last executing test programs: 4m36.098101456s ago: executing program 4 (id=5): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000300), 0xf3, 0x481, &(0x7f0000000900)="$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") r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r1, 0x400, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x10103c, 0x140) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x20) fcntl$setlease(r1, 0x400, 0x2) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) 4m32.708109942s ago: executing program 4 (id=12): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x800, &(0x7f0000000680)={[{@debug}, {@nolazytime}, {@dax_inode}, {@jqfmt_vfsv0}, {@dioread_lock}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@test_dummy_encryption}]}, 0x3, 0x236, &(0x7f0000000300)="$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") mknod$loop(&(0x7f00000003c0)='./file0\x00', 0xc000, 0x1) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 4m30.362945394s ago: executing program 4 (id=16): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4m27.844407193s ago: executing program 4 (id=20): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000022c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0x2, 0xc36, &(0x7f0000002540)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000240)) rename(0x0, &(0x7f0000000a00)='./bus/file0\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 4m23.527286466s ago: executing program 4 (id=29): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4m22.658205633s ago: executing program 32 (id=29): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 6.567417048s ago: executing program 0 (id=1110): socket$kcm(0x2b, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000640)={@remote, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff, 0x40, 0x93, 0x100, 0x2, 0xbb002f}) 5.485475265s ago: executing program 1 (id=1115): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000540)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001040)="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", 0x345}, {&(0x7f0000002b40)="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", 0x26e}], 0x2}, 0x8400) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000003ac0)="64cc", 0x2}], 0x1}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x1, &(0x7f0000000180)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000002180)={0x0, 0x3938700}, &(0x7f00000021c0)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb146000) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x0, {0x1, 0x3, "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", 0xf, 0x7, 0x1, 0xdd, 0xd, 0x4, 0x3, 0x1}}}, 0x128) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x4812, &(0x7f0000000280)={[{@usrjquota}, {@resgid}, {@norecovery}, {@oldalloc}, {@grpjquota}], [{@smackfsdef={'smackfsdef', 0x3d, 'norecovery'}}]}, 0x8, 0x5fb, &(0x7f0000000ac0)="$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") 5.392073578s ago: executing program 3 (id=1116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}, [{0x8, 0xb, 0x51fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 5.000503305s ago: executing program 3 (id=1120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 3.715124024s ago: executing program 3 (id=1123): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2, 0x80, 0x5, 0xfffffffe, 0x3, 0x733}}, 0x11c) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 3.667617026s ago: executing program 1 (id=1124): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x8) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000190c0)=ANY=[@ANYRES8=r0], 0x78) 3.262942949s ago: executing program 5 (id=1128): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40000044}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c000380080001000200000034000380080001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880) 2.975034226s ago: executing program 3 (id=1130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}, [{0x8, 0xb, 0x51fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.906356903s ago: executing program 5 (id=1131): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.83474825s ago: executing program 1 (id=1132): unshare(0x24020400) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/cgroup\x00') mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000000140)={0x100000, 0x8, 0x80000, {r0}}, 0x20) syz_open_dev$usbfs(0x0, 0x800000001ff, 0x2) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000001c0)={0x1, 0x1, 0x9}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'ovf\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.751438494s ago: executing program 2 (id=1133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x7c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x4, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_SEL={0x44, 0x5, {0x44, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0x8000, 0x65, [{0x7ffd, 0x20003fe, 0x80000000, 0x6}, {0x0, 0xe1, 0x8ad9, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}]}}]}, 0x7c}}, 0x20040054) 2.726718349s ago: executing program 5 (id=1134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 2.717886828s ago: executing program 0 (id=1135): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000900)=ANY=[], 0x361, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20042, 0x1}) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) 2.619368939s ago: executing program 3 (id=1136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.576289821s ago: executing program 1 (id=1137): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@barrier}, {@journal_dev={'journal_dev', 0x3d, 0x80}}, {@noquota}, {@errors_remount}, {@auto_da_alloc}, {@discard}]}, 0x1, 0x5b3, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) read$char_usb(r0, &(0x7f0000000580)=""/163, 0xa3) 2.442022036s ago: executing program 2 (id=1138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x800) r1 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x18, 0x1d, 0x1, 0x70bd28, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4) 2.280279976s ago: executing program 0 (id=1139): socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1, 0x5}}}, 0x90) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000ac0)={0xe, 0x2d}) 2.098678892s ago: executing program 5 (id=1140): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\t\x00\n\x00', @ANYRES32=r1, @ANYRES32, @ANYBLOB="08000300"], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 2.071935887s ago: executing program 2 (id=1141): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x8, 0x5, 0x4, 0x40004, 0x3, 0x40, 0x3, 0xf, 0x6, 0xa, 0x8001, 0x5, 0x8, 0xfff, 0x3ff, 0xb1, 0x58, 0x1, 0x5, 0x1, 0x4, 0xd, 0xfff, 0x7f, 0x0, 0x6d9, 0xb, 0x101, 0x8, 0x2, 0xfff, 0x5, 0xa8, 0x3, 0x5, 0x3, 0x7, 0x7c7, 0x0, 0x7, 0x77b, 0x101, 0x2, 0x2, 0x5, 0x7, 0x9, 0x9, 0x8000000, 0x7, 0xa09, 0x881, 0x7, 0x3304, 0xb68, 0x1ff, 0x8, 0x0, 0x4b4, 0x101, 0x71, 0x0, 0x48e, 0xfff, 0x5, 0x9, 0xb, 0x1, 0xff, 0x6, 0xffff6867, 0xfffff800, 0x5, 0x5, 0x7fff, 0xe, 0xffff8001, 0x2, 0x201000, 0x31a1, 0x0, 0x107, 0x7f, 0x8, 0x7, 0x4f7a343a, 0x81, 0x7, 0x3, 0x5a, 0x3, 0x6, 0x0, 0x5, 0xffff0000, 0x8, 0x0, 0x401, 0x5, 0xc, 0x8, 0x10, 0x1e9a, 0x400, 0x401, 0x1, 0x1, 0x0, 0x2, 0x5, 0x0, 0x101, 0x40, 0x7, 0x3, 0x1ff, 0x8, 0x60, 0x0, 0x4, 0x8, 0x3, 0xcae0, 0x3, 0x2, 0x6, 0x1, 0xffff, 0x400, 0x7, 0x400, 0x3, 0xa244, 0x8e09, 0x58a3, 0x4a, 0x40, 0x6, 0x10001, 0x718, 0x2, 0x4, 0x6, 0x0, 0xfffffffe, 0x2, 0x8, 0xb, 0x2, 0xf, 0xd94, 0x1, 0x7fff, 0x2, 0x9d, 0x9, 0x8, 0x7ff, 0x5, 0x9, 0x80, 0x4, 0x90df, 0x7ff, 0x14000, 0x3, 0x2040, 0x8, 0x25, 0x6, 0xfff, 0x3, 0xb, 0x4, 0x3f, 0x1, 0x7f, 0x7, 0x61cc, 0x401, 0x6, 0x7fffffff, 0xffff7d22, 0x5, 0x4, 0xff, 0xd, 0x2, 0x0, 0x8, 0x41, 0x2, 0x0, 0x9, 0x7, 0x8, 0x1, 0x372, 0x7fff, 0x1, 0x5, 0xffffffff, 0x9, 0x2, 0x3ff, 0xec5, 0x5, 0x9, 0x5, 0x1, 0x5, 0xc, 0x1, 0xfffffff8, 0x0, 0xefd, 0xd, 0x60, 0x77e, 0x5, 0x6, 0x1, 0xabf, 0x4, 0x7, 0x8, 0x2, 0x0, 0x5, 0xc4ba, 0x4, 0xacf8, 0x3, 0x73173020, 0x5, 0x100, 0x81, 0x3ff, 0xc, 0x1, 0x7, 0x5, 0x80, 0x8c0, 0x7, 0x0, 0x1, 0x31, 0x0, 0x10001, 0x8, 0x3, 0x7, 0x7, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20048841}, 0x4000) 1.885464592s ago: executing program 1 (id=1142): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x8) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000190c0)=ANY=[@ANYRES8=r0], 0x78) 936.210685ms ago: executing program 0 (id=1143): unshare(0x8040600) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) 729.077416ms ago: executing program 5 (id=1144): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 728.358396ms ago: executing program 3 (id=1145): socket$kcm(0x2b, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000640)={@remote, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff, 0x40, 0x93, 0x100, 0x2, 0xbb002f}) 716.542804ms ago: executing program 2 (id=1146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}, [{0x8, 0xb, 0x51fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 567.534916ms ago: executing program 0 (id=1147): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 453.272714ms ago: executing program 5 (id=1148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) 299.102576ms ago: executing program 2 (id=1149): unshare(0x28000600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = dup3(r1, r0, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0xef70, @private0}, 0x1c) 251.449537ms ago: executing program 0 (id=1150): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0xffffffff, @empty, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) fsetxattr$security_evm(r0, 0x0, 0x0, 0x0, 0x1) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) 120.470672ms ago: executing program 1 (id=1151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x800) r1 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x18, 0x1d, 0x1, 0x70bd28, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4) 0s ago: executing program 2 (id=1152): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x34, r0, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) kernel console output (not intermixed with test programs): 049, sector=45096, nr_sectors = 8 limit=40427 [ 160.689990][ T5865] loop0: detected capacity change from 0 to 32768 [ 160.817736][ T5865] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 160.883693][ T5867] loop5: detected capacity change from 0 to 32768 [ 160.897657][ T4391] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 160.959066][ T5867] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.171 (5867) [ 161.111893][ T5867] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 161.167448][ T5867] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 161.176745][ T5867] BTRFS info (device loop5): force zlib compression, level 3 [ 161.253783][ T5867] BTRFS info (device loop5): force clearing of disk cache [ 161.284957][ T5867] BTRFS info (device loop5): setting nodatasum [ 161.325150][ T5895] overlayfs: missing 'workdir' [ 161.330122][ T5867] BTRFS info (device loop5): use zlib compression, level 3 [ 161.355331][ T4394] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4394) [ 161.417508][ T5867] BTRFS info (device loop5): allowing degraded mounts [ 161.424395][ T5867] BTRFS info (device loop5): enabling disk space caching [ 161.477304][ T5867] BTRFS info (device loop5): disk space caching is enabled [ 161.817225][ T5867] BTRFS info (device loop5): enabling ssd optimizations [ 161.855269][ T5867] BTRFS info (device loop5): rebuilding free space tree [ 161.918542][ T5867] BTRFS info (device loop5): disabling free space tree [ 161.925706][ T5867] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 161.986915][ T5867] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 162.257930][ T4683] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 162.309506][ T5885] loop2: detected capacity change from 0 to 32768 [ 162.375121][ T5885] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.174 (5885) [ 162.540929][ T5892] loop1: detected capacity change from 0 to 32768 [ 162.833571][ T5892] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.176 (5892) [ 162.867969][ T5885] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.907806][ T5885] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 162.920395][ T5892] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 162.955108][ T5885] BTRFS info (device loop2): force clearing of disk cache [ 162.995632][ T5885] BTRFS info (device loop2): metadata ratio 0 [ 162.998135][ T5892] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 163.023622][ T5885] BTRFS info (device loop2): enabling ssd optimizations [ 163.033995][ T5918] loop0: detected capacity change from 0 to 32768 [ 163.067667][ T5892] BTRFS info (device loop1): setting nodatacow, compression disabled [ 163.075879][ T5892] BTRFS info (device loop1): force clearing of disk cache [ 163.078201][ T5885] BTRFS info (device loop2): using spread ssd allocation scheme [ 163.106543][ T5926] netlink: 'syz.5.179': attribute type 29 has an invalid length. [ 163.136498][ T5926] netlink: 'syz.5.179': attribute type 29 has an invalid length. [ 163.144755][ T5885] BTRFS info (device loop2): using free space tree [ 163.144758][ T5892] BTRFS info (device loop1): enabling ssd optimizations [ 163.144780][ T5892] BTRFS info (device loop1): using spread ssd allocation scheme [ 163.189553][ T5933] netlink: 'syz.5.179': attribute type 29 has an invalid length. [ 163.207028][ T5918] XFS (loop0): Mounting V5 Filesystem [ 163.275361][ T5892] BTRFS info (device loop1): turning off barriers [ 163.287823][ T5892] BTRFS info (device loop1): disabling free space tree [ 163.307551][ T5892] BTRFS info (device loop1): not using ssd optimizations [ 163.314664][ T5892] BTRFS info (device loop1): not using spread ssd allocation scheme [ 163.354003][ T5918] XFS (loop0): Ending clean mount [ 163.411820][ T4444] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop5 scanned by udevd (4444) [ 163.476612][ T5918] XFS (loop0): Quotacheck needed: Please wait. [ 163.599919][ T5918] XFS (loop0): Quotacheck: Done. [ 163.706728][ T5885] BTRFS error (device loop2): open_ctree failed: -22 [ 163.836855][ T5892] BTRFS info (device loop1): rebuilding free space tree [ 163.862974][ T5892] BTRFS info (device loop1): disabling free space tree [ 163.907561][ T5892] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 163.933478][ T5892] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 164.070720][ T4274] XFS (loop0): Unmounting Filesystem [ 164.360255][ T4269] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 164.463798][ T5989] loop2: detected capacity change from 0 to 512 [ 164.679281][ T5989] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.183: inode has both inline data and extents flags [ 164.712309][ T5989] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.183: couldn't read orphan inode 15 (err -117) [ 164.787721][ T5989] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 165.173950][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 165.819385][ T6011] overlayfs: missing 'lowerdir' [ 166.053663][ T5992] loop3: detected capacity change from 0 to 32768 [ 166.076485][ T5992] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.185 (5992) [ 166.147467][ T5992] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 166.187514][ T5992] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 166.226726][ T5992] BTRFS info (device loop3): setting nodatacow, compression disabled [ 166.267223][ T5992] BTRFS info (device loop3): force clearing of disk cache [ 166.274751][ T5992] BTRFS info (device loop3): enabling ssd optimizations [ 166.304238][ T5999] loop1: detected capacity change from 0 to 32768 [ 166.311367][ T5992] BTRFS info (device loop3): using spread ssd allocation scheme [ 166.337462][ T5992] BTRFS info (device loop3): turning off barriers [ 166.374965][ T5992] BTRFS info (device loop3): disabling free space tree [ 166.382242][ T5999] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 166.408232][ T5992] BTRFS info (device loop3): not using ssd optimizations [ 166.426120][ T5999] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 166.456482][ T5992] BTRFS info (device loop3): not using spread ssd allocation scheme [ 166.467857][ T5999] BTRFS info (device loop1): max_inline at 6 [ 166.473925][ T5999] BTRFS info (device loop1): enabling disk space caching [ 166.515413][ T5999] BTRFS info (device loop1): turning off barriers [ 166.532639][ T5999] BTRFS info (device loop1): disabling tree log [ 166.539358][ T5999] BTRFS info (device loop1): force clearing of disk cache [ 166.546673][ T5999] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 166.556392][ T5999] BTRFS info (device loop1): force lzo compression, level 0 [ 166.619140][ T5999] BTRFS info (device loop1): enabling tree log [ 166.625430][ T5999] BTRFS info (device loop1): max_inline at 0 [ 166.631994][ T5999] BTRFS info (device loop1): disk space caching is enabled [ 166.820751][ T6007] loop5: detected capacity change from 0 to 32768 [ 166.855195][ T5992] BTRFS info (device loop3): rebuilding free space tree [ 166.862532][ T6007] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.187 (6007) [ 166.942463][ T5992] BTRFS info (device loop3): disabling free space tree [ 166.998428][ T5992] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 167.019877][ T5999] BTRFS info (device loop1): enabling ssd optimizations [ 167.061579][ T5999] BTRFS info (device loop1): rebuilding free space tree [ 167.087365][ T5992] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 167.169656][ T5999] BTRFS info (device loop1): disabling free space tree [ 167.176645][ T5999] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 167.271708][ T5999] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 167.416764][ T4391] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by udevd (4391) [ 167.435065][ T6014] loop0: detected capacity change from 0 to 32768 [ 167.472372][ T4282] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 167.534238][ T6014] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 167.700180][ T4269] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 168.075442][ T6016] loop2: detected capacity change from 0 to 40427 [ 168.170075][ T4394] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 168.187656][ T6016] F2FS-fs (loop2): invalid crc value [ 168.221113][ T6016] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 168.272481][ T4444] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop1 scanned by udevd (4444) [ 168.632785][ T6016] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 168.687572][ T6016] F2FS-fs (loop2): Start checkpoint disabled! [ 168.733424][ T6088] netlink: 'syz.3.192': attribute type 10 has an invalid length. [ 168.742290][ T6016] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 168.880557][ T6088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.927996][ T6088] team0: Port device bond0 added [ 168.969213][ T4338] kworker/u4:7: attempt to access beyond end of device [ 168.969213][ T4338] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.144035][ T6088] syz.3.192 (6088) used greatest stack depth: 20464 bytes left [ 169.224879][ T6093] overlayfs: missing 'lowerdir' [ 169.630727][ T6083] loop5: detected capacity change from 0 to 32768 [ 169.755813][ T6085] loop1: detected capacity change from 0 to 32768 [ 169.808901][ T6085] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.193 (6085) [ 169.860769][ T6085] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.901671][ T6085] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 169.932072][ T6085] BTRFS info (device loop1): force clearing of disk cache [ 169.952410][ T6085] BTRFS info (device loop1): metadata ratio 0 [ 169.979803][ T6085] BTRFS info (device loop1): enabling ssd optimizations [ 170.027911][ T6085] BTRFS info (device loop1): using spread ssd allocation scheme [ 170.056449][ T6085] BTRFS info (device loop1): using free space tree [ 170.159357][ T6114] loop2: detected capacity change from 0 to 256 [ 170.266075][ T6114] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 170.310500][ T6099] loop0: detected capacity change from 0 to 32768 [ 170.319949][ T6099] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.201 (6099) [ 170.437961][ T6085] BTRFS info (device loop1): rebuilding free space tree [ 170.453786][ T6095] loop3: detected capacity change from 0 to 32768 [ 170.485007][ T6099] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 170.520988][ T6099] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 170.592700][ T6099] BTRFS info (device loop0): setting nodatacow, compression disabled [ 170.648317][ T6099] BTRFS info (device loop0): force clearing of disk cache [ 170.659677][ T6095] XFS (loop3): Mounting V5 Filesystem [ 170.673729][ T6099] BTRFS info (device loop0): enabling ssd optimizations [ 170.697842][ T6099] BTRFS info (device loop0): using spread ssd allocation scheme [ 170.705620][ T6099] BTRFS info (device loop0): turning off barriers [ 170.777756][ T6099] BTRFS info (device loop0): disabling free space tree [ 170.784719][ T6099] BTRFS info (device loop0): not using ssd optimizations [ 170.807425][ T6099] BTRFS info (device loop0): not using spread ssd allocation scheme [ 170.898519][ T6095] XFS (loop3): Ending clean mount [ 170.905888][ T4269] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.969603][ T6095] XFS (loop3): Quotacheck needed: Please wait. [ 171.289492][ T6095] XFS (loop3): Quotacheck: Done. [ 171.418029][ T6099] BTRFS info (device loop0): rebuilding free space tree [ 171.485378][ T6099] BTRFS info (device loop0): disabling free space tree [ 171.496168][ T4282] XFS (loop3): Unmounting Filesystem [ 171.511189][ T6099] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 171.572057][ T6099] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 171.907086][ T6135] loop2: detected capacity change from 0 to 32768 [ 171.929006][ T6135] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 171.940773][ T4274] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 172.292582][ T6141] loop5: detected capacity change from 0 to 32768 [ 172.333506][ T6141] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.202 (6141) [ 172.406756][ T4366] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by udevd (4366) [ 172.440335][ T6141] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.498053][ T6141] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 172.517490][ T6141] BTRFS info (device loop5): setting nodatacow, compression disabled [ 172.557380][ T6141] BTRFS info (device loop5): turning on flush-on-commit [ 172.564535][ T6141] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 172.647502][ T6141] BTRFS info (device loop5): use lzo compression, level 0 [ 172.654739][ T6141] BTRFS info (device loop5): setting nodatasum [ 172.707753][ T6141] BTRFS info (device loop5): use no compression [ 172.755913][ T6141] BTRFS info (device loop5): trying to use backup root at mount time [ 172.796375][ T6141] BTRFS info (device loop5): max_inline at 0 [ 172.807325][ T6141] BTRFS info (device loop5): using free space tree [ 172.989424][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 173.009983][ T6179] overlayfs: missing 'lowerdir' [ 173.121115][ T4299] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 173.206914][ T6141] BTRFS warning (device loop5): couldn't read tree root [ 173.216964][ T6141] BTRFS warning (device loop5): try to load backup roots slot 1 [ 173.271175][ T4448] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 173.297573][ T6141] BTRFS warning (device loop5): couldn't read tree root [ 173.325007][ T6141] BTRFS warning (device loop5): try to load backup roots slot 2 [ 173.372268][ T6141] BTRFS error (device loop5): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 173.447919][ T6141] BTRFS warning (device loop5): couldn't read tree root [ 173.454953][ T6141] BTRFS warning (device loop5): try to load backup roots slot 3 [ 173.548255][ T6197] loop0: detected capacity change from 0 to 256 [ 173.563106][ T6141] BTRFS info (device loop5): enabling ssd optimizations [ 173.597744][ T6141] BTRFS info (device loop5): rebuilding free space tree [ 173.621464][ T6197] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 173.669032][ T6182] loop3: detected capacity change from 0 to 32768 [ 173.698275][ T6141] BTRFS info (device loop5): checking UUID tree [ 173.974739][ T4683] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.352033][ T4444] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop5 scanned by udevd (4444) [ 174.482550][ T6168] loop1: detected capacity change from 0 to 40427 [ 174.535465][ T6168] F2FS-fs (loop1): invalid crc value [ 174.567193][ T6168] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 174.833630][ T6168] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 174.886734][ T6168] F2FS-fs (loop1): Start checkpoint disabled! [ 174.929696][ T6168] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 175.086911][ T6194] loop2: detected capacity change from 0 to 40427 [ 175.138248][ T6194] F2FS-fs (loop2): invalid crc value [ 175.161768][ T6194] F2FS-fs (loop2): Found nat_bits in checkpoint [ 175.346595][ T6194] F2FS-fs (loop2): Start checkpoint disabled! [ 175.422525][ T6194] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 175.493924][ T6202] loop0: detected capacity change from 0 to 32768 [ 175.561769][ T26] audit: type=1800 audit(1773219241.809:14): pid=6202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.216" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 175.731090][ T6205] loop5: detected capacity change from 0 to 32768 [ 175.797376][ T6205] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.215 (6205) [ 175.881409][ T6205] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.919576][ T4620] kworker/u4:9: attempt to access beyond end of device [ 175.919576][ T4620] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 175.927611][ T6205] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 176.007668][ T6205] BTRFS info (device loop5): force clearing of disk cache [ 176.046084][ T6205] BTRFS info (device loop5): metadata ratio 0 [ 176.104680][ T6205] BTRFS info (device loop5): enabling ssd optimizations [ 176.127376][ T6205] BTRFS info (device loop5): using spread ssd allocation scheme [ 176.155424][ T6205] BTRFS info (device loop5): using free space tree [ 176.206483][ T6225] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 176.270665][ T6225] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 176.489240][ T6235] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 176.572763][ T6205] BTRFS info (device loop5): rebuilding free space tree [ 176.848683][ T4683] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.876256][ T6256] netlink: 'syz.2.223': attribute type 2 has an invalid length. [ 176.932290][ T6256] netlink: 'syz.2.223': attribute type 11 has an invalid length. [ 176.957342][ T6256] netlink: 80 bytes leftover after parsing attributes in process `syz.2.223'. [ 177.364799][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 178.044744][ T6279] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 178.077942][ T6279] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 178.303872][ T6282] device syzkaller0 entered promiscuous mode [ 178.320752][ T6267] loop1: detected capacity change from 0 to 32768 [ 178.375034][ T6263] loop5: detected capacity change from 0 to 40427 [ 178.385504][ T6263] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 178.404603][ T6267] XFS (loop1): Mounting V5 Filesystem [ 178.425617][ T6263] F2FS-fs (loop5): invalid crc value [ 178.479023][ T6263] F2FS-fs (loop5): Found nat_bits in checkpoint [ 178.575246][ T6267] XFS (loop1): Ending clean mount [ 178.611628][ T6267] XFS (loop1): Quotacheck needed: Please wait. [ 178.720221][ T6267] XFS (loop1): Quotacheck: Done. [ 178.726561][ T6263] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 178.892623][ T6263] overlayfs: failed to resolve './file0': -2 [ 178.915381][ T4269] XFS (loop1): Unmounting Filesystem [ 179.000723][ T4683] syz-executor: attempt to access beyond end of device [ 179.000723][ T4683] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 181.743881][ T6313] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 182.349096][ T6337] netlink: 'syz.2.255': attribute type 1 has an invalid length. [ 182.377424][ T6337] netlink: 'syz.2.255': attribute type 4 has an invalid length. [ 182.445933][ T6337] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.255'. [ 182.527946][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 182.617874][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.686583][ T6343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.013628][ T6329] loop1: detected capacity change from 0 to 32768 [ 183.024156][ T6329] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.251 (6329) [ 183.152319][ T6329] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 183.182621][ T6329] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 183.214125][ T6329] BTRFS info (device loop1): setting nodatacow, compression disabled [ 183.222693][ T6329] BTRFS info (device loop1): force clearing of disk cache [ 183.243929][ T6329] BTRFS info (device loop1): enabling ssd optimizations [ 183.252103][ T6329] BTRFS info (device loop1): using spread ssd allocation scheme [ 183.277420][ T6329] BTRFS info (device loop1): turning off barriers [ 183.292022][ T6329] BTRFS info (device loop1): disabling free space tree [ 183.313184][ T6329] BTRFS info (device loop1): not using ssd optimizations [ 183.367964][ T6329] BTRFS info (device loop1): not using spread ssd allocation scheme [ 183.469445][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'. [ 183.740683][ T6329] BTRFS info (device loop1): rebuilding free space tree [ 183.828109][ T6329] BTRFS info (device loop1): disabling free space tree [ 183.835507][ T6329] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 183.917420][ T6329] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 183.959875][ T6378] netlink: 104 bytes leftover after parsing attributes in process `syz.2.264'. [ 184.068905][ T6381] netlink: 'syz.0.265': attribute type 2 has an invalid length. [ 184.089441][ T6381] netlink: 'syz.0.265': attribute type 11 has an invalid length. [ 184.136436][ T6381] netlink: 88 bytes leftover after parsing attributes in process `syz.0.265'. [ 184.152014][ T4269] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 184.487078][ T6363] loop5: detected capacity change from 0 to 32768 [ 184.754031][ T6363] XFS (loop5): Mounting V5 Filesystem [ 184.886068][ T6383] loop2: detected capacity change from 0 to 32768 [ 184.962604][ T6363] XFS (loop5): Ending clean mount [ 184.998634][ T6383] XFS (loop2): Mounting V5 Filesystem [ 185.135213][ T6411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.272'. [ 185.147567][ T4683] XFS (loop5): Unmounting Filesystem [ 185.155259][ T6383] XFS (loop2): Ending clean mount [ 185.190278][ T6383] XFS (loop2): Quotacheck needed: Please wait. [ 185.432619][ T6383] XFS (loop2): Quotacheck: Done. [ 185.645706][ T4280] XFS (loop2): Unmounting Filesystem [ 186.042430][ T6398] loop1: detected capacity change from 0 to 32768 [ 186.562657][ T6413] loop3: detected capacity change from 0 to 40427 [ 186.605943][ T6413] F2FS-fs (loop3): invalid crc value [ 186.651815][ T6413] F2FS-fs (loop3): Found nat_bits in checkpoint [ 186.894522][ T6413] F2FS-fs (loop3): Start checkpoint disabled! [ 186.924390][ T6417] loop0: detected capacity change from 0 to 32768 [ 186.943637][ T6413] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 186.978149][ T6417] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.277 (6417) [ 187.041499][ T6417] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 187.088464][ T6417] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 187.130443][ T6417] BTRFS info (device loop0): setting nodatacow, compression disabled [ 187.169079][ T6417] BTRFS info (device loop0): turning on flush-on-commit [ 187.176117][ T6417] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 187.246451][ T6417] BTRFS info (device loop0): use lzo compression, level 0 [ 187.276838][ T6417] BTRFS info (device loop0): setting nodatasum [ 187.293819][ T6417] BTRFS info (device loop0): use no compression [ 187.323272][ T6417] BTRFS info (device loop0): trying to use backup root at mount time [ 187.377403][ T6417] BTRFS info (device loop0): max_inline at 0 [ 187.414219][ T6417] BTRFS info (device loop0): using free space tree [ 187.492477][ T6427] loop5: detected capacity change from 0 to 32768 [ 187.508962][ T6427] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.280 (6427) [ 187.610098][ T6427] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 187.639103][ T6423] loop2: detected capacity change from 0 to 32768 [ 187.686515][ T6427] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 187.695694][ T6423] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.276 (6423) [ 187.746496][ T6427] BTRFS info (device loop5): enabling auto defrag [ 187.798406][ T6427] BTRFS info (device loop5): use no compression [ 187.821063][ T6427] BTRFS info (device loop5): max_inline at 4096 [ 187.849440][ T6427] BTRFS info (device loop5): using free space tree [ 187.906038][ T33] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 187.921395][ T6417] BTRFS warning (device loop0): couldn't read tree root [ 187.947691][ T6417] BTRFS warning (device loop0): try to load backup roots slot 1 [ 187.961521][ T4326] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 187.974935][ T6417] BTRFS warning (device loop0): couldn't read tree root [ 188.002315][ T6417] BTRFS warning (device loop0): try to load backup roots slot 2 [ 188.013780][ T6467] netlink: 'syz.1.283': attribute type 29 has an invalid length. [ 188.027674][ T6467] netlink: 'syz.1.283': attribute type 29 has an invalid length. [ 188.049788][ T6417] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 188.078820][ T6460] netlink: 'syz.1.283': attribute type 29 has an invalid length. [ 188.095808][ T6417] BTRFS warning (device loop0): couldn't read tree root [ 188.102921][ T6417] BTRFS warning (device loop0): try to load backup roots slot 3 [ 188.121706][ T6427] BTRFS info (device loop5): enabling ssd optimizations [ 188.140902][ T6480] netlink: 'syz.1.283': attribute type 29 has an invalid length. [ 188.152369][ T4620] kworker/u4:9: attempt to access beyond end of device [ 188.152369][ T4620] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 188.294512][ T6417] BTRFS info (device loop0): enabling ssd optimizations [ 188.326983][ T6417] BTRFS info (device loop0): rebuilding free space tree [ 188.408285][ T6417] BTRFS info (device loop0): checking UUID tree [ 188.480821][ T4683] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 188.496056][ T4444] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4444) [ 189.013393][ T4274] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.647890][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 189.817059][ T6489] loop1: detected capacity change from 0 to 32768 [ 189.925071][ T6489] XFS (loop1): Mounting V5 Filesystem [ 189.998610][ T6489] XFS (loop1): Ending clean mount [ 190.023794][ T6489] XFS (loop1): Quotacheck needed: Please wait. [ 190.072294][ T6496] loop5: detected capacity change from 0 to 32768 [ 190.152178][ T6489] XFS (loop1): Quotacheck: Done. [ 190.336126][ T4269] XFS (loop1): Unmounting Filesystem [ 190.359366][ T6500] loop0: detected capacity change from 0 to 32768 [ 190.436708][ T6500] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.288 (6500) [ 190.512427][ T6500] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.536345][ T6500] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 190.574941][ T6500] BTRFS info (device loop0): setting nodatasum [ 190.626740][ T6500] BTRFS info (device loop0): force zlib compression, level 3 [ 190.655265][ T6500] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 190.720145][ T6500] BTRFS info (device loop0): use lzo compression, level 0 [ 190.748774][ T6500] BTRFS info (device loop0): turning on flush-on-commit [ 190.755905][ T6500] BTRFS info (device loop0): enabling auto defrag [ 190.823032][ T6500] BTRFS info (device loop0): max_inline at 4096 [ 190.832159][ T6520] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 190.863798][ T6500] BTRFS info (device loop0): using free space tree [ 191.120660][ T6512] loop2: detected capacity change from 0 to 32768 [ 191.268948][ T6539] Zero length message leads to an empty skb [ 191.289682][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 191.311599][ T6500] BTRFS info (device loop0): enabling ssd optimizations [ 191.373124][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 191.438854][ T6539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.922975][ T4274] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.922302][ T6544] loop3: detected capacity change from 0 to 32768 [ 192.983288][ T6544] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.297 (6544) [ 193.033113][ T6544] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.075779][ T6544] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 193.116510][ T6544] BTRFS info (device loop3): enabling auto defrag [ 193.137401][ T6544] BTRFS info (device loop3): use no compression [ 193.172944][ T6544] BTRFS info (device loop3): max_inline at 4096 [ 193.202948][ T6544] BTRFS info (device loop3): using free space tree [ 193.513415][ T6567] loop5: detected capacity change from 0 to 32768 [ 193.743681][ T6544] BTRFS info (device loop3): enabling ssd optimizations [ 194.036048][ T4282] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 194.330867][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.337363][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.415921][ T6598] loop1: detected capacity change from 0 to 2048 [ 194.531980][ T6598] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 194.558421][ T6581] loop0: detected capacity change from 0 to 32768 [ 194.574729][ T6598] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.730978][ T6602] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 194.859850][ T6602] EXT4-fs (loop1): Remounting filesystem read-only [ 194.873970][ T6571] loop2: detected capacity change from 0 to 40427 [ 194.908500][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 195.005822][ T6571] F2FS-fs (loop2): invalid crc value [ 195.025571][ T6571] F2FS-fs (loop2): Found nat_bits in checkpoint [ 195.262741][ T6571] F2FS-fs (loop2): Start checkpoint disabled! [ 195.320380][ T6571] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 196.086268][ T6628] netlink: 104 bytes leftover after parsing attributes in process `syz.0.319'. [ 196.553045][ T4448] kworker/u4:8: attempt to access beyond end of device [ 196.553045][ T4448] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 196.691807][ T6613] loop3: detected capacity change from 0 to 32768 [ 196.731022][ T6613] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.316 (6613) [ 196.758200][ T6613] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 196.772517][ T6613] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 196.833418][ T6613] BTRFS info (device loop3): setting nodatacow, compression disabled [ 196.846335][ T6613] BTRFS info (device loop3): force clearing of disk cache [ 196.864562][ T6613] BTRFS info (device loop3): enabling ssd optimizations [ 196.900355][ T6613] BTRFS info (device loop3): using spread ssd allocation scheme [ 196.927741][ T6613] BTRFS info (device loop3): turning off barriers [ 196.934332][ T6613] BTRFS info (device loop3): disabling free space tree [ 196.996816][ T6613] BTRFS info (device loop3): not using ssd optimizations [ 197.017344][ T6613] BTRFS info (device loop3): not using spread ssd allocation scheme [ 197.166347][ T6634] loop0: detected capacity change from 0 to 32768 [ 197.215663][ T6630] loop5: detected capacity change from 0 to 32768 [ 197.246878][ T6634] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.322 (6634) [ 197.295936][ T6634] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 197.335175][ T6613] BTRFS info (device loop3): rebuilding free space tree [ 197.343696][ T6634] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 197.359248][ T6634] BTRFS info (device loop0): setting nodatacow, compression disabled [ 197.372183][ T6634] BTRFS info (device loop0): turning on flush-on-commit [ 197.380369][ T6630] XFS (loop5): Mounting V5 Filesystem [ 197.381114][ T6634] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 197.398121][ T6634] BTRFS info (device loop0): use lzo compression, level 0 [ 197.406613][ T6634] BTRFS info (device loop0): setting nodatasum [ 197.416452][ T6634] BTRFS info (device loop0): use no compression [ 197.428668][ T6613] BTRFS info (device loop3): disabling free space tree [ 197.460835][ T6634] BTRFS info (device loop0): trying to use backup root at mount time [ 197.517742][ T6634] BTRFS info (device loop0): max_inline at 0 [ 197.524006][ T6634] BTRFS info (device loop0): using free space tree [ 197.531348][ T6613] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 197.553550][ T6613] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 197.579319][ T6630] XFS (loop5): Ending clean mount [ 197.614053][ T6671] loop2: detected capacity change from 0 to 128 [ 197.622571][ T6630] XFS (loop5): Quotacheck needed: Please wait. [ 197.758299][ T6630] XFS (loop5): Quotacheck: Done. [ 197.838518][ T4282] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 198.019826][ T4683] XFS (loop5): Unmounting Filesystem [ 198.143940][ T4326] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 198.213782][ T6634] BTRFS warning (device loop0): couldn't read tree root [ 198.237696][ T6634] BTRFS warning (device loop0): try to load backup roots slot 1 [ 198.245776][ T33] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 198.308620][ T6634] BTRFS warning (device loop0): couldn't read tree root [ 198.315670][ T6634] BTRFS warning (device loop0): try to load backup roots slot 2 [ 198.419775][ T6634] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 198.447798][ T6642] loop1: detected capacity change from 0 to 32768 [ 198.468844][ T6634] BTRFS warning (device loop0): couldn't read tree root [ 198.527800][ T6634] BTRFS warning (device loop0): try to load backup roots slot 3 [ 199.280646][ T6634] BTRFS info (device loop0): enabling ssd optimizations [ 199.330865][ T6634] BTRFS info (device loop0): rebuilding free space tree [ 199.432774][ T6634] BTRFS info (device loop0): checking UUID tree [ 199.484628][ T6634] BTRFS warning (device loop0): failed to start uuid_rescan task [ 199.534729][ T6634] BTRFS warning (device loop0): failed to check the UUID tree: -4 [ 199.877264][ C0] sched: RT throttling activated [ 199.961045][ T6634] BTRFS error (device loop0): open_ctree failed: -4 [ 201.527365][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 201.533440][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 201.540381][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 201.829279][ T6718] loop2: detected capacity change from 0 to 32768 [ 201.871230][ T6718] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.332 (6718) [ 201.884917][ T6714] loop5: detected capacity change from 0 to 32768 [ 201.927381][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 201.937350][ T6718] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 202.004180][ T6714] XFS (loop5): Mounting V5 Filesystem [ 202.019524][ T6718] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 202.040233][ T6718] BTRFS info (device loop2): enabling auto defrag [ 202.050327][ T6718] BTRFS info (device loop2): use no compression [ 202.056686][ T6718] BTRFS info (device loop2): max_inline at 4096 [ 202.071778][ T6718] BTRFS info (device loop2): using free space tree [ 202.146730][ T6714] XFS (loop5): Ending clean mount [ 202.169448][ T6714] XFS (loop5): Quotacheck needed: Please wait. [ 202.312076][ T6714] XFS (loop5): Quotacheck: Done. [ 202.517449][ T6718] BTRFS info (device loop2): enabling ssd optimizations [ 202.536325][ T4683] XFS (loop5): Unmounting Filesystem [ 202.635873][ T4280] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 202.656641][ T6773] netlink: 'syz.1.342': attribute type 39 has an invalid length. [ 202.803859][ T6731] loop0: detected capacity change from 0 to 40427 [ 202.916158][ T6731] F2FS-fs (loop0): invalid crc value [ 202.953623][ T6731] F2FS-fs (loop0): Found nat_bits in checkpoint [ 203.095728][ T6731] F2FS-fs (loop0): Start checkpoint disabled! [ 203.111783][ T6731] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 203.424355][ T6753] loop3: detected capacity change from 0 to 40427 [ 203.830050][ T6775] loop1: detected capacity change from 0 to 32768 [ 203.867127][ T6775] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.345 (6775) [ 203.948613][ T6775] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.988744][ T6775] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 204.036326][ T4326] kworker/u4:6: attempt to access beyond end of device [ 204.036326][ T4326] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 204.042630][ T6775] BTRFS info (device loop1): setting nodatacow, compression disabled [ 204.111685][ T6775] BTRFS info (device loop1): turning on flush-on-commit [ 204.157311][ T6775] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 204.166732][ T6775] BTRFS info (device loop1): use lzo compression, level 0 [ 204.257512][ T6775] BTRFS info (device loop1): setting nodatasum [ 204.263863][ T6775] BTRFS info (device loop1): use no compression [ 204.319765][ T6775] BTRFS info (device loop1): trying to use backup root at mount time [ 204.347434][ T6775] BTRFS info (device loop1): max_inline at 0 [ 204.353609][ T6775] BTRFS info (device loop1): using free space tree [ 204.483789][ T6779] loop2: detected capacity change from 0 to 40427 [ 204.532280][ T6779] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 204.626536][ T6779] F2FS-fs (loop2): invalid crc value [ 204.669709][ T4338] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 204.698991][ T6779] F2FS-fs (loop2): Found nat_bits in checkpoint [ 204.766130][ T6775] BTRFS warning (device loop1): couldn't read tree root [ 204.774841][ T6775] BTRFS warning (device loop1): try to load backup roots slot 1 [ 204.803966][ T4326] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 204.853200][ T6775] BTRFS warning (device loop1): couldn't read tree root [ 204.867698][ T6775] BTRFS warning (device loop1): try to load backup roots slot 2 [ 204.895088][ T6775] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 204.913410][ T6783] loop3: detected capacity change from 0 to 32768 [ 204.939521][ T6775] BTRFS warning (device loop1): couldn't read tree root [ 204.946596][ T6775] BTRFS warning (device loop1): try to load backup roots slot 3 [ 204.962487][ T6783] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.346 (6783) [ 204.982312][ T6779] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 205.026032][ T6783] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.036489][ T6775] BTRFS info (device loop1): enabling ssd optimizations [ 205.048834][ T6775] BTRFS info (device loop1): rebuilding free space tree [ 205.063493][ T6779] overlayfs: failed to resolve './file0': -2 [ 205.084600][ T6783] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 205.104973][ T6783] BTRFS info (device loop3): force clearing of disk cache [ 205.134742][ T6775] BTRFS info (device loop1): checking UUID tree [ 205.145772][ T6783] BTRFS info (device loop3): metadata ratio 0 [ 205.192526][ T6783] BTRFS info (device loop3): enabling ssd optimizations [ 205.207597][ T6812] loop0: detected capacity change from 0 to 2048 [ 205.240397][ T6783] BTRFS info (device loop3): using spread ssd allocation scheme [ 205.271088][ T6783] BTRFS info (device loop3): using free space tree [ 205.308155][ T4280] syz-executor: attempt to access beyond end of device [ 205.308155][ T4280] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 205.376880][ T4269] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 205.397897][ T6812] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 205.406563][ T6812] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.630515][ T6783] BTRFS info (device loop3): rebuilding free space tree [ 205.974537][ T4394] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (4394) [ 206.010581][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 206.033655][ T26] audit: type=1804 audit(1773219272.279:15): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.346" name="/newroot/72/file0/file1" dev="loop3" ino=260 res=1 errno=0 [ 206.167416][ T26] audit: type=1804 audit(1773219272.359:16): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.346" name="/newroot/72/file0/file1" dev="loop3" ino=260 res=1 errno=0 [ 206.365702][ T4282] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.291216][ T6861] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 207.568662][ T6844] loop0: detected capacity change from 0 to 32768 [ 207.749606][ T6873] loop2: detected capacity change from 0 to 2048 [ 207.793562][ T6844] XFS (loop0): Mounting V5 Filesystem [ 207.796295][ T6873] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 207.827879][ T6873] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.883054][ T6844] XFS (loop0): Ending clean mount [ 207.892373][ T6844] XFS (loop0): Quotacheck needed: Please wait. [ 207.932225][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 208.060254][ T6844] XFS (loop0): Quotacheck: Done. [ 208.185018][ T6849] loop5: detected capacity change from 0 to 40427 [ 208.226987][ T4274] XFS (loop0): Unmounting Filesystem [ 208.769342][ T6889] loop0: detected capacity change from 0 to 128 [ 208.921214][ T6891] loop5: detected capacity change from 0 to 1024 [ 208.956635][ T6866] loop3: detected capacity change from 0 to 40427 [ 209.017142][ T6891] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 209.041843][ T6889] syz.0.365: attempt to access beyond end of device [ 209.041843][ T6889] loop0: rw=2049, sector=138, nr_sectors = 66 limit=128 [ 209.100816][ T6866] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 209.160763][ T6899] syz.0.365: attempt to access beyond end of device [ 209.160763][ T6899] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 209.207575][ T6866] F2FS-fs (loop3): invalid crc value [ 209.251333][ T6866] F2FS-fs (loop3): Found nat_bits in checkpoint [ 209.339867][ T6899] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 209.400031][ T6892] syz.0.365: attempt to access beyond end of device [ 209.400031][ T6892] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 209.458537][ T6892] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 209.483069][ T6885] loop2: detected capacity change from 0 to 32768 [ 209.499212][ T6892] syz.0.365: attempt to access beyond end of device [ 209.499212][ T6892] loop0: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 209.535283][ T6885] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.364 (6885) [ 209.539766][ T4683] EXT4-fs (loop5): unmounting filesystem. [ 209.563711][ T6866] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 209.615734][ T6892] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 209.627509][ T6866] overlayfs: failed to resolve './file1': -2 [ 209.652664][ T6885] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 209.729622][ T6892] syz.0.365: attempt to access beyond end of device [ 209.729622][ T6892] loop0: rw=2049, sector=146, nr_sectors = 24 limit=128 [ 209.761854][ T6885] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 209.793347][ T6892] syz.0.365: attempt to access beyond end of device [ 209.793347][ T6892] loop0: rw=2049, sector=170, nr_sectors = 2 limit=128 [ 209.800447][ T6885] BTRFS info (device loop2): setting nodatacow, compression disabled [ 209.837000][ T6892] Buffer I/O error on dev loop0, logical block 85, lost async page write [ 209.859692][ T6892] syz.0.365: attempt to access beyond end of device [ 209.859692][ T6892] loop0: rw=2049, sector=172, nr_sectors = 2 limit=128 [ 209.892737][ T4282] syz-executor: attempt to access beyond end of device [ 209.892737][ T4282] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 209.916244][ T6892] Buffer I/O error on dev loop0, logical block 86, lost async page write [ 209.919513][ T6885] BTRFS info (device loop2): force clearing of disk cache [ 209.966815][ T6892] syz.0.365: attempt to access beyond end of device [ 209.966815][ T6892] loop0: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 210.021131][ T6885] BTRFS info (device loop2): enabling ssd optimizations [ 210.062524][ T6892] Buffer I/O error on dev loop0, logical block 87, lost async page write [ 210.077351][ T6885] BTRFS info (device loop2): using spread ssd allocation scheme [ 210.085078][ T6885] BTRFS info (device loop2): turning off barriers [ 210.133790][ T6885] BTRFS info (device loop2): disabling free space tree [ 210.167384][ T6885] BTRFS info (device loop2): not using ssd optimizations [ 210.201068][ T6885] BTRFS info (device loop2): not using spread ssd allocation scheme [ 210.498049][ T6918] loop1: detected capacity change from 0 to 2048 [ 210.580197][ T6918] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 210.613099][ T6885] BTRFS info (device loop2): rebuilding free space tree [ 210.642893][ T6918] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.722124][ T6885] BTRFS info (device loop2): disabling free space tree [ 210.755724][ T6885] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 210.787869][ T6938] loop0: detected capacity change from 0 to 256 [ 210.809983][ T6885] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 210.921793][ T6938] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 211.005962][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 211.155495][ T4280] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 211.304152][ T6944] random: crng reseeded on system resumption [ 211.963121][ T6937] loop5: detected capacity change from 0 to 40427 [ 211.985008][ T6940] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.372 (6940) [ 212.050131][ T6937] F2FS-fs (loop5): invalid crc value [ 212.064080][ T6940] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 212.101008][ T6937] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 212.101999][ T6940] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 212.192136][ T6940] BTRFS info (device loop3): enabling auto defrag [ 212.225058][ T6940] BTRFS info (device loop3): use no compression [ 212.265795][ T6940] BTRFS info (device loop3): max_inline at 4096 [ 212.306261][ T6940] BTRFS info (device loop3): using free space tree [ 212.372770][ T6937] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 212.427885][ T6937] F2FS-fs (loop5): Start checkpoint disabled! [ 212.456760][ T6937] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 212.790561][ T6940] BTRFS info (device loop3): enabling ssd optimizations [ 213.070909][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 213.122035][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 213.193094][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 213.224339][ T4282] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 213.725225][ T6983] set_capacity_and_notify: 2 callbacks suppressed [ 213.725290][ T6983] loop1: detected capacity change from 0 to 2048 [ 213.874515][ T6985] xt_CT: No such helper "syz0" [ 213.903061][ T6968] loop0: detected capacity change from 0 to 40427 [ 213.911216][ T6983] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 213.931707][ T6968] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 213.975877][ T6983] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.012293][ T6968] F2FS-fs (loop0): invalid crc value [ 214.056526][ T6968] F2FS-fs (loop0): Found nat_bits in checkpoint [ 214.239603][ T6968] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 214.253362][ T6998] loop2: detected capacity change from 0 to 512 [ 214.320948][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 214.323996][ T6968] overlayfs: failed to resolve './file1': -2 [ 214.395058][ T6998] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 214.438155][ T6998] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.509619][ T7005] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 214.543115][ T4274] syz-executor: attempt to access beyond end of device [ 214.543115][ T4274] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 214.711382][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 216.060916][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.397'. [ 216.141272][ T7024] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 216.185679][ T7024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.249251][ T7027] loop1: detected capacity change from 0 to 256 [ 216.473789][ T7027] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 216.741768][ T7036] loop3: detected capacity change from 0 to 512 [ 216.847097][ T7036] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.403: inode has both inline data and extents flags [ 216.875937][ T7036] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.403: couldn't read orphan inode 15 (err -117) [ 216.890517][ T7036] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 217.514345][ T33] Bluetooth: hci6: Frame reassembly failed (-84) [ 217.529243][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 217.852663][ T7049] loop3: detected capacity change from 0 to 512 [ 218.510619][ T7053] loop3: detected capacity change from 0 to 8192 [ 218.612662][ T7043] loop2: detected capacity change from 0 to 32768 [ 218.716205][ T7054] netlink: 'syz.3.409': attribute type 15 has an invalid length. [ 218.763315][ T7043] XFS (loop2): Mounting V5 Filesystem [ 218.870086][ T7064] loop5: detected capacity change from 0 to 128 [ 218.880970][ T7051] loop0: detected capacity change from 0 to 32768 [ 218.977618][ T7051] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.408 (7051) [ 218.996097][ T7043] XFS (loop2): Ending clean mount [ 219.008247][ T7043] XFS (loop2): Quotacheck needed: Please wait. [ 219.083290][ T7064] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 219.169423][ T7064] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.180693][ T7043] XFS (loop2): Quotacheck: Done. [ 219.190416][ T7051] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 219.267415][ T7051] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 219.276157][ T7051] BTRFS info (device loop0): enabling auto defrag [ 219.317451][ T7051] BTRFS info (device loop0): use no compression [ 219.326374][ T7051] BTRFS info (device loop0): max_inline at 4096 [ 219.335105][ T7054] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 219.361586][ T7051] BTRFS info (device loop0): using free space tree [ 219.463933][ T4280] XFS (loop2): Unmounting Filesystem [ 219.516713][ T7054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.528719][ T4289] Bluetooth: hci6: command 0x1003 tx timeout [ 219.536165][ T4289] Bluetooth: hci5: command 0x1003 tx timeout [ 219.542757][ T4283] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 219.549474][ T4287] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 219.630422][ T7054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.648245][ T7051] BTRFS info (device loop0): enabling ssd optimizations [ 219.883371][ T4274] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 220.113545][ T7090] loop1: detected capacity change from 0 to 1024 [ 220.152787][ T7090] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 220.168323][ T7090] EXT4-fs (loop1): bad geometry: block count 1024 exceeds size of device (512 blocks) [ 220.223924][ T4683] EXT4-fs (loop5): unmounting filesystem. [ 220.452143][ T7092] netlink: 104 bytes leftover after parsing attributes in process `syz.5.415'. [ 220.868194][ T7097] tipc: Started in network mode [ 220.873556][ T7097] tipc: Node identity a26f1e31e5d7, cluster identity 4711 [ 220.962429][ T7097] tipc: Enabled bearer , priority 0 [ 221.049281][ T7102] device syzkaller0 entered promiscuous mode [ 221.143983][ T7097] tipc: Resetting bearer [ 221.237785][ T7096] tipc: Resetting bearer [ 221.323851][ T7096] tipc: Disabling bearer [ 221.643620][ T7117] tipc: Started in network mode [ 221.667364][ T7117] tipc: Node identity 8a191b81673c, cluster identity 4711 [ 221.674721][ T7117] tipc: Enabled bearer , priority 0 [ 221.710821][ T7122] device syzkaller0 entered promiscuous mode [ 221.825128][ T7122] netlink: 44 bytes leftover after parsing attributes in process `syz.3.424'. [ 221.877633][ T7117] tipc: Resetting bearer [ 221.900483][ T7116] tipc: Resetting bearer [ 221.988559][ T7116] tipc: Disabling bearer [ 222.464934][ T7121] loop1: detected capacity change from 0 to 32768 [ 222.477445][ T7113] loop5: detected capacity change from 0 to 32768 [ 222.528689][ T7121] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.580678][ T7121] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 222.605477][ T7121] BTRFS info (device loop1): setting nodatasum [ 222.634431][ T7113] XFS (loop5): Mounting V5 Filesystem [ 222.637986][ T7121] BTRFS info (device loop1): force zlib compression, level 3 [ 222.658039][ T7121] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 222.767125][ T7121] BTRFS info (device loop1): use lzo compression, level 0 [ 222.784723][ T7113] XFS (loop5): Ending clean mount [ 222.810686][ T7121] BTRFS info (device loop1): turning on flush-on-commit [ 222.870825][ T7121] BTRFS info (device loop1): enabling auto defrag [ 222.891729][ T7148] loop0: detected capacity change from 0 to 1024 [ 222.897141][ T7121] BTRFS info (device loop1): max_inline at 4096 [ 222.923340][ T7113] XFS (loop5): Quotacheck needed: Please wait. [ 223.002741][ T7121] BTRFS info (device loop1): using free space tree [ 223.022487][ T7148] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 223.088365][ T7113] XFS (loop5): Quotacheck: Done. [ 223.265090][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 223.320905][ T7121] BTRFS info (device loop1): enabling ssd optimizations [ 223.355346][ T4683] XFS (loop5): Unmounting Filesystem [ 223.778571][ T4269] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.127803][ T7184] random: crng reseeded on system resumption [ 225.256770][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'. [ 225.568280][ T7196] netlink: 28 bytes leftover after parsing attributes in process `syz.5.444'. [ 225.587434][ T7196] netlink: 28 bytes leftover after parsing attributes in process `syz.5.444'. [ 225.650094][ T7196] device erspan0 entered promiscuous mode [ 225.665575][ T7196] device gretap0 entered promiscuous mode [ 225.692044][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 226.293324][ T7194] Cannot find set identified by id 3 to match [ 226.667765][ T7203] loop5: detected capacity change from 0 to 32768 [ 226.783001][ T7205] loop0: detected capacity change from 0 to 32768 [ 226.794776][ T7203] XFS (loop5): Mounting V5 Filesystem [ 226.816619][ T7205] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.448 (7205) [ 226.867410][ T7205] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 226.912336][ T7205] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 226.922999][ T7203] XFS (loop5): Ending clean mount [ 226.941716][ T7203] XFS (loop5): Quotacheck needed: Please wait. [ 226.983770][ T7205] BTRFS info (device loop0): enabling auto defrag [ 226.990453][ T7205] BTRFS info (device loop0): use no compression [ 226.996902][ T7205] BTRFS info (device loop0): max_inline at 4096 [ 227.018509][ T7205] BTRFS info (device loop0): using free space tree [ 227.111283][ T7203] XFS (loop5): Quotacheck: Done. [ 227.127533][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 227.250437][ T7205] BTRFS info (device loop0): enabling ssd optimizations [ 227.349415][ T4683] XFS (loop5): Unmounting Filesystem [ 227.542145][ T4274] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 227.992051][ T7253] netlink: 104 bytes leftover after parsing attributes in process `syz.3.460'. [ 228.517856][ T7261] loop0: detected capacity change from 0 to 1024 [ 228.558045][ T7261] EXT4-fs: inline encryption not supported [ 228.595078][ T7115] Set syz1 is full, maxelem 65536 reached [ 228.852835][ T7261] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.463: lblock 2 mapped to illegal pblock 2 (length 1) [ 228.870462][ T7261] EXT4-fs (loop0): Remounting filesystem read-only [ 228.879048][ T7261] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 228.892631][ T7261] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.463: lblock 0 mapped to illegal pblock 48 (length 1) [ 228.912493][ T7261] EXT4-fs (loop0): Remounting filesystem read-only [ 228.934094][ T7261] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 228.947180][ T7261] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.463: Failed to acquire dquot type 0 [ 228.959289][ T7261] EXT4-fs (loop0): Remounting filesystem read-only [ 228.966364][ T7261] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 229.017637][ T7261] EXT4-fs (loop0): Remounting filesystem read-only [ 229.034645][ T7261] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.463: mark_inode_dirty error [ 229.116991][ T7261] EXT4-fs (loop0): Remounting filesystem read-only [ 229.174039][ T7261] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 229.219956][ T7261] EXT4-fs (loop0): 1 orphan inode deleted [ 229.225855][ T7278] loop5: detected capacity change from 0 to 512 [ 229.241318][ T4299] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 229.277438][ T7261] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 229.304114][ T7275] netlink: 'syz.2.466': attribute type 1 has an invalid length. [ 229.326683][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 229.339573][ T4299] EXT4-fs (loop0): Remounting filesystem read-only [ 229.346126][ T4299] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 229.430068][ T7278] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 229.469190][ T4299] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:5: Failed to release dquot type 0 [ 229.512074][ T7275] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 229.543346][ T7275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.559563][ T7278] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.629570][ T7284] loop1: detected capacity change from 0 to 1024 [ 229.714375][ T4299] EXT4-fs (loop0): Remounting filesystem read-only [ 229.760585][ T7261] EXT4-fs (loop0): unmounting filesystem. [ 229.781774][ T7284] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 229.788791][ T7261] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.463: Invalid inode table block 1 in block_group 0 [ 229.920693][ T7261] EXT4-fs (loop0): Remounting filesystem read-only [ 229.927740][ T7261] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 229.954036][ T7261] EXT4-fs (loop0): Remounting filesystem read-only [ 229.960843][ T7261] EXT4-fs error (device loop0): ext4_quota_off:7141: inode #3: comm syz.0.463: mark_inode_dirty error [ 229.998456][ T7261] EXT4-fs (loop0): Remounting filesystem read-only [ 230.018866][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 230.031215][ T4683] EXT4-fs (loop5): unmounting filesystem. [ 230.321676][ T7296] loop1: detected capacity change from 0 to 2048 [ 230.398026][ T7296] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 230.413566][ T7296] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.547142][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 230.751663][ T7309] netlink: 'syz.1.477': attribute type 39 has an invalid length. [ 231.337722][ T7319] syz.0.482 uses obsolete (PF_INET,SOCK_PACKET) [ 231.633489][ T7328] loop3: detected capacity change from 0 to 2048 [ 231.651400][ T7329] loop1: detected capacity change from 0 to 1024 [ 231.728657][ T7329] EXT4-fs: inline encryption not supported [ 231.749716][ T7328] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 231.768674][ T7328] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.850882][ T7329] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.486: lblock 2 mapped to illegal pblock 2 (length 1) [ 231.919820][ T7329] EXT4-fs (loop1): Remounting filesystem read-only [ 231.926426][ T7329] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 231.948611][ T7329] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.486: lblock 0 mapped to illegal pblock 48 (length 1) [ 231.977504][ T7329] EXT4-fs (loop1): Remounting filesystem read-only [ 232.018147][ T7329] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 232.047475][ T7329] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.486: Failed to acquire dquot type 0 [ 232.060604][ T7329] EXT4-fs (loop1): Remounting filesystem read-only [ 232.075249][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 232.081087][ T7329] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 232.093535][ T7329] EXT4-fs (loop1): Remounting filesystem read-only [ 232.101427][ T7329] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.486: mark_inode_dirty error [ 232.134369][ T7329] EXT4-fs (loop1): Remounting filesystem read-only [ 232.201233][ T7329] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 232.217820][ T7329] EXT4-fs (loop1): 1 orphan inode deleted [ 232.227913][ T7329] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 232.237556][ T9] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 232.319888][ T9] EXT4-fs (loop1): Remounting filesystem read-only [ 232.326489][ T9] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 232.354479][ T7342] netlink: 220 bytes leftover after parsing attributes in process `syz.3.492'. [ 232.379818][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 232.430946][ T9] EXT4-fs (loop1): Remounting filesystem read-only [ 232.453853][ T7329] EXT4-fs (loop1): unmounting filesystem. [ 232.479678][ T7329] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.486: Invalid inode table block 1 in block_group 0 [ 232.559666][ T7329] EXT4-fs (loop1): Remounting filesystem read-only [ 232.617323][ T7329] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 232.680997][ T7329] EXT4-fs (loop1): Remounting filesystem read-only [ 232.696697][ T7329] EXT4-fs error (device loop1): ext4_quota_off:7141: inode #3: comm syz.1.486: mark_inode_dirty error [ 232.716847][ T7329] EXT4-fs (loop1): Remounting filesystem read-only [ 233.097896][ T7361] device syzkaller0 entered promiscuous mode [ 233.118789][ T7365] loop2: detected capacity change from 0 to 512 [ 233.138793][ T7364] loop1: detected capacity change from 0 to 2048 [ 233.165189][ T7365] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 233.206900][ T7364] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 233.247494][ T7364] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.258381][ T7365] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.447164][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 233.478407][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 233.654793][ T7350] loop3: detected capacity change from 0 to 32768 [ 233.900593][ T7382] xt_hashlimit: size too large, truncated to 1048576 [ 234.840580][ T7395] loop5: detected capacity change from 0 to 128 [ 235.690511][ T7401] syz.5.511: attempt to access beyond end of device [ 235.690511][ T7401] loop5: rw=2049, sector=145, nr_sectors = 168 limit=128 [ 235.946455][ T7403] loop1: detected capacity change from 0 to 1024 [ 235.973680][ T7403] EXT4-fs: inline encryption not supported [ 236.042638][ T7403] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.513: lblock 2 mapped to illegal pblock 2 (length 1) [ 236.185421][ T7403] EXT4-fs (loop1): Remounting filesystem read-only [ 236.237387][ T7403] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 236.286122][ T7403] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.513: lblock 0 mapped to illegal pblock 48 (length 1) [ 236.387360][ T7403] EXT4-fs (loop1): Remounting filesystem read-only [ 236.393990][ T7403] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 236.437355][ T7403] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.513: Failed to acquire dquot type 0 [ 236.499628][ T7403] EXT4-fs (loop1): Remounting filesystem read-only [ 236.506348][ T7403] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 236.553514][ T7403] EXT4-fs (loop1): Remounting filesystem read-only [ 236.577505][ T7403] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.513: mark_inode_dirty error [ 236.618951][ T7403] EXT4-fs (loop1): Remounting filesystem read-only [ 236.625555][ T7403] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 236.644666][ T7403] EXT4-fs (loop1): 1 orphan inode deleted [ 236.653080][ T7403] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 236.675649][ T33] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 236.722970][ T33] EXT4-fs (loop1): Remounting filesystem read-only [ 236.762250][ T33] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 236.794103][ T33] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:2: Failed to release dquot type 0 [ 236.845628][ T33] EXT4-fs (loop1): Remounting filesystem read-only [ 236.882514][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 236.892228][ T4269] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 236.914000][ T7414] loop5: detected capacity change from 0 to 2048 [ 236.945539][ T4269] EXT4-fs (loop1): Remounting filesystem read-only [ 236.956831][ T4269] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 236.976318][ T4269] EXT4-fs (loop1): Remounting filesystem read-only [ 236.985786][ T7414] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 236.997613][ T7414] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.015434][ T4269] EXT4-fs error (device loop1): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 237.062695][ T4269] EXT4-fs (loop1): Remounting filesystem read-only [ 237.084167][ T7409] loop3: detected capacity change from 0 to 32768 [ 237.126521][ T7409] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.510 (7409) [ 237.151079][ T4683] EXT4-fs (loop5): unmounting filesystem. [ 237.224895][ T7409] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 237.274400][ T7409] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 237.303800][ T7409] BTRFS info (device loop3): enabling auto defrag [ 237.327831][ T7409] BTRFS info (device loop3): use no compression [ 237.347646][ T7409] BTRFS info (device loop3): max_inline at 4096 [ 237.353981][ T7409] BTRFS info (device loop3): using free space tree [ 237.605829][ T7435] netlink: 52 bytes leftover after parsing attributes in process `syz.1.522'. [ 237.654569][ T7443] random: crng reseeded on system resumption [ 237.687805][ T7409] BTRFS info (device loop3): enabling ssd optimizations [ 237.915558][ T4282] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 238.704212][ T4444] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (4444) [ 238.907810][ T7448] loop5: detected capacity change from 0 to 32768 [ 238.958357][ T7448] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.523 (7448) [ 239.002959][ T7448] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 239.039466][ T7448] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 239.089326][ T7448] BTRFS info (device loop5): setting nodatasum [ 239.236536][ T7448] BTRFS info (device loop5): force zlib compression, level 3 [ 239.273540][ T7448] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 239.327314][ T7448] BTRFS info (device loop5): use lzo compression, level 0 [ 239.334533][ T7448] BTRFS info (device loop5): turning on flush-on-commit [ 239.433786][ T7448] BTRFS info (device loop5): enabling auto defrag [ 239.445713][ T7448] BTRFS info (device loop5): max_inline at 4096 [ 239.577415][ T7448] BTRFS info (device loop5): using free space tree [ 240.025475][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'. [ 240.132236][ T7448] BTRFS info (device loop5): enabling ssd optimizations [ 240.791217][ T7541] netlink: 'syz.0.534': attribute type 39 has an invalid length. [ 240.804234][ T4683] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 241.482192][ T7556] xt_hashlimit: size too large, truncated to 1048576 [ 241.550310][ T7554] loop3: detected capacity change from 0 to 2048 [ 241.681650][ T7554] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 241.757597][ T7554] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.979538][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 242.173595][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'. [ 242.305832][ T7576] tipc: Enabled bearer , priority 0 [ 242.331414][ T7576] device syzkaller0 entered promiscuous mode [ 242.353468][ T7579] tipc: Enabled bearer , priority 0 [ 242.388526][ T7579] device syzkaller0 entered promiscuous mode [ 242.410141][ T7576] tipc: Resetting bearer [ 242.441764][ T7575] tipc: Resetting bearer [ 242.561216][ T7575] tipc: Disabling bearer [ 242.685146][ T7585] tipc: Resetting bearer [ 242.774978][ T7577] tipc: Resetting bearer [ 242.835843][ T7577] tipc: Disabling bearer [ 243.241119][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.256429][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.137908][ T7602] loop2: detected capacity change from 0 to 2048 [ 244.170190][ T7602] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 244.190108][ T7602] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.370986][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 245.122483][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 246.821250][ T7662] loop2: detected capacity change from 0 to 512 [ 247.009551][ T7668] autofs4:pid:7668:autofs_fill_super: called with bogus options [ 247.229701][ T7662] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 247.547399][ T7662] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.740977][ T7672] loop0: detected capacity change from 0 to 1024 [ 247.788744][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 247.798615][ T7672] EXT4-fs: inline encryption not supported [ 247.881343][ T7672] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.578: lblock 2 mapped to illegal pblock 2 (length 1) [ 247.964820][ T7672] EXT4-fs (loop0): Remounting filesystem read-only [ 247.971474][ T7672] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 247.979865][ T7672] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.578: lblock 0 mapped to illegal pblock 48 (length 1) [ 247.994303][ T7672] EXT4-fs (loop0): Remounting filesystem read-only [ 248.001093][ T7672] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 248.015584][ T7672] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.578: Failed to acquire dquot type 0 [ 248.029447][ T7672] EXT4-fs (loop0): Remounting filesystem read-only [ 248.036070][ T7672] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 248.056511][ T7672] EXT4-fs (loop0): Remounting filesystem read-only [ 248.087820][ T7672] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.578: mark_inode_dirty error [ 248.155534][ T7672] EXT4-fs (loop0): Remounting filesystem read-only [ 248.202552][ T7672] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 248.237856][ T7672] EXT4-fs (loop0): 1 orphan inode deleted [ 248.247493][ T7672] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 248.266890][ T6728] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 248.312752][ T6728] EXT4-fs (loop0): Remounting filesystem read-only [ 248.339851][ T6728] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 248.397415][ T6728] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:11: Failed to release dquot type 0 [ 248.419497][ T6728] EXT4-fs (loop0): Remounting filesystem read-only [ 248.457494][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 248.468521][ T4274] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 248.517927][ T4274] EXT4-fs (loop0): Remounting filesystem read-only [ 248.524508][ T4274] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 248.588887][ T4274] EXT4-fs (loop0): Remounting filesystem read-only [ 248.607172][ T4274] EXT4-fs error (device loop0): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 248.622187][ T7689] tipc: Started in network mode [ 248.627122][ T7689] tipc: Node identity f2a6a4d6d7ba, cluster identity 4711 [ 248.642239][ T4274] EXT4-fs (loop0): Remounting filesystem read-only [ 248.654800][ T7689] tipc: Enabled bearer , priority 0 [ 248.685534][ T7690] device syzkaller0 entered promiscuous mode [ 248.781290][ T7689] tipc: Resetting bearer [ 248.837651][ T7688] tipc: Resetting bearer [ 248.936166][ T7688] tipc: Disabling bearer [ 249.035908][ T7676] loop3: detected capacity change from 0 to 32768 [ 249.482337][ T7676] XFS (loop3): Mounting V5 Filesystem [ 249.681735][ T7708] loop2: detected capacity change from 0 to 128 [ 249.878771][ T7676] XFS (loop3): Ending clean mount [ 250.125693][ T4282] XFS (loop3): Unmounting Filesystem [ 250.317596][ T7722] loop2: detected capacity change from 0 to 1024 [ 250.325899][ T7722] EXT4-fs: inline encryption not supported [ 250.386842][ T7695] loop1: detected capacity change from 0 to 32768 [ 250.396689][ T7695] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.589 (7695) [ 250.418679][ T7722] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.597: lblock 2 mapped to illegal pblock 2 (length 1) [ 250.517560][ T7722] EXT4-fs (loop2): Remounting filesystem read-only [ 250.524687][ T7722] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 250.534246][ T7695] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 250.577395][ T7695] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 250.593272][ T7722] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.597: lblock 0 mapped to illegal pblock 48 (length 1) [ 250.597478][ T7695] BTRFS info (device loop1): force clearing of disk cache [ 250.627469][ T7695] BTRFS info (device loop1): metadata ratio 0 [ 250.657945][ T7695] BTRFS info (device loop1): enabling ssd optimizations [ 250.688337][ T7695] BTRFS info (device loop1): using spread ssd allocation scheme [ 250.696179][ T7695] BTRFS info (device loop1): using free space tree [ 250.714985][ T7722] EXT4-fs (loop2): Remounting filesystem read-only [ 250.765394][ T7722] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 250.804324][ T7722] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.597: Failed to acquire dquot type 0 [ 250.817738][ T7722] EXT4-fs (loop2): Remounting filesystem read-only [ 250.824561][ T7722] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 250.852941][ T7722] EXT4-fs (loop2): Remounting filesystem read-only [ 250.864515][ T7722] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.597: mark_inode_dirty error [ 250.893969][ T7722] EXT4-fs (loop2): Remounting filesystem read-only [ 250.903758][ T7722] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 250.917554][ T7722] EXT4-fs (loop2): 1 orphan inode deleted [ 250.923465][ T7722] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 251.647705][ T6727] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 251.761520][ T7695] BTRFS info (device loop1): rebuilding free space tree [ 251.807527][ T6727] EXT4-fs (loop2): Remounting filesystem read-only [ 251.857275][ T6727] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 251.890587][ T6727] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:10: Failed to release dquot type 0 [ 251.947806][ T6727] EXT4-fs (loop2): Remounting filesystem read-only [ 251.956588][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 251.963132][ T4280] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 252.005275][ T4269] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 252.023895][ T4280] EXT4-fs (loop2): Remounting filesystem read-only [ 252.061533][ T4280] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 252.098555][ T4280] EXT4-fs (loop2): Remounting filesystem read-only [ 252.128064][ T4280] EXT4-fs error (device loop2): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 252.197298][ T4280] EXT4-fs (loop2): Remounting filesystem read-only [ 253.349945][ T7731] loop5: detected capacity change from 0 to 40427 [ 253.394336][ T7731] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 253.414182][ T7731] F2FS-fs (loop5): invalid crc value [ 253.434920][ T7731] F2FS-fs (loop5): Found nat_bits in checkpoint [ 254.220945][ T7780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.608'. [ 255.427134][ T7789] loop5: detected capacity change from 0 to 2048 [ 255.598733][ T7786] syz.3.612 (7786) used greatest stack depth: 17144 bytes left [ 255.634633][ T7789] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 255.653857][ T7789] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.696076][ T7770] loop0: detected capacity change from 0 to 32768 [ 255.770133][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.776512][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.681157][ T4683] EXT4-fs (loop5): unmounting filesystem. [ 257.346217][ T7800] loop3: detected capacity change from 0 to 32768 [ 257.390250][ T7800] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.614 (7800) [ 257.444184][ T7800] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 257.489903][ T7815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.621'. [ 257.495977][ T7800] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 257.534448][ T7800] BTRFS info (device loop3): force clearing of disk cache [ 257.576242][ T7800] BTRFS info (device loop3): metadata ratio 0 [ 257.608031][ T7800] BTRFS info (device loop3): enabling ssd optimizations [ 257.615089][ T7800] BTRFS info (device loop3): using spread ssd allocation scheme [ 257.657348][ T7800] BTRFS info (device loop3): using free space tree [ 257.877924][ T7823] tipc: Enabled bearer , priority 0 [ 257.890768][ T7811] loop0: detected capacity change from 0 to 32768 [ 257.903847][ T7811] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.619 (7811) [ 257.922730][ T7823] device syzkaller0 entered promiscuous mode [ 257.952073][ T7811] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.965123][ T7811] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 257.976584][ T7811] BTRFS info (device loop0): setting nodatacow, compression disabled [ 257.985084][ T7811] BTRFS info (device loop0): turning on flush-on-commit [ 257.992729][ T7811] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 258.002435][ T7811] BTRFS info (device loop0): use lzo compression, level 0 [ 258.009854][ T7811] BTRFS info (device loop0): setting nodatasum [ 258.016077][ T7811] BTRFS info (device loop0): use no compression [ 258.023375][ T7811] BTRFS info (device loop0): trying to use backup root at mount time [ 258.034381][ T7811] BTRFS info (device loop0): max_inline at 0 [ 258.040738][ T7811] BTRFS info (device loop0): using free space tree [ 258.103068][ T7839] tipc: Resetting bearer [ 258.118194][ T7800] BTRFS info (device loop3): rebuilding free space tree [ 258.182244][ T7822] tipc: Resetting bearer [ 258.210626][ T7489] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 258.252740][ T7811] BTRFS warning (device loop0): couldn't read tree root [ 258.275744][ T7811] BTRFS warning (device loop0): try to load backup roots slot 1 [ 258.289767][ T4620] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 258.336593][ T7822] tipc: Disabling bearer [ 258.358580][ T7811] BTRFS warning (device loop0): couldn't read tree root [ 258.365876][ T7811] BTRFS warning (device loop0): try to load backup roots slot 2 [ 258.387352][ T7811] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 258.416945][ T4282] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 258.416954][ T7811] BTRFS warning (device loop0): couldn't read tree root [ 258.465904][ T7811] BTRFS warning (device loop0): try to load backup roots slot 3 [ 258.477960][ T7865] loop5: detected capacity change from 0 to 1024 [ 258.547843][ T7865] EXT4-fs: Ignoring removed orlov option [ 258.559562][ T7811] BTRFS info (device loop0): enabling ssd optimizations [ 258.576478][ T7811] BTRFS info (device loop0): rebuilding free space tree [ 258.683287][ T7811] BTRFS info (device loop0): checking UUID tree [ 258.760639][ T7865] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 258.858179][ T7873] netlink: 32 bytes leftover after parsing attributes in process `syz.1.628'. [ 258.867421][ T7873] netlink: 40 bytes leftover after parsing attributes in process `syz.1.628'. [ 258.876329][ T7873] tipc: Cannot configure node identity twice [ 258.883758][ T7873] tipc: Cannot configure node identity twice [ 258.901040][ T7860] EXT4-fs (loop5): shut down requested (1) [ 258.938225][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.625'. [ 259.044485][ T7860] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.052041][ T7860] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.184613][ T4274] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 259.274290][ T4683] EXT4-fs (loop5): unmounting filesystem. [ 259.522672][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.5.633'. [ 260.144970][ T7877] loop3: detected capacity change from 0 to 32768 [ 260.281678][ T7877] XFS (loop3): Mounting V5 Filesystem [ 260.378627][ T7877] XFS (loop3): Ending clean mount [ 260.492057][ T4282] XFS (loop3): Unmounting Filesystem [ 261.198190][ T7899] loop5: detected capacity change from 0 to 32768 [ 261.223142][ T7900] loop0: detected capacity change from 0 to 32768 [ 261.240794][ T7899] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.638 (7899) [ 261.415818][ T7900] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.637 (7900) [ 261.438039][ T7899] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 261.640263][ T7899] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 261.669611][ T7900] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 261.721389][ T7900] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 261.787980][ T7900] BTRFS info (device loop0): force clearing of disk cache [ 261.797648][ T7899] BTRFS info (device loop5): enabling auto defrag [ 261.806354][ T7899] BTRFS info (device loop5): use no compression [ 261.855384][ T7900] BTRFS info (device loop0): metadata ratio 0 [ 261.862910][ T7899] BTRFS info (device loop5): max_inline at 4096 [ 261.900086][ T7900] BTRFS info (device loop0): enabling ssd optimizations [ 261.914963][ T7899] BTRFS info (device loop5): using free space tree [ 261.962120][ T7900] BTRFS info (device loop0): using spread ssd allocation scheme [ 262.015381][ T7900] BTRFS info (device loop0): using free space tree [ 262.107162][ T7899] BTRFS info (device loop5): enabling ssd optimizations [ 262.175209][ T4683] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 262.514138][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.645'. [ 262.757346][ T7900] BTRFS info (device loop0): rebuilding free space tree [ 263.037952][ T4274] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 263.316190][ T7982] loop3: detected capacity change from 0 to 1024 [ 263.451150][ T7982] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 263.513481][ T7982] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.676082][ T7982] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.652: bg 0: block 112: padding at end of block bitmap is not set [ 263.763511][ T7982] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 263.822329][ T7982] EXT4-fs (loop3): This should not happen!! Data will be lost [ 263.822329][ T7982] [ 264.002374][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 264.603052][ T7976] loop5: detected capacity change from 0 to 40427 [ 264.622222][ T7980] loop1: detected capacity change from 0 to 32768 [ 264.708691][ T7976] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 264.775899][ T7976] F2FS-fs (loop5): invalid crc value [ 264.954355][ T7976] F2FS-fs (loop5): Found nat_bits in checkpoint [ 264.969114][ T7980] XFS (loop1): Mounting V5 Filesystem [ 265.132333][ T7980] XFS (loop1): Ending clean mount [ 265.199024][ T4269] XFS (loop1): Unmounting Filesystem [ 265.281681][ T7976] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 265.342611][ T7976] overlayfs: missing 'lowerdir' [ 265.632783][ T4683] syz-executor: attempt to access beyond end of device [ 265.632783][ T4683] loop5: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 266.741363][ T8040] tipc: Started in network mode [ 266.770251][ T8040] tipc: Node identity 26035a4e7348, cluster identity 4711 [ 266.809127][ T8040] tipc: Enabled bearer , priority 0 [ 266.873542][ T8041] device syzkaller0 entered promiscuous mode [ 266.904162][ T8043] overlayfs: missing 'lowerdir' [ 266.995430][ T8039] tipc: Resetting bearer [ 267.005899][ T8048] netlink: 104 bytes leftover after parsing attributes in process `syz.3.671'. [ 267.130298][ T8039] tipc: Disabling bearer [ 267.325629][ T8055] tipc: Enabled bearer , priority 0 [ 267.338876][ T8055] device syzkaller0 entered promiscuous mode [ 267.390817][ T8055] tipc: Resetting bearer [ 267.425008][ T8054] tipc: Resetting bearer [ 267.523660][ T8054] tipc: Disabling bearer [ 269.451357][ T8051] loop2: detected capacity change from 0 to 32768 [ 269.658664][ T8051] XFS (loop2): Mounting V5 Filesystem [ 269.743695][ T8062] loop3: detected capacity change from 0 to 40427 [ 269.777556][ T8062] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 269.788844][ T8051] XFS (loop2): Ending clean mount [ 269.814481][ T8062] F2FS-fs (loop3): invalid crc value [ 269.860859][ T8062] F2FS-fs (loop3): Found nat_bits in checkpoint [ 270.083273][ T8062] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 270.102399][ T4280] XFS (loop2): Unmounting Filesystem [ 270.134982][ T8062] overlayfs: missing 'lowerdir' [ 270.216741][ T8096] overlayfs: missing 'lowerdir' [ 270.319648][ T4282] syz-executor: attempt to access beyond end of device [ 270.319648][ T4282] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 270.694778][ T8102] netlink: 104 bytes leftover after parsing attributes in process `syz.2.684'. [ 271.049189][ T8108] tipc: Enabled bearer , priority 0 [ 271.124476][ T8108] tipc: Resetting bearer [ 271.324607][ T8107] tipc: Disabling bearer [ 271.394682][ T8111] netlink: 'syz.1.691': attribute type 39 has an invalid length. [ 271.885143][ T8125] overlayfs: missing 'lowerdir' [ 273.429955][ T8141] netlink: 'syz.5.703': attribute type 39 has an invalid length. [ 273.636080][ T8145] tipc: Enabled bearer , priority 0 [ 273.703774][ T8127] loop1: detected capacity change from 0 to 32768 [ 273.729091][ T8145] tipc: Resetting bearer [ 273.745394][ T8127] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.698 (8127) [ 273.817654][ T8144] tipc: Disabling bearer [ 273.860934][ T8127] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 273.897655][ T8127] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 274.048291][ T8127] BTRFS info (device loop1): force clearing of disk cache [ 274.276680][ T8127] BTRFS info (device loop1): metadata ratio 0 [ 274.478512][ T8127] BTRFS info (device loop1): enabling ssd optimizations [ 274.528051][ T8127] BTRFS info (device loop1): using spread ssd allocation scheme [ 274.566512][ T8123] loop0: detected capacity change from 0 to 40427 [ 274.583404][ T8127] BTRFS info (device loop1): using free space tree [ 274.618475][ T8123] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 274.695291][ T8123] F2FS-fs (loop0): invalid crc value [ 274.715539][ T8123] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 274.767542][ T8155] loop5: detected capacity change from 0 to 1024 [ 275.059697][ T8155] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 275.084432][ T8155] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.707: inode #1869229157: comm syz.5.707: iget: illegal inode # [ 275.109025][ T8155] EXT4-fs (loop5): Remounting filesystem read-only [ 275.115917][ T8155] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.707: error while reading EA inode 1869229157 err=-117 [ 275.133754][ T8155] EXT4-fs (loop5): Remounting filesystem read-only [ 275.236154][ T8183] overlayfs: missing 'lowerdir' [ 275.441277][ T8127] BTRFS error (device loop1): open_ctree failed: -12 [ 275.482235][ T4683] EXT4-fs (loop5): unmounting filesystem. [ 276.067593][ T4444] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4444) [ 276.091011][ T8198] netlink: 'syz.1.716': attribute type 39 has an invalid length. [ 276.341857][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 277.525785][ T8186] loop5: detected capacity change from 0 to 32768 [ 277.998963][ T8218] overlayfs: missing 'lowerdir' [ 278.011863][ T8217] loop2: detected capacity change from 0 to 1024 [ 278.189836][ T8217] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 278.355534][ T8217] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.721: inode #1869229157: comm syz.2.721: iget: illegal inode # [ 278.408073][ T8217] EXT4-fs (loop2): Remounting filesystem read-only [ 278.425127][ T8217] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.721: error while reading EA inode 1869229157 err=-117 [ 278.487090][ T8217] EXT4-fs (loop2): Remounting filesystem read-only [ 278.649190][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 278.850282][ T8231] netlink: 'syz.0.728': attribute type 39 has an invalid length. [ 279.152342][ T8223] loop3: detected capacity change from 0 to 32768 [ 279.202507][ T8223] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 279.235720][ T8223] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 279.266271][ T8223] BTRFS info (device loop3): force clearing of disk cache [ 279.276136][ T8223] BTRFS info (device loop3): metadata ratio 0 [ 279.286088][ T8223] BTRFS info (device loop3): enabling ssd optimizations [ 279.297111][ T8223] BTRFS info (device loop3): using spread ssd allocation scheme [ 279.308633][ T8223] BTRFS info (device loop3): using free space tree [ 279.340625][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805809a800: rx timeout, send abort [ 279.386776][ T8211] loop1: detected capacity change from 0 to 40427 [ 279.439101][ T8211] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 279.493056][ T8211] F2FS-fs (loop1): invalid crc value [ 279.551500][ T8211] F2FS-fs (loop1): Found nat_bits in checkpoint [ 279.564376][ T8237] Set syz1 is full, maxelem 6117 reached [ 279.588563][ T8223] BTRFS info (device loop3): rebuilding free space tree [ 279.733999][ T4282] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 279.827370][ T8211] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 279.840676][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805809a400: rx timeout, send abort [ 279.850746][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805809a800: abort rx timeout. Force session deactivation [ 279.978804][ T8211] overlayfs: missing 'lowerdir' [ 280.348991][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805809a400: abort rx timeout. Force session deactivation [ 281.854759][ T4269] syz-executor: attempt to access beyond end of device [ 281.854759][ T4269] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 282.120351][ T8276] loop0: detected capacity change from 0 to 1024 [ 282.277692][ T8276] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 282.469562][ T8276] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.737: inode #1869229157: comm syz.0.737: iget: illegal inode # [ 282.539351][ T8276] EXT4-fs (loop0): Remounting filesystem read-only [ 282.576972][ T8276] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.737: error while reading EA inode 1869229157 err=-117 [ 282.612955][ T8276] EXT4-fs (loop0): Remounting filesystem read-only [ 282.626881][ T8288] overlayfs: missing 'lowerdir' [ 282.715494][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 282.923342][ T8292] loop0: detected capacity change from 0 to 736 [ 283.572360][ T8294] loop1: detected capacity change from 0 to 32768 [ 283.756697][ T8294] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.743 (8294) [ 284.152075][ T8294] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 284.240275][ T8294] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 284.300130][ T8294] BTRFS info (device loop1): force clearing of disk cache [ 284.349297][ T8294] BTRFS info (device loop1): metadata ratio 0 [ 284.355467][ T8294] BTRFS info (device loop1): enabling ssd optimizations [ 284.394319][ T8294] BTRFS info (device loop1): using spread ssd allocation scheme [ 284.416592][ T8294] BTRFS info (device loop1): using free space tree [ 284.488599][ T8319] loop5: detected capacity change from 0 to 512 [ 284.514550][ T8319] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.752: invalid indirect mapped block 256 (level 2) [ 284.541868][ T8319] EXT4-fs (loop5): 2 truncates cleaned up [ 284.551894][ T8319] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 284.637081][ T8328] overlayfs: missing 'lowerdir' [ 284.668941][ T8298] loop2: detected capacity change from 0 to 40427 [ 284.717895][ T8298] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 284.794095][ T8298] F2FS-fs (loop2): invalid crc value [ 284.819748][ T8298] F2FS-fs (loop2): Found nat_bits in checkpoint [ 284.940418][ T8294] BTRFS info (device loop1): rebuilding free space tree [ 284.964350][ T8342] tipc: Enabled bearer , priority 0 [ 285.002201][ T8342] device syzkaller0 entered promiscuous mode [ 285.045168][ T8342] netlink: 44 bytes leftover after parsing attributes in process `syz.0.754'. [ 285.079680][ T8298] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 285.110097][ T8342] tipc: Resetting bearer [ 285.148515][ T8339] tipc: Resetting bearer [ 285.159905][ T4269] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 285.186043][ T8298] overlayfs: missing 'lowerdir' [ 285.655709][ T8339] tipc: Disabling bearer [ 285.662866][ T4280] syz-executor: attempt to access beyond end of device [ 285.662866][ T4280] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 285.714034][ T26] audit: type=1800 audit(1773219351.959:17): pid=8354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.752" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 285.855513][ T8319] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.752: bg 0: block 5: invalid block bitmap [ 285.902251][ T8348] loop3: detected capacity change from 0 to 32768 [ 285.908998][ T8319] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 285.931979][ T8348] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.756 (8348) [ 285.964296][ T8319] EXT4-fs (loop5): This should not happen!! Data will be lost [ 285.964296][ T8319] [ 285.978683][ T8319] EXT4-fs (loop5): Total free blocks count 0 [ 285.995468][ T8348] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 286.005565][ T8319] EXT4-fs (loop5): Free/Dirty block details [ 286.005764][ T8319] EXT4-fs (loop5): free_blocks=0 [ 286.005836][ T8319] EXT4-fs (loop5): dirty_blocks=64 [ 286.005852][ T8319] EXT4-fs (loop5): Block reservation details [ 286.005866][ T8319] EXT4-fs (loop5): i_reserved_data_blocks=64 [ 286.036883][ T8348] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 286.046104][ T8348] BTRFS info (device loop3): setting nodatasum [ 286.097005][ T8348] BTRFS info (device loop3): force zlib compression, level 3 [ 286.124542][ T8348] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 286.158078][ T8348] BTRFS info (device loop3): use lzo compression, level 0 [ 286.197340][ T8348] BTRFS info (device loop3): turning on flush-on-commit [ 286.206753][ T8348] BTRFS info (device loop3): enabling auto defrag [ 286.247596][ T8348] BTRFS info (device loop3): max_inline at 4096 [ 286.254505][ T8348] BTRFS info (device loop3): using free space tree [ 286.486185][ T8348] BTRFS info (device loop3): enabling ssd optimizations [ 287.646451][ T4683] EXT4-fs (loop5): unmounting filesystem. [ 287.714313][ T4282] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.811984][ T8394] overlayfs: missing 'lowerdir' [ 288.026764][ T4444] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (4444) [ 288.071890][ T8403] loop0: detected capacity change from 0 to 512 [ 288.111032][ T8403] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 288.167341][ T8403] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 288.240768][ T8403] EXT4-fs (loop0): 1 truncate cleaned up [ 288.246510][ T8403] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 288.390471][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 289.053799][ T8418] device syzkaller0 entered promiscuous mode [ 289.076549][ T8399] loop5: detected capacity change from 0 to 32768 [ 289.099843][ T8399] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.767 (8399) [ 289.184339][ T8399] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 289.208311][ T8397] loop2: detected capacity change from 0 to 40427 [ 289.236430][ T8397] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 289.236711][ T8399] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 289.285441][ T8397] F2FS-fs (loop2): invalid crc value [ 289.340657][ T8399] BTRFS info (device loop5): force clearing of disk cache [ 289.351421][ T8397] F2FS-fs (loop2): Found nat_bits in checkpoint [ 289.363272][ T8399] BTRFS info (device loop5): metadata ratio 0 [ 289.406210][ T8399] BTRFS info (device loop5): enabling ssd optimizations [ 289.422655][ T8399] BTRFS info (device loop5): using spread ssd allocation scheme [ 289.474046][ T8399] BTRFS info (device loop5): using free space tree [ 289.508418][ T8397] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 289.542451][ T8397] overlayfs: missing 'lowerdir' [ 289.684006][ T8399] BTRFS info (device loop5): rebuilding free space tree [ 289.735198][ T26] audit: type=1800 audit(1773219355.979:18): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.767" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 289.776312][ T4280] syz-executor: attempt to access beyond end of device [ 289.776312][ T4280] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 290.000595][ T4683] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 290.932955][ T8457] loop1: detected capacity change from 0 to 4096 [ 291.043151][ T8457] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 291.213906][ T26] audit: type=1800 audit(1773219357.459:19): pid=8457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.782" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 291.274047][ T8469] overlayfs: missing 'workdir' [ 291.386730][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 291.403861][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.786'. [ 291.631727][ T8478] device syzkaller0 entered promiscuous mode [ 293.865739][ T8501] netlink: 'syz.3.797': attribute type 2 has an invalid length. [ 293.875197][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 293.919531][ T8501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.015715][ T8485] loop2: detected capacity change from 0 to 32768 [ 294.029880][ T8485] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.791 (8485) [ 294.057574][ T8513] overlayfs: missing 'workdir' [ 294.066926][ T8485] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 294.095716][ T8485] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 294.177723][ T8485] BTRFS info (device loop2): force clearing of disk cache [ 294.197399][ T8485] BTRFS info (device loop2): metadata ratio 0 [ 294.234014][ T8485] BTRFS info (device loop2): enabling ssd optimizations [ 294.295541][ T8485] BTRFS info (device loop2): using spread ssd allocation scheme [ 294.322708][ T8485] BTRFS info (device loop2): using free space tree [ 294.740882][ T8485] BTRFS error (device loop2): open_ctree failed: -22 [ 295.219564][ T8549] device syzkaller0 entered promiscuous mode [ 295.544831][ T4444] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4444) [ 295.599347][ T8573] overlayfs: missing 'workdir' [ 296.755455][ T4593] kernel write not supported for file /vcsu (pid: 4593 comm: kworker/0:23) [ 296.799339][ T8593] loop3: detected capacity change from 0 to 736 [ 297.527596][ T8608] tipc: Enabled bearer , priority 0 [ 297.558991][ T8608] netlink: 44 bytes leftover after parsing attributes in process `syz.2.821'. [ 297.591463][ T8608] tipc: Resetting bearer [ 297.664875][ T8607] tipc: Disabling bearer [ 297.900979][ T8614] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 297.937618][ T8614] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 297.991145][ T8604] loop1: detected capacity change from 0 to 32768 [ 298.133414][ T8604] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 298.194906][ T8604] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 298.255698][ T8604] BTRFS info (device loop1): force clearing of disk cache [ 298.263283][ T8604] BTRFS info (device loop1): metadata ratio 0 [ 298.269561][ T8604] BTRFS info (device loop1): enabling ssd optimizations [ 298.276557][ T8604] BTRFS info (device loop1): using spread ssd allocation scheme [ 298.297053][ T8604] BTRFS info (device loop1): using free space tree [ 299.298568][ T8604] BTRFS info (device loop1): rebuilding free space tree [ 299.361309][ T26] audit: type=1800 audit(1773219365.609:20): pid=8604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.819" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 299.516658][ T4269] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 305.616729][ T8717] loop2: detected capacity change from 0 to 32768 [ 305.693230][ T8717] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 306.102950][ T4444] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 306.863803][ T8592] Set syz1 is full, maxelem 65536 reached [ 307.791439][ T8768] tipc: Enabled bearer , priority 0 [ 308.380379][ T8766] tipc: Disabling bearer [ 309.469761][ T8787] loop0: detected capacity change from 0 to 32768 [ 309.524099][ T8787] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 310.711865][ T8819] tipc: Started in network mode [ 310.717008][ T8819] tipc: Node identity eaa7eb38d066, cluster identity 4711 [ 310.779609][ T8819] tipc: Enabled bearer , priority 0 [ 310.924487][ T8818] tipc: Disabling bearer [ 310.975561][ T4444] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 311.207918][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 311.276316][ T8847] Set syz1 is full, maxelem 65536 reached [ 312.815308][ T8872] tipc: Enabled bearer , priority 0 [ 312.857456][ T8855] loop2: detected capacity change from 0 to 32768 [ 312.870866][ T8874] loop5: detected capacity change from 0 to 736 [ 312.878067][ T8855] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 312.899826][ T8871] tipc: Disabling bearer [ 313.134633][ T4444] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 313.266793][ T8884] Set syz1 is full, maxelem 65536 reached [ 313.626154][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 314.176782][ T8880] loop0: detected capacity change from 0 to 32768 [ 314.673383][ T8910] netlink: 'syz.2.918': attribute type 1 has an invalid length. [ 314.683157][ T8910] netlink: 'syz.2.918': attribute type 2 has an invalid length. [ 314.877565][ T8913] tipc: Enabled bearer , priority 0 [ 314.969184][ T8898] loop1: detected capacity change from 0 to 40427 [ 314.985447][ T8898] F2FS-fs (loop1): invalid crc value [ 315.029413][ T8898] F2FS-fs (loop1): Found nat_bits in checkpoint [ 315.168970][ T8912] tipc: Disabling bearer [ 315.307628][ T8898] F2FS-fs (loop1): Start checkpoint disabled! [ 315.347332][ T8898] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 315.758939][ T75] kworker/u4:4: attempt to access beyond end of device [ 315.758939][ T75] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 317.210063][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.216429][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.785836][ T8955] loop2: detected capacity change from 0 to 2048 [ 317.843094][ T8955] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 317.856450][ T8955] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.968667][ T8947] loop5: detected capacity change from 0 to 32768 [ 318.040249][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 318.724141][ T8942] loop0: detected capacity change from 0 to 32768 [ 319.433250][ T8976] loop2: detected capacity change from 0 to 736 [ 321.108817][ T8998] loop1: detected capacity change from 0 to 2048 [ 321.322489][ T8998] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 321.388524][ T8998] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.569429][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 321.833370][ T9019] loop1: detected capacity change from 0 to 512 [ 321.876075][ T9019] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 321.973028][ T9019] EXT4-fs (loop1): 1 truncate cleaned up [ 321.992105][ T9023] Set syz1 is full, maxelem 6117 reached [ 322.010956][ T9019] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 322.058618][ T9009] loop3: detected capacity change from 0 to 32768 [ 322.253303][ T9005] loop5: detected capacity change from 0 to 32768 [ 322.268783][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 324.429192][ T9043] loop2: detected capacity change from 0 to 2048 [ 324.514648][ T9047] loop1: detected capacity change from 0 to 128 [ 324.573908][ T9043] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 324.629241][ T9034] loop3: detected capacity change from 0 to 1024 [ 324.645988][ T9043] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.715160][ T9034] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 324.801124][ T9047] syz.1.961: attempt to access beyond end of device [ 324.801124][ T9047] loop1: rw=2049, sector=145, nr_sectors = 480 limit=128 [ 324.843213][ T9047] syz.1.961: attempt to access beyond end of device [ 324.843213][ T9047] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 324.869783][ T9047] syz.1.961: attempt to access beyond end of device [ 324.869783][ T9047] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 325.024028][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 325.038261][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 325.814588][ T9075] tipc: Enabling of bearer rejected, failed to enable media [ 326.026542][ T9062] loop2: detected capacity change from 0 to 32768 [ 326.464454][ T9093] netlink: 104 bytes leftover after parsing attributes in process `syz.1.974'. [ 327.300642][ T9114] loop2: detected capacity change from 0 to 736 [ 327.393825][ T9122] netlink: 104 bytes leftover after parsing attributes in process `syz.0.988'. [ 327.629967][ T9125] loop5: detected capacity change from 0 to 1024 [ 327.682996][ T9127] tipc: Enabling of bearer rejected, failed to enable media [ 327.755740][ T9125] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 328.018115][ T4683] EXT4-fs (loop5): unmounting filesystem. [ 328.309497][ T9117] loop3: detected capacity change from 0 to 32768 [ 329.300807][ T9165] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1001'. [ 330.579074][ T9169] loop2: detected capacity change from 0 to 32768 [ 330.608385][ T9169] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1000 (9169) [ 330.639485][ T9169] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 330.652528][ T9169] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 330.662503][ T9169] BTRFS info (device loop2): force clearing of disk cache [ 330.670043][ T9169] BTRFS info (device loop2): metadata ratio 0 [ 330.676165][ T9169] BTRFS info (device loop2): enabling ssd optimizations [ 330.683557][ T9169] BTRFS info (device loop2): using spread ssd allocation scheme [ 330.707274][ T9169] BTRFS info (device loop2): using free space tree [ 330.776129][ T9190] tipc: Enabling of bearer rejected, failed to enable media [ 331.004794][ T9208] random: crng reseeded on system resumption [ 331.066613][ T9169] BTRFS info (device loop2): rebuilding free space tree [ 331.205609][ T26] audit: type=1800 audit(1773219397.449:21): pid=9169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1000" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 331.437594][ T4280] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 331.730087][ T9187] loop5: detected capacity change from 0 to 32768 [ 332.320471][ T4444] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop2 scanned by udevd (4444) [ 333.254767][ T9234] device syzkaller0 entered promiscuous mode [ 333.273409][ T9233] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1013'. [ 334.337510][ T9241] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1014'. [ 334.632974][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1017'. [ 335.006669][ T9261] loop2: detected capacity change from 0 to 1024 [ 335.045399][ T9260] loop5: detected capacity change from 0 to 736 [ 335.162310][ T9261] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 335.469833][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 335.524524][ T9257] loop3: detected capacity change from 0 to 32768 [ 335.566824][ T9257] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 336.673005][ T4366] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 336.803734][ T9280] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1027'. [ 337.154170][ T9282] random: crng reseeded on system resumption [ 338.516501][ T9298] loop0: detected capacity change from 0 to 512 [ 338.542482][ T9298] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 338.624109][ T9302] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1032'. [ 338.650836][ T9298] EXT4-fs (loop0): 1 truncate cleaned up [ 338.666284][ T9298] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 338.980772][ T9309] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.995782][ T9309] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.749502][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 339.814824][ T9140] Set syz1 is full, maxelem 65536 reached [ 340.044885][ T9319] loop0: detected capacity change from 0 to 736 [ 340.132242][ T9321] tipc: Enabling of bearer rejected, failed to enable media [ 341.961063][ T9313] loop5: detected capacity change from 0 to 32768 [ 342.150552][ T9313] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 343.155934][ T9359] loop3: detected capacity change from 0 to 128 [ 343.312575][ T4444] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 343.390215][ T9367] syz.3.1048: attempt to access beyond end of device [ 343.390215][ T9367] loop3: rw=2049, sector=145, nr_sectors = 472 limit=128 [ 343.522722][ T9367] syz.3.1048: attempt to access beyond end of device [ 343.522722][ T9367] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 343.541036][ T9370] loop5: detected capacity change from 0 to 736 [ 343.588563][ T9367] syz.3.1048: attempt to access beyond end of device [ 343.588563][ T9367] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 343.734914][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 343.857141][ T9376] tipc: Enabling of bearer rejected, failed to enable media [ 343.924131][ T9355] loop2: detected capacity change from 0 to 32768 [ 346.962935][ T9416] loop1: detected capacity change from 0 to 736 [ 347.235308][ T9391] loop0: detected capacity change from 0 to 32768 [ 347.273568][ T9391] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 348.195791][ T9433] tipc: Enabling of bearer rejected, failed to enable media [ 348.340353][ T4366] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 349.759233][ T9463] loop3: detected capacity change from 0 to 736 [ 349.811464][ T4444] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 351.326832][ T9488] tipc: Enabling of bearer rejected, failed to enable media [ 353.077011][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1095'. [ 353.100532][ T9521] device hsr_slave_0 left promiscuous mode [ 353.117519][ T9521] device hsr_slave_1 left promiscuous mode [ 354.756657][ T9535] capability: warning: `syz.1.1100' uses deprecated v2 capabilities in a way that may be insecure [ 355.899473][ T9552] tipc: Enabling of bearer rejected, failed to enable media [ 357.669067][ T9587] loop1: detected capacity change from 0 to 1024 [ 357.697742][ T9587] EXT4-fs: Ignoring removed oldalloc option [ 357.703912][ T9587] ext2: Unknown parameter 'smackfsdef' [ 357.744594][ T9594] program syz.5.1117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.248811][ T9605] tipc: Enabling of bearer rejected, failed to enable media [ 358.320205][ T9607] random: crng reseeded on system resumption [ 359.535369][ T4588] hid-generic 0080:0005:FFFFFFFE.0001: unknown main item tag 0x0 [ 359.578154][ T4588] hid-generic 0080:0005:FFFFFFFE.0001: unknown main item tag 0x0 [ 359.682531][ T4588] hid-generic 0080:0005:FFFFFFFE.0001: hidraw0: HID v0.03 Device [syz0] on syz1 [ 359.953913][ T9625] fido_id[9625]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 360.287046][ T9641] loop0: detected capacity change from 0 to 1024 [ 360.366753][ T9641] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 360.454566][ T9650] loop1: detected capacity change from 0 to 1024 [ 360.524154][ T9651] tipc: Enabling of bearer rejected, failed to enable media [ 360.544243][ T9650] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 360.558309][ T9650] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.644174][ T9650] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 3: comm syz.1.1137: lblock 3 mapped to illegal pblock 3 (length 3) [ 360.660651][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 360.735822][ T9650] EXT4-fs (loop1): Remounting filesystem read-only [ 361.054537][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 361.109243][ T9670] netlink: 'syz.5.1140': attribute type 10 has an invalid length. [ 361.142115][ T9670] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1140'. [ 361.157039][ T9670] device  entered promiscuous mode [ 361.163444][ T9670] bridge0: port 3() entered blocking state [ 361.197703][ T9670] bridge0: port 3() entered disabled state [ 362.908749][ T9702] loop0: detected capacity change from 0 to 1024 [ 363.039212][ T9702] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 363.128362][ T9702] ================================================================== [ 363.136506][ T9702] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x965/0x1e90 [ 363.144299][ T9702] Read of size 18446744073709551588 at addr ffff888027afc840 by task syz.0.1150/9702 [ 363.153806][ T9702] [ 363.156189][ T9702] CPU: 1 PID: 9702 Comm: syz.0.1150 Not tainted syzkaller #0 [ 363.163607][ T9702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.173702][ T9702] Call Trace: [ 363.177006][ T9702] [ 363.179967][ T9702] dump_stack_lvl+0x188/0x24e [ 363.184718][ T9702] ? __lock_acquire+0x7d10/0x7d10 [ 363.189771][ T9702] ? show_regs_print_info+0x12/0x12 [ 363.195007][ T9702] ? load_image+0x400/0x400 [ 363.199535][ T9702] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 363.205020][ T9702] ? __virt_addr_valid+0x188/0x540 [ 363.210164][ T9702] ? __virt_addr_valid+0x465/0x540 [ 363.215313][ T9702] ? ext4_xattr_set_entry+0x965/0x1e90 [ 363.220798][ T9702] print_report+0xa8/0x210 [ 363.225245][ T9702] kasan_report+0x10b/0x140 [ 363.229783][ T9702] ? ext4_xattr_set_entry+0x965/0x1e90 [ 363.235277][ T9702] ? ext4_xattr_set_entry+0x965/0x1e90 [ 363.240766][ T9702] kasan_check_range+0x235/0x290 [ 363.245741][ T9702] ? ext4_xattr_set_entry+0x965/0x1e90 [ 363.251228][ T9702] memmove+0x25/0x60 [ 363.255149][ T9702] ext4_xattr_set_entry+0x965/0x1e90 [ 363.260477][ T9702] ext4_xattr_block_set+0xae4/0x32b0 [ 363.265784][ T9702] ? ext4_destroy_inode+0x200/0x200 [ 363.271013][ T9702] ? proc_nr_inodes+0x2f0/0x2f0 [ 363.275896][ T9702] ? _raw_spin_unlock+0x24/0x40 [ 363.280770][ T9702] ? iput+0x768/0x980 [ 363.284781][ T9702] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 363.290299][ T9702] ? ext4_xattr_ibody_set+0x509/0x690 [ 363.295699][ T9702] ext4_xattr_set_handle+0xe3b/0x1570 [ 363.301136][ T9702] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 363.307152][ T9702] ext4_xattr_set+0x242/0x320 [ 363.311867][ T9702] ? end_current_label_crit_section+0x170/0x170 [ 363.318140][ T9702] ? ext4_xattr_set_credits+0x290/0x290 [ 363.323716][ T9702] ? evm_protect_xattr+0x7e9/0x9d0 [ 363.328854][ T9702] ? ext4_xattr_security_get+0x40/0x40 [ 363.334354][ T9702] __vfs_setxattr+0x3e0/0x420 [ 363.339074][ T9702] __vfs_setxattr_noperm+0x129/0x5e0 [ 363.344400][ T9702] vfs_setxattr+0x167/0x2e0 [ 363.348964][ T9702] ? xattr_permission+0x500/0x500 [ 363.354031][ T9702] ? _copy_from_user+0x10b/0x170 [ 363.359003][ T9702] ? setxattr+0x2ce/0x360 [ 363.363372][ T9702] setxattr+0x346/0x360 [ 363.367579][ T9702] ? path_setxattr+0x290/0x290 [ 363.372382][ T9702] ? __mnt_want_write+0x21f/0x2a0 [ 363.377441][ T9702] path_setxattr+0x147/0x290 [ 363.382065][ T9702] ? simple_xattr_list_add+0xf0/0xf0 [ 363.387406][ T9702] ? lock_chain_count+0x20/0x20 [ 363.392298][ T9702] __x64_sys_setxattr+0xb7/0xd0 [ 363.397183][ T9702] do_syscall_64+0x4c/0xa0 [ 363.401683][ T9702] ? clear_bhb_loop+0x60/0xb0 [ 363.406486][ T9702] ? clear_bhb_loop+0x60/0xb0 [ 363.411196][ T9702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.417129][ T9702] RIP: 0033:0x7f01b1b9c799 [ 363.421589][ T9702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.441305][ T9702] RSP: 002b:00007f01b2ab5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 363.449748][ T9702] RAX: ffffffffffffffda RBX: 00007f01b1e15fa0 RCX: 00007f01b1b9c799 [ 363.457751][ T9702] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 363.465919][ T9702] RBP: 00007f01b1c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 363.473919][ T9702] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 363.481910][ T9702] R13: 00007f01b1e16038 R14: 00007f01b1e15fa0 R15: 00007ffe93f35e58 [ 363.490005][ T9702] [ 363.493041][ T9702] [ 363.495391][ T9702] Allocated by task 9702: [ 363.499741][ T9702] kasan_set_track+0x4b/0x70 [ 363.504368][ T9702] __kasan_kmalloc+0x8e/0xa0 [ 363.508980][ T9702] __kmalloc_node_track_caller+0xae/0x230 [ 363.514732][ T9702] kmemdup+0x27/0x60 [ 363.518654][ T9702] ext4_xattr_block_set+0x9e6/0x32b0 [ 363.523993][ T9702] ext4_xattr_set_handle+0xe3b/0x1570 [ 363.529402][ T9702] ext4_xattr_set+0x242/0x320 [ 363.534118][ T9702] __vfs_setxattr+0x3e0/0x420 [ 363.538818][ T9702] __vfs_setxattr_noperm+0x129/0x5e0 [ 363.544126][ T9702] vfs_setxattr+0x167/0x2e0 [ 363.548657][ T9702] setxattr+0x346/0x360 [ 363.552838][ T9702] path_setxattr+0x147/0x290 [ 363.557458][ T9702] __x64_sys_setxattr+0xb7/0xd0 [ 363.562337][ T9702] do_syscall_64+0x4c/0xa0 [ 363.566785][ T9702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.572698][ T9702] [ 363.575041][ T9702] Last potentially related work creation: [ 363.580767][ T9702] kasan_save_stack+0x3a/0x60 [ 363.585470][ T9702] __kasan_record_aux_stack+0xb2/0xc0 [ 363.590867][ T9702] kvfree_call_rcu+0x103/0x870 [ 363.595668][ T9702] neigh_periodic_work+0x3f3/0xd70 [ 363.600804][ T9702] process_one_work+0x8a2/0x1160 [ 363.605765][ T9702] worker_thread+0xaa2/0x1270 [ 363.610467][ T9702] kthread+0x29d/0x330 [ 363.614553][ T9702] ret_from_fork+0x1f/0x30 [ 363.619001][ T9702] [ 363.621347][ T9702] The buggy address belongs to the object at ffff888027afc800 [ 363.621347][ T9702] which belongs to the cache kmalloc-1k of size 1024 [ 363.635419][ T9702] The buggy address is located 64 bytes inside of [ 363.635419][ T9702] 1024-byte region [ffff888027afc800, ffff888027afcc00) [ 363.648715][ T9702] [ 363.651056][ T9702] The buggy address belongs to the physical page: [ 363.657490][ T9702] page:ffffea00009ebe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27af8 [ 363.667661][ T9702] head:ffffea00009ebe00 order:3 compound_mapcount:0 compound_pincount:0 [ 363.675996][ T9702] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 363.684005][ T9702] raw: 00fff00000010200 ffffea00015b2000 dead000000000002 ffff888017441dc0 [ 363.692611][ T9702] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 363.701210][ T9702] page dumped because: kasan: bad access detected [ 363.707644][ T9702] page_owner tracks the page as allocated [ 363.713369][ T9702] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9, tgid 9 (kworker/u4:0), ts 10290454354, free_ts 0 [ 363.731799][ T9702] post_alloc_hook+0x173/0x1a0 [ 363.736592][ T9702] get_page_from_freelist+0x1a1e/0x1ab0 [ 363.742166][ T9702] __alloc_pages+0x1ec/0x4f0 [ 363.746794][ T9702] alloc_slab_page+0x4f/0x160 [ 363.751494][ T9702] new_slab+0x87/0x2c0 [ 363.755581][ T9702] ___slab_alloc+0xbc6/0x1240 [ 363.760275][ T9702] __kmem_cache_alloc_node+0x1a0/0x260 [ 363.765748][ T9702] __kmalloc_node+0xa0/0x240 [ 363.770380][ T9702] blk_alloc_flush_queue+0xdd/0x250 [ 363.775703][ T9702] blk_mq_alloc_and_init_hctx+0x7f9/0xd70 [ 363.781453][ T9702] blk_mq_realloc_hw_ctxs+0x183/0x420 [ 363.786850][ T9702] blk_mq_init_allocated_queue+0x566/0x17a0 [ 363.792775][ T9702] blk_mq_init_queue+0xa5/0x120 [ 363.797651][ T9702] scsi_alloc_sdev+0x70e/0xae0 [ 363.802443][ T9702] scsi_probe_and_add_lun+0x1a1/0x44b0 [ 363.807925][ T9702] __scsi_scan_target+0x1d4/0x1050 [ 363.813060][ T9702] page_owner free stack trace missing [ 363.818441][ T9702] [ 363.820779][ T9702] Memory state around the buggy address: [ 363.826417][ T9702] ffff888027afc700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 363.834512][ T9702] ffff888027afc780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 363.842690][ T9702] >ffff888027afc800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.850774][ T9702] ^ [ 363.856959][ T9702] ffff888027afc880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.865048][ T9702] ffff888027afc900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.873130][ T9702] ================================================================== [ 363.952186][ T9702] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 363.959463][ T9702] CPU: 1 PID: 9702 Comm: syz.0.1150 Not tainted syzkaller #0 [ 363.966885][ T9702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.976984][ T9702] Call Trace: [ 363.980304][ T9702] [ 363.983267][ T9702] dump_stack_lvl+0x188/0x24e [ 363.988008][ T9702] ? memcpy+0x3c/0x60 [ 363.992059][ T9702] ? show_regs_print_info+0x12/0x12 [ 363.997320][ T9702] ? load_image+0x400/0x400 [ 364.001914][ T9702] panic+0x2e5/0x730 [ 364.005852][ T9702] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 364.012057][ T9702] ? bpf_jit_dump+0xd0/0xd0 [ 364.016602][ T9702] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 364.022629][ T9702] ? _raw_spin_unlock+0x40/0x40 [ 364.027520][ T9702] check_panic_on_warn+0x80/0xa0 [ 364.032505][ T9702] ? ext4_xattr_set_entry+0x965/0x1e90 [ 364.038012][ T9702] end_report+0x66/0x110 [ 364.042304][ T9702] kasan_report+0x118/0x140 [ 364.046858][ T9702] ? ext4_xattr_set_entry+0x965/0x1e90 [ 364.052406][ T9702] ? ext4_xattr_set_entry+0x965/0x1e90 [ 364.057927][ T9702] kasan_check_range+0x235/0x290 [ 364.062934][ T9702] ? ext4_xattr_set_entry+0x965/0x1e90 [ 364.068449][ T9702] memmove+0x25/0x60 [ 364.072391][ T9702] ext4_xattr_set_entry+0x965/0x1e90 [ 364.077776][ T9702] ext4_xattr_block_set+0xae4/0x32b0 [ 364.083118][ T9702] ? ext4_destroy_inode+0x200/0x200 [ 364.088383][ T9702] ? proc_nr_inodes+0x2f0/0x2f0 [ 364.093303][ T9702] ? _raw_spin_unlock+0x24/0x40 [ 364.098201][ T9702] ? iput+0x768/0x980 [ 364.102247][ T9702] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 364.107750][ T9702] ? ext4_xattr_ibody_set+0x509/0x690 [ 364.113183][ T9702] ext4_xattr_set_handle+0xe3b/0x1570 [ 364.118618][ T9702] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 364.124661][ T9702] ext4_xattr_set+0x242/0x320 [ 364.129390][ T9702] ? end_current_label_crit_section+0x170/0x170 [ 364.135704][ T9702] ? ext4_xattr_set_credits+0x290/0x290 [ 364.141311][ T9702] ? evm_protect_xattr+0x7e9/0x9d0 [ 364.146481][ T9702] ? ext4_xattr_security_get+0x40/0x40 [ 364.151996][ T9702] __vfs_setxattr+0x3e0/0x420 [ 364.156733][ T9702] __vfs_setxattr_noperm+0x129/0x5e0 [ 364.162080][ T9702] vfs_setxattr+0x167/0x2e0 [ 364.166650][ T9702] ? xattr_permission+0x500/0x500 [ 364.171728][ T9702] ? _copy_from_user+0x10b/0x170 [ 364.176716][ T9702] ? setxattr+0x2ce/0x360 [ 364.181123][ T9702] setxattr+0x346/0x360 [ 364.185345][ T9702] ? path_setxattr+0x290/0x290 [ 364.190183][ T9702] ? __mnt_want_write+0x21f/0x2a0 [ 364.195283][ T9702] path_setxattr+0x147/0x290 [ 364.200035][ T9702] ? simple_xattr_list_add+0xf0/0xf0 [ 364.205646][ T9702] ? lock_chain_count+0x20/0x20 [ 364.210564][ T9702] __x64_sys_setxattr+0xb7/0xd0 [ 364.215478][ T9702] do_syscall_64+0x4c/0xa0 [ 364.219946][ T9702] ? clear_bhb_loop+0x60/0xb0 [ 364.224695][ T9702] ? clear_bhb_loop+0x60/0xb0 [ 364.229424][ T9702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.235384][ T9702] RIP: 0033:0x7f01b1b9c799 [ 364.239851][ T9702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.259631][ T9702] RSP: 002b:00007f01b2ab5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 364.268092][ T9702] RAX: ffffffffffffffda RBX: 00007f01b1e15fa0 RCX: 00007f01b1b9c799 [ 364.276102][ T9702] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 364.284121][ T9702] RBP: 00007f01b1c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 364.292130][ T9702] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 364.300137][ T9702] R13: 00007f01b1e16038 R14: 00007f01b1e15fa0 R15: 00007ffe93f35e58 [ 364.308155][ T9702] [ 364.311825][ T9702] Kernel Offset: disabled [ 364.316166][ T9702] Rebooting in 86400 seconds..