last executing test programs: 906.952009ms ago: executing program 3 (id=2663): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc80, &(0x7f0000000600)=ANY=[], 0x1, 0x284, &(0x7f0000001000)="$eJzs281qE1EYxvEn/bBftolWq62IL7rRzdDGKwilBTGg1Eb8AGFqJxqSJiUTIhGx3bn1OopLd4J4A914BS7cdeOyCzGSmbFN2ooUtNOa/28zbzh5Jmfynglnkdl68HalmPedvFtTT8LUJ61rW0qpR70KJaJjT1CfUrt13RjPfrl87+Gj25lsdm7BbD6zeDNtZmNXPr549e7qp9rI/fdjHwa0mXqy9S39dXNic3Lrx+Lzgm8F38qVmrm2VKnU3KWSZ8sFv+iY3S15ru9Zoex71Y7xfKmyutowt7w8Orxa9Xzf3HLDil7DahWrVRvmPnMLZXMcx0aHhT/JbSwsuJm4Z4F/q1rNuLOSpvaN5DZimRAAAIjV0e7/h9j/Hyvs/7tBa///OLp/O7H/BwAAAAAAAAAAAAAAAAAAAADgJNhuNpPNZjP569gvBU/4NKPXQ5KGJY1IOi1pVNKYpKSklKQzks5KGpd0TtJ5SROSLki6KGmy7VxxXyv2o//d7e/1P5Gg/ycP9393a3twd1BaeVPP1XPhMRzP5FVQSZ6mldT3oJeRsJ6/lZ2btkBqaOesK2v1XG9nfkbJ1oI5KD8T5k2XWrng89fquYFg3e3k00q2FthB+fSB+UFdv9aWd5TU56eqqKTlYE3u5l/PmM3eyUb5gWj+U8H7/neO7Uh1fn9h/xznd+Nh/hDrY09/+jTVF++1Q/IbL4tuqeRVKbqm6I96f1zmQ3Eci5h/mHAkdpse90wAAAAAAAAAAAAAAAAAAIdxFH8njPsaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY62cAAAD//6n8WJU=") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x511000) 829.528623ms ago: executing program 3 (id=2668): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex_waitv(0xffffffffffffffff, 0x26, 0x0, 0x0, 0x1) 744.767008ms ago: executing program 3 (id=2672): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./bus\x00', 0x8, &(0x7f00000005c0)=ANY=[], 0x1, 0x1de, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file3\x00', 0x133042, 0x19) 617.20127ms ago: executing program 3 (id=2675): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f00000000c0)=[{0x1c, '\x00', @st={0x4, [{0x1, @svalue=0x3}, {0x1, @svalue=0x6}, {0x0, @uvalue=0x57f5}, {0x0, @svalue=0xffffffffffffc68f}]}, 0x7}, {0x23, '\x00', @st={0x4, [{0x3, @svalue=0x895}, {0x1, @svalue=0x54}, {0x2, @uvalue=0x9}, {0x3, @svalue=0x9}]}, 0x6}, {0x32, '\x00', @buffer={"ae2ea93f39e9d72df9e1079b55913355f933502c0a9975e7de66b90754f408ec", 0x20}, 0x78}, {0x3, '\x00', @data=0x6, 0x8}]}) 617.09039ms ago: executing program 0 (id=2676): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) 603.839293ms ago: executing program 3 (id=2678): r0 = syz_mount_image$btrfs(&(0x7f00000023c0), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000002400)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) 600.803643ms ago: executing program 0 (id=2679): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f00000004c0)=ANY=[], 0x1, 0x2de, &(0x7f00000007c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) 514.376369ms ago: executing program 0 (id=2680): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000080)={0x40980928, 0x9, "0c234e08a42be8f30c56a68f3a6f3d06f842b27fa0e9199f12d9d579cc1f0800", 0x6c90, 0x8, 0x200, 0x5, 0x10000, 0x1ec, 0x10, 0x9987, [0x9, 0x6b, 0x800, 0x1000]}) 426.703804ms ago: executing program 2 (id=2682): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex_waitv(0xffffffffffffffff, 0x26, 0x0, 0x0, 0x1) 397.44741ms ago: executing program 0 (id=2683): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) 336.88295ms ago: executing program 0 (id=2685): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x200, 0xc8, 0x8, 0x0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "45fc4c047942ac9cbb0a7a964662bb4a141b9165a71f4f27beda0db56152ba8befa052390f681de1ca386583685b82b736c3e6a324bc7ce55ada1003ba7b3dfa"}}}, {{@ipv6={@empty, @empty, [], [], 'veth0_to_hsr\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 336.78095ms ago: executing program 1 (id=2686): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x110, 0x28, 0x1, 0x0, 0x6000, "", [@nested={0x100, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x110}], 0x1, 0x0, 0x0, 0x44010}, 0x0) 336.6928ms ago: executing program 0 (id=2687): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e08800c08"], 0xb) 311.224185ms ago: executing program 1 (id=2688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 311.171485ms ago: executing program 2 (id=2689): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) 281.47911ms ago: executing program 2 (id=2690): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 244.601847ms ago: executing program 1 (id=2691): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0x90, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x1, 0x7, 0x4, 0x6}, {0x30, 0x98, 0x81, 0xfffffff9}, {0xc, 0x90, 0xa, 0x5}, {0xe54, 0x6a, 0x1, 0xfffffff6}, {0xff01, 0x3, 0x81, 0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 221.502611ms ago: executing program 1 (id=2692): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e8000000110001", @ANYBLOB="f680bc81af53947ba9bd6158650c864b06bae9cbf93588d850f5a2183854fff5e103dc6bfe423811ac8ad3221c1c4bc5c4aa3890e61db89ae5b2cb13cbb993ae3129afba2130d546fc"], 0xe8}}, 0x0) 194.406896ms ago: executing program 2 (id=2693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x2, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x24}, @NFQA_CFG_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x4000) 182.893067ms ago: executing program 3 (id=2694): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 182.212948ms ago: executing program 1 (id=2695): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4600, 0xffffffffffffffff) 179.732298ms ago: executing program 4 (id=2696): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, &(0x7f0000000240)) 75.394737ms ago: executing program 4 (id=2697): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x24, @short={0x2, 0x1, 0x3}}, 0x14, &(0x7f0000000240)={&(0x7f0000000180)="aaa434536310c6bc039dd6ed9ac9b61a47ac27232d5d66cdcda01d2b94b0bf74415a61cd7709653ba272644ec843b30e6015ae3ced267947bbf6c53dd871074316d8e5514db46e9c65a4fc1c259a3bd0083216a3a227e9fb6af9267dee499234322daba5691de7afda977a0c1944091a713b3ed816eec0fdafba9ab32935fbcb", 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) 75.297677ms ago: executing program 2 (id=2698): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) connect$ax25(r0, 0x0, 0x0) 75.256597ms ago: executing program 4 (id=2699): r0 = syz_open_dev$video(&(0x7f0000000300), 0x7, 0x400) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0x7, {0x0, 0xe, 0xff, 0x7ffffe}}) 75.222737ms ago: executing program 4 (id=2700): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./bus\x00', 0x8, &(0x7f00000005c0)=ANY=[], 0x1, 0x1de, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file3\x00', 0x133042, 0x19) 58.08132ms ago: executing program 1 (id=2701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}}], {0x14}}, 0x3c}}, 0x4) 35.644073ms ago: executing program 4 (id=2702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="12000000400000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r0, &(0x7f0000000300), 0x0}, 0x20) 19.491247ms ago: executing program 2 (id=2703): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000040)={0xc0, 0x0, &(0x7f0000007d00), {0x80000000, 0x7fa, 0x32314d59, 0x4, 0xffffefff, 0x100000}}) 0s ago: executing program 4 (id=2704): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0041e96a0f5e69f9a7f61c16124cb6d02711dffa581b9544ce66de31fff051ad15c004c6c6a100a59056ebb6bf9f1d33af"], 0x1, 0x156, &(0x7f0000000240)="$eJzs271O8mAYxvGrwAu8+IWiDsbNQRcpH5HETQ+FQCXEokZcIA56BB6DZ+YB6ODmJIYGMJF+JBL7RPv/Lb2bq096d3jae6kAJNaJ8pIsZccnu/niQ8ky3RKAmIwmx/cRgORJv5nuAIAZL6fSk6Tn19uW0tm5+WCc303zVG4+v5d2MpPcyuv/1/niUdqfrrcKvusLs3zJNz/Ym95/WSta1ZqKWteGSpO8PVu/vcAkBABAclgqR+WhF6R01nWdSmD+z8urgXnWy2sReT0wz3l5uXXptsPaBOAjteD+T0fs/0zE/gdgTn8wPG+6rnNNQUFBMStMv5kA/DT7pndl9wfDw26v2XE6zkWtUjluHNWrjZrtTfZ2+HwP4Pf6/Oib7gQAAAAAAAAAAAAAAHzXprZMtwAAAAAgJnH8TmT6GQEAAAAAAAAAAAAAAAAA+Gs+AgAA//8ofCID") syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") kernel console output (not intermixed with test programs): ERROR: status = -30 [ 43.972469][ T5575] (syz.0.452,5575,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 43.976461][ T5575] (syz.0.452,5575,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 43.977798][ T5575] (syz.0.452,5575,0):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 43.979058][ T5575] (syz.0.452,5575,0):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 43.981293][ T5575] (syz.0.452,5575,0):ocfs2_mknod_locked:646 ERROR: status = -30 [ 43.982672][ T5575] (syz.0.452,5575,0):ocfs2_mknod:390 ERROR: status = -30 [ 43.984149][ T5575] (syz.0.452,5575,0):ocfs2_mknod:509 ERROR: status = -30 [ 43.985424][ T5575] (syz.0.452,5575,0):ocfs2_create:683 ERROR: status = -30 [ 44.015901][ T4328] ocfs2: Unmounting device (7,0) on (node local) [ 44.016592][ T5638] IPv6: sit1: Disabled Multicast RS [ 44.062590][ T5644] set_capacity_and_notify: 16 callbacks suppressed [ 44.062600][ T5644] loop2: detected capacity change from 0 to 4096 [ 44.095735][ T5654] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 44.103614][ T5644] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 44.113802][ T5644] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.482: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 46849, max 1(4), depth 0(0) [ 44.122871][ T5644] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.482: Bad quota inode: 3, type: 0 [ 44.126702][ T5644] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 44.162552][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 44.289003][ T5680] cifs: Unknown parameter 'h}# [ 44.289003][ T5680] [bIT&:"A1:ӭ'4,9z -#I]%g' [ 44.314003][ T5683] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 44.528591][ T5667] loop2: detected capacity change from 0 to 65536 [ 44.646160][ T5667] XFS (loop2): Mounting V5 Filesystem [ 44.646937][ T5740] loop1: detected capacity change from 0 to 256 [ 44.688035][ T5667] XFS (loop2): Ending clean mount [ 44.691095][ T5667] XFS (loop2): Quotacheck needed: Please wait. [ 44.714406][ T5667] XFS (loop2): Quotacheck: Done. [ 44.769973][ T4336] XFS (loop2): Unmounting Filesystem [ 44.982950][ T5797] __nla_validate_parse: 11 callbacks suppressed [ 44.982967][ T5797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 45.101329][ T5816] kAFS: unable to lookup cell '' [ 45.206737][ T5835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'. [ 45.260467][ T39] rpcbind: server 127.0.0.1 not responding, timed out [ 45.540101][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 45.615889][ T5906] ieee802154 phy0 wpan0: encryption failed: -90 [ 45.727498][ T5918] netlink: 'syz.3.597': attribute type 12 has an invalid length. [ 45.750452][ T5901] loop4: detected capacity change from 0 to 32768 [ 45.778759][ T5926] syz.3.598 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.780913][ T5910] loop1: detected capacity change from 0 to 32768 [ 45.798070][ T5910] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.593 (5910) [ 45.807304][ T5901] XFS (loop4): Mounting V5 Filesystem [ 45.817413][ T5910] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 45.825473][ T5910] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 45.833547][ T5910] BTRFS info (device loop1): using free space tree [ 45.837180][ T5901] XFS (loop4): Ending clean mount [ 45.864786][ T4337] XFS (loop4): Unmounting Filesystem [ 45.877831][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 45.944262][ T5910] BTRFS info (device loop1): enabling ssd optimizations [ 45.976639][ T4334] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 46.293211][ T6010] loop2: detected capacity change from 0 to 64 [ 46.406429][ T6030] loop1: detected capacity change from 0 to 512 [ 46.433081][ T6036] netlink: 'syz.4.631': attribute type 3 has an invalid length. [ 46.434483][ T6036] netlink: 766 bytes leftover after parsing attributes in process `syz.4.631'. [ 46.437092][ T6030] EXT4-fs (loop1): orphan cleanup on readonly fs [ 46.438449][ T6030] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.630: bad orphan inode 17 [ 46.442345][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.633'. [ 46.444399][ T6030] ext4_test_bit(bit=16, block=4) = 1 [ 46.446871][ T6035] loop2: detected capacity change from 0 to 1024 [ 46.447653][ T6030] is_bad_inode(inode)=0 [ 46.451139][ T6040] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 46.454657][ T6030] NEXT_ORPHAN(inode)=0 [ 46.455431][ T6030] max_ino=32 [ 46.455968][ T6030] i_nlink=1 [ 46.456663][ T6030] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 46.464666][ T6030] Invalid option length (233) for dns_resolver key [ 46.515614][ T4334] EXT4-fs (loop1): unmounting filesystem. [ 46.518041][ T6052] loop0: detected capacity change from 0 to 2048 [ 46.524549][ T6035] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 46.542272][ T6035] EXT4-fs error (device loop2): ext4_xattr_block_find:1828: inode #15: comm syz.2.632: corrupted xattr block 128 [ 46.565916][ T6061] [U] v3f"S/4:XTzWtlW= [ 46.567679][ T6035] EXT4-fs (loop2): Remounting filesystem read-only [ 46.570906][ T6052] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 46.577646][ T6062] xt_hashlimit: invalid interval [ 46.585219][ T6061] [U] J"e:" [ 46.590355][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 46.627232][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 46.676555][ T27] audit: type=1800 audit(46.660:3): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.635" name="/newroot/165/bus" dev="tmpfs" ino=853 res=0 errno=0 [ 46.727321][ T6084] loop3: detected capacity change from 0 to 128 [ 46.762718][ T6089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.649'. [ 46.766978][ T6084] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.767779][ T6089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.649'. [ 46.788288][ T6089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.649'. [ 46.832068][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 46.838448][ T6073] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.643 (6073) [ 46.843723][ T6073] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 46.845508][ T6073] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 46.847070][ T6073] BTRFS info (device loop1): force clearing of disk cache [ 46.848384][ T6073] BTRFS info (device loop1): metadata ratio 0 [ 46.849585][ T6073] BTRFS info (device loop1): using free space tree [ 47.004545][ T6127] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 47.032931][ T6073] BTRFS info (device loop1): enabling ssd optimizations [ 47.034738][ T6073] BTRFS info (device loop1): rebuilding free space tree [ 47.095737][ T6109] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.654 (6109) [ 47.098883][ T6140] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 47.102385][ T6140] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 47.104087][ T6140] EXT4-fs (loop3): orphan cleanup on readonly fs [ 47.106031][ T6109] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 47.107732][ T6109] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 47.109277][ T6109] BTRFS info (device loop4): turning off barriers [ 47.116868][ T6140] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #13: comm syz.3.661: iget: bad i_size value: 12154761577498 [ 47.126255][ T6140] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.661: couldn't read orphan inode 13 (err -117) [ 47.131293][ T4334] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 47.151012][ T6109] BTRFS info (device loop4): enabling auto defrag [ 47.152260][ T6109] BTRFS info (device loop4): force zlib compression, level 3 [ 47.153496][ T6109] BTRFS info (device loop4): enabling ssd optimizations [ 47.154603][ T6109] BTRFS info (device loop4): using spread ssd allocation scheme [ 47.155833][ T6109] BTRFS info (device loop4): using free space tree [ 47.157293][ T6140] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 47.165339][ T6140] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.661: dx entry: limit 65535 != root limit 120 [ 47.167464][ T6140] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.661: Corrupt directory, running e2fsck is recommended [ 47.266060][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 47.406719][ T6151] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 47.409042][ T6151] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 47.438316][ T6151] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 47.455312][ T6109] BTRFS info (device loop4: state M): not using spread ssd allocation scheme [ 47.457366][ T6109] BTRFS info (device loop4: state M): using spread ssd allocation scheme [ 47.463181][ T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 47.464404][ T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 47.505239][ T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 40ms [ 47.512476][ T7] gfs2: fsid=syz:syz.0: jid=0: Done [ 47.522624][ T6151] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 47.544240][ T4337] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 47.554695][ T6139] XFS (loop2): Mounting V5 Filesystem [ 47.632505][ T6139] XFS (loop2): Ending clean mount [ 47.650348][ T6139] XFS (loop2): Quotacheck needed: Please wait. [ 47.674344][ T4966] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x160/0x234, xfs_agf block 0x1 [ 47.676406][ T4966] XFS (loop2): Unmount and run xfs_repair [ 47.677366][ T4966] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 47.678660][ T4966] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 47.708366][ T4966] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 47.713817][ T4966] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 47.715323][ T4966] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 47.716762][ T4966] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 47.718253][ T4966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 47.744462][ T4320] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop4 scanned by udevd (4320) [ 47.752624][ T4966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 47.754291][ T4966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 47.756477][ T235] XFS (loop2): metadata I/O error in "xfs_read_agf+0x254/0x640" at daddr 0x1 len 1 error 74 [ 47.757172][ T6197] ERROR: (device loop3): diAllocAG: nfreeinos = 0, but iag on freelist [ 47.757172][ T6197] [ 47.759689][ T6139] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 47.767862][ T6197] ERROR: (device loop3): remounting filesystem as read-only [ 47.769151][ T6197] ialloc: diAlloc returned -5! [ 47.843007][ T4336] XFS (loop2): Unmounting Filesystem [ 47.872481][ T6151] syz.0.665: attempt to access beyond end of device [ 47.872481][ T6151] loop0: rw=12288, sector=432345564227567616, nr_sectors = 2 limit=32768 [ 48.077341][ T6254] random: crng reseeded on system resumption [ 48.243153][ T6272] netlink: 48 bytes leftover after parsing attributes in process `syz.3.695'. [ 48.457754][ T6310] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 48.504931][ T6324] netlink: 'syz.2.713': attribute type 13 has an invalid length. [ 48.567877][ T6336] xt_TCPMSS: Only works on TCP SYN packets [ 48.728360][ T6396] ieee802154 phy0 wpan0: encryption failed: -22 [ 48.779024][ T6402] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 48.843526][ T6414] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 48.856050][ T6414] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 48.857792][ T6414] EXT4-fs (loop4): orphan cleanup on readonly fs [ 48.858945][ T6414] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.742: bad orphan inode 3 [ 48.875989][ T6414] EXT4-fs (loop4): Remounting filesystem read-only [ 48.877271][ T6414] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 48.881504][ T6423] netlink: 'syz.1.744': attribute type 1 has an invalid length. [ 48.912994][ T6414] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.742: dx entry: limit 0 != root limit 125 [ 48.915089][ T6414] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.742: Corrupt directory, running e2fsck is recommended [ 48.977620][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 49.042114][ T6442] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 49.147455][ T6454] xt_CT: No such helper "snmp_trap" [ 49.158650][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.172277][ T6461] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 49.188420][ T6467] set_capacity_and_notify: 10 callbacks suppressed [ 49.188430][ T6467] loop3: detected capacity change from 0 to 256 [ 49.328068][ T6494] loop0: detected capacity change from 0 to 512 [ 49.342199][ T6494] EXT2-fs (loop0): (no)acl options not supported [ 49.350868][ T6495] overlayfs: missing 'workdir' [ 49.356435][ T6494] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 49.367041][ T6494] EXT2-fs (loop0): error: ext2_check_page: bad entry in directory #2: : directory entry across blocks - offset=0, inode=2, rec_len=46348, name_len=17 [ 49.381273][ T6500] loop1: detected capacity change from 0 to 1024 [ 49.432671][ T6500] hfsplus: invalid file type 0174377 for inode 21 [ 49.571907][ T6539] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 49.577012][ T6539] xt_HMARK: spi-set and port-set can't be combined [ 49.621625][ T6550] netlink: 'syz.4.796': attribute type 15 has an invalid length. [ 49.632052][ T6550] netlink: 'syz.4.796': attribute type 7 has an invalid length. [ 49.634167][ T6552] dlm: non-version read from control device 4096 [ 49.688074][ T6560] loop0: detected capacity change from 0 to 1024 [ 49.709240][ T6560] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 49.712138][ T6560] EXT4-fs (loop0): orphan cleanup on readonly fs [ 49.716438][ T6560] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 49.718335][ T6560] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 49.755491][ T6560] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.800: Failed to acquire dquot type 0 [ 49.768293][ T6560] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 49.778830][ T6560] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 49.785907][ T6557] loop2: detected capacity change from 0 to 32768 [ 49.791044][ T6560] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.800: Failed to acquire dquot type 0 [ 49.798800][ T6557] ERROR: (device loop2): diAllocAG: nfreeinos = 0, but iag on freelist [ 49.798800][ T6557] [ 49.804438][ T6560] EXT4-fs error (device loop0): ext4_free_blocks:6220: comm syz.0.800: Freeing blocks not in datazone - block = 0, count = 4096 [ 49.832320][ T6557] ERROR: (device loop2): remounting filesystem as read-only [ 49.834285][ T6560] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 49.836340][ T6560] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 49.837060][ T6557] ialloc: diAlloc returned -5! [ 49.838727][ T6560] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.800: Failed to acquire dquot type 0 [ 49.843988][ T6560] EXT4-fs (loop0): 1 orphan inode deleted [ 49.845888][ T6560] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 49.855244][ T6582] IPv6: NLM_F_REPLACE set, but no existing node found! [ 49.881850][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 50.035919][ T6604] __nla_validate_parse: 7 callbacks suppressed [ 50.035931][ T6604] netlink: 256 bytes leftover after parsing attributes in process `syz.4.818'. [ 50.048186][ T6580] loop3: detected capacity change from 0 to 32768 [ 50.051953][ T6607] netlink: 148 bytes leftover after parsing attributes in process `syz.1.819'. [ 50.128566][ T6580] XFS (loop3): Mounting V5 Filesystem [ 50.137854][ T6580] XFS (loop3): Ending clean mount [ 50.150274][ T6607] netlink: 148 bytes leftover after parsing attributes in process `syz.1.819'. [ 50.170357][ T4332] XFS (loop3): Unmounting Filesystem [ 50.170563][ T6626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.824'. [ 50.173317][ T6626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.824'. [ 50.213765][ T6603] loop2: detected capacity change from 0 to 32768 [ 50.276827][ T6603] XFS (loop2): Mounting V5 Filesystem [ 50.326794][ T6603] XFS (loop2): Ending clean mount [ 50.361760][ T4336] XFS (loop2): Unmounting Filesystem [ 50.492485][ T6672] loop1: detected capacity change from 0 to 2048 [ 50.498209][ T6672] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 50.524242][ T6683] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.552563][ T6672] NILFS (loop1): unrecognized mount option " yF̳o#bQc4uE̮" [ 50.677307][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 50.759545][ T6710] netlink: 32 bytes leftover after parsing attributes in process `syz.4.854'. [ 50.795186][ T6710] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.798344][ T6710] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 50.806465][ T6712] loop2: detected capacity change from 0 to 4096 [ 50.832487][ T6712] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 50.927185][ T6702] loop3: detected capacity change from 0 to 40427 [ 50.953444][ T6702] F2FS-fs (loop3): Wrong segment_count / block_count (64 > 16384) [ 50.954912][ T6702] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 50.961157][ T6722] hfsplus: invalid file type 0177755 for inode 17 [ 51.023261][ T6702] F2FS-fs (loop3): Found nat_bits in checkpoint [ 51.058043][ T6702] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 51.059307][ T6702] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 51.217863][ T6761] No such timeout policy "syz0" [ 51.246383][ T6763] netlink: 'syz.1.877': attribute type 21 has an invalid length. [ 51.247907][ T6763] netlink: 132 bytes leftover after parsing attributes in process `syz.1.877'. [ 51.313141][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 51.409296][ T6789] netlink: 'syz.1.887': attribute type 1 has an invalid length. [ 51.454434][ T6798] netlink: 'syz.1.890': attribute type 2 has an invalid length. [ 51.467576][ T6684] F2FS-fs (loop0): Found nat_bits in checkpoint [ 51.487472][ T6684] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 51.496512][ T6795] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 51.498518][ T6795] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.500384][ T6684] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 51.504809][ T6684] F2FS-fs (loop0): sanity_check_inode: inode (ino=7) has corrupted i_xattr_nid: 1, run fsck to fix. [ 51.509517][ T6795] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 51.526678][ T6795] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 51.528595][ T6795] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.889: Failed to acquire dquot type 0 [ 51.567796][ T6795] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 51.577459][ T6795] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.889: Failed to acquire dquot type 0 [ 51.592624][ T6795] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.889: Freeing blocks not in datazone - block = 0, count = 4096 [ 51.605150][ T6795] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.889: Failed to acquire dquot type 0 [ 51.615443][ T6795] EXT4-fs (loop2): 1 orphan inode deleted [ 51.625585][ T6795] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.665208][ T6794] XFS (loop4): Mounting V5 Filesystem [ 51.716843][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 51.720096][ T6794] XFS (loop4): Ending clean mount [ 51.841126][ T4337] XFS (loop4): Unmounting Filesystem [ 51.943962][ T6808] jfs_strtoUCS: char2uni returned -22. [ 51.945196][ T6808] charset = cp936, char = 0xd4 [ 51.946411][ T6808] jfs_strtoUCS: char2uni returned -22. [ 51.947402][ T6808] charset = cp936, char = 0xd4 [ 51.965162][ T6833] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 51.984396][ T6835] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 52.019492][ T6833] NILFS (loop2): unrecognized mount option " yF̳o#bQc4uE̮" [ 52.179574][ T6860] netlink: 264 bytes leftover after parsing attributes in process `syz.2.907'. [ 52.181299][ T6861] UBIFS error (pid: 6861): cannot open "ubi0:testvol", error -19 [ 52.418497][ T6897] ipt_CLUSTERIP: Please specify an interface name [ 52.423182][ T6819] F2FS-fs (loop1): invalid crc value [ 52.464476][ T6819] F2FS-fs (loop1): Found nat_bits in checkpoint [ 52.503150][ T6819] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 52.537540][ T6920] libceph: Failed to parse secret: -22 [ 52.671309][ T6937] tmpfs: Bad value for 'mpol' [ 52.863954][ T6927] XFS (loop0): Mounting V5 Filesystem [ 52.908115][ T6927] XFS (loop0): Ending clean mount [ 52.944740][ T4328] XFS (loop0): Unmounting Filesystem [ 52.992004][ T6980] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.996392][ T6980] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.998294][ T6980] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.020222][ T6980] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 53.021870][ T6980] System zones: 0-1, 3-36 [ 53.024948][ T6980] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 53.062184][ T4334] EXT4-fs (loop1): unmounting filesystem. [ 53.067692][ T6994] libceph: secret too big 31 [ 53.120869][ T7003] erofs: (device loop1): mounted with root inode @ nid 36. [ 53.135250][ T7003] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 53.138698][ T7003] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 53.141510][ T7003] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 53.143070][ T7003] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 53.144734][ T7003] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 53.191813][ T7015] netlink: 'syz.1.969': attribute type 1 has an invalid length. [ 53.300938][ T7035] overlayfs: missing 'lowerdir' [ 53.303953][ T7033] sctp: [Deprecated]: syz.3.977 (pid 7033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 53.303953][ T7033] Use struct sctp_sack_info instead [ 53.499866][ T7069] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 53.514941][ T7069] EXT4-fs error (device loop4): ext4_empty_dir:3168: inode #11: block 449: comm syz.4.994: Attempting to read directory block (449) that is past i_size (460032) [ 53.544306][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 53.583142][ T7085] sock: sock_timestamping_bind_phc: sock not bind to device [ 53.594663][ T7086] cgroup: Unexpected value for 'cpuset_v2_mode' [ 53.713733][ T7104] SQUASHFS error: zlib decompression failed, data probably corrupt [ 53.718022][ T7104] SQUASHFS error: Failed to read block 0x9b: -5 [ 53.721979][ T7104] SQUASHFS error: Unable to read metadata cache entry [99] [ 53.725607][ T7104] SQUASHFS error: Unable to read inode 0x127 [ 53.757642][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 53.757654][ T27] audit: type=1326 audit(53.740:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.4.1010" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff91779368 code=0x0 [ 54.004822][ T7148] FAT-fs (loop3): Directory bread(block 64) failed [ 54.006253][ T7148] FAT-fs (loop3): Directory bread(block 65) failed [ 54.007333][ T7148] FAT-fs (loop3): Directory bread(block 66) failed [ 54.008368][ T7148] FAT-fs (loop3): Directory bread(block 67) failed [ 54.009787][ T7148] FAT-fs (loop3): Directory bread(block 68) failed [ 54.010943][ T7148] FAT-fs (loop3): Directory bread(block 69) failed [ 54.012975][ T7148] FAT-fs (loop3): Directory bread(block 70) failed [ 54.014166][ T7148] FAT-fs (loop3): Directory bread(block 71) failed [ 54.015437][ T7148] FAT-fs (loop3): Directory bread(block 72) failed [ 54.016567][ T7148] FAT-fs (loop3): Directory bread(block 73) failed [ 54.137770][ T7163] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 54.294568][ T7155] set_capacity_and_notify: 17 callbacks suppressed [ 54.294578][ T7155] loop4: detected capacity change from 0 to 40427 [ 54.316438][ T7155] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 54.317851][ T7155] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 54.329772][ T7155] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 54.349315][ T7155] F2FS-fs (loop4): Found nat_bits in checkpoint [ 54.357504][ T7191] loop3: detected capacity change from 0 to 512 [ 54.378182][ T7191] EXT2-fs (loop3): (no)user_xattr optionsnot supported [ 54.379968][ T7191] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 54.384511][ T7155] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 54.385684][ T7155] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 54.406290][ T7191] EXT2-fs (loop3): error: ext2_check_page: size of directory #12 is not a multiple of chunk size [ 54.457496][ T7099] loop2: detected capacity change from 0 to 131072 [ 54.480799][ T7099] F2FS-fs (loop2): invalid crc value [ 54.505523][ T7099] F2FS-fs (loop2): Found nat_bits in checkpoint [ 54.538615][ T7208] loop1: detected capacity change from 0 to 4096 [ 54.540798][ T7099] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 54.556298][ T7208] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 54.605110][ T7182] loop0: detected capacity change from 0 to 32768 [ 54.618886][ T7182] XFS (loop0): Mounting V5 Filesystem [ 54.632649][ T7182] XFS (loop0): Ending clean mount [ 54.741500][ T4328] XFS (loop0): Unmounting Filesystem [ 54.766027][ T7236] loop3: detected capacity change from 0 to 256 [ 54.780488][ T7236] exfat: Deprecated parameter 'utf8' [ 54.781613][ T7236] exfat: Deprecated parameter 'namecase' [ 54.782637][ T7236] exfat: Deprecated parameter 'namecase' [ 54.796035][ T7236] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 54.926000][ T7234] loop1: detected capacity change from 0 to 32768 [ 54.959265][ T7234] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 55.129021][ T4320] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 55.170719][ T7254] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 55.226787][ T27] audit: type=1400 audit(55.210:5): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=7271 comm="syz.2.1060" [ 55.290293][ T7280] netlink: 'syz.3.1063': attribute type 4 has an invalid length. [ 55.366158][ T7292] loop0: detected capacity change from 0 to 256 [ 55.380201][ T7292] exfat: Deprecated parameter 'utf8' [ 55.387959][ T7292] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 55.538242][ T7312] loop2: detected capacity change from 0 to 4096 [ 55.552421][ T7312] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 55.557799][ T7312] ntfs3: loop2: mft corrupted [ 55.558889][ T7312] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 55.563608][ T7312] ntfs3: loop2: Failed to load $LogFile. [ 55.714213][ T7343] __nla_validate_parse: 4 callbacks suppressed [ 55.714226][ T7343] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1091'. [ 55.727430][ T7343] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1091'. [ 55.735647][ T7343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1091'. [ 55.736077][ T7343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1091'. [ 55.935579][ T7383] loop0: detected capacity change from 0 to 1024 [ 56.005796][ T7383] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 56.023606][ T7403] netlink: 'syz.4.1119': attribute type 3 has an invalid length. [ 56.052198][ T7383] EXT4-fs error (device loop0): ext4_empty_dir:3168: inode #11: block 449: comm syz.0.1109: Attempting to read directory block (449) that is past i_size (460032) [ 56.095580][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 56.117984][ T7405] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 56.126500][ T7419] CIFS: Attempting to mount \\127.0.0.1\share [ 56.128224][ T7419] CIFS: VFS: No username specified [ 56.186032][ T7405] ntfs3: loop4: failed to convert "c46c" to euc-jp [ 56.226682][ T7430] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 56.232645][ T7435] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 56.240425][ T7435] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (100), value rounded to 0 ms [ 56.244409][ T7430] hpfs: filesystem error: improperly stopped [ 56.245570][ T7430] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 56.246870][ T7430] hpfs: You really don't want any checks? You are crazy... [ 56.248104][ T7430] hpfs: Code page index out of array [ 56.248988][ T7430] hpfs: code page support is disabled [ 56.255634][ T7430] hpfs: hpfs_map_4sectors(): unaligned read [ 56.257805][ T7430] hpfs: hpfs_map_4sectors(): unaligned read [ 56.259064][ T7430] hpfs: filesystem error: unable to find root dir [ 56.315239][ T7482] lo speed is unknown, defaulting to 1000 [ 56.316395][ T7482] lo speed is unknown, defaulting to 1000 [ 56.319154][ T7482] lo speed is unknown, defaulting to 1000 [ 56.324264][ T7482] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 56.337116][ T7482] lo speed is unknown, defaulting to 1000 [ 56.338978][ T7482] lo speed is unknown, defaulting to 1000 [ 56.341290][ T7482] lo speed is unknown, defaulting to 1000 [ 56.342635][ T7482] lo speed is unknown, defaulting to 1000 [ 56.346376][ T7482] lo speed is unknown, defaulting to 1000 [ 56.669684][ T7539] exfat: Deprecated parameter 'utf8' [ 56.683433][ T7539] exfat: Deprecated parameter 'namecase' [ 56.686645][ T7539] exfat: Deprecated parameter 'namecase' [ 56.712735][ T7536] hfsplus: keylen 65060 too large [ 56.713843][ T7536] hfsplus: xattr searching failed [ 56.738522][ T7539] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 56.880813][ T7603] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 56.888847][ T7603] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 56.983664][ T7624] exfat: Deprecated parameter 'utf8' [ 56.990519][ T7624] exfat: Deprecated parameter 'namecase' [ 56.991628][ T7624] exfat: Deprecated parameter 'namecase' [ 57.007914][ T7624] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 57.045945][ T7629] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 57.077196][ T7629] ntfs3: loop0: failed to convert "c46c" to euc-jp [ 57.341896][ T7672] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.1197 (7672) [ 57.356186][ T7679] exfat: Deprecated parameter 'utf8' [ 57.357190][ T7679] exfat: Deprecated parameter 'namecase' [ 57.358131][ T7679] exfat: Deprecated parameter 'namecase' [ 57.365177][ T7672] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 57.367056][ T7672] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 57.368472][ T7672] BTRFS info (device loop3): using free space tree [ 57.382124][ T7679] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 57.539566][ T7672] BTRFS info (device loop3): enabling ssd optimizations [ 57.618102][ T4332] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 57.737468][ T7723] JBD2: Ignoring recovery information on journal [ 57.747037][ T7723] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 57.780390][ T4328] ocfs2: Unmounting device (7,0) on (node local) [ 57.813306][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'. [ 57.814943][ T7752] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1219'. [ 57.965146][ T7798] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8803e018, mo2=0000] [ 57.998531][ T7798] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.1224: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.020507][ T7798] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 58.024996][ T7812] netlink: 'syz.0.1226': attribute type 2 has an invalid length. [ 58.026402][ T7798] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.1224: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.033932][ T7812] netlink: 'syz.0.1226': attribute type 1 has an invalid length. [ 58.036619][ T7798] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 58.044565][ T7798] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1224: Failed to acquire dquot type 0 [ 58.053750][ T7798] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 58.056674][ T7798] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.1224: mark_inode_dirty error [ 58.061517][ T7798] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 58.066748][ T7798] EXT4-fs (loop2): 1 orphan inode deleted [ 58.067901][ T7798] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 58.074071][ T39] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.077770][ T7750] F2FS-fs (loop1): Wrong segment_count / block_count (64 > 16384) [ 58.078493][ T39] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 58.079231][ T7750] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 58.084004][ T39] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 0 [ 58.098938][ T7798] EXT4-fs (loop2): unmounting filesystem. [ 58.102758][ T7798] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.1224: Invalid inode table block 1 in block_group 0 [ 58.115364][ T7750] F2FS-fs (loop1): Found nat_bits in checkpoint [ 58.124804][ T7798] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 58.138167][ T7798] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz.2.1224: mark_inode_dirty error [ 58.147586][ T7750] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 58.149875][ T7750] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 58.407572][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1249'. [ 58.412056][ T7864] IPv6: sit1: Disabled Multicast RS [ 58.472019][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1253'. [ 58.511308][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 58.556666][ T7896] misc userio: Invalid payload size [ 58.569117][ T7900] libceph: secret too big 31 [ 58.803775][ T7935] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 58.864659][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1280'. [ 58.952442][ T7956] EXT4-fs: Ignoring removed nobh option [ 58.955640][ T7956] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.957229][ T7956] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 58.988062][ T7956] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #3: comm syz.4.1285: corrupted inode contents [ 59.003730][ T7956] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #3: comm syz.4.1285: mark_inode_dirty error [ 59.017978][ T7956] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #3: comm syz.4.1285: corrupted inode contents [ 59.025339][ T7956] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.1285: mark_inode_dirty error [ 59.037820][ T7956] Quota error (device loop4): write_blk: dquota write failed [ 59.048603][ T7956] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 59.059913][ T7956] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.1285: Failed to acquire dquot type 0 [ 59.083423][ T7956] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.1285: corrupted inode contents [ 59.092066][ T7956] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #16: comm syz.4.1285: mark_inode_dirty error [ 59.095670][ T7956] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.1285: corrupted inode contents [ 59.102277][ T7956] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.1285: mark_inode_dirty error [ 59.106713][ T7956] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.1285: corrupted inode contents [ 59.118925][ T7956] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 59.134142][ T7956] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.1285: corrupted inode contents [ 59.143494][ T7956] EXT4-fs error (device loop4): ext4_truncate:4325: inode #16: comm syz.4.1285: mark_inode_dirty error [ 59.151916][ T7956] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 59.159299][ T7956] EXT4-fs (loop4): 1 truncate cleaned up [ 59.163163][ T7956] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 59.207843][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 59.380699][ T8012] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 59.507644][ T7933] set_capacity_and_notify: 18 callbacks suppressed [ 59.507653][ T7933] loop3: detected capacity change from 0 to 131072 [ 59.542398][ T8039] Unknown options in mask b7f2 [ 59.572275][ T7933] F2FS-fs (loop3): Found nat_bits in checkpoint [ 59.606683][ T7933] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 59.632984][ T7933] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 59.636027][ T7933] F2FS-fs (loop3): sanity_check_inode: inode (ino=7) has corrupted i_xattr_nid: 1, run fsck to fix. [ 59.722836][ T8060] qrtr: Invalid version 0 [ 59.955142][ T8076] loop0: detected capacity change from 0 to 4096 [ 60.250729][ T8076] loop0: detected capacity change from 0 to 40427 [ 60.262703][ T8076] F2FS-fs (loop0): Unrecognized mount option "data_err=ignore" or missing value [ 60.338680][ T8109] loop1: detected capacity change from 0 to 1024 [ 60.496646][ T8125] loop4: detected capacity change from 0 to 1024 [ 60.508964][ T8125] hfsplus: unknown catalog record type 65281 [ 60.700274][ T8161] netlink: 'syz.0.1364': attribute type 1 has an invalid length. [ 60.702116][ T8161] NCSI netlink: No device for ifindex 0 [ 60.788039][ T8179] loop0: detected capacity change from 0 to 8 [ 60.794426][ T8181] netlink: 'syz.2.1375': attribute type 16 has an invalid length. [ 60.795843][ T8181] netlink: 'syz.2.1375': attribute type 3 has an invalid length. [ 60.797110][ T8181] __nla_validate_parse: 5 callbacks suppressed [ 60.797123][ T8181] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1375'. [ 60.812800][ T8179] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 60.832379][ T8188] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 60.871163][ T8192] cgroup: name respecified [ 61.002252][ T8222] xt_TCPMSS: Only works on TCP SYN packets [ 61.163400][ T8252] loop2: detected capacity change from 0 to 64 [ 61.226669][ T8262] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 61.245197][ T8262] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 61.296870][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1418'. [ 61.298475][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1418'. [ 61.310032][ T8274] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1418'. [ 61.346360][ T8285] loop4: detected capacity change from 0 to 256 [ 61.351649][ T8288] netlink: 'syz.1.1426': attribute type 1 has an invalid length. [ 61.591452][ T8336] binder: 8335:8336 ioctl 400c620e 0 returned -14 [ 61.745112][ T8329] loop1: detected capacity change from 0 to 32768 [ 61.759511][ T8329] JBD2: Ignoring recovery information on journal [ 61.795868][ T8368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1460'. [ 61.799111][ T8368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1460'. [ 61.804436][ T8329] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 61.877091][ T4334] ocfs2: Unmounting device (7,1) on (node local) [ 61.913152][ T8384] X.509: signatureAlgorithm (15) differs from tbsCertificate.signature (16) [ 61.969060][ T8394] syz.0.1471: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 61.972243][ T8394] CPU: 0 PID: 8394 Comm: syz.0.1471 Not tainted syzkaller #0 [ 61.973578][ T8394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.975374][ T8394] Call trace: [ 61.975999][ T8394] dump_backtrace+0x1c4/0x1f0 [ 61.976998][ T8394] show_stack+0x2c/0x3c [ 61.977856][ T8394] __dump_stack+0x30/0x40 [ 61.978646][ T8394] dump_stack_lvl+0xf4/0x15c [ 61.979478][ T8394] dump_stack+0x1c/0x5c [ 61.980249][ T8394] warn_alloc+0x214/0x324 [ 61.981088][ T8394] __vmalloc_node_range+0x118/0xe70 [ 61.982095][ T8394] vmalloc+0x9c/0xd4 [ 61.982812][ T8394] dvb_dmxdev_set_buffer_size+0xc8/0x1b0 [ 61.983872][ T8394] dvb_demux_do_ioctl+0x3fc/0x4d8 [ 61.984796][ T8394] dvb_usercopy+0x248/0x45c [ 61.985636][ T8394] dvb_demux_ioctl+0x3c/0x54 [ 61.986494][ T8394] __arm64_sys_ioctl+0x14c/0x1c8 [ 61.987394][ T8394] invoke_syscall+0x98/0x290 [ 61.988347][ T8394] el0_svc_common+0x13c/0x258 [ 61.989265][ T8394] do_el0_svc+0x5c/0x134 [ 61.990117][ T8394] el0_svc+0x58/0x128 [ 61.990914][ T8394] el0t_64_sync_handler+0x84/0xf0 [ 61.991880][ T8394] el0t_64_sync+0x18c/0x190 [ 61.994679][ T8394] Mem-Info: [ 61.995361][ T8394] active_anon:4917 inactive_anon:0 isolated_anon:0 [ 61.995361][ T8394] active_file:5082 inactive_file:2156 isolated_file:0 [ 61.995361][ T8394] unevictable:768 dirty:206 writeback:0 [ 61.995361][ T8394] slab_reclaimable:19910 slab_unreclaimable:92368 [ 61.995361][ T8394] mapped:29174 shmem:954 pagetables:612 [ 61.995361][ T8394] sec_pagetables:0 bounce:0 [ 61.995361][ T8394] kernel_misc_reclaimable:0 [ 61.995361][ T8394] free:1446108 free_pcp:5141 free_cma:7360 [ 62.004201][ T8394] Node 0 active_anon:19668kB inactive_anon:0kB active_file:20328kB inactive_file:8624kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:116696kB dirty:824kB writeback:0kB shmem:3816kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:8736kB pagetables:2448kB sec_pagetables:0kB all_unreclaimable? no [ 62.012745][ T8394] Node 0 DMA free:3076864kB boost:0kB min:20664kB low:25828kB high:30992kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 62.018070][ T8394] lowmem_reserve[]: 0 0 3550 3550 3550 [ 62.019121][ T8394] Node 0 Normal free:2707568kB boost:0kB min:24388kB low:30484kB high:36580kB reserved_highatomic:0KB active_anon:19668kB inactive_anon:0kB active_file:20328kB inactive_file:8624kB unevictable:3072kB writepending:824kB present:5242880kB managed:3639600kB mlocked:0kB bounce:0kB free_pcp:20928kB local_pcp:6964kB free_cma:0kB [ 62.025082][ T8394] lowmem_reserve[]: 0 0 0 0 0 [ 62.025903][ T8394] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 62.028682][ T8394] Node 0 Normal: 539*4kB (UME) 714*8kB (UM) 256*16kB (UME) 21*32kB (UM) 53*64kB (UME) 94*128kB (ME) 65*256kB (UME) 31*512kB (ME) 23*1024kB (M) 11*2048kB (UM) 635*4096kB (UM) = 2707612kB [ 62.032894][ T8394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 62.036304][ T8394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 62.038082][ T8394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 62.039235][ T8402] loop4: detected capacity change from 0 to 512 [ 62.042333][ T8394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 62.048336][ T8394] 8199 total pagecache pages [ 62.049103][ T8394] 0 pages in swap cache [ 62.051553][ T8394] Free swap = 124740kB [ 62.052372][ T8394] Total swap = 124996kB [ 62.053208][ T8394] 2097152 pages RAM [ 62.053866][ T8394] 0 pages HighMem/MovableOnly [ 62.054797][ T8394] 417204 pages reserved [ 62.055427][ T8394] 8192 pages cma reserved [ 62.056267][ T8394] 0 pages hwpoisoned [ 62.062367][ T8402] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.1475: inode has both inline data and extents flags [ 62.065134][ T8402] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.1475: couldn't read orphan inode 15 (err -117) [ 62.067174][ T8402] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 62.075344][ T8402] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1475: inode #255: comm syz.4.1475: iget: illegal inode # [ 62.079701][ T8402] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1475: error while reading EA inode 255 err=-117 [ 62.082702][ T8402] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2805: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 62.098835][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 62.132756][ T8415] netlink: 'syz.4.1478': attribute type 21 has an invalid length. [ 62.154752][ T8417] netlink: 1000 bytes leftover after parsing attributes in process `syz.0.1480'. [ 62.156329][ T8417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1480'. [ 62.157829][ T8417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1480'. [ 62.159519][ T8417] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1480'. [ 62.159681][ T4343] Bluetooth: hci1: command 0x2016 tx timeout [ 62.378338][ T8460] netlink: 'syz.0.1497': attribute type 1 has an invalid length. [ 62.458560][ T8471] netlink: 'syz.0.1501': attribute type 28 has an invalid length. [ 62.487266][ T8475] autofs4:pid:8475:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.1280), cmd(0xc0189375) [ 62.492652][ T8475] autofs4:pid:8475:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 62.595459][ T8493] netlink: 'syz.2.1511': attribute type 21 has an invalid length. [ 62.632030][ T8495] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 62.723219][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 62.765777][ T4332] cgroup: fork rejected by pids controller in /syz3 [ 62.771360][ T8510] EXT4-fs: Ignoring removed oldalloc option [ 62.778882][ T8510] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.810371][ T8510] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 62.817337][ T8510] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1517: inode #327680: comm syz.1.1517: iget: illegal inode # [ 62.822766][ T8510] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1517: error while reading EA inode 327680 err=-117 [ 62.858768][ T4334] EXT4-fs (loop1): unmounting filesystem. [ 62.901366][ T8533] netlink: 'syz.0.1523': attribute type 21 has an invalid length. [ 62.941250][ T8537] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 62.942572][ T8537] vhci_hcd: invalid port number 255 [ 62.947653][ T8537] vhci_hcd: invalid port number 255 [ 63.347581][ T8576] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 63.349197][ T8576] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 63.364667][ T8576] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 63.367039][ T4966] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 63.368290][ T4966] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 63.399280][ T4966] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 30ms [ 63.404576][ T4966] gfs2: fsid=syz:syz.0: jid=0: Done [ 63.405500][ T8576] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 63.454435][ T8616] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 63.456433][ T8616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 63.546608][ T4391] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.582980][ T8625] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 63.634953][ T4331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.637722][ T4331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.639904][ T4331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.641735][ T4331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.644229][ T4331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.645778][ T4331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.662530][ T4391] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.700306][ T8633] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.704472][ T8627] lo speed is unknown, defaulting to 1000 [ 63.707304][ T8642] bond0: Error: CAN devices cannot be enslaved [ 63.722897][ T8633] EXT4-fs error (device loop2): ext4_empty_dir:3168: inode #11: block 623: comm syz.2.1565: Attempting to read directory block (623) that is past i_size (638464) [ 63.779709][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 63.801697][ T4391] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.840118][ T4331] Bluetooth: hci4: command 0x0409 tx timeout [ 63.903246][ T4391] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.953342][ T8627] chnl_net:caif_netlink_parms(): no params data found [ 64.032013][ T8627] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.033450][ T8627] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.035026][ T8627] device bridge_slave_0 entered promiscuous mode [ 64.037187][ T8627] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.040924][ T8627] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.042639][ T8627] device bridge_slave_1 entered promiscuous mode [ 64.096921][ T8627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.109034][ T8809] exfat: Deprecated parameter 'namecase' [ 64.109340][ T8627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.113446][ T8809] exfat: Deprecated parameter 'namecase' [ 64.135885][ T8809] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 64.137610][ T8627] team0: Port device team_slave_0 added [ 64.161729][ T8627] team0: Port device team_slave_1 added [ 64.179612][ T8809] syz.0.1583: attempt to access beyond end of device [ 64.179612][ T8809] loop0: rw=2049, sector=34225520825, nr_sectors = 1 limit=256 [ 64.184006][ T8809] Buffer I/O error on dev loop0, logical block 34225520825, lost async page write [ 64.193423][ T8627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.194780][ T8627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.216197][ T8627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.219014][ T8627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.234481][ T8627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.238691][ T8627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.318410][ T8899] Option ' ?o냟W(d̛p^ï8 XKt..+jXpszgH{&}()eH/ k;RE<' to dns_resolver key: bad/missing value [ 64.335008][ T8627] device hsr_slave_0 entered promiscuous mode [ 64.372263][ T8627] device hsr_slave_1 entered promiscuous mode [ 64.409530][ T8627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.410975][ T8627] Cannot create hsr debugfs directory [ 64.484515][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.485949][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.557530][ T8877] set_capacity_and_notify: 7 callbacks suppressed [ 64.557544][ T8877] loop0: detected capacity change from 0 to 32768 [ 64.576148][ T8877] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop0 scanned by syz.0.1590 (8877) [ 64.582673][ T8877] BTRFS info (device loop0): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 64.584727][ T8877] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 64.586446][ T8877] BTRFS info (device loop0): using free space tree [ 64.778311][ T9031] loop4: detected capacity change from 0 to 1764 [ 64.841094][ T9046] loop1: detected capacity change from 0 to 256 [ 64.924620][ T8877] BTRFS info (device loop0): enabling ssd optimizations [ 65.004766][ T4328] BTRFS info (device loop0): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 65.281919][ T9108] netlink: 'syz.1.1622': attribute type 11 has an invalid length. [ 65.365848][ T9124] overlayfs: unrecognized mount option "\pperdir=upper" or missing value [ 65.465469][ T9026] loop2: detected capacity change from 0 to 131072 [ 65.488767][ T9026] F2FS-fs (loop2): invalid crc value [ 65.513666][ T9026] F2FS-fs (loop2): Found nat_bits in checkpoint [ 65.534202][ T9026] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 65.588368][ T8627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.651171][ T8627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.679585][ T4343] Bluetooth: hci1: command 0x0409 tx timeout [ 65.732867][ T9163] netlink: 'syz.0.1637': attribute type 3 has an invalid length. [ 65.752150][ T8627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.790760][ T8627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.086373][ T9198] loop1: detected capacity change from 0 to 32768 [ 66.107247][ T9209] netlink: 'syz.2.1647': attribute type 10 has an invalid length. [ 66.123508][ T9229] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.127138][ T9198] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 66.128798][ T9198] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 66.147865][ T9232] xt_addrtype: ipv6 does not support BROADCAST matching [ 66.181150][ T9198] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 12ms [ 66.185906][ T9235] loop2: detected capacity change from 0 to 1024 [ 66.188118][ T6155] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 66.189275][ T6155] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 66.220022][ T6155] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 30ms [ 66.221618][ T6155] gfs2: fsid=syz:syz.0: jid=0: Done [ 66.222622][ T9198] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 66.238336][ T235] hfsplus: b-tree write err: -5, ino 25 [ 66.239780][ T235] hfsplus: b-tree write err: -5, ino 4 [ 66.240725][ T235] hfsplus: b-tree write err: -5, ino 2 [ 66.359245][ T9259] loop4: detected capacity change from 0 to 1024 [ 66.403465][ T8627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.407370][ T9259] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 66.428355][ T9265] loop2: detected capacity change from 0 to 2048 [ 66.439272][ T9265] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 66.453199][ T9259] EXT4-fs error (device loop4): ext4_empty_dir:3168: inode #11: block 623: comm syz.4.1662: Attempting to read directory block (623) that is past i_size (638464) [ 66.463785][ T4391] device hsr_slave_0 left promiscuous mode [ 66.504129][ T9272] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.525987][ T4391] device hsr_slave_1 left promiscuous mode [ 66.528267][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 66.531208][ T9243] loop0: detected capacity change from 0 to 32768 [ 66.543900][ T9243] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1657 (9243) [ 66.552252][ T9243] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 66.554076][ T9243] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 66.555759][ T9243] BTRFS info (device loop0): force zlib compression, level 3 [ 66.557105][ T9243] BTRFS info (device loop0): force clearing of disk cache [ 66.561982][ T9243] BTRFS info (device loop0): setting nodatasum [ 66.568829][ T9243] BTRFS info (device loop0): use zlib compression, level 3 [ 66.571228][ T9243] BTRFS info (device loop0): allowing degraded mounts [ 66.572399][ T9243] BTRFS info (device loop0): enabling disk space caching [ 66.573587][ T9243] BTRFS info (device loop0): disk space caching is enabled [ 66.589645][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.591110][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.598209][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.600054][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.639879][ T4391] device bridge_slave_1 left promiscuous mode [ 66.642267][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.674250][ T4391] device bridge_slave_0 left promiscuous mode [ 66.675474][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.698769][ T9243] BTRFS info (device loop0): enabling ssd optimizations [ 66.706154][ T9243] BTRFS info (device loop0): rebuilding free space tree [ 66.717694][ T9243] BTRFS info (device loop0): disabling free space tree [ 66.719019][ T9243] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 66.724660][ T9243] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 66.746966][ T9316] __nla_validate_parse: 10 callbacks suppressed [ 66.746978][ T9316] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1670'. [ 66.764374][ T9243] BTRFS info (device loop0): balance: start -f -sdrange=0..26716,limit=4294967305,stripes=5..7 [ 66.767299][ T9243] BTRFS info (device loop0): balance: ended with status: 0 [ 66.792614][ T4391] device veth1_macvtap left promiscuous mode [ 66.793992][ T4391] device veth0_macvtap left promiscuous mode [ 66.795191][ T4391] device veth1_vlan left promiscuous mode [ 66.796319][ T4391] device veth0_vlan left promiscuous mode [ 66.814047][ T4328] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 66.954452][ T4391] bond1 (unregistering): Released all slaves [ 67.760157][ T4331] Bluetooth: hci1: command 0x041b tx timeout [ 69.022006][ T4391] team0 (unregistering): Port device team_slave_1 removed [ 69.181308][ T4391] team0 (unregistering): Port device team_slave_0 removed [ 69.343358][ T4391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.551101][ T4391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.601506][ T113] cfg80211: failed to load regulatory.db [ 69.603722][ T235] rpcbind: server 127.0.0.1 not responding, timed out [ 69.839542][ T4331] Bluetooth: hci1: command 0x040f tx timeout [ 71.140918][ T4391] bond0 (unregistering): Released all slaves [ 71.451261][ T5963] lo speed is unknown, defaulting to 1000 [ 71.454767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.456544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.461341][ T8627] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.485357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.487423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.488834][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.490202][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.499242][ T9341] loop0: detected capacity change from 0 to 1024 [ 71.500845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.519097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.525902][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.527124][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.528821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.537340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.539311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.541570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.543479][ T9341] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.543554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.546637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.548448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.550293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.551956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.554560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.555263][ T9341] EXT4-fs error (device loop0): ext4_empty_dir:3168: inode #11: block 623: comm syz.0.1676: Attempting to read directory block (623) that is past i_size (638464) [ 71.556291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.560854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.564026][ T8627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.582521][ T9356] loop1: detected capacity change from 0 to 64 [ 71.627934][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 71.674476][ T9367] loop0: detected capacity change from 0 to 512 [ 71.697571][ T9367] EXT2-fs (loop0): nobh option not supported [ 71.699187][ T9367] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 71.743301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.744933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.750116][ T8627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.750554][ T9367] EXT2-fs (loop0): error: ext2_check_page: bad entry in directory #2: : rec_len is smaller than minimal - offset=0, inode=1282, rec_len=0, name_len=1 [ 71.784907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.786917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.817615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.820446][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.822279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.824266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.835656][ T8627] device veth0_vlan entered promiscuous mode [ 71.844707][ T8627] device veth1_vlan entered promiscuous mode [ 71.875396][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.877207][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.878734][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.880857][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.883879][ T8627] device veth0_macvtap entered promiscuous mode [ 71.890014][ T8627] device veth1_macvtap entered promiscuous mode [ 71.898461][ T9398] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 71.902916][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.907301][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.909233][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.913978][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.919471][ T4331] Bluetooth: hci1: command 0x0419 tx timeout [ 71.922973][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.924713][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.950917][ T8627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.952815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.954488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.956145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.963142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.966290][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.967939][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.978135][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.990917][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.992615][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.994369][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.003212][ T8627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.004883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.006521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.015208][ T8627] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.016761][ T8627] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.018235][ T8627] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.023667][ T8627] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.092949][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.094478][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.095977][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.119287][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.122424][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.123833][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.156691][ T9446] loop4: detected capacity change from 0 to 2048 [ 72.195364][ T9446] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.306646][ T9466] loop2: detected capacity change from 0 to 64 [ 72.471717][ T9500] loop4: detected capacity change from 0 to 512 [ 72.477668][ T9500] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.517114][ T9500] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.565269][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1735'. [ 72.603532][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 72.609096][ T9488] loop3: detected capacity change from 0 to 32768 [ 72.689740][ T9532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1741'. [ 72.710516][ T9488] XFS (loop3): Mounting V5 Filesystem [ 72.742788][ T9544] CIFS: Attempting to mount \\127.0.0.1\share [ 72.747001][ T9544] CIFS: VFS: Error connecting to socket. Aborting operation. [ 72.749067][ T9544] CIFS: VFS: cifs_mount failed w/return code = -111 [ 72.750033][ T9488] XFS (loop3): Ending clean mount [ 72.764899][ T9488] XFS (loop3): Quotacheck needed: Please wait. [ 72.788641][ T9488] XFS (loop3): Quotacheck: Done. [ 72.807177][ T9558] loop4: detected capacity change from 0 to 512 [ 72.853505][ T8627] XFS (loop3): Unmounting Filesystem [ 72.873872][ T9558] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.892021][ T9560] nvme nvme1: rdma_resolve_addr failed (-19). [ 72.934413][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 72.983398][ T9583] vers=1.0 (cifs) not permitted when mounting with smb3 [ 72.983398][ T9583] [ 72.985417][ T9584] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1759'. [ 72.990560][ T9583] CIFS: VFS: vers=1.0 (cifs) not permitted when mounting with smb3 [ 73.019931][ T9590] netlink: 'syz.2.1763': attribute type 10 has an invalid length. [ 73.021769][ T9590] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1763'. [ 73.032922][ T9590] device ipvlan1 entered promiscuous mode [ 73.042876][ T9590] bridge0: port 3(ipvlan1) entered blocking state [ 73.044190][ T9590] bridge0: port 3(ipvlan1) entered disabled state [ 73.045880][ T9590] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 73.128911][ T9609] loop1: detected capacity change from 0 to 64 [ 73.134124][ T9609] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 73.280836][ T9632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1781'. [ 73.315146][ T27] audit: type=1400 audit(73.300:6): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A20B7 pid=9637 comm="syz.1.1784" [ 73.330672][ T9636] loop4: detected capacity change from 0 to 4096 [ 73.348776][ T9636] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 73.368230][ T9643] netlink: 'syz.2.1787': attribute type 1 has an invalid length. [ 73.438197][ T9615] JBD2: Ignoring recovery information on journal [ 73.478512][ T9615] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 73.509301][ T9615] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 73.513702][ T9615] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 73.515347][ T9615] OCFS2: File system is now read-only. [ 73.516290][ T9615] (syz.0.1774,9615,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 73.521655][ T9615] (syz.0.1774,9615,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 73.523184][ T9615] (syz.0.1774,9615,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 73.524643][ T9615] (syz.0.1774,9615,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 73.526097][ T9615] (syz.0.1774,9615,1):ocfs2_symlink:1974 ERROR: Failed to extend file to 4094 [ 73.527606][ T9615] (syz.0.1774,9615,1):ocfs2_symlink:1975 ERROR: status = -30 [ 73.546791][ T4328] ocfs2: Unmounting device (7,0) on (node local) [ 73.731634][ T9693] raw_sendmsg: syz.4.1807 forgot to set AF_INET. Fix it! [ 73.824416][ T27] audit: type=1400 audit(73.810:7): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B706212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD503EAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C68502F7F549FA66F30E7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE16559268A265EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F859 [ 73.870376][ T9667] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 73.895799][ T9718] sctp: [Deprecated]: syz.4.1818 (pid 9718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.895799][ T9718] Use struct sctp_sack_info instead [ 73.900183][ T9667] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 73.904982][ T9667] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3ffff [ 73.906562][ T9667] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 73.927506][ T9667] F2FS-fs (loop3): invalid crc value [ 73.950361][ T9667] F2FS-fs (loop3): Found nat_bits in checkpoint [ 73.952688][ T9728] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1821'. [ 73.981458][ T9732] netlink: 'syz.0.1823': attribute type 10 has an invalid length. [ 73.984797][ T9732] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1823'. [ 74.001767][ T9732] device ipvlan1 entered promiscuous mode [ 74.010652][ T9732] bridge0: port 3(ipvlan1) entered blocking state [ 74.012045][ T9732] bridge0: port 3(ipvlan1) entered disabled state [ 74.014308][ T9732] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 74.018681][ T9667] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 74.020187][ T9667] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 74.084775][ T8627] syz-executor: attempt to access beyond end of device [ 74.084775][ T8627] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 74.265153][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1844'. [ 74.347843][ T9787] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 74.423928][ T9795] exfat: Deprecated parameter 'namecase' [ 74.424992][ T9795] exfat: Deprecated parameter 'namecase' [ 74.447770][ T9795] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 74.476961][ T9817] netlink: 'syz.2.1854': attribute type 1 has an invalid length. [ 74.581329][ T9764] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 74.617053][ T9764] XFS (loop4): ro->rw transition prohibited on norecovery mount [ 74.638261][ T4337] XFS (loop4): Unmounting Filesystem [ 74.690769][ T9844] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.715554][ T9844] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 74.806967][ T9822] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 74.808630][ T9822] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 74.826564][ T9822] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 74.834338][ T5963] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 74.835532][ T5963] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 74.863686][ T5963] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 28ms [ 74.867245][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 74.871156][ T5963] gfs2: fsid=syz:syz.0: jid=0: Done [ 74.872155][ T9822] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 75.055454][ T9879] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 75.174528][ T9890] device bridge1 entered promiscuous mode [ 75.191213][ T9885] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 75.228263][ T9894] dlm: no locking on control device [ 75.242629][ T9820] F2FS-fs (loop0): invalid crc value [ 75.250178][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1876'. [ 75.279179][ T9820] F2FS-fs (loop0): Found nat_bits in checkpoint [ 75.298966][ T9820] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 75.338096][ T9820] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 75.867424][T10001] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 75.885308][ T9987] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 75.887657][ T9987] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 75.901651][ T9987] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 75.911196][ T9987] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 75.913563][ T9987] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 75.930717][ T9987] ntfs: volume version 3.1. [ 75.936586][ T9987] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 75.938879][ T9987] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 75.943466][ T9987] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 75.999177][T10019] netlink: 'syz.1.1931': attribute type 46 has an invalid length. [ 76.009167][T10019] netlink: 'syz.1.1931': attribute type 28 has an invalid length. [ 76.021439][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1931'. [ 76.237661][T10013] JBD2: Ignoring recovery information on journal [ 76.283403][T10013] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 76.348494][T10029] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1935 (10029) [ 76.352322][T10029] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 76.354470][T10029] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 76.356326][T10029] BTRFS info (device loop2): force zlib compression, level 3 [ 76.357773][T10029] BTRFS info (device loop2): allowing degraded mounts [ 76.359064][T10029] BTRFS info (device loop2): setting nodatasum [ 76.360420][T10029] BTRFS info (device loop2): allowing degraded mounts [ 76.361799][T10029] BTRFS info (device loop2): using free space tree [ 76.369099][ T4328] ocfs2: Unmounting device (7,0) on (node local) [ 76.435438][T10031] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1937 (10031) [ 76.455650][T10031] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 76.458316][T10031] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 76.460253][T10031] BTRFS info (device loop1): using free space tree [ 76.470725][T10073] netlink: 'syz.0.1943': attribute type 1 has an invalid length. [ 76.576339][ T4336] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 76.676954][T10031] BTRFS info (device loop1): enabling ssd optimizations [ 76.740235][ T4334] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 76.824971][ T4320] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop2 scanned by udevd (4320) [ 77.175991][T10178] MTD: Couldn't look up 'mtd0/file0': -2 [ 77.178866][T10177] nft_compat: unsupported protocol 5 [ 77.227613][T10182] binder: 10180:10182 ioctl c0046209 9999999999999999 returned -22 [ 77.269861][T10141] set_capacity_and_notify: 14 callbacks suppressed [ 77.269871][T10141] loop2: detected capacity change from 0 to 32768 [ 77.295487][T10141] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 77.297001][T10141] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 77.313424][T10194] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 77.332668][T10141] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 77.335223][ T4380] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 77.336490][ T4380] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 77.366867][ T4380] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 30ms [ 77.368330][ T4380] gfs2: fsid=syz:syz.0: jid=0: Done [ 77.369221][T10141] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 77.528864][T10141] process 'syz.2.1966' launched '.' with NULL argv: empty string added [ 77.564832][T10229] netlink: 'syz.0.2002': attribute type 3 has an invalid length. [ 77.642305][T10212] loop3: detected capacity change from 0 to 32768 [ 77.645317][T10212] XFS: ikeep mount option is deprecated. [ 77.646305][T10212] XFS: noikeep mount option is deprecated. [ 77.708461][T10254] loop2: detected capacity change from 0 to 256 [ 77.718483][T10254] exfat: Deprecated parameter 'namecase' [ 77.722800][T10254] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 77.749225][T10212] XFS (loop3): Mounting V5 Filesystem [ 77.787780][T10264] x_tables: duplicate entry at hook 2 [ 77.831852][T10212] XFS (loop3): Ending clean mount [ 77.846127][T10212] XFS (loop3): Quotacheck needed: Please wait. [ 77.872933][T10277] UBIFS error (pid: 10277): cannot open "(null)", error -22 [ 77.875560][T10212] XFS (loop3): Quotacheck: Done. [ 77.901482][T10283] xt_CT: You must specify a L4 protocol and not use inversions on it [ 77.916979][T10285] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 77.960955][ T8627] XFS (loop3): Unmounting Filesystem [ 77.988899][T10296] __vm_enough_memory: pid: 10296, comm: syz.0.2023, no enough memory for the allocation [ 78.172273][T10302] loop1: detected capacity change from 0 to 32768 [ 78.222500][T10302] ERROR: (device loop1): dbAllocAG: unable to allocate blocks [ 78.222500][T10302] [ 78.231881][T10302] jfs_rename: dtInsert returned -EIO [ 78.241181][T10337] loop2: detected capacity change from 0 to 4096 [ 78.282862][T10337] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 78.323445][T10337] EXT4-fs error (device loop2): ext4_empty_dir:3156: inode #12: block 80: comm syz.2.2042: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 78.343790][T10327] loop0: detected capacity change from 0 to 40427 [ 78.347461][T10337] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #12: comm syz.2.2042: directory missing '..' [ 78.357373][T10327] F2FS-fs (loop0): invalid crc value [ 78.375475][T10327] F2FS-fs (loop0): Found nat_bits in checkpoint [ 78.383832][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 78.399885][T10327] F2FS-fs (loop0): Start checkpoint disabled! [ 78.409904][T10327] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 78.445891][T10327] F2FS-fs (loop0): disabling checkpoint not compatible with read-only [ 78.496752][T10367] __nla_validate_parse: 3 callbacks suppressed [ 78.496765][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2052'. [ 78.701353][T10394] loop1: detected capacity change from 0 to 256 [ 78.715873][T10353] loop4: detected capacity change from 0 to 40427 [ 78.724354][T10353] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 78.748789][T10353] F2FS-fs (loop4): invalid crc value [ 78.748933][T10404] loop0: detected capacity change from 0 to 512 [ 78.772560][T10353] F2FS-fs (loop4): Found nat_bits in checkpoint [ 78.795362][T10353] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 78.829869][T10404] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 49, start 00000103) [ 78.832530][T10404] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000103) [ 78.842201][T10353] F2FS-fs (loop4): switch extent_cache option is not allowed [ 78.954068][T10439] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2077'. [ 79.106697][T10463] loop1: detected capacity change from 0 to 2048 [ 79.138903][T10463] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 79.155014][T10477] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 79.156265][T10463] EXT4-fs error (device loop1): empty_inline_dir:1912: inode #12: block 5: comm syz.1.2085: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 79.176911][T10463] EXT4-fs warning (device loop1): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 79.190341][T10479] device bridge2 entered promiscuous mode [ 79.198901][ T4334] EXT4-fs (loop1): unmounting filesystem. [ 79.401951][T10511] ALSA: mixer_oss: invalid OSS volume 'w' [ 79.512914][T10529] FAT-fs (loop2): IO charset ut#ww9C= Y撳t EŒ&y3_S@rRhjLzpB&5dxpO߁up}UU]@HX[曖[7VG1 y{vX)P1u&-@=6Z>XAxa'ێe yo18446 not found [ 79.562859][T10535] nvme nvme1: failed to connect socket: -111 [ 79.564937][T10540] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 79.632707][T10549] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.635277][T10549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.636698][T10549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.648022][T10549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.650931][T10549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.652409][T10549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.682589][T10557] netlink: 'syz.2.2121': attribute type 3 has an invalid length. [ 79.957193][T10607] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.028423][T10617] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 80.033440][T10617] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.041281][T10624] netlink: 'syz.2.2150': attribute type 32 has an invalid length. [ 80.044067][T10624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2150'. [ 80.094910][T10626] FAT-fs (loop4): Directory bread(block 64) failed [ 80.096185][T10626] FAT-fs (loop4): Directory bread(block 65) failed [ 80.097265][T10626] FAT-fs (loop4): Directory bread(block 66) failed [ 80.108310][T10626] FAT-fs (loop4): Directory bread(block 67) failed [ 80.109918][T10626] FAT-fs (loop4): Directory bread(block 68) failed [ 80.111052][T10626] FAT-fs (loop4): Directory bread(block 69) failed [ 80.112189][T10626] FAT-fs (loop4): Directory bread(block 70) failed [ 80.113261][T10626] FAT-fs (loop4): Directory bread(block 71) failed [ 80.114397][T10626] FAT-fs (loop4): Directory bread(block 72) failed [ 80.115396][T10626] FAT-fs (loop4): Directory bread(block 73) failed [ 80.135211][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2157'. [ 80.253429][T10659] IPv6: Can't replace route, no match found [ 80.296456][ T4380] kernel write not supported for file /vcs (pid: 4380 comm: kworker/1:6) [ 80.322629][T10672] netlink: 'syz.1.2171': attribute type 3 has an invalid length. [ 80.323957][T10672] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2171'. [ 80.556373][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 80.556384][ T27] audit: type=1326 audit(80.540:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="syz.3.2194" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1379368 code=0x7ff00000 [ 80.562164][ T27] audit: type=1326 audit(80.540:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="syz.3.2194" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1379368 code=0x7ff00000 [ 80.588055][ T27] audit: type=1326 audit(80.540:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="syz.3.2194" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1379368 code=0x7ff00000 [ 80.596249][T10721] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 80.597750][T10721] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 80.600306][ T27] audit: type=1326 audit(80.540:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="syz.3.2194" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1379368 code=0x7ff00000 [ 80.604791][ T27] audit: type=1326 audit(80.540:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="syz.3.2194" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1379368 code=0x7ff00000 [ 80.608743][ T27] audit: type=1326 audit(80.540:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="syz.3.2194" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1379368 code=0x7ff00000 [ 80.615191][ T27] audit: type=1326 audit(80.540:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="syz.3.2194" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1379368 code=0x7ff00000 [ 80.623138][T10721] System zones: 0-1, 15-15, 18-18, 34-34 [ 80.624617][T10721] EXT4-fs (loop4): orphan cleanup on readonly fs [ 80.625746][T10721] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 80.627326][T10721] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 80.630276][ T27] audit: type=1326 audit(80.540:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="syz.3.2194" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1379368 code=0x7ff00000 [ 80.635520][T10728] openvswitch: netlink: Key type 403 is out of range max 32 [ 80.636736][ T27] audit: type=1326 audit(80.540:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="syz.3.2194" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1379368 code=0x7ff00000 [ 80.659062][T10721] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 80.671767][T10721] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.2197: bad orphan inode 16 [ 80.674022][T10721] ext4_test_bit(bit=15, block=18) = 1 [ 80.675113][T10721] is_bad_inode(inode)=0 [ 80.676005][T10721] NEXT_ORPHAN(inode)=0 [ 80.676720][T10721] max_ino=32 [ 80.677244][T10721] i_nlink=2 [ 80.677807][T10721] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 80.710931][T10721] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 80.744423][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 80.783848][T10746] xt_l2tp: unknown flags: e7 [ 80.824138][T10748] hsr0: VLAN not yet supported [ 80.871343][T10734] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 80.875875][T10734] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 80.898467][T10734] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 80.902173][ T4380] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 80.903376][ T4380] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 80.928415][ T4380] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 25ms [ 80.946121][ T4380] gfs2: fsid=syz:syz.0: jid=0: Done [ 80.947277][T10734] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 81.057943][T10781] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 81.069148][T10734] gfs2: fsid=syz:syz.0: found 1 quota changes [ 81.083703][T10787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2224'. [ 81.116229][T10794] netlink: 'syz.2.2225': attribute type 1 has an invalid length. [ 81.119410][ T4331] Bluetooth: hci0: command 0x0401 tx timeout [ 81.143326][ T8627] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 81.145876][ T8627] CPU: 0 PID: 8627 Comm: syz-executor Not tainted syzkaller #0 [ 81.147085][ T8627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 81.148654][ T8627] Call trace: [ 81.149170][ T8627] dump_backtrace+0x1c4/0x1f0 [ 81.149990][ T8627] show_stack+0x2c/0x3c [ 81.150726][ T8627] __dump_stack+0x30/0x40 [ 81.151491][ T8627] dump_stack_lvl+0xf4/0x15c [ 81.152328][ T8627] dump_stack+0x1c/0x5c [ 81.153081][ T8627] gfs2_assert_warn_i+0x16c/0x26c [ 81.153982][ T8627] gfs2_quota_cleanup+0x444/0x640 [ 81.154839][ T8627] gfs2_make_fs_ro+0x36c/0x444 [ 81.155672][ T8627] gfs2_put_super+0x1dc/0x744 [ 81.156495][ T8627] generic_shutdown_super+0x138/0x32c [ 81.157439][ T8627] kill_block_super+0x78/0xe0 [ 81.158253][ T8627] gfs2_kill_sb+0xc4/0xd8 [ 81.159008][ T8627] deactivate_locked_super+0xb4/0x128 [ 81.159948][ T8627] deactivate_super+0xe4/0x104 [ 81.160803][ T8627] cleanup_mnt+0x3a8/0x430 [ 81.161586][ T8627] __cleanup_mnt+0x20/0x30 [ 81.162360][ T8627] task_work_run+0x1f4/0x280 [ 81.163179][ T8627] do_notify_resume+0x20f8/0x2c84 [ 81.164058][ T8627] el0_svc+0x98/0x128 [ 81.164737][ T8627] el0t_64_sync_handler+0x84/0xf0 [ 81.165621][ T8627] el0t_64_sync+0x18c/0x190 [ 81.318964][T10790] (syz.1.2223,10790,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 81.321985][T10790] (syz.1.2223,10790,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 81.350766][T10790] JBD2: Ignoring recovery information on journal [ 81.392762][T10790] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 81.404009][T10790] (syz.1.2223,10790,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 81.470830][T10790] (syz.1.2223,10790,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 81.478299][T10790] (syz.1.2223,10790,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 81.481973][T10790] (syz.1.2223,10790,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 81.487081][T10790] (syz.1.2223,10790,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 81.488738][T10790] (syz.1.2223,10790,0):ocfs2_quota_read:201 ERROR: status = -5 [ 81.491981][T10846] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709547520) [ 81.492022][T10790] (syz.1.2223,10790,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 81.494125][T10846] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 81.496832][T10790] (syz.1.2223,10790,0):ocfs2_symlink:1886 ERROR: status = -5 [ 81.498788][T10790] (syz.1.2223,10790,0):ocfs2_symlink:2072 ERROR: status = -5 [ 81.509190][T10844] CIFS: Attempting to mount \\127.0.0.1\share [ 81.510528][T10844] CIFS: VFS: No username specified [ 81.583215][ T4334] ocfs2: Unmounting device (7,1) on (node local) [ 81.632964][T10857] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 81.753863][T10880] erofs: (device loop1): mounted with root inode @ nid 36. [ 81.932315][T10905] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 8: comm syz.4.2272: lblock 0 mapped to illegal pblock 8 (length 1) [ 81.942137][T10905] EXT4-fs (loop4): Remounting filesystem read-only [ 81.943613][T10905] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2272: error -117 reading directory block [ 81.946350][T10905] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 81.947756][T10905] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 8: comm syz.4.2272: lblock 0 mapped to illegal pblock 8 (length 1) [ 81.953389][T10905] EXT4-fs (loop4): Remounting filesystem read-only [ 81.954560][T10905] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2272: error -117 reading directory block [ 81.981092][T10905] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 81.982585][T10905] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 82.034378][T10922] Injecting memory failure for pfn 0x13fc11 at process virtual address 0x20001000 [ 82.038226][T10922] Memory failure: 0x13fc11: recovery action for clean LRU page: Recovered [ 82.039836][T10922] Injecting memory failure for pfn 0x13f59e at process virtual address 0x20002000 [ 82.041334][T10922] Memory failure: 0x13f59e: recovery action for clean LRU page: Recovered [ 82.120595][T10930] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 82.130095][T10930] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.160314][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 82.185234][T10936] CIFS: bad ip= option (::.) [ 82.281397][T10951] set_capacity_and_notify: 14 callbacks suppressed [ 82.281407][T10951] loop3: detected capacity change from 0 to 2048 [ 82.298410][T10951] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 82.412847][T10962] sctp: [Deprecated]: syz.4.2296 (pid 10962) Use of int in maxseg socket option. [ 82.412847][T10962] Use struct sctp_assoc_value instead [ 82.500103][T10948] loop0: detected capacity change from 0 to 32768 [ 82.521473][T10948] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 82.525718][T10948] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 82.552113][T10948] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 82.555341][ T4803] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 82.556472][ T4803] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 82.580631][ T4803] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 24ms [ 82.586618][ T4803] gfs2: fsid=syz:syz.0: jid=0: Done [ 82.587553][T10948] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 82.687015][T10948] gfs2: fsid=syz:syz.0: found 1 quota changes [ 82.688460][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2305'. [ 82.738263][T10997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2308'. [ 82.740545][T10997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2308'. [ 82.741974][T10997] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2308'. [ 82.766070][ T4328] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 82.768464][ T4328] CPU: 0 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 82.769780][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 82.771655][ T4328] Call trace: [ 82.772240][ T4328] dump_backtrace+0x1c4/0x1f0 [ 82.773067][ T4328] show_stack+0x2c/0x3c [ 82.773828][ T4328] __dump_stack+0x30/0x40 [ 82.774659][ T4328] dump_stack_lvl+0xf4/0x15c [ 82.775522][ T4328] dump_stack+0x1c/0x5c [ 82.776287][ T4328] gfs2_assert_warn_i+0x16c/0x26c [ 82.777358][ T4328] gfs2_quota_cleanup+0x444/0x640 [ 82.778399][ T4328] gfs2_make_fs_ro+0x36c/0x444 [ 82.779388][ T4328] gfs2_put_super+0x1dc/0x744 [ 82.780367][ T4328] generic_shutdown_super+0x138/0x32c [ 82.781450][ T4328] kill_block_super+0x78/0xe0 [ 82.782358][ T4328] gfs2_kill_sb+0xc4/0xd8 [ 82.783282][ T4328] deactivate_locked_super+0xb4/0x128 [ 82.784354][ T4328] deactivate_super+0xe4/0x104 [ 82.785339][ T4328] cleanup_mnt+0x3a8/0x430 [ 82.786179][ T4328] __cleanup_mnt+0x20/0x30 [ 82.786998][ T4328] task_work_run+0x1f4/0x280 [ 82.787860][ T4328] do_notify_resume+0x20f8/0x2c84 [ 82.788793][ T4328] el0_svc+0x98/0x128 [ 82.789645][ T4328] el0t_64_sync_handler+0x84/0xf0 [ 82.790726][ T4328] el0t_64_sync+0x18c/0x190 [ 82.892929][T11018] loop3: detected capacity change from 0 to 64 [ 82.951692][ T4318] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 82.995101][T11038] loop2: detected capacity change from 0 to 2048 [ 83.019224][T11042] binder: 11039:11042 ioctl c0046209 9999999999999999 returned -22 [ 83.023210][T11038] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 83.094144][T11047] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 83.147426][T11059] IPv6: sit1: Disabled Multicast RS [ 83.168545][T11064] netlink: 'syz.0.2333': attribute type 7 has an invalid length. [ 83.199469][ T4343] Bluetooth: hci0: command 0x0409 tx timeout [ 83.215432][T11071] xt_hashlimit: max too large, truncated to 1048576 [ 83.231914][T11030] loop4: detected capacity change from 0 to 32768 [ 83.235916][T11030] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 83.238881][T11030] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 83.246762][T11030] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 83.257531][ T4341] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 83.258754][ T4341] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 83.274307][T11081] MTD: Couldn't look up 'mtd0/file0': -2 [ 83.286187][ T4341] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 27ms [ 83.288814][ T4341] gfs2: fsid=syz:syz.0: jid=0: Done [ 83.292367][T11030] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 83.384648][T11097] loop1: detected capacity change from 0 to 512 [ 83.397513][T11097] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.403069][T11097] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.409097][T11030] gfs2: fsid=syz:syz.0: found 1 quota changes [ 83.427490][T11102] netlink: 'syz.2.2349': attribute type 7 has an invalid length. [ 83.433611][T11097] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 83.438449][T11097] EXT4-fs error (device loop1): ext4_ext_remove_space:2945: inode #15: comm syz.1.2348: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 83.453202][T11097] EXT4-fs (loop1): Remounting filesystem read-only [ 83.454541][T11097] EXT4-fs error (device loop1): ext4_evict_inode:292: comm syz.1.2348: couldn't truncate inode 15 (err -117) [ 83.462192][T11097] EXT4-fs (loop1): Remounting filesystem read-only [ 83.466517][ T4337] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 83.469164][ T4337] CPU: 0 PID: 4337 Comm: syz-executor Not tainted syzkaller #0 [ 83.470724][ T4337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 83.472767][ T4337] Call trace: [ 83.473425][ T4337] dump_backtrace+0x1c4/0x1f0 [ 83.474358][ T4337] show_stack+0x2c/0x3c [ 83.475171][ T4337] __dump_stack+0x30/0x40 [ 83.476036][ T4337] dump_stack_lvl+0xf4/0x15c [ 83.476952][ T4337] dump_stack+0x1c/0x5c [ 83.477845][ T4337] gfs2_assert_warn_i+0x16c/0x26c [ 83.478879][ T4337] gfs2_quota_cleanup+0x444/0x640 [ 83.479915][ T4337] gfs2_make_fs_ro+0x36c/0x444 [ 83.480870][ T4337] gfs2_put_super+0x1dc/0x744 [ 83.481828][ T4337] generic_shutdown_super+0x138/0x32c [ 83.482981][ T4337] kill_block_super+0x78/0xe0 [ 83.483990][ T4337] gfs2_kill_sb+0xc4/0xd8 [ 83.484927][ T4337] deactivate_locked_super+0xb4/0x128 [ 83.486047][ T4337] deactivate_super+0xe4/0x104 [ 83.487072][ T4337] cleanup_mnt+0x3a8/0x430 [ 83.488024][ T4337] __cleanup_mnt+0x20/0x30 [ 83.488901][ T4337] task_work_run+0x1f4/0x280 [ 83.489788][ T4337] do_notify_resume+0x20f8/0x2c84 [ 83.490763][ T4337] el0_svc+0x98/0x128 [ 83.491572][ T4337] el0t_64_sync_handler+0x84/0xf0 [ 83.492339][T11114] xt_hashlimit: max too large, truncated to 1048576 [ 83.492555][ T4337] el0t_64_sync+0x18c/0x190 [ 83.500764][ T4334] EXT4-fs (loop1): unmounting filesystem. [ 83.502543][T11113] loop2: detected capacity change from 0 to 64 [ 83.657590][T11144] netlink: 'syz.4.2363': attribute type 7 has an invalid length. [ 83.691095][T11151] overlayfs: unrecognized mount option "\" or missing value [ 83.718646][T11145] loop3: detected capacity change from 0 to 4096 [ 83.742300][T11145] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 83.827192][T11145] ntfs3: loop3: ino=1b, "file0" attr_set_size [ 83.828642][T11145] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 83.836643][T11176] loop1: detected capacity change from 0 to 512 [ 83.886752][T11183] overlayfs: unrecognized mount option "\" or missing value [ 83.894179][T11176] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 83.895815][T11176] FAT-fs (loop1): Filesystem has been set read-only [ 84.052333][T11213] IPv6: sit1: Disabled Multicast RS [ 84.062673][T11217] __nla_validate_parse: 3 callbacks suppressed [ 84.062684][T11217] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2392'. [ 84.133739][T11225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.186088][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2402'. [ 84.213373][T11276] loop4: detected capacity change from 0 to 256 [ 84.229960][T11276] exfat: Deprecated parameter 'namecase' [ 84.271946][T11276] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 84.394179][T11274] F2FS-fs (loop1): invalid crc value [ 84.407336][T11274] F2FS-fs (loop1): Found nat_bits in checkpoint [ 84.433500][T11274] F2FS-fs (loop1): Start checkpoint disabled! [ 84.463977][T11274] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 84.513579][T11274] F2FS-fs (loop1): disabling checkpoint not compatible with read-only [ 84.531556][T11324] No source specified [ 84.556273][T11322] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.579563][T11328] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.582304][T11322] syz.2.2421: attempt to access beyond end of device [ 84.582304][T11322] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 84.601854][T11322] syz.2.2421: attempt to access beyond end of device [ 84.601854][T11322] loop2: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 84.609231][T11322] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=0) [ 84.697496][T11332] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 84.731697][T11323] ERROR: (device loop4): dbAllocAG: unable to allocate blocks [ 84.731697][T11323] [ 84.741926][T11323] jfs_rename: dtInsert returned -EIO [ 84.743062][T11332] EXT4-fs error (device loop0): ext4_empty_dir:3156: inode #12: block 80: comm syz.0.2427: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 84.760300][T11332] EXT4-fs warning (device loop0): ext4_empty_dir:3158: inode #12: comm syz.0.2427: directory missing '..' [ 84.806700][T11349] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 84.814022][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 84.817918][T11353] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 49, start 00000103) [ 84.843726][T11353] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000103) [ 84.917468][T11349] ntfs3: loop2: ino=1b, "file0" attr_set_size [ 84.918730][T11349] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 84.928983][T11372] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2438'. [ 84.977798][T11374] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 85.039098][T11386] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 85.041731][T11378] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 85.043131][T11378] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 85.044462][T11378] System zones: 0-1, 15-15, 18-18, 34-34 [ 85.045766][T11378] EXT4-fs (loop0): orphan cleanup on readonly fs [ 85.046857][T11378] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 85.073317][T11378] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 85.074679][T11378] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.2441: bad orphan inode 16 [ 85.076688][T11378] ext4_test_bit(bit=15, block=18) = 1 [ 85.077567][T11378] is_bad_inode(inode)=0 [ 85.078272][T11378] NEXT_ORPHAN(inode)=0 [ 85.078965][T11378] max_ino=32 [ 85.079998][T11378] i_nlink=2 [ 85.080531][T11378] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 85.093515][T11378] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 85.144895][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 85.154089][T11359] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 85.156046][T11359] F2FS-fs (loop1): invalid crc value [ 85.186622][T11359] F2FS-fs (loop1): Found nat_bits in checkpoint [ 85.213766][T11359] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 85.264668][T11359] F2FS-fs (loop1): switch extent_cache option is not allowed [ 85.349624][T11421] No source specified [ 85.684218][T11468] nfs: Deprecated parameter 'nointr' [ 85.722268][T11474] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 85.772663][T11482] device geneve2 entered promiscuous mode [ 85.827252][T11493] device geneve2 entered promiscuous mode [ 85.851884][T11366] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 85.853298][T11366] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 85.864977][T11366] F2FS-fs (loop4): invalid crc value [ 85.892241][T11366] F2FS-fs (loop4): Found nat_bits in checkpoint [ 85.912885][T11366] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 85.914175][T11366] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 85.936788][T11511] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2490'. [ 86.140265][T11536] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 86.141861][T11536] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 86.143323][T11536] System zones: 0-1, 15-15, 18-18, 34-34 [ 86.144742][T11536] EXT4-fs (loop1): orphan cleanup on readonly fs [ 86.146384][T11536] __quota_error: 129 callbacks suppressed [ 86.146394][T11536] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 86.151975][T11536] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 86.154698][T11536] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 86.156309][T11536] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.2503: bad orphan inode 16 [ 86.158457][T11536] ext4_test_bit(bit=15, block=18) = 1 [ 86.159876][T11536] is_bad_inode(inode)=0 [ 86.160636][T11536] NEXT_ORPHAN(inode)=0 [ 86.161337][T11536] max_ino=32 [ 86.161877][T11536] i_nlink=2 [ 86.162645][T11536] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 86.176230][T11536] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 86.186006][ T4334] EXT4-fs (loop1): unmounting filesystem. [ 86.298677][T11561] erofs: (device loop0): mounted with root inode @ nid 36. [ 86.325243][T11565] netlink: 'syz.1.2511': attribute type 32 has an invalid length. [ 86.326921][T11565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2511'. [ 86.330592][T11567] nfs: Deprecated parameter 'nointr' [ 86.335392][T11569] netlink: 'syz.4.2494': attribute type 3 has an invalid length. [ 86.437161][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2518'. [ 86.486763][T11599] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 86.494178][T11598] IPv6: Can't replace route, no match found [ 86.563694][T11477] nvme nvme1: failed to connect socket: -512 [ 86.582229][T11612] netlink: 'syz.0.2532': attribute type 3 has an invalid length. [ 86.583924][T11612] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2532'. [ 86.777843][T11638] usb usb8: check_ctrlrecip: process 11638 (syz.1.2544) requesting ep 01 but needs 81 [ 86.786338][T11638] usb usb8: usbfs: process 11638 (syz.1.2544) did not claim interface 0 before use [ 86.808993][T11639] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 86.828569][T11639] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.909946][T11654] erofs: (device loop4): mounted with root inode @ nid 36. [ 86.917856][T11654] syz.4.2549: attempt to access beyond end of device [ 86.917856][T11654] loop4: rw=0, sector=34359736320, nr_sectors = 8 limit=16 [ 86.949198][ T27] audit: type=1326 audit(2000000001.593:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.1.2554" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab779368 code=0x7ff00000 [ 86.954338][ T27] audit: type=1326 audit(2000000001.593:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.1.2554" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab779368 code=0x7ff00000 [ 86.958552][ T27] audit: type=1326 audit(2000000001.593:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.1.2554" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab779368 code=0x7ff00000 [ 86.982626][ T27] audit: type=1326 audit(2000000001.593:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.1.2554" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab779368 code=0x7ff00000 [ 86.986666][ T27] audit: type=1326 audit(2000000001.593:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.1.2554" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab779368 code=0x7ff00000 [ 86.994126][ T27] audit: type=1326 audit(2000000001.593:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.1.2554" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab779368 code=0x7ff00000 [ 86.998489][ T27] audit: type=1326 audit(2000000001.593:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.1.2554" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab779368 code=0x7ff00000 [ 87.003661][ T27] audit: type=1326 audit(2000000001.593:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.1.2554" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab779368 code=0x7ff00000 [ 87.009636][ T27] audit: type=1326 audit(2000000001.593:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.1.2554" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab779368 code=0x7ff00000 [ 87.103338][T11627] XFS (loop2): Mounting V5 Filesystem [ 87.155718][T11627] XFS (loop2): Ending clean mount [ 87.258088][ T4336] XFS (loop2): Unmounting Filesystem [ 87.413365][T11706] set_capacity_and_notify: 14 callbacks suppressed [ 87.413376][T11706] loop1: detected capacity change from 0 to 32768 [ 87.426571][T11721] xt_l2tp: unknown flags: e7 [ 87.426627][T11706] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2569 (11706) [ 87.447139][T11706] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 87.449062][T11706] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 87.451824][T11706] BTRFS info (device loop1): use no compression [ 87.452947][T11706] BTRFS info (device loop1): force clearing of disk cache [ 87.454324][T11706] BTRFS info (device loop1): setting nodatasum [ 87.455421][T11706] BTRFS info (device loop1): max_inline at 4096 [ 87.456908][T11706] BTRFS info (device loop1): using free space tree [ 87.467738][ T4391] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0x600fa3b1bb0a61280b917c5e63cfb6d5f3303add0c7f49b39e428b009781bffd found 0x6c0b60526667c7b86ef4c6164f3b7d2f2a5a8694f32aad2d75bb8f96e9936976 level 0 [ 87.479160][T11706] BTRFS error (device loop1): failed to load root extent [ 87.555900][T11706] BTRFS error (device loop1): open_ctree failed: -22 [ 87.865750][T11803] loop1: detected capacity change from 0 to 16 [ 87.876742][T11803] erofs: (device loop1): mounted with root inode @ nid 36. [ 87.881541][T11806] netlink: 'syz.0.2605': attribute type 1 has an invalid length. [ 87.887782][T11803] syz.1.2616: attempt to access beyond end of device [ 87.887782][T11803] loop1: rw=0, sector=34359736320, nr_sectors = 8 limit=16 [ 87.956854][T11821] device ip6gre1 entered promiscuous mode [ 87.987993][T11827] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709547520) [ 88.004074][T11827] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 88.050465][T11833] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2620'. [ 88.128735][T11846] loop2: detected capacity change from 0 to 4096 [ 88.134931][T11846] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 88.267682][T11842] loop3: detected capacity change from 0 to 32768 [ 88.292749][T11842] XFS (loop3): Mounting V5 Filesystem [ 88.307071][T11842] XFS (loop3): Ending clean mount [ 88.347655][ T8627] XFS (loop3): Unmounting Filesystem [ 88.391425][T11878] loop4: detected capacity change from 0 to 256 [ 88.449053][T11863] loop2: detected capacity change from 0 to 32768 [ 88.475707][T11863] JBD2: Ignoring recovery information on journal [ 88.541315][T11863] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 88.607293][T11863] (syz.2.2630,11863,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=32, inode=17057, rec_len=280, name_len=10 [ 88.622601][T11897] netlink: 'syz.1.2638': attribute type 3 has an invalid length. [ 88.624058][T11897] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2638'. [ 88.641844][T11863] (syz.2.2630,11863,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 88.643477][T11863] (syz.2.2630,11863,0):ocfs2_mknod:299 ERROR: status = -2 [ 88.644610][T11863] (syz.2.2630,11863,0):ocfs2_mknod:509 ERROR: status = -2 [ 88.645862][T11863] (syz.2.2630,11863,0):ocfs2_mkdir:666 ERROR: status = -2 [ 88.702438][T11903] loop0: detected capacity change from 0 to 164 [ 88.718795][ T4336] ocfs2: Unmounting device (7,2) on (node local) [ 88.812784][T11903] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 88.833737][T11919] netlink: 'syz.3.2648': attribute type 1 has an invalid length. [ 88.835109][T11919] netlink: 'syz.3.2648': attribute type 3 has an invalid length. [ 88.836343][T11919] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2648'. [ 88.837783][T11919] NCSI netlink: No device for ifindex 2986344450 [ 89.023694][T11954] loop3: detected capacity change from 0 to 128 [ 89.027150][T11955] loop2: detected capacity change from 0 to 1024 [ 89.080833][T11966] vcan0 speed is unknown, defaulting to 1000 [ 89.082851][T11966] vcan0 speed is unknown, defaulting to 1000 [ 89.084062][T11966] vcan0 speed is unknown, defaulting to 1000 [ 89.144333][ T4380] vcan0 speed is unknown, defaulting to 1000 [ 89.149472][T11966] infiniband syz1: set active [ 89.150559][T11966] infiniband syz1: added vcan0 [ 89.187103][T11982] loop3: detected capacity change from 0 to 16 [ 89.199044][T11982] erofs: (device loop3): mounted with root inode @ nid 36. [ 89.206682][T11966] RDS/IB: syz1: added [ 89.207989][T11966] smc: adding ib device syz1 with port count 1 [ 89.209213][T11966] smc: ib device syz1 port 1 has pnetid [ 89.220875][ T113] vcan0 speed is unknown, defaulting to 1000 [ 89.237924][T11966] vcan0 speed is unknown, defaulting to 1000 [ 89.275044][T11966] vcan0 speed is unknown, defaulting to 1000 [ 89.304697][T11966] vcan0 speed is unknown, defaulting to 1000 [ 89.358091][T11966] vcan0 speed is unknown, defaulting to 1000 [ 89.380285][T12005] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 89.396512][ T4328] hfs: node 4:3 still has 1 user(s)! [ 89.423240][T12005] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 89.424805][T12005] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 89.438096][T12003] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.2678 (12003) [ 89.440991][ T4331] Bluetooth: hci1: command 0x0409 tx timeout [ 89.454393][T12003] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 89.456142][T12003] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 89.457524][T12003] BTRFS info (device loop3): enabling ssd optimizations [ 89.458872][T12003] BTRFS info (device loop3): not using ssd optimizations [ 89.471217][T11966] vcan0 speed is unknown, defaulting to 1000 [ 89.484835][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 89.492353][T12003] BTRFS info (device loop3): turning off barriers [ 89.493597][T12003] BTRFS info (device loop3): use no compression [ 89.494687][T12003] BTRFS info (device loop3): using free space tree [ 89.573081][T12035] netlink: 'syz.1.2686': attribute type 1 has an invalid length. [ 89.574525][T12035] __nla_validate_parse: 1 callbacks suppressed [ 89.574538][T12035] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2686'. [ 89.579622][ T4343] Bluetooth: hci0: unexpected event for opcode 0x080c [ 89.614236][T12033] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 89.695871][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2692'. [ 89.739128][ T8627] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 89.837830][T12076] erofs: (device loop4): mounted with root inode @ nid 36. [ 89.910672][ T6153] ------------[ cut here ]------------ [ 89.912070][ T6153] WARNING: CPU: 1 PID: 6153 at net/netfilter/nft_set_pipapo.c:2384 nft_pipapo_destroy+0x784/0x7e0 [ 89.914131][ T6153] Modules linked in: [ 89.914872][ T6153] CPU: 1 PID: 6153 Comm: kworker/1:15 Not tainted syzkaller #0 [ 89.916302][ T6153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 89.918356][ T6153] Workqueue: events nf_tables_trans_destroy_work [ 89.919561][ T6153] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 89.920948][ T6153] pc : nft_pipapo_destroy+0x784/0x7e0 [ 89.921897][ T6153] lr : nft_pipapo_destroy+0x784/0x7e0 [ 89.922877][ T6153] sp : ffff800021707990 [ 89.923626][ T6153] x29: ffff8000217079b0 x28: dfff800000000000 x27: 1fffe0001b5b3419 [ 89.925084][ T6153] x26: dfff800000000000 x25: ffff0000dad9a0cc x24: ffff0000dad9a000 [ 89.926566][ T6153] x23: ffff0000ca41b818 x22: 000000000000000b x21: ffff800013cb1530 [ 89.927998][ T6153] x20: ffff0000ca41b810 x19: ffff0000dad9a0f0 x18: 1fffe00033e6db7e [ 89.929499][ T6153] x17: ffff8000153bd000 x16: ffff8000082dd284 x15: 0000000000000000 [ 89.930978][ T6153] x14: 0000000000000018 x13: 0000000000ff0100 x12: ffff800017abdd70 [ 89.932485][ T6153] x11: ff008000103cee30 x10: 0000000000000000 x9 : ffff8000103cee30 [ 89.933935][ T6153] x8 : ffff0000cbc85400 x7 : 0000000000000000 x6 : 000000000000003f [ 89.935337][ T6153] x5 : 0000000000000040 x4 : ffffffffffffffe0 x3 : 0000000000000000 [ 89.936905][ T6153] x2 : ffff0000ca41b810 x1 : ffff0000dad9a000 x0 : ffff0000ca41b828 [ 89.938480][ T6153] Call trace: [ 89.939119][ T6153] nft_pipapo_destroy+0x784/0x7e0 [ 89.940039][ T6153] nft_set_destroy+0x3ac/0x89c [ 89.940924][ T6153] nf_tables_trans_destroy_work+0x9a4/0xd88 [ 89.942025][ T6153] process_one_work+0x7e4/0x13bc [ 89.942935][ T6153] worker_thread+0x8cc/0xfe8 [ 89.943729][ T6153] kthread+0x254/0x2e0 [ 89.944450][ T6153] ret_from_fork+0x10/0x20 [ 89.945229][ T6153] irq event stamp: 2180 [ 89.945970][ T6153] hardirqs last enabled at (2179): [] __free_object+0x1e8/0x878 [ 89.947585][ T6153] hardirqs last disabled at (2180): [] el1_dbg+0x24/0x80 [ 89.949079][ T6153] softirqs last enabled at (1800): [] local_bh_enable+0x10/0x34 [ 89.950747][ T6153] softirqs last disabled at (1798): [] local_bh_disable+0x10/0x34 [ 89.952451][ T6153] ---[ end trace 0000000000000000 ]--- [ 89.974401][T12095] MINIX-fs: file system does not have enough imap blocks allocated. Refusing to mount. [ 89.976070][T12095] MINIX-fs: bad superblock [ 90.028662][T12104] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.089766][ T4343] Bluetooth: hci2: command 0x0409 tx timeout