loop3): Unmounting Filesystem [ 105.125289][T11715] loop0: detected capacity change from 0 to 131072 [ 105.133920][T11715] F2FS-fs (loop0): invalid crc value [ 105.145229][T11715] F2FS-fs (loop0): Found nat_bits in checkpoint [ 105.184385][T11715] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 105.210300][T11715] F2FS-fs (loop0): Corrupted max_depth of 3: 16842753 [ 105.215477][T11715] fscrypt (loop0, inode 8): Error -61 getting encryption context [ 106.729805][ T4331] Bluetooth: hci4: command 0x040f tx timeout [ 107.154577][ T1577] team0 (unregistering): Port device team_slave_1 removed [ 107.341966][ T1577] team0 (unregistering): Port device team_slave_0 removed [ 107.519866][ T4331] Bluetooth: hci5: command 0xfc11 tx timeout [ 107.522580][ T48] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 107.539952][ T1577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.639435][T11738] loop0: detected capacity change from 0 to 32768 [ 107.663987][T11738] XFS (loop0): Mounting V5 Filesystem [ 107.673456][T11738] XFS (loop0): Ending clean mount [ 107.716904][ T4334] XFS (loop0): Unmounting Filesystem [ 107.740262][ T1577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.082170][T11756] loop0: detected capacity change from 0 to 256 [ 108.799677][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 108.994820][T11761] loop0: detected capacity change from 0 to 512 [ 109.009242][T11761] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 109.048487][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 109.250720][ T1577] bond0 (unregistering): Released all slaves [ 109.666985][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.673297][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.690757][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.692789][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.699292][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.710330][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.837084][T11409] device veth0_vlan entered promiscuous mode [ 109.840965][T11409] device veth1_vlan entered promiscuous mode [ 109.863569][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.865396][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.866963][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.868609][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.876144][T11409] device veth0_macvtap entered promiscuous mode [ 109.883726][T11409] device veth1_macvtap entered promiscuous mode [ 109.915600][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.917390][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.919289][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.934742][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.936422][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.941670][T11816] loop1: detected capacity change from 0 to 64 [ 109.944679][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.963297][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.965130][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.987571][T11409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.994255][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.996156][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.997904][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.006786][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.008702][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.011236][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.013244][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.018763][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.031975][T11409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.037586][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.039373][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.048921][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.057853][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.070083][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.071882][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.081209][T11409] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.082797][T11409] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.084313][T11409] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.085932][T11409] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.178287][T11842] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3096'. [ 110.188706][ T4432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.190339][ T4432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.191745][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 110.209035][ T4432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.210946][ T4432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.213128][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 110.259985][T11849] loop0: detected capacity change from 0 to 64 [ 110.293769][T11849] Trying to free block not in datazone [ 110.306387][T11852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3100'. [ 110.334348][T11852] device bridge1 entered promiscuous mode [ 110.410701][T11852] team0: Port device bridge1 added [ 110.471107][T11831] loop1: detected capacity change from 0 to 40427 [ 110.490955][T11831] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 110.494211][T11831] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 110.514401][T11831] F2FS-fs (loop1): invalid crc value [ 110.530852][T11831] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 110.549340][T11877] Bluetooth: MGMT ver 1.22 [ 110.592534][T11831] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 110.594076][T11831] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 110.601400][T11831] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 110.683077][T11887] loop5: detected capacity change from 0 to 2048 [ 110.697116][T11887] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.793174][T11895] loop3: detected capacity change from 0 to 4096 [ 110.828707][T11865] loop0: detected capacity change from 0 to 40427 [ 110.833854][T11865] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 110.835033][T11865] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 110.838391][T11865] F2FS-fs (loop0): invalid crc value [ 110.872831][T11865] F2FS-fs (loop0): Found nat_bits in checkpoint [ 110.880972][T11905] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.902377][T11865] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 110.904676][T11865] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 110.952621][T11916] loop5: detected capacity change from 0 to 1024 [ 110.966733][ T4334] syz-executor: attempt to access beyond end of device [ 110.966733][ T4334] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.048544][T11928] PKCS8: Unsupported PKCS#8 version [ 111.071508][T11931] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 111.077200][T11931] EXT4-fs warning (device loop1): ext4_group_extend:1870: can't shrink FS - resize aborted [ 111.142054][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 111.243186][T11951] netlink: 296 bytes leftover after parsing attributes in process `syz.5.3132'. [ 111.298560][T11957] netlink: 300 bytes leftover after parsing attributes in process `syz.5.3134'. [ 111.487308][T11976] Trying to free block not in datazone [ 111.629464][T11994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3149'. [ 111.633256][T11994] device bridge1 entered promiscuous mode [ 111.652547][T11994] team0: Port device bridge1 added [ 111.772355][T12017] erofs: (device loop1): mounted with root inode @ nid 36. [ 111.913921][T12031] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.975256][T12043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3168'. [ 111.982746][T12043] device bridge1 entered promiscuous mode [ 112.027754][T12043] team0: Port device bridge1 added [ 112.061696][T12055] [ 112.062220][T12055] ====================================================== [ 112.063352][T12055] WARNING: possible circular locking dependency detected [ 112.064456][T12055] syzkaller #0 Not tainted [ 112.065161][T12055] ------------------------------------------------------ [ 112.066297][T12055] syz.0.3173/12055 is trying to acquire lock: [ 112.067299][T12055] ffff0000c62b7698 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0x104/0x694 [ 112.069001][T12055] [ 112.069001][T12055] but task is already holding lock: [ 112.070433][T12055] ffff80001daac1d8 (nfnl_subsys_ipset){+.+.}-{3:3}, at: nfnetlink_rcv_msg+0x888/0xf88 [ 112.072353][T12055] [ 112.072353][T12055] which lock already depends on the new lock. [ 112.072353][T12055] [ 112.074311][T12055] [ 112.074311][T12055] the existing dependency chain (in reverse order) is: [ 112.075893][T12055] [ 112.075893][T12055] -> #2 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 112.077323][T12055] __mutex_lock_common+0x1a0/0x1f3c [ 112.079029][T12055] mutex_lock_nested+0x38/0x44 [ 112.080012][T12055] nfnl_lock+0x50/0x78 [ 112.080839][T12055] ip_set_nfnl_get_byindex+0x7c/0x248 [ 112.081893][T12055] set_match_v1_checkentry+0x74/0x224 [ 112.082944][T12055] xt_check_match+0x3d8/0xa54 [ 112.083888][T12055] __nft_match_init+0x50c/0x6dc [ 112.084885][T12055] nft_match_init+0x38/0x4c [ 112.085762][T12055] nf_tables_newrule+0x11b8/0x1be4 [ 112.086807][T12055] nfnetlink_rcv+0xc7c/0x1c54 [ 112.087733][T12055] netlink_unicast+0x5fc/0x80c [ 112.088752][T12055] netlink_sendmsg+0x6f0/0x9d8 [ 112.089738][T12055] ____sys_sendmsg+0x588/0x90c [ 112.090732][T12055] __sys_sendmsg+0x288/0x374 [ 112.091683][T12055] __arm64_sys_sendmsg+0x80/0x94 [ 112.092717][T12055] invoke_syscall+0x98/0x290 [ 112.093736][T12055] el0_svc_common+0x13c/0x258 [ 112.094755][T12055] do_el0_svc+0x5c/0x134 [ 112.095662][T12055] el0_svc+0x58/0x12c [ 112.096478][T12055] el0t_64_sync_handler+0x84/0xf0 [ 112.097478][T12055] el0t_64_sync+0x18c/0x190 [ 112.098446][T12055] [ 112.098446][T12055] -> #1 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 112.100023][T12055] __mutex_lock_common+0x1a0/0x1f3c [ 112.101077][T12055] mutex_lock_nested+0x38/0x44 [ 112.102031][T12055] nf_tables_dumpreset_obj+0x78/0xa8 [ 112.103142][T12055] netlink_dump+0x538/0xaf8 [ 112.104071][T12055] __netlink_dump_start+0x478/0x694 [ 112.105125][T12055] nft_netlink_dump_start_rcu+0xec/0x1a8 [ 112.106225][T12055] nf_tables_getobj_reset+0x188/0x524 [ 112.107249][T12055] nfnetlink_rcv_msg+0x710/0xf88 [ 112.108217][T12055] netlink_rcv_skb+0x220/0x3ec [ 112.109146][T12055] nfnetlink_rcv+0x210/0x1c54 [ 112.110079][T12055] netlink_unicast+0x5fc/0x80c [ 112.111095][T12055] netlink_sendmsg+0x6f0/0x9d8 [ 112.112054][T12055] ____sys_sendmsg+0x588/0x90c [ 112.113004][T12055] __sys_sendmsg+0x288/0x374 [ 112.113961][T12055] __arm64_sys_sendmsg+0x80/0x94 [ 112.115012][T12055] invoke_syscall+0x98/0x290 [ 112.115972][T12055] el0_svc_common+0x13c/0x258 [ 112.116929][T12055] do_el0_svc+0x5c/0x134 [ 112.117806][T12055] el0_svc+0x58/0x12c [ 112.118638][T12055] el0t_64_sync_handler+0x84/0xf0 [ 112.119617][T12055] el0t_64_sync+0x18c/0x190 [ 112.120640][T12055] [ 112.120640][T12055] -> #0 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 112.122174][T12055] __lock_acquire+0x3504/0x7280 [ 112.123202][T12055] lock_acquire+0x210/0x63c [ 112.124142][T12055] __mutex_lock_common+0x1a0/0x1f3c [ 112.125220][T12055] mutex_lock_nested+0x38/0x44 [ 112.126278][T12055] __netlink_dump_start+0x104/0x694 [ 112.127299][T12055] ip_set_dump+0x134/0x1bc [ 112.128209][T12055] nfnetlink_rcv_msg+0xaac/0xf88 [ 112.129228][T12055] netlink_rcv_skb+0x220/0x3ec [ 112.130229][T12055] nfnetlink_rcv+0x210/0x1c54 [ 112.131371][T12055] netlink_unicast+0x5fc/0x80c [ 112.132444][T12055] netlink_sendmsg+0x6f0/0x9d8 [ 112.133447][T12055] ____sys_sendmsg+0x588/0x90c [ 112.134406][T12055] __sys_sendmsg+0x288/0x374 [ 112.135345][T12055] __arm64_sys_sendmsg+0x80/0x94 [ 112.136365][T12055] invoke_syscall+0x98/0x290 [ 112.137407][T12055] el0_svc_common+0x13c/0x258 [ 112.138366][T12055] do_el0_svc+0x5c/0x134 [ 112.139262][T12055] el0_svc+0x58/0x12c [ 112.140122][T12055] el0t_64_sync_handler+0x84/0xf0 [ 112.141155][T12055] el0t_64_sync+0x18c/0x190 [ 112.142037][T12055] [ 112.142037][T12055] other info that might help us debug this: [ 112.142037][T12055] [ 112.143845][T12055] Chain exists of: [ 112.143845][T12055] nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex --> nfnl_subsys_ipset [ 112.143845][T12055] [ 112.146690][T12055] Possible unsafe locking scenario: [ 112.146690][T12055] [ 112.148079][T12055] CPU0 CPU1 [ 112.149045][T12055] ---- ---- [ 112.150021][T12055] lock(nfnl_subsys_ipset); [ 112.150892][T12055] lock(&nft_net->commit_mutex); [ 112.152276][T12055] lock(nfnl_subsys_ipset); [ 112.153672][T12055] lock(nlk_cb_mutex-NETFILTER); [ 112.154605][T12055] [ 112.154605][T12055] *** DEADLOCK *** [ 112.154605][T12055] [ 112.156154][T12055] 1 lock held by syz.0.3173/12055: [ 112.157085][T12055] #0: ffff80001daac1d8 (nfnl_subsys_ipset){+.+.}-{3:3}, at: nfnetlink_rcv_msg+0x888/0xf88 [ 112.158992][T12055] [ 112.158992][T12055] stack backtrace: [ 112.160105][T12055] CPU: 1 PID: 12055 Comm: syz.0.3173 Not tainted syzkaller #0 [ 112.161474][T12055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 112.163296][T12055] Call trace: [ 112.163910][T12055] dump_backtrace+0x1c4/0x1f0 [ 112.164751][T12055] show_stack+0x2c/0x3c [ 112.165513][T12055] __dump_stack+0x30/0x40 [ 112.166301][T12055] dump_stack_lvl+0xf4/0x15c [ 112.167142][T12055] dump_stack+0x1c/0x5c [ 112.167903][T12055] print_circular_bug+0x148/0x1b0 [ 112.168818][T12055] check_noncircular+0x290/0x370 [ 112.169752][T12055] __lock_acquire+0x3504/0x7280 [ 112.170654][T12055] lock_acquire+0x210/0x63c [ 112.171510][T12055] __mutex_lock_common+0x1a0/0x1f3c [ 112.172469][T12055] mutex_lock_nested+0x38/0x44 [ 112.173394][T12055] __netlink_dump_start+0x104/0x694 [ 112.174337][T12055] ip_set_dump+0x134/0x1bc [ 112.175119][T12055] nfnetlink_rcv_msg+0xaac/0xf88 [ 112.176026][T12055] netlink_rcv_skb+0x220/0x3ec [ 112.176909][T12055] nfnetlink_rcv+0x210/0x1c54 [ 112.177738][T12055] netlink_unicast+0x5fc/0x80c [ 112.178600][T12055] netlink_sendmsg+0x6f0/0x9d8 [ 112.179468][T12055] ____sys_sendmsg+0x588/0x90c [ 112.180332][T12055] __sys_sendmsg+0x288/0x374 [ 112.181190][T12055] __arm64_sys_sendmsg+0x80/0x94 [ 112.182090][T12055] invoke_syscall+0x98/0x290 [ 112.182934][T12055] el0_svc_common+0x13c/0x258 [ 112.183822][T12055] do_el0_svc+0x5c/0x134 [ 112.184598][T12055] el0_svc+0x58/0x12c [ 112.185330][T12055] el0t_64_sync_handler+0x84/0xf0 [ 112.186252][T12055] el0t_64_sync+0x18c/0x190 [ 112.286199][T12064] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 112.286199][T12064] [ 112.649778][ T48] Bluetooth: hci2: command 0x0401 tx timeout [ 112.651064][ T4333] Bluetooth: hci2: Opcode 0x0401 failed: -110