last executing test programs: 3.445361051s ago: executing program 4 (id=9742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x800) 3.345666518s ago: executing program 4 (id=9746): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x35, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) 3.198246198s ago: executing program 4 (id=9750): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.923470856s ago: executing program 2 (id=9785): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000240)={0x0, 0x1, 0x7}) mq_timedsend(r0, 0x0, 0xb, 0x1, 0x0) 1.922295597s ago: executing program 1 (id=9786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 1.807177035s ago: executing program 2 (id=9788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 't'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) 1.705314881s ago: executing program 0 (id=9789): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0xe}, 0x1) 1.705027472s ago: executing program 1 (id=9790): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0xc0c09425, &(0x7f0000000140)={0x0, {0x22}}) 1.694166962s ago: executing program 0 (id=9791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '|'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}}, 0x0) 1.650552305s ago: executing program 2 (id=9792): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ff2000/0x8000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) 1.533540744s ago: executing program 2 (id=9793): openat$capi20(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a40)='./file0\x00', 0x42141, 0x0) mount(&(0x7f0000000200), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ubifs\x00', 0x8080, 0x0) 1.15236759s ago: executing program 0 (id=9804): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) ioctl$LOOP_SET_FD(r0, 0x80045006, 0xffffffffffffffff) 1.14999593s ago: executing program 2 (id=9795): r0 = socket$inet(0x2, 0xa, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @dev}, {0x2, 0x0, @private}}) 1.119269582s ago: executing program 2 (id=9796): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f00000004c0)={[{@flushoncommit}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nobarrier}, {@nodiscard}, {@ref_verify}, {@datacow}, {@nobarrier}, {@nodiscard}, {@clear_cache}, {@enospc_debug}, {@space_cache}, {@discard}, {@commit}]}, 0x3, 0x55a3, &(0x7f0000005640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x5000943f, &(0x7f0000001480)={{}, 0x0, 0x0, @unused, @subvolid=0x3}) 736.389668ms ago: executing program 1 (id=9797): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000580)='syz1\x00') 734.817839ms ago: executing program 0 (id=9808): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r0, 0x402c542b, 0x0) 703.942731ms ago: executing program 3 (id=9798): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000001f00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES8], 0xfc, 0x2b5, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40047211, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 487.392516ms ago: executing program 0 (id=9799): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file1\x00', 0x1208808, &(0x7f0000000680)={[{@session={'session', 0x3d, 0x6}}, {@uid}, {@uid_forget}, {@volume={'volume', 0x3d, 0x3}}, {@shortad}, {@uid_ignore}, {@session={'session', 0x3d, 0xffffffffffffff81}}, {@uid}, {@anchor={'anchor', 0x3d, 0x2}}, {@partition={'partition', 0x3d, 0xfffffffffffffffc}}, {@undelete}]}, 0x2, 0xc36, &(0x7f0000000f40)="$eJzs3U9sHNd9B/DfGy3FpdxWTOwoThoXm7ZIZcVy9S+mYhXOqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgpYzOxbcUWRNi2KlGR9Prb03Z15b+a9md0ZSeCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+/cvHU6fSgWwEAHKTLY187dcb9HwAeK1f8/R8AAAAAAAAAAAAAAB52KYp4MlLMX15PE9X7jvqldt/NW+PDI9tXG0hVzUNV+fJX/fSZs+e+9MLQ+W5eas9+QP377bPx2tiVi42X527ML0wvLk5PNcZn25NzU9O73sJe6291ojoAjRuv35y6dm2xceb5s3esvjX4fv8TxwYvDD178plu2fHhkZGxzSL13vK1e25Ix04jPA5HEScjxXPf/1lqRUQRez8W9YM991sNVJ04UXVifHik6shMuzW7VK4c7R6IIqLRU6nZPUbbn4uo9R1oH3bWjFgum182+ETZvbH51kLr6sx0Y7S1sNReas/NjqZOa8v+NKKI8yliJSLW+u/eXF8UUYsU3z26nq5GxKHucfhiNTB453YU+9jHXSjb2eiLWCkegXP2EOuPIl6NFD9/53hM5utMda35QsSrZf4w4q0yX4pI5QfjXMR723yOeDTVooi/KM//hfU0VV0PuteVS19vfHX22lxP2e515SPeH+66Ujyg+8PAljwYD/m1qR5FtKor/nq69z/sAAAAAAAAAAAAAAAAAHC/DUQRn4kUr/z7H1fjiqMal370wtAfDP5q75jxpz9kO2XZ5yNiudjdmNzDeWDgaBpN6QGPJX6c1aOIP8nj/779oBsDAAAAAAAAAAAAAAAAAADwWCvip5HixXePp5XonVO8PXu9caV1daYzK2x37t/unOkbGxsbjdTJZs6JnMs5V3Ku5lzLGUWun7OZcyLncs6VnKs513LGoVw/ZzPnRM7lnCs5V3Ou5Yxarp+zmXMi53LOlZyrOddyxkMydy8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMdJEUX8MlJ855vrKVJENCMmopOr/Q+6dQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAqT8V8YNI0fjD5u1ltYhI1f8dx8vfzkXzcJmfjOZQmS9F82LOVpW15rcfQPvZm75UxE8iRX/97dsnPJ//vs672x+DeOtbm+8+W+vkoe7Kwff7nzh29MLQyG88vdPrtF0DTlxqz9681RgfHhkZ61lcy3v/ZM+ywbzf4v50nYhYfOPN11szM9ML9/6i/Ajsofoj9CLVHpeeelG9iNrB73Sh3vlmPvC+8xgo7//vRYrfffc/ujf8zv2/Hr/SeXf7Dh+/+NPN+/+LWze0y/t/bWu9fP8v7+nb3f+f7Fn2Yv7TSF8tor50Y77vWER98Y03T7ZvtK5PX5+ePXfq1JeHhr589lTf4Yj6tfbMdM+r+3K4AAAAAAAAAAAAAAAAAA5OKuIrkaL1k/XUiIhb1XitwQtDz5585lAcqsZb3TFu+7WxKxcbL8/dmF+YXlycnmqMz7Yn56amd7u7ejXca3x4ZF8686EG9rn9A/WX5+bfWGhf/6OlbdcfqV+8uri00JrcfnUMRBHR7F1yomrw+PBI1eiZdmu2qjq67WD6j64vFfGfkWLyXCN9Pi/L4/+3jvC/Y/z/8tYN7dP4/0/0LCv3mVIRv4gUv/OXT8fnq3YeibuOWS73t5HixPnP5XJxuCzXbUPnuQKdkYFl2f+NFP/4yzvLdsdDPrlZ9vSuD+wjojz/RyPFD/78e/Gbedmdz3/Y/vwf2bqhfTr/T/UsO3LH8wr23HXy+T8ZKV568u34rbzsg57/0X32xvFc+PbzOfbp/H+qZ9lg3u9v35+uAwAAAAAAAAAAPNL6UhF/Fyl+NFJLL+Rlu/n5v6mtG9qnn//6dM+yqfszX9GHvtjzQQUAAACAh0RfKuKnkeL60tu3x1DfOf67Z/zn722O/xxOW9ZW/873a9VzA+7nv//1Gsz7ndh7twEAAAAAAAAAAAAAAAAAAOChklIRL+T51Ceq8fxTO86nvhopXvnv53K5dKws150HfrD6vX55bvbkxZmZucnWUuvqzHRjbL41OV3WfSpSrP/N53LdoppfvTvffGeO98252Bcixcjfd8t25mLvzk3+1GbZ02XZT0SK//qHO8t257H+1GbZM2XZv44U3/jn7cse2yx7tiz7vUjx4280umWPlGW7z0f99GbZ5yfnin04KwAAAAAAAAAAAAAAAAAAADxu+lIRfxYp/ufGyu2x/Hn+/76et5W3vtUz3/8Wt6p5/ger+f93en0v8/9XzxVY3mmvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw8ZSiiDcjxfzl9bTaX77vqF9qz968NT48sn21gVTVPFSVL3/VT585e+5LLwyd7+YH17/fPhOvjV252Hh57sb8wvTi4vRUY3y2PTk3Nb3rLey1/lYnqgPQuPH6zalr1xYbZ54/Wy0+nFffGny//4ljgxeGnj35TLfs+PDIyFjPJmp997z3u6Qdlh+OIv4qUjz3/Z+lH/VHFLH3Y/Ehn539NlB14kTVifHhkaojM+3W7FK5crR7IIqIRrdGrRPVqgM4F3vSjFgum98s21p2b2y+tdC6OjPdGG0tLLWX2nOzo6nT2rI/jSjifIpYiYi1/rs31xdFvB4pvnt0Pf1Lf8Sh7nH44uWxr506s3M7in3s4y6U7Wz0RawUj8A5e4j1RxH/FCl+/s7x+Nf+zleh+jp8IeLVMn8Y8VZ0zncqPxjnIt7b5nPEo6kWRfxfef4vrKd3+svrQfe6cunrja/OXpvrKdu9rjzy94eDtPO16SsH2o4d1KOIH1dX/PX0b77XAAAAAAAAAAAAAAAAAA+RIn49Urz47vFUjQ/OY4qfymuvznSG9XXH/nXHTG9sbGw0UiebOSdyLudcybmacy1nFLl+zmaZ9Y2Nifx+OedKztWcaznjUK6fs5lzIudyzpWcqznXckYt18/ZzDmRcznnSs7VnGs5w7hiAAAAAAAAAAAAAAAAAABgHxTVfym+8831tNHfmV96Ijq5aj7Qj73/DwAA//8of/Lc") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) 487.333646ms ago: executing program 3 (id=9800): io_setup(0xa42, &(0x7f00000000c0)=0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 480.310516ms ago: executing program 1 (id=9801): r0 = io_uring_setup(0xb48, &(0x7f0000000080)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000a80)={0x1, 0x0, 0x0, &(0x7f00000009c0)=[{0xffffffffffffffff}], &(0x7f0000000a40)=[0xb4]}, 0x20) 334.961447ms ago: executing program 3 (id=9802): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) recvmmsg(r0, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001680)=""/4103, 0x1007}, {&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000000300)=""/107, 0xcc}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) 333.127866ms ago: executing program 1 (id=9814): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, 0x0, &(0x7f0000000040)) 304.994148ms ago: executing program 4 (id=9803): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x0) ioctl$BLKROGET(r0, 0x125e, 0x0) 266.944701ms ago: executing program 4 (id=9805): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x1210003, &(0x7f00000000c0)={[{@discard}, {@discard}, {@nobarrier}, {@discard}, {@norecovery}], [], 0x2c}, 0x3, 0xeb0, &(0x7f0000000f40)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 235.357973ms ago: executing program 1 (id=9806): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 137.07849ms ago: executing program 0 (id=9807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)={0x1c, r1, 0x801, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 136.52669ms ago: executing program 3 (id=9809): r0 = fsopen(&(0x7f0000000200)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='adfs\x00', 0x0) 37.164777ms ago: executing program 4 (id=9810): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 36.075157ms ago: executing program 3 (id=9811): setuid(0xee01) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000001440), 0x4) 0s ago: executing program 3 (id=9812): r0 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) fcntl$addseals(r0, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3}) kernel console output (not intermixed with test programs): ibutes in process `syz.2.6857'. [ 323.524414][T19580] netlink: 'syz.0.6864': attribute type 21 has an invalid length. [ 323.782103][T19606] befs: (nbd4): No write support. Marking filesystem read-only [ 323.787606][T19602] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 323.789459][T19602] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 323.802508][T19602] vhci_hcd vhci_hcd.0: Device attached [ 323.806731][ T51] block nbd4: Attempted send on invalid socket [ 323.808535][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.812116][T19606] befs: (nbd4): unable to read superblock [ 323.832111][T19608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6873'. [ 323.849328][T19604] vhci_hcd: connection closed [ 323.853011][ T6600] vhci_hcd: stop threads [ 323.855354][ T6600] vhci_hcd: release socket [ 323.856518][ T6600] vhci_hcd: disconnect device [ 323.997951][T19618] netlink: 'syz.2.6880': attribute type 21 has an invalid length. [ 324.103998][T19626] netlink: 'syz.2.6882': attribute type 21 has an invalid length. [ 324.234465][T19636] befs: (nbd1): No write support. Marking filesystem read-only [ 324.236650][ T78] block nbd1: Attempted send on invalid socket [ 324.238278][ T78] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.240792][T19636] befs: (nbd1): unable to read superblock [ 324.423872][T19651] netlink: 'syz.3.6895': attribute type 21 has an invalid length. [ 324.425565][T19648] befs: (nbd2): No write support. Marking filesystem read-only [ 324.456326][ T78] block nbd2: Attempted send on invalid socket [ 324.457989][ T78] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.460571][T19648] befs: (nbd2): unable to read superblock [ 324.545092][T19657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.583523][T19662] netlink: 'syz.0.6900': attribute type 21 has an invalid length. [ 324.671851][T19668] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.685969][T19670] netlink: 'syz.3.6916': attribute type 21 has an invalid length. [ 324.854912][T19683] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.863253][T19685] netlink: 'syz.1.6912': attribute type 21 has an invalid length. [ 324.954454][T19692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.051773][T19699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.083805][T19703] netlink: 'syz.4.6922': attribute type 21 has an invalid length. [ 325.303370][T19720] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.448735][T19734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.735481][T19756] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.098729][T19792] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 326.497582][T19825] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 326.853517][T19854] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 327.225765][T19886] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 328.130462][T19964] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 328.704382][T20004] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 329.127654][T20034] loop2: detected capacity change from 0 to 736 [ 329.190416][T20039] __nla_validate_parse: 10 callbacks suppressed [ 329.190432][T20039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7086'. [ 329.194536][T20039] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 329.233171][T20039] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 329.236064][T20041] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 329.385139][T20050] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 329.414299][T20053] xt_TPROXY: Can be used only with -p tcp or -p udp [ 329.738729][T20074] loop1: detected capacity change from 0 to 736 [ 329.766968][T20076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7103'. [ 329.769912][T20076] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 329.772433][T20076] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 329.964149][T20090] xt_TPROXY: Can be used only with -p tcp or -p udp [ 330.135405][T20102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7114'. [ 330.137923][T20102] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 330.147860][T20102] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 330.197671][T20109] loop3: detected capacity change from 0 to 736 [ 330.320527][T20119] xt_TPROXY: Can be used only with -p tcp or -p udp [ 330.347017][T20117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7133'. [ 330.353573][T20117] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 330.356177][T20117] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 330.614284][T20140] loop2: detected capacity change from 0 to 736 [ 330.671021][T20140] rock: directory entry would overflow storage [ 330.675075][T20140] rock: sig=0x5850, size=36, remaining=14 [ 330.729367][T20147] loop4: detected capacity change from 0 to 736 [ 330.747495][T20149] xt_TPROXY: Can be used only with -p tcp or -p udp [ 330.863299][T20155] loop1: detected capacity change from 0 to 736 [ 330.953403][T20155] rock: directory entry would overflow storage [ 330.957413][T20155] rock: sig=0x5850, size=36, remaining=14 [ 331.012085][T20164] loop2: detected capacity change from 0 to 256 [ 331.085800][T20169] loop3: detected capacity change from 0 to 736 [ 331.097121][T20164] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 331.220725][T20169] rock: directory entry would overflow storage [ 331.222295][T20169] rock: sig=0x5850, size=36, remaining=14 [ 331.320901][T20187] ipt_ECN: cannot use operation on non-tcp rule [ 331.449401][T20200] loop4: detected capacity change from 0 to 256 [ 331.467866][T20200] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 331.638570][T20217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7171'. [ 331.647464][T20214] loop4: detected capacity change from 0 to 736 [ 331.734302][T20223] ipt_ECN: cannot use operation on non-tcp rule [ 331.758674][T20214] rock: directory entry would overflow storage [ 331.760168][T20214] rock: sig=0x5850, size=36, remaining=14 [ 331.888035][T20234] loop0: detected capacity change from 0 to 736 [ 331.890686][T20233] ipt_ECN: cannot use operation on non-tcp rule [ 332.005213][T20234] rock: directory entry would overflow storage [ 332.006839][T20234] rock: sig=0x5850, size=36, remaining=14 [ 332.076274][T20245] loop1: detected capacity change from 0 to 256 [ 332.096663][T20245] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 332.192761][T20252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7185'. [ 332.292461][T20258] loop3: detected capacity change from 0 to 256 [ 332.335760][T20258] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 332.392007][T20268] ipt_ECN: cannot use operation on non-tcp rule [ 332.502238][T20278] loop2: detected capacity change from 0 to 736 [ 332.583482][T20278] rock: directory entry would overflow storage [ 332.585133][T20278] rock: sig=0x5850, size=36, remaining=14 [ 332.645994][T20290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7203'. [ 332.818496][T20303] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7213'. [ 332.844757][T20309] overlayfs: conflicting options: nfs_export=on,index=off [ 333.054998][T20325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7222'. [ 333.235502][T20342] overlayfs: conflicting options: nfs_export=on,index=off [ 333.249625][T20341] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7233'. [ 333.657563][T20378] overlayfs: conflicting options: nfs_export=on,index=off [ 334.077555][T20410] overlayfs: conflicting options: nfs_export=on,index=off [ 334.146687][T20416] xt_nfacct: accounting object `syz1' does not exists [ 334.208349][T20421] __nla_validate_parse: 2 callbacks suppressed [ 334.208366][T20421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7278'. [ 334.223330][T20421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7278'. [ 334.493361][T20446] netlink: 'syz.4.7280': attribute type 21 has an invalid length. [ 334.503010][T20446] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7280'. [ 334.505480][T20444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7281'. [ 334.907549][T20480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7299'. [ 334.934565][T20481] netlink: 'syz.4.7300': attribute type 3 has an invalid length. [ 335.049101][T20490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7303'. [ 335.075590][T20493] netlink: 'syz.0.7306': attribute type 21 has an invalid length. [ 335.077852][T20493] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7306'. [ 335.481231][T20523] netlink: 'syz.0.7321': attribute type 14 has an invalid length. [ 335.494688][T20469] loop1: detected capacity change from 0 to 32768 [ 335.548461][T20469] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 335.548461][T20469] [ 335.559356][T20469] ERROR: (device loop1): remounting filesystem as read-only [ 335.803613][T20546] loop2: detected capacity change from 0 to 1024 [ 335.841044][T20551] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7328'. [ 335.963886][T20563] loop4: detected capacity change from 0 to 8 [ 336.012644][T20563] SQUASHFS error: Failed to read block 0x1ec: -5 [ 336.014405][T20563] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 336.431016][T20604] loop0: detected capacity change from 0 to 1024 [ 336.436493][T20596] loop2: detected capacity change from 0 to 4096 [ 336.454314][T20596] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 336.534262][T20596] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 336.564040][ T11] hfsplus: b-tree write err: -5, ino 4 [ 336.578447][T20614] loop3: detected capacity change from 0 to 24 [ 336.713005][T20612] loop1: detected capacity change from 0 to 4096 [ 336.846141][ T27] audit: type=1400 audit(337.311:5129): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A405B3A80 pid=20632 comm="syz.2.7376" [ 336.992301][T20636] loop4: detected capacity change from 0 to 4096 [ 337.003818][T20636] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 337.059680][T20636] ntfs3: loop4: failed to convert "c46c" to macgaelic [ 337.172456][T20660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7389'. [ 337.618345][T20701] netlink: 'syz.4.7409': attribute type 29 has an invalid length. [ 337.620533][T20701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7409'. [ 337.623095][T20701] netlink: 'syz.4.7409': attribute type 29 has an invalid length. [ 337.636501][T20699] vhci_hcd: invalid port number 0 [ 337.645528][T20705] loop0: detected capacity change from 0 to 128 [ 337.668560][T20705] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 337.724519][T20711] loop1: detected capacity change from 0 to 256 [ 337.733986][ T4301] sysv_free_block: flc_count > flc_size [ 337.735439][ T4301] sysv_free_block: flc_count > flc_size [ 337.736891][ T4301] sysv_free_block: flc_count > flc_size [ 337.754595][ T4301] sysv_free_block: flc_count > flc_size [ 337.756150][ T4301] sysv_free_block: flc_count > flc_size [ 337.757629][ T4301] sysv_free_block: flc_count > flc_size [ 337.762936][T20711] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4a534c6a, utbl_chksum : 0xe619d30d) [ 337.768451][ T4301] sysv_free_block: flc_count > flc_size [ 337.769920][ T4301] sysv_free_block: flc_count > flc_size [ 337.771346][ T4301] sysv_free_block: flc_count > flc_size [ 337.772825][ T4301] sysv_free_block: flc_count > flc_size [ 337.804387][ T4301] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 337.892500][T20713] loop2: detected capacity change from 0 to 8192 [ 337.903484][T20713] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 337.906906][T20713] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 337.926798][T20724] loop1: detected capacity change from 0 to 256 [ 337.959433][T20713] REISERFS (device loop2): using ordered data mode [ 337.961370][T20713] reiserfs: using flush barriers [ 337.963548][T20713] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 337.967823][T20713] REISERFS (device loop2): checking transaction log (loop2) [ 338.057919][T20724] FAT-fs (loop1): Directory bread(block 64) failed [ 338.078331][T20724] FAT-fs (loop1): Directory bread(block 65) failed [ 338.080299][T20724] FAT-fs (loop1): Directory bread(block 66) failed [ 338.082030][T20724] FAT-fs (loop1): Directory bread(block 67) failed [ 338.083851][T20724] FAT-fs (loop1): Directory bread(block 68) failed [ 338.085583][T20724] FAT-fs (loop1): Directory bread(block 69) failed [ 338.087359][T20724] FAT-fs (loop1): Directory bread(block 70) failed [ 338.122276][T20724] FAT-fs (loop1): Directory bread(block 71) failed [ 338.124181][T20724] FAT-fs (loop1): Directory bread(block 72) failed [ 338.125910][T20724] FAT-fs (loop1): Directory bread(block 73) failed [ 338.200548][T20713] REISERFS (device loop2): Using tea hash to sort names [ 338.214154][T20713] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 338.217599][T20713] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 338.336266][T20744] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 338.430422][T20746] netlink: 'syz.1.7432': attribute type 1 has an invalid length. [ 338.696728][T20756] loop4: detected capacity change from 0 to 2048 [ 338.743822][T20756] loop4: p1 < > p3 p4 < > [ 338.746341][T20756] loop4: p3 start 4284289 is beyond EOD, truncated [ 338.766443][T20756] (syz.4.7436,20756,0):ocfs2_get_sector:1763 ERROR: status = -12 [ 338.769436][T20756] (syz.4.7436,20756,0):ocfs2_sb_probe:786 ERROR: status = -12 [ 338.772982][T20756] (syz.4.7436,20756,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 338.775216][T20756] (syz.4.7436,20756,0):ocfs2_fill_super:1176 ERROR: status = -12 [ 338.829149][T20763] trusted_key: encrypted_key: master key parameter is missing [ 338.834878][ T3910] loop4: p1 < > p3 p4 < > [ 338.850425][ T3910] loop4: p3 start 4284289 is beyond EOD, truncated [ 338.922679][T20738] loop0: detected capacity change from 0 to 32768 [ 338.935945][T20738] XFS: noikeep mount option is deprecated. [ 339.043651][T20738] XFS (loop0): Mounting V5 Filesystem [ 339.049978][T20784] dlm: no locking on control device [ 339.075235][T20742] loop3: detected capacity change from 0 to 40427 [ 339.111924][T20742] F2FS-fs (loop3): invalid crc value [ 339.151940][T20742] F2FS-fs (loop3): Found nat_bits in checkpoint [ 339.174767][T20738] XFS (loop0): Ending clean mount [ 339.214534][T20738] XFS (loop0): Quotacheck needed: Please wait. [ 339.237729][T20742] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 339.256355][T20738] XFS (loop0): Quotacheck: Done. [ 339.336992][ T4301] XFS (loop0): Unmounting Filesystem [ 339.596577][T20819] __nla_validate_parse: 4 callbacks suppressed [ 339.596592][T20819] netlink: 200 bytes leftover after parsing attributes in process `syz.4.7463'. [ 339.611338][T20818] sctp: [Deprecated]: syz.3.7454 (pid 20818) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.611338][T20818] Use struct sctp_sack_info instead [ 339.892893][T20842] trusted_key: encrypted_key: master key parameter is missing [ 340.004618][T20850] sctp: [Deprecated]: syz.1.7475 (pid 20850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.004618][T20850] Use struct sctp_sack_info instead [ 340.080198][T20855] netlink: 200 bytes leftover after parsing attributes in process `syz.3.7477'. [ 340.180538][T20860] sctp: [Deprecated]: syz.4.7492 (pid 20860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.180538][T20860] Use struct sctp_sack_info instead [ 340.254314][T20864] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 340.523595][T20882] trusted_key: encrypted_key: master key parameter is missing [ 340.595347][T20884] loop1: detected capacity change from 0 to 2048 [ 340.645665][T20890] netlink: 'syz.3.7495': attribute type 1 has an invalid length. [ 340.647805][T20890] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7495'. [ 340.664618][T20884] loop1: p1 < > p3 p4 < > [ 340.666753][T20884] loop1: p3 start 4284289 is beyond EOD, truncated [ 340.669610][T20838] loop0: detected capacity change from 0 to 32768 [ 340.693099][T20838] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 340.695288][T20838] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 340.707472][T20884] (syz.1.7489,20884,0):ocfs2_get_sector:1763 ERROR: status = -12 [ 340.709851][T20884] (syz.1.7489,20884,0):ocfs2_sb_probe:786 ERROR: status = -12 [ 340.710040][T20838] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 340.728879][T20884] (syz.1.7489,20884,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 340.730991][T20884] (syz.1.7489,20884,0):ocfs2_fill_super:1176 ERROR: status = -12 [ 340.742490][ T4652] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 340.744457][ T4652] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 340.785376][T20896] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 340.833152][ T4652] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 88ms [ 340.835472][ T4652] gfs2: fsid=syz:syz.0: jid=0: Done [ 340.836890][T20838] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 340.843030][T20898] netlink: 'syz.2.7511': attribute type 1 has an invalid length. [ 340.845060][T20898] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7511'. [ 341.256518][T20926] loop4: detected capacity change from 0 to 128 [ 341.279103][T20926] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 341.305464][T20928] loop2: detected capacity change from 0 to 2048 [ 341.336466][ T4299] sysv_free_block: flc_count > flc_size [ 341.341976][ T4299] sysv_free_block: flc_count > flc_size [ 341.354598][T20928] loop2: p1 < > p3 p4 < > [ 341.356551][T20928] loop2: p3 start 4284289 is beyond EOD, truncated [ 341.378056][ T4299] sysv_free_block: flc_count > flc_size [ 341.379775][ T4299] sysv_free_block: flc_count > flc_size [ 341.381218][ T4299] sysv_free_block: flc_count > flc_size [ 341.382732][ T4299] sysv_free_block: flc_count > flc_size [ 341.384191][ T4299] sysv_free_block: flc_count > flc_size [ 341.385645][ T4299] sysv_free_block: flc_count > flc_size [ 341.387112][ T4299] sysv_free_block: flc_count > flc_size [ 341.402802][ T4299] sysv_free_block: flc_count > flc_size [ 341.404834][ T4299] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 341.446632][T20940] loop0: detected capacity change from 0 to 256 [ 341.449244][ T3910] loop2: p1 < > p3 p4 < > [ 341.451130][ T3910] loop2: p3 start 4284289 is beyond EOD, truncated [ 341.456321][T20928] (syz.2.7513,20928,1):ocfs2_get_sector:1763 ERROR: status = -12 [ 341.473095][T20928] (syz.2.7513,20928,1):ocfs2_sb_probe:786 ERROR: status = -12 [ 341.475193][T20928] (syz.2.7513,20928,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 341.477654][T20928] (syz.2.7513,20928,1):ocfs2_fill_super:1176 ERROR: status = -12 [ 341.518721][T20942] loop3: detected capacity change from 0 to 256 [ 341.536112][T20942] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4a534c6a, utbl_chksum : 0xe619d30d) [ 341.539862][T20940] FAT-fs (loop0): Directory bread(block 64) failed [ 341.539898][T20940] FAT-fs (loop0): Directory bread(block 65) failed [ 341.543441][T20940] FAT-fs (loop0): Directory bread(block 66) failed [ 341.545185][T20940] FAT-fs (loop0): Directory bread(block 67) failed [ 341.546957][T20940] FAT-fs (loop0): Directory bread(block 68) failed [ 341.574597][T20940] FAT-fs (loop0): Directory bread(block 69) failed [ 341.576407][T20940] FAT-fs (loop0): Directory bread(block 70) failed [ 341.593463][T20938] loop1: detected capacity change from 0 to 8192 [ 341.606931][T20940] FAT-fs (loop0): Directory bread(block 71) failed [ 341.608918][T20940] FAT-fs (loop0): Directory bread(block 72) failed [ 341.610641][T20940] FAT-fs (loop0): Directory bread(block 73) failed [ 341.614122][T20938] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 341.617443][T20938] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 341.638599][T20938] REISERFS (device loop1): using ordered data mode [ 341.640377][T20938] reiserfs: using flush barriers [ 341.643563][T20938] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 341.647944][T20938] REISERFS (device loop1): checking transaction log (loop1) [ 341.706756][T20953] netlink: 'syz.3.7527': attribute type 29 has an invalid length. [ 341.709072][T20953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7527'. [ 341.711864][T20953] netlink: 'syz.3.7527': attribute type 29 has an invalid length. [ 341.713840][T20953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7527'. [ 341.907421][T20938] REISERFS (device loop1): Using tea hash to sort names [ 341.909855][T20938] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 341.926664][T20938] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 342.173533][T20987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7541'. [ 342.630492][T21013] loop2: detected capacity change from 0 to 4096 [ 342.635318][ T27] audit: type=1400 audit(343.101:5130): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A405B3A80 pid=21020 comm="syz.4.7561" [ 342.649638][T21013] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 342.747017][T21013] ntfs3: loop2: failed to convert "c46c" to macgaelic [ 342.899629][T21043] loop0: detected capacity change from 0 to 24 [ 342.954589][ T27] audit: type=1400 audit(343.421:5131): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A405B3A80 pid=21046 comm="syz.3.7575" [ 343.016391][T21044] loop2: detected capacity change from 0 to 4096 [ 343.062023][ T9851] udevd[9851]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 343.092383][ T9359] udevd[9359]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 343.215331][T21064] loop4: detected capacity change from 0 to 1024 [ 343.306952][T21067] loop1: detected capacity change from 0 to 4096 [ 343.311844][ T11] hfsplus: b-tree write err: -5, ino 4 [ 343.317638][T21067] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 343.385029][T21067] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 343.614377][ T9851] udevd[9851]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 343.646317][ T9359] udevd[9359]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 343.767214][T21109] netlink: 'syz.3.7614': attribute type 14 has an invalid length. [ 343.813794][T21113] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7605'. [ 344.243924][T21149] netlink: 'syz.2.7624': attribute type 14 has an invalid length. [ 344.460628][T21168] netlink: 'syz.1.7633': attribute type 21 has an invalid length. [ 344.462756][T21168] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7633'. [ 344.615578][T21180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7639'. [ 344.694297][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7640'. [ 344.724737][T21190] netlink: 'syz.3.7644': attribute type 3 has an invalid length. [ 345.006284][T21217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7657'. [ 345.076684][T21222] netlink: 'syz.1.7661': attribute type 3 has an invalid length. [ 345.193562][T21234] xt_nfacct: accounting object `syz1' does not exists [ 345.358909][T21249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7672'. [ 345.421266][T21255] netlink: 'syz.3.7676': attribute type 21 has an invalid length. [ 345.423508][T21255] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7676'. [ 345.864194][T21289] loop0: detected capacity change from 0 to 1024 [ 346.084590][ T9850] udevd[9850]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 346.121301][ T9850] udevd[9850]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 346.176608][T21309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7715'. [ 346.385162][T21282] loop3: detected capacity change from 0 to 32768 [ 346.427473][T21282] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 346.427473][T21282] [ 346.443371][T21282] ERROR: (device loop3): remounting filesystem as read-only [ 346.457321][T21321] loop0: detected capacity change from 0 to 4096 [ 346.479243][T21324] loop4: detected capacity change from 0 to 4096 [ 346.494547][T21321] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 346.518461][T21321] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 346.565043][T21331] loop1: detected capacity change from 0 to 1024 [ 346.907994][T21354] dlm: no locking on control device [ 347.066962][T21371] loop1: detected capacity change from 0 to 256 [ 347.202587][ T9850] udevd[9850]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 347.222966][ T9850] udevd[9850]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 347.501151][T21404] loop4: detected capacity change from 0 to 256 [ 347.534107][T21404] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4a534c6a, utbl_chksum : 0xe619d30d) [ 347.541065][ T9850] udevd[9850]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 347.593513][T21409] loop3: detected capacity change from 0 to 256 [ 347.595636][ T9850] udevd[9850]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 347.866751][T21415] loop4: detected capacity change from 0 to 8192 [ 347.929825][T21415] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 347.933332][T21415] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 347.948972][T21415] REISERFS (device loop4): using ordered data mode [ 347.950756][T21415] reiserfs: using flush barriers [ 347.962291][T21415] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 348.005822][T21415] REISERFS (device loop4): checking transaction log (loop4) [ 348.008689][T21399] loop2: detected capacity change from 0 to 32768 [ 348.034210][T21399] JBD2: Ignoring recovery information on journal [ 348.126246][T21399] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 348.176698][ T4302] ocfs2: Unmounting device (7,2) on (node local) [ 348.222659][T21443] loop0: detected capacity change from 0 to 256 [ 348.246074][T21415] REISERFS (device loop4): Using tea hash to sort names [ 348.249389][T21415] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 348.265455][T21415] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 348.533462][T21454] vhci_hcd: invalid port number 0 [ 348.810506][T21468] loop1: detected capacity change from 0 to 512 [ 348.845355][T21468] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 348.903489][T21446] loop2: detected capacity change from 0 to 32768 [ 348.943583][T21446] XFS (loop2): Mounting V5 Filesystem [ 348.945924][T21444] loop3: detected capacity change from 0 to 32768 [ 348.990937][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 349.030603][T21444] loop3: [ICS] p1 [ 349.032043][T21444] loop3: p1 start 1970170188 is beyond EOD, truncated [ 349.119726][T21446] XFS (loop2): Ending clean mount [ 349.131912][T21478] loop0: detected capacity change from 0 to 8192 [ 349.148920][T21478] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 349.152331][T21478] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 349.155244][T21478] REISERFS (device loop0): using ordered data mode [ 349.156964][T21478] reiserfs: using flush barriers [ 349.180371][T21478] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 349.184800][T21478] REISERFS (device loop0): checking transaction log (loop0) [ 349.186268][T21496] vhci_hcd: invalid port number 0 [ 349.202969][ T4302] XFS (loop2): Unmounting Filesystem [ 349.373478][T21478] REISERFS (device loop0): Using tea hash to sort names [ 349.375613][T21478] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 349.389824][T21478] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 349.881696][T21504] loop1: detected capacity change from 0 to 32768 [ 349.883913][T21504] XFS: noikeep mount option is deprecated. [ 349.889431][T21533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7808'. [ 350.004380][T21504] XFS (loop1): Mounting V5 Filesystem [ 350.053840][T21504] XFS (loop1): Ending clean mount [ 350.056304][T21504] XFS (loop1): Quotacheck needed: Please wait. [ 350.213557][T21564] netlink: 209848 bytes leftover after parsing attributes in process `syz.3.7819'. [ 350.289111][T21504] XFS (loop1): Quotacheck: Done. [ 350.326400][T21572] loop3: detected capacity change from 0 to 512 [ 350.360831][ T4293] XFS (loop1): Unmounting Filesystem [ 350.421346][T21572] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 350.461547][T21583] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7827'. [ 350.507446][ T6930] EXT4-fs (loop3): unmounting filesystem. [ 350.517323][T21585] loop0: detected capacity change from 0 to 1764 [ 350.595808][T21585] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 351.121462][T21615] netlink: 209848 bytes leftover after parsing attributes in process `syz.1.7854'. [ 351.264773][T21593] loop4: detected capacity change from 0 to 32768 [ 351.269951][T21593] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.7834 (21593) [ 351.286092][T21593] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 351.288814][T21593] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 351.297147][T21593] BTRFS info (device loop4): using free space tree [ 351.363798][T21602] loop0: detected capacity change from 0 to 32768 [ 351.398807][T21602] loop0: [ICS] p1 [ 351.399966][T21602] loop0: p1 start 1970170188 is beyond EOD, truncated [ 351.434361][T21613] loop2: detected capacity change from 0 to 32768 [ 351.453234][T21593] BTRFS info (device loop4): enabling ssd optimizations [ 351.488796][T21639] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7847'. [ 351.491376][T21639] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7847'. [ 351.493656][T21639] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7847'. [ 351.532907][T21613] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 351.577556][T21641] NILFS (nullb0): couldn't find nilfs on the device [ 351.610884][ T4299] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 351.680872][ T4302] ocfs2: Unmounting device (7,2) on (node local) [ 351.841100][T21655] netlink: zone id is out of range [ 352.024885][T21669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7860'. [ 352.036205][T21665] loop2: detected capacity change from 0 to 1764 [ 352.066128][T21665] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 352.192585][T21678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7864'. [ 352.215408][T21678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7864'. [ 352.328990][T21686] loop2: detected capacity change from 0 to 2048 [ 352.355282][T21686] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 352.385907][T21651] loop3: detected capacity change from 0 to 32768 [ 352.551979][T21651] XFS (loop3): Mounting V5 Filesystem [ 352.576329][T21707] loop4: detected capacity change from 0 to 1764 [ 352.651601][T21707] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 352.703886][T21651] XFS (loop3): Ending clean mount [ 352.849247][ T6930] XFS (loop3): Unmounting Filesystem [ 352.948006][T21732] NILFS (nullb0): couldn't find nilfs on the device [ 353.138364][T21741] netlink: zone id is out of range [ 353.394488][T21752] loop2: detected capacity change from 0 to 128 [ 353.416764][T21752] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 353.420141][T21752] sysv_free_block: trying to free block not in datazone [ 353.422387][T21752] sysv_free_block: trying to free block not in datazone [ 353.425060][T21752] sysv_free_block: getblk() failed [ 353.445334][T21752] sysv_free_block: getblk() failed [ 353.446653][T21752] sysv_free_block: getblk() failed [ 353.447904][T21752] sysv_free_block: getblk() failed [ 353.455438][T21752] sysv_free_block: getblk() failed [ 353.456827][T21752] sysv_free_block: getblk() failed [ 353.493479][T21752] sysv_free_block: getblk() failed [ 353.494870][T21752] sysv_free_block: getblk() failed [ 353.496133][T21752] sysv_free_block: getblk() failed [ 353.497332][T21752] sysv_free_block: getblk() failed [ 353.501120][T21752] sysv_free_block: getblk() failed [ 353.502495][T21752] sysv_free_block: getblk() failed [ 353.503870][T21752] sysv_free_block: getblk() failed [ 353.505160][T21752] sysv_free_block: getblk() failed [ 353.518630][T21752] sysv_free_block: getblk() failed [ 353.519982][T21752] sysv_free_block: getblk() failed [ 353.521270][T21752] sysv_free_block: getblk() failed [ 353.522609][T21752] sysv_free_block: getblk() failed [ 353.524077][T21752] sysv_free_block: getblk() failed [ 353.525364][T21752] sysv_free_block: getblk() failed [ 353.526688][T21752] sysv_free_block: getblk() failed [ 353.527996][T21752] sysv_free_block: getblk() failed [ 353.553430][T21752] sysv_free_block: getblk() failed [ 353.554875][T21752] sysv_free_block: getblk() failed [ 353.556120][T21752] sysv_free_block: getblk() failed [ 353.557448][T21752] sysv_free_block: getblk() failed [ 353.562158][T21757] loop3: detected capacity change from 0 to 2048 [ 353.565161][T21752] sysv_free_block: getblk() failed [ 353.566800][T21752] sysv_free_block: getblk() failed [ 353.581125][T21752] sysv_free_block: getblk() failed [ 353.582549][T21752] sysv_free_block: getblk() failed [ 353.583963][T21752] sysv_free_block: getblk() failed [ 353.599963][T21752] sysv_free_block: getblk() failed [ 353.606111][T21752] sysv_free_block: getblk() failed [ 353.607559][T21752] sysv_free_block: getblk() failed [ 353.616083][T21757] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 353.618657][T21752] sysv_free_block: getblk() failed [ 353.618718][T21752] sysv_free_block: getblk() failed [ 353.618741][T21752] sysv_free_block: getblk() failed [ 353.618887][T21752] sysv_free_block: getblk() failed [ 353.624055][T21752] sysv_free_block: trying to free block not in datazone [ 353.625737][T21752] sysv_free_block: trying to free block not in datazone [ 353.656951][T21752] sysv_free_block: trying to free block not in datazone [ 353.664614][T21737] loop1: detected capacity change from 0 to 32768 [ 353.666917][T21752] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 353.746694][T21766] NILFS (nullb0): couldn't find nilfs on the device [ 353.748802][T21737] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 353.847005][ T4294] Bluetooth: hci1: unknown advertising packet type: 0xff [ 353.875248][ T4293] ocfs2: Unmounting device (7,1) on (node local) [ 354.220663][T21754] loop4: detected capacity change from 0 to 32768 [ 354.275514][T21754] XFS (loop4): Mounting V5 Filesystem [ 354.347775][T21812] set match dimension is over the limit! [ 354.418203][T21754] XFS (loop4): Ending clean mount [ 354.566183][ T4299] XFS (loop4): Unmounting Filesystem [ 354.676401][T21806] loop3: detected capacity change from 0 to 32768 [ 354.727823][T21806] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 354.857798][ T6930] ocfs2: Unmounting device (7,3) on (node local) [ 355.127399][T21852] lo speed is unknown, defaulting to 1000 [ 355.143726][T21856] loop1: detected capacity change from 0 to 24 [ 355.153287][T21856] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 355.164368][T21856] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 355.494519][T21880] loop1: detected capacity change from 0 to 128 [ 355.519257][ T4294] Bluetooth: hci2: unknown advertising packet type: 0xff [ 355.523409][T21880] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 355.550221][T21880] sysv_free_block: trying to free block not in datazone [ 355.552321][T21880] sysv_free_block: trying to free block not in datazone [ 355.570085][T21880] sysv_free_block: getblk() failed [ 355.571483][T21880] sysv_free_block: getblk() failed [ 355.572976][T21880] sysv_free_block: getblk() failed [ 355.574319][T21880] sysv_free_block: getblk() failed [ 355.575720][T21880] sysv_free_block: getblk() failed [ 355.594061][T21880] sysv_free_block: getblk() failed [ 355.595512][T21880] sysv_free_block: getblk() failed [ 355.596854][T21880] sysv_free_block: getblk() failed [ 355.615884][T21880] sysv_free_block: getblk() failed [ 355.617325][T21880] sysv_free_block: getblk() failed [ 355.626693][T21880] sysv_free_block: getblk() failed [ 355.628082][T21880] sysv_free_block: getblk() failed [ 355.644248][T21880] sysv_free_block: getblk() failed [ 355.645791][T21880] sysv_free_block: getblk() failed [ 355.647126][T21880] sysv_free_block: getblk() failed [ 355.656525][T21880] sysv_free_block: getblk() failed [ 355.657862][T21880] sysv_free_block: getblk() failed [ 355.674092][T21880] sysv_free_block: getblk() failed [ 355.675752][T21880] sysv_free_block: getblk() failed [ 355.677089][T21880] sysv_free_block: getblk() failed [ 355.703448][T21880] sysv_free_block: getblk() failed [ 355.704876][T21880] sysv_free_block: getblk() failed [ 355.706129][T21880] sysv_free_block: getblk() failed [ 355.717738][T21880] sysv_free_block: getblk() failed [ 355.727889][T21880] sysv_free_block: getblk() failed [ 355.729923][T21880] sysv_free_block: getblk() failed [ 355.731557][T21880] sysv_free_block: getblk() failed [ 355.732883][T21880] sysv_free_block: getblk() failed [ 355.734123][T21880] sysv_free_block: getblk() failed [ 355.735450][T21880] sysv_free_block: getblk() failed [ 355.736834][T21880] sysv_free_block: getblk() failed [ 355.767753][T21880] sysv_free_block: getblk() failed [ 355.777907][T21880] sysv_free_block: getblk() failed [ 355.783690][T21880] sysv_free_block: getblk() failed [ 355.785620][T21880] sysv_free_block: getblk() failed [ 355.786988][T21880] sysv_free_block: getblk() failed [ 355.797631][T21880] sysv_free_block: getblk() failed [ 355.799434][T21880] sysv_free_block: getblk() failed [ 355.800933][T21880] sysv_free_block: trying to free block not in datazone [ 355.802521][T21880] sysv_free_block: trying to free block not in datazone [ 355.819940][T21880] sysv_free_block: trying to free block not in datazone [ 355.821803][T21880] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 355.877306][T21906] netlink: set zone limit has 8 unknown bytes [ 355.985802][ T4294] Bluetooth: hci4: unknown advertising packet type: 0xff [ 356.222331][T21935] netlink: set zone limit has 8 unknown bytes [ 356.362912][ T4294] Bluetooth: hci0: unknown advertising packet type: 0xff [ 356.424258][T21948] lo speed is unknown, defaulting to 1000 [ 356.513347][T21954] loop2: detected capacity change from 0 to 256 [ 356.555687][T21956] loop3: detected capacity change from 0 to 1024 [ 356.562747][T21954] FAT-fs (loop2): Directory bread(block 64) failed [ 356.564515][T21954] FAT-fs (loop2): Directory bread(block 65) failed [ 356.566390][T21954] FAT-fs (loop2): Directory bread(block 66) failed [ 356.591662][T21954] FAT-fs (loop2): Directory bread(block 67) failed [ 356.593838][T21954] FAT-fs (loop2): Directory bread(block 68) failed [ 356.595542][T21954] FAT-fs (loop2): Directory bread(block 69) failed [ 356.597351][T21954] FAT-fs (loop2): Directory bread(block 70) failed [ 356.602497][T21956] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 356.614676][T21954] FAT-fs (loop2): Directory bread(block 71) failed [ 356.616518][T21954] FAT-fs (loop2): Directory bread(block 72) failed [ 356.638377][T21954] FAT-fs (loop2): Directory bread(block 73) failed [ 356.657163][ T6930] EXT4-fs (loop3): unmounting filesystem. [ 356.691387][T21954] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006c61) [ 356.696135][T21954] FAT-fs (loop2): Filesystem has been set read-only [ 356.809274][T21971] netlink: set zone limit has 8 unknown bytes [ 357.175906][T21965] loop0: detected capacity change from 0 to 32768 [ 357.260684][T21984] __nla_validate_parse: 5 callbacks suppressed [ 357.260700][T21984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8005'. [ 357.308796][ T4294] Bluetooth: hci3: unknown advertising packet type: 0xff [ 357.455439][T22002] loop4: detected capacity change from 0 to 256 [ 357.496258][T22005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8016'. [ 357.503828][T22005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8016'. [ 357.506263][T22005] netlink: 'syz.3.8016': attribute type 6 has an invalid length. [ 357.511789][T22000] lo speed is unknown, defaulting to 1000 [ 357.612859][T22009] loop2: detected capacity change from 0 to 1024 [ 357.630868][T22013] net veth1_virt_wifi : renamed from virt_wifi0 [ 357.679363][T22009] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 357.722586][ T4294] Bluetooth: hci3: unknown advertising packet type: 0xff [ 357.739801][T22021] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8021'. [ 357.757167][T22023] netlink: 'syz.0.8025': attribute type 1 has an invalid length. [ 357.825137][T22027] loop0: detected capacity change from 0 to 256 [ 357.848706][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 357.918210][T22027] FAT-fs (loop0): Directory bread(block 64) failed [ 357.920897][T22027] FAT-fs (loop0): Directory bread(block 65) failed [ 357.922627][T22027] FAT-fs (loop0): Directory bread(block 66) failed [ 357.924434][T22027] FAT-fs (loop0): Directory bread(block 67) failed [ 357.947531][T22027] FAT-fs (loop0): Directory bread(block 68) failed [ 357.949710][T22027] FAT-fs (loop0): Directory bread(block 69) failed [ 357.951608][T22027] FAT-fs (loop0): Directory bread(block 70) failed [ 357.953343][T22027] FAT-fs (loop0): Directory bread(block 71) failed [ 357.955100][T22027] FAT-fs (loop0): Directory bread(block 72) failed [ 357.956822][T22027] FAT-fs (loop0): Directory bread(block 73) failed [ 358.030689][T22033] loop2: detected capacity change from 0 to 4096 [ 358.051532][T22027] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006c61) [ 358.051585][T22027] FAT-fs (loop0): Filesystem has been set read-only [ 358.053580][T22033] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 358.192702][T22043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8036'. [ 358.215865][T22043] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 358.235842][T22043] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 358.331581][T22051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8039'. [ 358.351984][T22057] loop0: detected capacity change from 0 to 256 [ 358.359592][T22056] loop1: detected capacity change from 0 to 1024 [ 358.426221][T22056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 358.509378][T22067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8046'. [ 358.509408][T22067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8046'. [ 358.509433][T22067] netlink: 'syz.4.8046': attribute type 6 has an invalid length. [ 358.544504][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 358.621439][T22074] loop0: detected capacity change from 0 to 1024 [ 358.663163][T22074] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 358.748757][T22087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8052'. [ 358.751461][T22087] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 358.753940][T22087] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 358.787737][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 358.861363][T22093] loop1: detected capacity change from 0 to 256 [ 359.034457][T22105] net veth1_virt_wifi : renamed from virt_wifi0 [ 359.285975][T22099] loop2: detected capacity change from 0 to 32768 [ 359.479936][T22115] loop4: detected capacity change from 0 to 1024 [ 359.501375][T22115] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 359.531802][ T4299] EXT4-fs (loop4): unmounting filesystem. [ 359.653348][T22127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8072'. [ 359.655793][T22127] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 359.669275][T22127] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 359.801979][T22135] sock: sock_timestamping_bind_phc: sock not bind to device [ 360.120754][T22109] loop1: detected capacity change from 0 to 32768 [ 360.386185][T22121] loop3: detected capacity change from 0 to 40427 [ 360.392784][T22121] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 360.395312][T22121] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 360.438585][T22168] xt_addrtype: ipv6 does not support BROADCAST matching [ 360.450807][T22121] F2FS-fs (loop3): Found nat_bits in checkpoint [ 360.498867][T22121] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 360.500509][T22121] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 360.563687][T22178] loop0: detected capacity change from 0 to 1764 [ 360.592694][T22178] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 360.804662][T22195] xt_addrtype: ipv6 does not support BROADCAST matching [ 361.105118][T22220] loop2: detected capacity change from 0 to 1764 [ 361.149971][T22220] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 361.184630][T22228] xt_addrtype: ipv6 does not support BROADCAST matching [ 361.307077][T22238] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (129) [ 361.830714][T22275] dns_resolver: Unsupported server list version (0) [ 361.986387][T22289] loop1: detected capacity change from 0 to 128 [ 362.006166][T22289] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 362.082264][ T4293] sysv_free_block: flc_count > flc_size [ 362.083725][ T4293] sysv_free_block: flc_count > flc_size [ 362.085129][ T4293] sysv_free_block: flc_count > flc_size [ 362.086555][ T4293] sysv_free_block: flc_count > flc_size [ 362.087848][ T4293] sysv_free_block: flc_count > flc_size [ 362.116171][ T4293] sysv_free_block: flc_count > flc_size [ 362.119260][ T4293] sysv_free_block: flc_count > flc_size [ 362.120665][ T4293] sysv_free_block: flc_count > flc_size [ 362.122072][ T4293] sysv_free_block: flc_count > flc_size [ 362.123378][ T4293] sysv_free_block: flc_count > flc_size [ 362.125038][ T4293] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 362.178363][T22303] dns_resolver: Unsupported server list version (0) [ 362.458632][T22321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8164'. [ 362.580761][T22331] dns_resolver: Unsupported server list version (0) [ 362.699791][T22337] loop2: detected capacity change from 0 to 256 [ 362.754439][T22337] FAT-fs (loop2): Directory bread(block 64) failed [ 362.756248][T22337] FAT-fs (loop2): Directory bread(block 65) failed [ 362.763607][T22337] FAT-fs (loop2): Directory bread(block 66) failed [ 362.765328][T22337] FAT-fs (loop2): Directory bread(block 67) failed [ 362.767066][T22337] FAT-fs (loop2): Directory bread(block 68) failed [ 362.778627][T22337] FAT-fs (loop2): Directory bread(block 69) failed [ 362.780529][T22337] FAT-fs (loop2): Directory bread(block 70) failed [ 362.791661][T22337] FAT-fs (loop2): Directory bread(block 71) failed [ 362.798029][T22337] FAT-fs (loop2): Directory bread(block 72) failed [ 362.799848][T22337] FAT-fs (loop2): Directory bread(block 73) failed [ 362.880361][T22296] loop4: detected capacity change from 0 to 40427 [ 362.891314][T22349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8180'. [ 362.898307][T22296] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 362.900387][T22296] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 362.967722][T22296] F2FS-fs (loop4): Found nat_bits in checkpoint [ 363.026636][T22296] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 363.029030][T22296] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 363.241973][T22378] loop0: detected capacity change from 0 to 256 [ 363.254432][T22379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8193'. [ 363.299727][T22378] FAT-fs (loop0): Directory bread(block 64) failed [ 363.301540][T22378] FAT-fs (loop0): Directory bread(block 65) failed [ 363.303154][T22378] FAT-fs (loop0): Directory bread(block 66) failed [ 363.317495][T22378] FAT-fs (loop0): Directory bread(block 67) failed [ 363.353634][T22378] FAT-fs (loop0): Directory bread(block 68) failed [ 363.366697][T22378] FAT-fs (loop0): Directory bread(block 69) failed [ 363.368931][T22378] FAT-fs (loop0): Directory bread(block 70) failed [ 363.370654][T22378] FAT-fs (loop0): Directory bread(block 71) failed [ 363.372329][T22378] FAT-fs (loop0): Directory bread(block 72) failed [ 363.374118][T22378] FAT-fs (loop0): Directory bread(block 73) failed [ 363.588445][T22400] loop2: detected capacity change from 0 to 128 [ 363.932914][T22425] loop4: detected capacity change from 0 to 256 [ 363.985196][T22425] FAT-fs (loop4): Directory bread(block 64) failed [ 363.987045][T22425] FAT-fs (loop4): Directory bread(block 65) failed [ 363.990472][T22421] loop2: detected capacity change from 0 to 4096 [ 364.003588][T22425] FAT-fs (loop4): Directory bread(block 66) failed [ 364.005383][T22425] FAT-fs (loop4): Directory bread(block 67) failed [ 364.007111][T22425] FAT-fs (loop4): Directory bread(block 68) failed [ 364.009928][T22421] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 364.013604][T22421] ntfs3: loop2: Failed to load $MFT. [ 364.028403][T22425] FAT-fs (loop4): Directory bread(block 69) failed [ 364.030273][T22425] FAT-fs (loop4): Directory bread(block 70) failed [ 364.038671][T22425] FAT-fs (loop4): Directory bread(block 71) failed [ 364.040982][T22425] FAT-fs (loop4): Directory bread(block 72) failed [ 364.042850][T22425] FAT-fs (loop4): Directory bread(block 73) failed [ 364.046968][T22431] netlink: 'syz.3.8219': attribute type 2 has an invalid length. [ 364.066810][T22431] netlink: 'syz.3.8219': attribute type 1 has an invalid length. [ 364.084663][T22421] 9pnet_fd: Insufficient options for proto=fd [ 364.086799][T22431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8219'. [ 364.112705][T22392] loop1: detected capacity change from 0 to 40427 [ 364.128039][T22392] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 364.135139][T22392] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 364.198968][T22392] F2FS-fs (loop1): Found nat_bits in checkpoint [ 364.248084][T22392] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 364.250303][T22392] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 364.358038][T22452] loop0: detected capacity change from 0 to 128 [ 364.426020][T22456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8231'. [ 364.697675][T22477] netlink: 'syz.4.8238': attribute type 1 has an invalid length. [ 364.812029][T22489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8246'. [ 364.994931][T22495] loop4: detected capacity change from 0 to 4096 [ 365.048732][T22495] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 365.050980][T22495] ntfs3: loop4: Failed to load $MFT. [ 365.128563][T22495] 9pnet_fd: Insufficient options for proto=fd [ 365.243380][T22518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8259'. [ 365.307549][T22521] loop2: detected capacity change from 0 to 1024 [ 365.408988][T22521] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 365.503391][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 365.530166][T22481] loop0: detected capacity change from 0 to 40427 [ 365.534574][T22481] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 365.536639][T22481] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 365.578977][T22481] F2FS-fs (loop0): Found nat_bits in checkpoint [ 365.625817][T22481] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 365.627847][T22481] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 365.705526][T22557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8275'. [ 365.894264][T22571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8294'. [ 365.896565][T22571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8294'. [ 365.930767][T22573] netlink: 'syz.2.8285': attribute type 1 has an invalid length. [ 366.093677][T22589] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 366.326037][T22610] loop4: detected capacity change from 0 to 1024 [ 366.372161][T22610] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 366.530266][T22622] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 366.559557][ T4299] EXT4-fs (loop4): unmounting filesystem. [ 366.901034][T22650] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 367.320401][T22687] netlink: zone id is out of range [ 367.321748][T22687] netlink: del zone limit has 4 unknown bytes [ 367.426799][T22692] loop2: detected capacity change from 0 to 64 [ 367.428974][T22695] loop0: detected capacity change from 0 to 256 [ 367.801972][T22719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.803945][T22719] IPv6: NLM_F_CREATE should be set when creating new route [ 367.805838][T22719] IPv6: NLM_F_CREATE should be set when creating new route [ 367.852847][T22681] loop3: detected capacity change from 0 to 32768 [ 367.904943][T22681] JBD2: Ignoring recovery information on journal [ 367.922284][T22724] loop4: detected capacity change from 0 to 256 [ 368.069079][T22681] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 368.174095][ T6930] ocfs2: Unmounting device (7,3) on (node local) [ 368.295705][T22752] loop1: detected capacity change from 0 to 256 [ 368.310835][T22754] loop4: detected capacity change from 0 to 64 [ 368.441022][T22757] loop2: detected capacity change from 0 to 256 [ 368.785256][T22790] loop2: detected capacity change from 0 to 256 [ 368.800809][T22791] __nla_validate_parse: 6 callbacks suppressed [ 368.800824][T22791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8389'. [ 368.857661][T22795] loop0: detected capacity change from 0 to 64 [ 368.885716][T22798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8404'. [ 368.993720][T22806] loop0: detected capacity change from 0 to 256 [ 368.998845][T22809] netlink: 'syz.3.8398': attribute type 21 has an invalid length. [ 369.000904][T22809] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8398'. [ 369.256086][T22829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8409'. [ 369.510993][T22848] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 369.572817][T22855] netlink: 'syz.2.8424': attribute type 21 has an invalid length. [ 369.574974][T22855] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8424'. [ 369.667408][T22864] netlink: 'syz.3.8427': attribute type 2 has an invalid length. [ 369.936775][T22888] netlink: 'syz.1.8438': attribute type 21 has an invalid length. [ 369.946575][T22888] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8438'. [ 370.055540][T22896] loop3: detected capacity change from 0 to 256 [ 370.057586][T22896] exfat: Deprecated parameter 'namecase' [ 370.094350][T22896] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 370.287508][T22914] xt_TPROXY: Can be used only with -p tcp or -p udp [ 370.296701][T22918] loop1: detected capacity change from 0 to 64 [ 370.422659][T22922] loop0: detected capacity change from 0 to 512 [ 370.485540][T22922] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 370.594422][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 370.756554][T22945] netlink: 'syz.2.8465': attribute type 32 has an invalid length. [ 370.768337][T22946] netlink: 'syz.1.8467': attribute type 2 has an invalid length. [ 370.906209][T22953] loop3: detected capacity change from 0 to 1024 [ 370.974212][T22923] loop4: detected capacity change from 0 to 32768 [ 371.021282][T22923] JBD2: Ignoring recovery information on journal [ 371.076290][T22957] xt_TPROXY: Can be used only with -p tcp or -p udp [ 371.113605][T22942] loop0: detected capacity change from 0 to 32768 [ 371.116826][T22942] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.8461 (22942) [ 371.132657][T22942] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 371.135539][T22942] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 371.137715][T22942] BTRFS info (device loop0): setting nodatacow, compression disabled [ 371.156733][T22942] BTRFS info (device loop0): enabling auto defrag [ 371.166533][T22923] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 371.189961][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.191709][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.201327][T22942] BTRFS info (device loop0): doing ref verification [ 371.203087][T22942] BTRFS info (device loop0): using free space tree [ 371.327654][ T4299] ocfs2: Unmounting device (7,4) on (node local) [ 371.401138][T22983] loop1: detected capacity change from 0 to 4096 [ 371.436696][T22983] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 371.440067][T22983] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 371.443634][T22983] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 371.446596][T22983] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 371.450035][T22983] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 371.476080][T22983] ntfs: volume version 3.1. [ 371.486941][T22983] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 371.491659][T22983] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 371.498800][T22983] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 371.501705][T22983] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 371.504604][T22983] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 371.529816][ T4301] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 371.641284][T22951] loop2: detected capacity change from 0 to 40427 [ 371.725340][T22951] F2FS-fs (loop2): invalid crc value [ 371.756557][T22951] F2FS-fs (loop2): Found nat_bits in checkpoint [ 371.796716][T23005] netlink: 'syz.0.8481': attribute type 2 has an invalid length. [ 371.815986][T22951] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 371.865708][T22951] F2FS-fs (loop2): Corrupted max_depth of 3: 1025 [ 371.875111][T22951] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 371.914032][T23016] netlink: 'syz.1.8498': attribute type 32 has an invalid length. [ 372.060744][T23024] loop4: detected capacity change from 0 to 256 [ 372.062829][T23024] exfat: Deprecated parameter 'namecase' [ 372.087093][T23024] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 372.092264][T23027] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 372.094436][T23027] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 372.096460][T23027] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 372.123509][T23027] overlayfs: missing 'lowerdir' [ 372.284994][T23034] overlayfs: missing 'lowerdir' [ 372.657831][T23060] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 372.675431][T23060] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 372.677660][T23060] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 372.695454][T23060] overlayfs: missing 'lowerdir' [ 372.784392][T23066] netlink: 3016 bytes leftover after parsing attributes in process `syz.0.8515'. [ 372.819836][T23028] loop1: detected capacity change from 0 to 32768 [ 372.837856][T23068] overlayfs: missing 'lowerdir' [ 372.848600][T23028] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.8492 (23028) [ 372.862157][T23028] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 372.875869][T23028] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 372.878755][T23028] BTRFS info (device loop1): setting nodatacow, compression disabled [ 372.891174][T23028] BTRFS info (device loop1): enabling auto defrag [ 372.901310][T23028] BTRFS info (device loop1): doing ref verification [ 372.903141][T23028] BTRFS info (device loop1): using free space tree [ 372.913855][T23075] overlayfs: missing 'lowerdir' [ 373.205141][ T4293] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.268332][T23112] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 373.354427][T23117] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 373.448735][T23121] netlink: 3016 bytes leftover after parsing attributes in process `syz.2.8531'. [ 373.460244][T23123] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 373.466675][T23123] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 373.479138][T23123] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 373.486376][T23123] overlayfs: missing 'lowerdir' [ 373.848280][T23148] netlink: 3016 bytes leftover after parsing attributes in process `syz.4.8546'. [ 373.983206][T23153] netlink: 'syz.4.8548': attribute type 12 has an invalid length. [ 374.124325][T23157] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8550'. [ 374.126781][T23157] netlink: 'syz.4.8550': attribute type 1 has an invalid length. [ 374.144519][T23157] netlink: 'syz.4.8550': attribute type 2 has an invalid length. [ 374.147404][T23157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8550'. [ 374.289809][T23137] loop3: detected capacity change from 0 to 32768 [ 374.305890][T23137] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.8540 (23137) [ 374.336387][T23137] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 374.345067][T23137] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 374.347570][T23137] BTRFS info (device loop3): setting nodatacow, compression disabled [ 374.362671][T23137] BTRFS info (device loop3): enabling auto defrag [ 374.364414][T23137] BTRFS info (device loop3): doing ref verification [ 374.371029][T23137] BTRFS info (device loop3): using free space tree [ 374.381554][T23141] loop1: detected capacity change from 0 to 32768 [ 374.405722][T23141] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.8543 (23141) [ 374.426362][T23141] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 374.454710][T23141] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 374.488315][T23141] BTRFS info (device loop1): using free space tree [ 374.673483][T23145] loop0: detected capacity change from 0 to 40427 [ 374.703618][T23145] F2FS-fs (loop0): invalid crc value [ 374.704419][T23141] BTRFS info (device loop1): enabling ssd optimizations [ 374.733091][T23215] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8560'. [ 374.744714][T23145] F2FS-fs (loop0): Found nat_bits in checkpoint [ 374.774647][ T6930] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 374.783534][T23145] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 374.796929][T23145] F2FS-fs (loop0): Corrupted max_depth of 3: 1025 [ 374.807864][T23145] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 374.828731][ T4293] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 375.095066][T23221] sock: sock_timestamping_bind_phc: sock not bind to device [ 375.309253][T23234] netlink: 'syz.1.8569': attribute type 1 has an invalid length. [ 375.320413][T23234] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.8569'. [ 375.450426][T23244] loop0: detected capacity change from 0 to 256 [ 375.503444][T23245] loop2: detected capacity change from 0 to 1764 [ 375.882688][T23261] loop2: detected capacity change from 0 to 512 [ 375.929510][T23261] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.8578: Failed to acquire dquot type 1 [ 375.993123][T23261] EXT4-fs (loop2): 1 truncate cleaned up [ 375.994622][T23261] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 376.036595][T23269] loop0: detected capacity change from 0 to 2048 [ 376.037379][T23270] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8584'. [ 376.061361][T23269] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.087196][T23272] netlink: 'syz.3.8585': attribute type 1 has an invalid length. [ 376.104115][T23272] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.8585'. [ 376.127369][T23261] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.8578: Failed to acquire dquot type 1 [ 376.210637][T23277] loop3: detected capacity change from 0 to 256 [ 376.231554][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 376.359177][T23279] loop0: detected capacity change from 0 to 4096 [ 376.368568][T23279] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 376.393418][T23279] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 376.497733][T23282] loop1: detected capacity change from 0 to 1764 [ 376.565716][ T4301] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 376.636708][T23289] sock: sock_timestamping_bind_phc: sock not bind to device [ 376.642785][T23290] netlink: 'syz.0.8592': attribute type 6 has an invalid length. [ 376.806023][T23248] loop4: detected capacity change from 0 to 32768 [ 376.889643][T23248] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.8574 (23248) [ 377.022328][T23248] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 377.025075][T23248] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 377.088538][T23248] BTRFS info (device loop4): using free space tree [ 377.276490][T23319] loop2: detected capacity change from 0 to 256 [ 377.513985][T23327] loop3: detected capacity change from 0 to 2048 [ 377.550095][T23248] BTRFS info (device loop4): enabling ssd optimizations [ 377.568299][T23327] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 377.763941][T23344] netlink: 'syz.2.8608': attribute type 6 has an invalid length. [ 377.804343][T23345] loop0: detected capacity change from 0 to 1764 [ 377.864885][ T4299] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 378.404437][T23369] loop0: detected capacity change from 0 to 512 [ 378.417432][T23366] loop2: detected capacity change from 0 to 2048 [ 378.437242][T23366] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.464873][T23369] __quota_error: 10 callbacks suppressed [ 378.464888][T23369] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 378.528645][T23369] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 378.533257][T23369] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.8622: Failed to acquire dquot type 1 [ 378.567253][T23369] EXT4-fs (loop0): 1 truncate cleaned up [ 378.569172][T23369] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 378.596434][T23369] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 378.605039][T23369] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 378.622806][T23369] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.8622: Failed to acquire dquot type 1 [ 378.705344][T23379] netlink: 'syz.1.8626': attribute type 6 has an invalid length. [ 378.793214][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 378.849537][T23380] loop2: detected capacity change from 0 to 4096 [ 378.852138][T23380] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 378.872885][T23380] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 379.093453][ T4302] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 379.148675][T23390] loop4: detected capacity change from 0 to 256 [ 379.683991][T23425] loop1: detected capacity change from 0 to 256 [ 379.892719][T23376] loop3: detected capacity change from 0 to 32768 [ 379.899499][T23376] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.8625 (23376) [ 379.961662][T23376] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 379.972787][T23376] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 379.997217][T23376] BTRFS info (device loop3): using free space tree [ 380.410079][T23471] loop0: detected capacity change from 0 to 256 [ 380.561610][T23478] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 380.628381][T23376] BTRFS info (device loop3): enabling ssd optimizations [ 380.685246][T23488] loop2: detected capacity change from 0 to 256 [ 380.825161][ T6930] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 380.941832][T23495] loop4: detected capacity change from 0 to 8 [ 381.247450][T23518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8682'. [ 381.253259][T23518] IPv6: sit1: Disabled Multicast RS [ 381.357342][T23527] netlink: 'syz.4.8690': attribute type 21 has an invalid length. [ 381.378784][T23530] loop2: detected capacity change from 0 to 8 [ 381.386756][T23529] netlink: 'syz.0.8691': attribute type 10 has an invalid length. [ 381.404523][T23529] device veth1_macvtap left promiscuous mode [ 381.585837][T23539] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 381.730924][T23546] loop3: detected capacity change from 0 to 4096 [ 381.745476][T23546] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 381.748427][T23546] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 381.758688][T23546] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 381.761735][T23546] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 381.795574][T23546] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 381.810435][T23558] netlink: 'syz.2.8704': attribute type 21 has an invalid length. [ 381.814994][T23546] ntfs: volume version 3.1. [ 381.818611][T23546] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 382.021538][T23572] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 382.026995][T23577] loop3: detected capacity change from 0 to 256 [ 382.160887][T23585] netlink: 'syz.1.8720': attribute type 21 has an invalid length. [ 382.389491][T23608] loop1: detected capacity change from 0 to 256 [ 382.407806][T23607] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 382.834857][T23634] loop4: detected capacity change from 0 to 4096 [ 382.843488][T23634] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 382.846412][T23642] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 382.916630][T23634] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 382.920105][T23634] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 382.979723][ T417] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 382.981910][ T4299] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 383.491108][T23640] loop3: detected capacity change from 0 to 32768 [ 383.509991][T23640] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.8744 (23640) [ 383.528691][T23640] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 383.530391][T23672] loop4: detected capacity change from 0 to 512 [ 383.531319][T23640] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 383.548445][T23640] BTRFS info (device loop3): using free space tree [ 383.587774][T23672] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 383.784166][ T4299] EXT4-fs (loop4): unmounting filesystem. [ 383.884679][T23718] netlink: 'syz.4.8767': attribute type 21 has an invalid length. [ 383.928713][T23640] BTRFS info (device loop3): enabling ssd optimizations [ 384.042361][ T6930] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 384.259666][T23739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8779'. [ 384.549368][T23756] netlink: 'syz.3.8785': attribute type 21 has an invalid length. [ 384.645797][T23764] openvswitch: netlink: Flow key attr not present in new flow. [ 384.715382][T23772] loop2: detected capacity change from 0 to 512 [ 384.756492][T23772] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 385.005610][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 385.014843][T23791] netlink: 'syz.0.8804': attribute type 21 has an invalid length. [ 385.760129][T23843] openvswitch: netlink: Flow key attr not present in new flow. [ 385.952799][ T78] block nbd4: Attempted send on invalid socket [ 385.954462][ T78] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 385.962058][ T78] block nbd4: Attempted send on invalid socket [ 385.963638][ T78] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 385.966045][ T78] block nbd4: Attempted send on invalid socket [ 385.967762][ T78] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 385.971401][ T78] block nbd4: Attempted send on invalid socket [ 385.973098][ T78] I/O error, dev nbd4, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 385.976828][ T78] block nbd4: Attempted send on invalid socket [ 385.978716][ T78] I/O error, dev nbd4, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 385.982087][ T78] block nbd4: Attempted send on invalid socket [ 385.983789][ T78] I/O error, dev nbd4, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 386.165225][T23874] openvswitch: netlink: Flow key attr not present in new flow. [ 386.305258][T23832] loop1: detected capacity change from 0 to 32768 [ 386.328308][T23832] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.8821 (23832) [ 386.364322][T23832] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 386.366977][T23832] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 386.370172][T23832] BTRFS info (device loop1): using free space tree [ 386.497511][T23868] loop4: detected capacity change from 0 to 32768 [ 386.514401][T23868] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.8843 (23868) [ 386.523872][T23868] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 386.535698][T23868] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 386.538024][T23868] BTRFS info (device loop4): setting nodatacow, compression disabled [ 386.556581][T23868] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 386.564412][T23868] BTRFS info (device loop4): force lzo compression, level 0 [ 386.566336][T23868] BTRFS info (device loop4): metadata ratio 8 [ 386.568081][T23868] BTRFS info (device loop4): doing ref verification [ 386.577584][T23868] BTRFS info (device loop4): metadata ratio 32769 [ 386.579944][T23868] BTRFS info (device loop4): turning off barriers [ 386.581598][T23868] BTRFS info (device loop4): enabling ssd optimizations [ 386.583659][T23868] BTRFS info (device loop4): using spread ssd allocation scheme [ 386.585602][T23868] BTRFS info (device loop4): turning on barriers [ 386.587244][T23868] BTRFS info (device loop4): using free space tree [ 386.594374][T23832] BTRFS info (device loop1): enabling ssd optimizations [ 386.723667][ T4293] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 387.142133][ T4299] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 387.251192][T23971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8874'. [ 387.662121][T24003] xt_HMARK: spi-set and port-set can't be combined [ 387.879609][T24027] xt_TCPMSS: Only works on TCP SYN packets [ 388.025204][T24040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8908'. [ 388.154117][T24050] loop4: detected capacity change from 0 to 2048 [ 388.195868][T24050] loop4: p2 < > [ 388.246351][T24060] loop0: detected capacity change from 0 to 512 [ 388.288919][T24060] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 388.291509][T24060] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 388.294082][T24060] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 388.308376][T24060] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 388.310386][T24060] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 388.312465][T24060] EXT4-fs (loop0): too many log groups per flexible block group [ 388.315410][T24060] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 388.317304][T24060] EXT4-fs (loop0): mount failed [ 388.394496][T24072] delete_channel: no stack [ 388.525358][T24083] kAFS: Can only specify source 'none' with -o dyn [ 388.531084][T24087] device lo left promiscuous mode [ 388.532602][T24087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.703343][T24100] loop2: detected capacity change from 0 to 8 [ 388.752513][ T51] block nbd0: Attempted send on invalid socket [ 388.754216][ T51] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 388.759897][T24102] hfsplus: unable to find HFS+ superblock [ 389.158072][T24137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8955'. [ 389.202102][T24142] netlink: 140 bytes leftover after parsing attributes in process `syz.1.8958'. [ 389.214882][T24142] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8958'. [ 389.305002][T24151] futex_wake_op: syz.4.8964 tries to shift op by 35; fix this program [ 389.316895][T24149] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 389.335702][T24155] loop1: detected capacity change from 0 to 256 [ 389.445429][T24160] netlink: del zone limit has 8 unknown bytes [ 389.594298][T24171] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 389.629209][T24173] netlink: 'syz.2.8973': attribute type 3 has an invalid length. [ 389.643753][T24175] loop3: detected capacity change from 0 to 512 [ 389.785778][T24175] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 389.835621][ T6930] EXT4-fs (loop3): unmounting filesystem. [ 389.895494][T24193] loop0: detected capacity change from 0 to 8 [ 389.914185][T24193] SQUASHFS error: zlib decompression failed, data probably corrupt [ 389.916520][T24193] SQUASHFS error: Failed to read block 0x13e: -5 [ 389.934091][T24193] SQUASHFS error: Unable to read metadata cache entry [13c] [ 389.936085][T24193] SQUASHFS error: Unable to read directory block [13c:26] [ 389.991782][T24197] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8984'. [ 390.047419][T24151] loop4: detected capacity change from 0 to 32768 [ 390.086078][T24151] XFS: noikeep mount option is deprecated. [ 390.142768][T24151] XFS (loop4): Mounting V5 Filesystem [ 390.297917][T24220] loop1: detected capacity change from 0 to 256 [ 390.307575][T24151] XFS (loop4): Ending clean mount [ 390.315481][T24151] XFS (loop4): Quotacheck needed: Please wait. [ 390.355664][T24220] FAT-fs (loop1): Directory bread(block 64) failed [ 390.357521][T24220] FAT-fs (loop1): Directory bread(block 65) failed [ 390.363790][T24151] XFS (loop4): Quotacheck: Done. [ 390.376376][T24220] FAT-fs (loop1): Directory bread(block 66) failed [ 390.378559][T24220] FAT-fs (loop1): Directory bread(block 67) failed [ 390.386481][T24220] FAT-fs (loop1): Directory bread(block 68) failed [ 390.396588][T24220] FAT-fs (loop1): Directory bread(block 69) failed [ 390.407314][T24220] FAT-fs (loop1): Directory bread(block 70) failed [ 390.421156][T24220] FAT-fs (loop1): Directory bread(block 71) failed [ 390.423047][T24220] FAT-fs (loop1): Directory bread(block 72) failed [ 390.424767][T24220] FAT-fs (loop1): Directory bread(block 73) failed [ 390.427633][T24228] loop0: detected capacity change from 0 to 1764 [ 390.433757][ T9850] udevd[9850]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 390.441260][ T4299] XFS (loop4): Unmounting Filesystem [ 390.501906][T24230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8996'. [ 390.596501][T24233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8998'. [ 390.755984][T24243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9004'. [ 390.786193][T24246] ebt_limit: overflow, try lower: 12058624/0 [ 390.953426][T24256] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 391.168655][T24272] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9017'. [ 391.171117][T24272] netlink: 'syz.1.9017': attribute type 2 has an invalid length. [ 391.329123][T24284] binder: 24284:24283 cannot find target node [ 391.344089][T24284] binder: 24283:24284 transaction call to 0:0 failed 2/29189/-22, size 0-0 line 3054 [ 391.367345][T24286] IPv6: sit1: Disabled Multicast RS [ 391.390101][T24291] netlink: 'syz.2.9025': attribute type 5 has an invalid length. [ 391.869852][T24330] loop1: detected capacity change from 0 to 1024 [ 392.083821][T24330] EXT4-fs (loop1): Test dummy encryption mode enabled [ 392.097072][T24330] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 392.197333][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 392.199465][T24365] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 392.266289][T24365] 8021q: adding VLAN 0 to HW filter on device bond4 [ 392.293166][T24375] loop2: detected capacity change from 0 to 1024 [ 392.310634][T24375] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 392.375257][T24378] random: crng reseeded on system resumption [ 392.515682][T24385] xt_ecn: cannot match TCP bits for non-tcp packets [ 392.647649][T24395] loop2: detected capacity change from 0 to 1024 [ 392.966908][T24415] loop2: detected capacity change from 0 to 512 [ 392.975860][T24415] EXT4-fs: Ignoring removed nomblk_io_submit option [ 392.983356][T24415] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 393.008310][T24415] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 393.010778][T24415] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 393.013677][T24415] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 393.016363][T24415] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 393.026488][T24415] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 393.047530][T24415] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.9085: dx entry: limit 65535 != root limit 120 [ 393.060511][T24415] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.9085: Corrupt directory, running e2fsck is recommended [ 393.191022][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 393.289885][T24389] loop4: detected capacity change from 0 to 32768 [ 393.307505][T24419] loop3: detected capacity change from 0 to 32768 [ 393.319550][T24389] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.9072 (24389) [ 393.329898][T24419] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.9087 (24419) [ 393.334258][T24389] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 393.337066][T24389] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 393.347691][T24389] BTRFS info (device loop4): use zlib compression, level 3 [ 393.353657][T24419] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 393.356626][T24419] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 393.362966][T24389] BTRFS info (device loop4): using free space tree [ 393.372541][T24419] BTRFS info (device loop3): force zlib compression, level 3 [ 393.376955][T24419] BTRFS info (device loop3): force clearing of disk cache [ 393.386574][T24419] BTRFS info (device loop3): setting nodatasum [ 393.388766][T24419] BTRFS info (device loop3): allowing degraded mounts [ 393.390588][T24419] BTRFS info (device loop3): enabling disk space caching [ 393.392379][T24419] BTRFS info (device loop3): disk space caching is enabled [ 393.591985][T24482] __nla_validate_parse: 6 callbacks suppressed [ 393.592000][T24482] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9101'. [ 393.606595][T24482] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9101'. [ 393.615783][T24389] BTRFS info (device loop4): enabling ssd optimizations [ 393.615941][T24419] BTRFS info (device loop3): rebuilding free space tree [ 393.629224][T24482] netlink: 29 bytes leftover after parsing attributes in process `syz.1.9101'. [ 393.661994][T24419] BTRFS info (device loop3): disabling free space tree [ 393.663896][T24419] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 393.666431][T24419] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 393.713051][T24487] loop0: detected capacity change from 0 to 1024 [ 393.727578][T24487] EXT4-fs (loop0): Test dummy encryption mode enabled [ 393.741368][T24487] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 393.753572][ T4299] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 394.004497][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 394.017114][ T6930] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 394.167653][T24502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9111'. [ 394.190866][T24506] loop1: detected capacity change from 0 to 256 [ 394.333542][T24518] loop1: detected capacity change from 0 to 512 [ 394.352588][T24518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 394.377167][T24518] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 394.419945][T24518] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 394.441952][T24518] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 394.444823][T24518] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 394.447242][T24518] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 394.491131][T24518] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 394.504264][T24518] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.9116: dx entry: limit 65535 != root limit 120 [ 394.507453][T24518] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.9116: Corrupt directory, running e2fsck is recommended [ 394.555738][T24534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9123'. [ 394.588509][T24535] IPv6: sit3: Disabled Multicast RS [ 394.589087][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 394.792292][T24554] netlink: 'syz.0.9135': attribute type 5 has an invalid length. [ 394.794388][T24554] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9135'. [ 394.831930][T24557] binder: 24557:24556 cannot find target node [ 394.833683][T24557] binder: 24556:24557 transaction call to 0:0 failed 3/29189/-22, size 0-0 line 3054 [ 394.851252][T24560] loop2: detected capacity change from 0 to 190 [ 394.877953][T24560] __ntfs_warning: 10 callbacks suppressed [ 394.877969][T24560] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 394.902431][T24560] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 394.905573][T24560] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 394.918275][T24560] ntfs: (device loop2): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x0, type 0xb0, name_len 0). Marking corrupt inode and base inode 0x0 as bad. Run chkdsk. [ 394.928993][T24560] ntfs: (device loop2): load_system_files(): Failed to load $MFT/$BITMAP attribute. [ 394.931600][T24560] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files. [ 395.030376][T24572] loop4: detected capacity change from 0 to 1024 [ 395.036795][T24572] EXT4-fs (loop4): Test dummy encryption mode enabled [ 395.070200][T24572] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 395.151274][T24581] openvswitch: netlink: Flow actions attr not present in new flow. [ 395.224281][ T4299] EXT4-fs (loop4): unmounting filesystem. [ 395.413813][T24596] netlink: 'syz.3.9153': attribute type 2 has an invalid length. [ 395.450454][T24599] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9152'. [ 395.454037][T24599] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9152'. [ 395.468512][T24601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9156'. [ 395.487616][T24599] netlink: 29 bytes leftover after parsing attributes in process `syz.0.9152'. [ 395.695514][T24617] device gretap0 entered promiscuous mode [ 395.697651][T24617] netlink: 'syz.2.9163': attribute type 3 has an invalid length. [ 396.017092][T24645] loop4: detected capacity change from 0 to 190 [ 396.035340][T24645] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 396.038692][T24647] sctp: [Deprecated]: syz.0.9177 (pid 24647) Use of int in maxseg socket option. [ 396.038692][T24647] Use struct sctp_assoc_value instead [ 396.054918][T24645] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 396.078656][T24645] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 396.082362][T24645] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x0, type 0xb0, name_len 0). Marking corrupt inode and base inode 0x0 as bad. Run chkdsk. [ 396.265529][T24661] Device name cannot be null; rc = [-22] [ 396.392894][T24625] loop1: detected capacity change from 0 to 32768 [ 396.409217][T24625] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.9167 (24625) [ 396.425054][T24625] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 396.426922][T24669] loop2: detected capacity change from 0 to 256 [ 396.427902][T24625] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 396.434436][T24625] BTRFS info (device loop1): force zlib compression, level 3 [ 396.437954][T24625] BTRFS info (device loop1): force clearing of disk cache [ 396.446469][T24625] BTRFS info (device loop1): setting nodatasum [ 396.450602][T24625] BTRFS info (device loop1): allowing degraded mounts [ 396.454758][T24625] BTRFS info (device loop1): enabling disk space caching [ 396.460709][T24625] BTRFS info (device loop1): disk space caching is enabled [ 396.471967][T24669] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 396.759635][T24625] BTRFS info (device loop1): rebuilding free space tree [ 396.766379][T24625] BTRFS info (device loop1): disabling free space tree [ 396.769866][T24625] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 396.783094][T24625] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 396.823372][T24708] kAFS: unable to lookup cell '/' [ 396.831959][T24710] loop3: detected capacity change from 0 to 8 [ 396.855858][T24710] SQUASHFS error: Corrupted symlink [ 396.874651][ T4293] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 397.355318][T24743] kAFS: unable to lookup cell '/' [ 397.386982][T24748] misc userio: No port type given on /dev/userio [ 397.692174][T24767] sctp: [Deprecated]: syz.4.9224 (pid 24767) Use of int in maxseg socket option. [ 397.692174][T24767] Use struct sctp_assoc_value instead [ 397.820397][T24777] loop4: detected capacity change from 0 to 8 [ 397.854794][T24777] SQUASHFS error: zlib decompression failed, data probably corrupt [ 397.857061][T24777] SQUASHFS error: Failed to read block 0x13e: -5 [ 397.876633][T24777] SQUASHFS error: Unable to read metadata cache entry [13c] [ 397.884178][T24779] loop3: detected capacity change from 0 to 1764 [ 397.889079][T24777] SQUASHFS error: Unable to read directory block [13c:26] [ 397.892822][T24783] misc userio: No port type given on /dev/userio [ 397.994318][T24787] usb usb8: usbfs: process 24787 (syz.0.9235) did not claim interface 0 before use [ 398.103520][T24796] loop0: detected capacity change from 0 to 512 [ 398.107185][T24750] loop1: detected capacity change from 0 to 32768 [ 398.128502][T24750] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.9219 (24750) [ 398.146098][T24750] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 398.153483][T24750] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 398.155790][T24750] BTRFS info (device loop1): use zlib compression, level 3 [ 398.157713][T24750] BTRFS info (device loop1): using free space tree [ 398.188642][T24796] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 398.202745][T24808] netlink: 'syz.4.9244': attribute type 3 has an invalid length. [ 398.234036][T24811] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 398.320035][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 398.412690][T24829] xt_ecn: cannot match TCP bits for non-tcp packets [ 398.507170][T24750] BTRFS info (device loop1): enabling ssd optimizations [ 398.591377][T24851] futex_wake_op: syz.0.9261 tries to shift op by 35; fix this program [ 398.629755][ T4293] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 398.663977][T24853] loop4: detected capacity change from 0 to 256 [ 398.786715][T24853] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 399.049164][T24874] __nla_validate_parse: 7 callbacks suppressed [ 399.049179][T24874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9271'. [ 399.198336][T24881] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9275'. [ 399.200820][T24881] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9275'. [ 399.225872][T24851] loop0: detected capacity change from 0 to 32768 [ 399.236100][T24851] XFS: noikeep mount option is deprecated. [ 399.309644][T24851] XFS (loop0): Mounting V5 Filesystem [ 399.377575][T24888] loop2: detected capacity change from 0 to 1764 [ 399.435302][T24851] XFS (loop0): Ending clean mount [ 399.449093][T24851] XFS (loop0): Quotacheck needed: Please wait. [ 399.555110][T24851] XFS (loop0): Quotacheck: Done. [ 399.653518][ T4301] XFS (loop0): Unmounting Filesystem [ 399.667540][T24876] loop1: detected capacity change from 0 to 32768 [ 399.672997][T24876] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.9272 (24876) [ 399.704961][T24876] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 399.707691][T24876] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 399.715285][T24876] BTRFS info (device loop1): setting nodatacow, compression disabled [ 399.717461][T24876] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 399.720111][T24876] BTRFS info (device loop1): force lzo compression, level 0 [ 399.722340][T24876] BTRFS info (device loop1): metadata ratio 8 [ 399.723827][T24876] BTRFS info (device loop1): doing ref verification [ 399.725472][T24876] BTRFS info (device loop1): metadata ratio 32769 [ 399.743367][T24876] BTRFS info (device loop1): turning off barriers [ 399.744839][T24876] BTRFS info (device loop1): enabling ssd optimizations [ 399.746633][T24876] BTRFS info (device loop1): using spread ssd allocation scheme [ 399.749868][T24876] BTRFS info (device loop1): turning on barriers [ 399.751541][T24876] BTRFS info (device loop1): using free space tree [ 399.851065][T24920] xt_HMARK: spi-set and port-set can't be combined [ 399.971404][T24940] delete_channel: no stack [ 400.266015][ T4293] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 400.461422][T24971] loop4: detected capacity change from 0 to 8 [ 400.584250][T24976] loop3: detected capacity change from 0 to 2048 [ 400.658453][T24976] loop3: p2 < > [ 400.761555][ T3910] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 400.764688][ T3910] Buffer I/O error on dev loop3, logical block 0, async page read [ 400.766764][ T3910] ldm_validate_partition_table(): Disk read failed. [ 400.802775][T24992] device lo left promiscuous mode [ 400.804116][T24992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.806589][ T3910] Dev loop3: unable to read RDB block 0 [ 400.816579][ T3910] loop3: unable to read partition table [ 400.830040][ T3910] loop3: partition table beyond EOD, truncated [ 401.055957][T25012] netlink: 'syz.2.9326': attribute type 3 has an invalid length. [ 401.233286][T24982] loop0: detected capacity change from 0 to 32768 [ 401.247585][T24982] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.9310 (24982) [ 401.263080][T24982] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 401.271810][T24982] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 401.277745][T24982] BTRFS info (device loop0): use zlib compression, level 3 [ 401.284592][T24982] BTRFS info (device loop0): using free space tree [ 401.300180][ T9851] udevd[9851]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 401.478263][T24982] BTRFS info (device loop0): enabling ssd optimizations [ 401.523043][ T4301] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 401.632690][T25056] loop1: detected capacity change from 0 to 1024 [ 401.695607][T25006] loop3: detected capacity change from 0 to 32768 [ 401.703680][T25056] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 401.703755][T25006] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.9323 (25006) [ 401.716606][T25006] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 401.719786][T25006] BTRFS error (device loop3): unsupported checksum algorithm: 11 [ 401.725719][T25006] BTRFS error (device loop3): open_ctree failed [ 401.735665][T25056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 401.893849][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 402.002103][ T9850] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by udevd (9850) [ 402.530773][T25111] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9365'. [ 402.652995][T25072] loop4: detected capacity change from 0 to 32768 [ 402.727004][T25123] netlink: 'syz.3.9372': attribute type 10 has an invalid length. [ 402.804973][T25079] loop2: detected capacity change from 0 to 32768 [ 402.821734][T25079] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.9350 (25079) [ 402.833819][T25079] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 402.836535][T25079] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 402.857175][T25079] BTRFS info (device loop2): use zlib compression, level 3 [ 402.859887][T25079] BTRFS info (device loop2): using free space tree [ 403.028742][T25154] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9381'. [ 403.106918][T25079] BTRFS info (device loop2): enabling ssd optimizations [ 403.132558][T25167] x_tables: ip_tables: osf match: only valid for protocol 6 [ 403.220723][ T4302] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 403.464493][T25193] loop4: detected capacity change from 0 to 64 [ 403.702990][T25205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9404'. [ 403.974598][T25221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9412'. [ 403.986130][T25223] loop1: detected capacity change from 0 to 64 [ 404.107385][T25184] loop0: detected capacity change from 0 to 32768 [ 404.130584][T25184] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 404.133350][T25184] BTRFS error (device loop0): unsupported checksum algorithm: 11 [ 404.152239][T25184] BTRFS error (device loop0): open_ctree failed [ 404.221135][T25239] loop2: detected capacity change from 0 to 512 [ 404.223876][T25239] EXT4-fs: Ignoring removed nomblk_io_submit option [ 404.263229][T25239] EXT4-fs (loop2): Test dummy encryption mode enabled [ 404.281465][T25243] netlink: 292 bytes leftover after parsing attributes in process `syz.3.9423'. [ 404.320639][T25239] EXT4-fs (loop2): 1 truncate cleaned up [ 404.322192][T25239] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 404.364710][T25239] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 404.394087][T25239] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.9420: bg 0: block 7: invalid block bitmap [ 404.453359][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 404.453568][T25253] netlink: 'syz.0.9428': attribute type 1 has an invalid length. [ 404.456977][T25253] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.9428'. [ 404.751430][T25277] loop3: detected capacity change from 0 to 2048 [ 404.790553][T25277] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 404.794440][T25277] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.895596][T25285] loop1: detected capacity change from 0 to 1024 [ 404.931811][T25285] EXT4-fs (loop1): bad geometry: first data block is 0 with a 1k block and cluster size [ 404.966674][T25293] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9447'. [ 405.008402][T25285] tmpfs: Bad value for 'mpol' [ 405.191337][T25303] loop2: detected capacity change from 0 to 4096 [ 405.206440][T25303] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 405.289440][T25303] ntfs3: loop2: failed to convert "c46c" to iso8859-5 [ 405.308552][T25317] loop1: detected capacity change from 0 to 2048 [ 405.312837][T25317] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 405.329293][T25317] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.366094][T25321] loop0: detected capacity change from 0 to 1764 [ 405.382943][T25323] loop4: detected capacity change from 0 to 256 [ 405.401950][T25321] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 405.428589][T25323] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 405.542539][T25332] loop0: detected capacity change from 0 to 1024 [ 405.568396][T25332] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 405.594121][T25333] loop3: detected capacity change from 0 to 4096 [ 405.616701][T25333] NILFS (loop3): invalid segment: Checksum error in segment payload [ 405.638688][T25333] NILFS (loop3): trying rollback from an earlier position [ 405.665473][T25333] NILFS (loop3): recovery complete [ 405.674098][T25332] tmpfs: Bad value for 'mpol' [ 405.675373][T25339] loop4: detected capacity change from 0 to 8 [ 405.677303][T25340] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 405.713195][T25339] SQUASHFS error: Failed to read block 0x63a: -5 [ 405.726368][T25339] SQUASHFS error: Unable to read metadata cache entry [638] [ 405.733845][T25339] SQUASHFS error: Unable to read directory block [26067d:0] [ 405.875171][T25348] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 405.940577][T25354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9476'. [ 406.112861][T25328] loop1: detected capacity change from 0 to 32768 [ 406.131134][T25328] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.9465 (25328) [ 406.156195][T25328] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 406.164245][T25328] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 406.166616][T25328] BTRFS info (device loop1): setting nodatasum [ 406.177408][T25328] BTRFS info (device loop1): using free space tree [ 406.423656][T25328] BTRFS info (device loop1): enabling ssd optimizations [ 406.618718][ T4293] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 406.742762][T25422] loop3: detected capacity change from 0 to 4096 [ 406.765301][T25422] __ntfs_error: 2 callbacks suppressed [ 406.765321][T25422] ntfs: (device loop3): parse_options(): NLS character set cp86 not found. Using previous one cp1255. [ 406.772685][T25422] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 406.775875][T25422] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 406.804691][T25422] ntfs: volume version 3.1. [ 406.818445][T25422] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 406.821154][T25422] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 406.834288][T25422] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 406.909554][T25422] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 406.912952][T25422] ntfs: (device loop3): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 407.311390][T25475] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9538'. [ 407.341314][T25468] loop4: detected capacity change from 0 to 4096 [ 407.372977][T25468] ntfs: (device loop4): parse_options(): NLS character set cp86 not found. Using previous one cp1255. [ 407.387951][T25468] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 407.435703][T25468] ntfs: volume version 3.1. [ 407.702798][T25506] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 407.704963][T25506] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 407.762766][T25513] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.9547'. [ 407.819874][T25516] nft_compat: unsupported protocol 1 [ 407.868834][T25519] deleting an unspecified loop device is not supported. [ 408.006056][T25533] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9557'. [ 408.061397][T25538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.124172][T25545] loop4: detected capacity change from 0 to 1024 [ 408.181356][T25545] EXT4-fs: Ignoring removed orlov option [ 408.182857][T25545] EXT4-fs: Ignoring removed nomblk_io_submit option [ 408.204144][T25545] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 408.206446][T25545] System zones: 0-1, 3-36 [ 408.227554][T25549] i2c i2c-0: Invalid block write size 47 [ 408.237918][T25545] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 408.316802][ T4299] EXT4-fs (loop4): unmounting filesystem. [ 408.470530][T25576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.567076][T25582] loop1: detected capacity change from 0 to 256 [ 408.585722][T25584] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.9581'. [ 408.590160][T25582] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 408.671756][ T417] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 408.897588][T25615] netlink: 'syz.0.9597': attribute type 29 has an invalid length. [ 408.917229][T25615] netlink: 'syz.0.9597': attribute type 29 has an invalid length. [ 408.987995][T25620] loop4: detected capacity change from 0 to 512 [ 409.017420][T25620] EXT4-fs: Ignoring removed oldalloc option [ 409.027123][T25620] EXT4-fs: Ignoring removed nobh option [ 409.081179][T25620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 409.186270][T25630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9602'. [ 409.189531][T25630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9602'. [ 409.192614][ T4299] EXT4-fs (loop4): unmounting filesystem. [ 409.219313][T25634] trusted_key: encrypted_key: master key parameter 't' is invalid [ 409.242693][T25638] loop2: detected capacity change from 0 to 1024 [ 409.268959][T25638] EXT4-fs: Ignoring removed orlov option [ 409.270482][T25638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 409.286779][T25638] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 409.289163][T25638] System zones: 0-1, 3-36 [ 409.294556][T25638] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 409.458906][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 409.653784][T25670] loop2: detected capacity change from 0 to 8 [ 409.655914][T25670] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 409.696675][T25670] cramfs: Error -3 while decompressing! [ 409.701641][T25670] cramfs: 000000000dee1599(26)->000000003fd5ad87(4096) [ 409.703643][T25670] cramfs: bad data blocksize 3489655184 [ 409.705631][T25670] cramfs: Error -3 while decompressing! [ 409.707077][T25670] cramfs: 000000000dee1599(26)->000000003fd5ad87(4096) [ 409.783064][T25677] loop3: detected capacity change from 0 to 1024 [ 409.789549][T25677] EXT4-fs: Ignoring removed orlov option [ 409.791356][T25677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 409.820695][T25677] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 409.822871][T25677] System zones: 0-1, 3-36 [ 409.843523][T25677] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 410.007569][ T6930] EXT4-fs (loop3): unmounting filesystem. [ 410.042939][T25665] loop0: detected capacity change from 0 to 32768 [ 410.081220][T25665] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.9620 (25665) [ 410.102375][T25665] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 410.105145][T25665] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 410.116177][T25665] BTRFS info (device loop0): using free space tree [ 410.381962][T25731] loop1: detected capacity change from 0 to 1024 [ 410.384286][T25731] EXT4-fs: Ignoring removed orlov option [ 410.385973][T25731] EXT4-fs: Ignoring removed nomblk_io_submit option [ 410.404158][T25665] BTRFS info (device loop0): enabling ssd optimizations [ 410.420160][T25731] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 410.422631][T25731] System zones: 0-1, 3-36 [ 410.435839][T25731] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 410.456791][ T4301] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 410.603756][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 410.785646][T25755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9654'. [ 410.788033][T25755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9654'. [ 410.827664][T25758] loop3: detected capacity change from 0 to 16 [ 410.856437][T25758] erofs: (device loop3): mounted with root inode @ nid 36. [ 410.890470][T25758] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 410.893459][T25758] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[46, 4050] out[1851] [ 410.896175][T25758] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 410.960629][T25767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9660'. [ 411.024193][T25770] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9662'. [ 411.060387][ T4294] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 411.140529][T25784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9670'. [ 411.391512][T25805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.451934][T25805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.539442][T25811] loop1: detected capacity change from 0 to 256 [ 411.555683][T25811] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 411.579452][T25811] loop1: Can't mount, would change RO state [ 411.944598][T25803] loop2: detected capacity change from 0 to 32768 [ 411.947047][T25799] loop4: detected capacity change from 0 to 32768 [ 412.009228][T25799] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.9676 (25799) [ 412.018991][T25799] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 412.021692][T25799] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 412.023961][T25799] BTRFS info (device loop4): using free space tree [ 412.043627][T25803] XFS (loop2): Mounting V5 Filesystem [ 412.059648][T25834] loop3: detected capacity change from 0 to 256 [ 412.077950][T25834] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 412.102881][T25843] loop0: detected capacity change from 0 to 16 [ 412.107097][T25843] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 412.109509][T25834] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 412.139149][T25834] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 412.191802][T25803] XFS (loop2): Ending clean mount [ 412.209085][T25803] XFS (loop2): Quotacheck needed: Please wait. [ 412.229843][T25799] BTRFS info (device loop4): enabling ssd optimizations [ 412.297967][T25803] XFS (loop2): Quotacheck: Done. [ 412.356310][ T4302] XFS (loop2): Unmounting Filesystem [ 412.415698][T25866] loop3: detected capacity change from 0 to 2048 [ 412.437244][T25866] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 412.449948][ T4299] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 412.467201][T25870] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 412.571124][T25866] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=139 [ 412.670630][T25866] Remounting filesystem read-only [ 412.913805][T25890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9709'. [ 412.916321][T25890] Zero length message leads to an empty skb [ 413.045572][T25898] netlink: 'syz.4.9712': attribute type 1 has an invalid length. [ 413.103071][T25904] loop3: detected capacity change from 0 to 2048 [ 413.309163][T25912] loop3: detected capacity change from 0 to 2048 [ 413.335880][T25915] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 413.456398][T25921] loop4: detected capacity change from 0 to 164 [ 413.484489][T25921] syz.4.9722: attempt to access beyond end of device [ 413.484489][T25921] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 413.497348][T25921] syz.4.9722: attempt to access beyond end of device [ 413.497348][T25921] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 413.512823][T25883] loop0: detected capacity change from 0 to 32768 [ 413.584404][T25883] XFS (loop0): Mounting V5 Filesystem [ 413.739159][T25942] loop3: detected capacity change from 0 to 128 [ 413.745033][T25883] XFS (loop0): Ending clean mount [ 413.793995][T25942] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 413.856282][ T4301] XFS (loop0): Unmounting Filesystem [ 413.876717][ T6930] EXT4-fs (loop3): unmounting filesystem. [ 413.963402][ T4294] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 414.021096][T25962] loop1: detected capacity change from 0 to 164 [ 414.077127][T25965] loop2: detected capacity change from 0 to 512 [ 414.090777][T25962] syz.1.9738: attempt to access beyond end of device [ 414.090777][T25962] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 414.096072][T25965] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 414.098761][T25965] UDF-fs: Scanning with blocksize 512 failed [ 414.127713][T25965] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 414.130730][T25962] syz.1.9738: attempt to access beyond end of device [ 414.130730][T25962] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 414.139359][T25965] UDF-fs: Scanning with blocksize 1024 failed [ 414.178346][T25965] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 414.180429][T25965] UDF-fs: Scanning with blocksize 2048 failed [ 414.203049][T25965] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 414.245739][T25965] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 414.574208][T25990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9752'. [ 414.653384][T26000] netlink: 'syz.1.9764': attribute type 1 has an invalid length. [ 414.678003][T26003] loop2: detected capacity change from 0 to 256 [ 414.693588][T26003] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 414.707962][T26003] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 414.729733][T26003] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 414.882276][T26012] loop0: detected capacity change from 0 to 2048 [ 414.896286][T26012] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 414.912417][T26012] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.079633][T26033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9767'. [ 415.266463][T26045] loop2: detected capacity change from 0 to 164 [ 416.289613][T26072] loop3: detected capacity change from 0 to 32768 [ 416.313886][T26090] loop1: detected capacity change from 0 to 32768 [ 416.317423][T26090] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.9790 (26090) [ 416.334863][T26090] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 416.337892][T26090] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 416.340852][T26090] BTRFS info (device loop1): using free space tree [ 416.343270][T26072] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 416.419210][ T6930] ocfs2: Unmounting device (7,3) on (node local) [ 416.708948][T26090] BTRFS info (device loop1): enabling ssd optimizations [ 416.827365][ T4293] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 416.912167][T26149] loop3: detected capacity change from 0 to 256 [ 417.078091][T26122] loop2: detected capacity change from 0 to 32768 [ 417.099569][T26122] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.9796 (26122) [ 417.113912][T26122] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 417.123295][T26122] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 417.125481][T26122] BTRFS info (device loop2): turning on flush-on-commit [ 417.127297][T26122] BTRFS info (device loop2): turning off barriers [ 417.140811][T26122] BTRFS info (device loop2): doing ref verification [ 417.142639][T26122] BTRFS info (device loop2): force clearing of disk cache [ 417.152450][T26161] loop0: detected capacity change from 0 to 2048 [ 417.158244][T26122] BTRFS info (device loop2): enabling disk space caching [ 417.160243][T26122] BTRFS info (device loop2): turning on sync discard [ 417.173017][T26122] BTRFS info (device loop2): using default commit interval 30s [ 417.179313][T26122] BTRFS info (device loop2): disk space caching is enabled [ 417.315975][T26161] /dev/loop0: Can't open blockdev [ 417.395197][T26179] loop4: detected capacity change from 0 to 4096 [ 417.400856][T26179] NILFS (loop4): invalid segment: Checksum error in segment payload [ 417.402907][T26179] NILFS (loop4): trying rollback from an earlier position [ 417.423659][T26179] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 417.463534][T26179] NILFS (loop4): couldn't remount because the filesystem is in an incomplete recovery state [ 417.593093][T26201] [ 417.593721][T26201] ====================================================== [ 417.595587][T26201] WARNING: possible circular locking dependency detected [ 417.597254][T26201] 6.1.110-syzkaller #0 Not tainted [ 417.598499][T26201] ------------------------------------------------------ [ 417.600443][T26201] syz.4.9810/26201 is trying to acquire lock: [ 417.602080][T26201] ffff800018164108 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_exists+0xb0/0x32c [ 417.604567][T26201] [ 417.604567][T26201] but task is already holding lock: [ 417.606636][T26201] ffff800018167a88 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x258/0x22a8 [ 417.608282][T26122] BTRFS info (device loop2): enabling ssd optimizations [ 417.609300][T26201] [ 417.609300][T26201] which lock already depends on the new lock. [ 417.609300][T26201] [ 417.609308][T26201] [ 417.609308][T26201] the existing dependency chain (in reverse order) is: [ 417.609312][T26201] [ 417.609312][T26201] -> #3 (rfcomm_ioctl_mutex [ 417.611897][T26122] BTRFS info (device loop2): rebuilding free space tree [ 417.613898][T26201] ){+.+.}-{3:3}: [ 417.613915][T26201] __mutex_lock_common+0x190/0x21a0 [ 417.622595][T26201] mutex_lock_nested+0x38/0x44 [ 417.624120][T26201] rfcomm_dev_ioctl+0x258/0x22a8 [ 417.625632][T26201] rfcomm_sock_ioctl+0x98/0xf0 [ 417.626996][T26201] sock_do_ioctl+0x134/0x2dc [ 417.628429][T26201] sock_ioctl+0x4ec/0x858 [ 417.629818][T26201] __arm64_sys_ioctl+0x14c/0x1c8 [ 417.631308][T26201] invoke_syscall+0x98/0x2c0 [ 417.632706][T26201] el0_svc_common+0x138/0x258 [ 417.634084][T26201] do_el0_svc+0x64/0x218 [ 417.635493][T26201] el0_svc+0x58/0x168 [ 417.636750][T26201] el0t_64_sync_handler+0x84/0xf0 [ 417.636775][T26122] BTRFS info (device loop2): disabling free space tree [ 417.638283][T26201] el0t_64_sync+0x18c/0x190 [ 417.638302][T26201] [ 417.638302][T26201] -> #2 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 417.638323][T26201] lock_sock_nested+0x78/0x138 [ 417.638344][T26201] rfcomm_sk_state_change+0x60/0x2c8 [ 417.638355][T26201] __rfcomm_dlc_close+0x234/0x600 [ 417.638368][T26201] rfcomm_dlc_close+0x100/0x194 [ 417.638381][T26201] __rfcomm_sock_close+0x138/0x258 [ 417.638390][T26201] rfcomm_sock_shutdown+0xa8/0x214 [ 417.652931][T26201] rfcomm_sock_release+0x58/0x114 [ 417.654464][T26201] sock_close+0xb8/0x1fc [ 417.655792][T26201] __fput+0x1c8/0x7c8 [ 417.656968][T26201] ____fput+0x20/0x30 [ 417.658270][T26201] task_work_run+0x240/0x2f0 [ 417.659647][T26201] get_signal+0x1394/0x158c [ 417.661023][T26201] do_notify_resume+0x3ac/0x3474 [ 417.662571][T26201] el0_svc+0x9c/0x168 [ 417.663769][T26122] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 417.663814][T26201] el0t_64_sync_handler+0x84/0xf0 [ 417.667845][T26201] el0t_64_sync+0x18c/0x190 [ 417.669139][T26201] [ 417.669139][T26201] -> #1 (&d->lock){+.+.}-{3:3}: [ 417.671062][T26201] __mutex_lock_common+0x190/0x21a0 [ 417.672727][T26201] mutex_lock_nested+0x38/0x44 [ 417.674184][T26201] __rfcomm_dlc_close+0x1f8/0x600 [ 417.675807][T26201] rfcomm_dlc_close+0x100/0x194 [ 417.677307][T26201] __rfcomm_sock_close+0x138/0x258 [ 417.678883][T26201] rfcomm_sock_shutdown+0xa8/0x214 [ 417.680329][T26201] rfcomm_sock_release+0x58/0x114 [ 417.681912][T26201] sock_close+0xb8/0x1fc [ 417.681981][T26122] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 417.683200][T26201] __fput+0x1c8/0x7c8 [ 417.683218][T26201] ____fput+0x20/0x30 [ 417.683227][T26201] task_work_run+0x240/0x2f0 [ 417.689681][T26201] get_signal+0x1394/0x158c [ 417.691020][T26201] do_notify_resume+0x3ac/0x3474 [ 417.692455][T26201] el0_svc+0x9c/0x168 [ 417.693692][T26201] el0t_64_sync_handler+0x84/0xf0 [ 417.695010][T26201] el0t_64_sync+0x18c/0x190 [ 417.696414][T26201] [ 417.696414][T26201] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 417.698490][T26201] __lock_acquire+0x3338/0x7680 [ 417.700013][T26201] lock_acquire+0x26c/0x7cc [ 417.701463][T26201] __mutex_lock_common+0x190/0x21a0 [ 417.703032][T26201] mutex_lock_nested+0x38/0x44 [ 417.704408][T26201] rfcomm_dlc_exists+0xb0/0x32c [ 417.705906][T26201] rfcomm_dev_ioctl+0x888/0x22a8 [ 417.707386][T26201] rfcomm_sock_ioctl+0x98/0xf0 [ 417.708900][T26201] sock_do_ioctl+0x134/0x2dc [ 417.710340][T26201] sock_ioctl+0x4ec/0x858 [ 417.711693][T26201] __arm64_sys_ioctl+0x14c/0x1c8 [ 417.713228][T26201] invoke_syscall+0x98/0x2c0 [ 417.714566][T26201] el0_svc_common+0x138/0x258 [ 417.715992][T26201] do_el0_svc+0x64/0x218 [ 417.717304][T26201] el0_svc+0x58/0x168 [ 417.718568][T26201] el0t_64_sync_handler+0x84/0xf0 [ 417.720023][T26201] el0t_64_sync+0x18c/0x190 [ 417.721287][T26201] [ 417.721287][T26201] other info that might help us debug this: [ 417.721287][T26201] [ 417.724013][T26201] Chain exists of: [ 417.724013][T26201] rfcomm_mutex --> sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_ioctl_mutex [ 417.724013][T26201] [ 417.727931][T26201] Possible unsafe locking scenario: [ 417.727931][T26201] [ 417.729923][T26201] CPU0 CPU1 [ 417.731397][T26201] ---- ---- [ 417.732871][T26201] lock(rfcomm_ioctl_mutex); [ 417.734110][T26201] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 417.736479][T26201] lock(rfcomm_ioctl_mutex); [ 417.738551][T26201] lock(rfcomm_mutex); [ 417.739713][T26201] [ 417.739713][T26201] *** DEADLOCK *** [ 417.739713][T26201] [ 417.741878][T26201] 2 locks held by syz.4.9810/26201: [ 417.743291][T26201] #0: ffff0000efc7c130 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sock_ioctl+0x88/0xf0 [ 417.746463][T26201] #1: ffff800018167a88 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x258/0x22a8 [ 417.749160][T26201] [ 417.749160][T26201] stack backtrace: [ 417.750794][T26201] CPU: 1 PID: 26201 Comm: syz.4.9810 Not tainted 6.1.110-syzkaller #0 [ 417.753097][T26201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 417.755717][T26201] Call trace: [ 417.756563][T26201] dump_backtrace+0x1c8/0x1f4 [ 417.757845][T26201] show_stack+0x2c/0x3c [ 417.758974][T26201] dump_stack_lvl+0x108/0x170 [ 417.760466][T26201] dump_stack+0x1c/0x58 [ 417.761641][T26201] print_circular_bug+0x150/0x1b8 [ 417.763071][T26201] check_noncircular+0x2cc/0x378 [ 417.764455][T26201] __lock_acquire+0x3338/0x7680 [ 417.765814][T26201] lock_acquire+0x26c/0x7cc [ 417.767050][T26201] __mutex_lock_common+0x190/0x21a0 [ 417.768488][T26201] mutex_lock_nested+0x38/0x44 [ 417.769880][T26201] rfcomm_dlc_exists+0xb0/0x32c [ 417.771254][T26201] rfcomm_dev_ioctl+0x888/0x22a8 [ 417.772741][T26201] rfcomm_sock_ioctl+0x98/0xf0 [ 417.773947][T26201] sock_do_ioctl+0x134/0x2dc [ 417.775227][T26201] sock_ioctl+0x4ec/0x858 [ 417.776306][T26201] __arm64_sys_ioctl+0x14c/0x1c8 [ 417.777631][T26201] invoke_syscall+0x98/0x2c0 [ 417.778849][T26201] el0_svc_common+0x138/0x258 [ 417.780437][T26201] do_el0_svc+0x64/0x218 [ 417.781564][T26201] el0_svc+0x58/0x168 [ 417.782544][T26201] el0t_64_sync_handler+0x84/0xf0 [ 417.783881][T26201] el0t_64_sync+0x18c/0x190 [ 417.824435][ T4302] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d