last executing test programs: 1.363954775s ago: executing program 3 (id=4153): futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x5, 0x40000000, 0x0, &(0x7f0000000000), 0x1ffffff) 716.991516ms ago: executing program 1 (id=4173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 644.575979ms ago: executing program 1 (id=4176): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) 587.974922ms ago: executing program 1 (id=4179): unshare(0x28000600) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 499.274536ms ago: executing program 4 (id=4182): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002780), 0x2280) fcntl$setstatus(r0, 0x4, 0x0) 492.977127ms ago: executing program 3 (id=4183): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x190, 0x78, 0x0, 0x280, 0x0, 0x11, 0x1, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) 432.719839ms ago: executing program 1 (id=4185): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x1000000000000, 0x0, 0x10, r0, 0x0) 432.459839ms ago: executing program 0 (id=4186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c00030000"], 0x100}}, 0x0) 417.9014ms ago: executing program 4 (id=4187): r0 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000380)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14 1792). [ 90.051901][T10414] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 90.054352][T10414] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 90.074760][T10414] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.2678: bad orphan inode 16 [ 90.083913][T10414] ext4_test_bit(bit=15, block=18) = 1 [ 90.084964][T10414] is_bad_inode(inode)=0 [ 90.085749][T10414] NEXT_ORPHAN(inode)=0 [ 90.086460][T10414] max_ino=32 [ 90.086997][T10414] i_nlink=2 [ 90.087625][T10414] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 90.162453][T10414] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 90.206803][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 90.298719][T10434] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 90.330765][T10434] EXT4-fs error (device loop3): __ext4_find_entry:1698: inode #2: comm syz.3.2686: checksumming directory block 0 [ 90.345211][T10442] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2691'. [ 90.358032][T10437] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 90.367530][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 90.491280][T10455] device ipip0 entered promiscuous mode [ 90.595299][T10463] MINIX-fs: mounting file system with errors, running fsck is recommended [ 90.757937][T10474] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=301129, location=301129 [ 90.785572][T10474] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.835069][T10468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.915250][T10468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.923725][T10458] (syz.2.2699,10458,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 90.928257][T10458] (syz.2.2699,10458,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 90.957131][T10458] JBD2: Ignoring recovery information on journal [ 90.967506][T10468] bond0 (unregistering): Released all slaves [ 91.033094][T10467] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 91.045538][T10458] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 91.062800][T10467] gfs2: fsid=.: Now mounting FS (format 0)... [ 91.071310][T10467] gfs2: not a GFS2 filesystem [ 91.072209][T10467] gfs2: fsid=.: can't read superblock [ 91.073218][T10467] gfs2: fsid=.: can't read superblock: -22 [ 91.134997][T10492] device ipip0 entered promiscuous mode [ 91.251954][ T4335] ocfs2: Unmounting device (7,2) on (node local) [ 91.443826][T10516] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2726'. [ 91.527832][T10529] set_capacity_and_notify: 11 callbacks suppressed [ 91.527844][T10529] loop1: detected capacity change from 0 to 512 [ 91.572461][T10535] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709547520) [ 91.574661][T10535] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 91.602288][T10529] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 91.682715][T10529] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2732: bg 0: block 352: padding at end of block bitmap is not set [ 91.712268][T10529] Quota error (device loop1): write_blk: dquota write failed [ 91.714098][T10529] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 91.732627][T10542] loop3: detected capacity change from 0 to 256 [ 91.736609][T10529] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.2732: Failed to acquire dquot type 1 [ 91.738063][T10543] loop4: detected capacity change from 0 to 24 [ 91.740625][T10543] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 91.771455][T10543] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 92.458496][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 92.665412][T10573] device veth1_macvtap left promiscuous mode [ 92.879296][T10593] loop4: detected capacity change from 0 to 256 [ 92.903072][T10597] vhci_hcd: invalid port number 211 [ 92.904004][T10597] vhci_hcd: invalid port number 211 [ 92.990566][T10606] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2768'. [ 93.085110][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2775'. [ 93.125747][T10622] netlink: 'syz.2.2777': attribute type 2 has an invalid length. [ 93.127236][T10622] netlink: 'syz.2.2777': attribute type 1 has an invalid length. [ 93.128665][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2777'. [ 93.203520][T10632] MTD: Couldn't look up 'mtd0/file0': -2 [ 93.272510][T10644] sock: sock_timestamping_bind_phc: sock not bind to device [ 93.275512][T10637] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 93.438411][T10663] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 93.504375][T10670] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 93.505806][T10670] vhci_hcd: invalid port number 250 [ 93.506797][T10670] vhci_hcd: invalid port number 250 [ 93.553592][T10678] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2805'. [ 93.599237][T10684] Cannot find add_set index 34 as target [ 93.633647][T10690] loop2: detected capacity change from 0 to 256 [ 93.635215][T10690] exfat: Deprecated parameter 'utf8' [ 93.683761][T10690] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 93.697377][T10698] x_tables: duplicate entry at hook 3 [ 93.749985][T10704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2814'. [ 93.784066][T10708] netlink: 'syz.2.2817': attribute type 3 has an invalid length. [ 93.916857][T10723] loop0: detected capacity change from 0 to 256 [ 94.067461][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2831'. [ 94.104751][T10703] loop1: detected capacity change from 0 to 32768 [ 94.138930][T10703] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 94.162801][T10747] loop0: detected capacity change from 0 to 512 [ 94.194352][ T4320] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.223893][T10747] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 94.247052][T10747] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2836: bg 0: block 352: padding at end of block bitmap is not set [ 94.270484][T10747] Quota error (device loop0): write_blk: dquota write failed [ 94.277657][T10747] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 94.289027][T10747] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.2836: Failed to acquire dquot type 1 [ 94.409091][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 94.447504][T10740] loop2: detected capacity change from 0 to 32768 [ 94.469765][T10740] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 94.479448][T10740] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 94.495603][T10740] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 94.587317][T10740] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 94.618716][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2851'. [ 94.630741][T10740] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 94.632622][T10740] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 94.632622][T10740] inode = 12 2341 [ 94.632622][T10740] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 94.659239][T10740] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 94.660975][T10740] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:10740 [syz.2.2832] __gfs2_lookup+0xbc/0x2b8 [ 94.685567][T10740] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 94.687158][T10740] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 94.691777][T10740] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 94.693267][T10740] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 94.713397][T10740] gfs2: fsid=syz:syz.s: File system withdrawn [ 94.714820][T10740] CPU: 0 PID: 10740 Comm: syz.2.2832 Not tainted syzkaller #0 [ 94.716152][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 94.718025][T10740] Call trace: [ 94.718667][T10740] dump_backtrace+0x1c4/0x1f0 [ 94.719565][T10740] show_stack+0x2c/0x3c [ 94.720395][T10740] __dump_stack+0x30/0x40 [ 94.721192][T10740] dump_stack_lvl+0xf4/0x15c [ 94.722073][T10740] dump_stack+0x1c/0x5c [ 94.722867][T10740] gfs2_withdraw+0x9f8/0x1244 [ 94.723743][T10740] gfs2_consist_inode_i+0xf8/0x114 [ 94.724660][T10740] gfs2_dirent_scan+0x478/0x5bc [ 94.725522][T10740] gfs2_dirent_search+0x25c/0x6f0 [ 94.726428][T10740] gfs2_dir_search+0x5c/0x210 [ 94.727289][T10740] gfs2_lookupi+0x3dc/0x5c0 [ 94.728104][T10740] __gfs2_lookup+0xbc/0x2b8 [ 94.728903][T10740] gfs2_lookup+0x2c/0x3c [ 94.729675][T10740] lookup_one_qstr_excl+0x108/0x230 [ 94.730616][T10740] filename_create+0x1d0/0x3a8 [ 94.731582][T10740] do_mkdirat+0xac/0x3ec [ 94.732331][T10740] __arm64_sys_mkdirat+0x90/0xa8 [ 94.733224][T10740] invoke_syscall+0x98/0x290 [ 94.734040][T10740] el0_svc_common+0x13c/0x258 [ 94.734918][T10740] do_el0_svc+0x5c/0x134 [ 94.735707][T10740] el0_svc+0x58/0x128 [ 94.736455][T10740] el0t_64_sync_handler+0x84/0xf0 [ 94.737443][T10740] el0t_64_sync+0x18c/0x190 [ 94.817491][T10805] loop1: detected capacity change from 0 to 1024 [ 94.898026][T10805] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 94.953930][T10805] EXT4-fs error (device loop1): ext4_xattr_set_entry:1619: inode #2: comm syz.1.2862: corrupted xattr entries [ 95.071945][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 95.165961][T10844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2880'. [ 95.357972][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2890'. [ 95.736783][T10916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2912'. [ 95.789631][T10912] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 95.838985][T10928] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 95.889050][T10912] ntfs3: loop4: ino=1b, "file0" attr_set_size [ 95.890513][T10912] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 96.079870][T10945] NILFS (loop1): invalid segment: Magic number mismatch [ 96.081225][T10945] NILFS (loop1): trying rollback from an earlier position [ 96.098326][T10945] NILFS (loop1): recovery complete [ 96.108551][T10957] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.148800][T10959] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2933'. [ 96.214604][T10951] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 96.255772][T10963] ntfs: volume version 3.1. [ 96.603501][T10990] set_capacity_and_notify: 7 callbacks suppressed [ 96.603516][T10990] loop2: detected capacity change from 0 to 512 [ 96.733690][T10990] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 96.851922][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 96.872440][T10972] loop4: detected capacity change from 0 to 32768 [ 96.886302][T11013] netlink: 'syz.2.2957': attribute type 33 has an invalid length. [ 96.893857][T10972] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 96.895721][T10972] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 96.897302][T10972] BTRFS info (device loop4): force zlib compression, level 3 [ 96.913455][T10972] BTRFS info (device loop4): allowing degraded mounts [ 96.914734][T10972] BTRFS info (device loop4): setting nodatasum [ 96.915888][T10972] BTRFS info (device loop4): allowing degraded mounts [ 96.917048][T10972] BTRFS info (device loop4): using free space tree [ 96.937865][T11011] loop3: detected capacity change from 0 to 4096 [ 96.958200][T11011] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 97.058554][T11030] netlink: 572 bytes leftover after parsing attributes in process `syz.0.2960'. [ 97.062205][T11030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2960'. [ 97.109005][T11007] loop1: detected capacity change from 0 to 32768 [ 97.172101][T11007] JBD2: Ignoring recovery information on journal [ 97.203468][ T4338] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 97.206478][ T4338] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 97.207752][ T4338] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 97.227935][T11007] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 97.294939][ T4332] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 97.454455][T11007] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 97.454513][T11007] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 97.474970][T11007] OCFS2: Returning error to the calling process. [ 97.476476][T11007] (syz.1.2954,11007,1):ocfs2_mknod:509 ERROR: status = -117 [ 97.488355][T11007] (syz.1.2954,11007,1):ocfs2_mkdir:666 ERROR: status = -117 [ 97.520679][T11060] loop2: detected capacity change from 0 to 4096 [ 97.537631][ T4328] ocfs2: Unmounting device (7,1) on (node local) [ 97.552018][ T4320] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop4 scanned by udevd (4320) [ 97.587326][T11066] xt_ecn: cannot match TCP bits for non-tcp packets [ 97.601234][T11060] ntfs: volume version 3.1. [ 97.833140][T11099] netlink: 'syz.3.2989': attribute type 16 has an invalid length. [ 97.834669][T11099] netlink: 'syz.3.2989': attribute type 3 has an invalid length. [ 98.392874][T11170] autofs4:pid:11170:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 98.649416][T11202] loop0: detected capacity change from 0 to 128 [ 98.716891][T11207] __nla_validate_parse: 7 callbacks suppressed [ 98.716904][T11207] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3044'. [ 98.753279][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3047'. [ 98.762014][T11213] netlink: 'syz.4.3047': attribute type 1 has an invalid length. [ 98.763485][T11213] netlink: 'syz.4.3047': attribute type 1 has an invalid length. [ 98.764886][T11213] netlink: 'syz.4.3047': attribute type 1 has an invalid length. [ 98.766476][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3047'. [ 98.770135][T11213] netlink: 'syz.4.3047': attribute type 1 has an invalid length. [ 98.921750][T11231] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3055'. [ 98.959456][T11237] comedi comedi0: comedi_config --init_data is deprecated [ 99.125932][T11258] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.127300][T11258] IPv6: NLM_F_CREATE should be set when creating new route [ 99.128692][T11258] IPv6: NLM_F_CREATE should be set when creating new route [ 99.129955][T11258] IPv6: NLM_F_CREATE should be set when creating new route [ 99.191099][T11261] overlayfs: unrecognized mount option "\" or missing value [ 99.260190][T11264] loop3: detected capacity change from 0 to 4096 [ 99.277295][T11264] ntfs3: loop3: Failed to load $Extend. [ 99.342387][T11264] ntfs3: loop3: ino=5, "/" directory corrupted [ 99.445234][T11282] No such timeout policy "syz0" [ 99.791783][T11312] loop4: detected capacity change from 0 to 1764 [ 99.930301][T11326] loop2: detected capacity change from 0 to 64 [ 100.015528][T11332] binder: 11331:11332 ioctl c0306201 20000680 returned -14 [ 100.367753][T11246] loop0: detected capacity change from 0 to 131072 [ 100.376609][T11246] F2FS-fs (loop0): invalid crc value [ 100.409494][ T27] audit: type=1400 audit(100.390:4): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=11374 comm="syz.3.3124" [ 100.438810][T11246] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.469825][T11246] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 100.501815][T11246] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 100.574929][T11379] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 100.708394][ T39] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 100.709908][ T4335] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 100.711078][ T4335] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 100.712263][ T4335] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 100.715257][ T39] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 100.716729][ T4335] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 100.791524][T11410] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 100.820761][T11410] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 100.841254][T11410] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 101.081695][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 101.353820][T11417] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 101.428129][ T8284] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.642314][T11461] set_capacity_and_notify: 3 callbacks suppressed [ 101.642325][T11461] loop4: detected capacity change from 0 to 1024 [ 101.737301][T11443] loop2: detected capacity change from 0 to 32768 [ 101.846503][T11476] IPVS: length: 96 != 8 [ 101.886355][T11443] XFS (loop2): Mounting V5 Filesystem [ 101.969126][T11443] XFS (loop2): Ending clean mount [ 102.011465][T11443] XFS (loop2): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 102.052419][T11499] loop0: detected capacity change from 0 to 4096 [ 102.066981][ T4335] XFS (loop2): Unmounting Filesystem [ 102.084113][T11499] Quota error (device loop0): v2_read_file_info: Block with free entry 3560767493 out of range (1, 6). [ 102.086218][T11499] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 102.107816][T11499] EXT4-fs (loop0): mount failed [ 102.231796][ T8284] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.332092][T11517] loop1: detected capacity change from 0 to 512 [ 102.341297][T11485] loop4: detected capacity change from 0 to 32768 [ 102.370521][T11517] EXT4-fs (loop1): orphan cleanup on readonly fs [ 102.377630][T11517] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.3188: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 102.388471][T11485] ERROR: (device loop4): dbFindCtl: Corrupt dmapctl page [ 102.388471][T11485] [ 102.391271][T11485] ERROR: (device loop4): remounting filesystem as read-only [ 102.392650][T11485] ialloc: diAlloc returned -5! [ 102.410723][T11517] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.1.3188: ea_inode dec ref err=-117 [ 102.419976][T11517] EXT4-fs (loop1): 1 orphan inode deleted [ 102.421014][T11517] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 102.450621][T11524] cifs: Unknown parameter 'h}#úä [ 102.450621][T11524] Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚˜Aï1:ºÃÃÓ­'Ä4,9z «-#´IÜõ]%g' [ 102.586704][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 102.820827][T11559] loop0: detected capacity change from 0 to 64 [ 102.845894][T11559] MINIX-fs: bad superblock [ 102.932468][ T5391] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.966142][T11576] netlink: 'syz.3.3216': attribute type 1 has an invalid length. [ 102.967605][T11576] netlink: 'syz.3.3216': attribute type 2 has an invalid length. [ 102.981456][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3216'. [ 103.258318][T11607] xt_TPROXY: Can be used only with -p tcp or -p udp [ 103.446928][T11633] loop1: detected capacity change from 0 to 164 [ 103.466098][T11633] rock: directory entry would overflow storage [ 103.469768][T11633] rock: sig=0x66, size=4, remaining=3 [ 103.502745][T11633] rock: directory entry would overflow storage [ 103.512236][T11633] rock: sig=0x66, size=4, remaining=3 [ 103.518738][T11633] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 103.542084][ T27] audit: type=1400 audit(103.520:5): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A20B7 pid=11640 comm="syz.4.3247" [ 103.621248][T11649] loop4: detected capacity change from 0 to 64 [ 103.699658][T11656] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.711018][T11656] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3251'. [ 103.879504][T11668] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3258'. [ 104.090728][T11683] loop2: detected capacity change from 0 to 4096 [ 104.103438][T11688] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 104.333144][T11700] loop0: detected capacity change from 0 to 65 [ 104.348417][T11700] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 104.351930][T11702] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3274'. [ 104.480639][T11687] F2FS-fs (loop1): build fault injection attr: rate: 7, type: 0x3ffff [ 104.482237][T11687] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 104.495358][T11687] F2FS-fs (loop1): invalid crc value [ 104.523674][T11687] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x57c/0x8b8 [ 104.526223][T11687] F2FS-fs (loop1): Found nat_bits in checkpoint [ 104.543596][T11687] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x57c/0x8b8 [ 104.568211][T11687] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 104.574434][T11615] F2FS-fs (loop3): invalid crc value [ 104.615503][T11615] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.632373][T11687] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0x100/0x60c [ 104.662242][T11615] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 104.681359][T11615] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 104.741808][T11726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.744536][ T6796] lo speed is unknown, defaulting to 1000 [ 105.190068][T11762] netlink: 'syz.1.3300': attribute type 1 has an invalid length. [ 105.242135][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3304'. [ 105.398400][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3311'. [ 105.554728][T11795] erofs: (device loop3): mounted with root inode @ nid 36. [ 106.066879][T11845] hfsplus: invalid length 1280 has been corrected to 255 [ 106.067097][T11849] EXT4-fs: Ignoring removed oldalloc option [ 106.070778][T11845] hfsplus: invalid length 1280 has been corrected to 255 [ 106.118280][T11854] netlink: 'syz.1.3346': attribute type 21 has an invalid length. [ 106.123402][T11849] EXT4-fs error (device loop2): ext4_xattr_inode_iget:397: comm syz.2.3344: Parent and EA inode have the same ino 15 [ 106.128293][T11849] EXT4-fs (loop2): Remounting filesystem read-only [ 106.129590][T11849] EXT4-fs (loop2): 1 orphan inode deleted [ 106.130608][T11849] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 106.257565][T11861] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3350'. [ 106.268199][T11861] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3350'. [ 106.277250][T11861] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3350'. [ 106.278411][T11849] EXT4-fs error (device loop2): ext4_lookup:1864: inode #2: comm syz.2.3344: deleted inode referenced: 15 [ 106.298202][T11849] EXT4-fs (loop2): Remounting filesystem read-only [ 106.361150][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 106.461560][T11878] netlink: 'syz.3.3356': attribute type 2 has an invalid length. [ 106.463029][T11878] netlink: 'syz.3.3356': attribute type 8 has an invalid length. [ 106.488153][T11878] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3356'. [ 106.537497][T11884] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3360'. [ 106.635670][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3364'. [ 106.663023][T11895] set_capacity_and_notify: 5 callbacks suppressed [ 106.663035][T11895] loop0: detected capacity change from 0 to 764 [ 106.882454][T11912] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 106.970476][T11922] loop2: detected capacity change from 0 to 1024 [ 106.995756][T11922] hfsplus: invalid length 1280 has been corrected to 255 [ 106.997229][T11922] hfsplus: invalid length 1280 has been corrected to 255 [ 107.349523][T11958] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 107.386552][T11963] loop2: detected capacity change from 0 to 256 [ 107.486834][T11969] netlink: 'syz.2.3400': attribute type 1 has an invalid length. [ 107.578351][T11945] loop3: detected capacity change from 0 to 32768 [ 107.638710][T11945] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 107.638710][T11945] [ 107.761887][T11966] loop4: detected capacity change from 0 to 32768 [ 107.849505][T11966] XFS (loop4): Mounting V5 Filesystem [ 107.893570][T11966] XFS (loop4): Ending clean mount [ 107.961243][T11966] XFS: no-recovery mounts must be read-only. [ 108.063136][ T4332] XFS (loop4): Unmounting Filesystem [ 108.124169][T11986] loop2: detected capacity change from 0 to 32768 [ 108.126467][ T5132] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 108.143455][ T5132] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 108.144938][ T5132] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 108.146329][ T5132] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 108.147606][ T5132] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 108.182812][ T5132] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 108.420639][T12027] xt_TCPMSS: Only works on TCP SYN packets [ 108.510781][T12025] fido_id[12025]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.661985][T12023] loop3: detected capacity change from 0 to 32768 [ 108.744060][T12023] XFS (loop3): Mounting V5 Filesystem [ 108.824436][T12023] XFS (loop3): Ending clean mount [ 108.840298][T12055] nft_compat: unsupported protocol 1 [ 109.028423][ T4338] XFS (loop3): Unmounting Filesystem [ 109.228194][T12080] binder: 12077:12080 ioctl c00c620f 20000280 returned -22 [ 109.277675][T11999] loop1: detected capacity change from 0 to 131072 [ 109.284696][T12063] loop0: detected capacity change from 0 to 32768 [ 109.288998][T12063] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop0 scanned by syz.0.3436 (12063) [ 109.297716][T11999] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 109.300014][T11999] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 109.303188][T11999] F2FS-fs (loop1): invalid crc value [ 109.304251][T12063] BTRFS info (device loop0): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 109.306017][T12063] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 109.314792][T12063] BTRFS info (device loop0): using free space tree [ 109.317957][T12087] __nla_validate_parse: 9 callbacks suppressed [ 109.317967][T12087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3449'. [ 109.334716][T11999] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.352987][T11999] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 109.354302][T11999] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 109.408664][T11999] F2FS-fs (loop1): sanity_check_inode: inode (ino=7, mode=33261) should not have inline_data, run fsck to fix [ 109.482511][T12063] BTRFS info (device loop0): enabling ssd optimizations [ 109.651195][ T4334] BTRFS info (device loop0): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 109.767715][T12128] overlayfs: missing 'lowerdir' [ 109.785458][T12131] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (10) [ 109.812611][T12133] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3460'. [ 109.829279][ T4320] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 9 /dev/loop0 scanned by udevd (4320) [ 109.874522][T12140] loop3: detected capacity change from 0 to 256 [ 109.913507][T12140] FAT-fs (loop3): Directory bread(block 64) failed [ 109.915028][T12140] FAT-fs (loop3): Directory bread(block 65) failed [ 109.916270][T12140] FAT-fs (loop3): Directory bread(block 66) failed [ 109.917478][T12140] FAT-fs (loop3): Directory bread(block 67) failed [ 109.928126][T12140] FAT-fs (loop3): Directory bread(block 68) failed [ 109.929236][T12140] FAT-fs (loop3): Directory bread(block 69) failed [ 109.930414][T12140] FAT-fs (loop3): Directory bread(block 70) failed [ 109.931618][T12140] FAT-fs (loop3): Directory bread(block 71) failed [ 109.932852][T12140] FAT-fs (loop3): Directory bread(block 72) failed [ 109.934083][T12140] FAT-fs (loop3): Directory bread(block 73) failed [ 109.954441][T12150] nft_compat: unsupported protocol 5 [ 110.052594][T12158] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 110.072624][T12160] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 110.074389][T12160] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 110.405512][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3493'. [ 110.557522][T12208] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 110.625548][T12214] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3487'. [ 110.762632][T12214] team0: Port device team_slave_0 removed [ 110.771136][T12214] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 110.782753][T12213] netlink: 'syz.1.3501': attribute type 1 has an invalid length. [ 110.908198][T12239] netlink: 'syz.1.3513': attribute type 5 has an invalid length. [ 111.382718][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3543'. [ 111.384679][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3543'. [ 111.386266][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3543'. [ 111.571254][T12314] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 111.588409][T12314] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 111.619603][ T248] hfsplus: b-tree write err: -5, ino 25 [ 111.620791][ T248] hfsplus: b-tree write err: -5, ino 4 [ 111.622087][ T248] hfsplus: b-tree write err: -5, ino 2 [ 111.641157][T12330] tmpfs: Bad value for 'mpol' [ 111.711790][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3563'. [ 111.946947][T12366] set_capacity_and_notify: 6 callbacks suppressed [ 111.946961][T12366] loop0: detected capacity change from 0 to 1024 [ 111.968096][T12366] EXT4-fs: test_dummy_encryption requires encrypt feature [ 111.984954][T12367] loop1: detected capacity change from 0 to 2048 [ 112.036733][T12367] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 112.068501][T12367] EXT4-fs error (device loop1): empty_inline_dir:1912: inode #12: block 5: comm syz.1.3576: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 112.119499][T12367] EXT4-fs warning (device loop1): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 112.130526][T12383] ADFS-fs (nullb0): unrecognised mount option "arrier" or missing value [ 112.148469][T12380] loop3: detected capacity change from 0 to 2048 [ 112.184880][T12380] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 112.186352][T12380] UDF-fs: Scanning with blocksize 512 failed [ 112.194566][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 112.234217][T12380] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.385396][T12408] netlink: 'syz.3.3596': attribute type 11 has an invalid length. [ 112.397883][T12408] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3596'. [ 112.633190][T12437] loop3: detected capacity change from 0 to 256 [ 112.718662][T12441] loop4: detected capacity change from 0 to 2048 [ 112.749805][T12441] loop4: p1 < > p2 p3 < p5 > p4 [ 112.750818][T12441] loop4: partition table partially beyond EOD, truncated [ 112.753716][T12441] loop4: p1 start 4278190080 is beyond EOD, truncated [ 112.754889][T12441] loop4: p2 start 16908800 is beyond EOD, truncated [ 112.768056][T12441] loop4: p4 start 11326 is beyond EOD, truncated [ 112.769289][T12441] loop4: p5 start 16908800 is beyond EOD, truncated [ 112.886400][T12458] nftables ruleset with unbound chain [ 112.894290][ T4321] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.998684][T12469] overlayfs: missing 'workdir' [ 113.303826][T12466] loop1: detected capacity change from 0 to 32768 [ 113.311382][T12492] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.404123][T12466] XFS (loop1): Mounting V5 Filesystem [ 113.434150][T12505] autofs4:pid:12505:autofs_fill_super: called with bogus options [ 113.453543][T12466] XFS (loop1): Ending clean mount [ 113.458865][T12463] loop4: detected capacity change from 0 to 32768 [ 113.483856][T12466] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 113.495596][ T6796] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0x108, xfs_rmapbt block 0x14 [ 113.497919][ T6796] XFS (loop1): Unmount and run xfs_repair [ 113.499133][ T6796] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 113.500349][ T6796] 00000000: 52 4d 42 33 00 00 00 0c ff ff 02 ff ff ff ff ff RMB3............ [ 113.501832][ T6796] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 113.503339][ T6796] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 113.504852][ T6796] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01 ....lK.......... [ 113.538789][ T6796] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 113.540554][ T6796] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 113.542055][ T6796] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 113.543575][ T6796] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 113.545150][T12466] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x14 len 4 error 74 [ 113.553062][T12466] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x584/0xae8 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 113.556134][T12466] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 113.601015][ T4328] XFS (loop1): Unmounting Filesystem [ 113.701459][T12463] XFS (loop4): Mounting V5 Filesystem [ 113.756604][T12463] XFS (loop4): Ending clean mount [ 113.785402][T12463] XFS (loop4): Quotacheck needed: Please wait. [ 113.848291][T12463] XFS (loop4): Quotacheck: Done. [ 113.869892][T12538] loop2: detected capacity change from 0 to 16 [ 113.871848][T12538] erofs: (device loop2): mounted with root inode @ nid 36. [ 114.048485][ T4332] XFS (loop4): Unmounting Filesystem [ 114.277762][T12564] netlink: 'syz.0.3667': attribute type 2 has an invalid length. [ 114.429803][T12576] delete_channel: no stack [ 114.542654][T12556] loop2: detected capacity change from 0 to 32768 [ 114.551442][T12588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3679'. [ 114.572759][T12593] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3681'. [ 114.726215][ T5133] nvmet: connect request for invalid subsystem testsubsys! [ 114.727695][T12600] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 114.813838][T12615] syz.1.3692: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 114.829963][T12615] CPU: 1 PID: 12615 Comm: syz.1.3692 Not tainted syzkaller #0 [ 114.831403][T12615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 114.833323][T12615] Call trace: [ 114.833955][T12615] dump_backtrace+0x1c4/0x1f0 [ 114.834856][T12615] show_stack+0x2c/0x3c [ 114.835619][T12615] __dump_stack+0x30/0x40 [ 114.836373][T12615] dump_stack_lvl+0xf4/0x15c [ 114.837111][T12615] dump_stack+0x1c/0x5c [ 114.837833][T12615] warn_alloc+0x214/0x324 [ 114.838641][T12615] __vmalloc_node_range+0x118/0xe70 [ 114.839620][T12615] vmalloc+0x9c/0xd4 [ 114.840355][T12615] dvb_dvr_do_ioctl+0x120/0x1f8 [ 114.841262][T12615] dvb_usercopy+0x248/0x45c [ 114.842117][T12615] dvb_dvr_ioctl+0x3c/0x54 [ 114.843032][T12615] __arm64_sys_ioctl+0x14c/0x1c8 [ 114.843915][T12615] invoke_syscall+0x98/0x290 [ 114.844755][T12615] el0_svc_common+0x13c/0x258 [ 114.845627][T12615] do_el0_svc+0x5c/0x134 [ 114.846402][T12615] el0_svc+0x58/0x128 [ 114.847145][T12615] el0t_64_sync_handler+0x84/0xf0 [ 114.848068][T12615] el0t_64_sync+0x18c/0x190 [ 114.920574][T12626] tmpfs: Bad value for 'mpol' [ 114.939558][T12615] Mem-Info: [ 114.940200][T12615] active_anon:12458 inactive_anon:0 isolated_anon:0 [ 114.940200][T12615] active_file:15246 inactive_file:2280 isolated_file:0 [ 114.940200][T12615] unevictable:768 dirty:470 writeback:0 [ 114.940200][T12615] slab_reclaimable:19865 slab_unreclaimable:98268 [ 114.940200][T12615] mapped:29305 shmem:8222 pagetables:585 [ 114.940200][T12615] sec_pagetables:0 bounce:0 [ 114.940200][T12615] kernel_misc_reclaimable:0 [ 114.940200][T12615] free:1420160 free_pcp:5341 free_cma:7360 [ 115.007198][T12615] Node 0 active_anon:50132kB inactive_anon:0kB active_file:60984kB inactive_file:9420kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:117220kB dirty:1880kB writeback:0kB shmem:32888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:8940kB pagetables:2540kB sec_pagetables:0kB all_unreclaimable? no [ 115.044476][T12615] Node 0 DMA free:3076864kB boost:0kB min:20664kB low:25828kB high:30992kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 115.085733][T12615] lowmem_reserve[]: 0 0 3550 3550 3550 [ 115.087449][T12615] Node 0 Normal free:2603364kB boost:0kB min:24388kB low:30484kB high:36580kB reserved_highatomic:0KB active_anon:46096kB inactive_anon:0kB active_file:60984kB inactive_file:9444kB unevictable:3072kB writepending:1892kB present:5242880kB managed:3639600kB mlocked:0kB bounce:0kB free_pcp:24588kB local_pcp:14992kB free_cma:0kB [ 115.115820][T12615] lowmem_reserve[]: 0 0 0 0 0 [ 115.118505][T12615] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 115.121023][T12615] Node 0 Normal: 267*4kB (ME) 1532*8kB (UME) 522*16kB (UME) 583*32kB (UME) 159*64kB (UME) 148*128kB (UME) 108*256kB (UME) 85*512kB (UM) 59*1024kB (UME) 19*2048kB (UM) 581*4096kB (UM) = 2619724kB [ 115.147428][T12615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.152909][T12615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 115.154785][T12615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 115.169976][T12615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 115.173793][T12615] 23382 total pagecache pages [ 115.174989][T12615] 0 pages in swap cache [ 115.175745][T12615] Free swap = 124740kB [ 115.176709][T12615] Total swap = 124996kB [ 115.187875][T12615] 2097152 pages RAM [ 115.189207][T12615] 0 pages HighMem/MovableOnly [ 115.200695][T12615] 417204 pages reserved [ 115.201580][T12615] 8192 pages cma reserved [ 115.202515][T12615] 1 pages hwpoisoned [ 115.296378][T12656] xt_addrtype: ipv6 does not support BROADCAST matching [ 115.578944][ T27] audit: type=1800 audit(115.550:6): pid=12674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.3720" name="/newroot/806/bus" dev="tmpfs" ino=4103 res=0 errno=0 [ 115.760666][ T4320] udevd[4320]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 115.841600][T12632] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 115.860111][T12705] netlink: 798 bytes leftover after parsing attributes in process `syz.3.3734'. [ 115.894878][T12712] loop2: detected capacity change from 0 to 128 [ 115.908199][T12712] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 115.924764][T12712] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.989238][T12721] openvswitch: netlink: Message has -1 unknown bytes. [ 116.200580][T12738] hfsplus: keylen 65060 too large [ 116.201956][T12738] hfsplus: xattr searching failed [ 116.213481][T12742] __vm_enough_memory: pid: 12742, comm: syz.2.3753, no enough memory for the allocation [ 116.635140][T12768] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 116.638836][T12768] ntfs3: loop0: Failed to load $Extend. [ 116.725186][ T4334] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 116.729282][ T4334] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 116.769000][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3773'. [ 116.896702][T12798] netlink: 'syz.3.3780': attribute type 11 has an invalid length. [ 116.905521][T12798] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3780'. [ 117.045786][T12814] device bond4 entered promiscuous mode [ 117.048497][T12814] 8021q: adding VLAN 0 to HW filter on device bond4 [ 117.071008][T12817] netlink: 'syz.0.3788': attribute type 46 has an invalid length. [ 117.072732][T12817] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3788'. [ 117.237922][T12828] set_capacity_and_notify: 2 callbacks suppressed [ 117.237933][T12828] loop1: detected capacity change from 0 to 8 [ 117.279998][T12832] sctp: [Deprecated]: syz.3.3795 (pid 12832) Use of int in maxseg socket option. [ 117.279998][T12832] Use struct sctp_assoc_value instead [ 117.285117][T12828] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.286454][T12828] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.287558][T12828] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.303304][T12828] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.305648][T12828] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.504297][T12855] tc_dump_action: action bad kind [ 117.570706][T12864] loop2: detected capacity change from 0 to 512 [ 117.578466][T12864] EXT4-fs: Ignoring removed orlov option [ 117.579458][T12864] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.654708][T12864] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 117.678448][T12864] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.3811: attempt to clear invalid blocks 2 len 1 [ 117.684917][T12864] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 117.699733][T12877] xt_TCPMSS: Only works on TCP SYN packets [ 117.711812][T12864] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3811: invalid indirect mapped block 1819239214 (level 0) [ 117.736399][T12864] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3811: invalid indirect mapped block 1819239214 (level 1) [ 117.764902][T12864] EXT4-fs (loop2): 1 truncate cleaned up [ 117.766080][T12864] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 117.770458][T12885] netlink: 'syz.4.3821': attribute type 32 has an invalid length. [ 117.800674][T12887] netlink: 'syz.3.3822': attribute type 2 has an invalid length. [ 117.810729][T12887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3822'. [ 117.855074][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 117.924776][T12898] loop2: detected capacity change from 0 to 512 [ 117.942699][T12898] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.3826: inode has both inline data and extents flags [ 117.948314][T12898] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.3826: couldn't read orphan inode 15 (err -117) [ 117.954686][T12898] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 118.036059][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 118.132976][T12923] kcapi: manufacturer command 3 unknown. [ 118.207565][T12933] loop0: detected capacity change from 0 to 256 [ 118.603738][T12966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3861'. [ 118.721885][T12972] loop4: detected capacity change from 0 to 4096 [ 118.734612][T12972] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 118.993534][T13002] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.3878' sets config #0 [ 119.025889][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3880'. [ 119.037049][T13008] x_tables: unsorted underflow at hook 2 [ 119.119966][T13018] netlink: 'syz.1.3886': attribute type 10 has an invalid length. [ 119.166121][T13020] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 119.171645][T13018] team0: Device ipvlan1 failed to register rx_handler [ 119.174092][T13020] syz.0.3888: attempt to access beyond end of device [ 119.174092][T13020] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 119.280855][T13030] loop0: detected capacity change from 0 to 256 [ 119.324893][T13030] FAT-fs (loop0): Directory bread(block 64) failed [ 119.326184][T13030] FAT-fs (loop0): Directory bread(block 65) failed [ 119.327377][T13030] FAT-fs (loop0): Directory bread(block 66) failed [ 119.351215][T13030] FAT-fs (loop0): Directory bread(block 67) failed [ 119.352498][T13030] FAT-fs (loop0): Directory bread(block 68) failed [ 119.353680][T13030] FAT-fs (loop0): Directory bread(block 69) failed [ 119.354889][T13030] FAT-fs (loop0): Directory bread(block 70) failed [ 119.356074][T13030] FAT-fs (loop0): Directory bread(block 71) failed [ 119.357263][T13030] FAT-fs (loop0): Directory bread(block 72) failed [ 119.384774][T13030] FAT-fs (loop0): Directory bread(block 73) failed [ 119.610082][T13058] netlink: 'syz.2.3906': attribute type 10 has an invalid length. [ 119.639802][T13058] team0: Device ipvlan1 failed to register rx_handler [ 119.665620][T13062] SET target dimension over the limit! [ 119.876967][T13081] x_tables: unsorted entry at hook 1 [ 119.899084][T13087] cifs: Bad value for 'source' [ 120.031290][T13099] tmpfs: Bad value for 'mpol' [ 120.285998][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3935'. [ 120.441050][T13132] loop1: detected capacity change from 0 to 128 [ 120.454576][T13132] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 120.456880][T13132] hpfs: filesystem error: improperly stopped [ 120.468119][T13132] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 120.469903][T13132] hpfs: You really don't want any checks? You are crazy... [ 120.471494][T13132] hpfs: hpfs_map_sector(): read error [ 120.472574][T13132] hpfs: code page support is disabled [ 120.494041][T13132] hpfs: hpfs_map_4sectors(): unaligned read [ 120.499099][T13132] hpfs: hpfs_map_4sectors(): unaligned read [ 120.500198][T13132] hpfs: filesystem error: unable to find root dir [ 120.647847][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3948'. [ 120.819195][T13152] loop4: detected capacity change from 0 to 256 [ 120.910177][T13138] loop0: detected capacity change from 0 to 32768 [ 121.013595][T13138] XFS (loop0): Mounting V5 Filesystem [ 121.121665][T13138] XFS (loop0): Ending clean mount [ 121.155096][T13174] loop1: detected capacity change from 0 to 512 [ 121.184892][T13173] syz.4.3957: attempt to access beyond end of device [ 121.184892][T13173] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 121.227546][ T4334] XFS (loop0): Unmounting Filesystem [ 121.227773][T13174] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.3958: bg 0: block 5: invalid block bitmap [ 121.236475][T13174] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 121.240900][T13174] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3958: invalid indirect mapped block 3 (level 2) [ 121.263515][T13174] EXT4-fs (loop1): 1 orphan inode deleted [ 121.264607][T13174] EXT4-fs (loop1): 1 truncate cleaned up [ 121.289529][T13174] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 121.454892][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 121.509274][T13186] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3962'. [ 121.510914][T13186] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3962'. [ 121.642963][T13192] nvme nvme1: failed to connect socket: -111 [ 121.802561][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3974'. [ 121.978027][T13221] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 122.059328][T13011] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.175971][T13246] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 122.231706][T13251] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3993'. [ 122.240537][T13248] set_capacity_and_notify: 2 callbacks suppressed [ 122.240548][T13248] loop0: detected capacity change from 0 to 2048 [ 122.268923][T13248] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.718355][T13294] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 3000268929 out of range (1000000..45000000) [ 122.792713][T13274] loop1: detected capacity change from 0 to 32768 [ 122.813291][T13274] (syz.1.4003,13274,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.816811][T13274] (syz.1.4003,13274,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.899486][T13274] JBD2: Ignoring recovery information on journal [ 122.962165][T13321] netlink: 'syz.2.4026': attribute type 6 has an invalid length. [ 122.974182][T13274] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 123.119151][ T4328] ocfs2: Unmounting device (7,1) on (node local) [ 123.174053][T13342] loop0: detected capacity change from 0 to 16 [ 123.208071][T13342] erofs: (device loop0): mounted with root inode @ nid 36. [ 123.262077][ T5391] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 123.262565][T13354] loop2: detected capacity change from 0 to 64 [ 123.382045][T13363] nvme_rdma: malformed address passed: 1å#åº-&QöÙ;?²s>#ÕZÙÞ>U´ñ7×Û ÷h‘-Ø–ÏíÒY†ïFxŠH:4420 [ 123.476290][T13378] device geneve2 entered promiscuous mode [ 123.484419][T13382] rdma_rxe: rxe creation allowed on top of a real device only [ 123.976091][T13437] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.4082'. [ 124.132588][T13460] loop0: detected capacity change from 0 to 256 [ 124.134313][T13460] exfat: Deprecated parameter 'utf8' [ 124.158209][T13460] exfat: Deprecated parameter 'namecase' [ 124.159340][T13460] exfat: Deprecated parameter 'namecase' [ 124.196431][T13460] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 124.541401][T13504] loop3: detected capacity change from 0 to 256 [ 124.873579][T13538] loop3: detected capacity change from 0 to 512 [ 124.875301][T13538] EXT4-fs: Ignoring removed i_version option [ 124.916717][T13543] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 124.931869][T13544] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4135'. [ 124.947522][T13538] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.979855][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4137'. [ 125.037871][T13538] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 125.041427][T13538] Quota error (device loop3): write_blk: dquota write failed [ 125.042972][T13538] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 125.044674][T13538] Quota error (device loop3): write_blk: dquota write failed [ 125.045958][T13538] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 125.047727][T13538] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.4132: Failed to acquire dquot type 1 [ 125.115521][T13538] EXT4-fs (loop3): 1 truncate cleaned up [ 125.116594][T13538] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 125.209922][T13538] Quota error (device loop3): write_blk: dquota write failed [ 125.211878][T13538] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 125.221806][T13538] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.4132: Failed to acquire dquot type 1 [ 125.333129][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 125.504632][T13552] loop2: detected capacity change from 0 to 32768 [ 125.519529][T13453] loop4: detected capacity change from 0 to 131072 [ 125.535076][T13453] F2FS-fs (loop4): invalid crc value [ 125.556290][T13587] loop1: detected capacity change from 0 to 2048 [ 125.560386][T13587] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 125.564235][T13453] F2FS-fs (loop4): Found nat_bits in checkpoint [ 125.572908][T13552] XFS (loop2): Mounting V5 Filesystem [ 125.585733][T13595] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.587888][T13453] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 125.616110][T13453] F2FS-fs (loop4): Corrupted max_depth of 3: 16842753 [ 125.621906][T13453] F2FS-fs (loop4): access invalid blkaddr:16777216 [ 125.625510][T13453] CPU: 1 PID: 13453 Comm: syz.4.4090 Not tainted syzkaller #0 [ 125.626957][T13453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 125.629021][T13453] Call trace: [ 125.629709][T13453] dump_backtrace+0x1c4/0x1f0 [ 125.630682][T13453] show_stack+0x2c/0x3c [ 125.631518][T13453] __dump_stack+0x30/0x40 [ 125.632340][T13453] dump_stack_lvl+0xf4/0x15c [ 125.633199][T13453] dump_stack+0x1c/0x5c [ 125.633966][T13453] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 125.634925][T13453] f2fs_get_read_data_page+0x24c/0x60c [ 125.635933][T13453] f2fs_find_data_page+0x1c4/0x520 [ 125.636898][T13453] __f2fs_find_entry+0x5b4/0xc1c [ 125.637839][T13453] f2fs_lookup+0x218/0x900 [ 125.638659][T13453] __lookup_slow+0x25c/0x38c [ 125.639510][T13453] lookup_slow+0x60/0x84 [ 125.640299][T13453] walk_component+0x278/0x374 [ 125.641176][T13453] path_lookupat+0x168/0x3f0 [ 125.642009][T13453] filename_lookup+0x1d4/0x490 [ 125.642858][T13453] user_path_at_empty+0x5c/0x84 [ 125.643733][T13453] __arm64_sys_mount+0x468/0x5a0 [ 125.644632][T13453] invoke_syscall+0x98/0x290 [ 125.645480][T13453] el0_svc_common+0x13c/0x258 [ 125.646320][T13453] do_el0_svc+0x5c/0x134 [ 125.647114][T13453] el0_svc+0x58/0x128 [ 125.647862][T13453] el0t_64_sync_handler+0x84/0xf0 [ 125.648804][T13453] el0t_64_sync+0x18c/0x190 [ 125.685988][T13552] XFS (loop2): Ending clean mount [ 125.761585][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4159'. [ 125.777882][ T4335] XFS (loop2): Unmounting Filesystem [ 125.950420][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.951870][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.149138][T13632] netlink: 'syz.1.4170': attribute type 3 has an invalid length. [ 126.270194][T13643] EXT2-fs (loop0): error: revision level too high, forcing read-only mode [ 126.300917][T13643] EXT2-fs (loop0): error: ext2_check_page: bad entry in directory #2: : unaligned directory entry - offset=92, inode=0, rec_len=127, name_len=5 [ 126.316735][T13649] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4178'. [ 126.322315][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4178'. [ 126.482413][T13667] xt_connbytes: Forcing CT accounting to be enabled [ 126.649860][T13685] kAFS: unable to lookup cell '' [ 126.823664][T13705] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4204'. [ 126.901611][ T6972] ------------[ cut here ]------------ [ 126.903116][ T6972] WARNING: CPU: 0 PID: 6972 at net/netfilter/nft_set_pipapo.c:2384 nft_pipapo_destroy+0x784/0x7e0 [ 126.905302][ T6972] Modules linked in: [ 126.906110][ T6972] CPU: 0 PID: 6972 Comm: kworker/0:13 Not tainted syzkaller #0 [ 126.907509][ T6972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 126.909362][ T6972] Workqueue: events nf_tables_trans_destroy_work [ 126.910582][ T6972] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 126.912057][ T6972] pc : nft_pipapo_destroy+0x784/0x7e0 [ 126.913100][ T6972] lr : nft_pipapo_destroy+0x784/0x7e0 [ 126.914144][ T6972] sp : ffff800021af7990 [ 126.914979][ T6972] x29: ffff800021af79b0 x28: dfff800000000000 x27: 1fffe00019c25e19 [ 126.916582][ T6972] x26: dfff800000000000 x25: ffff0000ce12f0cc x24: ffff0000ce12f000 [ 126.918108][ T6972] x23: ffff0000cdf9da18 x22: 000000000000000b x21: ffff800013cb1530 [ 126.919657][ T6972] x20: ffff0000cdf9da10 x19: ffff0000ce12f0f0 x18: 1fffe00033e6997e [ 126.921189][ T6972] x17: ffff8000153bd000 x16: ffff8000082dd284 x15: 0000000000000000 [ 126.922748][ T6972] x14: 0000000000000018 x13: 0000000000ff0100 x12: ffff800017abdd70 [ 126.924291][ T6972] x11: ff008000103cee30 x10: 0000000000000000 x9 : ffff8000103cee30 [ 126.925820][ T6972] x8 : ffff0000db5bb800 x7 : 0000000000000000 x6 : 000000000000003f [ 126.927372][ T6972] x5 : 0000000000000040 x4 : ffffffffffffffe0 x3 : 0000000000000000 [ 126.928881][ T6972] x2 : ffff0000cdf9da10 x1 : ffff0000ce12f000 x0 : ffff0000cdf9da28 [ 126.930368][ T6972] Call trace: [ 126.930974][ T6972] nft_pipapo_destroy+0x784/0x7e0 [ 126.931929][ T6972] nft_set_destroy+0x3ac/0x89c [ 126.932814][ T6972] nf_tables_trans_destroy_work+0x9a4/0xd88 [ 126.933911][ T6972] process_one_work+0x7e4/0x13bc [ 126.934826][ T6972] worker_thread+0x8cc/0xfe8 [ 126.935716][ T6972] kthread+0x254/0x2e0 [ 126.936484][ T6972] ret_from_fork+0x10/0x20 [ 126.937354][ T6972] irq event stamp: 81128 [ 126.938176][ T6972] hardirqs last enabled at (81127): [] __free_object+0x1e8/0x878 [ 126.939993][ T6972] hardirqs last disabled at (81128): [] el1_dbg+0x24/0x80 [ 126.941671][ T6972] softirqs last enabled at (81088): [] wg_packet_encrypt_worker+0x1114/0x1198 [ 126.943684][ T6972] softirqs last disabled at (81086): [] wg_packet_encrypt_worker+0xea8/0x1198 [ 126.945728][ T6972] ---[ end trace 0000000000000000 ]--- [ 126.946878][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.007449][T13681] XFS (loop1): Mounting V5 Filesystem [ 127.039890][T13681] XFS (loop1): Ending clean mount [ 127.072302][T13681] XFS (loop1): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 127.094143][ T4328] XFS (loop1): Unmounting Filesystem