last executing test programs: 4m52.095060625s ago: executing program 4 (id=823): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400ff03000040000000df2502180000", @ANYRES32=r1, @ANYBLOB="08000100ac1414bb0800090007002000080002"], 0x48}, 0x1, 0x0, 0x0, 0x4044814}, 0x80) 4m51.948730139s ago: executing program 4 (id=825): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) writev(r0, &(0x7f0000003400)=[{&(0x7f00000020c0)="2890d1", 0x3}, {&(0x7f0000002180)="6f661ecd27910ad4518ec8c386249ed938fcb17093900b101d8b20340e85088b", 0x20}], 0x2) 4m51.746605163s ago: executing program 4 (id=827): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x7fff, 0x7, 0x3, 0x3, 0x2800, 0x2803, 0x9, 0x5, 0xc, 0x2d, {0x8, 0xfffffff7}, 0xd1, 0x9}}) 4m51.581096597s ago: executing program 4 (id=829): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4m50.605551528s ago: executing program 4 (id=835): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r1, @ANYBLOB="cd3e0000000000000000010000000800020004f80000ce0001"], 0x100}}, 0x0) 4m49.60580598s ago: executing program 4 (id=841): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7f, 0x0) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) 4m49.103352092s ago: executing program 32 (id=841): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7f, 0x0) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) 4m45.291046696s ago: executing program 2 (id=872): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000600)={'8255\x00', [0x4f27, 0x2, 0x3, 0xc466, 0x4, 0xcc7, 0xc9, 0x5c952399, 0x5, 0x1000, 0x802, 0x1607, 0x1, 0x6, 0xc, 0x81, 0x6fd5, 0x4, 0x3ff, 0x2, 0x8, 0x0, 0x0, 0xfffffff5, 0x475c, 0x3, 0x10002, 0x8, 0x0, 0x7fffffe, 0x6]}) 4m44.765102037s ago: executing program 2 (id=877): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x11, 0x1a3, &(0x7f0000000440)="$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") open$dir(&(0x7f0000000000)='./file1\x00', 0x101000, 0x0) 4m43.177232623s ago: executing program 2 (id=887): r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000180)=[{0x0, 0xffff}, {0x1, 0xffff, 0x1800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0x4]) 4m42.907981348s ago: executing program 2 (id=889): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 4m42.686344903s ago: executing program 2 (id=892): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0xde, 0x0, 0x0, 0x2, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x100, 0x1001, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x10000002, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000004000000e00000020000000000000000000000000000000000000000000000000000a100d705000000000000020010"], 0xb8}, 0x1, 0x0, 0x0, 0x24004811}, 0x2c000010) 4m41.177834917s ago: executing program 2 (id=904): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000012, &(0x7f0000001380)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="926781b3612371cf228f5ae8feafcd90871ac7c0385e4b89ae6b885b4d93", @ANYRESDEC], 0x1, 0x700, &(0x7f0000000c80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 4m40.906142382s ago: executing program 33 (id=904): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000012, &(0x7f0000001380)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="926781b3612371cf228f5ae8feafcd90871ac7c0385e4b89ae6b885b4d93", @ANYRESDEC], 0x1, 0x700, &(0x7f0000000c80)="$eJzs3cFvHGfdB/DvrNeON2+VOm3yNkJBmEQqSBGJEyuFcMEghHKoUFUOPVuJ01jZJFXiorRC1AUEJyQO/QMKkm8cEBL3oHDhUm69+lgJiUvEIepl0czOrnft3cSOHTuBzycazzPzPPPMb3/zzIx3ndUE+J91+Uya91Pk8pk375XL62vz7fW1+UN1dTtJWW4kze4sxa2keJAslPXFwJSB+RafLF96+/OH6190l5r1VLWfeNx2I4xou1pPma37mx255eR2d7Fah5eXklyp58OmttvXUMMyaafrORy4zrBGOqs72Xwn5y3wnOndnYrufXOLmeRwkun694DUV4fG/kW4p77eK+zoKgcAAAAvqM9uH3QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OKpnv/f6i82uquS2RS95/9P9dbV5efQwrZb3n+mcQAAAAAAAADA/vjaozzKvRwpy5NJOkX1N/9TVeWxfNlJ/i/v526Wcidncy+LWclK7uR8kpmBjqbuLa6s3Dnf37I0essLI7e8sJ+vGgAAAAAAAAD+W/T/BP+LtLp//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOdFkUx0Z9V0rJ5nJo1mNuqymvwjydRBx7sDxaiV9/c/DgAAANiV6afY5uVHeZR7OdJb7hTVe/7/r94vT+f93MpKlrOSdpZytX4PXb7rb6yvzbfX1+ZvllO5PNzv9/+1ozCm6h4mqqVRez5RtWjlWparNWdzpQrmahrdfZ9OTvTiGYhrwMdlTMX3atuMrFmntdzZ78Z9irAnhj6K+KjxmJatjeCSfkbm6tjKLY92M1BUH9QkmzOx+ehs2VlzaGmmajLZ39P5NPqf/Bx7Bjk/XM/L1/PrZ5rz7RjMRT8TjVSZuNAbfeU58/hMJN/4yx/fud6+deP6tbtnDvYl7cDEmPWbx8T8QCZee6Ez0dxh+7kqE8f7y5fzo/wkZzKbt3Iny/lpFrOSpXTq+sV6PJc/Zx6fqYWhpbeeFMlUfVy6x2w7Mc3mh1VpMaeqbY9kOUVu52qW8kb170LO59u5mIu5NHCEj4+Nu3pt1Vnf2HzW9470X0cGf/qbdaG8uv1m4yq3sLVp//o3dnTule61v8zr0YG8dkf9w36rowPnwdxAll7pZWdyZOdPc21sfqUulPv45ahL94GZqTNRnkC9u0Qvule7mWhW96Kt4/z3nXK7tG91OtcX3xvT/+qm5dfreTms1r76pNY9Iw5FZ69HUTleXsl0fSUZHh1l3av9q8xA3UAU3brhO2653fGqrih6Z+qPc7saAFvP1Kn6d7itPV2o6l7bVHeyvoaXdScG6oZ+38rttHN1j3MFwF75+zv94kwOT7X+2fqs9WnrV63rrTenf3DoO4dOTmXyb5Pfbc5NvN44Wfw5n+bnG+//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAp3f3gw9vLLbbS3dGFxrjq4YKrWxe86SeNxWK+oE+o9rcqJ9SsKMOD7gwnWRoTfWco9323KkfpbXtrVpPbNz5KNn3/PQeIji6zW/LQnP4cDcyssOFoTV/2trhx0+OZyKbxuE2zotnWBjzSndb6Lw8ZiRMZPQAOJDLEbCPzq3cfO/c3Q8+/NbyzcV3l95dujV58eKluUsX35g/d225vTTX/XnQUQLPwsZN/6AjAQAAAAAAAAAAALZr1FcFTr20g2+YdAuNJJu/4+F/FgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB74vKZNO+nyPm5s3Pl8vrafLuceuWNls0kjUZS/CwpHiQL6U6ZGeiuyB8epDNiP58sX3r784frX2z01ey2Txr1fLwxtZ2JXmm1njKbZKKe78JQf1d23V/x795rKBP2ZafTWdhdfLA3/hMAAP//CovsFQ==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 2m28.986235108s ago: executing program 1 (id=2057): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="31032abd70000700df250b80000008000300ad"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) 2m28.699459984s ago: executing program 1 (id=2069): r0 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) 2m28.509818959s ago: executing program 1 (id=2061): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m28.293682523s ago: executing program 1 (id=2064): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@noquota}, {@init_itable}, {@sysvgroups}, {@block_validity}, {@bsdgroups}]}, 0x1, 0x4b9, &(0x7f0000000a80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 2m28.071070418s ago: executing program 1 (id=2066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0303000000000000000006000000040003"], 0x1c}}, 0x0) 2m27.08175705s ago: executing program 1 (id=2076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfefffff8}]}]}, 0x38}}, 0x0) 2m26.542457892s ago: executing program 34 (id=2076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfefffff8}]}]}, 0x38}}, 0x0) 58.859727049s ago: executing program 0 (id=2745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x239, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) 58.492195858s ago: executing program 0 (id=2747): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) 58.236922263s ago: executing program 0 (id=2749): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x8, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x0, @in=@multicast1, 0x3507}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x32}, {0x0, 0x0, 0x100000000, 0x6, 0x3, 0x0, 0x200000, 0x2}, {0x0, 0x0, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc}}, 0xe8) 58.047128877s ago: executing program 0 (id=2750): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000002480)=ANY=[@ANYBLOB='volume=00000000000000000062,gid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x1, 0xc32, &(0x7f0000000e00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 57.093922339s ago: executing program 0 (id=2756): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_map={0x1000000000004}}) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) 56.281734826s ago: executing program 0 (id=2762): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x81, 0x3) 55.67497157s ago: executing program 35 (id=2762): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x81, 0x3) 6.624234494s ago: executing program 7 (id=3191): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, 0xfffffffffffffffd, 0xbb) 6.034269667s ago: executing program 7 (id=3198): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000600)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @dstaddrv6={0x20, 0x84, 0x8, @private0}], 0x58, 0x4855}, 0x24000052) 5.635350835s ago: executing program 7 (id=3201): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.187147388s ago: executing program 6 (id=3219): r0 = socket(0x40000000015, 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) 4.05047969s ago: executing program 6 (id=3220): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800001, &(0x7f0000000100)=ANY=[], 0xff, 0x249, &(0x7f0000000500)="$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") setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 3.313784687s ago: executing program 6 (id=3224): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000002c0)={[{@abort}, {@noblock_validity}, {@grpquota}, {@errors_remount}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x6, 0x60d, &(0x7f0000000340)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) lseek(r0, 0xff, 0x4) 3.251867768s ago: executing program 5 (id=3225): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl726\x00', [0x800, 0x1f, 0x10000, 0x4, 0x3, 0xcc7, 0x4, 0x10, 0x4000000e, 0x4, 0x2, 0x2, 0x2000007, 0x1, 0x6, 0x10000105, 0x0, 0x1244d, 0x3, 0x3fff7fff, 0x89, 0x10, 0x1, 0x20001e58, 0x80000b, 0xe6c, 0x8, 0x8, 0x6, 0xffffffff, 0xeffffffb]}) 2.877745217s ago: executing program 5 (id=3227): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_dellink={0x20, 0x13, 0x5, 0x2000, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x5000, 0x1952}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.750326999s ago: executing program 8 (id=3228): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x800000, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40186e8d, &(0x7f0000000040)={0x83, 0x2, 0x400, 0x9, 0x5, 0xb, 0x2401}) 2.574286763s ago: executing program 5 (id=3229): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') read$alg(r0, &(0x7f0000000c00)=""/4096, 0x1000) preadv(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/157, 0x9d}], 0x1, 0xfffffff9, 0xffffffff) 2.504898825s ago: executing program 3 (id=3230): r0 = socket(0x40000000015, 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) 2.321717269s ago: executing program 7 (id=3231): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x17}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) 2.180001432s ago: executing program 3 (id=3232): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000120005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e00080077617265677561726400000004"], 0x38}}, 0x0) 2.154586332s ago: executing program 5 (id=3234): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r0) 1.82357116s ago: executing program 3 (id=3235): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1.785961471s ago: executing program 5 (id=3236): r0 = socket(0x400000000010, 0x3, 0x0) r1 = getpid() sendmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="ee", 0x1}], 0x1, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}, @rights={{0x10}}], 0x30}}], 0x1, 0x20001040) 1.702021242s ago: executing program 7 (id=3237): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8d, 0x156, 0x1, 0x2, 0xd59f80, 0x19f5, 0x4, 0x19ef, 0x40000003, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0xf, 0x7, {0xb, 0xffffffff}, 0xcd, 0x27}}) 1.499525067s ago: executing program 3 (id=3238): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0xc41, 0x0) 1.481309387s ago: executing program 5 (id=3239): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x443e, &(0x7f0000008940)="$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") openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x0) 1.403228639s ago: executing program 8 (id=3240): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) 1.37717651s ago: executing program 6 (id=3241): unshare(0x8040480) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, 0x0) 1.3684875s ago: executing program 7 (id=3242): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.033776177s ago: executing program 8 (id=3243): r0 = socket(0x10, 0x80002, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0xffff, 0x1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000004900010029bd7000ffdbdf250a008000", @ANYRES32, @ANYBLOB="f9ffffff080002000b000000140001"], 0x4c}}, 0x0) 1.033602477s ago: executing program 3 (id=3244): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file0\x00', 0x800810, &(0x7f0000000300)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_force}, {@flushoncommit}, {@skip_balance}, {@max_inline={'max_inline', 0x3d, [0x38, 0x31, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) pwritev2(r0, &(0x7f0000000540)=[{&(0x7f0000000640)='7', 0x1}], 0x1, 0x5412, 0x0, 0x8) 889.27257ms ago: executing program 6 (id=3245): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/17, 0x11}, 0x7}], 0x1, 0x40000022, 0x0) 734.538794ms ago: executing program 8 (id=3246): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r0) 671.745435ms ago: executing program 6 (id=3247): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x6, 0x7, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x6, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0x5, 0x28, {0x28, 0x23, "f70fa39f030000000000000000cb4fdca0560f920d54f365c5b105000000bf6fc9520808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 473.804599ms ago: executing program 8 (id=3248): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 232.258225ms ago: executing program 8 (id=3249): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=default,gid=', @ANYRESHEX=0x0, @ANYRES32=0x0], 0x1, 0x1535, &(0x7f00000034c0)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 3 (id=3250): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, &(0x7f0000000480)=""/165, 0xa5, &(0x7f00000005c0)={&(0x7f0000000540)={'xcbc(camellia-asm)\x00'}}) kernel console output (not intermixed with test programs): NGE): wlan0: link becomes ready [ 327.837019][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.856891][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.859756][ T4317] usb 7-1: Using ep0 maxpacket: 8 [ 327.871685][ T4317] usb 7-1: config 0 interface 0 has no altsetting 0 [ 327.887210][ T4317] usb 7-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 327.916083][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 327.939376][ T4317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.972813][ T4317] usb 7-1: config 0 descriptor?? [ 328.048312][T10458] Bluetooth: MGMT ver 1.22 [ 328.458262][ T4317] pantherlord 0003:0810:0002.0015: unknown main item tag 0x3 [ 328.499706][ T4317] pantherlord 0003:0810:0002.0015: item fetching failed at offset 16/40 [ 328.508665][ T4317] pantherlord 0003:0810:0002.0015: parse failed [ 328.545684][ T4317] pantherlord: probe of 0003:0810:0002.0015 failed with error -22 [ 328.742492][ T5121] usb 7-1: USB disconnect, device number 6 [ 329.081702][T10491] loop7: detected capacity change from 0 to 256 [ 329.121034][T10491] exfat: Deprecated parameter 'utf8' [ 329.213076][T10491] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 329.289438][T10493] loop5: detected capacity change from 0 to 2048 [ 329.426332][T10493] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 329.451500][T10493] EXT4-fs error (device loop5): ext4_find_extent:900: inode #2: comm syz.5.2204: inode has invalid extent depth: 8 [ 329.490381][T10493] EXT4-fs (loop5): Remounting filesystem read-only [ 329.692085][ T6563] EXT4-fs (loop5): unmounting filesystem. [ 330.115332][T10512] loop5: detected capacity change from 0 to 4096 [ 330.181462][T10512] NILFS (loop5): mounting unchecked fs [ 330.187019][T10512] NILFS (loop5): recovery required for readonly filesystem [ 330.203406][T10515] loop7: detected capacity change from 0 to 512 [ 330.214759][T10512] NILFS (loop5): write access will be enabled during recovery [ 330.293955][T10512] NILFS (loop5): invalid segment: Checksum error in segment payload [ 330.317951][T10515] EXT4-fs: Ignoring removed i_version option [ 330.359867][T10512] NILFS (loop5): trying rollback from an earlier position [ 330.361523][T10515] EXT4-fs: Ignoring removed bh option [ 330.482962][T10515] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 330.487089][T10512] NILFS (loop5): norecovery option specified, skipping roll-forward recovery [ 330.530200][T10488] loop0: detected capacity change from 0 to 40427 [ 330.553025][T10515] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 330.621271][T10488] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 330.627956][T10488] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 330.711480][T10488] F2FS-fs (loop0): invalid crc value [ 330.805918][T10499] loop3: detected capacity change from 0 to 32768 [ 330.825075][T10488] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 330.878748][T10499] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2207 (10499) [ 330.972327][T10499] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 330.986511][T10142] EXT4-fs (loop7): unmounting filesystem. [ 331.044990][T10499] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 331.099014][T10499] BTRFS info (device loop3): setting nodatasum [ 331.139860][T10499] BTRFS info (device loop3): force zlib compression, level 3 [ 331.148207][T10499] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 331.195761][T10488] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 331.222856][T10488] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 331.231501][T10499] BTRFS info (device loop3): use lzo compression, level 0 [ 331.238821][T10499] BTRFS info (device loop3): turning on flush-on-commit [ 331.263479][T10536] nbd: must specify at least one socket [ 331.305865][T10499] BTRFS info (device loop3): enabling auto defrag [ 331.343184][T10499] BTRFS info (device loop3): max_inline at 4096 [ 331.389908][T10499] BTRFS info (device loop3): using free space tree [ 331.701099][ T4275] syz-executor: attempt to access beyond end of device [ 331.701099][ T4275] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 331.796190][T10499] BTRFS info (device loop3): enabling ssd optimizations [ 332.150890][ T4280] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 333.387289][T10567] loop6: detected capacity change from 0 to 32768 [ 333.421981][T10598] syz.5.2230 (10598): /proc/10596/oom_adj is deprecated, please use /proc/10596/oom_score_adj instead. [ 333.521854][T10567] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 333.898711][ T6741] ocfs2: Unmounting device (7,6) on (node local) [ 335.360183][T10620] loop3: detected capacity change from 0 to 32768 [ 335.406177][T10625] loop5: detected capacity change from 0 to 32768 [ 335.438876][T10620] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 335.438876][T10620] [ 335.511942][T10620] read_mapping_page failed! [ 335.529690][T10620] ERROR: (device loop3): txCommit: [ 335.529690][T10620] [ 335.883307][T10630] loop6: detected capacity change from 0 to 32768 [ 336.048372][T10630] XFS (loop6): Mounting V5 Filesystem [ 336.102517][T10639] loop7: detected capacity change from 0 to 32768 [ 336.163964][T10639] XFS (loop7): Mounting V5 Filesystem [ 336.331143][T10630] XFS (loop6): Ending clean mount [ 336.348261][T10630] XFS (loop6): Quotacheck needed: Please wait. [ 336.359479][T10639] XFS (loop7): Ending clean mount [ 336.383817][T10639] XFS (loop7): Quotacheck needed: Please wait. [ 336.550782][T10630] XFS (loop6): Quotacheck: Done. [ 336.563846][T10639] XFS (loop7): Quotacheck: Done. [ 336.821023][ T6741] XFS (loop6): Unmounting Filesystem [ 336.931248][T10142] XFS (loop7): Unmounting Filesystem [ 337.170783][T10676] loop3: detected capacity change from 0 to 8192 [ 337.218523][T10676] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 337.257503][T10676] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 337.280227][T10676] REISERFS (device loop3): using ordered data mode [ 337.286918][T10676] reiserfs: using flush barriers [ 337.304790][T10676] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 337.441170][T10676] REISERFS (device loop3): checking transaction log (loop3) [ 337.717173][T10687] loop5: detected capacity change from 0 to 8192 [ 337.734619][T10676] REISERFS (device loop3): Using tea hash to sort names [ 337.745379][T10676] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 337.786103][T10687] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 337.820357][T10687] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 337.870084][T10687] REISERFS (device loop5): using ordered data mode [ 337.904581][T10687] reiserfs: using flush barriers [ 337.946088][T10687] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 338.005976][T10687] REISERFS (device loop5): checking transaction log (loop5) [ 338.053535][T10687] REISERFS (device loop5): Using r5 hash to sort names [ 338.457179][T10702] loop6: detected capacity change from 0 to 4096 [ 338.568298][T10702] NILFS (loop6): mounting unchecked fs [ 338.590857][T10702] NILFS (loop6): recovery required for readonly filesystem [ 338.629767][T10702] NILFS (loop6): write access will be enabled during recovery [ 338.652721][T10702] NILFS (loop6): invalid segment: Checksum error in segment payload [ 338.692564][T10702] NILFS (loop6): trying rollback from an earlier position [ 338.743747][T10702] NILFS (loop6): norecovery option specified, skipping roll-forward recovery [ 339.028071][T10716] loop7: detected capacity change from 0 to 128 [ 339.076150][T10716] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 339.128906][T10716] hpfs: filesystem error: improperly stopped [ 339.157801][T10716] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 339.212068][T10716] hpfs: You really don't want any checks? You are crazy... [ 339.260408][T10716] hpfs: Code page index out of array [ 339.289184][T10716] hpfs: code page support is disabled [ 339.314641][T10716] hpfs: hpfs_map_4sectors(): unaligned read [ 339.338121][T10716] hpfs: hpfs_map_4sectors(): unaligned read [ 339.365386][T10716] hpfs: filesystem error: unable to find root dir [ 339.828119][T10734] loop0: detected capacity change from 0 to 256 [ 339.886138][T10708] loop3: detected capacity change from 0 to 32768 [ 340.189714][ T4323] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 340.388554][ T4323] usb 7-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 340.414455][ T4323] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 340.475745][ T4323] usb 7-1: config 0 interface 0 has no altsetting 0 [ 340.490124][ T4323] usb 7-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 340.499318][ T4323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.556612][ T4323] usb 7-1: config 0 descriptor?? [ 340.619280][T10745] loop7: detected capacity change from 0 to 8192 [ 340.623411][T10750] loop0: detected capacity change from 0 to 512 [ 340.685795][T10745] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 340.741170][T10745] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 340.751587][T10745] REISERFS (device loop7): using ordered data mode [ 340.798596][T10745] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 340.841025][T10750] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 340.896998][T10750] ext4 filesystem being mounted at /480/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.965817][T10750] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 340.988830][T10759] netlink: 'syz.5.2279': attribute type 21 has an invalid length. [ 341.025068][ T4323] hid (null): unknown global tag 0xe [ 341.038885][T10759] IPv6: NLM_F_CREATE should be specified when creating new route [ 341.042360][ T4323] uclogic 0003:5543:0781.0016: unknown main item tag 0x3 [ 341.047251][T10745] REISERFS (device loop7): checking transaction log (loop7) [ 341.091578][ T4323] uclogic 0003:5543:0781.0016: unknown main item tag 0x6 [ 341.107331][T10759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.115596][T10759] IPv6: NLM_F_CREATE should be set when creating new route [ 341.122937][T10759] IPv6: NLM_F_CREATE should be set when creating new route [ 341.130577][T10759] IPv6: NLM_F_CREATE should be set when creating new route [ 341.133290][ T4323] uclogic 0003:5543:0781.0016: unknown main item tag 0x0 [ 341.153591][T10763] netlink: 'syz.5.2279': attribute type 21 has an invalid length. [ 341.165027][T10763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.172650][T10745] REISERFS (device loop7): Using r5 hash to sort names [ 341.185805][ T4323] uclogic 0003:5543:0781.0016: unknown main item tag 0x0 [ 341.190133][T10745] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 341.251470][T10745] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 341.268364][ T4323] uclogic 0003:5543:0781.0016: unknown main item tag 0x0 [ 341.275597][ T4323] uclogic 0003:5543:0781.0016: unknown main item tag 0x0 [ 341.315238][ T4323] uclogic 0003:5543:0781.0016: unknown global tag 0xe [ 341.350252][ T4323] uclogic 0003:5543:0781.0016: item 0 4 1 14 parsing failed [ 341.358196][ T4323] uclogic 0003:5543:0781.0016: parse failed [ 341.399792][ T4323] uclogic: probe of 0003:5543:0781.0016 failed with error -22 [ 341.445294][ T4323] usb 7-1: USB disconnect, device number 7 [ 341.489204][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 341.795102][T10774] loop7: detected capacity change from 0 to 512 [ 342.195533][T10768] loop5: detected capacity change from 0 to 32768 [ 342.266952][T10768] ERROR: (device loop5): dbAlloc: the hint is outside the map [ 342.266952][T10768] [ 342.298157][T10768] read_mapping_page failed! [ 342.307626][T10768] ERROR: (device loop5): txCommit: [ 342.307626][T10768] [ 342.791721][T10778] loop6: detected capacity change from 0 to 32768 [ 342.809350][T10778] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2285 (10778) [ 342.849321][T10778] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 342.858037][T10782] loop7: detected capacity change from 0 to 32768 [ 342.884250][T10778] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 342.900669][T10778] BTRFS info (device loop6): setting nodatasum [ 342.915924][T10778] BTRFS info (device loop6): force zlib compression, level 3 [ 342.924145][T10778] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 342.946916][T10778] BTRFS info (device loop6): use lzo compression, level 0 [ 342.989573][T10778] BTRFS info (device loop6): turning on flush-on-commit [ 343.016962][T10778] BTRFS info (device loop6): enabling auto defrag [ 343.042028][T10778] BTRFS info (device loop6): max_inline at 4096 [ 343.060030][T10778] BTRFS info (device loop6): using free space tree [ 343.157591][T10788] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 343.340844][T10778] BTRFS info (device loop6): enabling ssd optimizations [ 343.430237][T10788] exFAT-fs (loop5): IO charset mʵÁ×WÂÄ¢«: not found [ 343.520421][ T26] audit: type=1326 audit(1784348200.997:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.5.2299" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed459de99 code=0x7ffc0000 [ 343.598386][ T26] audit: type=1326 audit(1784348200.997:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.5.2299" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed459de99 code=0x7ffc0000 [ 343.665540][ T6741] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 343.699686][ T26] audit: type=1326 audit(1784348200.997:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.5.2299" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f8ed459de99 code=0x7ffc0000 [ 343.797114][ T26] audit: type=1326 audit(1784348200.997:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.5.2299" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed459de99 code=0x7ffc0000 [ 343.910935][ T26] audit: type=1326 audit(1784348200.997:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.5.2299" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed459de99 code=0x7ffc0000 [ 344.050242][T10813] set_capacity_and_notify: 1 callbacks suppressed [ 344.050259][T10813] loop7: detected capacity change from 0 to 8192 [ 344.154693][T10813] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 344.209790][T10813] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 344.232345][T10813] REISERFS (device loop7): using ordered data mode [ 344.238921][T10813] reiserfs: using flush barriers [ 344.256392][T10813] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 344.286923][T10813] REISERFS (device loop7): checking transaction log (loop7) [ 344.605964][T10813] REISERFS (device loop7): Using tea hash to sort names [ 344.634970][T10813] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 345.998928][ T4277] Bluetooth: hci4: Malformed HCI Event [ 346.005091][T10855] loop3: detected capacity change from 0 to 8192 [ 346.091139][T10839] loop0: detected capacity change from 0 to 32768 [ 346.113899][T10839] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2303 (10839) [ 346.168115][T10839] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 346.179172][T10839] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 346.180943][T10855] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 346.188424][T10839] BTRFS info (device loop0): setting nodatasum [ 346.207724][T10839] BTRFS info (device loop0): force zlib compression, level 3 [ 346.215582][T10839] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 346.232497][T10839] BTRFS info (device loop0): use lzo compression, level 0 [ 346.239918][T10839] BTRFS info (device loop0): turning on flush-on-commit [ 346.248500][T10839] BTRFS info (device loop0): enabling auto defrag [ 346.255670][T10839] BTRFS info (device loop0): max_inline at 4096 [ 346.293717][T10839] BTRFS info (device loop0): using free space tree [ 346.301523][T10855] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 346.345147][T10855] REISERFS (device loop3): using ordered data mode [ 346.379410][T10855] reiserfs: using flush barriers [ 346.496051][T10855] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 346.525258][T10855] REISERFS (device loop3): checking transaction log (loop3) [ 346.545761][T10855] REISERFS (device loop3): Using r5 hash to sort names [ 346.547906][T10877] loop6: detected capacity change from 0 to 8192 [ 346.561459][ T4317] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 346.615168][T10877] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 346.644633][T10877] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 346.724406][T10877] REISERFS (device loop6): using ordered data mode [ 346.752262][ T4317] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 346.773345][T10839] BTRFS info (device loop0): enabling ssd optimizations [ 346.780853][ T4317] usb 6-1: config 0 interface 0 has no altsetting 0 [ 346.781407][T10877] reiserfs: using flush barriers [ 346.789185][T10853] loop7: detected capacity change from 0 to 32768 [ 346.801249][ T4317] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 346.810836][ T4317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.840799][ T4317] usb 6-1: config 0 descriptor?? [ 346.850780][T10877] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 346.870582][T10877] REISERFS (device loop6): checking transaction log (loop6) [ 347.185725][T10877] REISERFS (device loop6): Using tea hash to sort names [ 347.200379][T10877] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 347.257130][ T4317] logitech 0003:046D:C626.0017: unknown main item tag 0x0 [ 347.277939][ T4317] logitech 0003:046D:C626.0017: unknown main item tag 0x0 [ 347.295289][ T4275] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 347.319829][ T4317] logitech 0003:046D:C626.0017: unknown main item tag 0x0 [ 347.360177][ T4317] logitech 0003:046D:C626.0017: unknown main item tag 0x0 [ 347.399790][ T4317] logitech 0003:046D:C626.0017: unknown main item tag 0x0 [ 347.429117][ T4317] logitech 0003:046D:C626.0017: unknown main item tag 0x0 [ 347.452232][ T4317] logitech 0003:046D:C626.0017: unknown main item tag 0x0 [ 347.495121][ T4317] logitech 0003:046D:C626.0017: unknown main item tag 0x0 [ 347.526640][ T4317] logitech 0003:046D:C626.0017: unknown main item tag 0x0 [ 347.558892][ T4317] logitech 0003:046D:C626.0017: unknown main item tag 0x0 [ 347.587843][ T4317] logitech 0003:046D:C626.0017: unknown main item tag 0x0 [ 347.633701][ T4317] logitech 0003:046D:C626.0017: hidraw0: USB HID v0.81 Device [HID 046d:c626] on usb-dummy_hcd.5-1/input0 [ 347.664475][ T4317] usb 6-1: USB disconnect, device number 6 [ 348.047711][T10892] fido_id[10892]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 348.245522][T10891] loop3: detected capacity change from 0 to 32768 [ 348.298184][T10891] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 348.359021][T10891] JBD2: Ignoring recovery information on journal [ 348.468095][T10891] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 348.791612][ T4280] ocfs2: Unmounting device (7,3) on (node local) [ 348.910936][T10918] loop3: detected capacity change from 0 to 512 [ 348.938906][T10918] EXT4-fs: Ignoring removed i_version option [ 348.947646][T10911] loop0: detected capacity change from 0 to 4096 [ 348.985739][T10918] EXT4-fs: Ignoring removed bh option [ 348.995597][T10911] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 349.081327][T10918] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2325: inode #13: comm syz.3.2325: iget: illegal inode # [ 349.198945][T10924] loop6: detected capacity change from 0 to 256 [ 349.225615][T10918] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2325: couldn't read orphan inode 13 (err -117) [ 349.269365][T10918] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 349.329685][T10924] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 349.532999][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 349.646884][T10924] exFAT-fs (loop6): IO charset mʵÁ×WÂÄ¢«: not found [ 349.757344][ T26] audit: type=1326 audit(1784348207.227:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.6.2328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4694f9de99 code=0x7ffc0000 [ 349.888045][ T26] audit: type=1326 audit(1784348207.257:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.6.2328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4694f9de99 code=0x7ffc0000 [ 350.009862][ T26] audit: type=1326 audit(1784348207.257:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.6.2328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f4694f9de99 code=0x7ffc0000 [ 350.038358][T10940] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2334'. [ 350.096039][ T26] audit: type=1326 audit(1784348207.257:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.6.2328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4694f9de99 code=0x7ffc0000 [ 350.146405][T10943] loop6: detected capacity change from 0 to 2048 [ 350.158357][T10927] loop5: detected capacity change from 0 to 32768 [ 350.191096][ T26] audit: type=1326 audit(1784348207.257:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.6.2328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4694f9de99 code=0x7ffc0000 [ 350.239118][T10943] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.398292][T10943] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 201 [ 350.485165][T10927] XFS (loop5): Mounting V5 Filesystem [ 350.658411][T10927] XFS (loop5): Ending clean mount [ 350.694636][T10927] XFS (loop5): Quotacheck needed: Please wait. [ 350.899611][T10927] XFS (loop5): Quotacheck: Done. [ 350.928347][ T26] audit: type=1800 audit(1784348208.397:67): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2330" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 351.141046][T10933] loop0: detected capacity change from 0 to 32768 [ 351.248037][ T6563] XFS (loop5): Unmounting Filesystem [ 351.405228][T10933] XFS (loop0): Mounting V5 Filesystem [ 351.640139][T10933] XFS (loop0): Ending clean mount [ 351.665873][T10950] loop7: detected capacity change from 0 to 32768 [ 351.696037][T10933] XFS (loop0): Quotacheck needed: Please wait. [ 351.706056][T10950] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.2337 (10950) [ 351.790945][T10950] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 351.867646][T10933] XFS (loop0): Quotacheck: Done. [ 351.872244][T10950] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 351.926440][T10950] BTRFS info (device loop7): setting nodatasum [ 351.976335][T10950] BTRFS info (device loop7): force zlib compression, level 3 [ 352.014591][T10950] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 352.061296][T10950] BTRFS info (device loop7): use lzo compression, level 0 [ 352.097913][T10950] BTRFS info (device loop7): turning on flush-on-commit [ 352.122058][ T4275] XFS (loop0): Unmounting Filesystem [ 352.135499][T10950] BTRFS info (device loop7): enabling auto defrag [ 352.164513][T10950] BTRFS info (device loop7): max_inline at 4096 [ 352.224345][T10950] BTRFS info (device loop7): using free space tree [ 352.297073][T10995] loop6: detected capacity change from 0 to 8192 [ 352.340724][T10995] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 352.456948][T10995] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 352.514509][T10995] REISERFS (device loop6): using ordered data mode [ 352.535623][T10995] reiserfs: using flush barriers [ 352.630598][T10995] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 352.693989][T10950] BTRFS info (device loop7): enabling ssd optimizations [ 352.727806][T10995] REISERFS (device loop6): checking transaction log (loop6) [ 352.744782][T10995] REISERFS (device loop6): Using r5 hash to sort names [ 352.770682][T10995] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 352.837791][T10995] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 353.095636][T10142] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 353.559356][T11038] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2356'. [ 353.595188][T11038] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2356'. [ 353.626150][ T4383] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop7 scanned by udevd (4383) [ 353.863466][T11046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2367'. [ 354.068195][T11054] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2353'. [ 354.975235][T11076] loop7: detected capacity change from 0 to 512 [ 354.990615][T11076] EXT4-fs: Ignoring removed i_version option [ 355.050141][T11076] EXT4-fs: Ignoring removed bh option [ 355.130669][T11076] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.2366: inode #13: comm syz.7.2366: iget: illegal inode # [ 355.226645][T11076] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.2366: couldn't read orphan inode 13 (err -117) [ 355.330337][T11076] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 355.528584][T11091] loop3: detected capacity change from 0 to 4096 [ 355.541642][T10142] EXT4-fs (loop7): unmounting filesystem. [ 355.570770][T11091] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 355.988964][T11068] loop0: detected capacity change from 0 to 32768 [ 357.346268][T11136] loop0: detected capacity change from 0 to 4096 [ 357.431305][T11136] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 357.489851][T11136] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 357.560054][T11136] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 357.616748][T11136] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 357.697473][T11136] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 357.745710][T11136] ntfs: volume version 3.1. [ 357.775668][T11136] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 357.809983][T11136] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 357.867216][T11136] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 357.925165][T11136] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 357.973282][T11136] ntfs: (device loop0): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 358.186845][T11167] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2396'. [ 358.500627][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2399'. [ 358.552438][T11178] binder: 11177:11178 ioctl c0046209 0 returned -22 [ 359.282228][T11196] loop6: detected capacity change from 0 to 4096 [ 359.323897][T11196] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 359.354403][T11206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2411'. [ 359.702443][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2415'. [ 359.760974][T11220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2416'. [ 359.955844][T11222] loop6: detected capacity change from 0 to 512 [ 360.040726][T11222] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 360.053353][T11222] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.301660][ T6741] EXT4-fs (loop6): unmounting filesystem. [ 360.527906][T11243] loop6: detected capacity change from 0 to 512 [ 360.604517][T11243] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 360.630869][T11243] EXT4-fs (loop6): orphan cleanup on readonly fs [ 360.660514][T11243] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 360.735552][T11243] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 360.736386][T11254] loop0: detected capacity change from 0 to 512 [ 360.748488][T11246] loop3: detected capacity change from 0 to 8192 [ 360.848761][T11243] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.2424: bg 0: block 15: invalid block bitmap [ 360.849942][T11254] EXT4-fs (loop0): 1 truncate cleaned up [ 360.867944][T11254] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 360.877151][T11254] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.888666][ T4341] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1 [ 360.919718][T11243] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 360.984390][T11246] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 360.989364][T11243] EXT4-fs (loop6): 1 truncate cleaned up [ 361.008304][T11246] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 361.047041][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 361.053763][T11246] REISERFS (device loop3): using ordered data mode [ 361.057194][T11243] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 361.089769][T11246] reiserfs: using flush barriers [ 361.170200][T11246] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 361.245140][T11246] REISERFS (device loop3): checking transaction log (loop3) [ 361.271198][T11243] EXT4-fs error (device loop6): ext4_get_link:104: inode #16: comm syz.6.2424: bad symlink. [ 361.290488][T11246] REISERFS (device loop3): Using r5 hash to sort names [ 361.298244][T11246] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 361.319745][T11243] EXT4-fs error (device loop6): ext4_get_link:104: inode #16: comm syz.6.2424: bad symlink. [ 361.384078][T11246] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 361.463095][ T6741] EXT4-fs (loop6): unmounting filesystem. [ 361.829682][T11238] loop5: detected capacity change from 0 to 40427 [ 361.840003][T11273] loop7: detected capacity change from 0 to 512 [ 361.864794][T11238] F2FS-fs (loop5): invalid crc value [ 361.962967][T11238] F2FS-fs (loop5): Found nat_bits in checkpoint [ 361.982739][T11273] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 362.041690][T11273] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.222234][T11238] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 362.309757][T11238] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 362.397591][T10142] EXT4-fs (loop7): unmounting filesystem. [ 362.500676][T11285] loop0: detected capacity change from 0 to 8192 [ 362.574437][T11285] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 362.663794][T11285] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 362.674476][T11285] REISERFS (device loop0): using ordered data mode [ 362.681426][T11285] reiserfs: using flush barriers [ 362.709691][T11285] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 362.780366][T11285] REISERFS (device loop0): checking transaction log (loop0) [ 363.098456][T11285] REISERFS (device loop0): Using tea hash to sort names [ 363.110038][T11285] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 363.925554][T11298] loop3: detected capacity change from 0 to 32768 [ 363.933407][T11323] binder: 11321:11323 ioctl c0046209 0 returned -22 [ 363.975910][T11298] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 364.378371][ T4383] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 364.420107][T11305] loop6: detected capacity change from 0 to 40427 [ 364.481120][T11305] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 364.524799][T11305] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 364.591160][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2451'. [ 364.609992][T11305] F2FS-fs (loop6): invalid crc value [ 364.660728][T11305] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 364.827921][T11313] loop7: detected capacity change from 0 to 32768 [ 364.998407][T11305] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 365.010893][T11313] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 365.029627][T11305] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 365.058543][T11326] loop5: detected capacity change from 0 to 32768 [ 365.293739][T10142] ocfs2: Unmounting device (7,7) on (node local) [ 366.569978][T11387] loop7: detected capacity change from 0 to 512 [ 366.737816][T11387] EXT4-fs (loop7): 1 truncate cleaned up [ 366.750381][ T62] __quota_error: 20 callbacks suppressed [ 366.750399][ T62] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 366.797065][T11387] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 366.848483][ T62] EXT4-fs error (device loop7): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 1 [ 366.862942][T11387] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.073704][T10142] EXT4-fs (loop7): unmounting filesystem. [ 367.562260][T11422] loop5: detected capacity change from 0 to 512 [ 367.651026][T11422] EXT4-fs (loop5): 1 truncate cleaned up [ 367.656758][T11422] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 367.864333][ T26] audit: type=1800 audit(1784348225.337:82): pid=11422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2480" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 367.987220][T11414] loop0: detected capacity change from 0 to 32768 [ 368.035399][T11414] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 368.040927][T11436] loop3: detected capacity change from 0 to 512 [ 368.063902][ T6563] EXT4-fs (loop5): unmounting filesystem. [ 368.128839][T11436] EXT4-fs (loop3): orphan cleanup on readonly fs [ 368.178138][T11436] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144). [ 368.255124][T11436] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 368.385641][T11436] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 368.436610][T11436] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2484: couldn't read orphan inode 26 (err -116) [ 368.503458][T11436] EXT4-fs (loop3): Remounting filesystem read-only [ 368.529701][T11436] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 368.609625][ T4316] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 368.622982][ T4355] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 368.659421][T11455] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.669111][T11455] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.678022][T11455] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.686823][T11455] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.797342][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 368.811672][ T4316] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 368.830460][ T4316] usb 6-1: config 0 has no interface number 0 [ 368.878301][ T4316] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 368.917214][ T4316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.955987][ T4316] usb 6-1: Product: syz [ 368.977137][ T4316] usb 6-1: Manufacturer: syz [ 368.996531][ T4316] usb 6-1: SerialNumber: syz [ 369.058575][ T4316] usb 6-1: config 0 descriptor?? [ 369.123263][ T4316] usb 6-1: selecting invalid altsetting 1 [ 369.164182][ T4316] dvb_ttusb_budget: ttusb_init_controller: error [ 369.203189][ T4316] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 369.620048][ T4316] DVB: Unable to find symbol stv0299_attach() [ 369.861935][ T4316] DVB: Unable to find symbol tda8083_attach() [ 369.868089][ T4316] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 369.916787][ T4316] usb 6-1: USB disconnect, device number 7 [ 370.009254][T11495] autofs4:pid:11495:autofs_fill_super: called with bogus options [ 370.119940][T11457] loop0: detected capacity change from 0 to 32768 [ 370.229434][T11457] XFS (loop0): Mounting V5 Filesystem [ 370.348248][T11516] loop7: detected capacity change from 0 to 256 [ 370.356220][T11516] exfat: Deprecated parameter 'namecase' [ 370.366453][T11516] exfat: Deprecated parameter 'namecase' [ 370.376838][T11457] XFS (loop0): Ending clean mount [ 370.426002][T11516] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 370.519893][ T7] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 370.617503][ T4275] XFS (loop0): Unmounting Filesystem [ 370.729803][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 370.747555][ T7] usb 4-1: config 127 has an invalid interface number: 124 but max is 0 [ 370.781554][ T7] usb 4-1: config 127 has no interface number 0 [ 370.798257][ T7] usb 4-1: config 127 interface 124 has no altsetting 0 [ 370.829920][ T7] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 370.871706][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.900220][ T7] usb 4-1: Product: syz [ 370.904459][ T7] usb 4-1: Manufacturer: syz [ 370.929373][ T7] usb 4-1: SerialNumber: syz [ 371.068702][T11532] loop6: detected capacity change from 0 to 512 [ 371.095230][T11532] EXT4-fs (loop6): 1 truncate cleaned up [ 371.107060][T11532] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 371.128358][ T26] audit: type=1800 audit(1784348228.597:83): pid=11532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2528" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 371.207837][ T6741] EXT4-fs (loop6): unmounting filesystem. [ 371.502132][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2521'. [ 371.688968][T11546] loop6: detected capacity change from 0 to 4096 [ 371.879719][ T7] usb 4-1: reset high-speed USB device number 11 using dummy_hcd [ 371.988605][T11552] loop5: detected capacity change from 0 to 8192 [ 372.033822][T11552] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 372.118130][ T26] audit: type=1800 audit(1784348229.587:84): pid=11552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2524" name="file1" dev="loop5" ino=1048762 res=0 errno=0 [ 372.305613][ T7] usb 4-1: failed to restore interface 124 altsetting 11 (error=-71) [ 372.350458][ T7] usb 4-1: USB disconnect, device number 11 [ 372.817342][T11570] loop6: detected capacity change from 0 to 4096 [ 372.940718][T11570] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 373.119129][T11582] loop5: detected capacity change from 0 to 512 [ 373.143257][T11578] overlayfs: upper fs does not support tmpfile. [ 373.185348][T11578] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 373.216493][T11578] overlayfs: failed to verify origin (/, ino=5, err=-22) [ 373.237344][T11582] EXT4-fs (loop5): orphan cleanup on readonly fs [ 373.260324][T11578] overlayfs: failed to verify upper root origin [ 373.262190][T11585] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2539'. [ 373.405572][T11582] Quota error (device loop5): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144). [ 373.505680][ T6900] ntfs3: loop6: ntfs3_write_inode r=9 failed, -22. [ 373.509024][T11582] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 373.526986][ T6741] ntfs3: loop6: ntfs_sync_fs r=9 failed, -22. [ 373.566565][ T6741] ntfs3: loop6: ntfs_evict_inode r=9 failed, -22. [ 373.589452][T11582] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 373.597287][T11582] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.2538: couldn't read orphan inode 26 (err -116) [ 373.671952][T11582] EXT4-fs (loop5): Remounting filesystem read-only [ 373.685224][T11582] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 373.872279][T11597] loop3: detected capacity change from 0 to 256 [ 373.921388][T11597] exfat: Deprecated parameter 'namecase' [ 373.927173][T11597] exfat: Deprecated parameter 'namecase' [ 373.945827][ T6563] EXT4-fs (loop5): unmounting filesystem. [ 374.005327][T11597] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 374.090155][T11577] loop0: detected capacity change from 0 to 32768 [ 374.175848][T11577] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 374.351101][ T4275] ocfs2: Unmounting device (7,0) on (node local) [ 375.071717][T11617] loop0: detected capacity change from 0 to 4096 [ 375.088869][T11623] loop5: detected capacity change from 0 to 2048 [ 375.156993][T11593] loop7: detected capacity change from 0 to 40427 [ 375.161110][T11620] loop3: detected capacity change from 0 to 8192 [ 375.164733][T11617] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 375.214728][T11593] F2FS-fs (loop7): invalid crc value [ 375.257567][T11617] ntfs3: loop0: Failed to load $Extend. [ 375.284003][T11623] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 375.301779][T11620] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 375.329062][T11623] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 375.346307][T11620] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 375.370309][T11593] F2FS-fs (loop7): Found nat_bits in checkpoint [ 375.371157][T11620] REISERFS (device loop3): using ordered data mode [ 375.430851][T11620] reiserfs: using flush barriers [ 375.479211][T11620] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 375.480565][T11623] EXT4-fs (loop5): Remounting filesystem read-only [ 375.558664][T11593] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 375.567228][T11620] REISERFS (device loop3): checking transaction log (loop3) [ 375.633372][T11593] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 375.841569][ T6563] EXT4-fs (loop5): unmounting filesystem. [ 375.936877][T11620] REISERFS (device loop3): Using tea hash to sort names [ 375.966426][T11620] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 376.517583][T11654] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2570'. [ 376.900923][T11664] netlink: 'syz.6.2573': attribute type 1 has an invalid length. [ 377.035076][T11666] loop5: detected capacity change from 0 to 4096 [ 377.113163][T11666] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 377.291843][T11673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2579'. [ 377.348892][ T6563] EXT4-fs (loop5): unmounting filesystem. [ 377.655342][T11677] loop5: detected capacity change from 0 to 4096 [ 377.866658][T11670] loop3: detected capacity change from 0 to 40427 [ 377.871357][T11660] loop7: detected capacity change from 0 to 32768 [ 377.933774][T11670] F2FS-fs (loop3): invalid crc value [ 378.001357][T11670] F2FS-fs (loop3): Found nat_bits in checkpoint [ 378.021494][T11660] JBD2: Ignoring recovery information on journal [ 378.234311][T11675] loop6: detected capacity change from 0 to 32768 [ 378.242525][T11687] loop0: detected capacity change from 0 to 512 [ 378.261259][T11670] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 378.288971][T11675] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.2578 (11675) [ 378.289930][T11687] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 378.324002][T11660] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 378.378001][T11670] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 378.408664][T11687] EXT4-fs (loop0): 1 truncate cleaned up [ 378.437378][T11687] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 378.449619][T11675] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 378.480659][T11675] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 378.521649][T11687] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.2583: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 378.544319][T11675] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 378.590069][T11675] BTRFS info (device loop6): use zstd compression, level 3 [ 378.618286][T11675] BTRFS info (device loop6): using free space tree [ 378.625263][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.633198][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.655711][T11687] EXT4-fs (loop0): Remounting filesystem read-only [ 378.662662][T11687] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 378.686163][T11687] EXT4-fs (loop0): Remounting filesystem read-only [ 378.694614][T11687] EXT4-fs warning (device loop0): ext4_rename_delete:3778: inode #2: comm syz.0.2583: Deleting old file: nlink 4, error=-117 [ 378.795281][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 378.806293][T10142] ocfs2: Unmounting device (7,7) on (node local) [ 378.888809][T11675] BTRFS info (device loop6): enabling ssd optimizations [ 379.250796][ T6741] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 379.783844][T11693] loop5: detected capacity change from 0 to 32768 [ 379.859961][T11693] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 379.996775][T11730] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2588'. [ 380.327570][ T4355] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 380.623700][T11738] loop3: detected capacity change from 0 to 4096 [ 380.955566][T11721] loop7: detected capacity change from 0 to 40427 [ 381.011766][T11721] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 381.056339][T11721] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 381.117759][T11721] F2FS-fs (loop7): invalid crc value [ 381.156120][T11721] F2FS-fs (loop7): Found nat_bits in checkpoint [ 381.318564][T11733] loop5: detected capacity change from 0 to 32768 [ 381.382638][T11721] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 381.410499][T11721] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 381.530601][T11733] XFS (loop5): Mounting V5 Filesystem [ 381.560492][T11734] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 381.604573][T11734] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 381.628363][T11733] XFS (loop5): Ending clean mount [ 381.643493][T11734] F2FS-fs (loop0): invalid crc value [ 381.738299][T11734] F2FS-fs (loop0): Found nat_bits in checkpoint [ 381.744825][T11740] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 381.796835][T11740] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 381.891080][T11740] F2FS-fs (loop6): invalid crc value [ 381.911678][T11740] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 382.035283][ T6563] XFS (loop5): Unmounting Filesystem [ 382.041821][T11734] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 382.069647][T11734] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 382.310963][T11740] F2FS-fs (loop6): Start checkpoint disabled! [ 382.378978][T11742] set_capacity_and_notify: 2 callbacks suppressed [ 382.379027][T11742] loop3: detected capacity change from 0 to 32768 [ 382.452027][T11740] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 382.485300][T11740] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 382.489317][T11742] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 382.555452][ T6900] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 382.649282][ T6900] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 382.734827][ T4280] ocfs2: Unmounting device (7,3) on (node local) [ 382.809430][ T4341] kworker/u4:7: attempt to access beyond end of device [ 382.809430][ T4341] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 383.661906][T11777] loop3: detected capacity change from 0 to 2048 [ 383.766556][T11777] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 383.794814][T11777] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 383.858682][T11777] EXT4-fs (loop3): Remounting filesystem read-only [ 383.971000][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 384.382548][T11802] loop7: detected capacity change from 0 to 164 [ 384.440917][T11802] ISOFS: unable to read i-node block [ 384.447545][T11802] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 384.739920][T11779] loop5: detected capacity change from 0 to 32768 [ 384.832205][T11779] JBD2: Ignoring recovery information on journal [ 384.983810][T11779] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 385.218670][ T6563] ocfs2: Unmounting device (7,5) on (node local) [ 385.299318][T11788] loop0: detected capacity change from 0 to 40427 [ 385.409480][T11788] F2FS-fs (loop0): invalid crc value [ 385.487743][T11788] F2FS-fs (loop0): Found nat_bits in checkpoint [ 385.703166][T11788] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 385.751877][T11788] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 385.960552][T11844] loop3: detected capacity change from 0 to 128 [ 386.048459][T11844] Invalid ELF header magic: != ELF [ 386.780794][T11828] loop7: detected capacity change from 0 to 32768 [ 386.925506][T11828] XFS (loop7): Mounting V5 Filesystem [ 387.076596][T11828] XFS (loop7): Ending clean mount [ 387.256197][T10142] XFS (loop7): Unmounting Filesystem [ 388.003679][T11886] loop5: detected capacity change from 0 to 32768 [ 388.051580][T11886] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.2644 (11886) [ 388.103375][T11886] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 388.170210][T11886] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 388.206566][T11886] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 388.229007][T11886] BTRFS info (device loop5): use zstd compression, level 3 [ 388.237635][T11885] loop6: detected capacity change from 0 to 40427 [ 388.254718][T11886] BTRFS info (device loop5): using free space tree [ 388.282640][T11885] F2FS-fs (loop6): invalid crc value [ 388.371754][T11885] F2FS-fs (loop6): Found nat_bits in checkpoint [ 388.468395][T11888] loop3: detected capacity change from 0 to 40427 [ 388.496837][T11888] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 388.524210][T11888] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 388.551982][T11886] BTRFS info (device loop5): enabling ssd optimizations [ 388.569351][T11885] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 388.626365][T11888] F2FS-fs (loop3): invalid crc value [ 388.654137][T11885] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 388.662332][T11888] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 388.748966][T11888] F2FS-fs (loop3): Found nat_bits in checkpoint [ 388.979269][ T6563] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 388.989885][T11888] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 389.020633][T11888] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 389.486305][ T4355] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop5 scanned by udevd (4355) [ 390.324822][T11951] loop6: detected capacity change from 0 to 2048 [ 390.435009][T11951] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 390.570843][T11958] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.584513][ T4676] udevd[4676]: incorrect nilfs2 checksum on /dev/loop6 [ 391.046970][ T26] audit: type=1326 audit(1784348248.517:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.3.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5359de99 code=0x7ffc0000 [ 391.116949][T11945] loop7: detected capacity change from 0 to 32768 [ 391.139188][ T26] audit: type=1326 audit(1784348248.517:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.3.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5359de99 code=0x7ffc0000 [ 391.210220][ T26] audit: type=1326 audit(1784348248.537:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.3.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5359de99 code=0x7ffc0000 [ 391.294696][ T26] audit: type=1326 audit(1784348248.537:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.3.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5359de99 code=0x7ffc0000 [ 391.328464][T11945] XFS (loop7): Mounting V5 Filesystem [ 391.394618][ T26] audit: type=1326 audit(1784348248.547:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.3.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fbf5359de99 code=0x7ffc0000 [ 391.478220][ T26] audit: type=1326 audit(1784348248.547:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.3.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5359de99 code=0x7ffc0000 [ 391.504465][ T26] audit: type=1326 audit(1784348248.547:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.3.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5359de99 code=0x7ffc0000 [ 391.530450][ T26] audit: type=1326 audit(1784348248.547:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.3.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5359de99 code=0x7ffc0000 [ 391.554719][T11945] XFS (loop7): Ending clean mount [ 391.570486][ T26] audit: type=1326 audit(1784348248.547:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.3.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5359de99 code=0x7ffc0000 [ 391.669877][ T26] audit: type=1326 audit(1784348248.547:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.3.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fbf5359de99 code=0x7ffc0000 [ 391.754110][T10142] XFS (loop7): Unmounting Filesystem [ 391.765590][T11995] loop3: detected capacity change from 0 to 164 [ 391.798609][T11995] ISOFS: unable to read i-node block [ 391.827658][T11995] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 392.452277][T11998] loop6: detected capacity change from 0 to 40427 [ 392.468518][T11998] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 392.488391][T11998] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 392.498129][T11998] F2FS-fs (loop6): invalid crc value [ 392.513677][T11998] F2FS-fs (loop6): Found nat_bits in checkpoint [ 392.597166][T11998] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 392.614890][T11998] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 393.236281][T12014] loop3: detected capacity change from 0 to 4096 [ 393.348350][T12014] ntfs3: loop3: failed to convert "0080" to cp864 [ 393.354087][T12018] loop6: detected capacity change from 0 to 4096 [ 393.452163][T12018] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 393.589740][T12018] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz.6.2687: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 393.692392][T12018] EXT4-fs (loop6): Remounting filesystem read-only [ 393.719010][T12018] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz.6.2687: directory missing '..' [ 393.827237][T12030] loop0: detected capacity change from 0 to 256 [ 393.876397][T12030] exfat: Deprecated parameter 'utf8' [ 393.921064][ T6741] EXT4-fs (loop6): unmounting filesystem. [ 393.931916][T12030] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 394.350709][T12020] loop5: detected capacity change from 0 to 32768 [ 394.359546][T12037] loop3: detected capacity change from 0 to 2048 [ 394.447514][T12037] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 394.467957][T12037] NILFS (loop3): mounting unchecked fs [ 394.487015][T12020] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 394.508291][ T4355] udevd[4355]: incorrect nilfs2 checksum on /dev/loop3 [ 394.531885][T12037] NILFS (loop3): recovery complete [ 394.621528][T12043] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 394.646129][ T6563] ocfs2: Unmounting device (7,5) on (node local) [ 395.308131][T12035] loop6: detected capacity change from 0 to 40427 [ 395.341768][T12035] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 395.389929][T12035] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 395.418721][T12035] F2FS-fs (loop6): invalid crc value [ 395.503803][T12035] F2FS-fs (loop6): Found nat_bits in checkpoint [ 395.775641][T12035] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 395.794302][T12035] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 396.160951][ T6900] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 396.220732][ T6900] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 396.222362][T12047] loop3: detected capacity change from 0 to 32768 [ 396.259000][T12072] loop7: detected capacity change from 0 to 2048 [ 396.293223][T12072] EXT4-fs: Ignoring removed i_version option [ 396.456967][T12072] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 396.752262][T10142] EXT4-fs (loop7): unmounting filesystem. [ 397.013396][T12063] loop0: detected capacity change from 0 to 32768 [ 397.293164][T12091] loop7: detected capacity change from 0 to 128 [ 397.359046][T12091] Invalid ELF header magic: != ELF [ 398.556963][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 398.557023][ T26] audit: type=1400 audit(1784348256.027:107): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D85 pid=12117 comm="syz.0.2732" [ 398.713657][T12094] set_capacity_and_notify: 2 callbacks suppressed [ 398.713674][T12094] loop5: detected capacity change from 0 to 32768 [ 398.767131][T12122] loop6: detected capacity change from 0 to 128 [ 398.778278][T12097] loop3: detected capacity change from 0 to 40427 [ 398.838321][T12097] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 398.840417][T12122] Invalid ELF header magic: != ELF [ 398.893343][T12097] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 398.937041][T12097] F2FS-fs (loop3): invalid crc value [ 398.975962][T12097] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 399.261090][T12097] F2FS-fs (loop3): Start checkpoint disabled! [ 399.353950][T12097] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 399.380415][T12097] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 399.415053][T12132] loop7: detected capacity change from 0 to 736 [ 399.769679][ T7] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 399.804566][ T4341] kworker/u4:7: attempt to access beyond end of device [ 399.804566][ T4341] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 399.871869][T12139] loop6: detected capacity change from 0 to 16 [ 399.946481][T12139] erofs: (device loop6): mounted with root inode @ nid 36. [ 399.968820][ T7] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 399.999166][ T7] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 400.051785][ T4277] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 400.069667][ T7] usb 6-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 400.078981][ T7] usb 6-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 400.088394][ T7] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 400.099057][ T7] usb 6-1: config 220 has no interface number 2 [ 400.107110][ T7] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 400.107338][T12139] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 400.126353][ T7] usb 6-1: config 220 interface 0 has no altsetting 0 [ 400.155792][ T7] usb 6-1: config 220 interface 76 has no altsetting 0 [ 400.169728][ T7] usb 6-1: config 220 interface 1 has no altsetting 0 [ 400.190514][ T7] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 400.214479][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.248542][ T7] usb 6-1: Product: syz [ 400.267824][ T26] audit: type=1800 audit(1784348257.737:108): pid=12139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2743" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 400.268073][ T7] usb 6-1: Manufacturer: syz [ 400.339783][ T7] usb 6-1: SerialNumber: syz [ 400.570499][ T7] usb 6-1: selecting invalid altsetting 0 [ 400.599474][ T7] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 400.617646][ T7] usb 6-1: No valid video chain found. [ 400.678270][ T7] usb 6-1: selecting invalid altsetting 0 [ 400.685723][ T7] usbtest: probe of 6-1:220.1 failed with error -22 [ 400.715110][ T7] usb 6-1: USB disconnect, device number 8 [ 400.819779][ T4315] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 400.948509][T12157] loop3: detected capacity change from 0 to 4096 [ 400.979839][T12155] loop0: detected capacity change from 0 to 2048 [ 401.005183][T12157] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 401.024393][ T4315] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.026228][T12155] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 401.046166][ T4315] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.066317][ T4315] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 401.076412][ T4315] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.087876][ T4315] usb 7-1: config 0 descriptor?? [ 401.141790][T12145] loop7: detected capacity change from 0 to 32768 [ 401.143631][T12157] EXT4-fs error (device loop3): ext4_empty_dir:3154: inode #12: block 80: comm syz.3.2751: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 401.192601][T12157] EXT4-fs (loop3): Remounting filesystem read-only [ 401.199349][T12157] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz.3.2751: directory missing '..' [ 401.214186][T12155] overlayfs: upper fs needs to support d_type. [ 401.257133][T12155] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 401.275856][T12145] JBD2: Ignoring recovery information on journal [ 401.336401][ T26] audit: type=1326 audit(1784348258.807:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.5.2752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed459de99 code=0x7ffc0000 [ 401.428071][T12155] overlayfs: failed to set xattr on upper [ 401.487421][T12155] overlayfs: ...falling back to index=off,metacopy=off. [ 401.524692][ T4315] hid-steam 0003:28DE:1142.0018: unknown main item tag 0x0 [ 401.525764][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 401.539973][ T26] audit: type=1326 audit(1784348258.817:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.5.2752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f8ed459de99 code=0x7ffc0000 [ 401.564203][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.583915][T12145] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 401.593307][ T4315] hid-steam 0003:28DE:1142.0018: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 401.612787][ T4315] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 401.638448][ T26] audit: type=1326 audit(1784348258.817:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.5.2752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed459de99 code=0x7ffc0000 [ 401.720314][ T4275] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh [ 401.727663][ T4315] hid-steam 0003:28DE:1142.0019: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 401.748455][ T26] audit: type=1326 audit(1784348258.817:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.5.2752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f8ed459de99 code=0x7ffc0000 [ 401.779936][ T4275] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh [ 401.815238][ T26] audit: type=1326 audit(1784348258.817:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.5.2752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed459de99 code=0x7ffc0000 [ 401.861836][T10142] ocfs2: Unmounting device (7,7) on (node local) [ 401.899118][ T4315] hid-steam 0003:28DE:1142.0018: Steam wireless receiver connected [ 401.927264][ T4315] hid-steam 0003:28DE:1142.0018: No HID_FEATURE_REPORT submitted - nothing to read [ 402.003774][ T4315] usb 7-1: USB disconnect, device number 8 [ 402.057068][ T4315] hid-steam 0003:28DE:1142.0018: Steam wireless receiver disconnected [ 402.143200][T12169] loop5: detected capacity change from 0 to 4096 [ 402.362206][T12172] fido_id[12172]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 402.370201][T12169] ntfs3: loop5: failed to convert "0080" to cp864 [ 402.555061][T12180] loop3: detected capacity change from 0 to 24 [ 402.780227][ T4339] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.825440][T12182] exfat: Deprecated parameter 'utf8' [ 402.915441][T12182] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 403.034774][ T4339] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.194336][ T4339] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.511175][ T4339] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.058215][ T4339] tipc: Left network mode [ 404.182488][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 404.195024][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 404.207764][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 404.220789][ T4276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 404.251928][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 404.259365][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 404.291536][T12187] set_capacity_and_notify: 2 callbacks suppressed [ 404.291554][T12187] loop3: detected capacity change from 0 to 32768 [ 404.384245][T12187] JBD2: Ignoring recovery information on journal [ 404.510813][T12187] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 404.804427][ T4280] ocfs2: Unmounting device (7,3) on (node local) [ 405.431981][T12205] chnl_net:caif_netlink_parms(): no params data found [ 405.539886][ T7] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 405.729610][ T7] usb 7-1: Using ep0 maxpacket: 16 [ 405.737501][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.769170][ T7] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 405.800020][ T7] usb 7-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 405.819393][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.833944][ T7] usb 7-1: config 0 descriptor?? [ 405.869419][T12224] loop5: detected capacity change from 0 to 32768 [ 405.945076][T12205] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.960666][T12205] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.969019][T12205] device bridge_slave_0 entered promiscuous mode [ 406.057036][T12205] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.087898][T12205] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.112386][T12205] device bridge_slave_1 entered promiscuous mode [ 406.134297][T12248] loop3: detected capacity change from 0 to 4096 [ 406.227310][T12248] NILFS (loop3): invalid segment: Checksum error in segment payload [ 406.227892][T12205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.268469][T12248] NILFS (loop3): trying rollback from an earlier position [ 406.284529][ T7] waltop 0003:172F:0500.001A: unknown main item tag 0x7 [ 406.306494][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 406.316035][ T7] waltop 0003:172F:0500.001A: collection stack underflow [ 406.352257][ T7] waltop 0003:172F:0500.001A: item 0 2 0 12 parsing failed [ 406.355875][T12248] NILFS (loop3): recovery complete [ 406.397504][T12249] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 406.420151][ T7] waltop: probe of 0003:172F:0500.001A failed with error -22 [ 406.524158][T12205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.525834][ T4315] usb 7-1: USB disconnect, device number 9 [ 406.733259][T12205] team0: Port device team_slave_0 added [ 406.782632][T12205] team0: Port device team_slave_1 added [ 406.985050][T12257] loop7: detected capacity change from 0 to 16 [ 407.039011][T12257] erofs: (device loop7): mounted with root inode @ nid 36. [ 407.080230][ T4277] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 407.095048][T12260] loop3: detected capacity change from 0 to 64 [ 407.108582][T12257] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 407.140137][ T26] audit: type=1800 audit(1784348264.617:114): pid=12257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2786" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 407.378056][ T4339] device hsr_slave_0 left promiscuous mode [ 407.400241][T12264] loop5: detected capacity change from 0 to 1024 [ 407.406832][ T4339] device hsr_slave_1 left promiscuous mode [ 407.439913][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.466830][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.511519][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.547122][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.560529][ T4339] device bridge_slave_1 left promiscuous mode [ 407.575217][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.651597][ T4339] device bridge_slave_0 left promiscuous mode [ 407.679879][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.701837][T12272] loop7: detected capacity change from 0 to 512 [ 407.790193][T12272] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.7.2801: corrupted xattr block 95 [ 407.833799][ T4339] device bridge0 left promiscuous mode [ 407.874131][T12272] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.2801: bg 0: block 7: invalid block bitmap [ 407.907811][T12272] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 407.907873][ T4339] device veth1_macvtap left promiscuous mode [ 407.922940][ T4339] device veth0_macvtap left promiscuous mode [ 407.929104][ T4339] device veth1_vlan left promiscuous mode [ 407.935181][ T4339] device veth0_vlan left promiscuous mode [ 407.952071][T12272] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2918: inode #11: comm syz.7.2801: corrupted xattr block 95 [ 408.044684][T12272] EXT4-fs warning (device loop7): ext4_evict_inode:301: xattr delete (err -117) [ 408.074757][T12272] EXT4-fs (loop7): 1 orphan inode deleted [ 408.091621][T12272] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 408.094651][T12285] loop3: detected capacity change from 0 to 128 [ 408.141163][T12285] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 408.333082][T10142] EXT4-fs (loop7): unmounting filesystem. [ 408.366450][ T4280] sysv_free_block: trying to free block not in datazone [ 408.379930][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 408.442210][ T4280] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 409.033941][T12300] loop3: detected capacity change from 0 to 1764 [ 409.125218][T12287] loop6: detected capacity change from 0 to 32768 [ 409.448703][T12309] loop7: detected capacity change from 0 to 24 [ 409.864531][T12313] loop3: detected capacity change from 0 to 4096 [ 410.049067][T12313] ntfs: volume version 3.1. [ 410.448794][ T26] audit: type=1326 audit(1784348267.917:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.6.2822" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4694f9de99 code=0x0 [ 410.472774][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 410.551642][T12328] loop3: detected capacity change from 0 to 16 [ 410.599386][T12328] erofs: (device loop3): mounted with root inode @ nid 36. [ 410.636636][ T4277] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 410.656435][T12328] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 410.693553][ T26] audit: type=1800 audit(1784348268.167:116): pid=12328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2813" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 410.906209][ T4339] team0 (unregistering): Port device team_slave_1 removed [ 410.968761][ T4339] team0 (unregistering): Port device team_slave_0 removed [ 411.033097][ T4339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.085246][ T4339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.460213][T12336] loop6: detected capacity change from 0 to 64 [ 411.873772][ T4339] bond0 (unregistering): Released all slaves [ 412.007938][T12205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.018477][T12205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.051335][T12205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.086142][T12303] device bond0 entered promiscuous mode [ 412.094363][T12303] device bond_slave_0 entered promiscuous mode [ 412.103398][T12303] device bond_slave_1 entered promiscuous mode [ 412.112042][T12303] device bond0 left promiscuous mode [ 412.117490][T12303] device bond_slave_0 left promiscuous mode [ 412.129215][T12303] device bond_slave_1 left promiscuous mode [ 412.137023][T12205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.158992][T12205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.287535][T12205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.510524][T12205] device hsr_slave_0 entered promiscuous mode [ 412.532726][T12205] device hsr_slave_1 entered promiscuous mode [ 412.540265][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 412.578999][T12205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.640457][T12205] Cannot create hsr debugfs directory [ 412.690694][ T6994] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 412.787182][T12362] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.850491][T12362] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.858032][T12362] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.898517][ T6994] usb 4-1: Using ep0 maxpacket: 16 [ 412.906576][ T6994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.943118][ T6994] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 412.968505][ T6994] usb 4-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 412.985898][ T6994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.009378][ T6994] usb 4-1: config 0 descriptor?? [ 413.381312][T12205] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 413.435087][ T6994] waltop 0003:172F:0500.001B: unknown main item tag 0x7 [ 413.440462][T12205] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 413.456155][T12375] loop6: detected capacity change from 0 to 16 [ 413.459052][ T6994] waltop 0003:172F:0500.001B: collection stack underflow [ 413.484846][T12205] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 413.486832][ T6994] waltop 0003:172F:0500.001B: item 0 2 0 12 parsing failed [ 413.504655][ T6994] waltop: probe of 0003:172F:0500.001B failed with error -22 [ 413.534795][T12375] erofs: (device loop6): mounted with root inode @ nid 36. [ 413.576786][ T26] audit: type=1800 audit(1784348271.047:117): pid=12375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2833" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 413.577376][T12375] syz.6.2833: attempt to access beyond end of device [ 413.577376][T12375] loop6: rw=0, sector=1342177272, nr_sectors = 16 limit=16 [ 413.598334][T12205] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 413.730784][ T4315] usb 4-1: USB disconnect, device number 12 [ 413.885001][T12205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.956046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 413.972128][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 414.010769][T12205] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.034418][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 414.061455][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 414.100933][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.108114][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.137388][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 414.154518][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 414.174171][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 414.190687][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.197879][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.226458][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 414.260210][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 414.301201][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 414.340558][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 414.387402][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 414.411718][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 414.452950][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 414.481450][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 414.499011][T12399] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 414.504543][T12395] loop7: detected capacity change from 0 to 2048 [ 414.516800][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 414.533222][T12397] loop3: detected capacity change from 0 to 2048 [ 414.553565][T12397] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 414.560657][T12205] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.581660][T12395] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 414.623367][T12205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 414.663119][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 414.697453][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 414.707202][T12400] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 414.738918][T12402] loop6: detected capacity change from 0 to 256 [ 414.832405][T12406] loop5: detected capacity change from 0 to 64 [ 414.891914][T12402] exfat: Deprecated parameter 'utf8' [ 414.953924][T12402] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 415.346160][ T4321] kernel write not supported for file /snd/seq (pid: 4321 comm: kworker/1:4) [ 415.977863][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 416.016080][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 416.026641][T12436] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 416.045485][T12205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.245715][T12442] loop5: detected capacity change from 0 to 256 [ 416.431855][T12422] syz.3.2848 (12422): drop_caches: 2 [ 416.436505][T12442] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 416.999233][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 417.025367][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 417.065009][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 417.074433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 417.083837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 417.092607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 417.123723][T12205] device veth0_vlan entered promiscuous mode [ 417.226788][T12465] netlink: 'syz.7.2866': attribute type 30 has an invalid length. [ 417.227135][T12205] device veth1_vlan entered promiscuous mode [ 417.239209][T12464] loop3: detected capacity change from 0 to 256 [ 417.280721][T12464] exfat: Deprecated parameter 'utf8' [ 417.322438][T12464] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 417.378784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 417.420283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 417.457015][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 417.485613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 417.533332][T12205] device veth0_macvtap entered promiscuous mode [ 417.534790][T12470] loop7: detected capacity change from 0 to 512 [ 417.562217][T12205] device veth1_macvtap entered promiscuous mode [ 417.641652][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.670196][T12470] EXT4-fs (loop7): 1 truncate cleaned up [ 417.675914][T12470] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 417.735500][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.823912][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.853448][T12475] loop3: detected capacity change from 0 to 2048 [ 417.865040][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.890750][T12475] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 417.935667][T12475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 417.945743][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.988164][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.018549][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.063948][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.101832][T12205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.106287][T12467] loop6: detected capacity change from 0 to 32768 [ 418.157132][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 418.195042][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 418.218868][T12467] JBD2: Ignoring recovery information on journal [ 418.220464][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 418.269280][T10142] EXT4-fs (loop7): unmounting filesystem. [ 418.286423][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 418.299145][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.356763][T12467] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 418.365855][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.365880][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.504617][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.555967][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.605311][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.629965][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.666537][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.694591][T12205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.736539][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 418.762663][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 418.791862][ T6741] ocfs2: Unmounting device (7,6) on (node local) [ 418.807731][T12205] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.870329][T12205] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.899637][T12205] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.908406][T12205] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.125962][T12500] loop5: detected capacity change from 0 to 1024 [ 419.236982][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.279598][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.288604][T12500] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 419.330220][T12500] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.347870][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 419.417347][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.479062][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.529998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 419.791942][T12518] loop8: detected capacity change from 0 to 16 [ 419.839999][T12518] erofs: (device loop8): mounted with root inode @ nid 36. [ 419.929835][T12473] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 420.043621][ T6563] EXT4-fs (loop5): unmounting filesystem. [ 421.171634][T12546] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2886'. [ 421.205012][T12549] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2889'. [ 421.245118][T12546] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2886'. [ 421.999586][T12573] loop7: detected capacity change from 0 to 2048 [ 422.075014][T12573] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 422.383110][T12583] loop3: detected capacity change from 0 to 1024 [ 422.493391][T12583] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 422.550160][T12583] ext4 filesystem being mounted at /612/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.732104][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 422.817438][T12596] loop6: detected capacity change from 0 to 512 [ 422.980437][T12596] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 423.035284][T12596] ext4 filesystem being mounted at /424/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 423.168185][ T6741] EXT4-fs (loop6): unmounting filesystem. [ 423.544448][T12614] loop6: detected capacity change from 0 to 2048 [ 423.872081][T12626] loop5: detected capacity change from 0 to 512 [ 424.048701][T12632] device vlan2 entered promiscuous mode [ 424.058995][T12632] device macvlan0 entered promiscuous mode [ 424.468671][T12611] syz.8.2909 (12611): drop_caches: 2 [ 424.503259][T12614] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 424.539000][T12626] EXT4-fs (loop5): 1 truncate cleaned up [ 424.561595][T12626] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 424.578470][T12614] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.801228][ T6563] EXT4-fs (loop5): unmounting filesystem. [ 425.855792][T12683] loop3: detected capacity change from 0 to 512 [ 426.308557][T12660] loop5: detected capacity change from 0 to 32768 [ 426.451545][T12683] EXT4-fs (loop3): 1 truncate cleaned up [ 426.488465][T12683] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 426.551161][T12660] XFS (loop5): Mounting V5 Filesystem [ 426.712469][T12673] syz.7.2932 (12673): drop_caches: 2 [ 426.730960][T12660] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 426.847248][T12660] XFS (loop5): Tail block (0x29) overwrite detected. Updated to 0x30 [ 426.892165][T12712] device vlan3 entered promiscuous mode [ 426.917554][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 426.932273][T12712] device syz_tun entered promiscuous mode [ 426.995697][T12660] XFS (loop5): Ending clean mount [ 427.163214][ T6563] XFS (loop5): Unmounting Filesystem [ 427.171477][T12720] loop8: detected capacity change from 0 to 65 [ 427.193624][T12722] loop3: detected capacity change from 0 to 256 [ 427.273215][T12722] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 427.441857][T12720] BFS-fs: bfs_fill_super(): NOTE: filesystem loop8 was created with 512 inodes, the real maximum is 511, mounting anyway [ 427.888960][T12732] loop3: detected capacity change from 0 to 256 [ 427.924223][T12729] loop7: detected capacity change from 0 to 4096 [ 428.053798][T12736] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 428.489673][T12744] loop8: detected capacity change from 0 to 256 [ 428.544656][T12744] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d) [ 428.648400][ T26] audit: type=1800 audit(1784348286.117:118): pid=12744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2953" name="file1" dev="loop8" ino=1048784 res=0 errno=0 [ 428.737021][ T26] audit: type=1800 audit(1784348286.207:119): pid=12744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2953" name="file1" dev="loop8" ino=1048784 res=0 errno=0 [ 428.774524][T12754] loop6: detected capacity change from 0 to 256 [ 428.850781][T12754] exfat: Deprecated parameter 'utf8' [ 428.879938][T12754] exfat: Deprecated parameter 'namecase' [ 428.927938][T12754] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 428.954480][T12756] device vlan3 entered promiscuous mode [ 428.998330][T12756] device syz_tun entered promiscuous mode [ 429.687598][T12774] loop5: detected capacity change from 0 to 4096 [ 429.826625][T12781] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 429.901347][T12784] loop7: detected capacity change from 0 to 1024 [ 430.053561][ T26] audit: type=1800 audit(1784348287.527:120): pid=12784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2979" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 430.439326][T12788] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 2: comm syz.8.2969: invalid block [ 430.486829][T12788] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2969: invalid indirect mapped block 10 (level 1) [ 430.625047][T12788] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2969: invalid indirect mapped block 8 (level 1) [ 430.632584][T12803] exfat: Deprecated parameter 'utf8' [ 430.685157][T12788] EXT4-fs (loop8): 1 truncate cleaned up [ 430.692817][T12786] syz.6.2968 (12786): drop_caches: 2 [ 430.720860][T12788] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 430.736442][T12803] exfat: Deprecated parameter 'namecase' [ 430.808439][T12803] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 431.041989][T12205] EXT4-fs (loop8): unmounting filesystem. [ 431.295392][T12818] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 431.302851][T12818] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 431.369780][T12818] vhci_hcd vhci_hcd.0: Device attached [ 431.539558][ T4321] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 431.549869][ T4771] vhci_hcd: vhci_device speed not set [ 431.625901][ T4771] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 431.749560][ T4321] usb 9-1: Using ep0 maxpacket: 16 [ 431.757963][ T4321] usb 9-1: config 0 has no interfaces? [ 431.785420][ T4321] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 431.815351][ T4321] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.846281][ T4321] usb 9-1: Product: syz [ 431.856447][ T4321] usb 9-1: Manufacturer: syz [ 431.879541][ T4321] usb 9-1: SerialNumber: syz [ 431.911562][ T4321] usb 9-1: config 0 descriptor?? [ 431.978063][T12841] syz.5.2990 (12841): drop_caches: 2 [ 432.097508][T12843] set_capacity_and_notify: 2 callbacks suppressed [ 432.097526][T12843] loop3: detected capacity change from 0 to 512 [ 432.136325][ T4321] usb 9-1: USB disconnect, device number 2 [ 432.158278][T12820] vhci_hcd: connection closed [ 432.165695][ T11] vhci_hcd: stop threads [ 432.193783][ T11] vhci_hcd: release socket [ 432.216731][ T11] vhci_hcd: disconnect device [ 432.220006][ T4771] vhci_hcd: vhci_device speed not set [ 432.277689][T12843] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.2991: invalid block [ 432.365215][T12816] loop7: detected capacity change from 0 to 40427 [ 432.373450][T12816] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 432.373963][T12843] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2991: invalid indirect mapped block 10 (level 1) [ 432.382377][T12816] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 432.417721][T12816] F2FS-fs (loop7): invalid crc value [ 432.423106][T12852] loop6: detected capacity change from 0 to 64 [ 432.466621][T12816] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 432.536065][T12843] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2991: invalid indirect mapped block 8 (level 1) [ 432.642209][T12843] EXT4-fs (loop3): 1 truncate cleaned up [ 432.654200][T12843] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 432.726657][T12816] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 432.762807][T12816] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 433.053127][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 433.211636][T12869] loop5: detected capacity change from 0 to 512 [ 433.340266][T12869] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 2: comm syz.5.3001: invalid block [ 433.391163][T12869] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3001: invalid indirect mapped block 10 (level 1) [ 433.435240][T12869] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3001: invalid indirect mapped block 8 (level 1) [ 433.453476][T12869] EXT4-fs (loop5): 1 truncate cleaned up [ 433.459311][T12869] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 433.649962][ T6563] EXT4-fs (loop5): unmounting filesystem. [ 434.108418][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2999'. [ 434.550566][T12911] loop3: detected capacity change from 0 to 65 [ 434.572675][T12911] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 434.793432][T12913] loop8: detected capacity change from 0 to 512 [ 434.891583][T12913] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.3017: invalid indirect mapped block 10 (level 1) [ 434.909823][T12918] loop7: detected capacity change from 0 to 64 [ 434.953429][T12913] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.3017: invalid indirect mapped block 8 (level 1) [ 435.011531][T12913] EXT4-fs (loop8): 1 truncate cleaned up [ 435.017429][T12913] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 435.223407][ T26] audit: type=1326 audit(1784348292.697:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.6.3021" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4694f9de99 code=0x7ffc0000 [ 435.318214][T12205] EXT4-fs (loop8): unmounting filesystem. [ 435.343174][ T26] audit: type=1326 audit(1784348292.697:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.6.3021" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4694f9de99 code=0x7ffc0000 [ 435.472567][ T26] audit: type=1326 audit(1784348292.697:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.6.3021" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f4694f5a2ec code=0x7ffc0000 [ 435.553394][T12935] loop8: detected capacity change from 0 to 256 [ 435.619633][ T26] audit: type=1326 audit(1784348292.697:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.6.3021" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4694f5a34e code=0x7ffc0000 [ 435.730638][ T26] audit: type=1326 audit(1784348292.697:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.6.3021" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4694f9db2b code=0x7ffc0000 [ 435.921441][ T26] audit: type=1326 audit(1784348292.697:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.6.3021" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f4694f9de99 code=0x7ffc0000 [ 436.019273][T12954] device macsec2 entered promiscuous mode [ 436.063113][ T26] audit: type=1326 audit(1784348292.697:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.6.3021" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4694f9de99 code=0x7ffc0000 [ 436.251598][ T26] audit: type=1326 audit(1784348292.727:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.6.3021" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4694f9de99 code=0x7ffc0000 [ 436.340752][ T26] audit: type=1326 audit(1784348292.727:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.6.3021" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4694f9de99 code=0x7ffc0000 [ 436.430458][ T26] audit: type=1326 audit(1784348292.727:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.6.3021" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f4694f9de99 code=0x7ffc0000 [ 436.740607][T12965] loop7: detected capacity change from 0 to 32768 [ 436.753599][T12965] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 436.761958][T12965] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 436.803803][T12974] loop8: detected capacity change from 0 to 4096 [ 436.829387][T12965] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 436.829387][T12965] inode = 1 19 [ 436.829387][T12965] function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 436.848425][T12965] gfs2: fsid=syz:syz.s: G: s:SH n:2/13 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 436.857556][T12965] gfs2: fsid=syz:syz.s: H: s:SH f:eEcH e:0 p:12965 [syz.7.3035] init_journal+0x1893/0x23a0 [ 436.868534][T12965] gfs2: fsid=syz:syz.s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 436.877288][T12965] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 436.884988][T12965] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 436.893863][T12965] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 436.900857][T12965] gfs2: fsid=syz:syz.s: File system withdrawn [ 436.906989][T12965] CPU: 1 PID: 12965 Comm: syz.7.3035 Not tainted syzkaller #0 [ 436.914495][T12965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 436.924589][T12965] Call Trace: [ 436.927931][T12965] [ 436.930935][T12965] dump_stack_lvl+0x188/0x24e [ 436.935696][T12965] ? show_regs_print_info+0x12/0x12 [ 436.940939][T12965] ? load_image+0x410/0x410 [ 436.945504][T12965] ? kobject_uevent_env+0x364/0x890 [ 436.950751][T12965] gfs2_withdraw+0xc69/0x1450 [ 436.955521][T12965] ? gfs2_lm+0x240/0x240 [ 436.959787][T12965] ? gfs2_glock_nq+0xcee/0x14d0 [ 436.964688][T12965] ? gfs2_consist_inode_i+0xf1/0x110 [ 436.970005][T12965] gfs2_jdesc_check+0x137/0x290 [ 436.974878][T12965] check_journal_clean+0x18a/0x360 [ 436.980012][T12965] ? gfs2_trans_remove_revoke+0x360/0x360 [ 436.985759][T12965] ? init_journal+0x1893/0x23a0 [ 436.990682][T12965] ? __rwlock_init+0x140/0x140 [ 436.995472][T12965] ? do_raw_spin_unlock+0x11d/0x230 [ 437.000768][T12965] ? _raw_spin_unlock+0x24/0x40 [ 437.005662][T12965] ? gfs2_jdesc_find+0xa7/0xc0 [ 437.010441][T12965] init_journal+0x1893/0x23a0 [ 437.015166][T12965] ? __lock_acquire+0x7c40/0x7c40 [ 437.020245][T12965] ? init_inodes+0xdb/0x320 [ 437.024767][T12965] ? _compound_head+0x120/0x120 [ 437.029636][T12965] ? vsnprintf+0x1b22/0x1c20 [ 437.034248][T12965] ? snprintf+0xe5/0x140 [ 437.038505][T12965] ? init_inodes+0xdb/0x320 [ 437.043043][T12965] ? vscnprintf+0x80/0x80 [ 437.047387][T12965] ? gfs2_glock_nq_num+0x175/0x1b0 [ 437.052610][T12965] init_inodes+0xdb/0x320 [ 437.056953][T12965] gfs2_fill_super+0x17bf/0x2020 [ 437.061929][T12965] ? gfs2_reconfigure+0xd80/0xd80 [ 437.066970][T12965] ? init_locking+0xb8/0x200 [ 437.071666][T12965] ? sb_set_blocksize+0xa5/0xe0 [ 437.076567][T12965] get_tree_bdev+0x3e6/0x610 [ 437.081890][T12965] ? gfs2_reconfigure+0xd80/0xd80 [ 437.086935][T12965] gfs2_get_tree+0x4d/0x1e0 [ 437.091455][T12965] vfs_get_tree+0x88/0x270 [ 437.095893][T12965] do_new_mount+0x247/0xa40 [ 437.100442][T12965] __se_sys_mount+0x2e3/0x3d0 [ 437.105135][T12965] ? __x64_sys_mount+0xc0/0xc0 [ 437.109912][T12965] ? lockdep_hardirqs_on+0x94/0x140 [ 437.115156][T12965] ? __x64_sys_mount+0x1c/0xc0 [ 437.119932][T12965] do_syscall_64+0x4c/0xa0 [ 437.124369][T12965] ? clear_bhb_loop+0x60/0xb0 [ 437.129060][T12965] ? clear_bhb_loop+0x60/0xb0 [ 437.133776][T12965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.139705][T12965] RIP: 0033:0x7f04f199f10a [ 437.144201][T12965] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.163858][T12965] RSP: 002b:00007f04f2840e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 437.172411][T12965] RAX: ffffffffffffffda RBX: 00007f04f2840ee0 RCX: 00007f04f199f10a [ 437.180489][T12965] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f04f2840ea0 [ 437.188562][T12965] RBP: 0000200000000400 R08: 00007f04f2840ee0 R09: 0000000000210401 [ 437.196648][T12965] R10: 0000000000210401 R11: 0000000000000246 R12: 0000200000012500 [ 437.204631][T12965] R13: 00007f04f2840ea0 R14: 00000000000125d8 R15: 0000200000000240 [ 437.212668][T12965] [ 437.217181][T12965] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 437.281953][ T4383] I/O error, dev loop7, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 438.051087][T12998] loop6: detected capacity change from 0 to 128 [ 438.089125][T12998] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 438.142821][T13000] xt_socket: unknown flags 0xc [ 438.149106][T12998] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 438.394217][ T62] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 438.467901][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3057'. [ 439.268187][T12994] loop7: detected capacity change from 0 to 40427 [ 439.372502][T12994] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 439.379033][T12994] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 439.396820][T13019] syz.3.3063 (13019): drop_caches: 2 [ 439.430331][T12994] F2FS-fs (loop7): invalid crc value [ 439.437225][T13005] loop5: detected capacity change from 0 to 32768 [ 439.483877][T12994] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 439.794480][T12994] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 439.814397][T12994] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 440.066610][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.073157][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.112420][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3067'. [ 440.272459][T10142] syz-executor: attempt to access beyond end of device [ 440.272459][T10142] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 440.451943][T13044] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3070'. [ 441.634426][T13078] xt_socket: unknown flags 0xc [ 441.901972][T13052] loop3: detected capacity change from 0 to 32768 [ 442.080523][T13052] XFS (loop3): Mounting V5 Filesystem [ 442.191667][T13100] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3086'. [ 442.210833][T13052] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 442.354252][T13052] XFS (loop3): Tail block (0x29) overwrite detected. Updated to 0x30 [ 442.398182][T13052] XFS (loop3): Ending clean mount [ 442.658265][T13113] loop7: detected capacity change from 0 to 1024 [ 442.680460][ T4280] XFS (loop3): Unmounting Filesystem [ 442.794889][T13113] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 443.085194][T13123] loop8: detected capacity change from 0 to 128 [ 443.094162][T10142] EXT4-fs (loop7): unmounting filesystem. [ 443.123848][T13123] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 443.240068][T13123] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 443.514854][ T62] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 443.729660][T13137] loop8: detected capacity change from 0 to 1024 [ 443.802500][T13105] loop6: detected capacity change from 0 to 40427 [ 443.820391][T13137] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 443.856793][T13135] loop3: detected capacity change from 0 to 4096 [ 443.863582][T13137] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.880669][T13105] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 443.940533][T13105] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 443.961228][T13135] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 444.050046][T13105] F2FS-fs (loop6): invalid crc value [ 444.111334][T13105] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 444.189273][T12205] EXT4-fs (loop8): unmounting filesystem. [ 444.421500][T13156] loop8: detected capacity change from 0 to 64 [ 444.481632][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3116'. [ 444.524265][T13105] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 444.549871][T13105] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 446.732981][T13221] loop7: detected capacity change from 0 to 512 [ 446.811591][T13221] EXT4-fs (loop7): orphan cleanup on readonly fs [ 446.836250][T13226] loop6: detected capacity change from 0 to 512 [ 446.873870][T13221] EXT4-fs (loop7): 1 orphan inode deleted [ 446.899773][T13221] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 447.036816][T13226] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 447.146977][T13208] loop3: detected capacity change from 0 to 40427 [ 447.154917][ T6741] EXT4-fs (loop6): unmounting filesystem. [ 447.170065][T13208] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 447.177972][T13208] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 447.223462][T13233] netem: change failed [ 447.283951][T13208] F2FS-fs (loop3): invalid crc value [ 447.355663][T13208] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 447.355846][T13229] loop5: detected capacity change from 0 to 4096 [ 447.373724][T13221] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 447.403631][T13221] ext4 filesystem being remounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.644434][T10142] EXT4-fs (loop7): unmounting filesystem. [ 447.761599][T13208] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 447.799200][T13208] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 447.939680][T13250] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 447.946276][T13250] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 448.000921][T13250] vhci_hcd vhci_hcd.0: Device attached [ 448.199737][ T4321] vhci_hcd: vhci_device speed not set [ 448.274455][ T4321] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 448.432843][T13266] loop5: detected capacity change from 0 to 4096 [ 448.505112][T13266] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 448.644965][T13266] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 448.900581][ T6563] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 448.969265][ T6563] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 449.243935][T13289] loop3: detected capacity change from 0 to 64 [ 449.758430][T13303] netem: change failed [ 450.972322][T13251] vhci_hcd: connection reset by peer [ 450.977918][ T6900] vhci_hcd: stop threads [ 450.984480][ T6900] vhci_hcd: release socket [ 450.999921][ T6900] vhci_hcd: disconnect device [ 451.226167][T13356] loop6: detected capacity change from 0 to 128 [ 451.294061][T13356] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 451.328745][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3179'. [ 451.355572][T13356] hpfs: filesystem error: improperly stopped [ 451.376472][T13356] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 451.391884][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3179'. [ 451.401710][T13354] loop7: detected capacity change from 0 to 4096 [ 451.436964][T13356] hpfs: You really don't want any checks? You are crazy... [ 451.463123][T13354] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 451.485640][T13356] hpfs: Code page index out of array [ 451.511915][T13356] hpfs: code page support is disabled [ 451.548173][T13356] hpfs: hpfs_map_4sectors(): unaligned read [ 451.580873][T13356] hpfs: hpfs_map_4sectors(): unaligned read [ 451.614897][T13356] hpfs: filesystem error: unable to find root dir [ 452.040399][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3186'. [ 452.098985][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3186'. [ 452.298202][T13388] loop7: detected capacity change from 0 to 512 [ 452.352644][T13388] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 452.522887][T13388] EXT4-fs (loop7): 1 truncate cleaned up [ 452.528626][T13388] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 452.713167][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3194'. [ 452.736315][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3194'. [ 452.743104][T13405] loop6: detected capacity change from 0 to 256 [ 452.780350][T10142] EXT4-fs (loop7): unmounting filesystem. [ 452.787211][T13405] exfat: Deprecated parameter 'utf8' [ 452.846644][T13405] exfat: Deprecated parameter 'utf8' [ 452.876969][T13405] exfat: Deprecated parameter 'namecase' [ 452.903589][T13405] exfat: Deprecated parameter 'utf8' [ 452.964935][T13405] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 453.308384][T13418] device vlan3 entered promiscuous mode [ 453.336914][T13418] device bridge0 entered promiscuous mode [ 453.369192][ T6900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 453.430857][ T4321] vhci_hcd: vhci_device speed not set [ 453.887920][T13438] loop3: detected capacity change from 0 to 128 [ 453.966475][T13438] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 454.017047][T13438] hpfs: filesystem error: improperly stopped [ 454.044008][T13438] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 454.109801][T13438] hpfs: You really don't want any checks? You are crazy... [ 454.147353][T13438] hpfs: Code page index out of array [ 454.182356][T13438] hpfs: code page support is disabled [ 454.228874][T13438] hpfs: hpfs_map_4sectors(): unaligned read [ 454.254910][T13438] hpfs: hpfs_map_4sectors(): unaligned read [ 454.267989][T13438] hpfs: filesystem error: unable to find root dir [ 454.855119][T13473] loop6: detected capacity change from 0 to 64 [ 454.926714][T13475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3221'. [ 455.361943][T13458] loop8: detected capacity change from 0 to 32768 [ 455.601366][T13458] XFS (loop8): Mounting V5 Filesystem [ 455.637683][T13495] loop6: detected capacity change from 0 to 1024 [ 455.710617][T13495] EXT4-fs: inline encryption not supported [ 455.728015][T13458] XFS (loop8): Ending clean mount [ 455.878053][T13495] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 2: comm syz.6.3224: lblock 2 mapped to illegal pblock 2 (length 1) [ 455.958962][T13495] EXT4-fs (loop6): Remounting filesystem read-only [ 455.969103][T13495] __quota_error: 19 callbacks suppressed [ 455.969121][T13495] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 456.089552][T13495] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 48: comm syz.6.3224: lblock 0 mapped to illegal pblock 48 (length 1) [ 456.121012][T12205] XFS (loop8): Unmounting Filesystem [ 456.160027][T13495] EXT4-fs (loop6): Remounting filesystem read-only [ 456.209198][T13495] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 456.279569][T13495] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.3224: Failed to acquire dquot type 0 [ 456.357311][T13495] EXT4-fs (loop6): Remounting filesystem read-only [ 456.387107][T13495] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 456.473244][T13495] EXT4-fs (loop6): Remounting filesystem read-only [ 456.529715][T13495] EXT4-fs error (device loop6): ext4_evict_inode:281: inode #11: comm syz.6.3224: mark_inode_dirty error [ 456.659897][T13495] EXT4-fs (loop6): Remounting filesystem read-only [ 456.666547][T13495] EXT4-fs warning (device loop6): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 456.690672][T13517] device vlan3 entered promiscuous mode [ 456.747230][T13517] device bridge0 entered promiscuous mode [ 456.752564][T13495] EXT4-fs (loop6): 1 orphan inode deleted [ 456.770988][ T11] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 456.774449][T13495] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 456.831486][ T11] EXT4-fs (loop6): Remounting filesystem read-only [ 456.886304][ T11] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 456.911615][T13523] loop8: detected capacity change from 0 to 2048 [ 456.919998][ T11] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 0 [ 456.991456][T13523] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 457.002963][ T11] EXT4-fs (loop6): Remounting filesystem read-only [ 457.089770][T13523] NILFS (loop8): mounting unchecked fs [ 457.122568][T13495] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #2: block 16: comm syz.6.3224: lblock 0 mapped to illegal pblock 16 (length 1) [ 457.185965][T13523] NILFS (loop8): recovery complete [ 457.226259][T13531] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 457.290068][T13495] EXT4-fs (loop6): Remounting filesystem read-only [ 457.503799][ T6741] EXT4-fs (loop6): unmounting filesystem. [ 457.547828][ T6741] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 457.595373][ T6741] EXT4-fs (loop6): Remounting filesystem read-only [ 457.617493][ T6741] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 457.667939][ T6741] EXT4-fs (loop6): Remounting filesystem read-only [ 457.680764][ T6741] EXT4-fs error (device loop6): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 457.697692][ T6741] EXT4-fs (loop6): Remounting filesystem read-only [ 457.872979][T13550] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3243'. [ 458.480735][T13539] loop5: detected capacity change from 0 to 32768 [ 458.509676][ T5044] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 458.529019][T13539] JBD2: Ignoring recovery information on journal [ 458.644195][T13548] loop3: detected capacity change from 0 to 32768 [ 458.662401][T13548] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 458.711528][ T5044] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 458.739249][T13539] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 458.741634][ T5044] usb 7-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 458.767573][ T46] (kworker/u4:3,46,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=16, inode=66, rec_len=22056, name_len=67 [ 458.774219][ T5044] usb 7-1: config 0 interface 0 has no altsetting 0 [ 458.805554][T13573] loop8: detected capacity change from 0 to 256 [ 458.819408][T13539] [ 458.821819][T13539] ====================================================== [ 458.828869][T13539] WARNING: possible circular locking dependency detected [ 458.836005][T13539] syzkaller #0 Not tainted [ 458.840456][T13539] ------------------------------------------------------ [ 458.847503][T13539] syz.5.3239/13539 is trying to acquire lock: [ 458.853605][T13539] ffff888053102648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4810 [ 458.866982][T13539] [ 458.866982][T13539] but task is already holding lock: [ 458.874373][T13539] ffff888056f41538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x491/0x1390 [ 458.883995][T13539] [ 458.883995][T13539] which lock already depends on the new lock. [ 458.883995][T13539] [ 458.894413][T13539] [ 458.894413][T13539] the existing dependency chain (in reverse order) is: [ 458.903434][T13539] [ 458.903434][T13539] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 458.911265][T13539] down_read+0x42/0x2d0 [ 458.915955][T13539] ocfs2_init_acl+0x307/0x770 [ 458.921162][T13539] ocfs2_mknod+0x18e0/0x2580 [ 458.926279][T13539] ocfs2_create+0x1b6/0x4b0 [ 458.931304][T13539] path_openat+0x11b9/0x2f10 [ 458.936425][T13539] do_filp_open+0x1ee/0x420 [ 458.941454][T13539] do_sys_openat2+0x14b/0x4f0 [ 458.946786][T13539] __x64_sys_openat+0x135/0x160 [ 458.952165][T13539] do_syscall_64+0x4c/0xa0 [ 458.957113][T13539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 458.963536][T13539] [ 458.963536][T13539] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 458.972068][T13539] down_read+0x42/0x2d0 [ 458.976749][T13539] ocfs2_start_trans+0x3a4/0x6f0 [ 458.982340][T13539] ocfs2_reserve_suballoc_bits+0x7dd/0x4810 [ 458.988797][T13539] ocfs2_reserve_new_inode+0x4f5/0xd70 [ 458.994783][T13539] ocfs2_mknod+0xb6b/0x2580 [ 458.999813][T13539] ocfs2_create+0x1b6/0x4b0 [ 459.004840][T13539] path_openat+0x11b9/0x2f10 [ 459.009958][T13539] do_filp_open+0x1ee/0x420 [ 459.014986][T13539] do_sys_openat2+0x14b/0x4f0 [ 459.020196][T13539] __x64_sys_openat+0x135/0x160 [ 459.025583][T13539] do_syscall_64+0x4c/0xa0 [ 459.030531][T13539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.037066][T13539] [ 459.037066][T13539] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 459.044581][T13539] ocfs2_start_trans+0x2a5/0x6f0 [ 459.050047][T13539] ocfs2_mknod+0x1273/0x2580 [ 459.055161][T13539] ocfs2_create+0x1b6/0x4b0 [ 459.060187][T13539] path_openat+0x11b9/0x2f10 [ 459.065306][T13539] do_filp_open+0x1ee/0x420 [ 459.070338][T13539] do_sys_openat2+0x14b/0x4f0 [ 459.075550][T13539] __x64_sys_openat+0x135/0x160 [ 459.080943][T13539] do_syscall_64+0x4c/0xa0 [ 459.085889][T13539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.092331][T13539] [ 459.092331][T13539] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 459.102859][T13539] down_write+0x36/0x60 [ 459.107632][T13539] ocfs2_reserve_local_alloc_bits+0x11e/0x2770 [ 459.114320][T13539] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 459.121350][T13539] ocfs2_mknod+0x1211/0x2580 [ 459.126464][T13539] ocfs2_create+0x1b6/0x4b0 [ 459.131490][T13539] path_openat+0x11b9/0x2f10 [ 459.136608][T13539] do_filp_open+0x1ee/0x420 [ 459.141639][T13539] do_sys_openat2+0x14b/0x4f0 [ 459.146950][T13539] __x64_sys_openat+0x135/0x160 [ 459.152359][T13539] do_syscall_64+0x4c/0xa0 [ 459.157409][T13539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.164284][T13539] [ 459.164284][T13539] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 459.174814][T13539] __lock_acquire+0x2d18/0x7c40 [ 459.180197][T13539] lock_acquire+0x1bb/0x4a0 [ 459.185230][T13539] down_write+0x36/0x60 [ 459.189911][T13539] ocfs2_reserve_suballoc_bits+0x16a/0x4810 [ 459.196333][T13539] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 459.203187][T13539] ocfs2_init_xattr_set_ctxt+0x314/0x7b0 [ 459.209393][T13539] ocfs2_xattr_set+0xc71/0x1390 [ 459.214779][T13539] __vfs_setxattr+0x3d8/0x410 [ 459.220079][T13539] __vfs_setxattr_noperm+0x126/0x5e0 [ 459.225895][T13539] vfs_setxattr+0x167/0x2e0 [ 459.230927][T13539] setxattr+0x2a3/0x330 [ 459.235734][T13539] path_setxattr+0x147/0x290 [ 459.240856][T13539] __x64_sys_setxattr+0xb7/0xd0 [ 459.246235][T13539] do_syscall_64+0x4c/0xa0 [ 459.251181][T13539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.257611][T13539] [ 459.257611][T13539] other info that might help us debug this: [ 459.257611][T13539] [ 459.267865][T13539] Chain exists of: [ 459.267865][T13539] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 459.267865][T13539] [ 459.285199][T13539] Possible unsafe locking scenario: [ 459.285199][T13539] [ 459.292667][T13539] CPU0 CPU1 [ 459.298045][T13539] ---- ---- [ 459.303503][T13539] lock(&oi->ip_xattr_sem); [ 459.308104][T13539] lock(&journal->j_trans_barrier); [ 459.315940][T13539] lock(&oi->ip_xattr_sem); [ 459.323064][T13539] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4); [ 459.330364][T13539] [ 459.330364][T13539] *** DEADLOCK *** [ 459.330364][T13539] [ 459.338596][T13539] 3 locks held by syz.5.3239/13539: [ 459.343817][T13539] #0: ffff88806538e460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 459.353216][T13539] #1: ffff888056f41808 (&sb->s_type->i_mutex_key#23){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0 [ 459.363676][T13539] #2: ffff888056f41538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x491/0x1390 [ 459.373696][T13539] [ 459.373696][T13539] stack backtrace: [ 459.379638][T13539] CPU: 0 PID: 13539 Comm: syz.5.3239 Not tainted syzkaller #0 [ 459.387183][T13539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 459.397328][T13539] Call Trace: [ 459.400619][T13539] [ 459.403644][T13539] dump_stack_lvl+0x188/0x24e [ 459.408341][T13539] ? load_image+0x410/0x410 [ 459.412869][T13539] ? show_regs_print_info+0x12/0x12 [ 459.418086][T13539] ? print_circular_bug+0x12b/0x1a0 [ 459.423339][T13539] check_noncircular+0x296/0x330 [ 459.428420][T13539] ? add_chain_block+0x9b0/0x9b0 [ 459.433375][T13539] ? lockdep_lock+0xf1/0x1f0 [ 459.438092][T13539] ? _find_first_zero_bit+0xd2/0x100 [ 459.443436][T13539] __lock_acquire+0x2d18/0x7c40 [ 459.448302][T13539] ? verify_lock_unused+0x140/0x140 [ 459.453509][T13539] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 459.459217][T13539] ? do_raw_spin_lock+0x128/0x2f0 [ 459.464246][T13539] ? mutex_unlock+0x10/0x10 [ 459.468760][T13539] ? __rwlock_init+0x140/0x140 [ 459.473528][T13539] ? do_raw_spin_unlock+0x11d/0x230 [ 459.478730][T13539] lock_acquire+0x1bb/0x4a0 [ 459.483241][T13539] ? ocfs2_reserve_suballoc_bits+0x16a/0x4810 [ 459.489317][T13539] ? __might_sleep+0xd0/0xd0 [ 459.494202][T13539] ? read_lock_is_recursive+0x10/0x10 [ 459.499616][T13539] down_write+0x36/0x60 [ 459.503776][T13539] ? ocfs2_reserve_suballoc_bits+0x16a/0x4810 [ 459.509851][T13539] ocfs2_reserve_suballoc_bits+0x16a/0x4810 [ 459.515802][T13539] ? mark_lock+0x94/0x320 [ 459.520175][T13539] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 459.526265][T13539] ? __lock_acquire+0x7c40/0x7c40 [ 459.531300][T13539] ? lock_chain_count+0x20/0x20 [ 459.536159][T13539] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 459.542057][T13539] ? lockdep_hardirqs_on+0x94/0x140 [ 459.547259][T13539] ? ocfs2_block_group_search+0x4f0/0x4f0 [ 459.552986][T13539] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 459.558907][T13539] ? _raw_spin_unlock+0x40/0x40 [ 459.563764][T13539] ? stack_trace_save+0xa6/0xf0 [ 459.568690][T13539] ? __stack_depot_save+0x439/0x480 [ 459.573930][T13539] ? kasan_set_track+0x60/0x70 [ 459.578753][T13539] ? kasan_set_track+0x4b/0x70 [ 459.583533][T13539] ? __kasan_kmalloc+0x8e/0xa0 [ 459.588304][T13539] ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0 [ 459.594816][T13539] ? ocfs2_init_xattr_set_ctxt+0x314/0x7b0 [ 459.600647][T13539] ? ocfs2_xattr_set+0xc71/0x1390 [ 459.605701][T13539] ? __vfs_setxattr+0x3d8/0x410 [ 459.610661][T13539] ? __vfs_setxattr_noperm+0x126/0x5e0 [ 459.616133][T13539] ? vfs_setxattr+0x167/0x2e0 [ 459.620837][T13539] ? setxattr+0x2a3/0x330 [ 459.625175][T13539] ? path_setxattr+0x147/0x290 [ 459.629964][T13539] ? __x64_sys_setxattr+0xb7/0xd0 [ 459.634998][T13539] ? do_syscall_64+0x4c/0xa0 [ 459.639599][T13539] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.645690][T13539] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 459.652041][T13539] ? ocfs2_init_steal_slots+0x150/0x150 [ 459.657623][T13539] ? ocfs2_xattr_block_set+0x2ff0/0x2ff0 [ 459.663262][T13539] ? do_raw_spin_lock+0x128/0x2f0 [ 459.668298][T13539] ocfs2_init_xattr_set_ctxt+0x314/0x7b0 [ 459.674137][T13539] ? ocfs2_prepare_refcount_xattr+0xfe0/0xfe0 [ 459.680241][T13539] ? ocfs2_truncate_log_needs_flush+0x12c/0x300 [ 459.686572][T13539] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 459.692475][T13539] ? ocfs2_xattr_ibody_find+0xc6/0x780 [ 459.697946][T13539] ? up_write+0x1b6/0x410 [ 459.702541][T13539] ocfs2_xattr_set+0xc71/0x1390 [ 459.707461][T13539] ? __ocfs2_xattr_set_handle+0xf20/0xf20 [ 459.713202][T13539] ? ocfs2_inode_unlock_tracker+0x26c/0x2e0 [ 459.719098][T13539] ? __rwlock_init+0x140/0x140 [ 459.723872][T13539] ? do_raw_spin_unlock+0x11d/0x230 [ 459.729081][T13539] ? posix_xattr_acl+0x8f/0xb0 [ 459.733925][T13539] ? evm_protect_xattr+0x332/0x9d0 [ 459.739052][T13539] ? ocfs2_getattr+0x360/0x360 [ 459.743833][T13539] ? ocfs2_xattr_user_set+0xa7/0xf0 [ 459.749036][T13539] ? ocfs2_xattr_user_get+0xe0/0xe0 [ 459.754240][T13539] __vfs_setxattr+0x3d8/0x410 [ 459.758935][T13539] __vfs_setxattr_noperm+0x126/0x5e0 [ 459.764230][T13539] vfs_setxattr+0x167/0x2e0 [ 459.768750][T13539] ? xattr_permission+0x510/0x510 [ 459.773875][T13539] ? strncpy_from_user+0x1dc/0x340 [ 459.779085][T13539] setxattr+0x2a3/0x330 [ 459.783250][T13539] ? path_setxattr+0x290/0x290 [ 459.788038][T13539] ? __mnt_want_write+0x21f/0x2a0 [ 459.793114][T13539] path_setxattr+0x147/0x290 [ 459.797716][T13539] ? simple_xattr_list_add+0xf0/0xf0 [ 459.803010][T13539] ? lock_chain_count+0x20/0x20 [ 459.807870][T13539] __x64_sys_setxattr+0xb7/0xd0 [ 459.812728][T13539] do_syscall_64+0x4c/0xa0 [ 459.817258][T13539] ? clear_bhb_loop+0x60/0xb0 [ 459.821944][T13539] ? clear_bhb_loop+0x60/0xb0 [ 459.826627][T13539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.832524][T13539] RIP: 0033:0x7f8ed459de99 [ 459.836946][T13539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.856557][T13539] RSP: 002b:00007f8ed549b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 459.864982][T13539] RAX: ffffffffffffffda RBX: 00007f8ed4825fa0 RCX: 00007f8ed459de99 [ 459.872957][T13539] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000200000000080 [ 459.880935][T13539] RBP: 00007f8ed4633eaf R08: 0000000000000000 R09: 0000000000000000 [ 459.888930][T13539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.896998][T13539] R13: 00007f8ed4826038 R14: 00007f8ed4825fa0 R15: 00007ffed8af3ba8 [ 459.904997][T13539] [ 459.953373][ T5044] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 459.974049][T13573] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 460.006669][ T5044] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.021668][ T4383] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 460.043222][ T5044] usb 7-1: config 0 descriptor?? [ 460.055311][ T6563] ocfs2: Unmounting device (7,5) on (node local) [ 460.463697][ T5044] hid-multitouch 0003:1FD2:6007.001C: unknown main item tag 0x2 [ 460.471614][ T5044] hid-multitouch 0003:1FD2:6007.001C: unknown main item tag 0x0 [ 460.479275][ T5044] hid-multitouch 0003:1FD2:6007.001C: unknown main item tag 0x0 [ 460.487002][ T5044] hid-multitouch 0003:1FD2:6007.001C: unknown main item tag 0x0 [ 460.494901][ T5044] hid-multitouch 0003:1FD2:6007.001C: unknown main item tag 0x0 [ 460.502624][ T5044] hid-multitouch 0003:1FD2:6007.001C: unknown main item tag 0x0 [ 460.510374][ T5044] hid-multitouch 0003:1FD2:6007.001C: unknown main item tag 0x0 [ 460.518025][ T5044] hid-multitouch 0003:1FD2:6007.001C: unknown main item tag 0x0 [ 460.526346][ T5044] hid-multitouch 0003:1FD2:6007.001C: unknown main item tag 0x0 [ 460.535167][ T5044] hid-multitouch 0003:1FD2:6007.001C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 460.686537][ T5044] usb 7-1: USB disconnect, device number 10