last executing test programs: 2.432371559s ago: executing program 2 (id=1374): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r0, &(0x7f000000ae80)={0x2020}, 0x2020) pread64(r0, &(0x7f00000002c0)=""/220, 0xdc, 0x0) read$FUSE(r0, &(0x7f0000004b80)={0x2020}, 0x2020) 2.229063622s ago: executing program 2 (id=1381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x7e}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000130a03010000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) 2.172055139s ago: executing program 0 (id=1383): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001300)="a993f9c868e21aae1b9f4cb556dd62e6d46608de3185556166a2b48853464e56120a9a1c81172d3006212e46929af1f8d17159e08bad0cf6b46fe9b50156a1cbdfaa265218642a062cdbd3ac4ede9443ef32b1a7221e27166f48136a18e85c8bc36868c709bcd9aeb5a24e2df1ba2156409a9c6c791782ea7c57365f689af5ef21c79a11b278c015ba1e87b005d0b092a42373e658009a0a924fc5f4561a79fa", 0xa0}, {&(0x7f00000013c0)="0e85aa10ff514146995133c56f9e1b63d81fb1c54a052e3b994aeb8d9ca6f3b14f6e4476183ee98acd3ae19d6e115c71f52c81a8a2f7f6df18a91e661381eb5f927914b8ff301922abfbd30cae011b6d9915f38e8832e38718265ea12199d58fdcb97678bad8b3453622b6827d43835caa08de3fe7c5bbf40faada98de581d1754bae64e7b7a8e0ea6a5df499ca85d", 0x8f}, {&(0x7f00000014c0)="3b37c3b3cb363d785d2010697d4bb89df7", 0x11}], 0x3}}], 0x1, 0x0) 2.081920439s ago: executing program 0 (id=1386): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.976801731s ago: executing program 2 (id=1388): r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000001c0)={0x1}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x5000940e, &(0x7f0000003a80)={{}, "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"}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x0, 0x6, 0x5}) 1.971544152s ago: executing program 0 (id=1399): syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000200)={[{@compress}]}, 0x1, 0x50ed, &(0x7f0000005180)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1.671813547s ago: executing program 3 (id=1395): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000a80)='./file0\x00', 0x1808003, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f7265636f766572792c005385e3e531ae72a8acc92b4778292371dfb377968aace8a5c717c6a1b82e95d19e37f49bf33f5ac522609b6e5a82b135028ce62bafeae60fdc3cffe2cef024728f6f23fa15a68bc81e4bd09a8cdc8492203a8f37d477", @ANYRESHEX=0x0], 0x4, 0xa0e, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) getdents64(r0, 0x0, 0x22) 1.529860623s ago: executing program 1 (id=1398): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000040"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0x4c4f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100), 0x6c7, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38) 1.4661931s ago: executing program 3 (id=1401): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 1.440443384s ago: executing program 1 (id=1402): unshare(0x2000400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x1, 0x5000000, 0x2000008000c5e) 1.410446597s ago: executing program 3 (id=1404): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x3, &(0x7f0000000140)=""/192, 0x20000057) 1.317773218s ago: executing program 4 (id=1405): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, 0x0) 1.288229081s ago: executing program 3 (id=1406): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 1.155907016s ago: executing program 1 (id=1407): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 1.028871661s ago: executing program 1 (id=1408): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r0, &(0x7f000000ae80)={0x2020}, 0x2020) pread64(r0, &(0x7f00000002c0)=""/220, 0xdc, 0x0) read$FUSE(r0, &(0x7f0000004b80)={0x2020}, 0x2020) 1.028333141s ago: executing program 4 (id=1409): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 998.762294ms ago: executing program 4 (id=1410): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x1ff, 0xca081) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045510, 0xffffffffffffffff) 965.079038ms ago: executing program 3 (id=1411): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/75, 0x1c}], 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 962.829239ms ago: executing program 0 (id=1412): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SIOCSIFHWADDR(r0, 0x8b0d, &(0x7f0000000080)={'gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}) 791.891718ms ago: executing program 4 (id=1413): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc}}}}, 0x28}}, 0x0) 746.648344ms ago: executing program 3 (id=1414): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000340)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 664.158573ms ago: executing program 1 (id=1415): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) r2 = dup(r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) 663.911523ms ago: executing program 4 (id=1416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 631.404267ms ago: executing program 2 (id=1417): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, 0x0) 573.417404ms ago: executing program 4 (id=1418): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@acl}, {@nointr}, {@atime_quantum={'atime_quantum', 0x3d, 0x7}}, {@localflocks}, {@localalloc={'localalloc', 0x3d, 0x3}}, {@localflocks}, {@intr}, {@heartbeat_none}]}, 0x1, 0x4430, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x10c6a, 0x7fff}) 475.487285ms ago: executing program 1 (id=1419): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x814, &(0x7f0000005800)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6163746976655f6c6f67733d362c6163746976655f6c6f67733d342c6a71666d743d76667376312c6163746976655f6c6f67733d3600000000615f666c7573682c6261636b67736f756e645f67633d6f6e2c6673796e635f6d6f64653d7374726963742c657874656e745fe3616368652c76c202748e327a69cd00f4f0d086ccccef7b6f05185fa7202d3de5fa04f8e54f6efc92b384d8740ade28b1d9b5877b8c6d4a206d0d0f202ceea69c9a567ef2a4b849ca4299ced7216150550b526fbbb003890381533d4e125766beb376faa027305d810d45cd14305e27081968"], 0x1, 0x5536, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x541b, 0x0) 309.918624ms ago: executing program 0 (id=1420): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="636f6465706167652c6d6163696e7569742c6572726f72733d636f6e74696e75652c646d617330303030303030303030303030303030303030372c646d61736b3d30303430303030303030303030303030303030303031302c6572723d6c25cfd845c9a3f1b77abf0bf76f72733d636f6e74696e75652c757466382c616c6c6f775f7574696d653d3030303030303030303030303030", @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d64656661756c742c0005945c9bb548387f70671dbb30ffc816e56645eb180b252c0c9fbce7a51fe4311c99a452877f5a676949945ab4e7ae0976f36c2d9a6e3dfe5a4ba661a79591ff3ab34c862126059d95c19d569e4639e1621395f14a1a52821a016a798c07edb22b80dbedfd38a6181ac6777e0182c849b8a7c675b2da16ea969d5846da6372ce0a4f3e7ea022a7eac4b579a094e05c9a92841005280c8f4ea2f2f25e99c50d36490c1e5fa050c8f272f71556661ddd0e99b252a18f008fbfb7706781a865e2d4ccdfa03fa0642fd2815d1eabffbd593e16e418c48f56b77076fe2d8214a2a00b3251b4358237bbd7e46f58222f08422216800a7938eca1f24c187b1600ede5a6ca5f3ace5d55398ab4e36e380790b0b4f477da1fc698ac0a7830e484352df323d41d8d1711e226ef8a7b5b4be118934f998127"], 0x0, 0x150b, &(0x7f0000000580)="$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") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000c80)={[{@nobarrier}, {@type={'type', 0x3d, "b78ba21f"}}, {@force}, {@nls={'nls', 0x3d, 'cp1255'}}, {@force}, {@umask={'umask', 0x3d, 0xb}}, {@uid}, {@nodecompose}, {@gid}]}, 0x2, 0x6da, &(0x7f0000000580)="$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") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="6f73782e26894443fb62646d5bf3df4acca2af627f41f39aa752f1ed4d7e572af1831b8d3a"], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 295.130056ms ago: executing program 2 (id=1421): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 1.25384ms ago: executing program 2 (id=1422): syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000200)={[{@compress}]}, 0x1, 0x50ed, &(0x7f0000005180)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 0s ago: executing program 0 (id=1432): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x1a, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) kernel console output (not intermixed with test programs): csec0: link becomes ready [ 43.520364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.526824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.529420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.533005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.549191][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.551325][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.553337][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.555292][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.559333][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.575052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.577245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.580510][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.582687][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.584635][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.590516][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.592353][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.594563][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.603301][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.609907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.612230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.640586][ T4300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.642490][ T4300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.644187][ T4300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.649771][ T4300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.657583][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.659686][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.661864][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.663808][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.666365][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.668544][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.670457][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.672514][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.675591][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.682472][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.684348][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.696649][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.698910][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.701105][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.727366][ T4301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.729182][ T4301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.731120][ T4301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.732875][ T4301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.791574][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.793187][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.804852][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.810365][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.812401][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.814557][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.823881][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.826625][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.829444][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.831736][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.834727][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.842531][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.844604][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.849336][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.897824][ T4295] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.900270][ T4295] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.901917][ T4295] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.903726][ T4295] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.933397][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.935082][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.947296][ T775] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.988221][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.989989][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.992405][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.065590][ T775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.067829][ T775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.071218][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.093847][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.095564][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.114572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.119704][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.121420][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.133245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.153364][ T775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.155101][ T775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.176439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.352142][ T4406] loop4: detected capacity change from 0 to 512 [ 44.381820][ T4406] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 44.470161][ T4411] loop3: detected capacity change from 0 to 2048 [ 44.573299][ T4411] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 44.604424][ T4411] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 44.677680][ T4411] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 44.680375][ T4411] EXT4-fs (loop3): This should not happen!! Data will be lost [ 44.680375][ T4411] [ 44.684693][ T4419] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 44.706845][ T4411] EXT4-fs (loop3): Total free blocks count 0 [ 44.708281][ T4411] EXT4-fs (loop3): Free/Dirty block details [ 44.724411][ T4411] EXT4-fs (loop3): free_blocks=2415919104 [ 44.727049][ T4411] EXT4-fs (loop3): dirty_blocks=64 [ 44.728281][ T4411] EXT4-fs (loop3): Block reservation details [ 44.744634][ T4411] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 44.847543][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 44.946434][ T4439] loop3: detected capacity change from 0 to 256 [ 44.963547][ T4398] loop0: detected capacity change from 0 to 32768 [ 44.979058][ T4398] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4398) [ 44.997026][ T4398] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 45.000601][ T4439] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 45.012322][ T4398] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 45.014013][ T4398] BTRFS info (device loop0): using free space tree [ 45.028470][ T4442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.30'. [ 45.210325][ T4398] BTRFS info (device loop0): enabling ssd optimizations [ 45.256653][ T4300] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 45.296530][ T4307] Bluetooth: hci1: command tx timeout [ 45.297657][ T4307] Bluetooth: hci0: command tx timeout [ 45.377551][ T4311] Bluetooth: hci4: command tx timeout [ 45.378699][ T4311] Bluetooth: hci2: command tx timeout [ 45.379887][ T4311] Bluetooth: hci3: command tx timeout [ 45.563436][ T4482] loop4: detected capacity change from 0 to 1024 [ 45.576339][ T4478] loop1: detected capacity change from 0 to 2048 [ 45.652340][ T4478] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 45.731985][ T4482] syz.4.37: attempt to access beyond end of device [ 45.731985][ T4482] loop4: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 45.750850][ T4482] Buffer I/O error on dev loop4, logical block 2889, lost async page write [ 45.827312][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 46.036843][ T4499] loop3: detected capacity change from 0 to 128 [ 46.088834][ T4499] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.103043][ T4502] loop4: detected capacity change from 0 to 164 [ 46.144257][ T4502] Unable to read rock-ridge attributes [ 46.173269][ T4504] ALSA: mixer_oss: invalid OSS volume '' [ 46.188223][ T27] audit: type=1326 audit(46.160:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.1.48" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8894afa8 code=0x0 [ 46.207821][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 46.229579][ T4510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 46.319413][ T4515] loop4: detected capacity change from 0 to 512 [ 46.321096][ T4515] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.325824][ T4512] loop3: detected capacity change from 0 to 4096 [ 46.331520][ T4515] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.51: invalid block [ 46.345629][ T4512] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.345659][ T4515] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.51: invalid indirect mapped block 10 (level 1) [ 46.352548][ T4515] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.51: invalid indirect mapped block 8 (level 1) [ 46.368316][ T4515] EXT4-fs (loop4): 1 truncate cleaned up [ 46.369545][ T4515] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 46.457921][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 46.460883][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 46.619334][ T4529] loop3: detected capacity change from 0 to 512 [ 46.622673][ T4529] EXT4-fs: Ignoring removed i_version option [ 46.624098][ T4529] ext4: Unknown parameter 'fsname' [ 46.666352][ T4457] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 47.180956][ T4551] loop2: detected capacity change from 0 to 1024 [ 47.208687][ T4541] loop3: detected capacity change from 0 to 32768 [ 47.263216][ T775] hfsplus: b-tree write err: -5, ino 4 [ 47.274623][ T4541] XFS (loop3): Mounting V5 Filesystem [ 47.375830][ T4311] Bluetooth: hci0: command tx timeout [ 47.377137][ T4311] Bluetooth: hci1: command tx timeout [ 47.381699][ T4530] loop4: detected capacity change from 0 to 65536 [ 47.393082][ T4541] XFS (loop3): Ending clean mount [ 47.403910][ T4541] XFS (loop3): Quotacheck needed: Please wait. [ 47.409606][ T9] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 47.412036][ T9] XFS (loop3): Unmount and run xfs_repair [ 47.413641][ T9] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 47.415662][ T9] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 47.423977][ T9] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 47.425655][ T9] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 47.428290][ T9] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 47.430077][ T9] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 47.431845][ T9] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 47.433725][ T9] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 47.436282][ T9] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 47.440498][ T9] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x1e8/0x3a0" at daddr 0x3 len 1 error 74 [ 47.445434][ T4541] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 47.456398][ T4299] Bluetooth: hci3: command tx timeout [ 47.457464][ T4299] Bluetooth: hci2: command tx timeout [ 47.458687][ T4299] Bluetooth: hci4: command tx timeout [ 47.504593][ T4530] XFS (loop4): Mounting V5 Filesystem [ 47.521269][ T4344] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 47.523614][ T4344] XFS (loop3): Unmount and run xfs_repair [ 47.526167][ T4344] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 47.559109][ T4344] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 47.561021][ T4344] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 47.578343][ T4344] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 47.580158][ T4344] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 47.581862][ T4344] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 47.601832][ T4344] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 47.623194][ T4344] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 47.632793][ T4344] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 47.640488][ T4541] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x1e8/0x3a0" at daddr 0x3 len 1 error 74 [ 47.652940][ T4541] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1b20/0x24c0 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 47.661381][ T4530] XFS (loop4): Ending clean mount [ 47.664006][ T4541] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 47.672055][ T4530] XFS (loop4): Quotacheck needed: Please wait. [ 47.701001][ T4530] XFS (loop4): Quotacheck: Done. [ 47.733334][ T4302] XFS (loop3): Unmounting Filesystem [ 47.780760][ C0] Illegal XDP return value 16128 on prog (id 1) dev bond_slave_0, expect packet loss! [ 47.800898][ T4295] XFS (loop4): Unmounting Filesystem [ 47.930128][ T4593] loop2: detected capacity change from 0 to 256 [ 47.946949][ T4593] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 47.960396][ T4593] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 47.962549][ T4593] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 47.964303][ T4593] UDF-fs: Scanning with blocksize 512 failed [ 47.968880][ T4593] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 47.981738][ T4593] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 48.175854][ T4311] Bluetooth: hci5: command 0xfc11 tx timeout [ 48.176463][ T4307] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 48.354796][ T4609] process 'syz.3.87' launched './file1' with NULL argv: empty string added [ 49.013553][ T4641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.102'. [ 49.114862][ T4646] capability: warning: `syz.3.104' uses 32-bit capabilities (legacy support in use) [ 49.249216][ T4654] bridge0: port 3(syz_tun) entered blocking state [ 49.256764][ T4654] bridge0: port 3(syz_tun) entered disabled state [ 49.259753][ T4654] device syz_tun entered promiscuous mode [ 49.262257][ T4654] bridge0: port 3(syz_tun) entered blocking state [ 49.263768][ T4654] bridge0: port 3(syz_tun) entered forwarding state [ 49.350796][ T4658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.109'. [ 49.404353][ T4662] binder: 4661:4662 ioctl c018620c 200005c0 returned -1 [ 49.521568][ T4668] loop4: detected capacity change from 0 to 512 [ 49.523369][ T4668] ======================================================= [ 49.523369][ T4668] WARNING: The mand mount option has been deprecated and [ 49.523369][ T4668] and is ignored by this kernel. Remove the mand [ 49.523369][ T4668] option from the mount to silence this warning. [ 49.523369][ T4668] ======================================================= [ 49.576142][ T4668] EXT4-fs: Ignoring removed oldalloc option [ 49.609851][ T4674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.118'. [ 49.637881][ T4668] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 49.640230][ T4668] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 49.642280][ T4668] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.115: Failed to acquire dquot type 0 [ 49.673505][ T4679] capability: warning: `syz.2.120' uses deprecated v2 capabilities in a way that may be insecure [ 49.679550][ T4668] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 49.681669][ T4668] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 49.683737][ T4668] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.115: Failed to acquire dquot type 0 [ 49.744477][ T4668] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 49.786605][ T4668] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 49.788524][ T4668] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.115: Failed to acquire dquot type 0 [ 49.794008][ T4653] loop3: detected capacity change from 0 to 32768 [ 49.797020][ T4653] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.107 (4653) [ 49.807278][ T4653] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 49.809638][ T4653] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 49.811417][ T4653] BTRFS info (device loop3): using free space tree [ 49.813384][ T4668] EXT4-fs (loop4): 1 orphan inode deleted [ 49.814508][ T4668] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 49.875297][ T4668] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 49.879921][ T4668] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 49.882010][ T4668] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.115: Failed to acquire dquot type 0 [ 49.935630][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 49.963435][ T4697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 49.973167][ T4697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.123'. [ 50.062755][ T4653] BTRFS info (device loop3): enabling ssd optimizations [ 50.089193][ T4711] loop0: detected capacity change from 0 to 1024 [ 50.141793][ T4717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.129'. [ 50.143762][ T4717] netlink: 52 bytes leftover after parsing attributes in process `syz.1.129'. [ 50.145513][ T4717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.129'. [ 50.172363][ T4711] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 50.222560][ T4302] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 50.241231][ T4307] Bluetooth: hci0: failed to read key size for handle 201 [ 50.362681][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 50.444136][ T4736] netlink: 52 bytes leftover after parsing attributes in process `syz.0.134'. [ 50.462960][ T4732] loop3: detected capacity change from 0 to 2048 [ 50.464451][ T4738] loop4: detected capacity change from 0 to 256 [ 50.467120][ T4738] exfat: Deprecated parameter 'utf8' [ 50.468485][ T4738] exfat: Deprecated parameter 'namecase' [ 50.469574][ T4738] exfat: Deprecated parameter 'utf8' [ 50.470699][ T4738] exfat: Deprecated parameter 'utf8' [ 50.492671][ T4738] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e8072e, utbl_chksum : 0xe619d30d) [ 50.541473][ T4740] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.829464][ T4759] loop2: detected capacity change from 0 to 256 [ 50.884658][ T4759] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 50.893726][ T4759] FAT-fs (loop2): Filesystem has been set read-only [ 50.895269][ T4759] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 50.899399][ T4759] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 50.922193][ T4764] omfs: Invalid superblock (0) [ 50.925449][ T4765] netlink: 104 bytes leftover after parsing attributes in process `syz.0.147'. [ 51.043187][ T4773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 51.381481][ T4800] loop1: detected capacity change from 0 to 128 [ 51.414607][ T4800] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 51.435088][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 51.501754][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 51.950970][ T4797] loop0: detected capacity change from 0 to 32768 [ 52.012852][ T4797] JBD2: Ignoring recovery information on journal [ 52.152687][ T4805] loop3: detected capacity change from 0 to 40427 [ 52.183556][ T4797] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 52.207445][ T4805] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.221781][ T4794] loop2: detected capacity change from 0 to 40427 [ 52.243060][ T4794] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 52.244818][ T4794] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 52.277322][ T4805] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 52.316981][ T4794] F2FS-fs (loop2): Found nat_bits in checkpoint [ 52.398384][ T4302] syz-executor: attempt to access beyond end of device [ 52.398384][ T4302] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 52.425406][ T4794] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 52.429458][ T4794] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 52.465273][ T4300] ocfs2: Unmounting device (7,0) on (node local) [ 52.833758][ T4817] loop4: detected capacity change from 0 to 65536 [ 52.909196][ T4852] loop1: detected capacity change from 0 to 16 [ 52.911224][ T4852] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 52.930809][ T4817] XFS (loop4): Mounting V5 Filesystem [ 53.085697][ T4861] tipc: Enabling of bearer rejected, failed to enable media [ 53.102895][ T4817] XFS (loop4): Ending clean mount [ 53.253827][ T4295] XFS (loop4): Unmounting Filesystem [ 53.402729][ T4879] loop3: detected capacity change from 0 to 4096 [ 53.416805][ T4879] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 53.463774][ T4879] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 53.564585][ T4894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'. [ 53.567401][ T4879] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 53.712238][ T4302] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 53.781826][ T4901] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 54.074650][ T4922] loop2: detected capacity change from 0 to 4096 [ 54.108185][ T4922] NILFS (loop2): invalid segment: Checksum error in segment payload [ 54.110277][ T4922] NILFS (loop2): trying rollback from an earlier position [ 54.155956][ T4922] NILFS (loop2): recovery complete [ 54.169321][ T4933] loop0: detected capacity change from 0 to 256 [ 54.177566][ T4932] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.224243][ T4933] FAT-fs (loop0): Directory bread(block 64) failed [ 54.227815][ T4933] FAT-fs (loop0): Directory bread(block 65) failed [ 54.229197][ T4933] FAT-fs (loop0): Directory bread(block 66) failed [ 54.230681][ T4933] FAT-fs (loop0): Directory bread(block 67) failed [ 54.247550][ T4933] FAT-fs (loop0): Directory bread(block 68) failed [ 54.249069][ T4933] FAT-fs (loop0): Directory bread(block 69) failed [ 54.250444][ T4933] FAT-fs (loop0): Directory bread(block 70) failed [ 54.268448][ T4933] FAT-fs (loop0): Directory bread(block 71) failed [ 54.270053][ T4933] FAT-fs (loop0): Directory bread(block 72) failed [ 54.271474][ T4933] FAT-fs (loop0): Directory bread(block 73) failed [ 54.336472][ T4933] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 54.339099][ T4933] FAT-fs (loop0): Filesystem has been set read-only [ 54.346143][ T4933] syz.0.220: attempt to access beyond end of device [ 54.346143][ T4933] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 54.348868][ T4933] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 54.350713][ T4933] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 54.352285][ T4933] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 54.353911][ T4933] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 54.365791][ T4933] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 54.370894][ T4933] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 54.372576][ T4933] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 54.374191][ T4933] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 54.382557][ T4939] loop3: detected capacity change from 0 to 1024 [ 54.382596][ T4933] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 54.385563][ T4933] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 54.391884][ T4933] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 54.393843][ T4933] syz.0.220: attempt to access beyond end of device [ 54.393843][ T4933] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 54.403873][ T4940] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 54.520784][ T11] hfsplus: b-tree write err: -5, ino 4 [ 54.650857][ T27] audit: type=1326 audit(54.620:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.4.227" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d4afa8 code=0x0 [ 54.656461][ T4951] block nbd1: NBD_DISCONNECT [ 54.688823][ T4952] loop2: detected capacity change from 0 to 256 [ 54.757679][ T4952] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 54.763307][ T4952] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 54.767912][ T4952] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 54.770771][ T4952] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 54.829121][ T4301] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 54.864651][ T4961] Soft offlining pfn 0x1438ac at process virtual address 0x20000000 [ 54.884365][ T4961] Soft offlining pfn 0x143de7 at process virtual address 0x20001000 [ 54.899495][ T4961] Soft offlining pfn 0x14643a at process virtual address 0x20002000 [ 54.901562][ T4961] Soft offlining pfn 0x120a9e at process virtual address 0x20003000 [ 54.903891][ T4961] Soft offlining pfn 0x120a9d at process virtual address 0x20004000 [ 54.911872][ T4961] Soft offlining pfn 0x144f0f at process virtual address 0x20005000 [ 54.915410][ T4961] Soft offlining pfn 0x120242 at process virtual address 0x20006000 [ 54.918375][ T4961] Soft offlining pfn 0x1208f7 at process virtual address 0x20007000 [ 54.921857][ T4961] Soft offlining pfn 0x11fa10 at process virtual address 0x20008000 [ 54.923703][ T4961] Soft offlining pfn 0x11f7b0 at process virtual address 0x20009000 [ 54.934914][ T4961] Soft offlining pfn 0x14384f at process virtual address 0x2000a000 [ 54.942729][ T4961] soft_offline: 0x14384f: invalidated [ 54.973822][ T4966] device gretap0 entered promiscuous mode [ 54.978059][ T4970] loop2: detected capacity change from 0 to 64 [ 55.016716][ T4966] device erspan0 entered promiscuous mode [ 55.042427][ T4970] syz.2.237: attempt to access beyond end of device [ 55.042427][ T4970] loop2: rw=0, sector=32783, nr_sectors = 1 limit=64 [ 55.048794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 55.089853][ T4974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 55.191649][ T4979] netlink: 165 bytes leftover after parsing attributes in process `syz.0.242'. [ 55.194503][ T14] kernel write not supported for file /102/setgroups (pid: 14 comm: kworker/0:1) [ 55.294169][ T27] audit: type=1326 audit(55.260:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4983 comm="syz.3.246" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa954afa8 code=0x0 [ 55.918956][ T5028] loop2: detected capacity change from 0 to 128 [ 55.969661][ T5030] loop1: detected capacity change from 0 to 1024 [ 56.032146][ T5030] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 56.072592][ T5030] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2739: inode #12: comm syz.1.266: corrupted in-inode xattr [ 56.082493][ T5030] EXT4-fs (loop1): Remounting filesystem read-only [ 56.085671][ T5030] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 56.174252][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 56.300093][ T5043] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 56.671957][ T5071] loop2: detected capacity change from 0 to 2048 [ 56.730589][ T5071] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 56.838456][ T5049] loop4: detected capacity change from 0 to 32768 [ 56.876869][ T4301] EXT4-fs (loop2): unmounting filesystem. [ 56.916976][ T5049] XFS (loop4): Mounting V5 Filesystem [ 57.023264][ T5049] XFS (loop4): Ending clean mount [ 57.042326][ T5049] XFS (loop4): Quotacheck needed: Please wait. [ 57.069111][ T5049] XFS (loop4): Quotacheck: Done. [ 57.109195][ T5066] loop1: detected capacity change from 0 to 32768 [ 57.119457][ T5066] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.276 (5066) [ 57.138058][ T5066] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 57.145925][ T5066] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 57.151094][ T5066] BTRFS info (device loop1): using free space tree [ 57.164763][ T4295] XFS (loop4): Unmounting Filesystem [ 57.377598][ T5066] BTRFS info (device loop1): enabling ssd optimizations [ 57.391789][ T5127] loop3: detected capacity change from 0 to 4096 [ 57.438498][ T5127] NILFS (loop3): invalid segment: Checksum error in segment payload [ 57.441619][ T5127] NILFS (loop3): trying rollback from an earlier position [ 57.463517][ T5127] NILFS (loop3): recovery complete [ 57.474684][ T5143] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 57.655587][ T4294] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 57.935283][ T5163] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 57.993921][ T5169] loop3: detected capacity change from 0 to 256 [ 58.019778][ T5169] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 58.044408][ T5171] netlink: 44 bytes leftover after parsing attributes in process `syz.0.302'. [ 58.328501][ T5178] loop0: detected capacity change from 0 to 2048 [ 58.358024][ T5191] loop3: detected capacity change from 0 to 64 [ 58.359854][ T5178] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 58.442311][ T5191] Trying to free block not in datazone [ 58.443705][ T5191] Trying to free block not in datazone [ 58.660457][ T5211] tun0: tun_chr_ioctl cmd 2148553947 [ 58.859307][ T5222] loop0: detected capacity change from 0 to 1024 [ 58.939476][ T5222] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 58.979119][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 58.999440][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 59.130726][ T5204] loop4: detected capacity change from 0 to 32768 [ 59.203985][ T5204] XFS (loop4): Mounting V5 Filesystem [ 59.305429][ T5204] XFS (loop4): Ending clean mount [ 59.433803][ T4295] XFS (loop4): Unmounting Filesystem [ 59.544659][ T5228] loop3: detected capacity change from 0 to 32768 [ 59.597460][ T5228] XFS (loop3): Mounting V5 Filesystem [ 59.631121][ T5223] loop2: detected capacity change from 0 to 32768 [ 59.724045][ T5228] XFS (loop3): Ending clean mount [ 59.765106][ T5228] XFS (loop3): Quotacheck needed: Please wait. [ 59.811667][ T5228] XFS (loop3): Quotacheck: Done. [ 59.871134][ T5253] loop1: detected capacity change from 0 to 40427 [ 59.874389][ T5253] F2FS-fs (loop1): Invalid segment/section count (24 != 24 * 3) [ 59.889560][ T5253] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 59.907995][ T5253] F2FS-fs (loop1): invalid crc value [ 59.910101][ T4302] XFS (loop3): Unmounting Filesystem [ 59.941506][ T5253] F2FS-fs (loop1): Found nat_bits in checkpoint [ 59.990995][ T5253] F2FS-fs (loop1): Start checkpoint disabled! [ 60.056401][ T5253] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 60.057947][ T5253] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 60.160956][ T5269] loop4: detected capacity change from 0 to 4096 [ 60.164546][ T5269] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 60.179516][ T5272] ipt_ECN: cannot use operation on non-tcp rule [ 60.218245][ T5269] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 60.292522][ T5276] loop2: detected capacity change from 0 to 256 [ 60.294436][ T5276] exfat: Deprecated parameter 'utf8' [ 60.327448][ T5276] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 60.552898][ T775] kworker/u4:5: attempt to access beyond end of device [ 60.552898][ T775] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 60.673575][ T5294] loop2: detected capacity change from 0 to 64 [ 60.843481][ T27] audit: type=1326 audit(60.810:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.4.357" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d4afa8 code=0x0 [ 61.114648][ T5310] loop1: detected capacity change from 0 to 8192 [ 61.139979][ T5310] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 61.148237][ T5310] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 61.150681][ T5310] REISERFS (device loop1): using ordered data mode [ 61.152086][ T5310] reiserfs: using flush barriers [ 61.156628][ T5310] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 61.160774][ T5310] REISERFS (device loop1): checking transaction log (loop1) [ 61.175677][ T5310] REISERFS (device loop1): Using r5 hash to sort names [ 61.179577][ T5310] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 61.183247][ T5310] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 61.239521][ T5316] loop2: detected capacity change from 0 to 2048 [ 61.290928][ T5316] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 61.315193][ T5310] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 61.346998][ T5311] loop3: detected capacity change from 0 to 40427 [ 61.347377][ T5310] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 61.359162][ T5316] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.390394][ T5316] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 61.405163][ T5316] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.405163][ T5316] [ 61.415259][ T5316] EXT4-fs (loop2): Total free blocks count 0 [ 61.425388][ T5316] EXT4-fs (loop2): Free/Dirty block details [ 61.430171][ T5316] EXT4-fs (loop2): free_blocks=2415919104 [ 61.437152][ T5316] EXT4-fs (loop2): dirty_blocks=16 [ 61.439529][ T5311] F2FS-fs (loop3): Found nat_bits in checkpoint [ 61.443403][ T5316] EXT4-fs (loop2): Block reservation details [ 61.453279][ T5316] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 61.463185][ T5311] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 61.482201][ T5304] loop0: detected capacity change from 0 to 40427 [ 61.487073][ T5304] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 61.489940][ T5304] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 61.504121][ T5304] F2FS-fs (loop0): invalid crc value [ 61.521694][ T4302] syz-executor: attempt to access beyond end of device [ 61.521694][ T4302] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 61.540857][ T5304] F2FS-fs (loop0): Found nat_bits in checkpoint [ 61.567728][ T4301] EXT4-fs (loop2): unmounting filesystem. [ 61.570198][ T5304] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 61.571835][ T5304] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 61.702348][ T4300] syz-executor: attempt to access beyond end of device [ 61.702348][ T4300] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 61.731621][ T5331] bond0: option mode: unable to set because the bond device has slaves [ 61.883607][ T5339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.370'. [ 61.897509][ T5339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.370'. [ 62.137619][ T5354] loop1: detected capacity change from 0 to 1764 [ 62.202660][ T5357] loop4: detected capacity change from 0 to 2048 [ 62.220779][ T5357] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 62.291694][ T5358] loop0: detected capacity change from 0 to 4096 [ 62.466258][ T5358] ntfs3: loop0: failed to convert "0080" to koi8-ru [ 62.480303][ T5358] ntfs3: loop0: failed to convert name for inode 1e. [ 62.513245][ T5368] loop4: detected capacity change from 0 to 512 [ 62.538960][ T5368] EXT2-fs (loop4): (no)user_xattr optionsnot supported [ 62.556788][ T5368] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 62.580226][ T5353] loop3: detected capacity change from 0 to 32768 [ 62.621639][ T5353] JBD2: Ignoring recovery information on journal [ 62.674060][ T5353] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 62.735220][ T5375] loop0: detected capacity change from 0 to 1024 [ 62.794962][ T4302] ocfs2: Unmounting device (7,3) on (node local) [ 62.858273][ T5375] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 62.955400][ T5375] Process accounting resumed [ 62.959798][ T5388] loop2: detected capacity change from 0 to 1024 [ 62.963117][ T5383] loop1: detected capacity change from 0 to 2048 [ 63.003756][ T5388] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.024425][ T5388] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 63.030852][ T5383] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 63.060000][ T5388] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 63.062687][ T5388] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.062687][ T5388] [ 63.064934][ T5388] EXT4-fs (loop2): Total free blocks count 0 [ 63.080958][ T5388] EXT4-fs (loop2): Free/Dirty block details [ 63.082454][ T5388] EXT4-fs (loop2): free_blocks=68451041280 [ 63.088549][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 63.090164][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 63.101279][ T5388] EXT4-fs (loop2): dirty_blocks=32 [ 63.102447][ T5388] EXT4-fs (loop2): Block reservation details [ 63.115842][ T5388] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 63.142997][ T5398] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 63.462130][ T5419] loop3: detected capacity change from 0 to 2048 [ 63.489050][ T5420] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.804229][ T5428] loop1: detected capacity change from 0 to 2048 [ 63.842716][ T5428] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 64.016072][ T5441] loop0: detected capacity change from 0 to 16 [ 64.017857][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 64.056952][ T5441] erofs: (device loop0): mounted with root inode @ nid 36. [ 64.203952][ T27] audit: type=1326 audit(64.170:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.4.416" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d4afa8 code=0x0 [ 64.262019][ T5453] loop3: detected capacity change from 0 to 2048 [ 64.284750][ T5458] binder: 5456:5458 ioctl 40046205 0 returned -22 [ 64.306300][ T5458] binder: 5458 RLIMIT_NICE not set [ 64.317092][ T5460] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.325591][ T5459] loop0: detected capacity change from 0 to 2048 [ 64.334452][ T5459] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.336912][ T5459] EXT4-fs: Ignoring removed i_version option [ 64.347780][ T5459] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0) [ 64.352960][ T5462] binder: 5456:5462 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 64.355490][ T5462] binder: 5462 RLIMIT_NICE not set [ 64.461787][ T5466] trusted_key: encrypted_key: keyword 'updat_fault' not recognized [ 64.499401][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.501028][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.784495][ T5464] loop3: detected capacity change from 0 to 40427 [ 64.830906][ T5464] F2FS-fs (loop3): Found nat_bits in checkpoint [ 64.863321][ T5464] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 64.916906][ T4302] syz-executor: attempt to access beyond end of device [ 64.916906][ T4302] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 65.014063][ T5472] loop0: detected capacity change from 0 to 32768 [ 65.068514][ T5472] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 65.073328][ T5472] XFS (loop0): Mounting V5 Filesystem [ 65.149770][ T5472] XFS (loop0): Ending clean mount [ 65.152925][ T5472] XFS (loop0): Quotacheck needed: Please wait. [ 65.210121][ T5472] XFS (loop0): Quotacheck: Done. [ 65.297556][ T4300] XFS (loop0): Unmounting Filesystem [ 65.546838][ T5512] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 65.801935][ T5528] loop0: detected capacity change from 0 to 512 [ 65.813481][ T5528] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 65.822384][ T5528] EXT4-fs (loop0): 1 truncate cleaned up [ 65.823591][ T5528] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 65.966165][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 66.084682][ T5511] loop4: detected capacity change from 0 to 40427 [ 66.089539][ T5511] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 66.090995][ T5511] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 66.135030][ T5511] F2FS-fs (loop4): Found nat_bits in checkpoint [ 66.137449][ T5543] loop3: detected capacity change from 0 to 1024 [ 66.174416][ T5511] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 66.176962][ T5511] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 66.271951][ T775] hfsplus: b-tree write err: -5, ino 4 [ 66.687509][ T5574] bridge0: port 3(vlan2) entered blocking state [ 66.691129][ T5574] bridge0: port 3(vlan2) entered disabled state [ 66.937068][ T78] block nbd1: Attempted send on invalid socket [ 66.938661][ T78] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 66.972214][ T5591] usb usb8: usbfs: process 5591 (syz.1.472) did not claim interface 0 before use [ 66.984195][ T5595] loop4: detected capacity change from 0 to 2048 [ 66.989234][ T5595] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 66.991649][ T5595] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 67.007519][ T5595] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.136941][ T5603] loop4: detected capacity change from 0 to 512 [ 67.139051][ T5603] EXT2-fs (loop4): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 67.160007][ T5603] EXT2-fs (loop4): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 67.181796][ T5603] syz.4.477: attempt to access beyond end of device [ 67.181796][ T5603] loop4: rw=0, sector=1022032, nr_sectors = 8 limit=512 [ 67.390751][ T5617] loop3: detected capacity change from 0 to 2048 [ 67.429255][ T5620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 67.441125][ T5617] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 67.497926][ T4307] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 67.497964][ T5626] Injecting memory failure for pfn 0x1227a8 at process virtual address 0x20000000 [ 67.540601][ T5626] Memory failure: 0x1227a8: recovery action for dirty LRU page: Recovered [ 67.561494][ T5626] Injecting memory failure for pfn 0x121419 at process virtual address 0x20001000 [ 67.602851][ T5626] Memory failure: 0x121419: recovery action for clean LRU page: Recovered [ 67.654991][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 68.194940][ T5633] loop0: detected capacity change from 0 to 32768 [ 68.387559][ T5667] loop3: detected capacity change from 0 to 64 [ 68.419731][ T5641] loop1: detected capacity change from 0 to 32768 [ 68.454091][ T5667] hfs: request for non-existent node 237 in B*Tree [ 68.461701][ T5667] hfs: request for non-existent node 237 in B*Tree [ 68.464139][ T5667] hfs: request for non-existent node 237 in B*Tree [ 68.465638][ T5667] hfs: request for non-existent node 237 in B*Tree [ 68.484854][ T5641] JBD2: Ignoring recovery information on journal [ 68.503448][ T5667] hfs: request for non-existent node 237 in B*Tree [ 68.505128][ T5667] hfs: request for non-existent node 237 in B*Tree [ 68.546942][ T5673] hfs: request for non-existent node 237 in B*Tree [ 68.548395][ T5673] hfs: request for non-existent node 237 in B*Tree [ 68.588014][ T5641] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 68.739166][ T4294] ocfs2: Unmounting device (7,1) on (node local) [ 69.000566][ T5677] loop2: detected capacity change from 0 to 32768 [ 69.005031][ T5677] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.510 (5677) [ 69.028055][ T5677] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 69.030207][ T5677] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 69.050616][ T5677] BTRFS info (device loop2): enabling auto defrag [ 69.051871][ T5677] BTRFS info (device loop2): doing ref verification [ 69.053956][ T5677] BTRFS info (device loop2): max_inline at 0 [ 69.055219][ T5677] BTRFS info (device loop2): force clearing of disk cache [ 69.085674][ T5677] BTRFS info (device loop2): turning on sync discard [ 69.096872][ T5677] BTRFS info (device loop2): disabling free space tree [ 69.295669][ T5684] loop4: detected capacity change from 0 to 40427 [ 69.321036][ T5684] F2FS-fs (loop4): invalid crc value [ 69.353089][ T5724] loop0: detected capacity change from 0 to 512 [ 69.355940][ T5677] BTRFS info (device loop2): enabling ssd optimizations [ 69.357298][ T5684] F2FS-fs (loop4): Found nat_bits in checkpoint [ 69.359240][ T5677] BTRFS info (device loop2): rebuilding free space tree [ 69.369407][ T5724] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 69.390502][ T5684] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 69.411263][ T5684] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 69.440410][ T5684] syz.4.512: attempt to access beyond end of device [ 69.440410][ T5684] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 69.444842][ T5677] BTRFS info (device loop2): disabling free space tree [ 69.446694][ T5677] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 69.448982][ T5677] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 69.471170][ T5684] syz.4.512: attempt to access beyond end of device [ 69.471170][ T5684] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 69.619844][ T24] cfg80211: failed to load regulatory.db [ 69.837242][ T4301] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 70.007236][ T5698] loop1: detected capacity change from 0 to 40427 [ 70.039269][ T5698] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 70.071255][ T5698] F2FS-fs (loop1): invalid crc value [ 70.090322][ T5698] F2FS-fs (loop1): Found nat_bits in checkpoint [ 70.146866][ T5698] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 70.193980][ T5698] F2FS-fs (loop1) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xc44/0x157c [ 70.207889][ T5698] syz.1.518: attempt to access beyond end of device [ 70.207889][ T5698] loop1: rw=2049, sector=45096, nr_sectors = 88 limit=40427 [ 70.342914][ T5762] loop0: detected capacity change from 0 to 512 [ 70.385016][ T5762] EXT4-fs (loop0): 1 truncate cleaned up [ 70.405769][ T5762] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 70.495321][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 70.935258][ T5787] loop4: detected capacity change from 0 to 2048 [ 70.989306][ T5788] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.052060][ T5792] loop1: detected capacity change from 0 to 1024 [ 71.169475][ T5792] syz.1.548: attempt to access beyond end of device [ 71.169475][ T5792] loop1: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 71.172443][ T5792] Buffer I/O error on dev loop1, logical block 2889, lost async page write [ 71.460904][ T5801] loop1: detected capacity change from 0 to 2211 [ 71.475759][ T5801] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (64, 24) [ 71.477352][ T5801] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 71.479252][ T5801] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(512) [ 71.480871][ T5801] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 71.563979][ T4288] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 71.612940][ T5812] loop3: detected capacity change from 0 to 190 [ 71.619846][ T5812] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 71.632310][ T5812] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 71.636518][ T5812] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 71.643079][ T5814] loop4: detected capacity change from 0 to 128 [ 71.646244][ T5812] ntfs: (device loop3): check_mft_mirror(): Failed to read $MFTMirr. [ 71.647878][ T5812] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 71.662526][ T5814] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 71.679407][ T5818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 71.697606][ T5812] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 71.699525][ T5812] ntfs: (device loop3): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 71.701518][ T5812] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 71.733125][ T5812] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 71.759961][ T5812] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 71.797338][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 72.169828][ T5839] loop1: detected capacity change from 0 to 512 [ 72.171551][ T5839] EXT4-fs: Ignoring removed i_version option [ 72.172824][ T5839] ext4: Unknown parameter 'fsname' [ 72.522927][ T5826] loop0: detected capacity change from 0 to 40427 [ 72.540314][ T5826] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 72.541848][ T5826] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 72.549056][ T5826] F2FS-fs (loop0): invalid crc value [ 72.571984][ T5826] F2FS-fs (loop0): Found nat_bits in checkpoint [ 72.615411][ T5826] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 72.617104][ T5826] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 72.753236][ T5868] loop1: detected capacity change from 0 to 1024 [ 72.761153][ T775] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 72.771886][ T775] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 72.839431][ T5735] hfsplus: b-tree write err: -5, ino 4 [ 73.366624][ T5897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.595'. [ 73.396497][ T5899] loop3: detected capacity change from 0 to 512 [ 73.398254][ T5899] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.433462][ T5899] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.596: inode #1: comm syz.3.596: iget: illegal inode # [ 73.474808][ T5899] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.596: error while reading EA inode 1 err=-117 [ 73.480001][ T5899] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.596: inode #1: comm syz.3.596: iget: illegal inode # [ 73.500200][ T5899] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.596: error while reading EA inode 1 err=-117 [ 73.514150][ T5899] EXT4-fs (loop3): 1 orphan inode deleted [ 73.518607][ T5899] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 73.593284][ T5911] loop0: detected capacity change from 0 to 256 [ 73.603358][ T5899] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.596: unexpected EA_INODE flag [ 73.653971][ T5911] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 73.663004][ T5911] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 73.694581][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 73.759653][ T5911] exFAT-fs (loop0): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442) [ 73.759653][ T5911] [ 73.764845][ T5911] exFAT-fs (loop0): Filesystem has been set read-only [ 74.222953][ T5951] loop2: detected capacity change from 0 to 128 [ 74.296942][ T5951] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 74.298482][ T5951] FAT-fs (loop2): Filesystem has been set read-only [ 74.327436][ T5951] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 74.490987][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.619'. [ 74.896820][ T5993] bridge0: port 3(syz_tun) entered blocking state [ 74.903753][ T5993] bridge0: port 3(syz_tun) entered disabled state [ 74.907966][ T5993] device syz_tun entered promiscuous mode [ 74.909453][ T5993] bridge0: port 3(syz_tun) entered blocking state [ 74.911497][ T5993] bridge0: port 3(syz_tun) entered forwarding state [ 74.946991][ T5994] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 75.311892][ T6014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.635'. [ 75.483351][ T6025] loop3: detected capacity change from 0 to 512 [ 75.487637][ T6025] EXT4-fs: Ignoring removed oldalloc option [ 75.535360][ T6029] bridge0: port 3(syz_tun) entered blocking state [ 75.545536][ T6029] bridge0: port 3(syz_tun) entered disabled state [ 75.554700][ T6025] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.639: Failed to acquire dquot type 0 [ 75.555153][ T6029] device syz_tun entered promiscuous mode [ 75.558845][ T6025] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.639: Failed to acquire dquot type 0 [ 75.563233][ T6029] bridge0: port 3(syz_tun) entered blocking state [ 75.564259][ T6025] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.639: Failed to acquire dquot type 0 [ 75.564446][ T6029] bridge0: port 3(syz_tun) entered forwarding state [ 75.574879][ T6025] EXT4-fs (loop3): 1 orphan inode deleted [ 75.580119][ T6025] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 75.610041][ T6025] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.639: Failed to acquire dquot type 0 [ 75.671518][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 75.729384][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.646'. [ 75.831685][ T6044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.648'. [ 75.833696][ T6044] netlink: 52 bytes leftover after parsing attributes in process `syz.2.648'. [ 75.835433][ T6044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.648'. [ 76.044826][ T6058] netlink: 52 bytes leftover after parsing attributes in process `syz.2.655'. [ 76.101888][ T6063] loop0: detected capacity change from 0 to 256 [ 76.139297][ T6063] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 76.141580][ T6063] FAT-fs (loop0): Filesystem has been set read-only [ 76.145340][ T6063] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 76.159314][ T6063] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 76.265094][ T6070] loop1: detected capacity change from 0 to 2048 [ 76.342914][ T6080] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.369604][ T6081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.664'. [ 76.391639][ T6081] netlink: 52 bytes leftover after parsing attributes in process `syz.0.664'. [ 76.396095][ T4307] Bluetooth: hci4: failed to read key size for handle 201 [ 76.516596][ T6087] omfs: Invalid superblock (0) [ 77.034928][ T6121] loop3: detected capacity change from 0 to 128 [ 77.063093][ T6122] loop1: detected capacity change from 0 to 512 [ 77.070515][ T6122] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 77.072956][ T6121] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 77.094580][ T6125] bridge0: port 3(syz_tun) entered blocking state [ 77.103454][ T6125] bridge0: port 3(syz_tun) entered disabled state [ 77.113608][ T6125] device syz_tun entered promiscuous mode [ 77.115111][ T6125] bridge0: port 3(syz_tun) entered blocking state [ 77.116649][ T6125] bridge0: port 3(syz_tun) entered forwarding state [ 77.175804][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 77.485109][ T6149] loop4: detected capacity change from 0 to 512 [ 77.487162][ T6149] EXT4-fs: Ignoring removed i_version option [ 77.488569][ T6149] ext4: Unknown parameter 'fsname' [ 77.742587][ T6165] loop3: detected capacity change from 0 to 1024 [ 77.769691][ T6167] loop4: detected capacity change from 0 to 512 [ 77.786474][ T6167] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 77.804367][ T6165] syz.3.699: attempt to access beyond end of device [ 77.804367][ T6165] loop3: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 77.811257][ T6165] Buffer I/O error on dev loop3, logical block 2889, lost async page write [ 78.152408][ T6155] loop0: detected capacity change from 0 to 32768 [ 78.185503][ T6155] XFS (loop0): Mounting V5 Filesystem [ 78.242171][ T6155] XFS (loop0): Ending clean mount [ 78.251413][ T6155] XFS (loop0): Quotacheck needed: Please wait. [ 78.261158][ T6175] loop1: detected capacity change from 0 to 40427 [ 78.264691][ T4341] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 78.272625][ T4341] XFS (loop0): Unmount and run xfs_repair [ 78.273710][ T4341] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 78.275348][ T4341] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 78.279046][ T4341] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 78.281079][ T4341] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 78.282871][ T4341] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 78.284637][ T4341] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 78.291269][ T4341] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 78.293147][ T6175] F2FS-fs (loop1): Found nat_bits in checkpoint [ 78.293159][ T4341] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 78.296818][ T4341] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 78.299396][ T9] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x1e8/0x3a0" at daddr 0x3 len 1 error 74 [ 78.303788][ T6155] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 78.310856][ T6175] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 78.353733][ T4341] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 78.357482][ T4341] XFS (loop0): Unmount and run xfs_repair [ 78.358485][ T4294] syz-executor: attempt to access beyond end of device [ 78.358485][ T4294] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 78.358795][ T4341] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 78.363497][ T4341] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 78.372712][ T4341] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 78.374502][ T4341] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 78.376738][ T4341] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 78.378675][ T4341] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 78.380672][ T4341] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 78.382666][ T4341] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 78.384564][ T4341] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 78.391683][ T6155] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x1e8/0x3a0" at daddr 0x3 len 1 error 74 [ 78.398659][ T6155] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1b20/0x24c0 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 78.402043][ T6155] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 78.415990][ T4307] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 78.441786][ T4300] XFS (loop0): Unmounting Filesystem [ 78.592933][ T6201] loop3: detected capacity change from 0 to 1024 [ 78.723113][ T131] hfsplus: b-tree write err: -5, ino 4 [ 78.769400][ T6215] loop3: detected capacity change from 0 to 16 [ 78.775539][ T6215] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 79.061644][ T6231] __nla_validate_parse: 6 callbacks suppressed [ 79.061659][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 79.363971][ T6246] loop0: detected capacity change from 0 to 2048 [ 79.432609][ T6252] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.532524][ T6251] loop4: detected capacity change from 0 to 4096 [ 79.549502][ T6251] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 79.601270][ T6251] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 79.675865][ T6251] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 79.737275][ T4295] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 80.045209][ T6287] loop1: detected capacity change from 0 to 256 [ 80.105619][ T6288] loop3: detected capacity change from 0 to 2048 [ 80.119543][ T6287] FAT-fs (loop1): Directory bread(block 64) failed [ 80.121016][ T6287] FAT-fs (loop1): Directory bread(block 65) failed [ 80.136108][ T6287] FAT-fs (loop1): Directory bread(block 66) failed [ 80.151017][ T6287] FAT-fs (loop1): Directory bread(block 67) failed [ 80.152539][ T6287] FAT-fs (loop1): Directory bread(block 68) failed [ 80.162571][ T6292] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.183718][ T6287] FAT-fs (loop1): Directory bread(block 69) failed [ 80.196273][ T6287] FAT-fs (loop1): Directory bread(block 70) failed [ 80.197645][ T6287] FAT-fs (loop1): Directory bread(block 71) failed [ 80.199034][ T6287] FAT-fs (loop1): Directory bread(block 72) failed [ 80.213896][ T6287] FAT-fs (loop1): Directory bread(block 73) failed [ 80.266392][ T6227] loop2: detected capacity change from 0 to 65536 [ 80.312707][ T6287] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 80.322966][ T6287] FAT-fs (loop1): Filesystem has been set read-only [ 80.324262][ T6287] syz.1.756: attempt to access beyond end of device [ 80.324262][ T6287] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 80.333423][ T6227] XFS (loop2): Mounting V5 Filesystem [ 80.340411][ T6287] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 80.349413][ T6287] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 80.351069][ T6287] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 80.358255][ T6287] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 80.360260][ T6287] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 80.362283][ T6287] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 80.374730][ T6287] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 80.377639][ T6287] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 80.379377][ T6287] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 80.383167][ T6287] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 80.395825][ T6287] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 80.397232][ T6307] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 80.397654][ T6287] syz.1.756: attempt to access beyond end of device [ 80.397654][ T6287] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 80.434561][ T6227] XFS (loop2): Ending clean mount [ 80.583563][ T4301] XFS (loop2): Unmounting Filesystem [ 80.637993][ T6314] block nbd4: NBD_DISCONNECT [ 80.860338][ T6320] loop1: detected capacity change from 0 to 256 [ 80.915318][ T6320] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 80.934935][ T6320] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 80.938908][ T6304] loop3: detected capacity change from 0 to 40427 [ 80.941443][ T6304] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 80.942825][ T6320] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 80.946024][ T6320] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 80.962226][ T6304] F2FS-fs (loop3): invalid crc value [ 80.992803][ T6304] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.007168][ T4294] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 81.076913][ T6304] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 81.139692][ T6304] F2FS-fs (loop3) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xc44/0x157c [ 81.148986][ T6304] syz.3.771: attempt to access beyond end of device [ 81.148986][ T6304] loop3: rw=2049, sector=45096, nr_sectors = 88 limit=40427 [ 81.278319][ T6337] device gretap0 entered promiscuous mode [ 81.307454][ T6337] device erspan0 entered promiscuous mode [ 81.358566][ T6337] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 81.362165][ T6337] Cannot create hsr debugfs directory [ 81.364353][ T131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 81.394829][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 81.394843][ T27] audit: type=1326 audit(81.360:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.0.778" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa214afa8 code=0x0 [ 81.653259][ T6360] netlink: 165 bytes leftover after parsing attributes in process `syz.3.776'. [ 81.761784][ T6367] loop1: detected capacity change from 0 to 128 [ 81.915053][ T27] audit: type=1326 audit(81.880:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.1.791" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8894afa8 code=0x0 [ 81.942086][ T6377] loop4: detected capacity change from 0 to 256 [ 81.944924][ T6374] loop3: detected capacity change from 0 to 1024 [ 81.949799][ T6377] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 81.962981][ T6377] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 81.971400][ T6377] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 81.984893][ T6374] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.993462][ T6377] UDF-fs: Scanning with blocksize 512 failed [ 82.011987][ T6377] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 82.023253][ T6374] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2739: inode #12: comm syz.3.792: corrupted in-inode xattr [ 82.031906][ T6374] EXT4-fs (loop3): Remounting filesystem read-only [ 82.044687][ T6377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.115327][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 82.184415][ T6371] loop2: detected capacity change from 0 to 40427 [ 82.193763][ T6371] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 82.203826][ T6371] F2FS-fs (loop2): invalid crc value [ 82.214876][ T6371] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.282555][ T6371] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 82.311396][ T6371] F2FS-fs (loop2) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xc44/0x157c [ 82.313743][ T6371] syz.2.789: attempt to access beyond end of device [ 82.313743][ T6371] loop2: rw=2049, sector=45096, nr_sectors = 88 limit=40427 [ 82.373898][ T6390] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 82.403115][ T6394] netlink: 165 bytes leftover after parsing attributes in process `syz.4.798'. [ 82.589547][ T6401] loop0: detected capacity change from 0 to 128 [ 82.965567][ T6419] loop2: detected capacity change from 0 to 4096 [ 83.014732][ T6419] NILFS (loop2): invalid segment: Checksum error in segment payload [ 83.028365][ T6419] NILFS (loop2): trying rollback from an earlier position [ 83.043267][ T6423] loop4: detected capacity change from 0 to 2048 [ 83.059249][ T6419] NILFS (loop2): recovery complete [ 83.073342][ T6424] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.165960][ T6423] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.251817][ T6408] loop3: detected capacity change from 0 to 32768 [ 83.274358][ T6408] XFS (loop3): Mounting V5 Filesystem [ 83.422089][ T6408] XFS (loop3): Ending clean mount [ 83.428609][ T6408] XFS (loop3): Quotacheck needed: Please wait. [ 83.473932][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 83.496376][ T6408] XFS (loop3): Quotacheck: Done. [ 83.591859][ T6446] loop4: detected capacity change from 0 to 256 [ 83.604588][ T4302] XFS (loop3): Unmounting Filesystem [ 83.719764][ T6454] netlink: 165 bytes leftover after parsing attributes in process `syz.2.820'. [ 83.792110][ T6456] tun0: tun_chr_ioctl cmd 2148553947 [ 83.934769][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'. [ 84.008742][ T6470] loop1: detected capacity change from 0 to 2048 [ 84.051619][ T6470] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.118085][ T6479] loop0: detected capacity change from 0 to 190 [ 84.136092][ T6479] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 84.164150][ T6479] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 84.166346][ T6479] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 84.177063][ T6479] ntfs: (device loop0): check_mft_mirror(): Failed to read $MFTMirr. [ 84.178646][ T6479] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 84.191419][ T6479] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 84.192988][ T6479] ntfs: (device loop0): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 84.194824][ T6479] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 84.386027][ T4457] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 84.635496][ T6503] tun0: tun_chr_ioctl cmd 2148553947 [ 84.877271][ T6520] ipt_ECN: cannot use operation on non-tcp rule [ 84.959668][ T6524] loop0: detected capacity change from 0 to 4096 [ 84.975429][ T6524] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 85.025650][ T6524] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 85.318372][ T6552] loop0: detected capacity change from 0 to 64 [ 85.674459][ T6570] loop2: detected capacity change from 0 to 512 [ 85.686297][ T6570] EXT4-fs: Ignoring removed oldalloc option [ 85.723261][ T6570] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.888: Failed to acquire dquot type 0 [ 85.726368][ T6570] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.888: Failed to acquire dquot type 0 [ 85.739252][ T6570] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.888: Failed to acquire dquot type 0 [ 85.745869][ T6570] EXT4-fs (loop2): 1 orphan inode deleted [ 85.747217][ T6570] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 85.766676][ T6570] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.888: Failed to acquire dquot type 0 [ 85.812593][ T4301] EXT4-fs (loop2): unmounting filesystem. [ 85.911221][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.882'. [ 86.005379][ T6539] loop3: detected capacity change from 0 to 40427 [ 86.011971][ T6539] F2FS-fs (loop3): Invalid segment/section count (24 != 24 * 3) [ 86.013491][ T6539] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 86.027829][ T6539] F2FS-fs (loop3): invalid crc value [ 86.044121][ T6539] F2FS-fs (loop3): Found nat_bits in checkpoint [ 86.071547][ T6539] F2FS-fs (loop3): Start checkpoint disabled! [ 86.092085][ T6539] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 86.093606][ T6539] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 86.211736][ T6588] loop2: detected capacity change from 0 to 8192 [ 86.225297][ T6588] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.233426][ T6588] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 86.255693][ T6588] REISERFS (device loop2): using ordered data mode [ 86.262266][ T6588] reiserfs: using flush barriers [ 86.294652][ T6580] loop0: detected capacity change from 0 to 32768 [ 86.306035][ T6588] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.309579][ T6588] REISERFS (device loop2): checking transaction log (loop2) [ 86.321004][ T6580] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.880 (6580) [ 86.342956][ T6588] REISERFS (device loop2): Using r5 hash to sort names [ 86.344640][ T6588] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 86.350584][ T6580] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.352718][ T6580] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 86.354854][ T6580] BTRFS info (device loop0): using free space tree [ 86.376003][ T6588] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 86.420354][ T6595] loop1: detected capacity change from 0 to 40427 [ 86.438580][ T6588] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 86.453114][ T6588] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 86.504550][ T6595] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.535369][ T131] kworker/u4:3: attempt to access beyond end of device [ 86.535369][ T131] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 86.539123][ T6580] BTRFS info (device loop0): enabling ssd optimizations [ 86.586132][ T6595] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 86.633638][ T4294] syz-executor: attempt to access beyond end of device [ 86.633638][ T4294] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.687514][ T4300] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 87.046209][ T6637] binder: 6636:6637 ioctl c018620c 200005c0 returned -1 [ 87.150719][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 87.150732][ T27] audit: type=1326 audit(87.120:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6644 comm="syz.1.891" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8894afa8 code=0x0 [ 87.211644][ T6647] loop3: detected capacity change from 0 to 2048 [ 87.220818][ T6647] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.253234][ T6651] loop2: detected capacity change from 0 to 1024 [ 87.321966][ T6651] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.357710][ T6661] loop4: detected capacity change from 0 to 2048 [ 87.374714][ T6662] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.492148][ T4301] EXT4-fs (loop2): unmounting filesystem. [ 87.689581][ T6680] netlink: 52 bytes leftover after parsing attributes in process `syz.3.915'. [ 87.757954][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.914'. [ 87.759768][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.914'. [ 87.844898][ T6685] loop3: detected capacity change from 0 to 1024 [ 87.897846][ T6685] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.983405][ T6685] Process accounting resumed [ 88.025793][ T6674] loop4: detected capacity change from 0 to 32768 [ 88.059994][ T6674] JBD2: Ignoring recovery information on journal [ 88.071898][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 88.166089][ T6674] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 88.259959][ T6708] loop0: detected capacity change from 0 to 128 [ 88.280792][ T6706] loop3: detected capacity change from 0 to 2048 [ 88.326234][ T6708] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 88.327964][ T6708] FAT-fs (loop0): Filesystem has been set read-only [ 88.330485][ T6708] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 88.333850][ T4295] ocfs2: Unmounting device (7,4) on (node local) [ 88.386914][ T6706] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 88.443095][ T6718] loop4: detected capacity change from 0 to 1024 [ 88.471063][ T6716] loop1: detected capacity change from 0 to 4096 [ 88.491561][ T6718] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 88.534796][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 88.549113][ T6724] loop0: detected capacity change from 0 to 128 [ 88.583792][ T6724] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 88.597853][ T6716] ntfs3: loop1: failed to convert "0080" to koi8-ru [ 88.634955][ T6716] ntfs3: loop1: failed to convert name for inode 1e. [ 88.647147][ T6718] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 88.661804][ T6718] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 88.664510][ T6718] EXT4-fs (loop4): This should not happen!! Data will be lost [ 88.664510][ T6718] [ 88.690209][ T6718] EXT4-fs (loop4): Total free blocks count 0 [ 88.691445][ T6718] EXT4-fs (loop4): Free/Dirty block details [ 88.692647][ T6718] EXT4-fs (loop4): free_blocks=68451041280 [ 88.693756][ T6718] EXT4-fs (loop4): dirty_blocks=32 [ 88.694779][ T6718] EXT4-fs (loop4): Block reservation details [ 88.701613][ T6731] netlink: 104 bytes leftover after parsing attributes in process `syz.3.931'. [ 88.710496][ T6718] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 88.721667][ T6718] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 88.728886][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 89.065107][ T6753] loop4: detected capacity change from 0 to 256 [ 89.106188][ T6753] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 89.111201][ T6753] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 89.194998][ T6759] tipc: Enabling of bearer rejected, failed to enable media [ 89.199740][ T6753] exFAT-fs (loop4): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442) [ 89.199740][ T6753] [ 89.202318][ T6753] exFAT-fs (loop4): Filesystem has been set read-only [ 89.463624][ T6770] loop4: detected capacity change from 0 to 16 [ 89.465522][ T6770] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 89.622358][ T6780] loop3: detected capacity change from 0 to 128 [ 89.659543][ T6782] loop2: detected capacity change from 0 to 512 [ 89.677418][ T6782] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.701340][ T6782] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.956: inode #1: comm syz.2.956: iget: illegal inode # [ 89.718376][ T6780] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 89.732268][ T6780] FAT-fs (loop3): Filesystem has been set read-only [ 89.743788][ T6782] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.956: error while reading EA inode 1 err=-117 [ 89.754020][ T6780] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 89.765547][ T6782] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.956: inode #1: comm syz.2.956: iget: illegal inode # [ 89.806387][ T6789] loop1: detected capacity change from 0 to 256 [ 89.813938][ T6789] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 89.818196][ T6782] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.956: error while reading EA inode 1 err=-117 [ 89.842299][ T6782] EXT4-fs (loop2): 1 orphan inode deleted [ 89.843516][ T6782] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.850248][ T6789] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 89.975057][ T6789] exFAT-fs (loop1): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442) [ 89.975057][ T6789] [ 89.983124][ T6789] exFAT-fs (loop1): Filesystem has been set read-only [ 90.005159][ T6782] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.956: unexpected EA_INODE flag [ 90.053592][ T4301] EXT4-fs (loop2): unmounting filesystem. [ 90.195534][ T6755] loop0: detected capacity change from 0 to 65536 [ 90.249934][ T6755] XFS (loop0): Mounting V5 Filesystem [ 90.323378][ T6755] XFS (loop0): Ending clean mount [ 90.472538][ T4300] XFS (loop0): Unmounting Filesystem [ 90.862648][ T6844] loop4: detected capacity change from 0 to 512 [ 90.864427][ T6844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.942662][ T6844] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.974: inode #1: comm syz.4.974: iget: illegal inode # [ 90.945621][ T6844] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.974: error while reading EA inode 1 err=-117 [ 91.011423][ T6844] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.974: inode #1: comm syz.4.974: iget: illegal inode # [ 91.036409][ T6844] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.974: error while reading EA inode 1 err=-117 [ 91.041406][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.979'. [ 91.051695][ T6844] EXT4-fs (loop4): 1 orphan inode deleted [ 91.052856][ T6844] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 91.117672][ T6850] loop1: detected capacity change from 0 to 4096 [ 91.120748][ T6850] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 91.166962][ T6865] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.974: unexpected EA_INODE flag [ 91.174372][ T6850] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 91.276799][ T6850] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 91.342122][ T4294] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 91.345088][ T6873] block nbd3: NBD_DISCONNECT [ 91.409945][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 91.448561][ T6879] device gretap0 entered promiscuous mode [ 91.478425][ T6879] device erspan0 entered promiscuous mode [ 91.622253][ T6879] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 91.623840][ T6879] Cannot create hsr debugfs directory [ 91.629635][ T775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 91.860107][ T6905] loop4: detected capacity change from 0 to 1024 [ 91.919466][ T6905] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 91.991283][ T6914] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 91.993441][ T6905] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2739: inode #12: comm syz.4.999: corrupted in-inode xattr [ 91.997901][ T6905] EXT4-fs (loop4): Remounting filesystem read-only [ 92.018760][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 92.158668][ T6923] loop0: detected capacity change from 0 to 512 [ 92.172900][ T6923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.184644][ T6923] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1001: inode #1: comm syz.0.1001: iget: illegal inode # [ 92.203517][ T6923] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1001: error while reading EA inode 1 err=-117 [ 92.226296][ T6923] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1001: inode #1: comm syz.0.1001: iget: illegal inode # [ 92.245893][ T6923] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1001: error while reading EA inode 1 err=-117 [ 92.266300][ T6923] EXT4-fs (loop0): 1 orphan inode deleted [ 92.267482][ T6923] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 92.394480][ T6923] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.1001: unexpected EA_INODE flag [ 92.436844][ T6920] loop2: detected capacity change from 0 to 32768 [ 92.477164][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 92.513859][ T6920] XFS (loop2): Mounting V5 Filesystem [ 92.625541][ T6920] XFS (loop2): Ending clean mount [ 92.653120][ T6920] XFS (loop2): Quotacheck needed: Please wait. [ 92.711507][ T6920] XFS (loop2): Quotacheck: Done. [ 92.760861][ T4301] XFS (loop2): Unmounting Filesystem [ 93.161557][ T6962] loop0: detected capacity change from 0 to 32768 [ 93.201354][ T6962] XFS (loop0): Mounting V5 Filesystem [ 93.269138][ T6962] XFS (loop0): Ending clean mount [ 93.271436][ T6962] XFS (loop0): Quotacheck needed: Please wait. [ 93.325207][ T6962] XFS (loop0): Quotacheck: Done. [ 93.403506][ T4300] XFS (loop0): Unmounting Filesystem [ 94.146982][ T7037] ipt_ECN: cannot use operation on non-tcp rule [ 94.196846][ T7027] loop1: detected capacity change from 0 to 32768 [ 94.209362][ T7040] loop4: detected capacity change from 0 to 64 [ 94.282076][ T7040] hfs: request for non-existent node 237 in B*Tree [ 94.283441][ T7040] hfs: request for non-existent node 237 in B*Tree [ 94.284935][ T7040] hfs: request for non-existent node 237 in B*Tree [ 94.287475][ T7040] hfs: request for non-existent node 237 in B*Tree [ 94.289707][ T7040] hfs: request for non-existent node 237 in B*Tree [ 94.291006][ T7040] hfs: request for non-existent node 237 in B*Tree [ 94.304849][ T7040] hfs: request for non-existent node 237 in B*Tree [ 94.306744][ T7040] hfs: request for non-existent node 237 in B*Tree [ 95.789590][ T7076] loop0: detected capacity change from 0 to 64 [ 95.833611][ T7076] hfs: request for non-existent node 237 in B*Tree [ 95.835002][ T7076] hfs: request for non-existent node 237 in B*Tree [ 95.854621][ T7076] hfs: request for non-existent node 237 in B*Tree [ 95.856223][ T7076] hfs: request for non-existent node 237 in B*Tree [ 95.871800][ T7076] hfs: request for non-existent node 237 in B*Tree [ 95.874078][ T7076] hfs: request for non-existent node 237 in B*Tree [ 95.893512][ T7085] hfs: request for non-existent node 237 in B*Tree [ 95.895026][ T7085] hfs: request for non-existent node 237 in B*Tree [ 96.006852][ T51] block nbd3: Attempted send on invalid socket [ 96.008317][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.044640][ T7091] usb usb8: usbfs: process 7091 (syz.3.1066) did not claim interface 0 before use [ 96.382737][ T7114] bridge0: port 4(vlan2) entered blocking state [ 96.384179][ T7114] bridge0: port 4(vlan2) entered disabled state [ 96.424049][ T7116] loop2: detected capacity change from 0 to 1764 [ 96.546618][ T51] block nbd0: Attempted send on invalid socket [ 96.547898][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.570586][ T7120] usb usb8: usbfs: process 7120 (syz.0.1079) did not claim interface 0 before use [ 96.594638][ T7122] loop2: detected capacity change from 0 to 2048 [ 96.608736][ T7122] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.783497][ T7130] loop3: detected capacity change from 0 to 512 [ 96.784974][ T7112] loop1: detected capacity change from 0 to 32768 [ 96.791715][ T7130] EXT2-fs (loop3): (no)user_xattr optionsnot supported [ 96.793794][ T7130] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 96.833939][ T7112] JBD2: Ignoring recovery information on journal [ 96.882094][ T7112] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 96.939887][ T7138] loop4: detected capacity change from 0 to 1024 [ 96.960650][ T7138] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.981371][ T7138] Process accounting resumed [ 96.989532][ T4294] ocfs2: Unmounting device (7,1) on (node local) [ 97.010163][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 97.231295][ T7149] loop4: detected capacity change from 0 to 1024 [ 97.283990][ T11] hfsplus: b-tree write err: -5, ino 4 [ 97.329945][ T7153] bridge0: port 4(vlan2) entered blocking state [ 97.331592][ T7153] bridge0: port 4(vlan2) entered disabled state [ 97.454063][ T7157] loop4: detected capacity change from 0 to 2048 [ 97.474003][ T7157] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 97.532160][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 97.721646][ T7172] loop1: detected capacity change from 0 to 1024 [ 97.787460][ T7172] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 97.825149][ T7172] Process accounting resumed [ 97.895635][ T7184] loop2: detected capacity change from 0 to 1024 [ 97.943836][ T7188] loop3: detected capacity change from 0 to 2048 [ 97.972563][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 97.982832][ T7188] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 98.044283][ T775] hfsplus: b-tree write err: -5, ino 4 [ 98.096237][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 98.194397][ T27] audit: type=1326 audit(98.160:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.3.1111" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa954afa8 code=0x0 [ 98.467712][ T7214] loop0: detected capacity change from 0 to 1024 [ 98.493968][ T7214] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 98.538625][ T7214] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 98.553400][ T7214] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 98.556022][ T7214] EXT4-fs (loop0): This should not happen!! Data will be lost [ 98.556022][ T7214] [ 98.557847][ T7214] EXT4-fs (loop0): Total free blocks count 0 [ 98.559263][ T7214] EXT4-fs (loop0): Free/Dirty block details [ 98.560336][ T7214] EXT4-fs (loop0): free_blocks=68451041280 [ 98.561433][ T7214] EXT4-fs (loop0): dirty_blocks=32 [ 98.562401][ T7214] EXT4-fs (loop0): Block reservation details [ 98.563749][ T7214] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 98.574686][ T7214] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 98.596731][ T7211] loop2: detected capacity change from 0 to 32768 [ 98.635636][ T7211] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 98.639625][ T7211] XFS (loop2): Mounting V5 Filesystem [ 98.680338][ T7211] XFS (loop2): Ending clean mount [ 98.683623][ T7211] XFS (loop2): Quotacheck needed: Please wait. [ 98.711897][ T7211] XFS (loop2): Quotacheck: Done. [ 98.744921][ T4301] XFS (loop2): Unmounting Filesystem [ 99.003786][ T7234] loop1: detected capacity change from 0 to 4096 [ 99.007286][ T7234] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 99.040073][ T7234] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 99.138718][ T7237] loop0: detected capacity change from 0 to 2048 [ 99.181822][ T5735] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 99.187684][ T4294] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 99.250535][ T7237] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 99.307905][ T7237] EXT4-fs (loop0): Online defrag not supported with bigalloc [ 99.348172][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 99.354393][ T7245] loop4: detected capacity change from 0 to 4096 [ 99.381018][ T7251] trusted_key: encrypted_key: keyword 'updat_fault' not recognized [ 99.404713][ T7245] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 99.438120][ T7245] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 99.504990][ T7259] loop1: detected capacity change from 0 to 2048 [ 99.514638][ T7259] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 99.524092][ T7259] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 1987: 0xfd != 0xb4 [ 99.536790][ T7259] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.540400][ T7259] UDF-fs: error (device loop1): udf_read_inode: (ino 1376) failed !bh [ 99.542328][ T7259] UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 99.573435][ T5735] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22. [ 99.577959][ T4295] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 99.706414][ T27] audit: type=1326 audit(99.670:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.1.1136" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8894afa8 code=0x0 [ 99.840618][ T7281] trusted_key: encrypted_key: keyword 'updat_fault' not recognized [ 99.999801][ T7288] loop2: detected capacity change from 0 to 4096 [ 100.002076][ T7288] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 100.015962][ T7288] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 100.134835][ T131] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22. [ 100.140572][ T4301] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 100.205609][ T7295] loop4: detected capacity change from 0 to 4096 [ 100.214861][ T7295] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 100.250396][ T7302] loop3: detected capacity change from 0 to 1024 [ 100.293447][ T7302] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 100.295698][ T7295] ntfs: (device loop4): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 100.332243][ T7295] ntfs: volume version 3.1. [ 100.333413][ T7302] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 100.337907][ T7302] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 100.341805][ T7302] EXT4-fs (loop3): This should not happen!! Data will be lost [ 100.341805][ T7302] [ 100.343701][ T7302] EXT4-fs (loop3): Total free blocks count 0 [ 100.344947][ T7302] EXT4-fs (loop3): Free/Dirty block details [ 100.347548][ T7302] EXT4-fs (loop3): free_blocks=68451041280 [ 100.348849][ T7302] EXT4-fs (loop3): dirty_blocks=32 [ 100.349902][ T7302] EXT4-fs (loop3): Block reservation details [ 100.351014][ T7302] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 100.355484][ T7302] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 100.753921][ T7321] loop0: detected capacity change from 0 to 4096 [ 100.772660][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1164'. [ 100.816755][ T7333] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.881803][ T7335] loop4: detected capacity change from 0 to 2048 [ 100.922707][ T7335] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.025499][ T7335] EXT4-fs (loop4): Online defrag not supported with bigalloc [ 101.077002][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 101.168678][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 101.380699][ T7359] loop3: detected capacity change from 0 to 4096 [ 101.439822][ T7370] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.676565][ T7382] loop2: detected capacity change from 0 to 4096 [ 101.694845][ T7389] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.720599][ T7383] loop3: detected capacity change from 0 to 4096 [ 101.725494][ T7383] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 101.785351][ T7394] loop1: detected capacity change from 0 to 2048 [ 101.826066][ T7383] ntfs: (device loop3): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 101.856402][ T7394] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 101.883118][ T7383] ntfs: volume version 3.1. [ 101.982749][ T11] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 102.011147][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 102.013690][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 102.013690][ T11] [ 102.015543][ T11] EXT4-fs (loop1): Total free blocks count 0 [ 102.028640][ T11] EXT4-fs (loop1): Free/Dirty block details [ 102.029952][ T11] EXT4-fs (loop1): free_blocks=2415919104 [ 102.031068][ T11] EXT4-fs (loop1): dirty_blocks=16 [ 102.032030][ T11] EXT4-fs (loop1): Block reservation details [ 102.033209][ T11] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 102.052993][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 102.143851][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 102.375241][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1207'. [ 102.448358][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1212'. [ 102.744146][ T7407] loop0: detected capacity change from 0 to 32768 [ 102.831478][ T7439] loop1: detected capacity change from 0 to 8192 [ 102.854095][ T7407] XFS (loop0): Mounting V5 Filesystem [ 102.875341][ T7439] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 102.878485][ T7439] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 102.880631][ T7439] REISERFS (device loop1): using journaled data mode [ 102.882329][ T7439] reiserfs: using flush barriers [ 102.884836][ T7439] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.889762][ T7439] REISERFS (device loop1): checking transaction log (loop1) [ 102.902306][ T7439] REISERFS (device loop1): Using r5 hash to sort names [ 102.904049][ T7439] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 102.908648][ T7439] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 102.972886][ T7439] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 102.984058][ T7407] XFS (loop0): Ending clean mount [ 102.994553][ T7439] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 102.998218][ T7439] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 103.009319][ T7407] XFS (loop0): Quotacheck needed: Please wait. [ 103.060363][ T7407] XFS (loop0): Quotacheck: Done. [ 103.185595][ T4300] XFS (loop0): Unmounting Filesystem [ 103.238244][ T7443] loop4: detected capacity change from 0 to 32768 [ 103.242482][ T7443] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1218 (7443) [ 103.252224][ T4345] kernel write not supported for file /529/timerslack_ns (pid: 4345 comm: kworker/0:5) [ 103.276448][ T7443] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.278584][ T7443] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 103.280228][ T7443] BTRFS info (device loop4): using free space tree [ 103.420087][ T7482] loop1: detected capacity change from 0 to 128 [ 103.476808][ T7482] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 103.538200][ T7443] BTRFS info (device loop4): enabling ssd optimizations [ 103.591219][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 103.642606][ T7497] loop2: detected capacity change from 0 to 4096 [ 103.748867][ T4360] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 103.853222][ T4295] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.913740][ T4342] kernel write not supported for file /472/timerslack_ns (pid: 4342 comm: kworker/1:4) [ 103.927658][ T7516] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 104.250208][ T7530] loop3: detected capacity change from 0 to 2048 [ 104.261913][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 104.303679][ T7530] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 104.470459][ T4360] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.473771][ T4360] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 104.496576][ T4360] EXT4-fs (loop3): This should not happen!! Data will be lost [ 104.496576][ T4360] [ 104.502043][ T4360] EXT4-fs (loop3): Total free blocks count 0 [ 104.503231][ T4360] EXT4-fs (loop3): Free/Dirty block details [ 104.504396][ T4360] EXT4-fs (loop3): free_blocks=2415919104 [ 104.505440][ T4360] EXT4-fs (loop3): dirty_blocks=16 [ 104.516437][ T4360] EXT4-fs (loop3): Block reservation details [ 104.517628][ T4360] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 104.527900][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 104.618864][ T4344] kernel write not supported for file /531/timerslack_ns (pid: 4344 comm: kworker/0:4) [ 104.700121][ T7528] loop4: detected capacity change from 0 to 32768 [ 104.701779][ T7528] XFS: ikeep mount option is deprecated. [ 104.774201][ T7528] XFS (loop4): Mounting V5 Filesystem [ 104.797658][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.812531][ T7538] loop1: detected capacity change from 0 to 32768 [ 104.836426][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.860862][ T7528] XFS (loop4): Ending clean mount [ 104.864715][ T7528] XFS (loop4): Quotacheck needed: Please wait. [ 104.891110][ T7528] XFS (loop4): Quotacheck: Done. [ 104.891291][ T7538] XFS (loop1): Mounting V5 Filesystem [ 104.935145][ T7538] XFS (loop1): Ending clean mount [ 104.938224][ T4295] XFS (loop4): Unmounting Filesystem [ 105.003931][ T4294] XFS (loop1): Unmounting Filesystem [ 105.139342][ T7576] sctp: [Deprecated]: syz.0.1260 (pid 7576) Use of int in maxseg socket option. [ 105.139342][ T7576] Use struct sctp_assoc_value instead [ 105.359036][ T7570] loop3: detected capacity change from 0 to 32768 [ 105.422757][ T7570] JBD2: Ignoring recovery information on journal [ 105.496124][ T7590] loop4: detected capacity change from 0 to 128 [ 105.503977][ T7570] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 105.540428][ T7590] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 105.637605][ T4302] ocfs2: Unmounting device (7,3) on (node local) [ 105.690273][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 106.058334][ T7611] loop2: detected capacity change from 0 to 512 [ 106.062631][ T7611] ext4: Bad value for 'max_batch_time' [ 106.116958][ T4457] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.185924][ T7595] loop0: detected capacity change from 0 to 32768 [ 106.196505][ T7595] XFS: ikeep mount option is deprecated. [ 106.238873][ T7595] XFS (loop0): Mounting V5 Filesystem [ 106.304044][ T7603] loop4: detected capacity change from 0 to 32768 [ 106.340892][ T7603] XFS (loop4): Mounting V5 Filesystem [ 106.342878][ T7595] XFS (loop0): Ending clean mount [ 106.345461][ T7595] XFS (loop0): Quotacheck needed: Please wait. [ 106.386737][ T7595] XFS (loop0): Quotacheck: Done. [ 106.388482][ T7603] XFS (loop4): Ending clean mount [ 106.453345][ T4295] XFS (loop4): Unmounting Filesystem [ 106.464809][ T4300] XFS (loop0): Unmounting Filesystem [ 107.104204][ T7645] loop2: detected capacity change from 0 to 128 [ 107.124589][ T7645] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 107.158165][ T7635] loop3: detected capacity change from 0 to 32768 [ 107.159973][ T7635] XFS: ikeep mount option is deprecated. [ 107.214496][ T7635] XFS (loop3): Mounting V5 Filesystem [ 107.254201][ T4301] EXT4-fs (loop2): unmounting filesystem. [ 107.447060][ T7635] XFS (loop3): Ending clean mount [ 107.502374][ T7635] XFS (loop3): Quotacheck needed: Please wait. [ 107.531251][ T7635] XFS (loop3): Quotacheck: Done. [ 107.575002][ T7637] loop0: detected capacity change from 0 to 32768 [ 107.608398][ T4302] XFS (loop3): Unmounting Filesystem [ 108.141712][ T7657] loop4: detected capacity change from 0 to 40427 [ 108.158658][ T7657] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 108.160932][ T7657] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 108.169093][ T7657] F2FS-fs (loop4): invalid crc value [ 108.187293][ T7657] F2FS-fs (loop4): Found nat_bits in checkpoint [ 108.222294][ T7657] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 108.223812][ T7657] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 108.380448][ T7682] loop1: detected capacity change from 0 to 16 [ 108.423042][ T7682] erofs: (device loop1): mounted with root inode @ nid 36. [ 108.545107][ T7668] loop2: detected capacity change from 0 to 32768 [ 108.560256][ T7668] XFS: ikeep mount option is deprecated. [ 108.635352][ T7675] loop3: detected capacity change from 0 to 32768 [ 108.648322][ T7668] XFS (loop2): Mounting V5 Filesystem [ 108.648683][ T7675] XFS (loop3): Mounting V5 Filesystem [ 108.677331][ T7675] XFS (loop3): Ending clean mount [ 108.738241][ T7668] XFS (loop2): Ending clean mount [ 108.742582][ T4302] XFS (loop3): Unmounting Filesystem [ 108.747580][ T7668] XFS (loop2): Quotacheck needed: Please wait. [ 108.818278][ T7668] XFS (loop2): Quotacheck: Done. [ 108.901083][ T7680] loop0: detected capacity change from 0 to 32768 [ 108.913709][ T7680] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1291 (7680) [ 108.937519][ T4301] XFS (loop2): Unmounting Filesystem [ 108.962625][ T7680] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.964955][ T7680] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 108.975212][ T7680] BTRFS info (device loop0): using free space tree [ 109.012451][ T7680] BTRFS info (device loop0): enabling ssd optimizations [ 109.182960][ T4300] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.286358][ T7737] sctp: [Deprecated]: syz.3.1297 (pid 7737) Use of int in maxseg socket option. [ 109.286358][ T7737] Use struct sctp_assoc_value instead [ 109.353030][ T7714] loop1: detected capacity change from 0 to 32768 [ 109.357367][ T7714] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1302 (7714) [ 109.362757][ T7714] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.364871][ T7714] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 109.370054][ T7714] BTRFS info (device loop1): using free space tree [ 109.535610][ T7714] BTRFS info (device loop1): enabling ssd optimizations [ 109.655251][ T7754] loop4: detected capacity change from 0 to 32768 [ 109.664702][ T7754] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1306 (7754) [ 109.671949][ T7754] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.674790][ T7754] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 109.686619][ T7754] BTRFS info (device loop4): use no compression [ 109.688135][ T7754] BTRFS info (device loop4): force zlib compression, level 3 [ 109.689697][ T7754] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 109.691711][ T7754] BTRFS info (device loop4): use lzo compression, level 0 [ 109.693239][ T7754] BTRFS info (device loop4): turning on flush-on-commit [ 109.694495][ T7754] BTRFS info (device loop4): enabling auto defrag [ 109.704257][ T7754] BTRFS info (device loop4): using free space tree [ 109.704706][ T4360] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 109.878610][ T7754] BTRFS info (device loop4): enabling ssd optimizations [ 109.883100][ T4294] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.043311][ T7739] loop0: detected capacity change from 0 to 40427 [ 110.059243][ T7739] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 110.064091][ T7739] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 110.117140][ T4295] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.121902][ T7739] F2FS-fs (loop0): invalid crc value [ 110.124211][ T7782] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1309'. [ 110.126834][ T7782] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1309'. [ 110.165490][ T7739] F2FS-fs (loop0): Found nat_bits in checkpoint [ 110.262150][ T7739] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 110.263761][ T7739] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 110.334654][ T7789] loop1: detected capacity change from 0 to 512 [ 110.346405][ T7789] ext4: Bad value for 'max_batch_time' [ 110.399085][ T4457] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.922075][ T7791] loop3: detected capacity change from 0 to 32768 [ 110.932201][ T7791] XFS: ikeep mount option is deprecated. [ 110.970835][ T7791] XFS (loop3): Mounting V5 Filesystem [ 111.034166][ T7791] XFS (loop3): Ending clean mount [ 111.039843][ T7791] XFS (loop3): Quotacheck needed: Please wait. [ 111.058311][ T7804] loop4: detected capacity change from 0 to 32768 [ 111.068294][ T7804] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1315 (7804) [ 111.077603][ T7804] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.081982][ T7804] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 111.085026][ T7804] BTRFS info (device loop4): using free space tree [ 111.106097][ T7791] XFS (loop3): Quotacheck: Done. [ 111.230670][ T7806] loop2: detected capacity change from 0 to 32768 [ 111.242122][ T4302] XFS (loop3): Unmounting Filesystem [ 111.297477][ T7804] BTRFS info (device loop4): enabling ssd optimizations [ 111.444365][ T7845] sctp: [Deprecated]: syz.1.1320 (pid 7845) Use of int in maxseg socket option. [ 111.444365][ T7845] Use struct sctp_assoc_value instead [ 111.502134][ T4295] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.634552][ T7849] loop2: detected capacity change from 0 to 4096 [ 111.674304][ T7849] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 111.683373][ T7849] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 111.693584][ T7851] loop1: detected capacity change from 0 to 256 [ 111.726931][ T7851] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 111.784486][ T7849] ntfs3: loop2: ino=1e, "file1" failed to open parent directory r=30005 to update [ 111.863487][ T4301] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 111.943907][ T7856] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1328'. [ 111.946391][ T7856] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1328'. [ 112.061969][ T7844] loop0: detected capacity change from 0 to 32768 [ 112.082406][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1332'. [ 112.084398][ T7844] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1323 (7844) [ 112.102235][ T7844] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.104396][ T7844] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 112.106667][ T7844] BTRFS info (device loop0): using free space tree [ 112.223637][ T7881] sctp: [Deprecated]: syz.2.1335 (pid 7881) Use of int in maxseg socket option. [ 112.223637][ T7881] Use struct sctp_assoc_value instead [ 112.292773][ T7891] loop4: detected capacity change from 0 to 512 [ 112.294575][ T7891] EXT4-fs: Ignoring removed i_version option [ 112.296311][ T7891] EXT4-fs: Ignoring removed nobh option [ 112.316722][ T7891] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.319303][ T7891] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.372762][ T7891] EXT4-fs (loop4): 1 truncate cleaned up [ 112.373914][ T7891] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 112.376156][ T7844] BTRFS info (device loop0): enabling ssd optimizations [ 112.459488][ T7861] loop3: detected capacity change from 0 to 32768 [ 112.466294][ T7861] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1330 (7861) [ 112.476039][ T7861] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.478247][ T7861] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 112.480112][ T7861] BTRFS info (device loop3): use zlib compression, level 3 [ 112.481523][ T7861] BTRFS info (device loop3): using free space tree [ 112.541615][ T234] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 112.581912][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 112.654871][ T7894] loop2: detected capacity change from 0 to 32768 [ 112.664908][ T7894] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1337 (7894) [ 112.733660][ T4300] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.790259][ T4454] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.848089][ T7861] BTRFS info (device loop3): enabling ssd optimizations [ 112.855164][ T7888] loop1: detected capacity change from 0 to 32768 [ 112.857525][ T7888] XFS: ikeep mount option is deprecated. [ 112.953522][ T7888] XFS (loop1): Mounting V5 Filesystem [ 112.993909][ T7933] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1342'. [ 112.996016][ T7933] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1342'. [ 113.087232][ T7888] XFS (loop1): Ending clean mount [ 113.089337][ T7888] XFS (loop1): Quotacheck needed: Please wait. [ 113.138711][ T7888] XFS (loop1): Quotacheck: Done. [ 113.143768][ T4302] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.320480][ T4294] XFS (loop1): Unmounting Filesystem [ 113.514555][ T7958] loop4: detected capacity change from 0 to 256 [ 113.538668][ T7958] exfat: Deprecated parameter 'utf8' [ 113.539851][ T7958] exfat: Deprecated parameter 'namecase' [ 113.541010][ T7958] exfat: Deprecated parameter 'utf8' [ 113.561544][ T7958] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 113.636853][ T7958] syz.4.1353: attempt to access beyond end of device [ 113.636853][ T7958] loop4: rw=0, sector=34359738495, nr_sectors = 1 limit=256 [ 113.873013][ T7975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1360'. [ 114.053989][ T7955] loop3: detected capacity change from 0 to 32768 [ 114.054499][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1363'. [ 114.068003][ T7955] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1351 (7955) [ 114.079554][ T7955] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.081612][ T7955] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 114.083273][ T7955] BTRFS info (device loop3): using free space tree [ 114.204218][ T8001] loop1: detected capacity change from 0 to 256 [ 114.209558][ T8001] exfat: Deprecated parameter 'utf8' [ 114.210642][ T8001] exfat: Deprecated parameter 'namecase' [ 114.211732][ T8001] exfat: Deprecated parameter 'utf8' [ 114.211776][ T8009] loop4: detected capacity change from 0 to 256 [ 114.226166][ T8009] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 114.258618][ T8001] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 114.272966][ T7955] BTRFS info (device loop3): enabling ssd optimizations [ 114.411885][ T8001] syz.1.1368: attempt to access beyond end of device [ 114.411885][ T8001] loop1: rw=0, sector=34359738495, nr_sectors = 1 limit=256 [ 114.445240][ T775] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 114.583799][ T4302] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.780403][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1381'. [ 115.494655][ T8080] loop1: detected capacity change from 0 to 512 [ 115.496546][ T8080] EXT4-fs: Ignoring removed i_version option [ 115.497847][ T8080] EXT4-fs: Ignoring removed nobh option [ 115.504784][ T8080] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.552654][ T8057] loop0: detected capacity change from 0 to 32768 [ 115.561808][ T8080] EXT4-fs (loop1): 1 truncate cleaned up [ 115.562227][ T8058] loop2: detected capacity change from 0 to 32768 [ 115.563040][ T8080] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 115.567078][ T8057] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1399 (8057) [ 115.571627][ T8058] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1388 (8058) [ 115.575669][ T8057] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.605913][ T8057] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 115.607885][ T8057] BTRFS info (device loop0): use zlib compression, level 3 [ 115.609324][ T8057] BTRFS info (device loop0): using free space tree [ 115.610848][ T8058] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.612773][ T8058] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 115.614416][ T8058] BTRFS info (device loop2): using free space tree [ 115.733571][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 115.817505][ T8057] BTRFS info (device loop0): enabling ssd optimizations [ 115.920238][ T8058] BTRFS info (device loop2): enabling ssd optimizations [ 115.920922][ T4300] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.173530][ T11] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 116.244343][ T4301] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.554529][ T8161] loop0: detected capacity change from 0 to 256 [ 116.583398][ T8161] exfat: Deprecated parameter 'codepage' [ 116.584610][ T8161] exfat: Bad value for 'codepage' [ 116.630230][ T8161] loop0: detected capacity change from 0 to 1024 [ 116.744183][ T5735] hfsplus: b-tree write err: -5, ino 4 [ 116.833567][ T8153] loop4: detected capacity change from 0 to 32768 [ 116.878991][ T8153] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 116.905102][ T8153] [ 116.905684][ T8153] ====================================================== [ 116.907124][ T8153] WARNING: possible circular locking dependency detected [ 116.908525][ T8153] 6.1.114-syzkaller #0 Not tainted [ 116.909489][ T8153] ------------------------------------------------------ [ 116.911057][ T8153] syz.4.1418/8153 is trying to acquire lock: [ 116.912285][ T8153] ffff0000e0e39538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x2c8/0x764 [ 116.914294][ T8153] [ 116.914294][ T8153] but task is already holding lock: [ 116.915935][ T8153] ffff0000fd2ca990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1118/0x13ac [ 116.917887][ T8153] [ 116.917887][ T8153] which lock already depends on the new lock. [ 116.917887][ T8153] [ 116.920290][ T8153] [ 116.920290][ T8153] the existing dependency chain (in reverse order) is: [ 116.922125][ T8153] [ 116.922125][ T8153] -> #3 (jbd2_handle){++++}-{0:0}: [ 116.923810][ T8153] start_this_handle+0x1140/0x13ac [ 116.925008][ T8153] jbd2__journal_start+0x298/0x544 [ 116.926258][ T8153] jbd2_journal_start+0x3c/0x4c [ 116.927361][ T8153] ocfs2_start_trans+0x3e8/0x73c [ 116.928534][ T8153] ocfs2_mknod+0xe64/0x2560 [ 116.929520][ T8153] ocfs2_create+0x1a8/0x560 [ 116.930584][ T8153] path_openat+0xeac/0x2548 [ 116.931637][ T8153] do_filp_open+0x1bc/0x3cc [ 116.932668][ T8153] do_sys_openat2+0x128/0x3e0 [ 116.933869][ T8153] __arm64_sys_openat+0x1f0/0x240 [ 116.935041][ T8153] invoke_syscall+0x98/0x2c0 [ 116.936122][ T8153] el0_svc_common+0x138/0x258 [ 116.937210][ T8153] do_el0_svc+0x64/0x218 [ 116.938153][ T8153] el0_svc+0x58/0x168 [ 116.939335][ T8153] el0t_64_sync_handler+0x84/0xf0 [ 116.940597][ T8153] el0t_64_sync+0x18c/0x190 [ 116.941661][ T8153] [ 116.941661][ T8153] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 116.943372][ T8153] down_read+0x64/0x308 [ 116.944549][ T8153] ocfs2_start_trans+0x3dc/0x73c [ 116.945662][ T8153] ocfs2_mknod+0xe64/0x2560 [ 116.946729][ T8153] ocfs2_create+0x1a8/0x560 [ 116.947732][ T8153] path_openat+0xeac/0x2548 [ 116.948933][ T8153] do_filp_open+0x1bc/0x3cc [ 116.950041][ T8153] do_sys_openat2+0x128/0x3e0 [ 116.951107][ T8153] __arm64_sys_openat+0x1f0/0x240 [ 116.952251][ T8153] invoke_syscall+0x98/0x2c0 [ 116.953389][ T8153] el0_svc_common+0x138/0x258 [ 116.954563][ T8153] do_el0_svc+0x64/0x218 [ 116.955579][ T8153] el0_svc+0x58/0x168 [ 116.956610][ T8153] el0t_64_sync_handler+0x84/0xf0 [ 116.957711][ T8153] el0t_64_sync+0x18c/0x190 [ 116.958813][ T8153] [ 116.958813][ T8153] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 116.960491][ T8153] ocfs2_start_trans+0x260/0x73c [ 116.961661][ T8153] ocfs2_xattr_set+0xdcc/0x1478 [ 116.962851][ T8153] ocfs2_xattr_trusted_set+0x4c/0x64 [ 116.964235][ T8153] __vfs_setxattr+0x388/0x3a4 [ 116.965369][ T8153] __vfs_setxattr_noperm+0x110/0x528 [ 116.966598][ T8153] __vfs_setxattr_locked+0x1ec/0x218 [ 116.967877][ T8153] vfs_setxattr+0x1a8/0x344 [ 116.969096][ T8153] setxattr+0x230/0x294 [ 116.970099][ T8153] path_setxattr+0x17c/0x258 [ 116.971200][ T8153] __arm64_sys_setxattr+0xbc/0xd8 [ 116.972504][ T8153] invoke_syscall+0x98/0x2c0 [ 116.973628][ T8153] el0_svc_common+0x138/0x258 [ 116.974700][ T8153] do_el0_svc+0x64/0x218 [ 116.975720][ T8153] el0_svc+0x58/0x168 [ 116.976690][ T8153] el0t_64_sync_handler+0x84/0xf0 [ 116.977935][ T8153] el0t_64_sync+0x18c/0x190 [ 116.978958][ T8153] [ 116.978958][ T8153] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 116.980743][ T8153] __lock_acquire+0x3338/0x7680 [ 116.981835][ T8153] lock_acquire+0x26c/0x7cc [ 116.982938][ T8153] down_read+0x64/0x308 [ 116.983945][ T8153] ocfs2_init_acl+0x2c8/0x764 [ 116.985091][ T8153] ocfs2_mknod+0x1574/0x2560 [ 116.986192][ T8153] ocfs2_create+0x1a8/0x560 [ 116.987336][ T8153] path_openat+0xeac/0x2548 [ 116.988465][ T8153] do_filp_open+0x1bc/0x3cc [ 116.989522][ T8153] do_sys_openat2+0x128/0x3e0 [ 116.990751][ T8153] __arm64_sys_openat+0x1f0/0x240 [ 116.992036][ T8153] invoke_syscall+0x98/0x2c0 [ 116.993088][ T8153] el0_svc_common+0x138/0x258 [ 116.994324][ T8153] do_el0_svc+0x64/0x218 [ 116.995329][ T8153] el0_svc+0x58/0x168 [ 116.996390][ T8153] el0t_64_sync_handler+0x84/0xf0 [ 116.997582][ T8153] el0t_64_sync+0x18c/0x190 [ 116.998671][ T8153] [ 116.998671][ T8153] other info that might help us debug this: [ 116.998671][ T8153] [ 117.000983][ T8153] Chain exists of: [ 117.000983][ T8153] &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle [ 117.000983][ T8153] [ 117.003899][ T8153] Possible unsafe locking scenario: [ 117.003899][ T8153] [ 117.005476][ T8153] CPU0 CPU1 [ 117.006787][ T8153] ---- ---- [ 117.007971][ T8153] lock(jbd2_handle); [ 117.008917][ T8153] lock(&journal->j_trans_barrier); [ 117.010823][ T8153] lock(jbd2_handle); [ 117.012285][ T8153] lock(&oi->ip_xattr_sem); [ 117.013292][ T8153] [ 117.013292][ T8153] *** DEADLOCK *** [ 117.013292][ T8153] [ 117.015111][ T8153] 8 locks held by syz.4.1418/8153: [ 117.016175][ T8153] #0: ffff0000cd6ba460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 117.018098][ T8153] #1: ffff0000e0e39808 (&type->i_mutex_dir_key#12){+.+.}-{3:3}, at: path_openat+0x5ec/0x2548 [ 117.020105][ T8153] #2: ffff0000f2311808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x164/0x4428 [ 117.023094][ T8153] #3: ffff0000e0e3ed88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x164/0x4428 [ 117.026060][ T8153] #4: ffff0000f2316d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0xfc/0x25dc [ 117.029002][ T8153] #5: ffff0000cd6ba650 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_mknod+0xe64/0x2560 [ 117.030973][ T8153] #6: ffff0000edd280e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3dc/0x73c [ 117.033265][ T8153] #7: ffff0000fd2ca990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1118/0x13ac [ 117.035299][ T8153] [ 117.035299][ T8153] stack backtrace: [ 117.036584][ T8153] CPU: 0 PID: 8153 Comm: syz.4.1418 Not tainted 6.1.114-syzkaller #0 [ 117.038248][ T8153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.040454][ T8153] Call trace: [ 117.041180][ T8153] dump_backtrace+0x1c8/0x1f4 [ 117.042202][ T8153] show_stack+0x2c/0x3c [ 117.043119][ T8153] dump_stack_lvl+0x108/0x170 [ 117.044167][ T8153] dump_stack+0x1c/0x58 [ 117.045017][ T8153] print_circular_bug+0x150/0x1b8 [ 117.046009][ T8153] check_noncircular+0x2cc/0x378 [ 117.047062][ T8153] __lock_acquire+0x3338/0x7680 [ 117.048041][ T8153] lock_acquire+0x26c/0x7cc [ 117.049009][ T8153] down_read+0x64/0x308 [ 117.049914][ T8153] ocfs2_init_acl+0x2c8/0x764 [ 117.050873][ T8153] ocfs2_mknod+0x1574/0x2560 [ 117.051903][ T8153] ocfs2_create+0x1a8/0x560 [ 117.052810][ T8153] path_openat+0xeac/0x2548 [ 117.053793][ T8153] do_filp_open+0x1bc/0x3cc [ 117.054723][ T8153] do_sys_openat2+0x128/0x3e0 [ 117.055707][ T8153] __arm64_sys_openat+0x1f0/0x240 [ 117.056738][ T8153] invoke_syscall+0x98/0x2c0 [ 117.057691][ T8153] el0_svc_common+0x138/0x258 [ 117.058744][ T8153] do_el0_svc+0x64/0x218 [ 117.059749][ T8153] el0_svc+0x58/0x168 [ 117.060622][ T8153] el0t_64_sync_handler+0x84/0xf0 [ 117.061745][ T8153] el0t_64_sync+0x18c/0x190 [ 117.098552][ T8156] loop1: detected capacity change from 0 to 40427 [ 117.110001][ T8156] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 117.112044][ T8156] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 117.130826][ T4295] ocfs2: Unmounting device (7,4) on (node local) [ 117.139309][ T8156] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.168864][ T8156] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 117.170317][ T8156] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 117.185024][ T8177] f2fs_ckpt-7:1: attempt to access beyond end of device [ 117.185024][ T8177] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 117.258841][ T8169] loop2: detected capacity change from 0 to 32768 [ 117.268588][ T8169] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1422 (8169) [ 117.281197][ T8169] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.283476][ T8169] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 117.286156][ T8169] BTRFS info (device loop2): use zlib compression, level 3 [ 117.287932][ T8169] BTRFS info (device loop2): using free space tree [ 117.343387][ T8169] BTRFS info (device loop2): enabling ssd optimizations [ 117.371313][ T4301] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.936759][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.938144][ T2060] ieee802154 phy1 wpan1: encryption failed: -22