last executing test programs: 1.720712404s ago: executing program 0 (id=3447): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f00000002c0)={[{@shortname_lower}, {@utf8}, {@utf8no}, {@shortname_lower}, {@fat=@nfs}, {@fat=@errors_remount}, {@shortname_winnt}]}, 0x3, 0x21f, &(0x7f0000000940)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) 1.569230836s ago: executing program 0 (id=3453): r0 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x2) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000002c0)) 1.395638909s ago: executing program 0 (id=3460): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001300)=""/4104, 0x1008, 0x8) 1.30719606s ago: executing program 0 (id=3462): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0xa1, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}}, 0x0) 1.265587031s ago: executing program 0 (id=3463): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f00000012c0)={[{}, {@nostrict}, {@uid_forget}, {@lastblock={'lastblock', 0x3d, 0x222}}, {@uid}, {@undelete}, {@umask={'umask', 0x3d, 0x10}}, {@mode={'mode', 0x3d, 0x5b60}}, {@uid}, {@session={'session', 0x3d, 0x3}}, {@dmode={'dmode', 0x3d, 0xe}}], [{@measure}, {@fsname={'fsname', 0x3d, '('}}, {@uid_lt}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, '\\'}}, {@appraise_type}, {@euid_lt}]}, 0x1, 0xc43, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xrl46nTaZsOhh9AYAOCBuDz21VNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+9ILQ+e7eak98wH199pn4rWxKxcbL8/enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvn5r8vr1hcaZ589u2nx74P3+J44PXBh69uQz3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORornvvfT1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnzn2Fq6mt/6UZ2HL1YDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/iji1Ujxs3dOxLV8n6nuNV+IeLXMH0S8VeZLEan8YpyLeG+b7xGPploU8efl9b+wliar+0H3vnLpa42vzFyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcSnI8Ur//ZH1bjiqMalH7sw9PsDv9w7ZvzpD9lPWfb5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vvWwGwMAAAAAAAAAAAAAAAAAAPCxVsRPIsWL755Iy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaERPRyZX+h906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDUn4r4fqRo/EHzzrpaRKTq344T5S/nonm4zE9Gc6jMl6J5MWerylrzWw+h/exOXyrix5Giv/72nQuer39f59Odr0G89c2NT5+pdfJQd+PA+/1PHD92YWjkc0/vtJy2a8DgpfbMrduN8eGRkbGe1bV89E/2rBvIxy32putExMIbb77emp6emr//hfIrsIvqj9BCqn1cemqhWojagWjGw+n7JvWHdYNiX5XP//cixW+/++/dB37n+V+PX+p8uvOEj5//ycbz/8WtO7rH539ta738/C+f6ds9/5/sWfdi/t1IXy2ivnhzru94RH3hjTdPtm+2bkzdmJo5d+rUl4eGvnz2VN/hiPr19vRUz9KenC4AAAAAAAAAAAAAAACABycV8buRovXjtdSIiNvVeK2BC0PPnnzmUByqxlttGrf92tiVi42XZ2/OzU8tLExNNsZn2tdmJ6fu9XD1arjX+PDIvnTmQx3Z5/Yfqb88O/fGfPvGHy5uu/1o/eLVhcX51rXtN8eRKCKavWsGqwaPD49UjZ5ut2aqqqPbDqb/6PpSEf8RKa6da6TP53V5/P/WEf6bxv8vbd3RHo7//9zRjfF/n+gpWh4zpSJ+Hil+6y+ejs9X7Twad52zXO5vIsXg+c/mcnG4LNdtQ+e9Ap2RgWXZ/4kU//CLzWW74yGf3Ch7+iOd3EdAef2PRYrv/9l349fzus3vf9j++h/duqN9ev/DUz3rjm56X8Guu06+/icjxUtPvh2/Ua35vw98/0f33RsnOoU33s+xT9f/V3vWDeTj/uZedR4AAAAAAAAAAOAR1peK+NtI8cORWnohr7uXv/83uXVH+/T3vz7Vs25yb+Yr+tCFXZ9UAAAAADgg+lIRP4kUNxbfvjOGevP4757xn7+zMf5zOG3ZWv05369U7w3Yyz//6zWQjzux+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dQnqvH8kzvOp74SKV75r+dyuXS8LNedB36g+rV+eXbm5MXp6dl6LLauTk81xuZa16bKuk9FirW//myuW1Tzq3fnm+/M8b4xF/t8pBj5u27Zzlzs3bnJn9ooe7os+4lI8Z9/v7lsnpo6zx1dlT1Tlv2rSPH1f9q+7PGNsmfLst+NFD/6eqNb9mhZtvt+1E9tlH3+2myxD1cFAAAAAAAAAAAAAAAAAACAj5u+VMSfRor/vrl8Zyx/nv+/r+dj5a1v9sz3v8Xtap7/gWr+/52W72f+/+q9Aks7HRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4M1LMXV5LK/3l5476pfbMrdvjwyPbVzuSqpqHqvLlT/30mbPnvvTC0PlufnD9vfbpeG3sysXGy7M35+anFhamJhvjM+1rs5NT97yH3dbfarA6AY2br9+avH59oXHm+bObNt8eeL//ieMDF4aePflMt+z48MjIWE+ZWt99H/0uaYf1h6OIv4wUz33vp+mH/RFF7P5cfMh3Z78dqToxWHVifHik6sh0uzWzWG4c7Z6IIqLRU6nZPUcP4FrsSjNiqWx+2eDBsntjc6351tXpqcZoa36xvdienRlNndaW/WlEEedTxHJErPbfvbu+KOL1SPGdY2vpn/sjDnXPwxcvj3311Jmd21HsYx/vQdnORl/EcvEIXLMDrD+K+MdI8bN3TsS/9EfUovMTX4h4tcwfRLwVneudyi/GuYj3tvke8WiqRRH/W17/C2vpnf7yftC9r1z6WuMrM9dne8p27yuP/PPhQTrg96Z6FPGj6o6/lv7Vf9cAAAAAAAAAAAAAAAAAB0gRvxYpXnz3RKrGB98ZU9yeudG40ro63RnW1x371x0zvb6+vt5InWzmnMi5lHM550rO1ZxR5Po5m2XW19cn8uelnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ2DwAAAAAAAAAAAAAAAAAAeLwU1T8pvv2NtbTe35lfeiI6uWI+0Mfe/wcAAP//dsP5HA==") 701.202749ms ago: executing program 0 (id=3485): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x1000, 0xa2f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3000000}}) 550.006592ms ago: executing program 4 (id=3490): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x2, 0x6, 0x768, 0x1b0, 0x358, 0x358, 0x358, 0x0, 0x698, 0x698, 0x698, 0x698, 0x698, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'wg1\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @mcast1, [0x0, 0x0, 0xff000000]}}, @common=@inet=@multiport={{0x50}, {0x40, 0x0, [0x0, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x4e20]}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x8, 0x43e, 0x2}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff], [0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x1a, 0x26, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c8) 476.800973ms ago: executing program 4 (id=3494): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000480)) 464.544903ms ago: executing program 2 (id=3495): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getitimer(0x0, 0xfffffffffffffffe) 439.537853ms ago: executing program 3 (id=3496): r0 = gettid() wait4(r0, 0x0, 0x2, 0x0) 423.402424ms ago: executing program 1 (id=3497): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="7a0a00ff0000000071104300000000009500000000000000702862cfb9"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x50}}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) 393.271014ms ago: executing program 4 (id=3498): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchown(0xffffffffffffffff, 0x0, 0x0) 343.619554ms ago: executing program 2 (id=3499): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv6_newrule={0x38, 0x20, 0xc01, 0x0, 0x0, {0xa, 0x10}, [@FRA_DST={0x14, 0x1, @dev}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x38}}, 0x0) 337.887945ms ago: executing program 3 (id=3500): r0 = socket(0x10, 0x803, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) 325.963375ms ago: executing program 4 (id=3501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="4401000003010102000000000000000001000008080008400000000608000c400000000408000c4000000002100004800c00018005000300070000008800028006000340000200001400018008000100ac14142108000200e000000106000340000200001400018008000100ac1e000108000200ac1414aa06000340000300000c00028005000100010000000c00028005000100060000002c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000bb06001240000000000c00108008000140000000080600124000040000140019"], 0x144}, 0x1, 0x0, 0x0, 0x800}, 0x10) 311.595265ms ago: executing program 1 (id=3502): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) lseek(r0, 0x3, 0x4) 293.546926ms ago: executing program 2 (id=3503): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {@in=@remote, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x2, 0x2, 0x4, 0xff, 0x6f}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 243.290346ms ago: executing program 3 (id=3504): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004800010000000700000000000a008000", @ANYRES32=r0, @ANYBLOB="0000000008000200cf010000140001"], 0x38}}, 0x0) 203.630827ms ago: executing program 1 (id=3505): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000040), &(0x7f0000000140)=""/72, 0x700}, 0x20) 203.477737ms ago: executing program 4 (id=3506): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x8}}) 203.105747ms ago: executing program 2 (id=3507): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {}, 0x0, {0x2, 0x0, @multicast2}}) 166.640328ms ago: executing program 1 (id=3508): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x9, 0x0, 0x4, 0x5}, 0x48) 123.708768ms ago: executing program 4 (id=3509): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@grpjquota}]}, 0x4, 0x50a, &(0x7f00000018c0)="$eJzs3c1vVF0ZAPDnTju0lEKLslATAyqKhjD9ABrCxrLRGEJiJK5cQG2HpukM03RKpJVFWbonkcSV/gnuXJiwcuHOne7c4MIElfiGvsm7mDf3zqUd+jnQj0k7v19ye+85d7jPOTOcc+YeuD0BdK1LEbEaEaci4mFEDOX5Sb7FZHNLX/fu7bPptbfPppNoNO7/N8nOp3nR8mdSZ/Jr9kfEz34c8ctka9z68sr8VKVSXszTI0vVhZH68sq1uUKeMz4xNjF66/rN8QOr68XqH9/8aO7uz//8p2++/tvqD36dFmvwN2ezc631OEjNqhdjsCWvNyLuHkawDunN//5w/KSt7SsR8e2s/Q9FT/ZpAgAnWaMxFI2h1jQAcNKl9/+DkRRK+VzAYBQKpVJzDu9CDBQqtfrS1aHak8czkc1hDUex8GiuUh7N5wqHo5ik6bHseCM9/kH6Rfl6RJyPiBd9p7PzpelaZaaTX3wAoIud2TT+f9bXHP8BgBOuv9MFAACOnPEfALqP8R8Aus9HjP+eDgSAE8L9PwB0H+M/AHSfPcf/50dTDgDgSPz03r10a6w1f//1+9/UfW2mXJ8vVZ9Ml6Zriwul2VpttlIuTTcae12vUqstjN1YT9aXVx5Ua08eLz2Yq07Nlh+Ui4dZGQCgLecvvvpHOuiv3j6dbdGyloOxGk62QqcLAHRMT6cLAHSM53mge7Vxj28aAE64bZbo/cCO/0XopcVf4bi68nXz/9Ct9jP/b+4AjrdPm///4YGXAzh6xnDoXo1GYs1/AOgy5viBj/73/zv5/uXhlAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOg8FsSwqlbC3w1fRnoVSKOBsRw1FMHs1VyqMRcS4i/t5X7EvTY50uNACwT4V/J/n6X1eGLg9uPnsq+bwv20fEr353/7dPp5aWFsfS/P/1Teb5Sy/z/PFTHakBANBicmtWc5zO9y038u/ePpt+vx1lEd/caS4umsZdy7fmmd7ozfb9UYyIgf8nebop/b7ScwDxV59HxNc26v+0JcJgNgfSXPl0c/w09tlDiL/x/m+OX/ggfiE7l+6L2Xvx1QMoC3SbV3ea/WTe9tImlre/QlzK9tu3//6sh9q/tP9L+5K1Lf1fYb3/69kSP8na/KX19O4leXPjLz/ZktkYap57HvGN3u3iJ+vxk+373+LlNuv4z1066sbvI65sW//3K1JXs252ZKm6MFJfXrk2V52aLc+WH4+PT4xNjN66fnN8JJujbv7863Yx/nP76rmd4qf1H9ghfv/u9Y/vtln/P3zx8Bff2iX+97+z/ed/YZf46Zj4vTbjTw1Mblm+uzX+zA713+Pzj6ttxn/9r5WZNl8KAByB+vLK/FSlUl7c4yD9rrnXaxwc3cHpiDioC8ZqxEEVLJuUiIj9XCeJjr+9Diqd7pmAw7bR6DtdEgAAAAAAAAAAAAAAYCf15ZX5vk9+WiuG23kKrdN1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OT6MgAA//9Mj8T8") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 123.575488ms ago: executing program 3 (id=3510): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) 114.276738ms ago: executing program 2 (id=3511): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af00, 0xffffffffffffffff) 104.510818ms ago: executing program 1 (id=3512): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0x8000001, 0xf, &(0x7f0000000580)=[0x1d, 0x5, 0xf, 0xffff, 0x0, 0x25, 0x2, 0x3, 0xbf, 0x4, 0x81, 0x7e, 0x8, 0x80000001, 0xa1b], 0x0, 0x4}) 63.262959ms ago: executing program 3 (id=3513): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x22801) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000100)={0x6, 0x81}) 62.772749ms ago: executing program 1 (id=3514): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f00000004c0)=ANY=[@ANYBLOB='nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity\x00uid=', @ANYRESHEX, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="bf6a8bfcf00ce3cc70200921", @ANYRESHEX=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES32, @ANYRES64], 0x1, 0x617a, &(0x7f0000000580)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000006c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x102004, 0x0, 0x1, 0x0, &(0x7f0000000040)) 508.59µs ago: executing program 2 (id=3515): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000ac0)=[{&(0x7f00000001c0)="86cfcb20bc1b2830", 0x8}], 0x1) 0s ago: executing program 3 (id=3516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000700000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000003c0), 0x1000000}, 0x20) kernel console output (not intermixed with test programs): 209 0 returned -22 [ 68.835033][ T5590] loop3: detected capacity change from 0 to 4096 [ 68.861423][ T5590] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 68.878775][ T5594] capability: warning: `syz.4.658' uses 32-bit capabilities (legacy support in use) [ 68.971601][ T5598] loop4: detected capacity change from 0 to 16 [ 68.973943][ T5598] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 69.230516][ T5618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.669'. [ 69.610912][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.612758][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.763837][ T5667] Unsupported ieee802154 address type: 0 [ 69.795898][ T5670] loop4: detected capacity change from 0 to 256 [ 69.859887][ T5670] exfat: Deprecated parameter 'namecase' [ 69.874040][ T5670] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 70.072211][ T5691] loop4: detected capacity change from 0 to 64 [ 70.076414][ T5692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.706'. [ 70.132808][ T5694] loop1: detected capacity change from 0 to 64 [ 70.294338][ T5704] netlink: 'syz.4.709': attribute type 1 has an invalid length. [ 70.526398][ T5682] loop0: detected capacity change from 0 to 32768 [ 70.576482][ T5718] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 70.594837][ T5718] CIFS mount error: No usable UNC path provided in device string! [ 70.594837][ T5718] [ 70.601636][ T5718] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 70.612918][ T5682] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 70.650957][ T5682] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 70.820085][ T5734] tmpfs: Bad value for 'mpol' [ 70.842424][ T4041] ocfs2: Unmounting device (7,0) on (node local) [ 71.057288][ T5757] netlink: 288 bytes leftover after parsing attributes in process `syz.4.736'. [ 71.079268][ T5758] loop3: detected capacity change from 0 to 64 [ 71.126459][ T5758] Trying to free block not in datazone [ 71.129757][ T5758] Trying to free block not in datazone [ 71.131322][ T5758] Trying to free block not in datazone [ 71.132892][ T5758] Trying to free block not in datazone [ 71.134355][ T5758] minix_free_block (loop3:6): bit already cleared [ 71.136267][ T5758] Trying to free block not in datazone [ 71.156034][ T5758] Trying to free block not in datazone [ 71.502895][ T5793] loop1: detected capacity change from 0 to 256 [ 71.588622][ T5793] FAT-fs (loop1): Directory bread(block 64) failed [ 71.595128][ T5801] binder: BC_ATTEMPT_ACQUIRE not supported [ 71.595147][ T5793] FAT-fs (loop1): Directory bread(block 65) failed [ 71.597496][ T5801] binder: 5800:5801 ioctl c0306201 200002c0 returned -22 [ 71.605728][ T5793] FAT-fs (loop1): Directory bread(block 66) failed [ 71.611896][ T5793] FAT-fs (loop1): Directory bread(block 67) failed [ 71.613967][ T5793] FAT-fs (loop1): Directory bread(block 68) failed [ 71.615922][ T5793] FAT-fs (loop1): Directory bread(block 69) failed [ 71.631951][ T5793] FAT-fs (loop1): Directory bread(block 70) failed [ 71.641580][ T5793] FAT-fs (loop1): Directory bread(block 71) failed [ 71.643435][ T5793] FAT-fs (loop1): Directory bread(block 72) failed [ 71.645191][ T5793] FAT-fs (loop1): Directory bread(block 73) failed [ 71.748037][ T5809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'. [ 71.904430][ T5816] loop4: detected capacity change from 0 to 512 [ 71.980641][ T5816] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.145916][ T5842] netlink: 'syz.0.772': attribute type 16 has an invalid length. [ 72.148126][ T5844] netlink: 'syz.1.773': attribute type 3 has an invalid length. [ 72.150281][ T5844] netlink: 132 bytes leftover after parsing attributes in process `syz.1.773'. [ 72.154810][ T5842] netlink: 152 bytes leftover after parsing attributes in process `syz.0.772'. [ 72.233249][ T5850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.308872][ T5859] UBIFS error (pid: 5859): cannot open "(null)", error -22 [ 72.316762][ T5856] loop1: detected capacity change from 0 to 512 [ 72.396264][ T5856] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 72.401543][ T5856] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 72.404766][ T5856] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 72.438381][ T5856] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 72.438415][ T5856] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e018, mo2=0100] [ 72.439165][ T5856] EXT4-fs (loop1): orphan cleanup on readonly fs [ 72.440876][ T5856] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.777: bg 0: block 34: padding at end of block bitmap is not set [ 72.457719][ T5856] Quota error (device loop1): write_blk: dquota write failed [ 72.513914][ T5856] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 72.516695][ T5856] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.777: Failed to acquire dquot type 1 [ 72.537373][ T5856] EXT4-fs (loop1): 1 truncate cleaned up [ 72.579236][ T5856] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,abort,nogrpid,noblock_validity,,errors=continue. Quota mode: writeback. [ 72.880045][ T5899] Cannot find add_set index 0 as target [ 72.909045][ T5903] netlink: 48 bytes leftover after parsing attributes in process `syz.0.798'. [ 72.960726][ T5908] netlink: 'syz.1.801': attribute type 1 has an invalid length. [ 73.346466][ T5937] loop0: detected capacity change from 0 to 8 [ 73.379351][ T5937] cramfs: Error -3 while decompressing! [ 73.381150][ T5937] cramfs: 000000003b9ebde0(26)->000000006ae55148(4096) [ 73.383129][ T5937] cramfs: Error -3 while decompressing! [ 73.384692][ T5937] cramfs: 00000000849c4c55(2074)->00000000138478c5(4096) [ 73.386713][ T5937] cramfs: bad data blocksize 4294965264 [ 73.441172][ T5937] cramfs: Error -3 while decompressing! [ 73.442778][ T5937] cramfs: 000000003b9ebde0(26)->000000006ae55148(4096) [ 73.576655][ T4220] udevd[4220]: incorrect cramfs checksum on /dev/loop0 [ 73.877566][ T5979] netlink: 'syz.2.838': attribute type 74 has an invalid length. [ 73.965217][ T5986] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 73.976950][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'. [ 74.133475][ T5997] netlink: 34 bytes leftover after parsing attributes in process `syz.3.848'. [ 74.302070][ T6009] device gretap0 entered promiscuous mode [ 74.368360][ T6009] netlink: 'syz.3.853': attribute type 2 has an invalid length. [ 74.368418][ T6009] netlink: 9 bytes leftover after parsing attributes in process `syz.3.853'. [ 74.371044][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.854'. [ 74.507326][ T5966] loop0: detected capacity change from 0 to 32768 [ 74.741066][ T13] cfg80211: failed to load regulatory.db [ 74.872941][ T6038] loop3: detected capacity change from 0 to 2048 [ 74.962400][ T6038] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 74.986450][ T6038] UDF-fs: unknown compression code (0) [ 75.303913][ T6080] netlink: 'syz.4.888': attribute type 11 has an invalid length. [ 75.321050][ T6080] netlink: 140 bytes leftover after parsing attributes in process `syz.4.888'. [ 75.519644][ T6099] netlink: 'syz.4.898': attribute type 28 has an invalid length. [ 75.673688][ T6111] kAFS: Can only specify source 'none' with -o dyn [ 75.796067][ T6120] loop2: detected capacity change from 0 to 64 [ 75.810341][ T6121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.908'. [ 75.835993][ T6115] loop3: detected capacity change from 0 to 4096 [ 75.903396][ T6115] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 75.906838][ T6115] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 75.927918][ T6115] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 75.938260][ T6115] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 75.941789][ T6115] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 75.974584][ T6115] ntfs: volume version 3.1. [ 76.002318][ T6115] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 76.005987][ T6115] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 76.037600][ T6115] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 76.370545][ T6145] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 76.382225][ T6141] loop0: detected capacity change from 0 to 4096 [ 76.444378][ T6102] loop1: detected capacity change from 0 to 32768 [ 76.477983][ T6141] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 76.507881][ T6141] ntfs3: loop0: Failed to load $Extend. [ 76.855505][ T6161] loop4: detected capacity change from 0 to 4096 [ 76.961140][ T6172] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 76.961140][ T6172] z,@qJ#"h/.W1ȱnNC"C<+`#k' [ 77.308992][ T6196] kAFS: No cell specified [ 78.181467][ T6249] loop2: detected capacity change from 0 to 4096 [ 78.205535][ T6251] loop0: detected capacity change from 0 to 2048 [ 78.234774][ T6251] hpfs: filesystem error: improperly stopped; already mounted read-only [ 78.237837][ T6251] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 78.240000][ T6251] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000001 [ 78.272724][ T6249] __ntfs_error: 8 callbacks suppressed [ 78.272737][ T6249] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 78.286468][ T6249] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 78.301412][ T6249] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 78.303889][ T6249] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 78.321072][ T6264] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.328356][ T6249] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 78.337994][ T6262] device veth3 entered promiscuous mode [ 78.351632][ T6249] ntfs: volume version 3.1. [ 78.353061][ T6249] ntfs: (device loop2): ntfs_read_locked_inode(): Inode is not in use! [ 78.355821][ T6249] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 78.373383][ T6249] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 78.430519][ T149] block nbd0: Attempted send on invalid socket [ 78.432352][ T149] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.473428][ T6249] ntfs: (device loop2): ntfs_read_locked_inode(): $INDEX_ROOT attribute is missing. [ 78.476778][ T6249] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 78.575618][ T6274] loop0: detected capacity change from 0 to 64 [ 78.766867][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'. [ 78.882749][ T6295] loop0: detected capacity change from 0 to 256 [ 79.005256][ T6295] FAT-fs (loop0): Directory bread(block 64) failed [ 79.007308][ T6295] FAT-fs (loop0): Directory bread(block 65) failed [ 79.017627][ T6295] FAT-fs (loop0): Directory bread(block 66) failed [ 79.018766][ T6260] loop3: detected capacity change from 0 to 32768 [ 79.019545][ T6295] FAT-fs (loop0): Directory bread(block 67) failed [ 79.023170][ T6295] FAT-fs (loop0): Directory bread(block 68) failed [ 79.024948][ T6295] FAT-fs (loop0): Directory bread(block 69) failed [ 79.026739][ T6295] FAT-fs (loop0): Directory bread(block 70) failed [ 79.055220][ T6295] FAT-fs (loop0): Directory bread(block 71) failed [ 79.057134][ T6295] FAT-fs (loop0): Directory bread(block 72) failed [ 79.065410][ T6295] FAT-fs (loop0): Directory bread(block 73) failed [ 79.119869][ T6260] ea_get: invalid extended attribute [ 79.121632][ T6260] 00000000c55b2416: 04 00 00 00 .... [ 79.432631][ T6316] hibernate: Hibernate image not generated by this kernel! [ 79.446077][ T6316] PM: hibernation: Image mismatch: architecture specific data [ 79.521465][ T6285] loop4: detected capacity change from 0 to 32768 [ 79.595677][ T6285] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 79.651261][ T6285] OCFS2: ERROR (device loop4): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 79.696153][ T6285] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 79.725642][ T6285] OCFS2: File system is now read-only. [ 79.727255][ T6285] (syz.4.990,6285,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 79.819570][ T4047] ocfs2: Unmounting device (7,4) on (node local) [ 79.897983][ T6351] xt_limit: Overflow, try lower: 262144/524288 [ 79.974185][ T6360] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1023'. [ 80.063840][ T6365] tmpfs: Bad value for 'mpol' [ 80.227695][ T6384] netlink: 'syz.1.1038': attribute type 4 has an invalid length. [ 80.280927][ T6391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.610555][ T226] block nbd3: Attempted send on invalid socket [ 80.612399][ T226] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.621372][ T226] block nbd3: Attempted send on invalid socket [ 80.623129][ T226] blk_update_request: I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.775236][ T6432] loop2: detected capacity change from 0 to 256 [ 80.800083][ T6434] loop4: detected capacity change from 0 to 256 [ 80.845566][ T6427] loop3: detected capacity change from 0 to 4096 [ 80.859935][ T6432] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 80.865788][ T6434] FAT-fs (loop4): Directory bread(block 64) failed [ 80.874330][ T6434] FAT-fs (loop4): Directory bread(block 65) failed [ 80.876247][ T6434] FAT-fs (loop4): Directory bread(block 66) failed [ 80.913223][ T6434] FAT-fs (loop4): Directory bread(block 67) failed [ 80.925231][ T6434] FAT-fs (loop4): Directory bread(block 68) failed [ 80.925423][ T6427] ntfs: volume version 3.1. [ 80.927016][ T6434] FAT-fs (loop4): Directory bread(block 69) failed [ 80.945672][ T6434] FAT-fs (loop4): Directory bread(block 70) failed [ 80.953628][ T6434] FAT-fs (loop4): Directory bread(block 71) failed [ 80.964119][ T6434] FAT-fs (loop4): Directory bread(block 72) failed [ 80.965941][ T6434] FAT-fs (loop4): Directory bread(block 73) failed [ 81.253013][ T6452] binder: 6451:6452 ioctl 40046205 9999999999999999 returned -22 [ 81.279976][ T6429] loop1: detected capacity change from 0 to 32768 [ 81.391443][ T6429] jfs_strtoUCS: char2uni returned -36. [ 81.393217][ T6429] charset = cp932, char = 0x8b [ 81.492497][ T6474] device ipip0 entered promiscuous mode [ 81.544534][ T6470] loop2: detected capacity change from 0 to 4096 [ 81.608750][ T6470] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 81.613264][ T6470] ntfs3: loop2: Failed to load $Extend. [ 81.861983][ T6495] loop1: detected capacity change from 0 to 1764 [ 82.033008][ T6504] loop0: detected capacity change from 0 to 4096 [ 82.057280][ T6507] loop4: detected capacity change from 0 to 4096 [ 82.091509][ T6504] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 82.100592][ T6507] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 82.136137][ T6504] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 82.160951][ T6507] ntfs3: loop4: failed to convert "c46c" to cp865 [ 82.594139][ T6524] loop0: detected capacity change from 0 to 8192 [ 82.596323][ T6525] loop4: detected capacity change from 0 to 4096 [ 82.614233][ T6500] loop3: detected capacity change from 0 to 32768 [ 82.647919][ T6531] loop2: detected capacity change from 0 to 4096 [ 82.678489][ T6525] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 82.685287][ T6500] jfs_strtoUCS: char2uni returned -36. [ 82.686846][ T6500] charset = cp932, char = 0x8b [ 82.691684][ T6531] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 82.696612][ T6525] ntfs3: loop4: Failed to load $Extend. [ 82.735278][ T6524] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 82.738280][ T6524] REISERFS (device loop0): using ordered data mode [ 82.740128][ T6524] reiserfs: using flush barriers [ 82.743163][ T6524] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.748494][ T6524] REISERFS (device loop0): checking transaction log (loop0) [ 82.793471][ T6512] loop1: detected capacity change from 0 to 32768 [ 82.858140][ T6531] ntfs3: loop2: failed to convert "c46c" to cp932 [ 82.991219][ T6512] XFS (loop1): Mounting V5 Filesystem [ 83.055129][ T6524] REISERFS (device loop0): Using tea hash to sort names [ 83.057439][ T6524] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 83.141966][ T6512] XFS (loop1): Ending clean mount [ 83.149695][ T6512] XFS (loop1): Quotacheck needed: Please wait. [ 83.187127][ T6512] XFS (loop1): Quotacheck: Done. [ 83.319077][ T4034] XFS (loop1): Unmounting Filesystem [ 83.542698][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1131'. [ 83.545443][ T6582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1131'. [ 83.565678][ T6582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1131'. [ 83.648837][ T6593] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.753035][ T6604] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1142'. [ 83.786739][ T6606] CIFS mount error: No usable UNC path provided in device string! [ 83.786739][ T6606] [ 83.794262][ T6606] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 84.050772][ T6629] netlink: 'syz.0.1153': attribute type 32 has an invalid length. [ 84.155801][ T6636] loop3: detected capacity change from 0 to 1024 [ 84.186221][ T6644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1161'. [ 84.325841][ T6657] ieee802154 phy0 wpan0: encryption failed: -22 [ 84.369195][ T6664] netlink: 'syz.2.1169': attribute type 11 has an invalid length. [ 84.381613][ T6636] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.411079][ T6666] loop2: detected capacity change from 0 to 64 [ 84.470120][ T6661] loop1: detected capacity change from 0 to 4096 [ 84.510619][ T6661] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 84.524516][ T6666] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 84.730216][ T6661] ntfs3: loop1: failed to convert "c46c" to cp860 [ 84.768371][ T6684] Cannot find del_set index 0 as target [ 85.037130][ T6701] netlink: 'syz.4.1187': attribute type 1 has an invalid length. [ 85.111514][ T6699] loop1: detected capacity change from 0 to 4096 [ 85.200721][ T6699] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 85.238482][ T6699] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 85.407287][ T6720] netlink: 'syz.3.1197': attribute type 16 has an invalid length. [ 85.423394][ T6720] netlink: 'syz.3.1197': attribute type 17 has an invalid length. [ 85.426036][ T6678] loop2: detected capacity change from 0 to 32768 [ 85.473463][ T6720] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.475606][ T6720] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.498880][ T6720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.501043][ T6720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.569993][ T6678] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 85.655120][ T6678] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (54346, expected 74) [ 85.747328][ T6678] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 85.778041][ T6678] OCFS2: Returning error to the calling process. [ 85.779935][ T6678] (syz.2.1174,6678,0):ocfs2_search_chain:1761 ERROR: status = -5 [ 85.797188][ T6678] (syz.2.1174,6678,0):ocfs2_search_chain:1871 ERROR: status = -5 [ 85.808184][ T6678] (syz.2.1174,6678,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -5 [ 85.810637][ T6678] (syz.2.1174,6678,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -5 [ 85.814487][ T6678] (syz.2.1174,6678,0):ocfs2_claim_new_inode:2216 ERROR: status = -5 [ 85.816741][ T6678] (syz.2.1174,6678,0):ocfs2_claim_new_inode:2231 ERROR: status = -5 [ 85.825307][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1207'. [ 85.837499][ T6678] (syz.2.1174,6678,0):ocfs2_mknod_locked:639 ERROR: status = -5 [ 85.842528][ T6678] (syz.2.1174,6678,0):ocfs2_mknod:385 ERROR: status = -5 [ 85.844587][ T6678] (syz.2.1174,6678,0):ocfs2_mknod:502 ERROR: status = -5 [ 85.846506][ T6678] (syz.2.1174,6678,0):ocfs2_create:676 ERROR: status = -5 [ 85.858529][ T6744] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1210'. [ 85.861062][ T6744] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1210'. [ 85.924618][ T4035] ocfs2: Unmounting device (7,2) on (node local) [ 85.937319][ T6753] loop3: detected capacity change from 0 to 1024 [ 86.004918][ T6757] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.1213'. [ 86.013198][ T6757] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 86.021406][ T6760] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 86.027194][ T6753] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,nobarrier,errors=remount-ro,. Quota mode: none. [ 86.041515][ T6749] loop0: detected capacity change from 0 to 4096 [ 86.064075][ T6749] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 86.124030][ T6749] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 86.139910][ T6753] EXT4-fs error (device loop3): ext4_get_first_dir_block:3608: inode #11: comm syz.3.1211: directory missing '.' [ 86.204277][ T6753] EXT4-fs (loop3): Remounting filesystem read-only [ 86.706616][ T6810] loop4: detected capacity change from 0 to 64 [ 86.843397][ T6810] attempt to access beyond end of device [ 86.843397][ T6810] loop4: rw=0, want=130, limit=64 [ 86.846366][ T6810] Trying to free block not in datazone [ 86.847327][ T6823] loop2: detected capacity change from 0 to 512 [ 86.862338][ T6810] Trying to free block not in datazone [ 86.863896][ T6810] Trying to free block not in datazone [ 86.865419][ T6810] Trying to free block not in datazone [ 86.867291][ T6810] Trying to free block not in datazone [ 86.870257][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1247'. [ 86.882959][ T6810] Trying to free block not in datazone [ 86.884484][ T6810] minix_free_block (loop4:6): bit already cleared [ 86.900853][ T6823] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 86.925221][ T6823] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.1246: invalid block [ 86.985959][ T6823] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1246: invalid indirect mapped block 10 (level 1) [ 87.000799][ T6823] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1246: invalid indirect mapped block 8 (level 1) [ 87.006709][ T6823] EXT4-fs (loop2): 1 truncate cleaned up [ 87.037108][ T6823] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 87.059986][ T6836] loop3: detected capacity change from 0 to 64 [ 87.330809][ T6858] netlink: 'syz.4.1262': attribute type 3 has an invalid length. [ 87.439261][ T6867] netlink: 'syz.4.1265': attribute type 16 has an invalid length. [ 87.441444][ T6867] netlink: 'syz.4.1265': attribute type 17 has an invalid length. [ 87.475913][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.527859][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.533644][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.548038][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.583029][ T6879] Unknown options in mask 4 [ 87.771270][ T6891] loop4: detected capacity change from 0 to 8 [ 87.819966][ T6891] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 87.839675][ T6896] tc_dump_action: action bad kind [ 87.843352][ T6891] cramfs: Error -3 while decompressing! [ 87.844846][ T6891] cramfs: 0000000007a676e0(1306)->000000006ea47ffb(4096) [ 87.846817][ T6891] cramfs: bad data blocksize 3221485966 [ 87.869296][ T4218] udevd[4218]: incorrect cramfs checksum on /dev/loop4 [ 87.878441][ T6891] cramfs: Error -3 while decompressing! [ 87.879961][ T6891] cramfs: 0000000007a676e0(1306)->000000006ea47ffb(4096) [ 87.923415][ T6901] RDS: rds_bind could not find a transport for ff::, load rds_tcp or rds_rdma? [ 88.130697][ T6917] netlink: 'syz.3.1291': attribute type 32 has an invalid length. [ 88.230870][ T6871] loop2: detected capacity change from 0 to 32768 [ 88.313359][ T6871] find_entry called with index = 0 [ 88.314979][ T6871] find_entry called with index = 0 [ 88.315087][ T6932] loop4: detected capacity change from 0 to 128 [ 88.405539][ T6937] mmap: syz.3.1300 (6937): VmData 121360384 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 88.455827][ T6941] netlink: 'syz.1.1305': attribute type 10 has an invalid length. [ 88.503908][ T6941] device hsr_slave_0 left promiscuous mode [ 88.567342][ T6941] device hsr_slave_1 left promiscuous mode [ 88.747850][ T6958] netlink: 'syz.0.1313': attribute type 5 has an invalid length. [ 88.843608][ T6971] netlink: 'syz.3.1319': attribute type 1 has an invalid length. [ 88.880373][ T6973] __nla_validate_parse: 2 callbacks suppressed [ 88.880386][ T6973] netlink: 81 bytes leftover after parsing attributes in process `syz.0.1320'. [ 88.968653][ T6981] netlink: 'syz.0.1324': attribute type 10 has an invalid length. [ 88.970771][ T6981] device ipvlan1 entered promiscuous mode [ 88.975748][ T6981] batman_adv: batadv0: Adding interface: ipvlan1 [ 88.987634][ T6981] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.004933][ T6981] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 89.046569][ T6986] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.1326'. [ 89.115633][ T6990] loop4: detected capacity change from 0 to 128 [ 89.136844][ T6993] futex_wake_op: syz.1.1330 tries to shift op by 32; fix this program [ 89.506922][ T7019] loop2: detected capacity change from 0 to 4096 [ 89.568535][ T7019] __ntfs_warning: 21 callbacks suppressed [ 89.568548][ T7019] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 89.663596][ T7019] ntfs: volume version 3.1. [ 89.841749][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1354'. [ 89.872972][ T7052] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 89.877011][ T7056] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1353'. [ 90.118574][ T7070] device netdevsim0 entered promiscuous mode [ 90.121816][ T7070] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 90.128108][ T7073] SET target dimension over the limit! [ 90.151072][ T7074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 90.398742][ T7089] ALSA: mixer_oss: invalid OSS volume 'u' [ 90.486141][ T7100] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 90.922364][ T7138] cgroup: name respecified [ 91.092405][ T7156] loop1: detected capacity change from 0 to 128 [ 91.165079][ T7158] loop2: detected capacity change from 0 to 2048 [ 91.168554][ T7156] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.221310][ T7158] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 91.254802][ T7166] loop4: detected capacity change from 0 to 512 [ 91.267951][ T7169] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.375795][ T7166] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 91.378658][ T7166] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 91.381376][ T7166] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 91.446310][ T7166] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 91.449235][ T7166] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 91.451526][ T7166] EXT4-fs (loop4): failed to initialize system zone (-117) [ 91.505243][ T7166] EXT4-fs (loop4): mount failed [ 91.507396][ T7181] loop0: detected capacity change from 0 to 128 [ 91.660573][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1419'. [ 91.732786][ T7196] comedi: No check for data length of config insn id 35 is implemented [ 91.735100][ T7196] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 91.812829][ T7196] comedi: Assuming n=15 is correct [ 91.846747][ T7204] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 91.997827][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1430'. [ 92.297153][ T7227] IPv6: sit1: Disabled Multicast RS [ 92.412822][ T7193] loop2: detected capacity change from 0 to 32768 [ 92.434560][ T7235] loop0: detected capacity change from 0 to 256 [ 92.464654][ T7237] validate_nla: 1 callbacks suppressed [ 92.464675][ T7237] netlink: 'syz.1.1441': attribute type 10 has an invalid length. [ 92.513901][ T7237] device veth1_macvtap left promiscuous mode [ 92.533161][ T7237] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 92.617018][ T7241] loop3: detected capacity change from 0 to 2048 [ 92.694085][ T7249] binder: 7246:7249 Acquire 1 refcount change on invalid ref 0 ret -22 [ 92.703761][ T7249] binder: 7246:7249 got transaction to invalid handle, 1 [ 92.706114][ T7249] binder: 7246:7249 transaction failed 29201/-22, size 0-0 line 2917 [ 92.718852][ T4697] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.788091][ T7241] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2362, location=2362 [ 92.860188][ T7241] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 92.867633][ T7241] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 92.934806][ T7241] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.987180][ T7272] loop0: detected capacity change from 0 to 8 [ 93.035330][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 93.035381][ T7276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1461'. [ 93.127764][ T7280] netlink: 'syz.4.1463': attribute type 4 has an invalid length. [ 93.134201][ T7272] SQUASHFS error: Unable to read inode 0xa7 [ 93.222806][ T7284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1468'. [ 93.226077][ T7284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1468'. [ 93.231274][ T7285] loop1: detected capacity change from 0 to 164 [ 93.358132][ T7285] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 93.492620][ T7298] loop0: detected capacity change from 0 to 4096 [ 93.581391][ T7298] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 93.647551][ T7298] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 93.655031][ T7298] ntfs3: loop0: Failed to load $Extend. [ 93.661950][ T7315] loop1: detected capacity change from 0 to 256 [ 93.685504][ T7314] x_tables: duplicate entry at hook 3 [ 93.927411][ T7325] netlink: 'syz.0.1486': attribute type 10 has an invalid length. [ 93.954935][ T7325] device veth1_macvtap left promiscuous mode [ 93.962653][ T7328] ieee802154 phy0 wpan0: encryption failed: -90 [ 93.973368][ T7325] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 94.059511][ T7307] infiniband syz0: set active [ 94.075059][ T7307] infiniband syz0: added bond0 [ 94.293743][ T7303] loop4: detected capacity change from 0 to 32768 [ 94.460367][ T7303] XFS (loop4): Mounting V5 Filesystem [ 94.641733][ T7303] XFS (loop4): Ending clean mount [ 94.645942][ T7303] XFS (loop4): Quotacheck needed: Please wait. [ 94.651452][ T7307] RDS/IB: syz0: added [ 94.653125][ T7307] smc: adding ib device syz0 with port count 1 [ 94.725797][ T7307] smc: ib device syz0 port 1 has pnetid [ 94.765279][ T7303] XFS (loop4): Quotacheck: Done. [ 94.967700][ T4736] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.995894][ T4047] XFS (loop4): Unmounting Filesystem [ 95.207548][ T4736] usb 1-1: Using ep0 maxpacket: 16 [ 95.293145][ T7357] loop1: detected capacity change from 0 to 32768 [ 95.296214][ T7347] loop0: detected capacity change from 0 to 32768 [ 95.303414][ T7372] CIFS: iocharset name too long [ 95.348061][ T4736] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 95.350837][ T4736] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 95.353698][ T4736] usb 1-1: config 0 has no interface number 0 [ 95.365008][ T4220] Dev loop0 SGI disklabel: csum bad, label corrupted [ 95.417371][ T7357] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 95.417371][ T7357] [ 95.422765][ T7347] Dev loop0 SGI disklabel: csum bad, label corrupted [ 95.508203][ T292] read_mapping_page failed! [ 95.509896][ T292] ERROR: (device loop1): txAbort: [ 95.509896][ T292] [ 95.511892][ T292] jfs_write_inode: jfs_commit_inode failed! [ 95.518072][ T4736] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 95.520587][ T4736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.522823][ T4736] usb 1-1: Product: syz [ 95.523963][ T4736] usb 1-1: Manufacturer: syz [ 95.525249][ T4736] usb 1-1: SerialNumber: syz [ 95.561025][ T4736] usb 1-1: config 0 descriptor?? [ 95.602751][ T4736] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 95.604750][ T4736] usb 1-1: No valid video chain found. [ 95.920968][ T4736] usb 1-1: USB disconnect, device number 2 [ 95.958748][ T7409] loop2: detected capacity change from 0 to 64 [ 96.367204][ T7431] loop2: detected capacity change from 0 to 256 [ 96.434595][ T7431] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xf5426d07, utbl_chksum : 0xe619d30d) [ 97.220189][ T7488] loop0: detected capacity change from 0 to 2048 [ 97.280128][ T7488] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 96: 0x25 != 0x13 [ 97.283085][ T7488] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 97.314141][ T7488] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.527186][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1574'. [ 97.529929][ T7512] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1574'. [ 98.077581][ T7546] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1590'. [ 98.106792][ T7550] loop0: detected capacity change from 0 to 256 [ 98.450786][ T7523] loop3: detected capacity change from 0 to 32768 [ 99.202793][ T7616] device ip6gretap2 entered promiscuous mode [ 99.237963][ T7601] loop3: detected capacity change from 0 to 8192 [ 99.268986][ T7620] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 99.271484][ T7620] device bridge2 entered promiscuous mode [ 99.351925][ T7582] loop1: detected capacity change from 0 to 32768 [ 99.355061][ T7601] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 99.367187][ T7601] REISERFS (device loop3): using writeback data mode [ 99.369209][ T7601] reiserfs: using flush barriers [ 99.383043][ T7601] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.395115][ T7601] REISERFS (device loop3): checking transaction log (loop3) [ 99.408976][ T7601] REISERFS (device loop3): Using r5 hash to sort names [ 99.473847][ T7582] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 99.541314][ T7639] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1635'. [ 99.543894][ T7639] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1635'. [ 99.609642][ T4034] ocfs2: Unmounting device (7,1) on (node local) [ 99.782334][ T7653] loop2: detected capacity change from 0 to 2048 [ 99.807122][ T7653] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 96: 0x25 != 0x13 [ 99.824395][ T7653] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 99.846057][ T7653] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.977841][ T7671] cgroup: name respecified [ 100.530184][ T7707] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1668'. [ 100.803891][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.810800][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.812965][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.872198][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 101.165893][ T7752] loop0: detected capacity change from 0 to 256 [ 101.173498][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1690'. [ 101.448165][ T7775] loop2: detected capacity change from 0 to 2048 [ 101.539452][ T7784] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.634177][ T7775] CPU: 1 PID: 7775 Comm: syz.2.1703 Not tainted 5.15.188-syzkaller #0 [ 101.636707][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.639472][ T7775] Call trace: [ 101.640369][ T7775] dump_backtrace+0x0/0x43c [ 101.641584][ T7775] show_stack+0x2c/0x3c [ 101.642688][ T7775] __dump_stack+0x30/0x40 [ 101.643826][ T7775] dump_stack_lvl+0xf8/0x160 [ 101.645030][ T7775] dump_stack+0x1c/0x5c [ 101.646184][ T7775] nilfs_btree_do_lookup+0x850/0x994 [ 101.647650][ T7775] nilfs_btree_lookup_contig+0xc8/0x968 [ 101.649166][ T7775] nilfs_bmap_lookup_contig+0x88/0x13c [ 101.650569][ T7775] nilfs_get_block+0x1a0/0x808 [ 101.651879][ T7775] block_truncate_page+0x31c/0x71c [ 101.653245][ T7775] nilfs_truncate+0x1ec/0x400 [ 101.654519][ T7775] nilfs_setattr+0x1d0/0x274 [ 101.655763][ T7775] notify_change+0xa08/0xcd8 [ 101.656973][ T7775] do_truncate+0x178/0x1f0 [ 101.658154][ T7775] vfs_truncate+0x23c/0x2b0 [ 101.659446][ T7775] do_sys_truncate+0xe8/0x1b0 [ 101.660780][ T7775] __arm64_sys_truncate+0x5c/0x70 [ 101.662136][ T7775] invoke_syscall+0x98/0x2b8 [ 101.663357][ T7775] el0_svc_common+0x138/0x258 [ 101.664605][ T7775] do_el0_svc+0x58/0x14c [ 101.665743][ T7775] el0_svc+0x78/0x1e0 [ 101.666870][ T7775] el0t_64_sync_handler+0xcc/0xe4 [ 101.668328][ T7775] el0t_64_sync+0x1a0/0x1a4 [ 101.944016][ T7817] loop4: detected capacity change from 0 to 512 [ 101.944802][ T7775] NILFS (loop2): btree level mismatch (ino=16): 1 != 7 [ 101.955273][ T7775] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 101.967716][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1725'. [ 101.970274][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1725'. [ 101.972699][ T7823] tc_dump_action: action bad kind [ 101.983776][ T7775] Remounting filesystem read-only [ 101.986561][ T7775] CPU: 1 PID: 7775 Comm: syz.2.1703 Not tainted 5.15.188-syzkaller #0 [ 101.988944][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.991013][ T7817] EXT2-fs (loop4): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 101.991659][ T7775] Call trace: [ 101.991688][ T7775] dump_backtrace+0x0/0x43c [ 101.991703][ T7775] show_stack+0x2c/0x3c [ 101.994339][ T7817] EXT2-fs (loop4): error: couldn't mount RDWR because of unsupported optional features (1000000) [ 101.995217][ T7775] __dump_stack+0x30/0x40 [ 102.001505][ T7775] dump_stack_lvl+0xf8/0x160 [ 102.002805][ T7775] dump_stack+0x1c/0x5c [ 102.003922][ T7775] nilfs_btree_last_key+0x394/0x4d0 [ 102.005408][ T7775] nilfs_bmap_last_key+0x74/0x124 [ 102.006750][ T7775] nilfs_truncate_bmap+0xdc/0x2c0 [ 102.008183][ T7775] nilfs_truncate+0x1f8/0x400 [ 102.009504][ T7775] nilfs_setattr+0x1d0/0x274 [ 102.010780][ T7775] notify_change+0xa08/0xcd8 [ 102.012067][ T7775] do_truncate+0x178/0x1f0 [ 102.013267][ T7775] vfs_truncate+0x23c/0x2b0 [ 102.014549][ T7775] do_sys_truncate+0xe8/0x1b0 [ 102.015890][ T7775] __arm64_sys_truncate+0x5c/0x70 [ 102.017187][ T7775] invoke_syscall+0x98/0x2b8 [ 102.018433][ T7775] el0_svc_common+0x138/0x258 [ 102.019713][ T7775] do_el0_svc+0x58/0x14c [ 102.020889][ T7775] el0_svc+0x78/0x1e0 [ 102.021972][ T7775] el0t_64_sync_handler+0xcc/0xe4 [ 102.023385][ T7775] el0t_64_sync+0x1a0/0x1a4 [ 102.051619][ T7775] NILFS (loop2): btree level mismatch (ino=16): 1 != 7 [ 102.053549][ T7775] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 102.056094][ T7775] NILFS (loop2): error -5 truncating bmap (ino=16) [ 102.169867][ T4035] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 102.360123][ T7852] netlink: 'syz.1.1740': attribute type 1 has an invalid length. [ 102.362333][ T7852] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1740'. [ 102.364639][ T7852] NCSI netlink: No device for ifindex 130997362 [ 102.412103][ T7844] loop2: detected capacity change from 0 to 4096 [ 102.427413][ T7856] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.465438][ T7856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.484305][ T7856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.501831][ T7864] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.557234][ T7844] attempt to access beyond end of device [ 102.557234][ T7844] loop2: rw=524288, want=2097328, limit=4096 [ 102.660809][ T7877] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1751'. [ 102.836638][ T7889] netlink: 'syz.2.1756': attribute type 2 has an invalid length. [ 102.846501][ T7889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.849701][ T7887] loop3: detected capacity change from 0 to 1764 [ 102.876805][ T7893] loop1: detected capacity change from 0 to 1764 [ 102.990419][ T7887] CIFS mount error: No usable UNC path provided in device string! [ 102.990419][ T7887] [ 102.993405][ T7887] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 103.083705][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.675320][ T7965] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1793'. [ 103.696908][ T7965] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1793'. [ 103.740693][ T7971] xt_hashlimit: size too large, truncated to 1048576 [ 103.746573][ T7971] xt_hashlimit: overflow, try lower: 0/0 [ 103.769864][ T7976] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1799'. [ 103.816362][ T26] audit: type=1400 audit(103.790:2): apparmor="DENIED" operation="change_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=7977 comm="syz.2.1801" [ 103.885026][ T7984] loop2: detected capacity change from 0 to 512 [ 103.951032][ T7984] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 103.953978][ T7984] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 103.956621][ T7984] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 103.995561][ T7984] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 103.997871][ T7984] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e018, mo2=0000] [ 104.000820][ T7984] EXT4-fs (loop2): orphan cleanup on readonly fs [ 104.010595][ T7984] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1804: bg 0: block 34: padding at end of block bitmap is not set [ 104.019229][ T7984] Quota error (device loop2): write_blk: dquota write failed [ 104.021540][ T7984] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 104.024334][ T7984] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.1804: Failed to acquire dquot type 1 [ 104.073531][ T7984] EXT4-fs (loop2): 1 truncate cleaned up [ 104.075761][ T7984] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,bsdgroups,nogrpid,noblock_validity,,errors=continue. Quota mode: writeback. [ 104.329559][ T8008] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.413357][ T7975] loop4: detected capacity change from 0 to 32768 [ 104.472901][ T7975] (syz.4.1798,7975,0):ocfs2_verify_volume:2377 ERROR: bad system_dir_blkno: 0 [ 104.475450][ T7975] (syz.4.1798,7975,0):ocfs2_verify_volume:2392 ERROR: status = -22 [ 104.477848][ T7975] (syz.4.1798,7975,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 104.491597][ T7975] (syz.4.1798,7975,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 104.641254][ T8028] loop2: detected capacity change from 0 to 8 [ 104.687112][ T8032] device veth1_macvtap left promiscuous mode [ 104.717196][ T8032] device macsec0 entered promiscuous mode [ 104.721698][ T8031] loop0: detected capacity change from 0 to 1764 [ 104.770651][ T8032] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 104.861955][ T8031] CIFS mount error: No usable UNC path provided in device string! [ 104.861955][ T8031] [ 104.864744][ T8031] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 104.927414][ T8037] loop4: detected capacity change from 0 to 1764 [ 105.227588][ T8014] loop1: detected capacity change from 0 to 32768 [ 105.335487][ T8075] afs: Unknown parameter 'dont_hash' [ 105.481724][ T8014] XFS (loop1): Mounting V5 Filesystem [ 105.661377][ T8090] netlink: 'syz.3.1852': attribute type 1 has an invalid length. [ 105.666784][ T8090] netlink: 'syz.3.1852': attribute type 2 has an invalid length. [ 105.676723][ T8014] XFS (loop1): Ending clean mount [ 105.721741][ T8101] netlink: zone id is out of range [ 105.876130][ T4034] XFS (loop1): Unmounting Filesystem [ 105.930260][ T8118] binder: 8116:8118 ioctl c018620c 20000240 returned -1 [ 105.979433][ T8120] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 106.237750][ T8142] netlink: 'syz.0.1879': attribute type 21 has an invalid length. [ 106.240013][ T8142] netlink: 'syz.0.1879': attribute type 1 has an invalid length. [ 106.378518][ T8160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1885'. [ 106.394447][ T8159] netlink: 412 bytes leftover after parsing attributes in process `syz.2.1886'. [ 106.405313][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1887'. [ 106.472829][ T8167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1889'. [ 106.481320][ T8167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1889'. [ 106.586949][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'. [ 106.802316][ T8200] loop2: detected capacity change from 0 to 256 [ 106.813863][ T8196] loop4: detected capacity change from 0 to 764 [ 106.871374][ T8200] FAT-fs (loop2): Directory bread(block 64) failed [ 106.873140][ T8200] FAT-fs (loop2): Directory bread(block 65) failed [ 106.874969][ T8200] FAT-fs (loop2): Directory bread(block 66) failed [ 106.892614][ T8200] FAT-fs (loop2): Directory bread(block 67) failed [ 106.894552][ T8200] FAT-fs (loop2): Directory bread(block 68) failed [ 106.896349][ T8200] FAT-fs (loop2): Directory bread(block 69) failed [ 106.908728][ T8200] FAT-fs (loop2): Directory bread(block 70) failed [ 106.910561][ T8200] FAT-fs (loop2): Directory bread(block 71) failed [ 106.912321][ T8200] FAT-fs (loop2): Directory bread(block 72) failed [ 106.914129][ T8200] FAT-fs (loop2): Directory bread(block 73) failed [ 107.134962][ T8214] loop3: detected capacity change from 0 to 2048 [ 107.144137][ T8221] loop0: detected capacity change from 0 to 512 [ 107.148121][ T8219] loop1: detected capacity change from 0 to 64 [ 107.172189][ T8221] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 107.184592][ T8214] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.220544][ T8221] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,noquota,mblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback. [ 107.729444][ T8268] netlink: 'syz.4.1939': attribute type 6 has an invalid length. [ 107.807028][ T8270] loop3: detected capacity change from 0 to 4096 [ 107.816881][ T8276] netlink: 364 bytes leftover after parsing attributes in process `syz.1.1941'. [ 107.832771][ T8277] xt_l2tp: v2 sid > 0xffff: 117440512 [ 107.891402][ T8270] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 107.906833][ T8270] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 107.998981][ T8270] ntfs3: loop3: ino=1b, Correct links count -> 1. [ 108.087105][ T4045] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 108.155115][ T8296] netlink: 'syz.3.1951': attribute type 1 has an invalid length. [ 108.157299][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1951'. [ 108.340634][ T8317] netlink: 'syz.2.1963': attribute type 1 has an invalid length. [ 108.485534][ T8324] loop2: detected capacity change from 0 to 1024 [ 108.514723][ T8331] netlink: 'syz.4.1969': attribute type 3 has an invalid length. [ 108.537124][ T8324] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 108.558079][ T8324] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869) [ 108.583952][ T8324] EXT4-fs error (device loop2): ext4_get_journal_inode:5158: inode #5: comm syz.2.1966: casefold flag without casefold feature [ 108.604801][ T8338] netlink: 'syz.1.1973': attribute type 11 has an invalid length. [ 108.621278][ T8324] EXT4-fs (loop2): no journal found [ 108.790956][ T8354] loop0: detected capacity change from 0 to 8 [ 108.816944][ T149] block nbd1: Attempted send on invalid socket [ 108.819924][ T149] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.836846][ T8359] hpfs: hpfs_map_sector(): read error [ 108.839136][ T8354] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 108.937386][ T4220] udevd[4220]: incorrect cramfs checksum on /dev/loop0 [ 108.977344][ T8363] loop1: detected capacity change from 0 to 4096 [ 109.079287][ T8363] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.120290][ T8365] loop3: detected capacity change from 0 to 4096 [ 109.156418][ T8381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1992'. [ 109.174974][ T8381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1992'. [ 109.392426][ T8402] loop0: detected capacity change from 0 to 64 [ 109.399674][ T8401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2005'. [ 109.429013][ T8405] binder: 8403:8405 ioctl c018620b 0 returned -14 [ 109.464754][ T8407] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2008'. [ 109.502439][ T8402] hfs: keylen 94 too large [ 109.625904][ T8421] Injecting memory failure for pfn 0x213dbd at process virtual address 0x20000000 [ 109.675914][ T8421] Memory failure: 0x213dbd: recovery action for reserved kernel page: Ignored [ 109.683978][ T8425] Soft offlining pfn 0x213dbd at process virtual address 0x2004f000 [ 109.686450][ T8425] soft_offline_page: 0x213dbd page already poisoned [ 110.021386][ T8442] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.186596][ T8450] bond0: option arp_validate: invalid value (18446744073441116161) [ 110.325753][ T8409] loop2: detected capacity change from 0 to 32768 [ 110.413883][ T8417] loop0: detected capacity change from 0 to 32768 [ 110.434504][ T8409] (syz.2.2009,8409,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 110.447754][ T8409] (syz.2.2009,8409,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 110.459756][ T8417] (syz.0.2012,8417,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 110.463478][ T8417] (syz.0.2012,8417,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 110.468560][ T8409] (syz.2.2009,8409,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 110.482245][ T8409] JBD2: Ignoring recovery information on journal [ 110.528125][ T8417] debugfs: Directory '9357E9D751824C228242B9B0D0FB6750' with parent 'ocfs2' already present! [ 110.534134][ T8417] JBD2: Ignoring recovery information on journal [ 110.636404][ T8409] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 110.666220][ T8477] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2038'. [ 110.722317][ T8417] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 110.822186][ T4035] ocfs2: Unmounting device (7,2) on (node local) [ 110.943601][ T8488] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2044'. [ 110.959758][ T4041] ocfs2: Unmounting device (7,0) on (node local) [ 110.977911][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'. [ 110.997803][ T26] audit: type=1400 audit(110.980:3): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=8486 comm="syz.3.2045" [ 111.052581][ T8496] loop1: detected capacity change from 0 to 8 [ 111.140736][ T8496] SQUASHFS error: lzo decompression failed, data probably corrupt [ 111.143065][ T8496] SQUASHFS error: Failed to read block 0x28d: -5 [ 111.144719][ T8496] SQUASHFS error: Unable to read metadata cache entry [28b] [ 111.146643][ T8496] SQUASHFS error: Unable to read inode 0x11f [ 111.562894][ T8528] loop3: detected capacity change from 0 to 1024 [ 111.740505][ T362] hfsplus: b-tree write err: -5, ino 4 [ 111.797822][ T8540] loop1: detected capacity change from 0 to 4096 [ 111.864391][ T8504] loop4: detected capacity change from 0 to 32768 [ 112.017324][ T8504] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 112.068405][ T8504] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 112.084225][ T8540] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.091220][ T8504] ocfs2: Unmounting device (7,4) on (node local) [ 112.333211][ T8563] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2075'. [ 112.441424][ T8570] tmpfs: Bad value for 'mpol' [ 112.450871][ T8572] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 112.622114][ T8583] overlayfs: missing 'workdir' [ 112.670386][ T8546] loop0: detected capacity change from 0 to 32768 [ 112.674792][ T8587] netlink: 'syz.1.2086': attribute type 4 has an invalid length. [ 112.699539][ T8587] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 112.918563][ T8606] capability: warning: `syz.2.2095' uses deprecated v2 capabilities in a way that may be insecure [ 113.056770][ T8619] loop3: detected capacity change from 0 to 64 [ 113.798970][ T8663] overlayfs: missing 'workdir' [ 113.919372][ T8669] netlink: 'syz.4.2125': attribute type 1 has an invalid length. [ 113.921444][ T8669] netlink: 'syz.4.2125': attribute type 2 has an invalid length. [ 113.923506][ T8669] __nla_validate_parse: 3 callbacks suppressed [ 113.923516][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2125'. [ 113.952596][ T8671] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 114.340793][ T8643] loop1: detected capacity change from 0 to 32768 [ 114.408816][ T8693] autofs4:pid:8693:autofs_fill_super: called with bogus options [ 114.426492][ T8695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2139'. [ 114.437920][ T8650] loop3: detected capacity change from 0 to 32768 [ 114.638402][ T8650] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 114.674425][ T8718] loop1: detected capacity change from 0 to 8192 [ 114.757826][ T8650] XFS (loop3): Unmounting Filesystem [ 114.823971][ T3652] loop1: p1 < > p2 < p5 > p4 [ 114.861031][ T3652] loop1: p4 size 16776960 extends beyond EOD, truncated [ 114.876739][ T3652] loop1: p5 size 16776960 extends beyond EOD, truncated [ 114.902855][ T3652] loop1: p1 < > p2 < p5 > p4 [ 114.934007][ T3652] loop1: p4 size 16776960 extends beyond EOD, truncated [ 114.947427][ T3652] loop1: p5 size 16776960 extends beyond EOD, truncated [ 114.978155][ T8718] loop1: p1 < > p2 < p5 > p4 [ 114.990544][ T8718] loop1: p4 size 16776960 extends beyond EOD, truncated [ 114.995349][ T8718] loop1: p5 size 16776960 extends beyond EOD, truncated [ 115.096104][ T3652] loop1: p1 < > p2 < p5 > p4 [ 115.107439][ T3652] loop1: p4 size 16776960 extends beyond EOD, truncated [ 115.110186][ T3652] loop1: p5 size 16776960 extends beyond EOD, truncated [ 115.144858][ T8743] loop4: detected capacity change from 0 to 512 [ 115.297780][ T8743] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 115.300167][ T8743] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 115.302331][ T8743] System zones: 0-1, 15-15, 18-18, 34-34 [ 115.304571][ T8743] EXT4-fs (loop4): orphan cleanup on readonly fs [ 115.306385][ T8743] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 115.328847][ T8713] loop2: detected capacity change from 0 to 32768 [ 115.367834][ T8743] EXT4-fs warning (device loop4): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 115.407727][ T8743] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 115.436088][ T8743] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.2158: bad orphan inode 16 [ 115.456487][ T8743] ext4_test_bit(bit=15, block=18) = 1 [ 115.458192][ T8743] is_bad_inode(inode)=0 [ 115.459335][ T8743] NEXT_ORPHAN(inode)=0 [ 115.460411][ T8743] max_ino=32 [ 115.461343][ T8743] i_nlink=2 [ 115.462290][ T8743] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 115.501085][ T226] block nbd2: Attempted send on invalid socket [ 115.502862][ T226] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.512386][ T8755] EXT2-fs (nbd2): error: unable to read superblock [ 115.553899][ T8743] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 115.631510][ T8765] ptrace attach of "./syz-executor exec"[4041] was attempted by "./syz-executor exec"[8765] [ 115.834472][ T8781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2177'. [ 115.837044][ T8781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2177'. [ 115.878581][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2178'. [ 115.937784][ T8786] loop3: detected capacity change from 0 to 512 [ 115.960232][ T8793] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2183'. [ 115.962633][ T8793] netlink: 492 bytes leftover after parsing attributes in process `syz.1.2183'. [ 116.164620][ T8786] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.184961][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2188'. [ 116.184987][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2188'. [ 116.185004][ T8806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2188'. [ 116.762213][ T8852] netlink: 'syz.1.2210': attribute type 10 has an invalid length. [ 116.788574][ T8852] device syz_tun entered promiscuous mode [ 116.814320][ T8859] loop2: detected capacity change from 0 to 64 [ 116.819785][ T8852] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 116.933089][ T8866] netlink: 'syz.3.2218': attribute type 32 has an invalid length. [ 116.937992][ T8868] hpfs: bad mount options. [ 117.184508][ T8892] netlink: 'syz.0.2231': attribute type 10 has an invalid length. [ 117.207598][ T8892] device syz_tun entered promiscuous mode [ 117.259175][ T8892] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 117.467848][ T8913] netlink: 'syz.4.2241': attribute type 6 has an invalid length. [ 117.610587][ T8914] loop3: detected capacity change from 0 to 4096 [ 117.706488][ T8914] EXT4-fs (loop3): inline encryption not supported [ 117.708943][ T8914] EXT4-fs (loop3): Test dummy encryption mode enabled [ 117.710764][ T8914] EXT4-fs (loop3): Ignoring removed oldalloc option [ 117.759938][ T8914] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,inlinecrypt,nodioread_nolock,test_dummy_encryption,oldalloc,quota,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 117.820056][ T8893] loop2: detected capacity change from 0 to 32768 [ 117.858790][ T8931] loop0: detected capacity change from 0 to 8192 [ 117.866455][ T8893] ERROR: (device loop2): diAllocBit: iag inconsistent [ 117.866455][ T8893] [ 117.890911][ T8931] loop0: p1 < > p2 < p5 > p4 [ 117.893606][ T8931] loop0: p4 size 16776960 extends beyond EOD, truncated [ 117.898065][ T8931] loop0: p5 size 16776960 extends beyond EOD, truncated [ 117.902326][ T8893] ERROR: (device loop2): remounting filesystem as read-only [ 117.904357][ T8893] ialloc: diAlloc returned -5! [ 117.983565][ T8941] loop4: detected capacity change from 0 to 764 [ 118.035931][ T8941] rock: directory entry would overflow storage [ 118.038082][ T7353] udevd[7353]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 118.042148][ T4555] udevd[4555]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 118.051388][ T4218] udevd[4218]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 118.054905][ T8941] rock: sig=0x5850, size=36, remaining=7 [ 118.090977][ T7361] udevd[7361]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 118.155141][ T26] audit: type=1326 audit(118.130:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz.4.2260" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff840cdba8 code=0x7ffc0000 [ 118.199169][ T8950] loop3: detected capacity change from 0 to 1024 [ 118.200802][ T26] audit: type=1326 audit(118.180:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz.4.2260" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=445 compat=0 ip=0xffff840cdba8 code=0x7ffc0000 [ 118.211700][ T26] audit: type=1326 audit(118.190:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz.4.2260" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff840cdba8 code=0x7ffc0000 [ 118.237098][ T8950] EXT4-fs (loop3): Test dummy encryption mode enabled [ 118.247535][ T8950] EXT4-fs (loop3): inline encryption not supported [ 118.267817][ T8950] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,data_err=ignore,max_batch_time=0x0000000000004000,noblock_validity,,errors=continue. Quota mode: writeback. [ 118.554524][ T8968] xt_HMARK: spi-set and port-set can't be combined [ 118.610122][ T7353] udevd[7353]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 118.617477][ T4218] udevd[4218]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 118.649324][ T8975] loop4: detected capacity change from 0 to 64 [ 118.718111][ T4555] udevd[4555]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 118.727900][ T8940] loop1: detected capacity change from 0 to 40427 [ 118.825829][ T8957] loop0: detected capacity change from 0 to 32768 [ 118.831066][ T8940] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 118.833320][ T8940] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 118.844120][ T7361] udevd[7361]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 118.865885][ T8940] F2FS-fs (loop1): Found nat_bits in checkpoint [ 118.885253][ T8957] (syz.0.2261,8957,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 118.890332][ T8957] (syz.0.2261,8957,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 118.925957][ T8957] (syz.0.2261,8957,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 118.932442][ T8957] JBD2: Ignoring recovery information on journal [ 119.008443][ T8989] netlink: 'syz.4.2276': attribute type 1 has an invalid length. [ 119.069440][ T8940] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 119.071604][ T8940] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 119.078380][ T8957] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 119.129717][ T8997] netlink: 'syz.4.2279': attribute type 1 has an invalid length. [ 119.367388][ T9004] netlink: 'syz.2.2284': attribute type 10 has an invalid length. [ 119.401232][ T4041] ocfs2: Unmounting device (7,0) on (node local) [ 119.430973][ T9004] device syz_tun entered promiscuous mode [ 119.505974][ T9004] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 119.565364][ T4555] udevd[4555]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 119.600097][ T4028] udevd[4028]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 119.842691][ T9029] loop4: detected capacity change from 0 to 1024 [ 119.867405][ T9029] EXT4-fs (loop4): Test dummy encryption mode enabled [ 119.869554][ T9029] EXT4-fs (loop4): inline encryption not supported [ 119.994950][ T9029] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,data_err=ignore,max_batch_time=0x0000000000004000,noblock_validity,,errors=continue. Quota mode: writeback. [ 120.014168][ T9046] loop1: detected capacity change from 0 to 164 [ 120.084156][ T9046] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 120.174510][ T9052] netlink: 'syz.3.2302': attribute type 10 has an invalid length. [ 120.203062][ T9052] device syz_tun entered promiscuous mode [ 120.214586][ T9060] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 120.250688][ T9052] rdma_rxe: ignoring netdev event = 12 for bond0 [ 120.252453][ T9052] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 120.260778][ T9057] device netdevsim0 entered promiscuous mode [ 120.871942][ T9117] __nla_validate_parse: 4 callbacks suppressed [ 120.871956][ T9117] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2337'. [ 120.885972][ T9120] loop4: detected capacity change from 0 to 512 [ 120.970856][ T9119] loop2: detected capacity change from 0 to 4096 [ 120.991156][ T9120] EXT2-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 120.993574][ T9120] EXT2-fs (loop4): DAX unsupported by block device. Turning off DAX. [ 120.997056][ T9120] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 121.049489][ T9119] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 121.055514][ T9119] ntfs3: loop2: Failed to load $Extend. [ 121.057267][ T9120] EXT2-fs (loop4): error: ext2_check_page: bad entry in directory #2: : rec_len is smaller than minimal - offset=76, inode=16777232, rec_len=1, name_len=0 [ 121.126403][ T9136] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 121.139986][ T9136] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 121.232083][ T9141] Option ' ' to dns_resolver key: bad/missing value [ 121.360856][ T9150] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2352'. [ 121.466631][ T9157] Mount JFS Failure: -22 [ 121.469558][ T9157] jfs_mount failed w/return code = -22 [ 121.484618][ T9158] loop0: detected capacity change from 0 to 8 [ 121.575609][ T9158] SQUASHFS error: Failed to read block 0x6e6: -5 [ 121.590068][ T9158] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 121.606912][ T9158] SQUASHFS error: Unable to read inode 0xa7 [ 121.670133][ T9164] loop4: detected capacity change from 0 to 1024 [ 121.868350][ T9173] loop0: detected capacity change from 0 to 64 [ 121.872849][ T9147] loop2: detected capacity change from 0 to 32768 [ 121.878709][ T9174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.032937][ T9180] block device autoloading is deprecated and will be removed. [ 122.267186][ T9200] loop1: detected capacity change from 0 to 256 [ 122.296696][ T9198] loop4: detected capacity change from 0 to 2048 [ 122.304810][ T9198] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 122.326874][ T9200] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 122.326920][ T9204] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.327135][ T9200] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 122.408251][ T9200] exFAT-fs (loop1): invalid start cluster (23) [ 122.710815][ T9223] Soft offlining pfn 0x12da94 at process virtual address 0x20ffe000 [ 122.736325][ T9223] Soft offlining pfn 0x133d07 at process virtual address 0x20fff000 [ 122.899404][ T9235] loop4: detected capacity change from 0 to 256 [ 123.005497][ T9235] FAT-fs (loop4): Directory bread(block 64) failed [ 123.007732][ T9235] FAT-fs (loop4): Directory bread(block 65) failed [ 123.009533][ T9235] FAT-fs (loop4): Directory bread(block 66) failed [ 123.038055][ T9235] FAT-fs (loop4): Directory bread(block 67) failed [ 123.040025][ T9235] FAT-fs (loop4): Directory bread(block 68) failed [ 123.041844][ T9235] FAT-fs (loop4): Directory bread(block 69) failed [ 123.043693][ T9235] FAT-fs (loop4): Directory bread(block 70) failed [ 123.045491][ T9235] FAT-fs (loop4): Directory bread(block 71) failed [ 123.087711][ T9235] FAT-fs (loop4): Directory bread(block 72) failed [ 123.089561][ T9235] FAT-fs (loop4): Directory bread(block 73) failed [ 123.120689][ T9252] loop1: detected capacity change from 0 to 512 [ 123.203506][ T9252] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 123.242302][ T9252] EXT2-fs (loop1): error: ext2_free_branches: Read failure, inode=16, block=1564416 [ 123.263275][ T9207] loop0: detected capacity change from 0 to 40427 [ 123.322929][ T9207] F2FS-fs (loop0): invalid crc value [ 123.347284][ T9207] F2FS-fs (loop0): Found nat_bits in checkpoint [ 123.406931][ T9207] F2FS-fs (loop0): Start checkpoint disabled! [ 123.449167][ T9207] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 123.474413][ T9270] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2411'. [ 123.740648][ T9276] loop1: detected capacity change from 0 to 8192 [ 123.781296][ T9276] loop1: p1 < > p3 < p5 > p4 [ 123.782653][ T9276] loop1: partition table partially beyond EOD, truncated [ 123.784643][ T9276] loop1: p1 start 4294967040 is beyond EOD, truncated [ 123.801989][ T9290] netlink: 'syz.3.2421': attribute type 1 has an invalid length. [ 123.931000][ T9303] netlink: 'syz.1.2427': attribute type 3 has an invalid length. [ 124.002130][ T9310] ieee802154 phy0 wpan0: encryption failed: -90 [ 124.112360][ T9311] loop2: detected capacity change from 0 to 4096 [ 124.125080][ T9311] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 124.130014][ T9311] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 124.132300][ T9311] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 124.148319][ T9311] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 124.150548][ T9311] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00 [ 124.152724][ T9311] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00 [ 124.154931][ T9311] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00 [ 124.157102][ T9311] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00 [ 124.166967][ T9322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2436'. [ 124.181638][ T9322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2436'. [ 124.184383][ T9322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2436'. [ 124.187967][ T9311] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00 [ 124.190318][ T9311] ntfs3: loop2: try to read out of volume at offset 0x3fffffe0c00 [ 124.625789][ T9355] loop1: detected capacity change from 0 to 1764 [ 124.702922][ T9357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.705266][ T9357] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 124.738560][ T9357] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 124.804445][ T9363] netlink: 'syz.2.2455': attribute type 4 has an invalid length. [ 124.944709][ T7353] udevd[7353]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 124.969943][ T4220] udevd[4220]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 124.989676][ T4218] udevd[4218]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 125.049639][ T4555] udevd[4555]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 125.173366][ T9335] loop4: detected capacity change from 0 to 32768 [ 125.217290][ T9349] loop3: detected capacity change from 0 to 32768 [ 125.373896][ T9349] JBD2: Ignoring recovery information on journal [ 125.552442][ T9414] tmpfs: Bad value for 'mpol' [ 125.568692][ T9349] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 125.630922][ T9418] cifs: Unknown parameter '_LI !BEJFAi_^wktcُE|,2' [ 125.660193][ T9349] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 125.666336][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2476'. [ 125.695930][ T9349] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 125.702423][ T9349] OCFS2: File system is now read-only. [ 125.704036][ T9349] (syz.3.2449,9349,0):ocfs2_search_chain:1785 ERROR: status = -30 [ 125.706480][ T9349] (syz.3.2449,9349,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 125.737585][ T9349] (syz.3.2449,9349,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 125.740015][ T9349] (syz.3.2449,9349,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 125.763332][ T9349] (syz.3.2449,9349,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 125.766842][ T9349] (syz.3.2449,9349,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 125.779205][ T9349] (syz.3.2449,9349,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 125.781517][ T9349] (syz.3.2449,9349,0):ocfs2_mknod:385 ERROR: status = -30 [ 125.794087][ T9349] (syz.3.2449,9349,0):ocfs2_mknod:502 ERROR: status = -30 [ 125.801852][ T9349] (syz.3.2449,9349,0):ocfs2_create:676 ERROR: status = -30 [ 125.905695][ T4045] ocfs2: Unmounting device (7,3) on (node local) [ 125.933543][ T9441] device veth1_to_team entered promiscuous mode [ 125.956209][ T9441] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 125.985747][ T9445] libceph: resolve '0' (ret=-3): failed [ 126.080010][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2486'. [ 126.289849][ T9464] device macvlan1 entered promiscuous mode [ 126.745536][ T9499] usb usb8: usbfs: process 9499 (syz.0.2505) did not claim interface 0 before use [ 126.870433][ T9453] loop4: detected capacity change from 0 to 32768 [ 127.184987][ T9539] usb usb1: usbfs: process 9539 (syz.1.2521) did not claim interface 0 before use [ 127.280392][ T9545] overlayfs: overlapping lowerdir path [ 127.482244][ T9565] netlink: 'syz.1.2536': attribute type 32 has an invalid length. [ 127.535344][ T9570] loop0: detected capacity change from 0 to 64 [ 127.642063][ T9566] loop2: detected capacity change from 0 to 4096 [ 128.068075][ T9552] loop3: detected capacity change from 0 to 32768 [ 128.338749][ T9625] overlayfs: overlapping lowerdir path [ 128.581962][ T9646] netlink: 'syz.4.2575': attribute type 11 has an invalid length. [ 128.636899][ T9642] loop1: detected capacity change from 0 to 4096 [ 128.718769][ T9656] loop0: detected capacity change from 0 to 256 [ 128.796171][ T4034] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 128.819378][ T4034] ntfs3: loop1: ntfs_evict_inode r=9 failed, -22. [ 128.820699][ T9662] loop3: detected capacity change from 0 to 256 [ 128.821143][ T4034] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 128.840023][ T9656] FAT-fs (loop0): Directory bread(block 64) failed [ 128.841874][ T9656] FAT-fs (loop0): Directory bread(block 65) failed [ 128.843755][ T9656] FAT-fs (loop0): Directory bread(block 66) failed [ 128.845536][ T9656] FAT-fs (loop0): Directory bread(block 67) failed [ 128.877824][ T9656] FAT-fs (loop0): Directory bread(block 68) failed [ 128.890137][ T9656] FAT-fs (loop0): Directory bread(block 69) failed [ 128.892093][ T9656] FAT-fs (loop0): Directory bread(block 70) failed [ 128.898866][ T9656] FAT-fs (loop0): Directory bread(block 71) failed [ 128.901897][ T9662] FAT-fs (loop3): Directory bread(block 64) failed [ 128.903513][ T9656] FAT-fs (loop0): Directory bread(block 72) failed [ 128.903755][ T9662] FAT-fs (loop3): Directory bread(block 65) failed [ 128.905461][ T9656] FAT-fs (loop0): Directory bread(block 73) failed [ 128.907312][ T9662] FAT-fs (loop3): Directory bread(block 66) failed [ 128.925153][ T9662] FAT-fs (loop3): Directory bread(block 67) failed [ 128.927020][ T9662] FAT-fs (loop3): Directory bread(block 68) failed [ 128.941012][ T9662] FAT-fs (loop3): Directory bread(block 69) failed [ 128.948230][ T9662] FAT-fs (loop3): Directory bread(block 70) failed [ 128.950072][ T9662] FAT-fs (loop3): Directory bread(block 71) failed [ 128.951888][ T9662] FAT-fs (loop3): Directory bread(block 72) failed [ 128.970525][ T9662] FAT-fs (loop3): Directory bread(block 73) failed [ 129.282305][ T9682] ipt_REJECT: ECHOREPLY no longer supported. [ 129.368712][ T9686] tmpfs: Bad value for 'mpol' [ 129.410926][ T9654] loop2: detected capacity change from 0 to 32768 [ 129.436295][ T9654] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2579 (9654) [ 129.472810][ T9654] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 129.475175][ T9654] BTRFS info (device loop2): using free space tree [ 129.476927][ T9654] BTRFS info (device loop2): has skinny extents [ 129.490737][ T9698] loop4: detected capacity change from 0 to 512 [ 129.604747][ T9698] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue. Quota mode: writeback. [ 129.674001][ T9654] BTRFS info (device loop2): enabling ssd optimizations [ 129.712394][ T9698] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2601: bg 0: block 145: padding at end of block bitmap is not set [ 129.753130][ T9698] EXT4-fs error (device loop4): ext4_xattr_block_set:2206: inode #15: comm syz.4.2601: bad block 33 [ 129.842866][ T9736] netlink: 'syz.3.2609': attribute type 9 has an invalid length. [ 129.844785][ T4218] udevd[4218]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 129.845152][ T9736] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.2609'. [ 129.853091][ T4220] udevd[4220]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 129.860314][ T4555] udevd[4555]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 130.122606][ T9756] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 130.132779][ T4219] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop2 scanned by udevd (4219) [ 130.610724][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2636'. [ 130.627610][ T9796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2636'. [ 130.640473][ T9798] CIFS mount error: No usable UNC path provided in device string! [ 130.640473][ T9798] [ 130.643249][ T9798] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 130.806651][ T9809] loop1: detected capacity change from 0 to 512 [ 130.925121][ T9809] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue. Quota mode: writeback. [ 131.031307][ T9809] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2641: bg 0: block 145: padding at end of block bitmap is not set [ 131.048847][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.050678][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.227398][ T26] audit: type=1400 audit(131.200:7): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F85 [ 131.242948][ T9845] xt_NFQUEUE: number of total queues is 0 [ 131.246863][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2658'. [ 131.307803][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2658'. [ 131.413330][ T9851] loop2: detected capacity change from 0 to 2048 [ 131.484687][ T9851] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.558812][ T9867] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 131.834657][ T9881] xt_TCPMSS: Only works on TCP SYN packets [ 132.074491][ T9859] loop3: detected capacity change from 0 to 32768 [ 132.087161][ T9893] autofs4:pid:9893:autofs_fill_super: called with bogus options [ 132.278589][ T9863] loop0: detected capacity change from 0 to 32768 [ 132.349414][ T9863] add_index: next_index = 0. Resetting! [ 132.386346][ T9911] loop2: detected capacity change from 0 to 128 [ 132.493766][ T9911] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.516306][ T9920] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2696'. [ 132.520825][ T9920] IPv6: sit2: Disabled Multicast RS [ 132.566725][ T9878] loop1: detected capacity change from 0 to 32768 [ 132.809741][ T9878] XFS (loop1): Mounting V5 Filesystem [ 133.024663][ T9947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2704'. [ 133.027259][ T9947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2704'. [ 133.032616][ T9878] XFS (loop1): Ending clean mount [ 133.197960][ T4034] XFS (loop1): Unmounting Filesystem [ 133.555952][ T9935] loop2: detected capacity change from 0 to 32768 [ 133.635258][ T9933] loop4: detected capacity change from 0 to 32768 [ 133.646120][ T9935] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 133.678762][ T9933] XFS: ikeep mount option is deprecated. [ 133.755446][ T9933] XFS (loop4): Mounting V5 Filesystem [ 133.807163][ T4035] ocfs2: Unmounting device (7,2) on (node local) [ 134.022024][ T9933] XFS (loop4): Ending clean mount [ 134.025425][ T9933] XFS (loop4): Quotacheck needed: Please wait. [ 134.071540][ T9933] XFS (loop4): Quotacheck: Done. [ 134.112785][ T4047] XFS (loop4): Unmounting Filesystem [ 134.565628][T10013] loop0: detected capacity change from 0 to 4096 [ 134.608520][T10013] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 134.618248][T10018] overlayfs: conflicting options: userxattr,redirect_dir=on [ 134.627700][T10020] xt_bpf: check failed: parse error [ 134.643776][T10013] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 134.646794][T10013] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 134.662405][ T9975] loop3: detected capacity change from 0 to 40427 [ 134.677634][T10013] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 134.681501][T10013] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 134.723730][ T9975] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 134.729928][ T9975] F2FS-fs (loop3): invalid crc value [ 134.734593][ T9975] F2FS-fs (loop3): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:2, type:0, next_blkoff:0, blkofs:1 [ 134.738867][T10013] ntfs: volume version 3.1. [ 134.754384][ T9975] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 134.844298][T10013] ntfs: (device loop0): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 134.988178][T10043] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2744'. [ 134.990780][T10043] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2744'. [ 135.211227][T10053] netlink: 'syz.4.2752': attribute type 33 has an invalid length. [ 135.213538][T10053] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2752'. [ 135.389597][T10061] loop2: detected capacity change from 0 to 4096 [ 135.438383][T10061] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 135.457357][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2761'. [ 135.471229][T10061] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 135.474385][T10061] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 135.534976][T10061] ntfs: volume version 3.1. [ 135.750493][T10042] loop0: detected capacity change from 0 to 32768 [ 135.774027][T10089] tmpfs: Bad value for 'mpol' [ 135.837547][T10042] ERROR: (device loop0): dbFindCtl: Corrupt dmapctl page [ 135.837547][T10042] [ 135.848821][T10042] ERROR: (device loop0): remounting filesystem as read-only [ 135.850844][T10042] ialloc: diAlloc returned -5! [ 135.870094][T10094] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2771'. [ 136.091898][T10110] netlink: 'syz.3.2777': attribute type 3 has an invalid length. [ 136.392101][T10128] nftables ruleset with unbound set [ 136.403296][T10080] loop1: detected capacity change from 0 to 32768 [ 136.462415][T10080] (syz.1.2765,10080,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 136.466569][T10080] (syz.1.2765,10080,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 136.491490][T10131] Soft offlining pfn 0x136000 at process virtual address 0x20000000 [ 136.505902][T10132] device sit0 entered promiscuous mode [ 136.522103][T10132] netlink: 'syz.4.2790': attribute type 1 has an invalid length. [ 136.529697][T10132] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2790'. [ 136.559427][T10080] JBD2: Ignoring recovery information on journal [ 136.582863][T10131] Memory failure: 0x136000: unhandlable page. [ 136.614277][T10136] loop4: detected capacity change from 0 to 24 [ 136.687440][T10080] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 136.701158][T10136] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 136.713743][T10136] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 136.745692][T10136] VFS: Lookup of 'file0' in romfs loop4 would have caused loop [ 136.882137][ T4034] ocfs2: Unmounting device (7,1) on (node local) [ 136.933156][T10104] loop2: detected capacity change from 0 to 32768 [ 136.935329][T10146] loop4: detected capacity change from 0 to 1024 [ 136.955687][T10147] delete_channel: no stack [ 136.957969][T10150] loop3: detected capacity change from 0 to 1024 [ 136.980917][T10146] EXT4-fs (loop4): Ignoring removed orlov option [ 136.982658][T10146] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 137.026148][T10104] XFS (loop2): Mounting V5 Filesystem [ 137.040085][T10146] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 137.111159][T10104] XFS (loop2): Ending clean mount [ 137.252634][ T4035] XFS (loop2): Unmounting Filesystem [ 137.324301][T10169] loop1: detected capacity change from 0 to 1024 [ 137.376531][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 137.376544][ T26] audit: type=1800 audit(137.350:8): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.2795" name="/file1" dev="loop4" ino=15 res=0 errno=0 [ 137.406167][T10169] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.830691][T10191] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2810'. [ 137.856033][T10194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2811'. [ 137.965433][T10201] netlink: 'syz.3.2812': attribute type 4 has an invalid length. [ 137.996270][T10201] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2812'. [ 138.100936][T10212] loop2: detected capacity change from 0 to 24 [ 138.187780][T10222] netlink: 'syz.4.2824': attribute type 10 has an invalid length. [ 138.188398][T10212] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 138.196328][T10212] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 138.245024][T10226] loop3: detected capacity change from 0 to 16 [ 138.267826][T10212] VFS: Lookup of 'file0' in romfs loop2 would have caused loop [ 138.298221][T10226] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 138.320983][T10226] cramfs: Error -3 while decompressing! [ 138.321407][T10222] team0: Port device macvlan0 added [ 138.322582][T10226] cramfs: 000000003b9ebde0(27)->000000008fdbc19b(4096) [ 138.322655][T10226] cramfs: Error -3 while decompressing! [ 138.326597][T10227] netlink: 'syz.0.2828': attribute type 21 has an invalid length. [ 138.327182][T10226] cramfs: 000000003b9ebde0(27)->000000008fdbc19b(4096) [ 138.336337][T10227] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2828'. [ 138.340507][T10227] netlink: 'syz.0.2828': attribute type 4 has an invalid length. [ 138.342745][T10227] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2828'. [ 138.625399][T10248] loop2: detected capacity change from 0 to 16 [ 138.727792][ T4738] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.749965][T10258] xt_TCPMSS: Only works on TCP SYN packets [ 138.786386][T10251] xt_CT: No such helper "snmp" [ 138.813247][T10261] kernel profiling enabled (shift: 7) [ 138.833137][T10262] netlink: 'syz.1.2845': attribute type 10 has an invalid length. [ 138.929112][T10262] team0: Port device macvlan0 added [ 138.943773][T10267] netlink: 'syz.4.2848': attribute type 33 has an invalid length. [ 138.946155][T10267] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2848'. [ 139.063100][T10274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2850'. [ 139.090176][T10274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2850'. [ 139.176544][T10284] loop4: detected capacity change from 0 to 128 [ 139.207126][T10279] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 139.209357][T10279] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 139.231990][T10279] vhci_hcd vhci_hcd.0: Device attached [ 139.249832][T10283] vhci_hcd: connection closed [ 139.253495][ T136] vhci_hcd: stop threads [ 139.256730][ T136] vhci_hcd: release socket [ 139.258420][ T136] vhci_hcd: disconnect device [ 139.328352][T10284] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 139.406005][ T4047] sysv_free_block: flc_count > flc_size [ 139.410115][ T4047] sysv_free_block: flc_count > flc_size [ 139.412218][ T4047] sysv_free_block: flc_count > flc_size [ 139.414005][ T4047] sysv_free_block: flc_count > flc_size [ 139.415510][ T4047] sysv_free_block: flc_count > flc_size [ 139.416980][ T4047] sysv_free_block: flc_count > flc_size [ 139.428923][ T4047] sysv_free_block: flc_count > flc_size [ 139.433030][ T4047] sysv_free_block: flc_count > flc_size [ 139.434642][ T4047] sysv_free_block: flc_count > flc_size [ 139.448949][ T4047] sysv_free_block: flc_count > flc_size [ 139.462789][ T4047] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 139.490430][T10300] [U] uN [ 139.636547][T10313] loop0: detected capacity change from 0 to 16 [ 139.678453][T10318] xt_nfacct: accounting object `syz1' does not exists [ 139.690148][T10313] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 139.704155][T10313] erofs: DAX unsupported by block device. Turning off DAX. [ 139.721656][T10313] erofs: (device loop0): mounted with root inode @ nid 36. [ 140.001432][T10344] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 140.175939][T10361] loop1: detected capacity change from 0 to 128 [ 140.256491][T10368] binder: 10366:10368 ioctl c00c620f 9999999999999999 returned -14 [ 140.302760][T10373] delete_channel: no stack [ 140.345471][T10374] netlink: zone id is out of range [ 140.354552][T10374] netlink: zone id is out of range [ 140.356140][T10374] netlink: get zone limit has 4 unknown bytes [ 140.518250][T10395] loop3: detected capacity change from 0 to 16 [ 140.555811][T10395] erofs: (device loop3): mounted with root inode @ nid 36. [ 140.662288][T10408] Cannot find del_set index 286 as target [ 141.254061][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2945'. [ 141.353008][T10474] netlink: 'syz.1.2949': attribute type 1 has an invalid length. [ 141.904873][T10513] __nla_validate_parse: 2 callbacks suppressed [ 141.904886][T10513] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2968'. [ 141.935762][T10513] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2968'. [ 141.943801][T10515] ebt_among: dst integrity fail: 101 [ 141.955577][T10470] loop2: detected capacity change from 0 to 32768 [ 142.014274][T10513] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2968'. [ 142.174885][T10526] loop0: detected capacity change from 0 to 512 [ 142.175182][T10485] loop1: detected capacity change from 0 to 32768 [ 142.229973][T10526] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 142.232273][T10526] System zones: 1-12 [ 142.234061][T10526] EXT4-fs (loop0): orphan cleanup on readonly fs [ 142.275131][T10526] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2976: invalid indirect mapped block 8 (level 2) [ 142.319776][T10536] netlink: 'syz.4.2977': attribute type 1 has an invalid length. [ 142.321959][T10536] netlink: 'syz.4.2977': attribute type 2 has an invalid length. [ 142.340988][T10526] EXT4-fs (loop0): 1 truncate cleaned up [ 142.344206][T10526] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.370491][T10485] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 142.451214][ T4034] ocfs2: Unmounting device (7,1) on (node local) [ 142.953701][T10567] AppArmor: change_hat: Invalid input 'w' [ 143.126917][T10577] loop3: detected capacity change from 0 to 64 [ 143.211081][T10543] loop4: detected capacity change from 0 to 32768 [ 143.230188][T10581] IPv6: Can't replace route, no match found [ 143.234430][T10551] loop2: detected capacity change from 0 to 32768 [ 143.238798][T10543] XFS: ikeep mount option is deprecated. [ 143.326890][T10543] XFS (loop4): Mounting V5 Filesystem [ 143.348980][T10551] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 143.358534][T10551] OCFS2: ERROR (device loop2): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74 [ 143.364807][T10551] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 143.395258][T10551] OCFS2: Returning error to the calling process. [ 143.396998][T10551] (syz.2.2986,10551,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -5 [ 143.408963][T10551] (syz.2.2986,10551,1):ocfs2_reserve_new_inode:1091 ERROR: status = -5 [ 143.411370][T10551] (syz.2.2986,10551,1):ocfs2_reserve_new_inode:1114 ERROR: status = -5 [ 143.413870][T10551] (syz.2.2986,10551,1):ocfs2_mknod:306 ERROR: status = -5 [ 143.419716][T10551] (syz.2.2986,10551,1):ocfs2_mknod:502 ERROR: status = -5 [ 143.428920][T10551] (syz.2.2986,10551,1):ocfs2_create:676 ERROR: status = -5 [ 143.509063][T10543] XFS (loop4): Ending clean mount [ 143.512434][T10543] XFS (loop4): Quotacheck needed: Please wait. [ 143.569771][T10543] XFS (loop4): Quotacheck: Done. [ 143.580164][ T4035] ocfs2: Unmounting device (7,2) on (node local) [ 143.809495][ T4047] XFS (loop4): Unmounting Filesystem [ 143.979928][T10591] loop1: detected capacity change from 0 to 32768 [ 144.031385][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3018'. [ 144.055717][T10624] loop2: detected capacity change from 0 to 16 [ 144.064229][T10591] XFS (loop1): Mounting V5 Filesystem [ 144.080525][T10624] erofs: (device loop2): mounted with root inode @ nid 36. [ 144.234363][T10591] XFS (loop1): Ending clean mount [ 144.455523][T10648] device vlan0 entered promiscuous mode [ 144.478214][ T4034] XFS (loop1): Unmounting Filesystem [ 144.503575][T10654] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3030'. [ 144.532551][T10656] loop2: detected capacity change from 0 to 8 [ 144.534924][T10656] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 144.581801][T10656] cramfs: Error -3 while decompressing! [ 144.583391][T10656] cramfs: 0000000007a676e0(26)->00000000da5c23de(4096) [ 144.585352][T10656] cramfs: Error -3 while decompressing! [ 144.586921][T10656] cramfs: 00000000586acf88(26)->00000000fe325631(4096) [ 144.596104][T10656] cramfs: Error -3 while decompressing! [ 144.600526][T10656] cramfs: 0000000086d08998(16)->0000000072115a29(4096) [ 144.602439][T10656] cramfs: Error -3 while decompressing! [ 144.603941][T10656] cramfs: 0000000007a676e0(26)->00000000da5c23de(4096) [ 144.652714][ T9739] udevd[9739]: incorrect cramfs checksum on /dev/loop2 [ 144.905727][T10670] loop4: detected capacity change from 0 to 4096 [ 145.228352][T10658] loop0: detected capacity change from 0 to 32768 [ 145.254634][T10680] loop2: detected capacity change from 0 to 4096 [ 145.372108][T10658] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 145.400173][T10658] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 145.466208][T10658] (syz.0.3032,10658,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=1296, name_len=0 [ 145.470843][T10658] (syz.0.3032,10658,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 145.482792][T10658] (syz.0.3032,10658,0):ocfs2_symlink:1864 ERROR: status = -2 [ 145.484892][T10658] (syz.0.3032,10658,0):ocfs2_symlink:2065 ERROR: status = -2 [ 145.490085][T10672] loop3: detected capacity change from 0 to 32768 [ 145.532493][T10672] gfs2: fsid=([{{|Zp"t'I Jv$: Trying to join cluster "lock_nolock", "([{{|Zp"t'I Jv$" [ 145.536308][T10672] gfs2: fsid=([{{|Zp"t'I Jv$: Now mounting FS (format 0)... [ 145.564891][T10672] gfs2: not a GFS2 filesystem [ 145.566151][T10672] gfs2: fsid=([{{|Zp"t'I Jv$: can't read superblock [ 145.569249][T10672] gfs2: fsid=([{{|Zp"t'I Jv$: can't read superblock: -22 [ 145.578745][ T4041] ocfs2: Unmounting device (7,0) on (node local) [ 145.889947][T10710] loop4: detected capacity change from 0 to 2048 [ 145.972886][T10710] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 145.995079][T10717] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.512458][T10701] loop2: detected capacity change from 0 to 32768 [ 146.632439][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3078'. [ 146.634875][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3078'. [ 146.745807][T10771] loop4: detected capacity change from 0 to 1024 [ 146.812239][T10771] EXT4-fs (loop4): Ignoring removed oldalloc option [ 146.814146][T10771] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 146.909001][T10771] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,data_err=ignore,oldalloc,quota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 147.190930][T10802] loop4: detected capacity change from 0 to 256 [ 147.210925][T10802] exfat: Deprecated parameter 'utf8' [ 147.212469][T10802] exfat: Deprecated parameter 'utf8' [ 147.213971][T10802] exfat: Deprecated parameter 'utf8' [ 147.215375][T10802] exfat: Deprecated parameter 'utf8' [ 147.264114][T10802] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 147.281892][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3096'. [ 147.285122][T10807] loop3: detected capacity change from 0 to 8 [ 147.416739][T10807] SQUASHFS error: lzo decompression failed, data probably corrupt [ 147.424021][T10807] SQUASHFS error: Failed to read block 0x1d2: -5 [ 147.425795][T10807] SQUASHFS error: Unable to read metadata cache entry [1d0] [ 147.438644][T10807] SQUASHFS error: Unable to read directory block [1d0:26] [ 147.441801][T10813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.529690][T10817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.573255][T10820] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3105'. [ 147.840583][T10830] loop4: detected capacity change from 0 to 4096 [ 147.904066][T10788] loop0: detected capacity change from 0 to 32768 [ 147.954804][T10842] loop2: detected capacity change from 0 to 8 [ 148.016419][T10840] loop3: detected capacity change from 0 to 736 [ 148.038247][T10842] SQUASHFS error: lzo decompression failed, data probably corrupt [ 148.040635][T10842] SQUASHFS error: Failed to read block 0x1d2: -5 [ 148.042341][T10842] SQUASHFS error: Unable to read metadata cache entry [1d0] [ 148.053723][T10795] loop1: detected capacity change from 0 to 32768 [ 148.067689][T10842] SQUASHFS error: Unable to read directory block [1d0:26] [ 148.081137][T10788] XFS (loop0): Mounting V5 Filesystem [ 148.158434][T10852] loop4: detected capacity change from 0 to 16 [ 148.267664][T10788] XFS (loop0): Ending clean mount [ 148.295737][T10788] XFS (loop0): Quotacheck needed: Please wait. [ 148.328193][T10852] erofs: (device loop4): mounted with root inode @ nid 36. [ 148.330770][T10788] XFS (loop0): Quotacheck: Done. [ 148.398114][T10867] netlink: 'syz.2.3121': attribute type 1 has an invalid length. [ 148.400450][T10867] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3121'. [ 148.474407][ T4041] XFS (loop0): Unmounting Filesystem [ 148.629652][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3133'. [ 148.789241][T10900] xt_hashlimit: max too large, truncated to 1048576 [ 149.258092][T10944] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 149.260404][T10944] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.332146][T10948] loop2: detected capacity change from 0 to 256 [ 149.389578][T10952] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3160'. [ 149.559134][T10960] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 149.677396][T10957] loop4: detected capacity change from 0 to 8192 [ 149.767180][T10957] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 149.772474][T10957] REISERFS (device loop4): using ordered data mode [ 149.774266][T10957] reiserfs: using flush barriers [ 149.787372][T10957] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 149.797729][T10957] REISERFS (device loop4): checking transaction log (loop4) [ 149.802924][T10940] loop1: detected capacity change from 0 to 32768 [ 149.805267][T10957] REISERFS (device loop4): Using r5 hash to sort names [ 149.807271][T10957] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 149.875342][T10971] loop2: detected capacity change from 0 to 8192 [ 149.921409][T10940] JBD2: Ignoring recovery information on journal [ 149.984607][T10971] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 149.987209][T10971] REISERFS (device loop2): using ordered data mode [ 150.016412][T10971] reiserfs: using flush barriers [ 150.037695][T10971] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 150.043245][T10971] REISERFS (device loop2): checking transaction log (loop2) [ 150.072398][T10940] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 150.142725][T10940] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 150.142822][T10940] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 150.150602][T10965] loop0: detected capacity change from 0 to 32768 [ 150.160070][T10980] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3171'. [ 150.217304][T10965] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 150.217327][T10940] OCFS2: File system is now read-only. [ 150.228891][T10940] (syz.1.3154,10940,1):ocfs2_setattr:1302 ERROR: status = -117 [ 150.301346][T10965] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 150.379333][ T4034] ocfs2: Unmounting device (7,1) on (node local) [ 150.379996][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3176'. [ 150.387878][T10965] (syz.0.3166,10965,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 150.392753][T10965] (syz.0.3166,10965,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 150.397896][T10965] (syz.0.3166,10965,1):ocfs2_mknod:298 ERROR: status = -2 [ 150.399829][T10965] (syz.0.3166,10965,1):ocfs2_mknod:502 ERROR: status = -2 [ 150.401808][T10965] (syz.0.3166,10965,1):ocfs2_create:676 ERROR: status = -2 [ 150.412705][T10990] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 150.472309][T10971] REISERFS (device loop2): Using tea hash to sort names [ 150.499659][ T4041] ocfs2: Unmounting device (7,0) on (node local) [ 150.751404][T11012] loop3: detected capacity change from 0 to 256 [ 151.269655][T11039] xt_l2tp: invalid flags combination: 0 [ 151.346211][T11013] loop4: detected capacity change from 0 to 32768 [ 151.421714][T11013] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3186 (11013) [ 151.442453][T11008] loop1: detected capacity change from 0 to 32768 [ 151.493814][T11013] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 151.496639][T11013] BTRFS info (device loop4): use no compression [ 151.506792][T11013] BTRFS info (device loop4): turning on sync discard [ 151.512060][T11013] BTRFS info (device loop4): force clearing of disk cache [ 151.514087][T11013] BTRFS info (device loop4): enabling auto defrag [ 151.515804][T11013] BTRFS info (device loop4): turning off discard [ 151.544727][T11013] BTRFS info (device loop4): using free space tree [ 151.546497][T11013] BTRFS info (device loop4): has skinny extents [ 151.795870][T11084] loop2: detected capacity change from 0 to 2048 [ 151.835061][T11084] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 151.862346][T11084] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.924248][T11013] BTRFS info (device loop4): enabling ssd optimizations [ 151.924710][T11095] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 151.927132][T11013] BTRFS info (device loop4): clearing free space tree [ 151.932553][T11013] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 151.935082][T11013] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 151.948104][T11098] loop3: detected capacity change from 0 to 512 [ 151.971053][T11013] BTRFS info (device loop4): creating free space tree [ 151.974324][T11013] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 151.976932][T11013] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 152.097530][T11098] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.174284][T11108] loop0: detected capacity change from 0 to 4096 [ 152.181857][T11108] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 152.202589][T11108] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 152.205636][T11108] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 152.237658][T11108] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 152.241331][T11108] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 152.270215][T11108] ntfs: volume version 3.1. [ 152.285431][T11114] loop1: detected capacity change from 0 to 512 [ 152.289940][T11108] ntfs: (device loop0): map_mft_record_page(): Attempt to read mft record 0x2c386674, which is beyond the end of the mft. This is probably a bug in the ntfs driver. [ 152.306180][T11108] ntfs: (device loop0): map_mft_record(): Failed with error code 2. [ 152.313372][T11114] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 152.316280][T11108] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x2c386674 as bad. Run chkdsk. [ 152.412620][T11120] loop2: detected capacity change from 0 to 512 [ 152.456406][T11120] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 152.534175][T11120] EXT2-fs (loop2): error: ext2_check_page: bad entry in directory #2: : inode out of bounds - offset=12, inode=47185922, rec_len=12, name_len=2 [ 152.864812][T11150] damon: min_nr_regions (0) must be at least 3 [ 152.946333][T11159] Zero length message leads to an empty skb [ 153.002261][T11167] binder: 11164:11167 ioctl 400c620e 200000c0 returned -22 [ 153.060876][T11170] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3255'. [ 153.313316][T11199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3269'. [ 153.415640][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3274'. [ 153.499884][T11216] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 153.529945][T11217] loop3: detected capacity change from 0 to 764 [ 153.636607][T11220] loop2: detected capacity change from 0 to 2048 [ 153.749706][T11236] overlayfs: conflicting options: nfs_export=on,index=off [ 153.820141][T11220] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.856951][T11220] EXT4-fs error (device loop2): __ext4_new_inode:1076: comm syz.2.3280: reserved inode found cleared - inode=1 [ 154.271193][T11265] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 154.272984][T11265] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 154.276550][T11265] vhci_hcd vhci_hcd.0: Device attached [ 154.290114][T11267] vhci_hcd: connection closed [ 154.290930][ T136] vhci_hcd: stop threads [ 154.293381][ T136] vhci_hcd: release socket [ 154.294598][ T136] vhci_hcd: disconnect device [ 154.487016][T11284] tmpfs: Bad value for 'mpol' [ 154.526947][T11231] loop0: detected capacity change from 0 to 32768 [ 154.603149][T11292] device geneve2 entered promiscuous mode [ 154.653641][T11231] XFS (loop0): Mounting V5 Filesystem [ 154.721554][T11307] misc userio: The device must be registered before sending interrupts [ 154.732845][T11303] sctp: [Deprecated]: syz.1.3314 (pid 11303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.732845][T11303] Use struct sctp_sack_info instead [ 154.823724][T11231] XFS (loop0): Ending clean mount [ 154.873920][T11231] XFS (loop0): Quotacheck needed: Please wait. [ 154.914406][T11316] netlink: 'syz.1.3321': attribute type 4 has an invalid length. [ 154.921430][T11316] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3321'. [ 154.940858][T11231] XFS (loop0): Quotacheck: Done. [ 155.034836][T11323] loop4: detected capacity change from 0 to 164 [ 155.044473][ T4041] XFS (loop0): Unmounting Filesystem [ 155.073734][T11323] Unable to read rock-ridge attributes [ 155.089539][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3327'. [ 155.091981][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3327'. [ 155.198687][T11332] netlink: 'syz.2.3329': attribute type 4 has an invalid length. [ 155.729863][ T26] audit: type=1326 audit(155.710:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.3344" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d2cba8 code=0x0 [ 155.753232][T11367] ipt_CLUSTERIP: no config found for 224.0.0.2, need 'new' [ 155.995917][T11379] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3352'. [ 156.093699][T11341] loop1: detected capacity change from 0 to 32768 [ 156.154201][ T226] block nbd2: Attempted send on invalid socket [ 156.156099][ T226] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 156.175118][T11387] EXT4-fs (nbd2): unable to read superblock [ 156.180623][T11389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3357'. [ 156.206948][T11341] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 156.206948][T11341] [ 156.275243][ T136] read_mapping_page failed! [ 156.276532][ T136] ERROR: (device loop1): txAbort: [ 156.276532][ T136] [ 156.279404][ T136] jfs_write_inode: jfs_commit_inode failed! [ 156.327992][T11398] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.347616][T11398] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.349986][T11398] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.365527][T11398] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.518825][T11410] netlink: 'syz.2.3366': attribute type 2 has an invalid length. [ 156.518860][T11410] netlink: 'syz.2.3366': attribute type 3 has an invalid length. [ 156.546419][T11361] loop3: detected capacity change from 0 to 32768 [ 157.011947][T11415] loop2: detected capacity change from 0 to 32768 [ 157.042685][T11415] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3370 (11415) [ 157.129162][T11415] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 157.131562][T11415] BTRFS info (device loop2): force clearing of disk cache [ 157.133538][T11415] BTRFS info (device loop2): force zlib compression, level 3 [ 157.135496][T11415] BTRFS info (device loop2): enabling auto defrag [ 157.147696][T11415] BTRFS info (device loop2): max_inline at 0 [ 157.149438][T11415] BTRFS info (device loop2): using free space tree [ 157.163602][T11415] BTRFS info (device loop2): has skinny extents [ 157.198614][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3387'. [ 157.203778][T11453] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 58493 - 0 [ 157.206096][T11453] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 58493 - 0 [ 157.326899][T11453] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 58493 - 0 [ 157.372661][T11453] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 58493 - 0 [ 157.443695][T11468] netlink: 'syz.4.3389': attribute type 1 has an invalid length. [ 157.507543][T11415] BTRFS info (device loop2): enabling ssd optimizations [ 157.512201][T11415] BTRFS info (device loop2): clearing free space tree [ 157.513711][T11478] loop3: detected capacity change from 0 to 164 [ 157.514106][T11415] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 157.545730][T11417] loop1: detected capacity change from 0 to 32768 [ 157.549977][T11417] XFS: ikeep mount option is deprecated. [ 157.560031][T11415] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.598467][T11415] BTRFS info (device loop2): creating free space tree [ 157.619986][T11415] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 157.622840][T11415] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.684686][T11417] XFS (loop1): Mounting V5 Filesystem [ 157.839723][T11417] XFS (loop1): Ending clean mount [ 157.842700][T11417] XFS (loop1): Quotacheck needed: Please wait. [ 157.910585][T11507] loop0: detected capacity change from 0 to 256 [ 157.945827][T11417] XFS (loop1): Quotacheck: Done. [ 157.997137][T11507] FAT-fs (loop0): Directory bread(block 64) failed [ 158.002515][T11507] FAT-fs (loop0): Directory bread(block 65) failed [ 158.004398][T11507] FAT-fs (loop0): Directory bread(block 66) failed [ 158.022248][T11507] FAT-fs (loop0): Directory bread(block 67) failed [ 158.024239][T11507] FAT-fs (loop0): Directory bread(block 68) failed [ 158.026061][T11507] FAT-fs (loop0): Directory bread(block 69) failed [ 158.042553][T11515] sock: sock_timestamping_bind_phc: sock not bind to device [ 158.051377][T11507] FAT-fs (loop0): Directory bread(block 70) failed [ 158.053188][T11507] FAT-fs (loop0): Directory bread(block 71) failed [ 158.055100][T11507] FAT-fs (loop0): Directory bread(block 72) failed [ 158.056778][T11507] FAT-fs (loop0): Directory bread(block 73) failed [ 158.092526][ T4034] XFS (loop1): Unmounting Filesystem [ 158.231409][ T9739] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop2 scanned by udevd (9739) [ 158.427676][T11543] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.447323][T11544] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 158.911468][T11584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3436'. [ 158.914002][T11584] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3436'. [ 159.115403][T11598] loop4: detected capacity change from 0 to 1024 [ 159.233342][ T148] hfsplus: b-tree write err: -5, ino 4 [ 159.252366][T11594] loop1: detected capacity change from 0 to 8192 [ 159.252464][T11607] loop0: detected capacity change from 0 to 128 [ 159.386834][T11615] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 159.391762][T11617] loop3: detected capacity change from 0 to 16 [ 159.440930][T11617] erofs: (device loop3): mounted with root inode @ nid 36. [ 159.550228][T11623] loop1: detected capacity change from 0 to 4096 [ 159.648929][T11623] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 159.696314][T11623] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.3454: directory missing '..' [ 159.753499][T11644] loop0: detected capacity change from 0 to 2048 [ 159.821225][T11644] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 159.823409][T11644] UDF-fs: Scanning with blocksize 512 failed [ 159.901812][T11658] loop1: detected capacity change from 0 to 256 [ 159.903810][T11644] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 159.905891][T11644] UDF-fs: Scanning with blocksize 1024 failed [ 159.910574][T11659] loop2: detected capacity change from 0 to 64 [ 159.921771][T11644] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=515, location=515 [ 159.937610][T11644] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 159.940518][T11644] UDF-fs: Scanning with blocksize 2048 failed [ 159.943059][T11644] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=259, location=259 [ 159.968553][T11644] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=515, location=515 [ 159.975267][T11644] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 159.987845][T11644] UDF-fs: Scanning with blocksize 4096 failed [ 159.989814][T11644] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 160.104278][T11671] netlink: 'syz.1.3475': attribute type 10 has an invalid length. [ 160.106489][T11671] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3475'. [ 160.129637][T11671] device batadv0 entered promiscuous mode [ 160.132086][T11671] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 160.136544][T11669] netlink: 'syz.2.3476': attribute type 2 has an invalid length. [ 160.286341][T11684] netdevsim netdevsim0: Direct firmware load for / [ 160.286341][T11684] failed with error -2 [ 160.317572][T11684] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 160.317572][T11684] [ 160.433907][T11697] netlink: 'syz.3.3491': attribute type 30 has an invalid length. [ 160.442036][T11697] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 160.452568][T11697] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 160.662666][T11717] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3501'. [ 160.820181][T11733] loop4: detected capacity change from 0 to 512 [ 160.964634][T11733] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000006,grpjquota=,,errors=continue. Quota mode: writeback. [ 161.003053][T11733] [ 161.003063][T11733] ====================================================== [ 161.003067][T11733] WARNING: possible circular locking dependency detected [ 161.007611][T11733] 5.15.188-syzkaller #0 Not tainted [ 161.007621][T11733] ------------------------------------------------------ [ 161.007625][T11733] syz.4.3509/11733 is trying to acquire lock: [ 161.007632][T11733] ffff0000ee948ea8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x50/0x1c4 [ 161.007663][T11733] [ 161.007663][T11733] but task is already holding lock: [ 161.007667][T11733] ffff0000ee83d238 (&ei->i_data_sem){++++}-{3:3}, at: ext4_truncate+0x7bc/0xf94 [ 161.007700][T11733] [ 161.007700][T11733] which lock already depends on the new lock. [ 161.007700][T11733] [ 161.007704][T11733] [ 161.007704][T11733] the existing dependency chain (in reverse order) is: [ 161.007708][T11733] [ 161.007708][T11733] -> #5 (&ei->i_data_sem){++++}-{3:3}: [ 161.007723][T11733] down_write+0xbc/0x12c [ 161.007734][T11733] ext4_map_blocks+0x71c/0x167c [ 161.007744][T11733] ext4_writepages+0xf00/0x2c14 [ 161.007754][T11733] do_writepages+0x36c/0x578 [ 161.007763][T11733] __writeback_single_inode+0x148/0x11f0 [ 161.007774][T11733] writeback_sb_inodes+0x7fc/0x1378 [ 161.007784][T11733] __writeback_inodes_wb+0x110/0x394 [ 161.007794][T11733] wb_writeback+0x3ec/0xe44 [ 161.007803][T11733] wb_workfn+0xa7c/0xdd8 [ 161.007813][T11733] process_one_work+0x79c/0x1140 [ 161.007823][T11733] worker_thread+0x8f4/0x101c [ 161.007833][T11733] kthread+0x374/0x454 [ 161.007842][T11733] ret_from_fork+0x10/0x20 [ 161.007851][T11733] [ 161.007851][T11733] -> #4 (jbd2_handle){++++}-{0:0}: [ 161.007878][T11733] start_this_handle+0xef4/0x11a4 [ 161.007890][T11733] jbd2__journal_start+0x28c/0x744 [ 161.007900][T11733] jbd2_journal_start+0x3c/0x4c [ 161.007910][T11733] ocfs2_start_trans+0x43c/0x794 [ 161.007921][T11733] ocfs2_shutdown_local_alloc+0x1ac/0x7e4 [ 161.007931][T11733] ocfs2_dismount_volume+0x1d4/0x8b4 [ 161.007943][T11733] ocfs2_put_super+0xec/0x308 [ 161.007953][T11733] generic_shutdown_super+0x130/0x2f0 [ 161.007963][T11733] kill_block_super+0x70/0xdc [ 161.007973][T11733] deactivate_locked_super+0xb8/0x13c [ 161.007982][T11733] deactivate_super+0xf8/0x118 [ 161.007991][T11733] cleanup_mnt+0x3a4/0x458 [ 161.008000][T11733] __cleanup_mnt+0x20/0x30 [ 161.008009][T11733] task_work_run+0x12c/0x1e0 [ 161.008019][T11733] do_notify_resume+0x24b4/0x3128 [ 161.008030][T11733] el0_svc+0xf0/0x1e0 [ 161.008039][T11733] el0t_64_sync_handler+0xcc/0xe4 [ 161.008047][T11733] el0t_64_sync+0x1a0/0x1a4 [ 161.008055][T11733] [ 161.008055][T11733] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 161.008071][T11733] down_read+0xc0/0x390 [ 161.008079][T11733] ocfs2_start_trans+0x430/0x794 [ 161.008088][T11733] ocfs2_shutdown_local_alloc+0x1ac/0x7e4 [ 161.008098][T11733] ocfs2_dismount_volume+0x1d4/0x8b4 [ 161.008109][T11733] ocfs2_put_super+0xec/0x308 [ 161.008119][T11733] generic_shutdown_super+0x130/0x2f0 [ 161.008128][T11733] kill_block_super+0x70/0xdc [ 161.008138][T11733] deactivate_locked_super+0xb8/0x13c [ 161.008147][T11733] deactivate_super+0xf8/0x118 [ 161.008156][T11733] cleanup_mnt+0x3a4/0x458 [ 161.008164][T11733] __cleanup_mnt+0x20/0x30 [ 161.008173][T11733] task_work_run+0x12c/0x1e0 [ 161.008183][T11733] do_notify_resume+0x24b4/0x3128 [ 161.008194][T11733] el0_svc+0xf0/0x1e0 [ 161.008201][T11733] el0t_64_sync_handler+0xcc/0xe4 [ 161.008209][T11733] el0t_64_sync+0x1a0/0x1a4 [ 161.008217][T11733] [ 161.008217][T11733] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 161.008235][T11733] ocfs2_start_trans+0x2c4/0x794 [ 161.008244][T11733] ocfs2_acquire_dquot+0x598/0xa2c [ 161.008253][T11733] dqget+0x658/0xcf4 [ 161.008260][T11733] dquot_set_dqblk+0x40/0xf24 [ 161.008269][T11733] quota_setquota+0x428/0x4b8 [ 161.008278][T11733] do_quotactl+0x65c/0x738 [ 161.008286][T11733] __arm64_sys_quotactl+0x2ac/0x734 [ 161.008295][T11733] invoke_syscall+0x98/0x2b8 [ 161.008305][T11733] el0_svc_common+0x138/0x258 [ 161.008315][T11733] do_el0_svc+0x58/0x14c [ 161.008324][T11733] el0_svc+0x78/0x1e0 [ 161.008331][T11733] el0t_64_sync_handler+0xcc/0xe4 [ 161.008340][T11733] el0t_64_sync+0x1a0/0x1a4 [ 161.111095][T11751] binder: 11750:11751 ioctl c0306201 9999999999999999 returned -14 [ 161.111962][T11733] [ 161.111962][T11733] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 161.122390][T11733] down_write+0xbc/0x12c [ 161.126258][T11733] ocfs2_create_local_dquot+0x15c/0x1368 [ 161.127966][T11733] ocfs2_acquire_dquot+0x6b0/0xa2c [ 161.127981][T11733] dqget+0x658/0xcf4 [ 161.127991][T11733] dquot_set_dqblk+0x40/0xf24 [ 161.132263][T11733] quota_setquota+0x428/0x4b8 [ 161.133660][T11733] do_quotactl+0x65c/0x738 [ 161.135049][T11733] __arm64_sys_quotactl+0x2ac/0x734 [ 161.136682][T11733] invoke_syscall+0x98/0x2b8 [ 161.138113][T11733] el0_svc_common+0x138/0x258 [ 161.139523][T11733] do_el0_svc+0x58/0x14c [ 161.140789][T11733] el0_svc+0x78/0x1e0 [ 161.142043][T11733] el0t_64_sync_handler+0xcc/0xe4 [ 161.143606][T11733] el0t_64_sync+0x1a0/0x1a4 [ 161.145026][T11733] [ 161.145026][T11733] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 161.147191][T11733] __lock_acquire+0x2928/0x651c [ 161.148685][T11733] lock_acquire+0x1f4/0x620 [ 161.150041][T11733] __mutex_lock_common+0x194/0x1edc [ 161.151570][T11733] mutex_lock_nested+0xac/0x11c [ 161.153003][T11733] dquot_commit+0x50/0x1c4 [ 161.154317][T11733] ext4_write_dquot+0x1b4/0x31c [ 161.155887][T11733] ext4_mark_dquot_dirty+0xe8/0x140 [ 161.157485][T11733] mark_all_dquot_dirty+0x1f8/0x424 [ 161.159038][T11733] __dquot_free_space+0x76c/0xaa8 [ 161.160598][T11733] ext4_free_blocks+0x1900/0x23cc [ 161.162102][T11733] ext4_ext_remove_space+0x1d9c/0x3834 [ 161.163765][T11733] ext4_ext_truncate+0x184/0x24c [ 161.165207][T11733] ext4_truncate+0x9c0/0xf94 [ 161.166564][T11733] ext4_evict_inode+0xbec/0x11dc [ 161.168138][T11733] evict+0x3c8/0x810 [ 161.169362][T11733] iput+0x6c4/0x77c [ 161.170578][T11733] do_unlinkat+0x360/0x600 [ 161.171990][T11733] __arm64_sys_unlinkat+0xe0/0xfc [ 161.173566][T11733] invoke_syscall+0x98/0x2b8 [ 161.175032][T11733] el0_svc_common+0x138/0x258 [ 161.176487][T11733] do_el0_svc+0x58/0x14c [ 161.177849][T11733] el0_svc+0x78/0x1e0 [ 161.179109][T11733] el0t_64_sync_handler+0xcc/0xe4 [ 161.180598][T11733] el0t_64_sync+0x1a0/0x1a4 [ 161.181982][T11733] [ 161.181982][T11733] other info that might help us debug this: [ 161.181982][T11733] [ 161.184806][T11733] Chain exists of: [ 161.184806][T11733] &dquot->dq_lock --> jbd2_handle --> &ei->i_data_sem [ 161.184806][T11733] [ 161.188333][T11733] Possible unsafe locking scenario: [ 161.188333][T11733] [ 161.190362][T11733] CPU0 CPU1 [ 161.191806][T11733] ---- ---- [ 161.193233][T11733] lock(&ei->i_data_sem); [ 161.194467][T11733] lock(jbd2_handle); [ 161.196324][T11733] lock(&ei->i_data_sem); [ 161.198258][T11733] lock(&dquot->dq_lock); [ 161.199455][T11733] [ 161.199455][T11733] *** DEADLOCK *** [ 161.199455][T11733] [ 161.201852][T11733] 4 locks held by syz.4.3509/11733: [ 161.203244][T11733] #0: ffff0000cd0a4460 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 161.205730][T11733] #1: ffff0000cd0a4650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3d8/0x11dc [ 161.208317][T11733] #2: ffff0000ee83d238 (&ei->i_data_sem){++++}-{3:3}, at: ext4_truncate+0x7bc/0xf94 [ 161.210963][T11733] #3: ffff8000144687d8 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x10/0x4c [ 161.213428][T11733] [ 161.213428][T11733] stack backtrace: [ 161.215150][T11733] CPU: 1 PID: 11733 Comm: syz.4.3509 Not tainted 5.15.188-syzkaller #0 [ 161.217405][T11733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.220176][T11733] Call trace: [ 161.221057][T11733] dump_backtrace+0x0/0x43c [ 161.222292][T11733] show_stack+0x2c/0x3c [ 161.223442][T11733] __dump_stack+0x30/0x40 [ 161.224600][T11733] dump_stack_lvl+0xf8/0x160 [ 161.225865][T11733] dump_stack+0x1c/0x5c [ 161.227008][T11733] print_circular_bug+0x148/0x1b0 [ 161.228369][T11733] check_noncircular+0x240/0x2d4 [ 161.229728][T11733] __lock_acquire+0x2928/0x651c [ 161.231090][T11733] lock_acquire+0x1f4/0x620 [ 161.232339][T11733] __mutex_lock_common+0x194/0x1edc [ 161.233809][T11733] mutex_lock_nested+0xac/0x11c [ 161.235153][T11733] dquot_commit+0x50/0x1c4 [ 161.236377][T11733] ext4_write_dquot+0x1b4/0x31c [ 161.237740][T11733] ext4_mark_dquot_dirty+0xe8/0x140 [ 161.239134][T11733] mark_all_dquot_dirty+0x1f8/0x424 [ 161.240557][T11733] __dquot_free_space+0x76c/0xaa8 [ 161.241877][T11733] ext4_free_blocks+0x1900/0x23cc [ 161.243193][T11733] ext4_ext_remove_space+0x1d9c/0x3834 [ 161.244675][T11733] ext4_ext_truncate+0x184/0x24c [ 161.245987][T11733] ext4_truncate+0x9c0/0xf94 [ 161.247290][T11733] ext4_evict_inode+0xbec/0x11dc [ 161.248647][T11733] evict+0x3c8/0x810 [ 161.249668][T11733] iput+0x6c4/0x77c [ 161.250753][T11733] do_unlinkat+0x360/0x600 [ 161.251957][T11733] __arm64_sys_unlinkat+0xe0/0xfc [ 161.253302][T11733] invoke_syscall+0x98/0x2b8 [ 161.254594][T11733] el0_svc_common+0x138/0x258 [ 161.255914][T11733] do_el0_svc+0x58/0x14c [ 161.257030][T11733] el0_svc+0x78/0x1e0 [ 161.258153][T11733] el0t_64_sync_handler+0xcc/0xe4 [ 161.259564][T11733] el0t_64_sync+0x1a0/0x1a4 [ 161.260872][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.265273][T11733] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.3509: inode #64: comm syz.4.3509: iget: illegal inode # [ 161.287570][T11733] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.3509: error while reading EA inode 64 err=-117 [ 161.291309][T11733] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.3509: inode #64: comm syz.4.3509: iget: illegal inode # [ 161.298133][T11733] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.3509: error while reading EA inode 64 err=-117 [ 161.358081][T11743] loop1: detected capacity change from 0 to 32768 [ 161.368306][T11743] jfs_strtoUCS: char2uni returned -22. [ 161.369929][T11743] charset = cp950, char = 0xd4 [ 163.847596][T11510] Bluetooth: hci1: command 0x0406 tx timeout [ 163.849383][T11510] Bluetooth: hci2: command 0x0406 tx timeout [ 163.851046][T11510] Bluetooth: hci3: command 0x0406 tx timeout [ 163.852678][T11510] Bluetooth: hci4: command 0x0406 tx timeout