last executing test programs: 3.306924865s ago: executing program 1 (id=1279): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 2.158464837s ago: executing program 1 (id=1288): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1c005, &(0x7f00000003c0)={[{@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x200006}}, {@fatal_errors_bug}, {@rescue={'rescue', 0x3d, 'all'}}, {@nossd_spread}, {@noflushoncommit}, {@nodiscard}, {@noautodefrag}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodatacow}, {@flushoncommit}]}, 0x9, 0x559d, &(0x7f0000010200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.826144897s ago: executing program 2 (id=1293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x6000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, {0x2, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x3e) 1.477364067s ago: executing program 3 (id=1307): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x69, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) close(0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1.461155968s ago: executing program 2 (id=1298): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) recvfrom(r0, &(0x7f0000000d40)=""/4096, 0x1000, 0x0, 0x0, 0x0) 1.399316738s ago: executing program 3 (id=1299): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@acl}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0x0, 0x44a, &(0x7f0000000e00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffa42, 0x4) getdents64(r0, &(0x7f0000001f80)=""/70, 0x46) 1.159383958s ago: executing program 1 (id=1301): memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xff\x01\x00\x00g\xe0\x00\x00\x00\x00\xfb\xef\xf0^)pR\x854G\xc6a\x9f\xe8\x05\x04\xd1j\x8a\xf1\xb3\x86\xe2+Op\xd0\xa2\xad;\xf5\xc8\xfc7?WS\xd6\x91\xbf3yW\xf1\xa0`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\x8a\x97\x9d\xcb\x1e\x80\xbb\a=:\xc7\xec\xa2\xd2J\x97\xd6\x95\x00\x00\x00\x00#\x80z\x03\x00\x00\x00\x00\x00\x00\x01\xf9t\xbb\x1er\x14J\xb8Gpa\xdd\xff\xef\x00\x00\x00`1\xf9\xbfW\x8d\xd5\x1fgo\x91\xa1\xbf`{\xf8\xec\xfb\x99\x11;V.\xc7B\xe9\xceBk\x00~@)\xed\x94\xdbh}\x87B\xe7D\"_F\xc1\x88V\xa5\xd7>\x13\xb40\x16\b\xe1\xd5\xc0L\x8dm\x05\xbbvH0U\xd1\x03\x19\x03\x8d\xd2l)\x83\xfey\xde\xa0f\xd6\xa84\xc4\x81\x1a\xa8P&`\xef&e4\x80\x82\x06\x8a\x9c\xeeU\x9f\xeaC\xcc', 0x0) add_key$user(0x0, 0x0, &(0x7f0000000180)="84e2466bc2", 0x5, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000000)="036bc289bf9074a7e6", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 1.110923168s ago: executing program 3 (id=1302): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 1.028112528s ago: executing program 0 (id=1303): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0xfffffffe}, 0x8) close(r0) 908.767628ms ago: executing program 1 (id=1304): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) 907.937978ms ago: executing program 0 (id=1316): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 860.660999ms ago: executing program 1 (id=1305): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1, 0x173, &(0x7f0000000240)="$eJzs20tO8mAUxvGnXL+P7+J94sjEgU6kCiTKkAW4AWcEKiEWNeIEYmJcijtxJ24AEt2ANZRGhTiofQOvkf8vAc7k6XuacOAwQAAW1nL47MhRNqyCILjdknRyLCljuTkAMxXoJQCwqNJPtjsAYMewlg73gAdHeny+aQyiRzbm/jCspcaFIw0+5HNx83dO+LqZmcznJf2Ks7/cj/M7msz//uL5hal8IXZ+fP+725P5P5L+Svon6b+kpei31oqk1U/Ob06dvxHzfMDE6N1XNM0bXGA0Padt39tPmM9G+YOE+VyULxnmywnz+ShfbFz4zYTXAJJKWZ7/tOH8ZwznH1hk3V7/rO773hUFBQXFW2H7kwnArLnXnUu32+vvtTv1ltfyzkuV6lGlXKocVt1wL3dNtnMA39n7l77tTgAAAAAAAAAAAAAAQFJrktZtNwEAAABgLubxdyLb9wgAAAAAAAAAAAAAAAAAAAD8FK8BAAD//09LUMs=") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000000)) 809.786279ms ago: executing program 1 (id=1306): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 561.664509ms ago: executing program 0 (id=1308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x20, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x7c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x37, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x9}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x3, 0x7, 0x26, 0x2}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x10}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1, 0x2]}]}]}]}, 0x7c}}, 0x0) 540.472899ms ago: executing program 2 (id=1309): bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4008}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='N,N'], 0x6a) 497.218419ms ago: executing program 2 (id=1311): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = io_uring_setup(0x7fdb, &(0x7f0000000080)) close_range(r2, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000300)="ed8aee76105e01cc11a6fa29fd1a16070051030000000111e526d348638a251c98c60ff8e17749eb2e793e9e27ae251191f658884d4cce4f0e489301551e5e34a8ef735c94bcb83536b4c20101bb41ee24bcf68b4da014f0a4cdc8b5a0b4a59dc0c3c173ff8357342c036c38e4083bc7427353001e56c1ebe4444a1bb1e351e137870d15c4f86c6fd8b2db1ba658321e113490abb284fb230000000000b642349e72772467bb0d04fdd73ae4a305000c06f7975ddb72c8aee0b94c3a386c", 0xffffff66) close(r1) 458.719789ms ago: executing program 0 (id=1312): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0090e674fc3d16030000f7372fb90c4213280e2e2e4b0d56ee98f196307a99eda2eedf841612fe27e9ee2ea9a1a483d5c39f00000500000000f7ffffffffffffff000000000036930000", @ANYRES8], 0x0, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/120, 0x78) lseek(r0, 0x8, 0x0) 406.316569ms ago: executing program 4 (id=1313): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) read$char_usb(r1, &(0x7f0000000080)=""/139, 0xfdef) 403.663239ms ago: executing program 2 (id=1314): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000500)={[{@numtail}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@fat=@quiet}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@rodir}, {@shortname_winnt}]}, 0x1, 0x21d, &(0x7f0000000240)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0xfecc) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) 263.66575ms ago: executing program 4 (id=1315): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000640)={'ip6_vti0\x00', 0x0}) 252.934799ms ago: executing program 4 (id=1317): memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xff\x01\x00\x00g\xe0\x00\x00\x00\x00\xfb\xef\xf0^)pR\x854G\xc6a\x9f\xe8\x05\x04\xd1j\x8a\xf1\xb3\x86\xe2+Op\xd0\xa2\xad;\xf5\xc8\xfc7?WS\xd6\x91\xbf3yW\xf1\xa0`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\x8a\x97\x9d\xcb\x1e\x80\xbb\a=:\xc7\xec\xa2\xd2J\x97\xd6\x95\x00\x00\x00\x00#\x80z\x03\x00\x00\x00\x00\x00\x00\x01\xf9t\xbb\x1er\x14J\xb8Gpa\xdd\xff\xef\x00\x00\x00`1\xf9\xbfW\x8d\xd5\x1fgo\x91\xa1\xbf`{\xf8\xec\xfb\x99\x11;V.\xc7B\xe9\xceBk\x00~@)\xed\x94\xdbh}\x87B\xe7D\"_F\xc1\x88V\xa5\xd7>\x13\xb40\x16\b\xe1\xd5\xc0L\x8dm\x05\xbbvH0U\xd1\x03\x19\x03\x8d\xd2l)\x83\xfey\xde\xa0f\xd6\xa84\xc4\x81\x1a\xa8P&`\xef&e4\x80\x82\x06\x8a\x9c\xeeU\x9f\xeaC\xcc', 0x0) add_key$user(0x0, 0x0, &(0x7f0000000180)="84e2466bc2", 0x5, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000000)="036bc289bf9074a7e6", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 252.33625ms ago: executing program 0 (id=1318): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2800060, &(0x7f0000000240)={[{@uid={'uid', 0x3d, r1}}]}) 201.555899ms ago: executing program 4 (id=1319): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) 134.35911ms ago: executing program 0 (id=1320): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000024c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='!\x00', 0x0, r1) 133.39496ms ago: executing program 4 (id=1321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r1, 0x5, 0x40000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@device_b}]}, 0x34}}, 0x24000000) 121.83253ms ago: executing program 3 (id=1322): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000008c0)={r2}, &(0x7f0000000280)=0x8) 76.95915ms ago: executing program 3 (id=1323): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) recvfrom(r0, &(0x7f0000000d40)=""/4096, 0x1000, 0x0, 0x0, 0x0) 11.11587ms ago: executing program 2 (id=1324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x20, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x7c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x37, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x9}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x3, 0x7, 0x26, 0x2}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x10}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1, 0x2]}]}]}]}, 0x7c}}, 0x0) 793.63µs ago: executing program 4 (id=1334): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1c005, &(0x7f00000003c0)={[{@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x200006}}, {@fatal_errors_bug}, {@rescue={'rescue', 0x3d, 'all'}}, {@nossd_spread}, {@noflushoncommit}, {@nodiscard}, {@noautodefrag}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodatacow}, {@flushoncommit}]}, 0x9, 0x559d, &(0x7f0000010200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1325): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket(0x1e, 0x805, 0x0) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) kernel console output (not intermixed with test programs): VS: sed: UDP 224.0.0.2:0 - no destination available [ 78.882877][ T5196] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 78.884620][ T5196] BTRFS info (device loop4): using free space tree [ 78.885916][ T5196] BTRFS info (device loop4): has skinny extents [ 78.892074][ T5211] netlink: 'syz.1.367': attribute type 21 has an invalid length. [ 78.894374][ T5211] netlink: 'syz.1.367': attribute type 6 has an invalid length. [ 78.896024][ T5211] netlink: 132 bytes leftover after parsing attributes in process `syz.1.367'. [ 78.898128][ T5211] Zero length message leads to an empty skb [ 79.029136][ T5198] loop2: detected capacity change from 0 to 40427 [ 79.091126][ T5198] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 79.092879][ T5198] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 79.120065][ T5236] loop1: detected capacity change from 0 to 2048 [ 79.133377][ T5198] F2FS-fs (loop2): invalid crc value [ 79.156974][ T5236] EXT4-fs (loop1): Ignoring removed nobh option [ 79.158271][ T5236] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 79.158271][ T5236] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 79.158271][ T5236] [ 79.169359][ T5198] F2FS-fs (loop2): Found nat_bits in checkpoint [ 79.210108][ T5198] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 79.211654][ T5198] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 79.224995][ T5196] BTRFS info (device loop4): enabling ssd optimizations [ 79.266942][ T5196] BTRFS info (device loop4): scrub: started on devid 1 [ 79.280787][ T5196] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [ 79.299222][ T5236] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,i_version,nobh,delalloc,minixdf,lazytime,nouser_xattr,inode_readahead_blks=0x0000000008000000,abort,bsddf,,errors=continue. Quota mode: none. [ 79.425187][ T5236] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.538917][ T5221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.672951][ T5258] tun0: tun_chr_ioctl cmd 1074025675 [ 79.674272][ T5258] tun0: persist enabled [ 79.675588][ T5258] tun0: tun_chr_ioctl cmd 1074025675 [ 79.676611][ T5258] tun0: persist disabled [ 79.718933][ T5259] loop4: detected capacity change from 0 to 4096 [ 79.748057][ T5198] attempt to access beyond end of device [ 79.748057][ T5198] loop2: rw=2049, want=78592, limit=40427 [ 79.786219][ T5259] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 79.820176][ T5259] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 79.831382][ T4033] attempt to access beyond end of device [ 79.831382][ T4033] loop2: rw=2049, want=45112, limit=40427 [ 80.631936][ T5263] loop0: detected capacity change from 0 to 32768 [ 80.702614][ T5263] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.378 (5263) [ 80.791696][ T5263] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 80.793780][ T5263] BTRFS info (device loop0): enabling auto defrag [ 80.795080][ T5263] BTRFS info (device loop0): doing ref verification [ 80.796510][ T5263] BTRFS info (device loop0): use no compression [ 80.797822][ T5263] BTRFS info (device loop0): force clearing of disk cache [ 80.799327][ T5263] BTRFS info (device loop0): max_inline at 4096 [ 80.800656][ T5263] BTRFS info (device loop0): disabling free space tree [ 80.802169][ T5263] BTRFS info (device loop0): has skinny extents [ 80.837197][ T5285] loop1: detected capacity change from 0 to 1024 [ 81.111394][ T5263] BTRFS info (device loop0): enabling ssd optimizations [ 81.119447][ T5263] BTRFS info (device loop0): clearing free space tree [ 81.120913][ T5263] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 81.126582][ T5263] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 81.130676][ T5269] loop4: detected capacity change from 0 to 40427 [ 81.214780][ T5269] F2FS-fs (loop4): invalid crc value [ 81.214963][ T5279] loop2: detected capacity change from 0 to 40427 [ 81.224430][ T5269] F2FS-fs (loop4): Found nat_bits in checkpoint [ 81.265288][ T5283] loop3: detected capacity change from 0 to 32768 [ 81.292774][ T5279] F2FS-fs (loop2): invalid crc value [ 81.299888][ T5269] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 81.301734][ T5279] F2FS-fs (loop2): Found nat_bits in checkpoint [ 81.315395][ T5283] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.386 (5283) [ 81.321835][ T5279] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 81.372942][ T5283] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 81.375042][ T5283] BTRFS info (device loop3): using free space tree [ 81.376460][ T5283] BTRFS info (device loop3): has skinny extents [ 81.391110][ T4033] attempt to access beyond end of device [ 81.391110][ T4033] loop2: rw=2049, want=45104, limit=40427 [ 81.465874][ T4040] attempt to access beyond end of device [ 81.465874][ T4040] loop4: rw=2049, want=45104, limit=40427 [ 81.775191][ T5344] loop1: detected capacity change from 0 to 2048 [ 81.820022][ T5346] loop2: detected capacity change from 0 to 64 [ 81.825096][ T5351] netlink: 'syz.0.398': attribute type 3 has an invalid length. [ 81.857946][ T5344] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.860764][ T5283] BTRFS info (device loop3): enabling ssd optimizations [ 82.032547][ C1] net_ratelimit: 2 callbacks suppressed [ 82.032561][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 83.063281][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 83.094528][ T5392] loop4: detected capacity change from 0 to 32768 [ 83.127915][ T5405] netlink: 11 bytes leftover after parsing attributes in process `syz.3.419'. [ 83.141480][ T5392] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.414 (5392) [ 83.202053][ T5384] loop0: detected capacity change from 0 to 32768 [ 83.210866][ T5392] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 83.212822][ T5392] BTRFS info (device loop4): turning on flush-on-commit [ 83.214557][ T5392] BTRFS info (device loop4): disabling tree log [ 83.215835][ T5392] BTRFS info (device loop4): doing ref verification [ 83.217259][ T5392] BTRFS info (device loop4): force clearing of disk cache [ 83.245144][ T5392] BTRFS info (device loop4): enabling disk space caching [ 83.250372][ T5411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'. [ 83.256933][ T5392] BTRFS info (device loop4): setting nodatacow, compression disabled [ 83.258787][ T5392] BTRFS info (device loop4): enabling ssd optimizations [ 83.260322][ T5392] BTRFS info (device loop4): using spread ssd allocation scheme [ 83.261958][ T5392] BTRFS info (device loop4): max_inline at 4096 [ 83.265848][ T5392] BTRFS info (device loop4): disk space caching is enabled [ 83.267613][ T5392] BTRFS info (device loop4): has skinny extents [ 83.287127][ T5413] loop1: detected capacity change from 0 to 2048 [ 83.298701][ T5384] gfs2: fsid=gfs2: Trying to join cluster "lock_dlm", "gfs2" [ 83.300819][ T5384] gfs2: fsid=gfs2: no fsname found [ 83.344933][ T5413] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.440378][ T5392] BTRFS info (device loop4): clearing free space tree [ 83.441958][ T5392] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 83.444578][ T5392] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 83.701362][ T5441] loop1: detected capacity change from 0 to 128 [ 83.725507][ T5441] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.737539][ T5441] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.755961][ T5392] BTRFS error (device loop4): balance: invalid convert metadata profile raid10 [ 83.964856][ T4022] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop4 scanned by udevd (4022) [ 84.077003][ T5453] loop1: detected capacity change from 0 to 256 [ 84.079894][ T5433] loop2: detected capacity change from 0 to 32768 [ 84.102599][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 84.123744][ T5433] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.425 (5433) [ 84.186490][ T5433] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 84.188329][ T5433] BTRFS info (device loop2): using free space tree [ 84.189741][ T5433] BTRFS info (device loop2): has skinny extents [ 84.314649][ T5442] loop3: detected capacity change from 0 to 32768 [ 84.472594][ T5433] BTRFS info (device loop2): enabling ssd optimizations [ 84.601779][ T26] audit: type=1326 audit(84.570:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff843d1a68 code=0x7ffc0000 [ 84.636711][ T26] audit: type=1326 audit(84.610:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff843d1a68 code=0x7ffc0000 [ 84.643354][ T26] audit: type=1326 audit(84.620:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff843d1a68 code=0x7ffc0000 [ 84.651153][ T26] audit: type=1326 audit(84.620:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff843d1a9c code=0x7ffc0000 [ 84.657857][ T5490] loop4: detected capacity change from 0 to 512 [ 84.663163][ T26] audit: type=1326 audit(84.620:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff843d0160 code=0x7ffc0000 [ 84.668135][ T26] audit: type=1326 audit(84.630:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff843d1b0c code=0x7ffc0000 [ 84.707995][ T26] audit: type=1326 audit(84.630:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff843cffc4 code=0x7ffc0000 [ 84.725021][ T26] audit: type=1326 audit(84.630:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff843d1590 code=0x7ffc0000 [ 84.731953][ T5490] EXT4-fs (loop4): Ignoring removed nobh option [ 84.735793][ T5490] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 84.742233][ T26] audit: type=1326 audit(84.630:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff843d039c code=0x7ffc0000 [ 84.756063][ T26] audit: type=1326 audit(84.630:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff843d039c code=0x7ffc0000 [ 84.776218][ T5497] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 84.831311][ T5490] EXT4-fs (loop4): 1 orphan inode deleted [ 84.836322][ T5490] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,resuid=0x0000000000000000,errors=remount-ro,nobh,sysvgroups,delalloc,usrjquota=./file1,. Quota mode: writeback. [ 85.070188][ T5504] loop4: detected capacity change from 0 to 512 [ 85.142541][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 85.169301][ T5504] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.445: inode #1: comm syz.4.445: iget: illegal inode # [ 85.180583][ T5504] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.445: error while reading EA inode 1 err=-117 [ 85.186842][ T5504] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.445: inode #1: comm syz.4.445: iget: illegal inode # [ 85.189924][ T5504] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.445: error while reading EA inode 1 err=-117 [ 85.197033][ T5504] EXT4-fs (loop4): 1 orphan inode deleted [ 85.198237][ T5504] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 85.277073][ T5504] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.445: invalid indirect mapped block 234881024 (level 0) [ 85.404429][ T5506] loop3: detected capacity change from 0 to 32768 [ 85.468161][ T5506] XFS: noikeep mount option is deprecated. [ 85.541396][ T5506] XFS (loop3): Mounting V5 Filesystem [ 85.595488][ T5525] loop0: detected capacity change from 0 to 1024 [ 85.625171][ T5525] EXT4-fs (loop0): Ignoring removed orlov option [ 85.647479][ T5506] XFS (loop3): Ending clean mount [ 85.650112][ T5506] XFS (loop3): Quotacheck needed: Please wait. [ 85.660389][ T5525] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000010000,orlov,barrier=0x0000000000000002,jqfmt=vfsv1,i_version,minixdf,data_err=abort,max_batch_time=0x0000000000000002,bsdgroups,min_batch_time=0x0000000000000002,quota,,errors=continue. Quota mode: writeback. [ 85.796640][ T5506] XFS (loop3): Quotacheck: Done. [ 85.945161][ T5547] input: syz1 as /devices/virtual/input/input4 [ 85.963996][ T4030] XFS (loop3): Unmounting Filesystem [ 86.013397][ T5551] loop2: detected capacity change from 0 to 256 [ 86.182580][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 86.456723][ T5575] netlink: 116 bytes leftover after parsing attributes in process `syz.4.477'. [ 86.528580][ T5577] loop3: detected capacity change from 0 to 2048 [ 86.590276][ T5579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'. [ 87.058162][ T5590] loop3: detected capacity change from 0 to 256 [ 87.070265][ T5585] loop1: detected capacity change from 0 to 4096 [ 87.101422][ T5573] loop0: detected capacity change from 0 to 32768 [ 87.117297][ T5569] loop2: detected capacity change from 0 to 32768 [ 87.179504][ T5590] FAT-fs (loop3): Directory bread(block 64) failed [ 87.180993][ T5590] FAT-fs (loop3): Directory bread(block 65) failed [ 87.182320][ T5590] FAT-fs (loop3): Directory bread(block 66) failed [ 87.201538][ T5592] loop4: detected capacity change from 0 to 4096 [ 87.203283][ T5590] FAT-fs (loop3): Directory bread(block 67) failed [ 87.204878][ T5590] FAT-fs (loop3): Directory bread(block 68) failed [ 87.206328][ T5590] FAT-fs (loop3): Directory bread(block 69) failed [ 87.207691][ T5590] FAT-fs (loop3): Directory bread(block 70) failed [ 87.209018][ T5590] FAT-fs (loop3): Directory bread(block 71) failed [ 87.210377][ T5590] FAT-fs (loop3): Directory bread(block 72) failed [ 87.222604][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 87.246501][ T5592] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 87.251689][ T5573] XFS (loop0): Mounting V5 Filesystem [ 87.259897][ T5569] XFS (loop2): Mounting V5 Filesystem [ 87.262814][ T5590] FAT-fs (loop3): Directory bread(block 73) failed [ 87.303839][ T5592] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 87.442954][ T5573] XFS (loop0): Ending clean mount [ 87.458669][ T5573] XFS (loop0): Quotacheck needed: Please wait. [ 87.460888][ T5569] XFS (loop2): Ending clean mount [ 87.470990][ T5569] XFS (loop2): Quotacheck needed: Please wait. [ 87.535070][ T5573] XFS (loop0): Quotacheck: Done. [ 87.553791][ T136] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2c8/0xb58, inode 0x2444 dinode [ 87.556097][ T136] XFS (loop2): Unmount and run xfs_repair [ 87.562768][ T136] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 87.565752][ T136] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 87.567541][ T136] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 87.582394][ T136] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 87.584799][ T136] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 04 1a 4.Xh...=........ [ 87.586681][ T136] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 87.588509][ T136] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 16 72 6f a4 .............ro. [ 87.603815][ T136] 00000060: ff ff ff ff b2 47 c7 b6 00 00 00 00 00 00 00 05 .....G.......... [ 87.605703][ T136] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 87.611302][ T5009] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22. [ 87.614826][ T4040] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 87.640661][ T5569] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 87.698131][ T5616] loop1: detected capacity change from 0 to 256 [ 87.780060][ T4033] XFS (loop2): Unmounting Filesystem [ 87.884076][ T4029] XFS (loop0): Unmounting Filesystem [ 87.907456][ T5626] netlink: 32 bytes leftover after parsing attributes in process `syz.1.494'. [ 88.259836][ T5634] loop4: detected capacity change from 0 to 1024 [ 88.262576][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 88.292574][ T5634] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 88.294412][ T5634] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.315944][ T5634] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 88.317830][ T5634] System zones: 0-1, 3-36 [ 88.330587][ T5634] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 88.360897][ T5634] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 88.392624][ T5634] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 88.395483][ T5634] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 88.490933][ T5620] loop3: detected capacity change from 0 to 40427 [ 88.530843][ T5644] loop0: detected capacity change from 0 to 256 [ 88.580852][ T5620] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 88.582747][ T5620] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 88.598366][ T5620] F2FS-fs (loop3): invalid crc value [ 88.602047][ T5644] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 88.616472][ T5620] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 88.665017][ T5620] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 88.666680][ T5620] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 88.906785][ T5636] loop2: detected capacity change from 0 to 40427 [ 88.963565][ T5636] F2FS-fs (loop2): Found nat_bits in checkpoint [ 89.029681][ T5636] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 89.302608][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 89.634901][ T5686] loop3: detected capacity change from 0 to 4096 [ 89.671100][ T5693] loop0: detected capacity change from 0 to 128 [ 89.688546][ T5686] __ntfs_error: 19 callbacks suppressed [ 89.688558][ T5686] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 89.692281][ T5686] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 89.696245][ T5686] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 89.702078][ T5686] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 89.711028][ T5686] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 89.730670][ T5686] ntfs: volume version 3.1. [ 89.734504][ T5693] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.744300][ T5686] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 89.747268][ T5686] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 89.761989][ T5686] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 89.774047][ T5686] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 89.776591][ T5686] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 89.801246][ T5693] EXT4-fs (loop0): shut down requested (2) [ 90.227843][ T5680] loop2: detected capacity change from 0 to 32768 [ 90.254956][ T5714] loop4: detected capacity change from 0 to 4096 [ 90.274892][ T5680] XFS: attr2 mount option is deprecated. [ 90.308467][ T5720] loop3: detected capacity change from 0 to 256 [ 90.322981][ T5714] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 90.343407][ T5680] XFS (loop2): Mounting V5 Filesystem [ 90.352560][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 90.370653][ T5720] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 90.422130][ T5714] ntfs3: loop4: Failed to load $Extend. [ 90.590756][ T5680] XFS (loop2): Ending clean mount [ 90.621554][ T5680] XFS (loop2): Quotacheck needed: Please wait. [ 90.697592][ T5680] XFS (loop2): Quotacheck: Done. [ 90.830818][ T4033] XFS (loop2): Unmounting Filesystem [ 90.910379][ T5751] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.544'. [ 90.934445][ T5751] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.544'. [ 90.936438][ T5751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 91.135952][ T5756] loop3: detected capacity change from 0 to 8192 [ 91.187451][ T5756] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 91.189398][ T5756] REISERFS (device loop3): using ordered data mode [ 91.190959][ T5756] reiserfs: using flush barriers [ 91.207964][ T5756] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.211562][ T5756] REISERFS (device loop3): checking transaction log (loop3) [ 91.251006][ T5756] REISERFS (device loop3): Using r5 hash to sort names [ 91.312059][ T5756] reiserfs: enabling write barrier flush mode [ 91.364574][ T5756] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 91.382100][ T5769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.551'. [ 91.384249][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 91.541591][ T5780] netlink: 'syz.4.559': attribute type 27 has an invalid length. [ 91.614139][ T5780] bond0: (slave bond_slave_0): Releasing backup interface [ 91.633487][ T5784] loop2: detected capacity change from 0 to 1024 [ 91.747390][ T5784] hfsplus: request for non-existent node 134217728 in B*Tree [ 91.749246][ T5784] hfsplus: request for non-existent node 134217728 in B*Tree [ 91.760723][ T5753] loop1: detected capacity change from 0 to 32768 [ 91.890906][ T5753] XFS (loop1): Mounting V5 Filesystem [ 92.010143][ T5753] XFS (loop1): Ending clean mount [ 92.013791][ T5804] loop2: detected capacity change from 0 to 512 [ 92.019462][ T5753] XFS (loop1): Quotacheck needed: Please wait. [ 92.021847][ T5799] device syzkaller1 entered promiscuous mode [ 92.065356][ T5804] EXT4-fs (loop2): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 92.080000][ T5753] XFS (loop1): Quotacheck: Done. [ 92.189567][ T5786] loop3: detected capacity change from 0 to 32768 [ 92.189834][ T4028] XFS (loop1): Unmounting Filesystem [ 92.279965][ T5786] XFS (loop3): Mounting V5 Filesystem [ 92.383278][ T5786] XFS (loop3): Ending clean mount [ 92.422555][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 92.511243][ T5831] Soft offlining pfn 0x12958a at process virtual address 0x20000000 [ 92.610607][ T4030] XFS (loop3): Unmounting Filesystem [ 92.768774][ T5827] loop2: detected capacity change from 0 to 32768 [ 92.890657][ T5827] XFS (loop2): Mounting V5 Filesystem [ 92.927900][ T5827] XFS (loop2): Ending clean mount [ 93.009912][ T5849] loop3: detected capacity change from 0 to 64 [ 93.094274][ T4033] XFS (loop2): Unmounting Filesystem [ 93.160520][ T5833] loop4: detected capacity change from 0 to 32768 [ 93.206058][ T5833] XFS (loop4): Mounting V5 Filesystem [ 93.234027][ T5853] netlink: 'syz.3.579': attribute type 2 has an invalid length. [ 93.346766][ T5833] XFS (loop4): Ending clean mount [ 93.349499][ T5833] XFS (loop4): Quotacheck needed: Please wait. [ 93.441848][ T5833] XFS (loop4): Quotacheck: Done. [ 93.462568][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 93.570601][ T4040] XFS (loop4): Unmounting Filesystem [ 93.695588][ T5865] loop3: detected capacity change from 0 to 32768 [ 93.780138][ T5865] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.582 (5865) [ 93.791871][ T5865] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 93.796199][ T5865] BTRFS info (device loop3): use zlib compression, level 3 [ 93.797945][ T5865] BTRFS info (device loop3): using free space tree [ 93.808550][ T5865] BTRFS info (device loop3): has skinny extents [ 94.026203][ T5865] BTRFS info (device loop3): enabling ssd optimizations [ 94.136828][ T5900] loop4: detected capacity change from 0 to 164 [ 94.167655][ T5900] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 94.242390][ T5900] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 94.258754][ T5869] mkiss: ax0: crc mode is auto. [ 94.311034][ T5875] loop2: detected capacity change from 0 to 32768 [ 94.355622][ T5875] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.597 (5875) [ 94.506046][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 94.788847][ T5918] loop2: detected capacity change from 0 to 64 [ 95.012837][ T5934] loop2: detected capacity change from 0 to 1024 [ 95.035114][ T5933] loop1: detected capacity change from 0 to 256 [ 95.107066][ T5934] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 95.144712][ T5933] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.146746][ T5933] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.195217][ T5933] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.197298][ T5933] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.220330][ T5933] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.222200][ T5933] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.259799][ T5933] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.261760][ T5933] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.269999][ T5933] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.283176][ T5933] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.503820][ T5956] loop0: detected capacity change from 0 to 128 [ 95.542568][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 95.553314][ T5956] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 95.573669][ T5956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.662345][ T5962] loop4: detected capacity change from 0 to 64 [ 95.760329][ T5947] loop3: detected capacity change from 0 to 32768 [ 95.791193][ T5964] loop0: detected capacity change from 0 to 1024 [ 95.804271][ T5947] XFS: noikeep mount option is deprecated. [ 95.805646][ T5947] XFS: noikeep mount option is deprecated. [ 95.849070][ T5964] EXT4-fs (loop0): Test dummy encryption mode enabled [ 95.850653][ T5964] EXT4-fs (loop0): Test dummy encryption mode enabled [ 95.855537][ T5964] EXT4-fs (loop0): Ignoring removed orlov option [ 95.874262][ T5964] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000003,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 95.949410][ T5947] XFS (loop3): Mounting V5 Filesystem [ 95.981835][ T5977] loop4: detected capacity change from 0 to 256 [ 95.991052][ T5974] xt_nfacct: accounting object `syz1' does not exists [ 96.043133][ T5958] loop1: detected capacity change from 0 to 32768 [ 96.073216][ T5977] exfat: Deprecated parameter 'utf8' [ 96.074443][ T5977] exfat: Deprecated parameter 'utf8' [ 96.076047][ T5977] exfat: Deprecated parameter 'utf8' [ 96.102649][ T5964] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 96.115580][ T5977] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 96.121979][ T5964] EXT4-fs (loop0): Test dummy encryption mode enabled [ 96.131818][ T5947] XFS (loop3): Ending clean mount [ 96.132556][ T5964] EXT4-fs (loop0): Test dummy encryption mode enabled [ 96.134603][ T5964] EXT4-fs (loop0): Ignoring removed orlov option [ 96.135258][ T5947] XFS (loop3): Quotacheck needed: Please wait. [ 96.141507][ T5964] EXT4-fs (loop0): re-mounted. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000003,max_dir_size_kb=0x0000000000000004,. Quota mode: writeback. [ 96.236283][ T5958] XFS (loop1): Mounting V5 Filesystem [ 96.260545][ T5947] XFS (loop3): Quotacheck: Done. [ 96.438787][ T5958] XFS (loop1): Ending clean mount [ 96.461383][ T4030] XFS (loop3): Unmounting Filesystem [ 96.592591][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 96.608780][ T4028] XFS (loop1): Unmounting Filesystem [ 96.622804][ T6004] loop4: detected capacity change from 0 to 1024 [ 96.657902][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 96.759952][ T6008] usb usb9: usbfs: process 6008 (syz.0.628) did not claim interface 0 before use [ 96.803905][ T5997] loop2: detected capacity change from 0 to 32768 [ 96.899036][ T5997] XFS (loop2): Mounting V5 Filesystem [ 96.938785][ T6022] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.972902][ T6026] loop3: detected capacity change from 0 to 512 [ 97.051516][ T6031] loop1: detected capacity change from 0 to 64 [ 97.080766][ T5997] XFS (loop2): Ending clean mount [ 97.080974][ T6026] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 97.085385][ T6026] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 97.088921][ T6026] EXT4-fs (loop3): 1 truncate cleaned up [ 97.090122][ T6026] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.118111][ T6033] loop4: detected capacity change from 0 to 64 [ 97.211684][ T6033] attempt to access beyond end of device [ 97.211684][ T6033] loop4: rw=0, want=8194, limit=64 [ 97.229359][ T6026] EXT4-fs (loop3): shut down requested (2) [ 97.267713][ T4033] XFS (loop2): Unmounting Filesystem [ 97.406062][ T6017] loop0: detected capacity change from 0 to 32768 [ 97.581614][ T6017] XFS (loop0): Mounting V5 Filesystem [ 97.632585][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 97.707471][ T6017] XFS (loop0): Ending clean mount [ 97.709978][ T6017] XFS (loop0): Quotacheck needed: Please wait. [ 97.834486][ T6017] XFS (loop0): Quotacheck: Done. [ 97.966601][ T4029] XFS (loop0): Unmounting Filesystem [ 98.017179][ T6043] loop4: detected capacity change from 0 to 32768 [ 98.059016][ T4106] kernel write not supported for file /input/event0 (pid: 4106 comm: kworker/1:7) [ 98.662546][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 98.886527][ T6112] loop0: detected capacity change from 0 to 1024 [ 98.990818][ T6112] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,dax=never,,errors=continue. Quota mode: writeback. [ 99.110380][ T6085] loop2: detected capacity change from 0 to 40427 [ 99.168615][ T6085] F2FS-fs (loop2): Found nat_bits in checkpoint [ 99.215069][ T6085] F2FS-fs (loop2): Start checkpoint disabled! [ 99.219034][ T6085] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 99.417173][ T293] attempt to access beyond end of device [ 99.417173][ T293] loop2: rw=2049, want=40992, limit=40427 [ 99.506791][ T6106] loop4: detected capacity change from 0 to 40427 [ 99.559639][ T6101] loop1: detected capacity change from 0 to 40427 [ 99.585590][ T6106] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 99.587260][ T6106] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 99.591340][ T6106] F2FS-fs (loop4): invalid crc value [ 99.607263][ T6101] F2FS-fs (loop1): invalid crc value [ 99.614204][ T6101] F2FS-fs (loop1): Found nat_bits in checkpoint [ 99.639061][ T6110] loop3: detected capacity change from 0 to 40427 [ 99.654180][ T6106] F2FS-fs (loop4): Found nat_bits in checkpoint [ 99.663154][ T6101] F2FS-fs (loop1): Start checkpoint disabled! [ 99.691059][ T6110] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 99.692676][ T6110] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 99.702919][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 99.706234][ T6101] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 99.742377][ T6106] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 99.743105][ T6110] F2FS-fs (loop3): Found nat_bits in checkpoint [ 99.743964][ T6106] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 99.772710][ T6110] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 99.798958][ T6110] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 99.800477][ T6110] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 99.825735][ T546] attempt to access beyond end of device [ 99.825735][ T546] loop1: rw=2049, want=45104, limit=40427 [ 99.921731][ T546] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 99.929234][ T546] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 100.099657][ T6119] loop0: detected capacity change from 0 to 32768 [ 100.117709][ T4030] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 100.117733][ T4030] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 100.119327][ T4030] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 100.120812][ T4030] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 100.145285][ T4030] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 100.149002][ T4030] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 100.150547][ T4030] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 100.271444][ T6119] XFS (loop0): Mounting V5 Filesystem [ 100.349787][ T6119] XFS (loop0): Ending clean mount [ 100.360191][ T6119] XFS (loop0): Quotacheck needed: Please wait. [ 100.431502][ T6119] XFS (loop0): Quotacheck: Done. [ 100.608774][ T4029] XFS (loop0): Unmounting Filesystem [ 100.742614][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 100.804575][ T6166] loop4: detected capacity change from 0 to 512 [ 100.872178][ T6166] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.877630][ T6166] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 45824 [ 101.108538][ T6176] loop4: detected capacity change from 0 to 2048 [ 101.125037][ T6176] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.165502][ T6158] loop1: detected capacity change from 0 to 32768 [ 101.184016][ T6181] devpts: called with bogus options [ 101.198540][ T6158] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.679 (6158) [ 101.266041][ T6158] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 101.270676][ T6158] BTRFS info (device loop1): using free space tree [ 101.287704][ T6158] BTRFS info (device loop1): has skinny extents [ 101.330339][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 101.330352][ T26] audit: type=1326 audit(101.300:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94edfa68 code=0x7ffc0000 [ 101.349860][ T26] audit: type=1326 audit(101.300:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94edfa68 code=0x7ffc0000 [ 101.393017][ T26] audit: type=1326 audit(101.340:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff94edfa68 code=0x7ffc0000 [ 101.397432][ T26] audit: type=1326 audit(101.340:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94edfa68 code=0x7ffc0000 [ 101.440263][ T6203] loop4: detected capacity change from 0 to 1024 [ 101.458840][ T26] audit: type=1326 audit(101.340:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94edfa68 code=0x7ffc0000 [ 101.465253][ T6203] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.479579][ T26] audit: type=1326 audit(101.340:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffff94edfa68 code=0x7ffc0000 [ 101.509290][ T6203] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,noblock_validity,jqfmt=vfsv1,grpid,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 101.514318][ T26] audit: type=1326 audit(101.340:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94edfa68 code=0x7ffc0000 [ 101.514370][ T26] audit: type=1326 audit(101.340:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94edfa68 code=0x7ffc0000 [ 101.523782][ T26] audit: type=1326 audit(101.370:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=4 compat=0 ip=0xffff94edfa68 code=0x7ffc0000 [ 101.528188][ T26] audit: type=1326 audit(101.420:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94edfa68 code=0x7ffc0000 [ 101.533196][ T6158] BTRFS info (device loop1): enabling ssd optimizations [ 101.650434][ T6222] loop0: detected capacity change from 0 to 512 [ 101.695306][ T6222] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 101.716651][ T6222] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c028, mo2=0000] [ 101.718500][ T6222] System zones: 0-2, 18-18, 34-34 [ 101.739254][ T6222] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.700: couldn't read orphan inode 16 (err -116) [ 101.753789][ T6222] EXT4-fs (loop0): Remounting filesystem read-only [ 101.755158][ T6222] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nomblk_io_submit,nodiscard,debug,max_batch_time=0x0000000000001116,resuid=0x0000000000000000,barrier,resuid=0x0000000000000000,nogrpid,. Quota mode: writeback. [ 101.782555][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 101.808040][ T6227] netlink: 'syz.3.702': attribute type 29 has an invalid length. [ 101.810057][ T6227] netlink: 'syz.3.702': attribute type 29 has an invalid length. [ 101.850173][ T6227] netlink: 'syz.3.702': attribute type 29 has an invalid length. [ 101.872773][ T6227] netlink: 'syz.3.702': attribute type 29 has an invalid length. [ 101.904440][ T6227] netlink: 'syz.3.702': attribute type 29 has an invalid length. [ 101.988764][ T6222] Process accounting resumed [ 102.021488][ T6222] EXT4-fs error (device loop0): ext4_remount:5855: comm syz.0.700: Abort forced by user [ 102.039739][ T6222] EXT4-fs (loop0): Remounting filesystem read-only [ 102.166594][ T6236] loop3: detected capacity change from 0 to 512 [ 102.240511][ T6236] EXT4-fs error (device loop3): __ext4_iget:4872: inode #15: block 1803188595: comm syz.3.707: invalid block [ 102.246714][ T6236] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.707: couldn't read orphan inode 15 (err -117) [ 102.250048][ T6236] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,journal_dev=0x0000000000007ffc,debug_want_extra_isize=0x000000000000005c,usrquota,user_xattr,delalloc,nombcache,,errors=continue. Quota mode: writeback. [ 102.567854][ T6258] loop2: detected capacity change from 0 to 4096 [ 102.572822][ T6262] loop0: detected capacity change from 0 to 256 [ 102.645636][ T6258] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000009,noblock_validity,nouid32,nodelalloc,journal_dev=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 102.822549][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 103.022060][ T6275] netlink: 40 bytes leftover after parsing attributes in process `syz.3.723'. [ 103.872573][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 103.907961][ T6280] loop3: detected capacity change from 0 to 40427 [ 103.952663][ T6280] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 103.954294][ T6280] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 103.960190][ T6280] F2FS-fs (loop3): invalid crc value [ 103.976886][ T6280] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.014322][ T6280] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 104.015925][ T6280] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 104.098720][ T6280] attempt to access beyond end of device [ 104.098720][ T6280] loop3: rw=10241, want=45104, limit=40427 [ 104.100516][ T6319] loop4: detected capacity change from 0 to 2048 [ 104.142512][ T6312] loop1: detected capacity change from 0 to 32768 [ 104.157729][ T4030] attempt to access beyond end of device [ 104.157729][ T4030] loop3: rw=2049, want=45112, limit=40427 [ 104.192995][ T6319] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 104.195303][ T6319] UDF-fs: Scanning with blocksize 512 failed [ 104.258113][ T6319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.272211][ T6312] XFS (loop1): Mounting V5 Filesystem [ 104.432305][ T6335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.741'. [ 104.479210][ T6312] XFS (loop1): Ending clean mount [ 104.481955][ T6312] XFS (loop1): Quotacheck needed: Please wait. [ 104.547869][ T6312] XFS (loop1): Quotacheck: Done. [ 104.701571][ T6344] loop4: detected capacity change from 0 to 512 [ 104.744799][ T4028] XFS (loop1): Unmounting Filesystem [ 104.756995][ T6346] loop3: detected capacity change from 0 to 128 [ 104.791463][ T6344] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 104.812577][ T6344] EXT2-fs (loop4): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 104.840504][ T6346] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.852057][ T6350] loop2: detected capacity change from 0 to 4096 [ 104.874801][ T6354] loop0: detected capacity change from 0 to 128 [ 104.897227][ T6350] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 104.913211][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 105.022023][ T6358] loop4: detected capacity change from 0 to 4096 [ 105.090587][ T6358] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000009,noblock_validity,nouid32,nodelalloc,journal_dev=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 105.928037][ T6366] loop3: detected capacity change from 0 to 131072 [ 105.942557][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 105.971743][ T6383] loop1: detected capacity change from 0 to 512 [ 105.977336][ T6366] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 105.979343][ T6366] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 105.996184][ T6366] F2FS-fs (loop3): invalid crc value [ 106.033475][ T6366] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.049051][ T6383] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.050847][ T6383] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 45824 [ 106.058763][ T6366] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 106.060231][ T6366] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 106.075949][ T6391] loop4: detected capacity change from 0 to 512 [ 106.130401][ T6366] F2FS-fs (loop3): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 106.136143][ T6391] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.263212][ T6391] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 106.297529][ T6391] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2 with error 28 [ 106.303983][ T6377] loop2: detected capacity change from 0 to 40427 [ 106.313955][ T6391] EXT4-fs (loop4): This should not happen!! Data will be lost [ 106.313955][ T6391] [ 106.323948][ T6391] EXT4-fs (loop4): Total free blocks count 0 [ 106.329770][ T6391] EXT4-fs (loop4): Free/Dirty block details [ 106.335626][ T6391] EXT4-fs (loop4): free_blocks=65280 [ 106.339091][ T6391] EXT4-fs (loop4): dirty_blocks=2 [ 106.343525][ T6391] EXT4-fs (loop4): Block reservation details [ 106.347053][ T6391] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 106.352178][ T6377] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 106.354303][ T6377] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 106.360136][ T6377] F2FS-fs (loop2): invalid crc value [ 106.371107][ T6391] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2 with error 28 [ 106.376775][ T6391] EXT4-fs (loop4): This should not happen!! Data will be lost [ 106.376775][ T6391] [ 106.393639][ T6377] F2FS-fs (loop2): Found nat_bits in checkpoint [ 106.454318][ T6377] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 106.455964][ T6377] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 106.522893][ T6377] attempt to access beyond end of device [ 106.522893][ T6377] loop2: rw=10241, want=45104, limit=40427 [ 106.575323][ T4033] attempt to access beyond end of device [ 106.575323][ T4033] loop2: rw=2049, want=45112, limit=40427 [ 106.982572][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 107.163926][ T6435] loop2: detected capacity change from 0 to 512 [ 107.229743][ T6438] loop0: detected capacity change from 0 to 16 [ 107.233208][ T6435] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 107.259775][ T6435] Process accounting resumed [ 107.270855][ T6438] erofs: (device loop0): mounted with root inode @ nid 36. [ 107.320284][ T6435] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 107.593521][ T6451] loop4: detected capacity change from 0 to 1024 [ 107.597421][ T6446] loop0: detected capacity change from 0 to 4096 [ 107.760738][ T6451] attempt to access beyond end of device [ 107.760738][ T6451] loop4: rw=0, want=5780, limit=1024 [ 107.774317][ T6451] attempt to access beyond end of device [ 107.774317][ T6451] loop4: rw=0, want=5780, limit=1024 [ 107.943815][ T6474] loop3: detected capacity change from 0 to 256 [ 108.033442][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 108.039071][ T6480] loop2: detected capacity change from 0 to 8 [ 108.043364][ T6478] Illegal XDP return value 4294966772, expect packet loss! [ 108.092483][ T6483] loop1: detected capacity change from 0 to 1024 [ 108.138054][ T6483] EXT4-fs (loop1): filesystem is read-only [ 108.147378][ T1628] attempt to access beyond end of device [ 108.147378][ T1628] loop3: rw=1, want=268, limit=256 [ 108.149774][ T6483] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 108.162272][ T6483] EXT4-fs error (device loop1): ext4_get_journal_inode:5160: inode #32: comm syz.1.803: iget: special inode unallocated [ 108.165590][ T6483] EXT4-fs (loop1): no journal found [ 108.168397][ T6486] loop0: detected capacity change from 0 to 128 [ 108.220706][ T6486] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.412908][ T6493] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 108.447285][ T6495] binder: 6494:6495 ioctl c018620c 20000000 returned -22 [ 108.808096][ T6473] loop4: detected capacity change from 0 to 32768 [ 108.816301][ T6521] loop2: detected capacity change from 0 to 128 [ 108.862941][ T6473] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.796 (6473) [ 108.863491][ T6521] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.908858][ T6473] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 108.926813][ T6473] BTRFS info (device loop4): using free space tree [ 108.928171][ T6473] BTRFS info (device loop4): has skinny extents [ 108.978854][ T6521] EXT4-fs (loop2): shut down requested (2) [ 109.062874][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 109.375993][ T6473] BTRFS info (device loop4): enabling ssd optimizations [ 109.680784][ T6575] netlink: 'syz.3.836': attribute type 4 has an invalid length. [ 109.864954][ T6588] tipc: Started in network mode [ 109.865927][ T6588] tipc: Node identity ac1414aa, cluster identity 4711 [ 109.873726][ T6588] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 109.875385][ T6588] tipc: Enabled bearer , priority 10 [ 109.911575][ T6578] loop1: detected capacity change from 0 to 4096 [ 110.022588][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 110.065485][ T6597] loop0: detected capacity change from 0 to 256 [ 110.105784][ T6597] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.108081][ T6597] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 110.112841][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 110.135012][ T6597] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 110.162596][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 110.312545][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 110.452601][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 110.526833][ T6616] loop1: detected capacity change from 0 to 512 [ 110.594341][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 110.640185][ T6616] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 110.691062][ T6594] loop3: detected capacity change from 0 to 32768 [ 110.717340][ T6616] Process accounting resumed [ 110.732607][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 110.754988][ T6594] XFS: ikeep mount option is deprecated. [ 110.756835][ T6616] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 110.787538][ T6594] XFS (loop3): Mounting V5 Filesystem [ 110.791985][ T6606] loop0: detected capacity change from 0 to 32768 [ 110.848223][ T6594] XFS (loop3): Ending clean mount [ 110.856067][ T6594] XFS (loop3): Quotacheck needed: Please wait. [ 110.892540][ T6577] tipc: Node number set to 2886997162 [ 110.923615][ T6594] XFS (loop3): Quotacheck: Done. [ 110.976442][ T6606] JBD2: Ignoring recovery information on journal [ 111.127927][ T4030] XFS (loop3): Unmounting Filesystem [ 111.148912][ T6606] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.477072][ T4029] ocfs2: Unmounting device (7,0) on (node local) [ 111.515725][ T6634] loop1: detected capacity change from 0 to 32768 [ 111.647019][ T6634] ERROR: (device loop1): dbReAlloc: the block is outside the filesystem [ 111.647019][ T6634] [ 111.672492][ T6634] ERROR: (device loop1): remounting filesystem as read-only [ 111.726390][ T6652] netlink: 'syz.2.860': attribute type 21 has an invalid length. [ 111.727415][ T6649] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 111.727971][ T6652] netlink: 'syz.2.860': attribute type 6 has an invalid length. [ 111.730988][ T6652] netlink: 132 bytes leftover after parsing attributes in process `syz.2.860'. [ 111.793433][ T6652] netlink: 'syz.2.860': attribute type 21 has an invalid length. [ 111.795156][ T6652] netlink: 'syz.2.860': attribute type 6 has an invalid length. [ 111.796749][ T6652] netlink: 132 bytes leftover after parsing attributes in process `syz.2.860'. [ 111.880293][ T6657] loop0: detected capacity change from 0 to 512 [ 111.912045][ T6658] loop3: detected capacity change from 0 to 2048 [ 111.957106][ T6658] EXT4-fs (loop3): Ignoring removed nobh option [ 111.958516][ T6658] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 111.958516][ T6658] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 111.958516][ T6658] [ 111.972160][ T6657] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.059827][ T6658] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,i_version,nobh,delalloc,minixdf,lazytime,nouser_xattr,inode_readahead_blks=0x0000000008000000,abort,bsddf,,errors=continue. Quota mode: none. [ 112.195597][ T6658] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.382532][ T6677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.871'. [ 112.753533][ T6702] netlink: 74 bytes leftover after parsing attributes in process `syz.0.890'. [ 112.952110][ T6718] loop2: detected capacity change from 0 to 64 [ 113.182795][ T6729] netlink: 132 bytes leftover after parsing attributes in process `syz.2.893'. [ 113.222805][ C1] net_ratelimit: 7 callbacks suppressed [ 113.222820][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 113.629251][ T6750] loop4: detected capacity change from 0 to 2048 [ 113.769480][ T6754] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.862935][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 114.010184][ T6736] loop2: detected capacity change from 0 to 32768 [ 114.061941][ T6736] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.896 (6736) [ 114.126002][ T6736] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 114.128230][ T6736] BTRFS info (device loop2): using free space tree [ 114.129557][ T6736] BTRFS info (device loop2): has skinny extents [ 114.262812][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 114.301802][ T6741] loop0: detected capacity change from 0 to 40427 [ 114.327130][ T6736] BTRFS info (device loop2): enabling ssd optimizations [ 114.337287][ T6741] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 114.339072][ T6741] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 114.360321][ T6741] F2FS-fs (loop0): invalid crc value [ 114.437641][ T6741] F2FS-fs (loop0): Found nat_bits in checkpoint [ 114.457493][ T6741] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 114.459070][ T6741] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 114.791163][ T6803] loop1: detected capacity change from 0 to 1024 [ 114.912579][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 114.937873][ T6803] hfsplus: request for non-existent node 134217728 in B*Tree [ 114.939594][ T6803] hfsplus: request for non-existent node 134217728 in B*Tree [ 115.270571][ T6822] lo speed is unknown, defaulting to 1000 [ 115.302789][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 115.574163][ T6839] loop1: detected capacity change from 0 to 64 [ 115.665375][ T6841] loop2: detected capacity change from 0 to 512 [ 115.769243][ T6841] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.929: couldn't read orphan inode 16 (err -116) [ 115.782961][ T6841] EXT4-fs (loop2): Remounting filesystem read-only [ 115.784358][ T6841] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,dioread_lock,nolazytime,max_batch_time=0x0000000000001116,resuid=0x0000000000000000,barrier,resuid=0x0000000000000000,nogrpid,. Quota mode: writeback. [ 115.893635][ T6841] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.929: corrupted xattr block 19 [ 115.901802][ T6841] EXT4-fs (loop2): Remounting filesystem read-only [ 115.942566][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 116.168628][ T6833] loop0: detected capacity change from 0 to 32768 [ 116.291163][ T6833] XFS (loop0): Mounting V5 Filesystem [ 116.343138][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 116.456489][ T6833] XFS (loop0): Ending clean mount [ 116.497977][ T6852] loop1: detected capacity change from 0 to 32768 [ 116.530415][ T4029] XFS (loop0): Unmounting Filesystem [ 116.570790][ T6852] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.933 (6852) [ 116.627306][ T6852] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 116.629329][ T6852] BTRFS info (device loop1): using free space tree [ 116.630748][ T6852] BTRFS info (device loop1): has skinny extents [ 116.798024][ T6857] loop2: detected capacity change from 0 to 32768 [ 116.842724][ T6852] BTRFS info (device loop1): enabling ssd optimizations [ 116.979546][ T6857] XFS (loop2): Mounting V5 Filesystem [ 116.982917][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 117.199449][ T6894] loop3: detected capacity change from 0 to 32768 [ 117.264228][ T6857] XFS (loop2): Ending clean mount [ 117.272339][ T6894] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.941 (6894) [ 117.281603][ T6857] XFS (loop2): Quotacheck needed: Please wait. [ 117.337415][ T6894] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 117.339391][ T6894] BTRFS info (device loop3): force zlib compression, level 3 [ 117.341669][ T6857] XFS (loop2): Quotacheck: Done. [ 117.359071][ T6894] BTRFS info (device loop3): force clearing of disk cache [ 117.360662][ T6894] BTRFS info (device loop3): setting nodatasum [ 117.361762][ T6894] BTRFS info (device loop3): use zlib compression, level 3 [ 117.369242][ T6894] BTRFS info (device loop3): allowing degraded mounts [ 117.370545][ T6894] BTRFS info (device loop3): enabling disk space caching [ 117.372192][ T6894] BTRFS info (device loop3): disk space caching is enabled [ 117.382810][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 117.412829][ T6894] BTRFS info (device loop3): has skinny extents [ 117.513423][ T6916] input: syz0 as /devices/virtual/input/input5 [ 117.529905][ T6921] rdma_rxe: rxe_register_device failed with error -23 [ 117.531980][ T6921] rdma_rxe: failed to add lo [ 117.543490][ T4033] XFS (loop2): Unmounting Filesystem [ 117.798073][ T6894] BTRFS info (device loop3): enabling ssd optimizations [ 117.800522][ T6894] BTRFS info (device loop3): clearing free space tree [ 117.801935][ T6894] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 117.810977][ T6894] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 117.848041][ T6935] loop0: detected capacity change from 0 to 4096 [ 117.945148][ T6935] __ntfs_error: 1 callbacks suppressed [ 117.945161][ T6935] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 117.951210][ T6935] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 117.960275][ T6935] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 117.977331][ T6935] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 117.989423][ T6935] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 118.002136][ T6935] ntfs: volume version 3.1. [ 118.010312][ T6935] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 118.021579][ T6935] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 118.024582][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 118.036270][ T6935] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 118.043055][ T6935] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 118.051130][ T6935] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 118.129304][ T6921] loop1: detected capacity change from 0 to 40427 [ 118.161782][ T6921] F2FS-fs (loop1): Unrecognized mount option "errors=continue" or missing value [ 118.422840][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 118.457301][ T6947] loop0: detected capacity change from 0 to 256 [ 118.473864][ T6951] loop2: detected capacity change from 0 to 256 [ 118.541616][ T6951] FAT-fs (loop2): Directory bread(block 64) failed [ 118.543276][ T6951] FAT-fs (loop2): Directory bread(block 65) failed [ 118.544744][ T6951] FAT-fs (loop2): Directory bread(block 66) failed [ 118.546114][ T6951] FAT-fs (loop2): Directory bread(block 67) failed [ 118.547565][ T6951] FAT-fs (loop2): Directory bread(block 68) failed [ 118.569384][ T6951] FAT-fs (loop2): Directory bread(block 69) failed [ 118.572615][ T6951] FAT-fs (loop2): Directory bread(block 70) failed [ 118.573954][ T6951] FAT-fs (loop2): Directory bread(block 71) failed [ 118.575350][ T6951] FAT-fs (loop2): Directory bread(block 72) failed [ 118.576815][ T6951] FAT-fs (loop2): Directory bread(block 73) failed [ 119.062585][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 119.101643][ T6963] loop1: detected capacity change from 0 to 4096 [ 119.136432][ T6963] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 119.160244][ T6963] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 119.331423][ T6971] loop2: detected capacity change from 0 to 512 [ 119.412928][ T4492] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 119.416657][ T4028] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 119.456117][ T6971] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 119.462805][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 119.494022][ T6971] EXT2-fs (loop2): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 119.550924][ T6959] loop0: detected capacity change from 0 to 32768 [ 119.585304][ T6959] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.954 (6959) [ 119.609790][ T6959] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 119.611732][ T6959] BTRFS info (device loop0): using free space tree [ 119.629751][ T6959] BTRFS info (device loop0): has skinny extents [ 119.656289][ T6953] loop3: detected capacity change from 0 to 40427 [ 119.709937][ T6953] F2FS-fs (loop3): invalid crc value [ 119.719080][ T6957] loop4: detected capacity change from 0 to 40427 [ 119.750198][ T6953] F2FS-fs (loop3): Found nat_bits in checkpoint [ 119.798911][ T6957] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 119.800519][ T6957] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 119.814183][ T6957] F2FS-fs (loop4): invalid crc value [ 119.856060][ T6957] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 119.859809][ T6959] BTRFS info (device loop0): enabling ssd optimizations [ 119.865490][ T6953] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 120.014294][ T4030] attempt to access beyond end of device [ 120.014294][ T4030] loop3: rw=2049, want=45104, limit=40427 [ 120.036457][ T6957] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 120.038007][ T6957] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 120.040381][ T7006] loop1: detected capacity change from 0 to 1024 [ 120.102923][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 120.126473][ T7006] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,dax=never,,errors=continue. Quota mode: writeback. [ 120.502844][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 120.721953][ T6988] loop2: detected capacity change from 0 to 32768 [ 120.920825][ T7020] loop3: detected capacity change from 0 to 8192 [ 121.012742][ T7020] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 121.015503][ T7020] REISERFS (device loop3): using ordered data mode [ 121.016769][ T7020] reiserfs: using flush barriers [ 121.018690][ T7020] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 121.022373][ T7020] REISERFS (device loop3): checking transaction log (loop3) [ 121.057350][ T7020] REISERFS (device loop3): Using r5 hash to sort names [ 121.129419][ T7020] reiserfs: enabling write barrier flush mode [ 121.133829][ T7020] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 121.142580][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 121.293401][ T7012] loop0: detected capacity change from 0 to 40427 [ 121.342963][ T7012] F2FS-fs (loop0): invalid crc value [ 121.360723][ T7012] F2FS-fs (loop0): Found nat_bits in checkpoint [ 121.382729][ T7012] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 121.473854][ T4029] attempt to access beyond end of device [ 121.473854][ T4029] loop0: rw=2049, want=45104, limit=40427 [ 121.542817][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 121.925930][ T7042] loop1: detected capacity change from 0 to 32768 [ 121.936683][ T7042] XFS: attr2 mount option is deprecated. [ 121.937899][ T7042] XFS: ikeep mount option is deprecated. [ 121.941551][ T7042] XFS: noikeep mount option is deprecated. [ 121.970638][ T7042] XFS (loop1): Mounting V5 Filesystem [ 122.049141][ T7044] loop0: detected capacity change from 0 to 32768 [ 122.050745][ T7042] XFS (loop1): Ending clean mount [ 122.058607][ T7042] XFS (loop1): Quotacheck needed: Please wait. [ 122.103708][ T7044] XFS (loop0): Mounting V5 Filesystem [ 122.109639][ T7042] XFS (loop1): Quotacheck: Done. [ 122.181354][ T4028] XFS (loop1): Unmounting Filesystem [ 122.192607][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 122.258516][ T7044] XFS (loop0): Ending clean mount [ 122.347760][ T7070] lo speed is unknown, defaulting to 1000 [ 122.411519][ T4029] XFS (loop0): Unmounting Filesystem [ 122.582794][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 122.798628][ T7072] loop3: detected capacity change from 0 to 32768 [ 122.843138][ T7072] XFS: attr2 mount option is deprecated. [ 122.989695][ T7072] XFS (loop3): Mounting V5 Filesystem [ 123.120105][ T7072] XFS (loop3): Ending clean mount [ 123.124047][ T7072] XFS (loop3): Quotacheck needed: Please wait. [ 123.183499][ T7072] XFS (loop3): Quotacheck: Done. [ 123.222531][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 123.279270][ T4030] XFS (loop3): Unmounting Filesystem [ 123.477123][ T7098] loop1: detected capacity change from 0 to 40427 [ 123.544902][ T7098] F2FS-fs (loop1): invalid crc value [ 123.545174][ T7097] loop2: detected capacity change from 0 to 32768 [ 123.563617][ T7098] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.579352][ T7098] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.613967][ T7097] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.993 (7097) [ 123.622962][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 123.631667][ T7097] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 123.635154][ T7097] BTRFS info (device loop2): using free space tree [ 123.637664][ T7097] BTRFS info (device loop2): has skinny extents [ 123.649515][ T4028] attempt to access beyond end of device [ 123.649515][ T4028] loop1: rw=2049, want=45104, limit=40427 [ 123.669922][ T7105] loop4: detected capacity change from 0 to 512 [ 123.710738][ T7105] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.721305][ T7097] BTRFS info (device loop2): enabling ssd optimizations [ 123.761768][ T7105] EXT4-fs (loop4): 1 truncate cleaned up [ 123.763186][ T7105] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,resuid=0x000000000000ee01,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 124.165721][ T7130] loop0: detected capacity change from 0 to 512 [ 124.216986][ T7130] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 124.227505][ T7130] EXT4-fs (loop0): invalid journal inode [ 124.228810][ T7130] EXT4-fs (loop0): can't get journal size [ 124.240057][ T7130] EXT4-fs (loop0): orphan cleanup on readonly fs [ 124.252468][ T7130] EXT4-fs (loop0): 1 truncate cleaned up [ 124.253643][ T7130] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 124.262572][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 124.662841][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 124.680740][ T7128] loop1: detected capacity change from 0 to 40427 [ 124.755247][ T7134] loop2: detected capacity change from 0 to 4096 [ 124.764566][ T7128] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 124.766211][ T7128] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 124.769788][ T7128] F2FS-fs (loop1): invalid crc value [ 124.811047][ T7128] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 124.882322][ T7128] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 124.884486][ T7128] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 124.979515][ T7145] loop0: detected capacity change from 0 to 512 [ 125.019165][ T7145] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 125.052304][ T7145] EXT2-fs (loop0): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 125.312605][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 125.468791][ T7157] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1003'. [ 125.638783][ T7165] loop1: detected capacity change from 0 to 64 [ 125.651343][ T7159] loop0: detected capacity change from 0 to 4096 [ 125.671115][ T7159] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 125.702812][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 125.727898][ T7159] ntfs3: loop0: Failed to load $Extend. [ 126.130000][ T7182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1019'. [ 126.189977][ T7186] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1020'. [ 126.191953][ T7186] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.1020'. [ 126.202579][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 126.280367][ T7191] loop3: detected capacity change from 0 to 64 [ 126.295211][ T7162] loop4: detected capacity change from 0 to 32768 [ 126.297381][ T7189] loop1: detected capacity change from 0 to 256 [ 126.323129][ T7162] XFS: attr2 mount option is deprecated. [ 126.352575][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 126.360375][ T7162] XFS (loop4): Mounting V5 Filesystem [ 126.367807][ T7189] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 126.535784][ T7162] XFS (loop4): Ending clean mount [ 126.543270][ T7162] XFS (loop4): Quotacheck needed: Please wait. [ 126.657384][ T7162] XFS (loop4): Quotacheck: Done. [ 126.742816][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 126.881055][ T4040] XFS (loop4): Unmounting Filesystem [ 127.179514][ T7207] loop3: detected capacity change from 0 to 32768 [ 127.201236][ T7218] loop0: detected capacity change from 0 to 4096 [ 127.289583][ T7207] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1027 (7207) [ 127.335385][ T7207] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 127.337187][ T7207] BTRFS info (device loop3): using free space tree [ 127.338462][ T7207] BTRFS info (device loop3): has skinny extents [ 127.392566][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 127.439405][ T7205] loop2: detected capacity change from 0 to 40427 [ 127.476962][ T7205] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 127.478575][ T7205] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 127.482915][ T7205] F2FS-fs (loop2): invalid crc value [ 127.539193][ T7205] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 127.585865][ T7217] loop1: detected capacity change from 0 to 32768 [ 127.649885][ T7217] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1033 (7217) [ 127.651576][ T7205] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 127.654295][ T7205] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 127.708631][ T7207] BTRFS info (device loop3): enabling ssd optimizations [ 127.727552][ T7217] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 127.729614][ T7217] BTRFS info (device loop1): force clearing of disk cache [ 127.731108][ T7217] BTRFS info (device loop1): enabling disk space caching [ 127.744055][ T7217] BTRFS info (device loop1): turning on sync discard [ 127.745580][ T7217] BTRFS info (device loop1): disabling tree log [ 127.746939][ T7217] BTRFS info (device loop1): metadata ratio 5 [ 127.748185][ T7217] BTRFS info (device loop1): disk space caching is enabled [ 127.749632][ T7217] BTRFS info (device loop1): has skinny extents [ 127.782839][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 127.914784][ T7268] netlink: 'syz.0.1039': attribute type 11 has an invalid length. [ 127.916997][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1039'. [ 127.968982][ T7217] BTRFS info (device loop1): enabling ssd optimizations [ 127.983990][ T7217] BTRFS info (device loop1): clearing free space tree [ 127.985415][ T7217] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.987707][ T7217] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.038373][ T7274] loop0: detected capacity change from 0 to 256 [ 128.204662][ T7274] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 128.422533][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 128.565029][ T7286] input: syz1 as /devices/virtual/input/input6 [ 128.610018][ T7291] loop4: detected capacity change from 0 to 256 [ 128.682865][ T7292] loop1: detected capacity change from 0 to 1024 [ 128.690351][ T7296] loop2: detected capacity change from 0 to 2048 [ 128.699631][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'. [ 128.800346][ T7292] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 128.822793][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 129.367957][ T7319] loop3: detected capacity change from 0 to 4096 [ 129.462568][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 129.562026][ T7308] loop4: detected capacity change from 0 to 32768 [ 129.579915][ T7331] loop0: detected capacity change from 0 to 2048 [ 129.620338][ T7308] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1053 (7308) [ 129.683866][ T7308] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 129.685854][ T7308] BTRFS info (device loop4): using free space tree [ 129.688398][ T7308] BTRFS info (device loop4): has skinny extents [ 129.862802][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 129.942040][ T7359] netlink: 'syz.0.1071': attribute type 27 has an invalid length. [ 129.978358][ T7308] BTRFS info (device loop4): enabling ssd optimizations [ 130.034478][ T7359] bond0: (slave bond_slave_0): Releasing backup interface [ 130.512540][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 130.689299][ T7362] loop3: detected capacity change from 0 to 32768 [ 130.696681][ T7370] loop1: detected capacity change from 0 to 32768 [ 130.745667][ T7362] XFS (loop3): Mounting V5 Filesystem [ 130.758467][ T7370] XFS (loop1): Mounting V5 Filesystem [ 130.850160][ T7362] XFS (loop3): Ending clean mount [ 130.858569][ T7362] XFS (loop3): Quotacheck needed: Please wait. [ 130.877588][ T7370] XFS (loop1): Ending clean mount [ 130.877658][ T4492] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2c8/0xb58, inode 0x2444 dinode [ 130.882882][ T7370] XFS (loop1): Quotacheck needed: Please wait. [ 130.884662][ T4492] XFS (loop3): Unmount and run xfs_repair [ 130.892045][ T4492] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 130.894348][ T4492] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 130.896216][ T4492] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 130.898172][ T4492] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 130.909227][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 130.909326][ T4492] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 04 1a 4.Xh...=........ [ 130.915447][ T7370] XFS (loop1): Quotacheck: Done. [ 130.917276][ T4492] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 130.919215][ T4492] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 16 72 6f a4 .............ro. [ 130.921106][ T4492] 00000060: ff ff ff ff b2 47 c7 b6 00 00 00 00 00 00 00 05 .....G.......... [ 130.923430][ T4492] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 130.939816][ T7362] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 131.010845][ T4030] XFS (loop3): Unmounting Filesystem [ 131.054534][ T7397] netlink: 'syz.2.1090': attribute type 27 has an invalid length. [ 131.064555][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.066104][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.067536][ T4028] XFS (loop1): Unmounting Filesystem [ 131.154701][ T7397] bond0: (slave bond_slave_0): Releasing backup interface [ 131.357864][ T7399] loop0: detected capacity change from 0 to 8192 [ 131.502649][ T7399] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 131.504823][ T7399] REISERFS (device loop0): using ordered data mode [ 131.506152][ T7399] reiserfs: using flush barriers [ 131.508054][ T7399] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.511620][ T7399] REISERFS (device loop0): checking transaction log (loop0) [ 131.538618][ T7399] REISERFS (device loop0): Using r5 hash to sort names [ 131.542557][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 131.592714][ T7399] reiserfs: enabling write barrier flush mode [ 131.620128][ T7399] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 131.663653][ T7414] loop1: detected capacity change from 0 to 2048 [ 131.943047][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 131.964787][ T7421] loop4: detected capacity change from 0 to 4096 [ 132.430014][ T7432] loop3: detected capacity change from 0 to 32768 [ 132.560779][ T7432] XFS (loop3): Mounting V5 Filesystem [ 132.582571][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 132.734785][ T7432] XFS (loop3): Ending clean mount [ 132.737563][ T7432] XFS (loop3): Quotacheck needed: Please wait. [ 132.778045][ T7465] mkiss: ax0: crc mode is auto. [ 132.780191][ T7432] XFS (loop3): Quotacheck: Done. [ 132.934601][ T7469] loop2: detected capacity change from 0 to 4096 [ 132.955193][ T7442] loop0: detected capacity change from 0 to 32768 [ 132.992978][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 133.077874][ T4030] XFS (loop3): Unmounting Filesystem [ 133.115283][ T7482] loop4: detected capacity change from 0 to 1024 [ 133.139708][ T7482] EXT4-fs (loop4): Ignoring removed orlov option [ 133.143586][ T7442] XFS (loop0): Mounting V5 Filesystem [ 133.200635][ T7482] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000010000,orlov,barrier=0x0000000000000002,jqfmt=vfsv1,i_version,minixdf,data_err=abort,max_batch_time=0x0000000000000002,bsdgroups,min_batch_time=0x0000000000000002,quota,,errors=continue. Quota mode: writeback. [ 133.252917][ T7492] loop1: detected capacity change from 0 to 256 [ 133.292115][ T7442] XFS (loop0): Ending clean mount [ 133.300990][ T7442] XFS (loop0): Quotacheck needed: Please wait. [ 133.425063][ T7442] XFS (loop0): Quotacheck: Done. [ 133.564479][ T4029] XFS (loop0): Unmounting Filesystem [ 133.632533][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 133.888605][ T7496] loop4: detected capacity change from 0 to 32768 [ 133.907280][ T7502] loop3: detected capacity change from 0 to 164 [ 133.951471][ T7502] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 133.967172][ T7496] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1126 (7496) [ 133.993937][ T7502] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 133.996004][ T7496] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 133.997965][ T7496] BTRFS info (device loop4): use zlib compression, level 3 [ 133.999364][ T7496] BTRFS info (device loop4): using free space tree [ 134.000789][ T7496] BTRFS info (device loop4): has skinny extents [ 134.022908][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 134.240530][ T7496] BTRFS info (device loop4): enabling ssd optimizations [ 134.396861][ T7541] loop3: detected capacity change from 0 to 1024 [ 134.435390][ T7541] EXT4-fs (loop3): Ignoring removed orlov option [ 134.551490][ T7541] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000010000,orlov,barrier=0x0000000000000002,jqfmt=vfsv1,i_version,minixdf,data_err=abort,max_batch_time=0x0000000000000002,bsdgroups,min_batch_time=0x0000000000000002,quota,,errors=continue. Quota mode: writeback. [ 134.672536][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 134.703228][ T7507] loop2: detected capacity change from 0 to 32768 [ 134.754587][ T7507] read_mapping_page failed! [ 134.755527][ T7507] ERROR: (device loop2): txAbort: [ 134.755527][ T7507] [ 135.072934][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 135.150767][ T7551] loop1: detected capacity change from 0 to 4096 [ 135.299728][ T7548] loop4: detected capacity change from 0 to 32768 [ 135.351098][ T7564] loop2: detected capacity change from 0 to 128 [ 135.383647][ T7561] loop0: detected capacity change from 0 to 2048 [ 135.398305][ T7548] XFS (loop4): Mounting V5 Filesystem [ 135.465432][ T7564] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.608762][ T7548] XFS (loop4): Ending clean mount [ 135.613744][ T7548] XFS (loop4): Quotacheck needed: Please wait. [ 135.708867][ T7548] XFS (loop4): Quotacheck: Done. [ 135.712558][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 135.995598][ T7584] loop1: detected capacity change from 0 to 1024 [ 136.025956][ T7587] loop0: detected capacity change from 0 to 64 [ 136.051834][ T7584] EXT4-fs (loop1): Ignoring removed orlov option [ 136.060106][ T4040] XFS (loop4): Unmounting Filesystem [ 136.092347][ T7584] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000010000,orlov,barrier=0x0000000000000002,jqfmt=vfsv1,i_version,minixdf,data_err=abort,max_batch_time=0x0000000000000002,bsdgroups,min_batch_time=0x0000000000000002,quota,,errors=continue. Quota mode: writeback. [ 136.102933][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 136.194074][ T7579] loop2: detected capacity change from 0 to 32768 [ 136.245597][ T7579] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1139 (7579) [ 136.319985][ T7591] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1156'. [ 136.326272][ T7579] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 136.328046][ T7579] BTRFS info (device loop2): use zlib compression, level 3 [ 136.329650][ T7579] BTRFS info (device loop2): using free space tree [ 136.330968][ T7579] BTRFS info (device loop2): has skinny extents [ 136.549880][ T7579] BTRFS info (device loop2): enabling ssd optimizations [ 136.742588][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 137.152876][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 137.400711][ T7616] loop0: detected capacity change from 0 to 32768 [ 137.413280][ T7629] loop2: detected capacity change from 0 to 2048 [ 137.480333][ T7599] loop1: detected capacity change from 0 to 40427 [ 137.484522][ T7616] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1158 (7616) [ 137.503929][ T7629] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 137.529082][ T7616] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 137.529876][ T7599] F2FS-fs (loop1): invalid crc value [ 137.531171][ T7616] BTRFS info (device loop0): using free space tree [ 137.543189][ T7616] BTRFS info (device loop0): has skinny extents [ 137.568523][ T7599] F2FS-fs (loop1): Found nat_bits in checkpoint [ 137.581763][ T7599] F2FS-fs (loop1): Start checkpoint disabled! [ 137.623350][ T7599] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 137.629681][ T7629] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,bsddf,bsddf,usrjquota=,. Quota mode: writeback. [ 137.687691][ T7625] loop4: detected capacity change from 0 to 40427 [ 137.745553][ T7625] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 137.746949][ T7625] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 137.763024][ T7625] F2FS-fs (loop4): invalid crc value [ 137.782628][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 137.795968][ T7599] attempt to access beyond end of device [ 137.795968][ T7599] loop1: rw=2049, want=45104, limit=40427 [ 137.809958][ T7599] attempt to access beyond end of device [ 137.809958][ T7599] loop1: rw=2049, want=45160, limit=40427 [ 137.814710][ T7616] BTRFS info (device loop0): enabling ssd optimizations [ 137.831066][ T7625] F2FS-fs (loop4): Found nat_bits in checkpoint [ 137.848498][ T7599] attempt to access beyond end of device [ 137.848498][ T7599] loop1: rw=2049, want=45104, limit=40427 [ 137.902026][ T7660] loop3: detected capacity change from 0 to 128 [ 137.903481][ T7625] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 137.905052][ T7625] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 137.914636][ T7659] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1152: bg 0: block 234: padding at end of block bitmap is not set [ 137.927449][ T7659] EXT4-fs (loop2): Remounting filesystem read-only [ 137.998998][ T7660] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.055345][ T546] attempt to access beyond end of device [ 138.055345][ T546] loop1: rw=2049, want=40976, limit=40427 [ 138.182981][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 138.307484][ T7625] attempt to access beyond end of device [ 138.307484][ T7625] loop4: rw=2049, want=45152, limit=40427 [ 138.391665][ T4040] attempt to access beyond end of device [ 138.391665][ T4040] loop4: rw=2049, want=45168, limit=40427 [ 138.820382][ T7671] loop3: detected capacity change from 0 to 4096 [ 138.832584][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 138.878622][ T7671] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 138.940734][ T7671] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 139.222845][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 139.256582][ T7667] loop2: detected capacity change from 0 to 32768 [ 139.358557][ T7667] XFS (loop2): Mounting V5 Filesystem [ 139.415061][ T7698] loop1: detected capacity change from 0 to 4096 [ 139.428950][ T7702] loop3: detected capacity change from 0 to 2048 [ 139.461144][ T7667] XFS (loop2): Ending clean mount [ 139.461540][ T7698] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 139.476709][ T7702] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.528332][ T7679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.629805][ T7698] ntfs3: loop1: failed to convert "076c" to cp775 [ 139.631839][ T4033] XFS (loop2): Unmounting Filesystem [ 139.681589][ T7698] ntfs3: loop1: ino=5, "/" directory corrupted [ 139.721157][ T7706] loop0: detected capacity change from 0 to 128 [ 139.821771][ T7710] loop1: detected capacity change from 0 to 2048 [ 139.830747][ T7706] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.862578][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 139.882722][ T7710] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 140.080353][ T7710] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,bsddf,bsddf,usrjquota=,. Quota mode: writeback. [ 140.261040][ T7721] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1170: bg 0: block 234: padding at end of block bitmap is not set [ 140.272889][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 140.278862][ T7721] EXT4-fs (loop1): Remounting filesystem read-only [ 140.288726][ T7704] loop4: detected capacity change from 0 to 32768 [ 140.335888][ T7704] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1169 (7704) [ 140.379429][ T7704] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 140.381371][ T7704] BTRFS info (device loop4): using free space tree [ 140.388948][ T7704] BTRFS info (device loop4): has skinny extents [ 140.478405][ T7714] loop3: detected capacity change from 0 to 32768 [ 140.536757][ T7732] netlink: 'syz.1.1177': attribute type 3 has an invalid length. [ 140.545914][ T7714] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1174 (7714) [ 140.664985][ T4039] Bluetooth: hci4: link tx timeout [ 140.666244][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.671546][ T4039] Bluetooth: hci4: link tx timeout [ 140.672758][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.683179][ T7714] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 140.685008][ T7714] BTRFS info (device loop3): using free space tree [ 140.686416][ T7714] BTRFS info (device loop3): has skinny extents [ 140.694755][ T7720] loop2: detected capacity change from 0 to 32768 [ 140.699237][ T4039] Bluetooth: hci4: link tx timeout [ 140.700371][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.702323][ T4039] Bluetooth: hci4: link tx timeout [ 140.703589][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.705316][ T4039] Bluetooth: hci4: link tx timeout [ 140.706532][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.707747][ T7704] BTRFS info (device loop4): enabling ssd optimizations [ 140.708179][ T4039] Bluetooth: hci4: link tx timeout [ 140.710603][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.716535][ T4039] Bluetooth: hci4: link tx timeout [ 140.717722][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.719491][ T4039] Bluetooth: hci4: link tx timeout [ 140.720683][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.722356][ T4039] Bluetooth: hci4: link tx timeout [ 140.723491][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.725533][ T4039] Bluetooth: hci4: link tx timeout [ 140.726683][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.728393][ T4039] Bluetooth: hci4: link tx timeout [ 140.729579][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.731338][ T4039] Bluetooth: hci4: link tx timeout [ 140.732335][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.735116][ T4039] Bluetooth: hci4: link tx timeout [ 140.736222][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.738219][ T4039] Bluetooth: hci4: link tx timeout [ 140.739417][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.741160][ T4039] Bluetooth: hci4: link tx timeout [ 140.742289][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.744957][ T4039] Bluetooth: hci4: link tx timeout [ 140.746040][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.747821][ T4039] Bluetooth: hci4: link tx timeout [ 140.748984][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.750879][ T4039] Bluetooth: hci4: link tx timeout [ 140.752100][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.754607][ T4039] Bluetooth: hci4: link tx timeout [ 140.755702][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.757442][ T4039] Bluetooth: hci4: link tx timeout [ 140.758575][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.760254][ T4039] Bluetooth: hci4: link tx timeout [ 140.761385][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.773309][ T4039] Bluetooth: hci4: link tx timeout [ 140.774429][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.776103][ T4039] Bluetooth: hci4: link tx timeout [ 140.777203][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.778899][ T4039] Bluetooth: hci4: link tx timeout [ 140.780033][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.781788][ T4039] Bluetooth: hci4: link tx timeout [ 140.782953][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.785591][ T4039] Bluetooth: hci4: link tx timeout [ 140.786697][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.788452][ T4039] Bluetooth: hci4: link tx timeout [ 140.789508][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.791178][ T4039] Bluetooth: hci4: link tx timeout [ 140.792256][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.794769][ T4039] Bluetooth: hci4: link tx timeout [ 140.795856][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.797649][ T4039] Bluetooth: hci4: link tx timeout [ 140.798819][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.800421][ T4039] Bluetooth: hci4: link tx timeout [ 140.801489][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.803967][ T4039] Bluetooth: hci4: link tx timeout [ 140.805037][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.806782][ T4039] Bluetooth: hci4: link tx timeout [ 140.807954][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.809715][ T4039] Bluetooth: hci4: link tx timeout [ 140.810803][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.814009][ T4039] Bluetooth: hci4: link tx timeout [ 140.815103][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.819857][ T4039] Bluetooth: hci4: link tx timeout [ 140.820983][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.824871][ T4039] Bluetooth: hci4: link tx timeout [ 140.826005][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.829755][ T4039] Bluetooth: hci4: link tx timeout [ 140.830915][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.833187][ T4039] Bluetooth: hci4: link tx timeout [ 140.834283][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.836082][ T4039] Bluetooth: hci4: link tx timeout [ 140.837207][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.839073][ T4039] Bluetooth: hci4: link tx timeout [ 140.840196][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.841983][ T4039] Bluetooth: hci4: link tx timeout [ 140.843189][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.848919][ T7720] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1182 (7720) [ 140.852828][ T4039] Bluetooth: hci4: link tx timeout [ 140.853894][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.855501][ T4039] Bluetooth: hci4: link tx timeout [ 140.856527][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.904361][ T7759] loop0: detected capacity change from 0 to 1024 [ 140.912573][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 140.938483][ T7720] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 140.940309][ T7720] BTRFS info (device loop2): enabling auto defrag [ 140.941719][ T7720] BTRFS info (device loop2): doing ref verification [ 140.956574][ T7720] BTRFS info (device loop2): use no compression [ 140.957925][ T7720] BTRFS info (device loop2): force clearing of disk cache [ 140.972954][ T7720] BTRFS info (device loop2): max_inline at 4096 [ 140.974393][ T7720] BTRFS info (device loop2): disabling free space tree [ 140.975916][ T7720] BTRFS info (device loop2): has skinny extents [ 141.030266][ T7714] BTRFS info (device loop3): enabling ssd optimizations [ 141.206166][ T7720] BTRFS info (device loop2): enabling ssd optimizations [ 141.208684][ T7720] BTRFS info (device loop2): clearing free space tree [ 141.210194][ T7720] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 141.212180][ T7720] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 141.260663][ T7773] loop1: detected capacity change from 0 to 40427 [ 141.312893][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 141.342903][ T7773] F2FS-fs (loop1): invalid crc value [ 141.364768][ T7773] F2FS-fs (loop1): Found nat_bits in checkpoint [ 141.415656][ T7773] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 141.720988][ T4028] attempt to access beyond end of device [ 141.720988][ T4028] loop1: rw=2049, want=45104, limit=40427 [ 141.918197][ T7806] loop0: detected capacity change from 0 to 32768 [ 141.942623][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 141.982011][ T7806] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1197 (7806) [ 142.082954][ T7806] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 142.084767][ T7806] BTRFS info (device loop0): using free space tree [ 142.086224][ T7806] BTRFS info (device loop0): has skinny extents [ 142.352733][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 142.385312][ T7806] BTRFS info (device loop0): enabling ssd optimizations [ 142.457877][ T7850] loop4: detected capacity change from 0 to 4096 [ 142.499504][ T6800] hid-generic 0005:04F3:FFF9.0001: item fetching failed at offset 0/1 [ 142.501848][ T6800] hid-generic: probe of 0005:04F3:FFF9.0001 failed with error -22 [ 142.656003][ T7850] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 142.752659][ T4080] Bluetooth: hci4: command 0x0406 tx timeout [ 142.808973][ T7864] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 142.814888][ T7850] ntfs3: loop4: failed to convert "076c" to cp775 [ 142.820102][ T7850] ntfs3: loop4: ino=5, "/" directory corrupted [ 142.968282][ T7873] loop2: detected capacity change from 0 to 512 [ 142.982613][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 143.017984][ T7873] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 143.017984][ T7873] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 143.017984][ T7873] [ 143.104051][ T7873] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.1208: corrupted inode contents [ 143.138765][ T7873] EXT4-fs (loop2): Remounting filesystem read-only [ 143.140253][ T7873] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #3: comm syz.2.1208: mark_inode_dirty error [ 143.147919][ T7873] EXT4-fs (loop2): Remounting filesystem read-only [ 143.189548][ T7873] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.1208: corrupted inode contents [ 143.197312][ T7873] EXT4-fs (loop2): Remounting filesystem read-only [ 143.198885][ T7873] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.1208: mark_inode_dirty error [ 143.218608][ T7873] EXT4-fs (loop2): Remounting filesystem read-only [ 143.262881][ T7873] __quota_error: 4 callbacks suppressed [ 143.262895][ T7873] Quota error (device loop2): write_blk: dquota write failed [ 143.266118][ T7873] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 143.268276][ T7873] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.1208: Failed to acquire dquot type 0 [ 143.329317][ T7873] EXT4-fs (loop2): Remounting filesystem read-only [ 143.382807][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 143.387429][ T7873] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.1208: corrupted inode contents [ 143.393636][ T7873] EXT4-fs (loop2): Remounting filesystem read-only [ 143.395024][ T7873] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #16: comm syz.2.1208: mark_inode_dirty error [ 143.400312][ T7873] EXT4-fs (loop2): Remounting filesystem read-only [ 143.401727][ T7873] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.1208: corrupted inode contents [ 143.429466][ T7873] EXT4-fs (loop2): Remounting filesystem read-only [ 143.430832][ T7873] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.1208: mark_inode_dirty error [ 143.442896][ T7873] EXT4-fs (loop2): Remounting filesystem read-only [ 143.444583][ T7873] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.1208: corrupted inode contents [ 143.471071][ T7873] EXT4-fs (loop2): Remounting filesystem read-only [ 143.478816][ T7873] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 143.481224][ T7873] EXT4-fs (loop2): Remounting filesystem read-only [ 143.483003][ T7873] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.1208: corrupted inode contents [ 143.492772][ T7873] EXT4-fs (loop2): Remounting filesystem read-only [ 143.494147][ T7873] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.1208: mark_inode_dirty error [ 143.502808][ T7873] EXT4-fs (loop2): Remounting filesystem read-only [ 143.504242][ T7873] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 143.513233][ T7873] EXT4-fs (loop2): Remounting filesystem read-only [ 143.523842][ T7873] EXT4-fs (loop2): 1 truncate cleaned up [ 143.524961][ T7873] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,. Quota mode: writeback. [ 143.660710][ T7873] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.1208: corrupted inode contents [ 143.669270][ T7873] EXT4-fs (loop2): Remounting filesystem read-only [ 143.670639][ T7873] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #3: comm syz.2.1208: mark_inode_dirty error [ 143.690726][ T7873] EXT4-fs (loop2): Remounting filesystem read-only [ 143.699673][ T7873] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.1208: corrupted inode contents [ 143.706457][ T7879] loop3: detected capacity change from 0 to 32768 [ 143.728371][ T7861] loop1: detected capacity change from 0 to 32768 [ 143.741355][ T7873] EXT4-fs (loop2): Remounting filesystem read-only [ 143.746176][ T7873] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.1208: mark_inode_dirty error [ 143.754123][ T7879] XFS: noikeep mount option is deprecated. [ 143.755371][ T7879] XFS: noikeep mount option is deprecated. [ 143.762320][ T7873] EXT4-fs (loop2): Remounting filesystem read-only [ 143.778985][ T7873] Quota error (device loop2): write_blk: dquota write failed [ 143.779658][ T7861] gfs2: fsid=gfs2: Trying to join cluster "lock_dlm", "gfs2" [ 143.780958][ T7873] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 143.785584][ T7873] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.1208: Failed to acquire dquot type 0 [ 143.791273][ T7873] EXT4-fs (loop2): Remounting filesystem read-only [ 143.810628][ T7861] gfs2: fsid=gfs2: no fsname found [ 143.871687][ T7881] loop4: detected capacity change from 0 to 32768 [ 143.879083][ T7870] loop0: detected capacity change from 0 to 32768 [ 143.885019][ T7879] XFS (loop3): Mounting V5 Filesystem [ 143.904812][ T7881] XFS: ikeep mount option is deprecated. [ 143.987114][ T7870] XFS (loop0): Mounting V5 Filesystem [ 143.994583][ T7881] XFS (loop4): Mounting V5 Filesystem [ 144.032569][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 144.043153][ T7879] XFS (loop3): Ending clean mount [ 144.046803][ T7879] XFS (loop3): Quotacheck needed: Please wait. [ 144.046808][ T26] audit: type=1326 audit(144.020:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.2.1211" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94a24a68 code=0x7ffc0000 [ 144.117500][ T26] audit: type=1326 audit(144.090:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.2.1211" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff94a24a68 code=0x7ffc0000 [ 144.128350][ T26] audit: type=1326 audit(144.090:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.2.1211" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94a24a68 code=0x7ffc0000 [ 144.169104][ T7881] XFS (loop4): Ending clean mount [ 144.171784][ T7881] XFS (loop4): Quotacheck needed: Please wait. [ 144.173891][ T26] audit: type=1326 audit(144.090:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.2.1211" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94a24a68 code=0x7ffc0000 [ 144.176191][ T7879] XFS (loop3): Quotacheck: Done. [ 144.178598][ T26] audit: type=1326 audit(144.090:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.2.1211" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffff94a24a68 code=0x7ffc0000 [ 144.194425][ T26] audit: type=1326 audit(144.090:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.2.1211" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94a24a68 code=0x7ffc0000 [ 144.208340][ T7870] XFS (loop0): Ending clean mount [ 144.233282][ T7870] XFS (loop0): Quotacheck needed: Please wait. [ 144.241077][ T7881] XFS (loop4): Quotacheck: Done. [ 144.250833][ T4030] XFS (loop3): Unmounting Filesystem [ 144.300457][ T7911] input: syz0 as /devices/virtual/input/input7 [ 144.322320][ T7870] XFS (loop0): Quotacheck: Done. [ 144.422720][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 144.431576][ T4029] XFS (loop0): Unmounting Filesystem [ 144.441203][ T4040] XFS (loop4): Unmounting Filesystem [ 144.909657][ T7909] loop2: detected capacity change from 0 to 32768 [ 144.977591][ T7929] loop4: detected capacity change from 0 to 256 [ 145.003395][ T7929] exfat: Deprecated parameter 'namecase' [ 145.004563][ T7929] exfat: Deprecated parameter 'utf8' [ 145.005692][ T7929] exfat: Deprecated parameter 'namecase' [ 145.006914][ T7929] exfat: Deprecated parameter 'utf8' [ 145.026046][ T7927] loop0: detected capacity change from 0 to 4096 [ 145.036417][ T7929] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 145.042209][ T7935] device wireguard0 entered promiscuous mode [ 145.046753][ T7909] XFS (loop2): Mounting V5 Filesystem [ 145.062559][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 145.071475][ T7927] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 145.201070][ T7927] ntfs3: loop0: failed to convert "076c" to cp775 [ 145.207879][ T7909] XFS (loop2): Ending clean mount [ 145.210605][ T7909] XFS (loop2): Quotacheck needed: Please wait. [ 145.218256][ T7927] ntfs3: loop0: ino=5, "/" directory corrupted [ 145.311639][ T7909] XFS (loop2): Quotacheck: Done. [ 145.402841][ T4033] XFS (loop2): Unmounting Filesystem [ 145.462731][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 145.484185][ T7953] loop4: detected capacity change from 0 to 4096 [ 145.573607][ T7955] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.871883][ T7968] loop0: detected capacity change from 0 to 1024 [ 145.940978][ T7971] loop2: detected capacity change from 0 to 2048 [ 146.020373][ T7968] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.084962][ T7975] loop3: detected capacity change from 0 to 8192 [ 146.089390][ T7971] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.102550][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 146.113229][ T7984] device wireguard0 entered promiscuous mode [ 146.115454][ T7971] fs-verity: sha512 using implementation "sha512-arm64" [ 146.134747][ T7975] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 146.136714][ T7975] REISERFS (device loop3): using ordered data mode [ 146.137995][ T7975] reiserfs: using flush barriers [ 146.139965][ T7975] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.145861][ T7975] REISERFS (device loop3): checking transaction log (loop3) [ 146.151756][ T7975] REISERFS (device loop3): Using rupasov hash to sort names [ 146.156016][ T7975] REISERFS (device loop3): using 3.5.x disk format [ 146.157578][ T7975] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 146.167549][ T7975] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 146.174362][ T7975] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 146.176864][ T7975] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 146.206700][ T7975] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 146.209518][ T7975] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 146.224755][ T7990] loop1: detected capacity change from 0 to 512 [ 146.233513][ T7975] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 146.277897][ T7990] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 146.277897][ T7990] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 146.277897][ T7990] [ 146.375655][ T7990] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.1245: corrupted inode contents [ 146.378654][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 146.408315][ T7990] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #3: comm syz.1.1245: mark_inode_dirty error [ 146.411769][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 146.414360][ T7990] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.1245: corrupted inode contents [ 146.455600][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 146.463906][ T7990] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.1245: mark_inode_dirty error [ 146.480361][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 146.489849][ T7990] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.1245: Failed to acquire dquot type 0 [ 146.498398][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 146.502764][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 146.531482][ T7990] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.1245: corrupted inode contents [ 146.535618][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 146.535639][ T7990] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #16: comm syz.1.1245: mark_inode_dirty error [ 146.537186][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 146.537220][ T7990] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.1245: corrupted inode contents [ 146.540512][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 146.540532][ T7990] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.1245: mark_inode_dirty error [ 146.540861][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 146.540904][ T7990] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.1245: corrupted inode contents [ 146.541666][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 146.541684][ T7990] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 146.545937][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 146.545971][ T7990] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.1245: corrupted inode contents [ 146.546334][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 146.546351][ T7990] EXT4-fs error (device loop1): ext4_truncate:4272: inode #16: comm syz.1.1245: mark_inode_dirty error [ 146.547046][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 146.547064][ T7990] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 146.547394][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 146.549447][ T7990] EXT4-fs (loop1): 1 truncate cleaned up [ 146.549472][ T7990] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,. Quota mode: writeback. [ 146.582287][ T8002] loop2: detected capacity change from 0 to 4096 [ 146.595965][ T8004] input: syz0 as /devices/virtual/input/input8 [ 146.636360][ T7990] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.1245: corrupted inode contents [ 146.637177][ T8006] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.637832][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 146.637853][ T7990] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #3: comm syz.1.1245: mark_inode_dirty error [ 146.652476][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 146.712965][ T7990] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.1245: corrupted inode contents [ 146.724651][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 146.726140][ T7990] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.1245: mark_inode_dirty error [ 146.732786][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 146.734680][ T7990] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.1245: Failed to acquire dquot type 0 [ 146.753753][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 146.952308][ T8021] loop4: detected capacity change from 0 to 1024 [ 147.019390][ T8025] loop1: detected capacity change from 0 to 2048 [ 147.100842][ T8021] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.145348][ T8025] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.152560][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 147.268977][ T8013] loop3: detected capacity change from 0 to 32768 [ 147.301277][ T8037] device wireguard0 entered promiscuous mode [ 147.333064][ T8013] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1252 (8013) [ 147.385552][ T8013] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 147.387245][ T8013] BTRFS info (device loop3): turning on flush-on-commit [ 147.388760][ T8013] BTRFS info (device loop3): disabling tree log [ 147.392921][ T8013] BTRFS info (device loop3): doing ref verification [ 147.394192][ T8013] BTRFS info (device loop3): force clearing of disk cache [ 147.395692][ T8013] BTRFS info (device loop3): enabling disk space caching [ 147.397156][ T8013] BTRFS info (device loop3): setting nodatacow, compression disabled [ 147.398729][ T8013] BTRFS info (device loop3): enabling ssd optimizations [ 147.400203][ T8013] BTRFS info (device loop3): using spread ssd allocation scheme [ 147.419352][ T8013] BTRFS info (device loop3): max_inline at 4096 [ 147.420705][ T8013] BTRFS info (device loop3): disk space caching is enabled [ 147.434856][ T8013] BTRFS info (device loop3): has skinny extents [ 147.542778][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 147.669416][ T8013] BTRFS info (device loop3): clearing free space tree [ 147.670948][ T8013] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 147.683114][ T8013] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 147.773425][ T8029] loop2: detected capacity change from 0 to 32768 [ 147.819725][ T8013] BTRFS error (device loop3): balance: invalid convert metadata profile raid10 [ 147.826140][ T8029] XFS: noikeep mount option is deprecated. [ 147.827448][ T8029] XFS: noikeep mount option is deprecated. [ 148.097650][ T8029] XFS (loop2): Mounting V5 Filesystem [ 148.182620][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 148.220616][ T8029] XFS (loop2): Ending clean mount [ 148.223693][ T8029] XFS (loop2): Quotacheck needed: Please wait. [ 148.231666][ T8055] loop1: detected capacity change from 0 to 32768 [ 148.283823][ T8055] XFS: ikeep mount option is deprecated. [ 148.340869][ T8029] XFS (loop2): Quotacheck: Done. [ 148.362712][ T8055] XFS (loop1): Mounting V5 Filesystem [ 148.467366][ T8055] XFS (loop1): Ending clean mount [ 148.473605][ T4033] XFS (loop2): Unmounting Filesystem [ 148.490748][ T8055] XFS (loop1): Quotacheck needed: Please wait. [ 148.583507][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 148.593452][ T8055] XFS (loop1): Quotacheck: Done. [ 148.687175][ T8105] loop0: detected capacity change from 0 to 512 [ 148.733047][ T4028] XFS (loop1): Unmounting Filesystem [ 148.778378][ T8105] EXT4-fs (loop0): Ignoring removed bh option [ 148.869869][ T8105] EXT4-fs (loop0): 1 truncate cleaned up [ 148.871159][ T8105] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 148.944416][ T8103] loop3: detected capacity change from 0 to 32768 [ 149.033520][ T8098] loop4: detected capacity change from 0 to 32768 [ 149.049431][ T8103] XFS (loop3): Mounting V5 Filesystem [ 149.099224][ T8121] loop0: detected capacity change from 0 to 64 [ 149.222541][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 149.233265][ T8103] XFS (loop3): Ending clean mount [ 149.237380][ T8103] XFS (loop3): Quotacheck needed: Please wait. [ 149.313221][ T8103] XFS (loop3): Quotacheck: Done. [ 149.325087][ T8098] XFS (loop4): Mounting V5 Filesystem [ 149.386188][ T4030] XFS (loop3): Unmounting Filesystem [ 149.497227][ T8098] XFS (loop4): Ending clean mount [ 149.506278][ T8098] XFS (loop4): Quotacheck needed: Please wait. [ 149.535740][ T8130] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 149.555602][ T8098] XFS (loop4): Quotacheck: Done. [ 149.571509][ T8130] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.575516][ T8130] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.632734][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 149.662883][ T4040] XFS (loop4): Unmounting Filesystem [ 149.687942][ T8137] loop0: detected capacity change from 0 to 256 [ 149.689706][ T8137] exfat: Deprecated parameter 'namecase' [ 149.690907][ T8137] exfat: Deprecated parameter 'utf8' [ 149.691999][ T8137] exfat: Deprecated parameter 'namecase' [ 149.694706][ T8137] exfat: Deprecated parameter 'utf8' [ 149.742721][ T8139] loop2: detected capacity change from 0 to 1024 [ 149.807134][ T8137] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 149.869513][ T8139] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.262600][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 150.346078][ T8143] loop1: detected capacity change from 0 to 32768 [ 150.379018][ T8157] netlink: 'syz.0.1294': attribute type 1 has an invalid length. [ 150.391358][ T8157] netlink: 'syz.0.1294': attribute type 2 has an invalid length. [ 150.402546][ T8143] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1288 (8143) [ 150.459741][ T8143] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 150.461827][ T8143] BTRFS info (device loop1): turning off barriers [ 150.468127][ T8143] BTRFS info (device loop1): enabling all of the rescue options [ 150.469794][ T8143] BTRFS info (device loop1): ignoring data csums [ 150.472244][ T8143] BTRFS info (device loop1): ignoring bad roots [ 150.482510][ T8143] BTRFS info (device loop1): disabling log replay at mount time [ 150.484145][ T8143] BTRFS info (device loop1): setting nodatacow, compression disabled [ 150.485794][ T8143] BTRFS info (device loop1): turning on flush-on-commit [ 150.487319][ T8143] BTRFS info (device loop1): using free space tree [ 150.492307][ T8143] BTRFS info (device loop1): has skinny extents [ 150.672788][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 150.725760][ T8182] loop3: detected capacity change from 0 to 512 [ 150.746889][ T8143] BTRFS info (device loop1): enabling ssd optimizations [ 150.750103][ T8182] EXT4-fs (loop3): Ignoring removed bh option [ 150.776827][ T8143] BTRFS error (device loop1): nologreplay must be used with ro mount option [ 150.798717][ T8182] EXT4-fs (loop3): 1 truncate cleaned up [ 150.800114][ T8182] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 151.302631][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 151.611584][ T8223] loop0: detected capacity change from 0 to 24 [ 151.642063][ T8227] loop2: detected capacity change from 0 to 256 [ 151.655198][ T8223] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 151.674809][ T8223] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 151.702738][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 151.839696][ T8233] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid' [ 151.839696][ T8233] [ 152.034004][ T136] ------------[ cut here ]------------ [ 152.035557][ T136] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 152.038235][ T136] WARNING: CPU: 1 PID: 136 at net/mac80211/rate.c:376 __rate_control_send_low+0x580/0x774 [ 152.040256][ T136] Modules linked in: [ 152.041085][ T136] CPU: 1 PID: 136 Comm: kworker/u4:1 Not tainted 5.15.173-syzkaller #0 [ 152.042852][ T136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 152.044952][ T136] Workqueue: phy11 ieee80211_scan_work [ 152.046165][ T136] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 152.047736][ T136] pc : __rate_control_send_low+0x580/0x774 [ 152.048941][ T136] lr : __rate_control_send_low+0x580/0x774 [ 152.050177][ T136] sp : ffff80001bf871d0 [ 152.051066][ T136] x29: ffff80001bf87220 x28: ffff0000d92e3370 x27: 000000000000000c [ 152.052772][ T136] x26: dfff800000000000 x25: 0000000000000000 x24: 00000000ffffffff [ 152.054480][ T136] x23: ffff0000d13af028 x22: 0000000000000000 x21: 000000000000000c [ 152.056079][ T136] x20: 1fffe0001b25c670 x19: ffff0000d92e3378 x18: 0000000000000201 [ 152.057897][ T136] x17: 0000000000000000 x16: ffff800011b4c108 x15: 00000000ffffffff [ 152.059760][ T136] x14: ffff0000c0b89b40 x13: 0000000000000001 x12: 0000000000000001 [ 152.061540][ T136] x11: 0000000000000200 x10: 0000000000000000 x9 : 60143088004ae300 [ 152.063201][ T136] x8 : 60143088004ae300 x7 : 0000000000000001 x6 : 0000000000000001 [ 152.064848][ T136] x5 : ffff80001bf86938 x4 : ffff800014c405e0 x3 : ffff800008555e80 [ 152.066581][ T136] x2 : 0000000000000001 x1 : 0000000100000200 x0 : 0000000000000056 [ 152.068255][ T136] Call trace: [ 152.068941][ T136] __rate_control_send_low+0x580/0x774 [ 152.070031][ T136] rate_control_send_low+0x16c/0x694 [ 152.071259][ T136] rate_control_get_rate+0x1a4/0x4b0 [ 152.072413][ T136] ieee80211_tx_h_rate_ctrl+0x988/0x143c [ 152.073602][ T136] invoke_tx_handlers_late+0xa8/0x1320 [ 152.074815][ T136] ieee80211_tx+0x278/0x400 [ 152.075744][ T136] ieee80211_xmit+0x29c/0x3c0 [ 152.076828][ T136] __ieee80211_tx_skb_tid_band+0x13c/0x1cc [ 152.078045][ T136] ieee80211_scan_state_send_probe+0x4f4/0x83c [ 152.079462][ T136] ieee80211_scan_work+0x470/0x19b0 [ 152.080628][ T136] process_one_work+0x790/0x11b8 [ 152.081668][ T136] worker_thread+0x910/0x1034 [ 152.082681][ T136] kthread+0x37c/0x45c [ 152.083560][ T136] ret_from_fork+0x10/0x20 [ 152.084509][ T136] irq event stamp: 3278487 [ 152.085398][ T136] hardirqs last enabled at (3278486): [] __up_console_sem+0xb4/0x100 [ 152.087508][ T136] hardirqs last disabled at (3278487): [] el1_dbg+0x24/0x80 [ 152.089382][ T136] softirqs last enabled at (3278280): [] batadv_nc_purge_paths+0x308/0x38c [ 152.091484][ T136] softirqs last disabled at (3278470): [] local_bh_disable+0x10/0x34 [ 152.093517][ T136] ---[ end trace c066bfdaa8460cb5 ]--- [ 152.103788][ T8214] overlayfs: statfs failed on './file0' [ 152.342603][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 152.397242][ T8251] loop4: detected capacity change from 0 to 32768 [ 152.491387][ T8251] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1334 (8251) [ 152.502961][ T8251] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 152.505396][ T8251] BTRFS info (device loop4): turning off barriers [ 152.507071][ T8251] BTRFS info (device loop4): enabling all of the rescue options [ 152.508898][ T8251] BTRFS info (device loop4): ignoring data csums [ 152.510425][ T8251] BTRFS info (device loop4): ignoring bad roots [ 152.511984][ T8251] BTRFS info (device loop4): disabling log replay at mount time [ 152.514000][ T8251] BTRFS info (device loop4): setting nodatacow, compression disabled [ 152.515919][ T8251] BTRFS info (device loop4): turning on flush-on-commit [ 152.522592][ T8251] BTRFS info (device loop4): using free space tree [ 152.524251][ T8251] BTRFS info (device loop4): has skinny extents [ 152.552581][ T8251] BTRFS info (device loop4): enabling ssd optimizations [ 152.579758][ T8251] BTRFS error (device loop4): nologreplay must be used with ro mount option [ 152.742720][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 153.382587][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 153.782728][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 154.422561][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 154.822756][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 155.462579][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 155.872838][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 156.512589][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 156.902749][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 157.542541][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 157.942808][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 158.582642][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 158.982771][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 159.622570][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 160.022759][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 160.662563][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 161.062864][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 161.702558][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available