last executing test programs: 1m12.61898002s ago: executing program 1 (id=3345): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000480), &(0x7f0000000440)=0x6a) 1m12.597319856s ago: executing program 1 (id=3346): r0 = openat$vimc2(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000180)={0x2, 0x1, 0x1, {0x7, 0x23, 0x107, 0x1ff}}) 1m12.51745452s ago: executing program 1 (id=3354): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/10, 0xa, 0x5) 1m12.453061457s ago: executing program 1 (id=3358): syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@errors_continue}, {@gid}, {@umask={'umask', 0x3d, 0x6}}, {@errors_remount}, {@discard}, {@time_offset={'time_offset', 0x3d, 0x4}}, {@utf8}, {@gid}, {@keep_last_dots}], [{@uid_eq}]}, 0x20, 0x1528, &(0x7f0000001ac0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 1m12.363268929s ago: executing program 1 (id=3372): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 1m11.860299349s ago: executing program 1 (id=3395): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1m11.860153918s ago: executing program 32 (id=3395): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1m7.476372364s ago: executing program 2 (id=3572): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89b0, &(0x7f0000000340)={'vlan0\x00', @random="00009e0c1100"}) 1m7.393316748s ago: executing program 2 (id=3576): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x81, 0x0, 0x80, @local}, 0x10) 1m7.333000356s ago: executing program 2 (id=3580): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2c8, 0x3, 0x338, 0x0, 0x229, 0x240, 0x208, 0x4c000000, 0x2a0, 0x328, 0x328, 0x2a0, 0x328, 0x3, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge0\x00'}, 0x0, 0x1e8, 0x208, 0x0, {0x0, 0x700}, [@common=@inet=@hashlimit2={{0x150}, {'veth1_to_team\x00', {0x0, 0x100000007, 0x0, 0x0, 0x0, 0x8000, 0x38}}}, @common=@inet=@ecn={{0x28}, {0x51}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 1m7.228258475s ago: executing program 2 (id=3586): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000500)={[{@noquota}, {@gid}, {@errors_continue}, {@errors_continue}, {@gid={'gid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@quota}, {@errors_continue}, {@discard_size}]}, 0x1, 0x61c0, &(0x7f0000006740)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 1m6.992867298s ago: executing program 2 (id=3594): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000100001002abd7000fcdbc30800000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d400000008000a00", @ANYBLOB="c63c38"], 0x44}}, 0x0) 1m1.700853293s ago: executing program 2 (id=3611): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='unlock me'], 0xb) 1m1.509243565s ago: executing program 33 (id=3611): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='unlock me'], 0xb) 566.274713ms ago: executing program 3 (id=6714): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5218) 513.660262ms ago: executing program 3 (id=6718): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@init_itable}, {@sysvgroups}, {@orlov}]}, 0x1, 0x4cf, &(0x7f0000000500)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000700, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xee00, 0x8cffffff00000000) 458.743931ms ago: executing program 5 (id=6720): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000700)={0x0, [[0x9ef8, 0x0, 0x2, 0x1ff], [0x10000, 0xfffffffc, 0x9], [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90a]], '\x00', [{0x3, 0xffffffff}, {0x3, 0xfffffffb}, {0x0, 0x8}, {0x1, 0x80000000}, {0x3, 0x0, 0x0, 0x1, 0x1}, {0x18, 0x5f}, {0xffffffff, 0x10}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0xfffffffe}, {0x8, 0x12}, {0x7, 0xffffffff}], '\x00', 0x1004}) 457.520481ms ago: executing program 6 (id=6721): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 412.803573ms ago: executing program 0 (id=6722): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) chroot(&(0x7f00000002c0)='.\x00') 412.583502ms ago: executing program 5 (id=6723): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000780)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000ce0100000000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x20000000, 0x0, 0xfffffffffffffffc) 411.596302ms ago: executing program 4 (id=6732): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0x18}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6}]}}}]}, 0x3c}}, 0x0) 405.474681ms ago: executing program 5 (id=6724): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000240)={[{@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@fat=@discard}, {@uni_xlate}, {@uni_xlate}, {@numtail}, {@uni_xlate}, {@utf8no}, {@utf8no}]}, 0x26, 0x34c, &(0x7f0000001ac0)="$eJzs3T9oJGUUAPC3mU12EziTQji0Wu0EOS4RC21MOE44TKEni/8aFy7nn+wqZHEhFtlLo1gqNoJWdldoebVYiNhZ2HqCnIqN1x3c4cjuTHY3mcn9EbOn3u9XhJf3fW++byZDdhKSt6+uxua52Th/9eqVqNcrUV09tRrXKrEUM5FE5kIAAP8n19I0/kgzw8RTN5v90ULMZtHcVHYHAByF4ev/a8fGidrd3A0AMA2Fn//LPVuaffvItgUAHKHC6//D+4YP/Jq/OvqbAADgv+v5l15+Zm094myjUY/ovN9r9prx5Hh87Xy8Ee3YiJOxGDcisgeF7Glh8PHpM+unTzYGflmK5qCi14zo9HvN7ElhLRnW12I5FmMpr09H9cmgfnlY34iIC/3h+tGp9JqzsZCv/+NCbMRKLMb9hfqIM+unVxr5AZqdvfp+xG7U905isP8TsRjfzww/OReD2uxYg8zOcqNxKl3fV9+7WBvOAwAAAAAAAAAAAAAAAAAAAACAo3BiPvLuOY2lUf+btNPvvXc2n9Aojg/7+2TDeX+g3aw/UFrb687zQXKwP9D+/jy9ZjVm7uqZAwAAAAAAAAAAAAAAAAAAwL9Hd3suWu32xlZ3+93NcTDX7k9k3vr2i6/n4+CcN5NxJqrZ4fbNyXMxUZXEqDwdlafJvjl5kETkkyvRunhptOPJObXRWRTKB0GtMFTJ99Rqt4899POnZVV/jjNJjIbqpUtU8vUnhjr3Zamy/dw8qHS3V24x53KapoeV73xSrIp6RLXwhfsngm+uvP7AY93jj3cr1c3WV3nTh0ceXXzh8sef/7bZakd+adrtua3ujfRvr5VM3D+V/DpXSu6E8mB3nNnd6m63kh9+f/HBD787MDkpv3/Sycw7h6/15cHMXBYMtnk7ZzpbcvOXB69cH929d34xj3+22rq089OvexfzVlUT3yQ06gAAAAAAAAAAAAAAAAAAgKmY+F/xO/DEc0e3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYvvH7/08Eu4XM7QTX+1Ecqm1sdQ9dfH6qpwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD3srwAAAP//JT9zjQ==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 357.028311ms ago: executing program 3 (id=6725): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) fanotify_init(0x1200, 0x0) 288.827238ms ago: executing program 6 (id=6726): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f00000001c0), 0x0}, 0x20) 288.530978ms ago: executing program 0 (id=6727): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x34, 0x38, 0x9, 0x0, 0x0, {0x1}, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x6}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x04\x06'}]}, @typed={0x8, 0x2, 0x0, 0x0, @u32}]}, 0x34}}, 0x0) 284.660837ms ago: executing program 4 (id=6728): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x2c, 0x19, 0x115, 0x70bd2b, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 222.388404ms ago: executing program 6 (id=6729): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@acquire={0x134, 0x17, 0x1, 0x70bd27, 0x25dfdbfe, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0xff}, @in=@loopback, {@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x100, 0x4e20, 0x3, 0x2, 0xe0, 0x20, 0x3b, 0x0, 0xffffffffffffffff}, {{@in=@remote, @in=@broadcast, 0x4e21, 0x9, 0x4e22, 0x83, 0xa, 0x20, 0x0, 0xc}, {0x7f, 0xec2b, 0x5, 0xa, 0xd5, 0x6, 0x6, 0xb}, {0x80000000000007, 0xa0, 0x200000000009, 0x200000000000000}, 0x81, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x3, 0x1, 0x200, 0x70bd29}, [@sec_ctx={0xc, 0x8, {0x4b, 0x8, 0x0, 0x7e}}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 176.947226ms ago: executing program 4 (id=6730): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000e20000000000000000000002850000002c0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 176.742766ms ago: executing program 0 (id=6731): r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) 176.589215ms ago: executing program 3 (id=6733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x64, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 176.076075ms ago: executing program 5 (id=6734): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0xc8, 0x8, 0x180, 0x5803, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x118, 0x180, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@pkttype={{0x28}, {0x7, 0xddad}}, @common=@dst={{0x48}, {0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'dvmrp0\x00', 'batadv_slave_1\x00', 0x12, 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 166.213533ms ago: executing program 6 (id=6735): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x0, 0x1a0, 0x98, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'rose0\x00', 'macvlan1\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth1_virt_wifi\x00', 'gre0\x00', {}, {}, 0x6, 0x0, 0x45}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@helper={{0x48}, {0x0, 'irc-20000\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) 151.87056ms ago: executing program 4 (id=6736): syz_emit_ethernet(0x32, &(0x7f0000000180)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100, @val=0x80}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x8}}}}}, 0x0) 108.772082ms ago: executing program 0 (id=6737): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8005, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x1, 0x1, 0x3, "9adf66552fb8af2b9f14f35681de96a590d25f2744e043cc1e70c317fd81ee00", 0x32314d56}) 108.300492ms ago: executing program 3 (id=6738): syz_mount_image$fuse(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)='cifs\x00', 0x0, 0x0) 105.671381ms ago: executing program 5 (id=6739): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x1, 0x1, 0x0}) 103.996561ms ago: executing program 4 (id=6740): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0xc02, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@x={0x94, 0x2, "7c7abbb7ff73"}) 86.260607ms ago: executing program 6 (id=6741): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000016ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 28.848896ms ago: executing program 0 (id=6742): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000000)=0x44) 28.567996ms ago: executing program 4 (id=6743): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$eJzs3c9OE10Yx/HfmSlteeHFUTAmxoVBia4M4Ma4aWKI1+BGI9KaEBqIiImysXFtvAD3bLwAL8KVMXGNK1deALsxZ3pKz7QzbYHQAfl+ktrO9Px5zsy0c56RZgTgwnq0sr93/7d9GClUKOmhFNi3bqok6aquVd9s7qzvNBv1QQ2FUlXJw0hJTdNXZm2zkVXV1ktqOJFdKmnaX4fTEcdx/KvoIFCkqnsOs94MpIr7dIZ+4bOs0rM80bPcCqXWGOM5i8yBDvRWM0XHAQAolmmf3wN3np928/cgkBbcad8////8v+B4T+aODooOoWDe+T/JsmJj9++l5K1uvmc06cp3ssSj9mPnYmW1j6zUBNOks8r+ZDGJJZh8ud5s3FvbatYDfVAtYfy8cE5STXWXs2ZF29/0fMa6tLK/sD+sdK6pZAwTdgzL3fhrNa/IbFanx93aozDfzHfzzET6rPrh/K8UG3/Mbk89nujGv5jX3Narp/Y5apfKGeVluxtK19MbduAow7yMRG5LxaHSFwiidJzlzFpl9dRqj24pryfXzmxmreUhteZsrS9ere7RnF/ztJlP5omZ1x991Yo3/w/s1l5Q/yczu5GkpDsyBo6nlJSM/FWtG5klg6OPBUfU3cYf9UIPNPP63e7GarPZ2B73CxvD2Du9mC8i9a7pHARnJcLjvbDfsf4aRY3t0nh6L59401XdTrGTmf4yld2N1YpfuD3Szgmxt8HOx3qE3jsX8IZGOMZvJRSmu9Pzy7wX/xPzD7NfHqad/3n5ymKS9Nh/ogHz9HjYtM1rcSkjN+heqv/Pa8m46/P5GdBUZgbX0mg5V1L31l3ptrdyf68yKOeKdEWH2fD5Z1b0Q8+5/g8AAAAAAAAAAAAAAAAAAHDejOPXGl53/B05AAAAAAAAAAAAAAAAAAAAAADHkH//36pO8f6/qd8BjHz/394bewI4kb8BAAD//+jIZ98=") syz_mount_image$fuse(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, 0x0, 0x0, 0x0, 0x0) 28.477256ms ago: executing program 3 (id=6744): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xbd, 0x7, 0x47425247, 0x64737664, [0x3fe, 0xfffffffb], [0x7fff, 0x2], 0x1}}) 26.951985ms ago: executing program 6 (id=6745): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x2, 0x8}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {}], 0x70) 16.113263ms ago: executing program 0 (id=6746): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="0203ff030c00000020000000fddbdf25010009000000000003000600000000000200000000000000000000000000000002000100000000000000fb0b00000000030005000000000002000000ac141daa0000000000000000010014"], 0x60}, 0x1, 0x7}, 0x0) 0s ago: executing program 5 (id=6747): r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000400)={0x0, 0x50424752, 0x2, @discrete={0xffffffff}}) kernel console output (not intermixed with test programs): info (device loop4): balance: start -susage=281479271678209,usage=257..65537,devid=0,drange=6..6,limit=31381 [ 95.533962][T12363] BTRFS info (device loop4): balance: ended with status: 0 [ 95.550776][ T4321] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 95.626904][T12383] overlayfs: missing 'lowerdir' [ 95.627506][ T4313] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 13 /dev/loop4 scanned by udevd (4313) [ 95.720712][ T9] bond1 (unregistering): Released all slaves [ 96.875911][ T4324] Bluetooth: hci0: command 0x040f tx timeout [ 97.818706][ T9] team0 (unregistering): Port device team_slave_1 removed [ 97.977472][ T9] team0 (unregistering): Port device team_slave_0 removed [ 98.188568][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.386643][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.955817][ T4336] Bluetooth: hci0: command 0x0419 tx timeout [ 99.937364][ T9] bond0 (unregistering): Released all slaves [ 100.259284][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.260810][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.268052][T12353] netlink: 'syz.0.3589': attribute type 7 has an invalid length. [ 100.271854][T11820] device veth0_macvtap entered promiscuous mode [ 100.275406][T11820] device veth1_macvtap entered promiscuous mode [ 100.324812][ T91] ERROR: (device loop2): diFree: numfree > numinos [ 100.324812][ T91] [ 100.391450][T12392] netlink: 'syz.4.3600': attribute type 5 has an invalid length. [ 100.392700][T12392] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3600'. [ 100.396079][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.397815][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.399257][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.401570][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.431269][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.433012][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.434453][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.442379][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.443963][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.445509][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.445616][T12409] syz.4.3605 uses obsolete (PF_INET,SOCK_PACKET) [ 100.458789][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.460561][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.472185][T11820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.474298][T12393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.479805][T12393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.490415][ T4333] ERROR: (device loop2): diFree: numfree > numinos [ 100.490415][ T4333] [ 100.500361][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.502021][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.512251][T12402] loop0: detected capacity change from 0 to 32768 [ 100.514033][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.515738][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.517525][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.521585][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.523105][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.535081][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.537528][T11820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.538829][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.540547][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.544587][T12402] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.3602 (12402) [ 100.554919][T12402] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.565483][T12402] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 100.570948][T12402] BTRFS info (device loop0): using free space tree [ 100.573694][T11820] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.575054][T11820] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.590229][T11820] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.591629][T11820] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.594942][T12418] loop3: detected capacity change from 0 to 512 [ 100.661906][T12418] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 100.663246][T12418] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 100.690105][T12418] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.691227][T12418] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 100.692684][T12418] EXT4-fs warning (device loop3): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 100.694758][T12418] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 100.721069][T12418] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3609: bg 0: block 40: padding at end of block bitmap is not set [ 100.739038][T12418] EXT4-fs (loop3): Remounting filesystem read-only [ 100.740124][T12418] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 100.745372][T12418] EXT4-fs (loop3): Remounting filesystem read-only [ 100.754234][T12418] EXT4-fs (loop3): 1 truncate cleaned up [ 100.755304][T12418] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 100.776090][T12402] BTRFS info (device loop0): enabling ssd optimizations [ 100.784332][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.785578][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.786416][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 100.838813][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.845467][ T4326] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.973175][T12393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.974498][T12393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.977416][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.109240][ T4336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 101.112513][ T4336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.114274][ T4336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.128982][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.142096][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 101.144886][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.209592][T12490] netlink: 'syz.0.3625': attribute type 13 has an invalid length. [ 101.210859][T12490] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3625'. [ 101.271910][T12490] erspan0: refused to change device tx_queue_len [ 101.273020][T12490] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 101.294926][T12498] netlink: 'syz.5.3628': attribute type 10 has an invalid length. [ 101.297206][T12498] device veth1_macvtap left promiscuous mode [ 101.574694][T12533] loop3: detected capacity change from 0 to 256 [ 101.730636][T12542] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 101.841508][T12530] device bond0 entered promiscuous mode [ 101.842441][T12530] device bond_slave_0 entered promiscuous mode [ 101.843496][T12530] device bond_slave_1 entered promiscuous mode [ 101.846804][T12475] chnl_net:caif_netlink_parms(): no params data found [ 102.016927][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.029706][T12569] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 102.060114][T12475] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.061502][T12475] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.065307][T12475] device bridge_slave_0 entered promiscuous mode [ 102.104916][T12475] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.112088][T12475] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.113670][T12475] device bridge_slave_1 entered promiscuous mode [ 102.169288][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.181159][T12578] netlink: 'syz.4.3659': attribute type 13 has an invalid length. [ 102.182411][T12578] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3659'. [ 102.193822][T12578] erspan0: refused to change device tx_queue_len [ 102.194870][T12578] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 102.214616][T12475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.222373][T12525] loop5: detected capacity change from 0 to 131072 [ 102.230508][T12475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.267733][T12525] F2FS-fs (loop5): Found nat_bits in checkpoint [ 102.282112][T12525] F2FS-fs (loop5): recover fsync data on readonly fs [ 102.283880][T12525] F2FS-fs (loop5): Mounted with checkpoint version = 1b41e955 [ 102.289813][T12525] F2FS-fs (loop5): Inconsistent error blkaddr:5633, sit bitmap:0 [ 102.293461][T12525] CPU: 0 PID: 12525 Comm: syz.5.3636 Not tainted syzkaller #0 [ 102.294565][T12525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 102.295974][T12525] Call trace: [ 102.296447][T12525] dump_backtrace+0x1c0/0x1ec [ 102.297185][T12525] show_stack+0x2c/0x3c [ 102.297816][T12525] __dump_stack+0x30/0x40 [ 102.298485][T12525] dump_stack_lvl+0xf4/0x15c [ 102.298936][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.299146][T12525] dump_stack+0x1c/0x5c [ 102.301410][T12525] f2fs_is_valid_blkaddr+0x9e4/0xf44 [ 102.302201][T12525] f2fs_get_read_data_page+0x24c/0x60c [ 102.303019][T12525] f2fs_find_data_page+0x1c4/0x520 [ 102.303805][T12525] __f2fs_find_entry+0x530/0xc14 [ 102.304513][T12525] f2fs_lookup+0x218/0x8f4 [ 102.305172][T12525] path_openat+0xc98/0x26bc [ 102.305840][T12525] do_filp_open+0x194/0x384 [ 102.306585][T12525] do_sys_openat2+0x134/0x3f4 [ 102.307329][T12525] __arm64_sys_openat+0x118/0x14c [ 102.308073][T12525] invoke_syscall+0x98/0x2b4 [ 102.308728][T12525] el0_svc_common+0x138/0x258 [ 102.309461][T12525] do_el0_svc+0x58/0x130 [ 102.310081][T12525] el0_svc+0x58/0x128 [ 102.310706][T12525] el0t_64_sync_handler+0x84/0xf0 [ 102.311449][T12525] el0t_64_sync+0x18c/0x190 [ 102.322221][T12475] team0: Port device team_slave_0 added [ 102.331038][T12475] team0: Port device team_slave_1 added [ 102.376271][T12595] loop3: detected capacity change from 0 to 64 [ 102.407531][ T9] batman_adv: batadv0: Removing interface: netdevsim0 [ 102.420587][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.423389][T12475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.424435][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.429890][T12475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.456230][T12475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.457562][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.461244][T12475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.513019][T12605] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3678'. [ 102.518112][T12604] loop4: detected capacity change from 0 to 512 [ 102.556199][T12604] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 102.557431][T12604] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 102.559019][T12604] EXT4-fs (loop4): orphan cleanup on readonly fs [ 102.560110][T12604] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 102.561504][T12604] EXT4-fs warning (device loop4): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 102.563563][T12604] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 102.571894][T12587] loop0: detected capacity change from 0 to 32768 [ 102.577028][T12604] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3668: bg 0: block 40: padding at end of block bitmap is not set [ 102.577291][T12587] (syz.0.3661,12587,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.581587][T12604] EXT4-fs (loop4): Remounting filesystem read-only [ 102.582627][T12604] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 102.584866][T12604] EXT4-fs (loop4): Remounting filesystem read-only [ 102.587921][T12475] device hsr_slave_0 entered promiscuous mode [ 102.593377][T12604] EXT4-fs (loop4): 1 truncate cleaned up [ 102.594316][T12604] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 102.596664][T12587] (syz.0.3661,12587,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.617816][T12475] device hsr_slave_1 entered promiscuous mode [ 102.630097][T12587] JBD2: Ignoring recovery information on journal [ 102.697543][ T4321] EXT4-fs (loop4): unmounting filesystem. [ 102.723057][T12587] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 102.726249][T12475] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 102.767494][T12475] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 102.817998][T12475] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 102.821406][ T4326] ocfs2: Unmounting device (7,0) on (node local) [ 102.836101][T12626] loop4: detected capacity change from 0 to 2048 [ 102.837872][T12626] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 102.842167][T12626] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.850576][T12626] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry where CRC length (0) does not match entry length (32) [ 102.891847][T12475] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 103.077319][T12475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.152492][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.152846][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.154604][T12475] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.162256][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.162779][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.162954][ T4382] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.163005][ T4382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.163216][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.171291][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.171566][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.171723][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.186094][ T4382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.195900][ T4324] Bluetooth: hci4: command 0x0409 tx timeout [ 103.236651][T12663] device bond0 entered promiscuous mode [ 103.236671][T12663] device bond_slave_0 entered promiscuous mode [ 103.236743][T12663] device bond_slave_1 entered promiscuous mode [ 103.245316][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.246081][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.246492][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.254146][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.254823][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.255198][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.260328][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.260623][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.262402][T12475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.265540][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.483456][T12698] loop0: detected capacity change from 0 to 64 [ 103.498891][T12680] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3697'. [ 103.669373][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.670583][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.673645][T12475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.698411][T12723] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3711'. [ 103.999101][T12762] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3725'. [ 104.104425][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.106496][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.153836][T12727] loop4: detected capacity change from 0 to 40427 [ 104.156649][T12727] F2FS-fs (loop4): invalid crc value [ 104.159595][T12727] F2FS-fs (loop4): Found nat_bits in checkpoint [ 104.170684][T12776] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 104.173879][T12727] F2FS-fs (loop4): Start checkpoint disabled! [ 104.179443][T12727] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 104.190140][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.191898][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.193352][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.194741][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.200313][T12776] EXT4-fs (loop3): invalid journal inode [ 104.201393][T12776] EXT4-fs (loop3): can't get journal size [ 104.207527][T12475] device veth0_vlan entered promiscuous mode [ 104.219752][T12475] device veth1_vlan entered promiscuous mode [ 104.237913][T12776] EXT4-fs (loop3): 1 truncate cleaned up [ 104.238880][T12776] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 104.254617][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.256218][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.257608][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.259097][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.278095][T12475] device veth0_macvtap entered promiscuous mode [ 104.280930][T12475] device veth1_macvtap entered promiscuous mode [ 104.297011][T12785] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 104.305254][T12785] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.340004][T12785] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry where CRC length (0) does not match entry length (32) [ 104.356667][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 104.378944][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.380701][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.382179][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.383669][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.385027][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.394686][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.396767][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.398297][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.399791][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.401246][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.419607][T12475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.512175][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.513866][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.515319][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.528983][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.532076][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.533700][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.535056][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.537395][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.538839][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.540331][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.541834][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.543370][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.544753][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.561858][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.564072][T12475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.627364][T12393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.629134][T12393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.632324][T12475] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.633644][T12475] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.634991][T12475] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.640611][T12475] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.651197][T12813] device geneve2 entered promiscuous mode [ 104.758754][T12831] erofs: (device loop0): mounted with root inode @ nid 36. [ 104.792427][ T1573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.793775][ T1573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.795124][T12148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.825227][T12839] Cannot find del_set index 4 as target [ 104.835683][T12393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.837065][T12393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.838326][T12393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.861239][T12843] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3757'. [ 104.931457][T12852] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3760'. [ 105.202396][T12890] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3777'. [ 105.276161][ T4336] Bluetooth: hci4: command 0x041b tx timeout [ 105.425943][T12881] device netdevsim0 left promiscuous mode [ 105.722008][T12959] set_capacity_and_notify: 4 callbacks suppressed [ 105.722019][T12959] loop3: detected capacity change from 0 to 64 [ 105.811305][T12971] netlink: 'syz.6.3814': attribute type 1 has an invalid length. [ 105.847815][ T9] device hsr_slave_0 left promiscuous mode [ 105.880125][ T9] device hsr_slave_1 left promiscuous mode [ 105.939429][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.940720][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.944643][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.947286][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.950745][ T9] device bridge_slave_1 left promiscuous mode [ 105.952856][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.007095][ T9] device bridge_slave_0 left promiscuous mode [ 106.008201][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.115941][ T9] device veth1_macvtap left promiscuous mode [ 106.116939][ T9] device veth0_macvtap left promiscuous mode [ 106.117910][ T9] device veth1_vlan left promiscuous mode [ 106.118820][ T9] device veth0_vlan left promiscuous mode [ 106.137389][T12991] loop0: detected capacity change from 0 to 40427 [ 106.144257][T12991] F2FS-fs (loop0): invalid crc value [ 106.147229][T12991] F2FS-fs (loop0): Found nat_bits in checkpoint [ 106.159594][T12991] F2FS-fs (loop0): Start checkpoint disabled! [ 106.163678][T12991] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 106.321042][T13011] loop0: detected capacity change from 0 to 512 [ 106.333225][T13011] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 106.340119][T13011] EXT4-fs (loop0): invalid journal inode [ 106.343497][T13011] EXT4-fs (loop0): can't get journal size [ 106.361510][T13011] EXT4-fs (loop0): 1 truncate cleaned up [ 106.362958][T13011] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 106.417806][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 106.445604][T13018] __nla_validate_parse: 1 callbacks suppressed [ 106.445615][T13018] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3832'. [ 106.479397][T13020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3833'. [ 106.480915][T13020] netlink: 'syz.0.3833': attribute type 1 has an invalid length. [ 107.356146][ T4324] Bluetooth: hci4: command 0x040f tx timeout [ 107.626948][ T9] bond1 (unregistering): Released all slaves [ 109.435935][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 109.698091][ T9] team0 (unregistering): Port device team_slave_1 removed [ 109.858047][ T9] team0 (unregistering): Port device team_slave_0 removed [ 110.026985][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.247051][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.827956][ T9] bond0 (unregistering): Released all slaves [ 112.144563][T12986] netlink: 'syz.4.3819': attribute type 10 has an invalid length. [ 112.145991][T12989] netlink: 352 bytes leftover after parsing attributes in process `syz.3.3820'. [ 112.539144][T13088] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3859'. [ 112.711592][T13057] loop6: detected capacity change from 0 to 40427 [ 112.717159][T13057] F2FS-fs (loop6): invalid crc value [ 112.729873][T13057] F2FS-fs (loop6): Found nat_bits in checkpoint [ 112.753639][T13057] F2FS-fs (loop6): Start checkpoint disabled! [ 112.755868][T13120] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 112.757228][T13120] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 112.774067][T13057] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 112.840088][T13132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3877'. [ 112.927009][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3881'. [ 112.928536][T13147] netlink: 'syz.3.3881': attribute type 1 has an invalid length. [ 113.112568][T13173] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3890'. [ 113.189492][T13187] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 113.190879][T13187] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 113.228934][T13190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3900'. [ 113.448788][T13221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3912'. [ 113.504031][T13230] Cannot find del_set index 4 as target [ 113.533995][T13234] loop5: detected capacity change from 0 to 256 [ 113.550721][T13234] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 113.713861][T13257] netlink: 'syz.5.3928': attribute type 1 has an invalid length. [ 113.787359][T13267] xt_hashlimit: overflow, try lower: 6/0 [ 113.863122][T13280] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 113.865177][T13280] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 114.084842][T13264] loop6: detected capacity change from 0 to 32768 [ 114.140386][T13318] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 114.142479][T13318] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 114.145167][T13264] JBD2: Ignoring recovery information on journal [ 114.179336][T13264] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 114.251173][T12475] ocfs2: Unmounting device (7,6) on (node local) [ 114.370185][T13345] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3962'. [ 114.634277][T13373] loop4: detected capacity change from 0 to 4096 [ 114.666018][T13373] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 114.730569][T13388] xt_recent: hitcount (134217728) is larger than allowed maximum (255) [ 114.739877][T13349] loop3: detected capacity change from 0 to 32768 [ 114.767769][T13349] JBD2: Ignoring recovery information on journal [ 114.782151][T13395] SET target dimension over the limit! [ 114.794755][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3984'. [ 114.965248][T13349] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 115.152491][ T4325] ocfs2: Unmounting device (7,3) on (node local) [ 115.337585][T13458] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4009'. [ 115.401131][T13466] (unnamed net_device) (uninitialized): option mode: invalid value (81) [ 115.448326][T13421] loop5: detected capacity change from 0 to 32768 [ 115.450929][ T27] audit: type=1400 audit(371.432:2): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13468 comm="syz.4.4015" [ 115.474123][T13421] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 115.475451][T13421] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 115.501787][T13421] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 115.505162][ T5491] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 115.506816][ T5491] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 115.551750][T13485] loop6: detected capacity change from 0 to 256 [ 115.553942][ T5491] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 47ms [ 115.563513][T13485] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 115.568350][T13485] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 115.570327][ T5491] gfs2: fsid=syz:syz.0: jid=0: Done [ 115.571164][T13421] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 115.827728][T13514] loop3: detected capacity change from 0 to 1024 [ 115.909567][T13521] loop6: detected capacity change from 0 to 2048 [ 115.912445][T13521] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.961333][T13528] loop5: detected capacity change from 0 to 512 [ 115.994467][T13528] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 116.056815][ T11] hfsplus: b-tree write err: -5, ino 8 [ 116.075254][T11820] EXT4-fs (loop5): unmounting filesystem. [ 116.141774][T13556] virtio-fs: tag not found [ 116.429279][T13596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.484385][T13603] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 116.486060][T13603] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 116.489904][T13603] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 116.499313][T13603] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 116.500539][T13603] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 116.502138][T13603] EXT4-fs (loop5): orphan cleanup on readonly fs [ 116.508883][T13603] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.4060: bg 0: block 34: padding at end of block bitmap is not set [ 116.513397][T13603] Quota error (device loop5): write_blk: dquota write failed [ 116.514609][T13603] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 116.523562][T13603] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.4060: Failed to acquire dquot type 1 [ 116.532780][T13603] EXT4-fs (loop5): 1 truncate cleaned up [ 116.543199][T13603] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 116.578194][T11820] EXT4-fs (loop5): unmounting filesystem. [ 116.602944][T13615] erofs: (device loop6): mounted with root inode @ nid 36. [ 117.205908][T13714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4097'. [ 117.207416][T13714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4097'. [ 117.208976][T13714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4097'. [ 117.569965][T13771] FAT-fs (loop0): Directory bread(block 64) failed [ 117.571117][T13771] FAT-fs (loop0): Directory bread(block 65) failed [ 117.606095][T13771] FAT-fs (loop0): Directory bread(block 66) failed [ 117.607181][T13771] FAT-fs (loop0): Directory bread(block 67) failed [ 117.608661][T13771] FAT-fs (loop0): Directory bread(block 68) failed [ 117.609580][T13771] FAT-fs (loop0): Directory bread(block 69) failed [ 117.610603][T13771] FAT-fs (loop0): Directory bread(block 70) failed [ 117.611567][T13771] FAT-fs (loop0): Directory bread(block 71) failed [ 117.612561][T13771] FAT-fs (loop0): Directory bread(block 72) failed [ 117.627582][T13771] FAT-fs (loop0): Directory bread(block 73) failed [ 117.747704][T13795] IPv6: Can't replace route, no match found [ 117.940817][T13832] set_capacity_and_notify: 4 callbacks suppressed [ 117.940827][T13832] loop4: detected capacity change from 0 to 64 [ 117.953872][T13829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4145'. [ 118.016868][T13842] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4150'. [ 118.295192][T13834] loop5: detected capacity change from 0 to 32768 [ 118.313813][T13834] (syz.5.4147,13834,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 118.336914][T13834] (syz.5.4147,13834,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 118.359508][T13834] JBD2: Ignoring recovery information on journal [ 118.409267][T13834] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 118.456500][T13896] netlink: 'syz.4.4172': attribute type 10 has an invalid length. [ 118.465582][T13896] device veth1_macvtap left promiscuous mode [ 118.498961][T11820] ocfs2: Unmounting device (7,5) on (node local) [ 118.952131][T13975] xt_recent: hitcount (134217728) is larger than allowed maximum (255) [ 119.105441][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4215'. [ 119.238569][T14011] loop3: detected capacity change from 0 to 4096 [ 119.256616][T14011] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 119.347502][T14034] Cannot find del_set index 1 as target [ 119.361103][T14036] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 119.373240][T14036] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.432951][T14043] loop4: detected capacity change from 0 to 256 [ 119.460244][T14043] FAT-fs (loop4): Directory bread(block 64) failed [ 119.461267][T14043] FAT-fs (loop4): Directory bread(block 65) failed [ 119.462278][T14043] FAT-fs (loop4): Directory bread(block 66) failed [ 119.463228][T14043] FAT-fs (loop4): Directory bread(block 67) failed [ 119.464211][T14043] FAT-fs (loop4): Directory bread(block 68) failed [ 119.465221][T14043] FAT-fs (loop4): Directory bread(block 69) failed [ 119.482017][T14043] FAT-fs (loop4): Directory bread(block 70) failed [ 119.486161][T14043] FAT-fs (loop4): Directory bread(block 71) failed [ 119.487389][T14043] FAT-fs (loop4): Directory bread(block 72) failed [ 119.488394][T14043] FAT-fs (loop4): Directory bread(block 73) failed [ 119.776316][T14090] netlink: 'syz.0.4250': attribute type 2 has an invalid length. [ 119.777510][T14090] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.4250'. [ 119.831209][T14099] netlink: 'syz.0.4254': attribute type 79 has an invalid length. [ 119.903362][T14110] bad cache= option: nonw [ 119.903362][T14110] [ 119.904576][T14110] CIFS: VFS: bad cache= option: nonw [ 120.009454][T14124] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 120.103454][T14139] No such timeout policy "syz0" [ 120.129541][T14141] loop3: detected capacity change from 0 to 512 [ 120.130048][T14141] EXT2-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 120.130091][T14141] EXT2-fs (loop3): DAX unsupported by block device. Turning off DAX. [ 120.130596][T14141] EXT2-fs (loop3): error: revision level too high, forcing read-only mode [ 120.130603][T14141] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=800a8] [ 120.277706][T14159] loop4: detected capacity change from 0 to 16 [ 120.279295][T14159] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 120.595169][T14205] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4291'. [ 120.600664][T14203] netlink: 'syz.3.4292': attribute type 17 has an invalid length. [ 120.601967][T14203] netlink: 'syz.3.4292': attribute type 16 has an invalid length. [ 120.603099][T14203] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4292'. [ 120.650192][T14207] (unnamed net_device) (uninitialized): option mode: invalid value (81) [ 120.699427][ T27] audit: type=1400 audit(376.682:3): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14216 comm="syz.0.4297" [ 120.782422][T14231] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4302'. [ 120.886521][T14247] bond0: Unable to set up delay as MII monitoring is disabled [ 120.964055][T14257] loop3: detected capacity change from 0 to 2048 [ 120.977146][T14257] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.122123][T14285] loop5: detected capacity change from 0 to 1024 [ 121.200821][ T1573] hfsplus: b-tree write err: -5, ino 8 [ 121.232900][T14303] loop0: detected capacity change from 0 to 512 [ 121.267041][T14303] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 121.285681][T14312] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 121.312014][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 121.343458][T14314] loop4: detected capacity change from 0 to 2048 [ 121.357553][T14314] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.551509][T14337] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 121.579864][T12475] EXT4-fs (loop6): unmounting filesystem. [ 121.825908][T14346] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 13 [ 121.862588][T13898] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.080672][T14408] virtio-fs: tag not found [ 122.133316][T14418] No such timeout policy "syz0" [ 122.257091][T14431] EXT2-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 122.263387][T14431] EXT2-fs (loop0): DAX unsupported by block device. Turning off DAX. [ 122.269828][T14431] EXT2-fs (loop0): error: revision level too high, forcing read-only mode [ 122.271115][T14431] EXT2-fs (loop0): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=800a8] [ 122.442180][T14458] bond0: Unable to set up delay as MII monitoring is disabled [ 122.825476][T14512] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 122.946102][T14531] erofs: (device loop3): mounted with root inode @ nid 36. [ 123.079016][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4446'. [ 123.080449][T14548] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4446'. [ 123.086181][T14548] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4446'. [ 123.089790][T14552] set_capacity_and_notify: 7 callbacks suppressed [ 123.089797][T14552] loop5: detected capacity change from 0 to 16 [ 123.107360][T14552] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 123.220875][T14564] loop4: detected capacity change from 0 to 64 [ 123.460177][T14598] loop4: detected capacity change from 0 to 512 [ 123.491404][T14598] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 123.492943][T14598] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 123.494482][T14598] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 123.507818][T14603] loop6: detected capacity change from 0 to 256 [ 123.521423][T14598] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 123.522700][T14598] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 123.524251][T14598] EXT4-fs (loop4): orphan cleanup on readonly fs [ 123.530588][T14598] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4470: bg 0: block 34: padding at end of block bitmap is not set [ 123.533064][T14598] Quota error (device loop4): write_blk: dquota write failed [ 123.534264][T14598] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 123.540521][T14598] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.4470: Failed to acquire dquot type 1 [ 123.545166][T14598] EXT4-fs (loop4): 1 truncate cleaned up [ 123.579031][T14598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 123.619289][T14614] binder: 14612:14614 ioctl 400c620e 0 returned -14 [ 123.638802][T14566] loop3: detected capacity change from 0 to 32768 [ 123.649191][T14566] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 123.650606][T14566] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 123.652529][ T4321] EXT4-fs (loop4): unmounting filesystem. [ 123.697120][T14566] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 123.713709][T14625] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 123.728385][ T5491] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 123.729480][ T5491] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 123.779082][ T5491] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 49ms [ 123.783190][ T5491] gfs2: fsid=syz:syz.0: jid=0: Done [ 123.784011][T14566] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 123.854093][T14643] loop0: detected capacity change from 0 to 512 [ 123.869899][T14643] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 123.871472][T14643] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 123.872906][T14643] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 123.881264][T14643] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 123.882476][T14643] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 123.884063][T14643] EXT4-fs (loop0): orphan cleanup on readonly fs [ 123.898039][T14648] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4493'. [ 123.905238][T14643] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4490: bg 0: block 34: padding at end of block bitmap is not set [ 123.956509][T14643] Quota error (device loop0): write_blk: dquota write failed [ 123.957958][T14643] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 123.959444][T14643] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.4490: Failed to acquire dquot type 1 [ 123.963304][T14643] EXT4-fs (loop0): 1 truncate cleaned up [ 123.981915][T14643] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 124.049120][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 124.082456][T14662] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4499'. [ 124.214891][T14677] netlink: 'syz.4.4508': attribute type 17 has an invalid length. [ 124.216200][T14677] netlink: 'syz.4.4508': attribute type 16 has an invalid length. [ 124.234161][T14677] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4508'. [ 124.284050][T14684] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 124.285655][T14684] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.437510][T14704] netlink: 'syz.4.4521': attribute type 2 has an invalid length. [ 124.443489][T14704] netlink: 207496 bytes leftover after parsing attributes in process `syz.4.4521'. [ 124.454133][T14706] netlink: 'syz.5.4523': attribute type 79 has an invalid length. [ 124.485687][T14710] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 124.544257][T14718] bad cache= option: nonw [ 124.544257][T14718] [ 124.545627][T14718] CIFS: VFS: bad cache= option: nonw [ 124.596949][T14723] x_tables: duplicate entry at hook 3 [ 124.613437][T14726] loop3: detected capacity change from 0 to 256 [ 124.646392][T14682] loop6: detected capacity change from 0 to 40427 [ 124.649558][T14682] F2FS-fs (loop6): Invalid log blocks per segment (4278190089) [ 124.650727][T14682] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 124.654105][T14726] FAT-fs (loop3): Directory bread(block 64) failed [ 124.655162][T14726] FAT-fs (loop3): Directory bread(block 65) failed [ 124.657560][T14726] FAT-fs (loop3): Directory bread(block 66) failed [ 124.658791][T14726] FAT-fs (loop3): Directory bread(block 67) failed [ 124.659943][T14726] FAT-fs (loop3): Directory bread(block 68) failed [ 124.661033][T14726] FAT-fs (loop3): Directory bread(block 69) failed [ 124.662061][T14726] FAT-fs (loop3): Directory bread(block 70) failed [ 124.663011][T14726] FAT-fs (loop3): Directory bread(block 71) failed [ 124.666515][T14726] FAT-fs (loop3): Directory bread(block 72) failed [ 124.667737][T14726] FAT-fs (loop3): Directory bread(block 73) failed [ 124.685826][T14682] F2FS-fs (loop6): invalid crc value [ 124.717484][T14682] F2FS-fs (loop6): Found nat_bits in checkpoint [ 124.733598][T14682] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 124.734734][T14682] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 124.741294][T14682] F2FS-fs (loop6): Corrupted max_depth of 3: 255 [ 124.763020][T14682] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 124.784299][T14744] binder: 14743:14744 ioctl 400c620e 0 returned -14 [ 125.059777][T14776] binfmt_misc: register: failed to install interpreter file ./file0 [ 125.246114][T14792] loop6: detected capacity change from 0 to 16 [ 125.278677][T14799] sctp: [Deprecated]: syz.0.4564 (pid 14799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.278677][T14799] Use struct sctp_sack_info instead [ 125.396758][ T27] audit: type=1107 audit(381.372:4): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 125.550453][T14839] loop0: detected capacity change from 0 to 16 [ 125.573528][T14842] IPv6: Can't replace route, no match found [ 125.583517][T14845] sctp: [Deprecated]: syz.4.4582 (pid 14845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.583517][T14845] Use struct sctp_sack_info instead [ 125.761646][T14870] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4595'. [ 125.790996][T14874] binfmt_misc: register: failed to install interpreter file ./file0 [ 125.891020][T14891] FAT-fs (loop3): Directory bread(block 64) failed [ 125.892091][T14891] FAT-fs (loop3): Directory bread(block 65) failed [ 125.893066][T14891] FAT-fs (loop3): Directory bread(block 66) failed [ 125.894009][T14891] FAT-fs (loop3): Directory bread(block 67) failed [ 125.895422][T14891] FAT-fs (loop3): Directory bread(block 68) failed [ 125.897415][T14891] FAT-fs (loop3): Directory bread(block 69) failed [ 125.898587][T14891] FAT-fs (loop3): Directory bread(block 70) failed [ 125.899906][T14891] FAT-fs (loop3): Directory bread(block 71) failed [ 125.900962][T14891] FAT-fs (loop3): Directory bread(block 72) failed [ 125.915491][T14891] FAT-fs (loop3): Directory bread(block 73) failed [ 125.918200][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.919210][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.969047][T14901] netlink: 'syz.5.4610': attribute type 2 has an invalid length. [ 126.079761][T14914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.341033][T14943] SQUASHFS error: Unable to read inode 0xa7 [ 126.343617][T14931] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 126.345669][T14931] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 126.378734][T14931] REISERFS (device loop0): using ordered data mode [ 126.379786][T14931] reiserfs: using flush barriers [ 126.398459][T14931] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 126.401159][T14931] REISERFS (device loop0): checking transaction log (loop0) [ 126.404016][T14940] (syz.4.4624,14940,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 126.406776][T14940] (syz.4.4624,14940,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 126.420573][T14940] JBD2: Ignoring recovery information on journal [ 126.454101][T14916] JBD2: Ignoring recovery information on journal [ 126.465687][T14931] REISERFS (device loop0): Using r5 hash to sort names [ 126.492113][T14931] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 126.492579][T14940] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 126.522381][T14916] (syz.6.4625,14916,0):ocfs2_clear_journal_error:1114 ERROR: File system error 33023 recorded in journal 0. [ 126.524164][T14916] (syz.6.4625,14916,0):ocfs2_clear_journal_error:1116 ERROR: File system on device loop6 needs checking. [ 126.533834][T14916] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 126.539422][T12393] (kworker/u4:8,12393,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4104: rec_len is smaller than minimal - offset=0, inode=4104, rec_len=8, name_len=0 [ 126.567413][T14916] (syz.6.4625,14916,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len is smaller than minimal - offset=0, inode=397313, rec_len=0, name_len=1 [ 126.569937][T14916] (syz.6.4625,14916,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 126.571217][T14916] (syz.6.4625,14916,0):ocfs2_mknod:298 ERROR: status = -2 [ 126.593264][T14960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4627'. [ 126.604574][T14916] (syz.6.4625,14916,0):ocfs2_mknod:502 ERROR: status = -2 [ 126.619776][T14916] (syz.6.4625,14916,0):ocfs2_mkdir:659 ERROR: status = -2 [ 126.682920][ T4321] ocfs2: Unmounting device (7,4) on (node local) [ 126.699394][T12475] ocfs2: Unmounting device (7,6) on (node local) [ 126.882358][T14997] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4643'. [ 126.897517][T14997] device vlan0 entered promiscuous mode [ 126.976653][T15007] cifs: Unknown parameter 'h}#úä [ 126.976653][T15007] Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚˜Aï1:ºÃÃÓ­'Ä4,9z «-#´IÜõ]%g' [ 127.072625][T15018] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 127.176438][T14996] (syz.3.4642,14996,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 127.178690][T14996] (syz.3.4642,14996,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 127.197332][T14996] JBD2: Ignoring recovery information on journal [ 127.382395][T14996] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 127.423771][T15055] netlink: 'syz.6.4662': attribute type 1 has an invalid length. [ 127.502682][ T4325] ocfs2: Unmounting device (7,3) on (node local) [ 127.559520][T15068] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 127.731928][T15094] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 127.934911][T15131] usb usb1: usbfs: process 15131 (syz.3.4693) did not claim interface 5 before use [ 128.222871][T15179] netlink: 'syz.3.4712': attribute type 1 has an invalid length. [ 128.330773][T15194] binder: 15191:15194 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 128.534291][T15173] set_capacity_and_notify: 12 callbacks suppressed [ 128.534301][T15173] loop6: detected capacity change from 0 to 32768 [ 128.574723][T15221] __nla_validate_parse: 3 callbacks suppressed [ 128.574736][T15221] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4726'. [ 128.608241][T15221] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 128.666052][T15235] sctp: [Deprecated]: syz.3.4734 (pid 15235) Use of int in maxseg socket option. [ 128.666052][T15235] Use struct sctp_assoc_value instead [ 128.763302][T15247] loop3: detected capacity change from 0 to 512 [ 128.765111][T15247] EXT2-fs (loop3): nobh option not supported [ 128.775156][T15247] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 128.796362][T15251] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 128.797796][T15251] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 128.816937][T15254] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4741'. [ 128.886897][T15264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4743'. [ 128.897305][T15262] loop5: detected capacity change from 0 to 16 [ 128.898631][T15262] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 128.965139][T15270] loop3: detected capacity change from 0 to 64 [ 128.983258][T15239] loop0: detected capacity change from 0 to 32768 [ 129.096455][T15283] loop3: detected capacity change from 0 to 4096 [ 129.105950][T15283] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 129.197541][ T4324] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 129.199021][ T4324] Bluetooth: hci4: Injecting HCI hardware error event [ 129.201367][ T4336] Bluetooth: hci4: hardware error 0x00 [ 129.246860][T15303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4760'. [ 129.554940][T15352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4780'. [ 129.556496][T15350] ip6t_srh: unknown srh invflags 7D00 [ 129.605256][T15358] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4782'. [ 129.612265][T15358] 0ªX¹¦À: renamed from caif0 [ 129.648603][T15360] loop3: detected capacity change from 0 to 2048 [ 129.661604][T15360] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.680314][T15358] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 129.813026][T15385] loop4: detected capacity change from 0 to 512 [ 129.874483][T15385] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.4795: couldn't read orphan inode 26 (err -116) [ 129.883772][T15385] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 129.922750][T15385] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #3: comm syz.4.4795: corrupted inode contents [ 129.931655][T15385] EXT4-fs error (device loop4): ext4_dirty_inode:6137: inode #3: comm syz.4.4795: mark_inode_dirty error [ 129.941913][T15385] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4795: bg 0: block 64: padding at end of block bitmap is not set [ 129.952122][T15385] Quota error (device loop4): write_blk: dquota write failed [ 129.957890][T15385] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 129.959527][T15385] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.4795: Failed to acquire dquot type 0 [ 130.028945][ T4321] EXT4-fs (loop4): unmounting filesystem. [ 130.035037][T15417] netlink: 'syz.6.4808': attribute type 8 has an invalid length. [ 130.142103][T15432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4815'. [ 130.247787][T15445] netlink: 'syz.6.4821': attribute type 6 has an invalid length. [ 130.432952][T15475] Soft offlining pfn 0x13d200 at process virtual address 0x20000000 [ 130.449474][T15475] Memory failure: 0x13d200: unhandlable page. [ 130.477878][T15481] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4840'. [ 130.604213][T15500] cgroup: Invalid name [ 130.651707][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4852'. [ 130.655308][T15508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4852'. [ 130.748151][T15519] loop3: detected capacity change from 0 to 2048 [ 130.778590][T15519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.804724][T15530] loop5: detected capacity change from 0 to 256 [ 130.806360][T15530] exfat: Deprecated parameter 'namecase' [ 130.822146][T15530] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 130.832395][T15530] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 130.852886][T15533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.922221][T15540] netlink: 'syz.3.4870': attribute type 1 has an invalid length. [ 131.119103][T15560] binder: 15557:15560 ERROR: BC_REGISTER_LOOPER called without request [ 131.120598][T15560] binder: 15557:15560 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 131.124285][T15560] binder: 15557:15560 got reply transaction with no transaction stack [ 131.145180][T15560] binder: 15557:15560 transaction reply to 0:0 failed 3/29201/-71, size 0-0 line 2946 [ 131.157863][ T8468] binder: undelivered TRANSACTION_ERROR: 29201 [ 131.185578][T15563] netdevsim netdevsim3: Direct firmware load for ýÿÿÿ failed with error -2 [ 131.194916][T15563] netdevsim netdevsim3: Falling back to sysfs fallback for: ýÿÿÿ [ 131.305124][T15573] erofs: (device loop0): mounted with root inode @ nid 36. [ 131.308183][T15573] erofs: (device loop0): erofs_read_inode: bogus i_mode (50355) @ nid 46 [ 131.345530][T15556] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.4878 (15556) [ 131.356432][T15556] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.358151][T15556] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 131.359342][T15556] BTRFS info (device loop5): using free space tree [ 131.438497][ T4336] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 131.472872][T15556] BTRFS info (device loop5): enabling ssd optimizations [ 131.565620][T15605] device netdevsim0 entered promiscuous mode [ 131.569165][T11820] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.570497][T15605] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 131.611011][T15528] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 131.860999][T15634] sock: sock_timestamping_bind_phc: sock not bind to device [ 131.945387][T13671] hfsplus: b-tree write err: -5, ino 4 [ 132.124898][T15663] netlink: 'syz.3.4921': attribute type 1 has an invalid length. [ 132.152522][T15667] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.154923][T15669] dlm: non-version read from control device 0 [ 132.180984][T15667] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0042] [ 132.182555][T15667] System zones: 1-12 [ 132.186966][T15667] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 33261: comm syz.0.4923: invalid block [ 132.197564][T15667] EXT4-fs (loop0): Remounting filesystem read-only [ 132.199917][T15667] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4923: invalid indirect mapped block 8 (level 2) [ 132.211450][T15667] EXT4-fs (loop0): Remounting filesystem read-only [ 132.216126][T15667] EXT4-fs (loop0): 1 truncate cleaned up [ 132.218345][T15667] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 132.253043][T15677] AppArmor: change_hat: Invalid input ''' [ 132.278802][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 132.597905][T15733] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 132.767806][T15761] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 132.796080][ T4336] Bluetooth: hci0: command 0x080f tx timeout [ 133.058882][T15797] xt_CT: No such helper "pptp" [ 133.107284][T15817] xt_socket: unknown flags 0xc [ 133.228992][T15833] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.243857][T15829] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 133.263043][T15829] Remounting filesystem read-only [ 133.506068][T15880] netlink: 'syz.5.5025': attribute type 10 has an invalid length. [ 133.507669][T15880] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 133.509271][T15880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.813337][T15917] __nla_validate_parse: 15 callbacks suppressed [ 133.813350][T15917] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5044'. [ 133.900503][T15933] xt_socket: unknown flags 0xc [ 133.954831][T15946] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5057'. [ 134.076739][T15965] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 134.207123][T15982] netlink: 'syz.3.5075': attribute type 5 has an invalid length. [ 134.380013][T16006] sctp: [Deprecated]: syz.4.5087 (pid 16006) Use of int in maxseg socket option. [ 134.380013][T16006] Use struct sctp_assoc_value instead [ 134.429914][T16015] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.5092'. [ 134.534736][T16028] delete_channel: no stack [ 134.549633][T16031] ip6t_srh: unknown srh invflags 7D00 [ 134.559621][T16033] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 134.562040][T16033] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 134.631139][T16037] set_capacity_and_notify: 8 callbacks suppressed [ 134.631149][T16037] loop0: detected capacity change from 0 to 2048 [ 134.672588][T16046] loop3: detected capacity change from 0 to 8 [ 134.674320][T16044] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.693211][T16046] SQUASHFS error: Failed to read block 0x636: -5 [ 134.696494][T16037] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 134.698925][T16046] SQUASHFS error: Unable to read metadata cache entry [634] [ 134.700099][T16046] SQUASHFS error: Unable to read metadata cache entry [634] [ 134.704604][T16046] SQUASHFS error: Unable to read directory block [629:0] [ 134.706388][T16037] Remounting filesystem read-only [ 135.099910][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5129'. [ 135.151770][T16075] loop3: detected capacity change from 0 to 32768 [ 135.278759][T16113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5140'. [ 135.509909][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5154'. [ 135.511290][T16142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5154'. [ 135.700733][T16130] loop5: detected capacity change from 0 to 32768 [ 135.763645][T16130] XFS (loop5): Mounting V5 Filesystem [ 135.811175][T16130] XFS (loop5): Ending clean mount [ 135.836544][T11820] XFS (loop5): Unmounting Filesystem [ 136.063974][T16214] loop3: detected capacity change from 0 to 1024 [ 136.104617][T16217] loop0: detected capacity change from 0 to 4096 [ 136.112380][T16217] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 136.494340][T16274] netlink: 'syz.0.5214': attribute type 1 has an invalid length. [ 136.495675][T16274] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5214'. [ 136.522638][T16280] loop3: detected capacity change from 0 to 512 [ 136.528770][T16281] loop4: detected capacity change from 0 to 24 [ 136.530297][T16281] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 136.538442][T16280] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 136.540125][T16280] EXT4-fs (loop3): orphan cleanup on readonly fs [ 136.542323][T16280] EXT4-fs warning (device loop3): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 136.544647][T16280] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 136.545845][T16281] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 136.558146][T16280] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.5215: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 136.561113][T16280] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.5215: couldn't read orphan inode 13 (err -117) [ 136.565032][T16280] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 136.574870][T16280] EXT4-fs error (device loop3): ext4_lookup:1858: comm syz.3.5215: inode #15: comm syz.3.5215: iget: illegal inode # [ 136.596303][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 136.611844][T16281] VFS: Lookup of 'file0' in romfs loop4 would have caused loop [ 136.688817][T16301] netlink: 'syz.4.5224': attribute type 1 has an invalid length. [ 136.707215][T16299] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 136.763472][T16310] binder: 16309:16310 ioctl c00c6211 9999999999999999 returned -14 [ 136.973341][T16341] loop0: detected capacity change from 0 to 2048 [ 136.987711][T16343] xt_cgroup: path and classid specified [ 136.994878][T16341] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.014195][T16348] netlink: 'syz.6.5247': attribute type 1 has an invalid length. [ 137.034622][T16346] loop3: detected capacity change from 0 to 4096 [ 137.050983][ T27] audit: type=1326 audit(393.032:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16351 comm="syz.6.5251" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d76de8 code=0x7ffc0000 [ 137.060396][T16346] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 137.081764][ T27] audit: type=1326 audit(393.062:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16351 comm="syz.6.5251" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff89d76de8 code=0x7ffc0000 [ 137.088329][ T27] audit: type=1326 audit(393.072:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16351 comm="syz.6.5251" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d76de8 code=0x7ffc0000 [ 137.189136][T16365] FAT-fs (loop5): Directory bread(block 64) failed [ 137.190306][T16365] FAT-fs (loop5): Directory bread(block 65) failed [ 137.191371][T16365] FAT-fs (loop5): Directory bread(block 66) failed [ 137.192280][T16370] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5259'. [ 137.192434][T16365] FAT-fs (loop5): Directory bread(block 67) failed [ 137.216558][T16365] FAT-fs (loop5): Directory bread(block 68) failed [ 137.217675][T16365] FAT-fs (loop5): Directory bread(block 69) failed [ 137.218787][T16365] FAT-fs (loop5): Directory bread(block 70) failed [ 137.219856][T16365] FAT-fs (loop5): Directory bread(block 71) failed [ 137.220944][T16365] FAT-fs (loop5): Directory bread(block 72) failed [ 137.222165][T16365] FAT-fs (loop5): Directory bread(block 73) failed [ 137.315088][T16372] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 137.371434][T16372] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #12: comm syz.3.5258: corrupted xattr block 6 [ 137.410818][T16385] ieee802154 phy0 wpan0: encryption failed: -90 [ 137.462033][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 137.567936][T16407] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 137.569612][T16407] EXT4-fs (loop0): orphan cleanup on readonly fs [ 137.571141][T16407] EXT4-fs warning (device loop0): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 137.586011][T16407] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 137.590138][T16407] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.5275: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 137.597247][T16407] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.5275: couldn't read orphan inode 13 (err -117) [ 137.599331][T16407] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 137.605702][T16414] Unable to read rock-ridge attributes [ 137.609078][T16414] Unable to read rock-ridge attributes [ 137.637459][T16407] EXT4-fs error (device loop0): ext4_lookup:1858: comm syz.0.5275: inode #15: comm syz.0.5275: iget: illegal inode # [ 137.675389][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 137.725737][T16428] overlayfs: missing 'lowerdir' [ 137.773527][T16431] netlink: 'syz.4.5286': attribute type 5 has an invalid length. [ 137.879321][T16446] xt_ecn: cannot match TCP bits for non-tcp packets [ 137.976385][T16457] netlink: 'syz.5.5302': attribute type 8 has an invalid length. [ 138.018898][T16465] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 138.060360][T16476] xt_TCPMSS: Only works on TCP SYN packets [ 138.219333][T16494] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5317'. [ 138.220804][T16494] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 138.408759][T16509] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 138.574804][T16493] XFS (loop5): Mounting V5 Filesystem [ 138.664708][T16493] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 138.688647][T16493] XFS (loop5): Starting recovery (logdev: internal) [ 138.737515][T16493] XFS (loop5): Ending recovery (logdev: internal) [ 138.765583][T16493] XFS (loop5): Metadata corruption detected at xfs_inobt_verify+0xb0/0x204, xfs_finobt block 0x8 [ 138.767516][T16493] XFS (loop5): Unmount and run xfs_repair [ 138.768330][T16493] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 138.769497][T16493] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 138.770784][T16493] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 138.771990][T16493] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 138.784504][T16493] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 138.788232][T16493] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 138.792058][T16493] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 138.793658][T16493] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 138.801343][T16493] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 138.804101][T16493] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x184/0x290" at daddr 0x8 len 8 error 117 [ 138.843202][T11820] XFS (loop5): Unmounting Filesystem [ 138.871083][T16572] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 138.882490][T16572] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #2: comm syz.6.5351: corrupted inode contents [ 138.890239][T16572] EXT4-fs error (device loop6): ext4_dirty_inode:6137: inode #2: comm syz.6.5351: mark_inode_dirty error [ 138.902290][T16572] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #2: comm syz.6.5351: corrupted inode contents [ 138.904939][T16572] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.5351: mark_inode_dirty error [ 138.960183][T12475] EXT4-fs (loop6): unmounting filesystem. [ 139.163340][T16614] device bond0 left promiscuous mode [ 139.164305][T16614] device bond_slave_0 left promiscuous mode [ 139.165305][T16614] device bond_slave_1 left promiscuous mode [ 139.349176][T16637] ntfs: volume version 3.1. [ 139.373418][T16637] ntfs: (device loop3): ntfs_truncate(): Truncate would cause the inode 0x43 to exceed the maximum size for its attribute type (0x80). Aborting truncate. [ 139.503256][T16664] __nla_validate_parse: 2 callbacks suppressed [ 139.503269][T16664] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5394'. [ 139.519839][T16664] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5394'. [ 139.567985][T16672] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 139.579337][T16666] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 139.617566][T16672] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 139.890095][T16714] netlink: 'syz.4.5421': attribute type 3 has an invalid length. [ 139.891343][T16714] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5421'. [ 139.933826][T16720] netlink: 'syz.6.5424': attribute type 10 has an invalid length. [ 139.966401][T16720] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.976236][T16720] bond0: (slave team0): Enslaving as an active interface with an up link [ 139.979182][T16724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5426'. [ 139.980664][T16724] netlink: 50 bytes leftover after parsing attributes in process `syz.3.5426'. [ 139.985318][T16724] netlink: 50 bytes leftover after parsing attributes in process `syz.3.5426'. [ 140.198840][T16755] overlayfs: missing 'lowerdir' [ 140.410861][T16779] random: crng reseeded on system resumption [ 140.561303][T16797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5461'. [ 140.562801][T16797] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5461'. [ 140.591584][T16803] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 140.639083][T16732] set_capacity_and_notify: 11 callbacks suppressed [ 140.639093][T16732] loop4: detected capacity change from 0 to 65536 [ 140.663936][T16811] loop5: detected capacity change from 0 to 256 [ 140.688256][T16811] FAT-fs (loop5): Directory bread(block 1285) failed [ 140.690981][T16811] FAT-fs (loop5): Directory bread(block 1286) failed [ 140.692139][T16811] FAT-fs (loop5): Directory bread(block 1287) failed [ 140.693241][T16811] FAT-fs (loop5): Directory bread(block 1288) failed [ 140.701989][T16732] XFS (loop4): Mounting V5 Filesystem [ 140.719635][T16811] FAT-fs (loop5): Directory bread(block 1285) failed [ 140.721054][T16811] FAT-fs (loop5): Directory bread(block 1286) failed [ 140.722001][T16811] FAT-fs (loop5): Directory bread(block 1287) failed [ 140.722943][T16811] FAT-fs (loop5): Directory bread(block 1288) failed [ 140.723918][T16811] FAT-fs (loop5): Directory bread(block 1285) failed [ 140.724896][T16811] FAT-fs (loop5): Directory bread(block 1286) failed [ 140.739518][T16817] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5468'. [ 140.761898][T16732] XFS (loop4): Ending clean mount [ 140.763244][T16732] XFS (loop4): Quotacheck needed: Please wait. [ 140.763554][T16801] loop6: detected capacity change from 0 to 32768 [ 140.802706][T16732] XFS (loop4): Quotacheck: Done. [ 140.823528][T16801] XFS (loop6): Mounting V5 Filesystem [ 140.860491][ T4321] XFS (loop4): Unmounting Filesystem [ 140.906006][T16801] XFS (loop6): Ending clean mount [ 140.919561][T16801] XFS (loop6): Quotacheck needed: Please wait. [ 140.944376][T16801] XFS (loop6): Quotacheck: Done. [ 140.984321][T12475] XFS (loop6): Unmounting Filesystem [ 141.002130][T16833] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 141.247272][T16845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5479'. [ 141.649854][T16891] netlink: 'syz.5.5500': attribute type 2 has an invalid length. [ 141.675179][T16893] loop4: detected capacity change from 0 to 2048 [ 141.681606][T16893] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 141.688130][T16893] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.873046][T16923] kAFS: unable to lookup cell '\/' [ 141.894106][T16921] loop4: detected capacity change from 0 to 8192 [ 141.916648][T16921] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 141.920929][T16921] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 141.926897][T16921] REISERFS (device loop4): using ordered data mode [ 141.927853][T16921] reiserfs: using flush barriers [ 141.944153][T16921] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 141.972047][T16921] REISERFS (device loop4): checking transaction log (loop4) [ 141.986277][T16921] REISERFS (device loop4): Using r5 hash to sort names [ 141.987479][T16921] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 142.048350][T16940] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 142.070261][T16944] netlink: 'syz.3.5528': attribute type 11 has an invalid length. [ 142.329768][T16971] netlink: 'syz.4.5536': attribute type 3 has an invalid length. [ 142.405650][T16986] loop5: detected capacity change from 0 to 1024 [ 142.466876][T16993] device hsr_slave_0 left promiscuous mode [ 142.527150][T16993] device hsr_slave_1 left promiscuous mode [ 142.660911][T17009] loop5: detected capacity change from 0 to 32768 [ 142.667681][T17009] XFS (loop5): Mounting V5 Filesystem [ 142.687119][T17008] vxcan1 speed is unknown, defaulting to 1000 [ 142.696556][T17008] vxcan1 speed is unknown, defaulting to 1000 [ 142.724149][T17008] vxcan1 speed is unknown, defaulting to 1000 [ 142.739157][T17009] XFS (loop5): Ending clean mount [ 142.741283][T17009] XFS (loop5): Quotacheck needed: Please wait. [ 142.753167][T12393] XFS (loop5): Metadata corruption detected at xfs_dinode_verify+0x258/0xe3c, inode 0x2447 dinode [ 142.754927][T12393] XFS (loop5): Unmount and run xfs_repair [ 142.770091][T12393] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 142.770226][T17008] infiniband syz2: set active [ 142.771250][T12393] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 142.773164][ T4773] vxcan1 speed is unknown, defaulting to 1000 [ 142.773248][T12393] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 142.774316][T17008] infiniband syz2: added vxcan1 [ 142.795323][T12393] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 142.798839][T12393] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 23 28 4.Xh...=......#( [ 142.799140][T17008] RDS/IB: syz2: added [ 142.801299][T17008] smc: adding ib device syz2 with port count 1 [ 142.802559][T17008] smc: ib device syz2 port 1 has pnetid [ 142.802580][T12393] 00000040: 00 00 00 00 00 02 00 05 00 00 00 00 00 00 00 01 ................ [ 142.805474][ T4773] vxcan1 speed is unknown, defaulting to 1000 [ 142.814290][T17008] vxcan1 speed is unknown, defaulting to 1000 [ 142.814912][T12393] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 8b 1b 8c 50 ...............P [ 142.822545][T12393] 00000060: ff ff ff ff f4 ae c2 82 00 00 00 00 00 00 00 06 ................ [ 142.830411][T12393] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 142.861977][T17009] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 142.870954][T17008] vxcan1 speed is unknown, defaulting to 1000 [ 142.885201][T11820] XFS (loop5): Unmounting Filesystem [ 142.948659][T17008] vxcan1 speed is unknown, defaulting to 1000 [ 142.981088][T17038] loop6: detected capacity change from 0 to 16 [ 142.993606][T17038] erofs: (device loop6): mounted with root inode @ nid 36. [ 143.013846][T17038] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 143.020174][T17041] loop0: detected capacity change from 0 to 256 [ 143.020251][T17038] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 143.024309][T17008] vxcan1 speed is unknown, defaulting to 1000 [ 143.039314][T17041] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 143.098872][T17008] vxcan1 speed is unknown, defaulting to 1000 [ 143.139087][T17048] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 143.271256][T17063] sctp: [Deprecated]: syz.4.5578 (pid 17063) Use of int in maxseg socket option. [ 143.271256][T17063] Use struct sctp_assoc_value instead [ 143.382102][T17073] loop0: detected capacity change from 0 to 4096 [ 143.407581][T17073] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 143.437591][ T1573] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 143.438728][ T4326] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 143.439847][ T4326] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 143.440979][ T4326] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 143.442988][T12393] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 143.446627][ T4326] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 143.493009][T17098] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 143.504940][T17086] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 143.511709][T17086] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 143.513211][T17086] REISERFS (device loop5): using ordered data mode [ 143.543924][T17086] reiserfs: using flush barriers [ 143.556279][T17086] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 143.560240][T17086] REISERFS (device loop5): checking transaction log (loop5) [ 143.627388][T17086] REISERFS (device loop5): Using r5 hash to sort names [ 143.628703][T17086] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 143.712780][ T4324] Bluetooth: hci3: unexpected event 0x2f length: 1017 > 260 [ 143.720024][T17115] hfsplus: invalid length 32517 has been corrected to 255 [ 143.804930][T17129] netlink: 'syz.4.5613': attribute type 8 has an invalid length. [ 143.822335][T17131] FAT-fs (loop3): Directory bread(block 64) failed [ 143.823374][T17131] FAT-fs (loop3): Directory bread(block 65) failed [ 143.824515][T17131] FAT-fs (loop3): Directory bread(block 66) failed [ 143.825519][T17131] FAT-fs (loop3): Directory bread(block 67) failed [ 143.844092][T17131] FAT-fs (loop3): Directory bread(block 68) failed [ 143.845092][T17131] FAT-fs (loop3): Directory bread(block 69) failed [ 143.858236][T17131] FAT-fs (loop3): Directory bread(block 70) failed [ 143.859213][T17131] FAT-fs (loop3): Directory bread(block 71) failed [ 143.860213][T17131] FAT-fs (loop3): Directory bread(block 72) failed [ 143.861183][T17131] FAT-fs (loop3): Directory bread(block 73) failed [ 143.949967][T17145] ieee802154 phy0 wpan0: encryption failed: -90 [ 144.004892][T17149] ksmbd: Unknown IPC event: 4, ignore. [ 144.065683][T17108] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 144.074200][T17108] XFS (loop6): Mounting V5 Filesystem [ 144.124722][T17108] XFS (loop6): Ending clean mount [ 144.136577][T17108] XFS (loop6): Quotacheck needed: Please wait. [ 144.180125][T17108] XFS (loop6): Quotacheck: Done. [ 144.193908][T17142] ERROR: (device loop0): dbAllocNext: Corrupt dmap page [ 144.193908][T17142] [ 144.208805][T17142] ialloc: diAlloc returned -5! [ 144.274282][T12475] XFS (loop6): Unmounting Filesystem [ 144.413704][T17189] device batadv0 entered promiscuous mode [ 144.547650][T17207] netlink: 'syz.0.5647': attribute type 3 has an invalid length. [ 144.548979][T17207] netlink: 'syz.0.5647': attribute type 1 has an invalid length. [ 144.618484][T17218] dlm: no local IP address has been set [ 144.619641][T17218] dlm: cannot start dlm midcomms -107 [ 144.702371][T17230] __nla_validate_parse: 7 callbacks suppressed [ 144.702383][T17230] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5630'. [ 144.715282][T17230] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5630'. [ 144.752165][T17234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5659'. [ 144.855134][T17252] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c801e018, mo2=0000] [ 144.858138][T17252] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 2: comm syz.6.5668: lblock 2 mapped to illegal pblock 2 (length 1) [ 144.860452][T17252] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 144.861691][T17252] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 48: comm syz.6.5668: lblock 0 mapped to illegal pblock 48 (length 1) [ 144.864088][T17252] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 144.865703][T17252] EXT4-fs error (device loop6): ext4_acquire_dquot:6835: comm syz.6.5668: Failed to acquire dquot type 0 [ 144.869961][T17252] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 144.874901][T17252] EXT4-fs error (device loop6): ext4_evict_inode:279: inode #11: comm syz.6.5668: mark_inode_dirty error [ 144.877655][T17252] EXT4-fs warning (device loop6): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 144.879208][T17252] EXT4-fs (loop6): 1 orphan inode deleted [ 144.880047][T17252] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 144.895376][T12475] EXT4-fs (loop6): unmounting filesystem. [ 144.898943][T17257] unable to read xattr id index table [ 144.899040][ T39] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 144.904690][ T39] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 144.906208][ T39] EXT4-fs error (device loop6): ext4_release_dquot:6871: comm kworker/u4:2: Failed to release dquot type 0 [ 144.910413][T12475] EXT4-fs error (device loop6): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 144.929101][T12475] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 144.938053][T12475] EXT4-fs error (device loop6): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 144.959100][T17262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5672'. [ 144.964675][T17264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5674'. [ 145.107525][T17288] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5685'. [ 145.118181][T17286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.176385][T17296] xt_hashlimit: max too large, truncated to 1048576 [ 145.304132][T17316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5697'. [ 145.581983][T17365] netlink: 'syz.6.5722': attribute type 17 has an invalid length. [ 145.583155][T17365] netlink: 'syz.6.5722': attribute type 16 has an invalid length. [ 145.596291][T17365] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5722'. [ 145.688804][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 145.700360][T17379] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 145.707644][T17379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.727150][T17379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.819500][T17404] netlink: 'syz.3.5741': attribute type 28 has an invalid length. [ 145.923570][T17419] set_capacity_and_notify: 10 callbacks suppressed [ 145.923583][T17419] loop4: detected capacity change from 0 to 512 [ 145.980044][T17419] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 146.017315][ T4321] EXT4-fs (loop4): unmounting filesystem. [ 146.072175][T17435] loop0: detected capacity change from 0 to 2048 [ 146.085301][T17435] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.167789][T17415] loop6: detected capacity change from 0 to 32768 [ 146.228707][T17415] XFS (loop6): Mounting V5 Filesystem [ 146.305392][T17415] XFS (loop6): Ending clean mount [ 146.321500][T17415] XFS (loop6): Quotacheck needed: Please wait. [ 146.332272][ T11] XFS (loop6): Metadata corruption detected at xfs_dinode_verify+0x258/0xe3c, inode 0x2447 dinode [ 146.335130][ T11] XFS (loop6): Unmount and run xfs_repair [ 146.355934][ T11] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 146.362781][ T11] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 146.364200][ T11] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 146.378410][ T11] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 146.379805][ T11] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 23 28 4.Xh...=......#( [ 146.381256][ T11] 00000040: 00 00 00 00 00 02 00 05 00 00 00 00 00 00 00 01 ................ [ 146.382620][ T11] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 8b 1b 8c 50 ...............P [ 146.383963][ T11] 00000060: ff ff ff ff f4 ae c2 82 00 00 00 00 00 00 00 06 ................ [ 146.385293][ T11] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 146.416337][T17415] XFS (loop6): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 146.443460][T17483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5774'. [ 146.474707][T17489] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5777'. [ 146.520925][T12475] XFS (loop6): Unmounting Filesystem [ 146.583753][T17502] loop4: detected capacity change from 0 to 2048 [ 146.587709][T17502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.603888][T17507] netlink: 'syz.0.5787': attribute type 10 has an invalid length. [ 146.965031][T17518] loop4: detected capacity change from 0 to 32768 [ 147.001919][T17518] XFS (loop4): Mounting V5 Filesystem [ 147.034046][T17518] XFS (loop4): Ending clean mount [ 147.044922][T17518] XFS (loop4): Quotacheck needed: Please wait. [ 147.063364][T12393] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x258/0xe3c, inode 0x2447 dinode [ 147.066319][T12393] XFS (loop4): Unmount and run xfs_repair [ 147.067267][T12393] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 147.069275][T12393] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 147.070767][T12393] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 147.072167][T12393] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 147.073693][T12393] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 23 28 4.Xh...=......#( [ 147.074950][T12393] 00000040: 00 00 00 00 00 02 00 05 00 00 00 00 00 00 00 01 ................ [ 147.079528][T12393] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 8b 1b 8c 50 ...............P [ 147.081000][T12393] 00000060: ff ff ff ff f4 ae c2 82 00 00 00 00 00 00 00 06 ................ [ 147.082457][T12393] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 147.095364][T17518] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 147.114199][T17511] device veth1 entered promiscuous mode [ 147.115692][T17511] netlink: 'syz.5.5790': attribute type 8 has an invalid length. [ 147.175397][ T4321] XFS (loop4): Unmounting Filesystem [ 147.212376][T17540] loop3: detected capacity change from 0 to 2048 [ 147.235115][T17542] loop0: detected capacity change from 0 to 8 [ 147.268132][T17540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.297075][T17546] device bridge3 entered promiscuous mode [ 147.511388][T17574] loop5: detected capacity change from 0 to 2048 [ 147.519349][T17580] tmpfs: Bad value for 'mpol' [ 147.520174][T17579] tmpfs: Bad value for 'size' [ 147.541381][T17574] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.569901][ T4336] Bluetooth: hci3: Invalid handle: 0xff00 > 0x0eff [ 147.717736][T17605] netlink: 'syz.6.5830': attribute type 2 has an invalid length. [ 147.721435][T17607] loop5: detected capacity change from 0 to 16 [ 147.736196][T17607] erofs: (device loop5): mounted with root inode @ nid 36. [ 147.829010][T17622] loop4: detected capacity change from 0 to 512 [ 147.830374][T17622] EXT4-fs: Ignoring removed oldalloc option [ 147.834619][T17622] EXT4-fs: inline encryption not supported [ 147.856572][T17622] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.863036][T17622] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 148.132745][T17668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.134521][T17668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.180435][T17676] xt_policy: too many policy elements [ 148.274849][T17690] netlink: 'syz.3.5872': attribute type 3 has an invalid length. [ 148.401817][T17710] SQUASHFS error: Failed to read block 0x2c5: -5 [ 148.402862][T17710] SQUASHFS error: Unable to read metadata cache entry [2c3] [ 148.403951][T17710] SQUASHFS error: Unable to read inode 0xa7 [ 148.473914][T17713] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.475631][T17713] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.476421][ T4324] Bluetooth: hci3: command 0x0406 tx timeout [ 148.476980][T17713] device bond0 left promiscuous mode [ 148.477903][ T4324] Bluetooth: hci2: command 0x0406 tx timeout [ 148.478658][T17713] device bond_slave_0 left promiscuous mode [ 148.479556][ T4324] Bluetooth: hci1: command 0x0406 tx timeout [ 148.480456][T17713] device bond_slave_1 left promiscuous mode [ 148.516577][T17713] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 148.583715][T17730] sctp: [Deprecated]: syz.3.5891 (pid 17730) Use of int in maxseg socket option. [ 148.583715][T17730] Use struct sctp_assoc_value instead [ 148.653014][T17738] misc userio: No port type given on /dev/userio [ 148.697256][T17746] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 148.698864][T17746] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 148.792217][T17761] vivid-000: ================= START STATUS ================= [ 148.803483][T17761] vivid-000: Enable Output Cropping: true [ 148.804704][T17761] vivid-000: Enable Output Composing: true [ 148.805593][T17761] vivid-000: Enable Output Scaler: true [ 148.813622][T17761] vivid-000: Tx RGB Quantization Range: Automatic [ 148.814746][T17761] vivid-000: Transmit Mode: HDMI [ 148.815515][T17761] vivid-000: Display Present: true inactive [ 148.823755][T17761] vivid-000: Hotplug Present: 0x00000001 [ 148.824643][T17761] vivid-000: RxSense Present: 0x00000001 [ 148.825467][T17761] vivid-000: EDID Present: 0x00000001 [ 148.836069][T17761] vivid-000: ================== END STATUS ================== [ 148.940733][T17781] EXT4-fs: Ignoring removed orlov option [ 148.942041][T17781] EXT4-fs: Ignoring removed i_version option [ 148.943131][T17781] EXT4-fs: inline encryption not supported [ 148.950425][T17781] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e814e01d, mo2=0003] [ 148.951882][T17781] System zones: 1-12 [ 148.992348][T17781] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.5917: inode has both inline data and extents flags [ 148.994829][T17781] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.5917: couldn't read orphan inode 15 (err -117) [ 149.018386][T17781] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 149.073325][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 149.080263][T17797] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.103897][T17800] netlink: 'syz.5.5926': attribute type 4 has an invalid length. [ 149.241945][T17821] netlink: 'syz.5.5936': attribute type 1 has an invalid length. [ 149.313043][T17833] netlink: 'syz.3.5942': attribute type 1 has an invalid length. [ 149.513784][T17854] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.527754][T17854] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 149.529394][T17854] FAT-fs (loop3): Filesystem has been set read-only [ 149.530481][T17854] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 149.531678][T17854] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 149.809308][T17894] EXT4-fs error (device loop5): __ext4_fill_super:5423: inode #2: comm syz.5.5959: unexpected EA_INODE flag [ 149.811529][T17894] EXT4-fs (loop5): get root inode failed [ 149.818558][T17894] EXT4-fs (loop5): mount failed [ 149.887013][T17911] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 149.891318][T17911] sysv_free_block: trying to free block not in datazone [ 149.899201][T17911] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 149.999959][T17924] __nla_validate_parse: 8 callbacks suppressed [ 149.999972][T17924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5985'. [ 150.002281][T17924] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5985'. [ 150.184610][T17954] tmpfs: Bad value for 'mpol' [ 150.247557][T17963] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 150.250837][T17960] netlink: 'syz.5.6004': attribute type 13 has an invalid length. [ 150.325856][T17976] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 150.379997][T17985] erofs: (device loop4): mounted with root inode @ nid 36. [ 150.383711][T17985] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 150.385134][T17985] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 150.397835][T17985] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 150.399255][T17985] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 150.400793][T17985] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 150.401629][T17989] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 150.441996][T17994] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 150.443277][T17994] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 150.445145][T17994] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 150.477498][T18001] i2c i2c-0: Invalid block write size 34 [ 150.523901][T18007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6025'. [ 150.550401][T18011] binder: 18010:18011 ioctl c0046209 9999999999999999 returned -22 [ 150.561303][T18013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6029'. [ 150.562692][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6029'. [ 150.803915][ T4336] Bluetooth: hci1: unknown advertising packet type: 0x65 [ 150.818511][T18051] netlink: zone id is out of range [ 151.096876][T18086] [U] [ 151.097753][T18086] [U] [ 151.098192][T18086] [U] [ 151.098585][T18086] [U] [ 151.104733][T18086] [U] [ 151.105209][T18086] [U] [ 151.105598][T18086] [U] [ 151.106014][T18086] [U] [ 151.112490][T18086] [U] [ 151.112963][T18086] [U] [ 151.113377][T18086] [U] [ 151.118342][T18085] [U] [ 151.164639][T18099] set_capacity_and_notify: 6 callbacks suppressed [ 151.164650][T18099] loop3: detected capacity change from 0 to 256 [ 151.194524][T18099] FAT-fs (loop3): Directory bread(block 64) failed [ 151.195736][T18099] FAT-fs (loop3): Directory bread(block 65) failed [ 151.197574][T18099] FAT-fs (loop3): Directory bread(block 66) failed [ 151.198668][T18099] FAT-fs (loop3): Directory bread(block 67) failed [ 151.200873][T18099] FAT-fs (loop3): Directory bread(block 68) failed [ 151.204460][T18099] FAT-fs (loop3): Directory bread(block 69) failed [ 151.208058][T18099] FAT-fs (loop3): Directory bread(block 70) failed [ 151.210309][T18099] FAT-fs (loop3): Directory bread(block 71) failed [ 151.212281][T18099] FAT-fs (loop3): Directory bread(block 72) failed [ 151.214674][T18099] FAT-fs (loop3): Directory bread(block 73) failed [ 151.223850][T18104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6074'. [ 151.225228][T18104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6074'. [ 151.230467][T18104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6074'. [ 151.233324][T18104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6074'. [ 151.236474][T18106] IPv6: sit1: Disabled Multicast RS [ 151.264684][T18108] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.276065][T18108] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.504091][T18144] netlink: 'syz.3.6095': attribute type 4 has an invalid length. [ 151.534855][T18147] loop5: detected capacity change from 0 to 256 [ 151.829363][T18188] loop4: detected capacity change from 0 to 256 [ 151.845970][T18188] MINIX-fs: mounting file system with errors, running fsck is recommended [ 151.987294][T18214] Zero length message leads to an empty skb [ 151.996014][T18215] ptrace attach of "./syz-executor exec"[4326] was attempted by ""[18215] [ 152.090471][T18225] loop6: detected capacity change from 0 to 64 [ 152.215936][T18241] netlink: 280 bytes leftover after parsing attributes in process `syz.4.6142'. [ 152.463257][T18260] loop6: detected capacity change from 0 to 1024 [ 152.598965][T18269] loop3: detected capacity change from 0 to 2048 [ 152.652191][T18269] EXT4-fs error (device loop3): __ext4_fill_super:5423: inode #2: comm syz.3.6148: unexpected EA_INODE flag [ 152.654312][T18269] EXT4-fs (loop3): get root inode failed [ 152.655116][T18269] EXT4-fs (loop3): mount failed [ 152.703195][T18284] loop4: detected capacity change from 0 to 256 [ 152.778957][T18290] loop6: detected capacity change from 0 to 256 [ 152.784907][T18290] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 152.932589][T18307] netlink: 'syz.6.6171': attribute type 5 has an invalid length. [ 153.084594][ T27] audit: type=1326 audit(409.062:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.5.6181" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb76de8 code=0x0 [ 153.143746][T18330] loop4: detected capacity change from 0 to 64 [ 153.171429][T18335] netlink: 'syz.5.6187': attribute type 3 has an invalid length. [ 153.319052][T18351] netlink: 'syz.4.6194': attribute type 1 has an invalid length. [ 153.320272][T18351] netlink: 'syz.4.6194': attribute type 2 has an invalid length. [ 153.391795][T18359] netlink: 'syz.5.6198': attribute type 3 has an invalid length. [ 153.604927][T18358] loop4: detected capacity change from 0 to 32768 [ 153.692907][T18377] [U] ‚ [ 153.816298][T18389] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 154.007361][T18418] netlink: 'syz.5.6228': attribute type 6 has an invalid length. [ 154.011087][T18418] netlink: 'syz.5.6228': attribute type 5 has an invalid length. [ 154.170588][T18440] FAT-fs (loop3): Directory bread(block 64) failed [ 154.171600][T18440] FAT-fs (loop3): Directory bread(block 65) failed [ 154.179751][T18448] netlink: 'syz.6.6242': attribute type 5 has an invalid length. [ 154.182987][T18440] FAT-fs (loop3): Directory bread(block 66) failed [ 154.184046][T18440] FAT-fs (loop3): Directory bread(block 67) failed [ 154.185073][T18440] FAT-fs (loop3): Directory bread(block 68) failed [ 154.187451][T18440] FAT-fs (loop3): Directory bread(block 69) failed [ 154.187729][T18448] device ip6erspan0 entered promiscuous mode [ 154.188527][T18440] FAT-fs (loop3): Directory bread(block 70) failed [ 154.198575][T18440] FAT-fs (loop3): Directory bread(block 71) failed [ 154.199593][T18440] FAT-fs (loop3): Directory bread(block 72) failed [ 154.200626][T18440] FAT-fs (loop3): Directory bread(block 73) failed [ 154.304163][T18461] usb usb2: usbfs: process 18461 (syz.3.6249) did not claim interface 0 before use [ 154.460016][T18477] syz.6.6256 (18477): drop_caches: 2 [ 154.586757][T18500] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 154.715348][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 155.178288][T18580] syz.0.6305 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 155.184089][T18582] __nla_validate_parse: 13 callbacks suppressed [ 155.184100][T18582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6306'. [ 155.264947][T18592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6311'. [ 155.271105][T18592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6311'. [ 155.277115][T18592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6311'. [ 155.456089][T18617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6323'. [ 155.633021][T18640] ieee802154 phy0 wpan0: encryption failed: -90 [ 155.729732][T18654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6341'. [ 155.899355][T18678] erofs: (device loop5): mounted with root inode @ nid 36. [ 156.225241][T18726] set_capacity_and_notify: 8 callbacks suppressed [ 156.225251][T18726] loop6: detected capacity change from 0 to 256 [ 156.235004][T18726] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.290330][T18734] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6380'. [ 156.344325][T18738] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6382'. [ 156.408967][T18743] loop0: detected capacity change from 0 to 4096 [ 156.433285][T18743] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 156.462868][T18754] loop4: detected capacity change from 0 to 256 [ 156.490264][T18754] FAT-fs (loop4): Directory bread(block 64) failed [ 156.495817][T18754] FAT-fs (loop4): Directory bread(block 65) failed [ 156.496816][T18754] FAT-fs (loop4): Directory bread(block 66) failed [ 156.497813][T18754] FAT-fs (loop4): Directory bread(block 67) failed [ 156.499057][T18754] FAT-fs (loop4): Directory bread(block 68) failed [ 156.503148][T18754] FAT-fs (loop4): Directory bread(block 69) failed [ 156.504181][T18754] FAT-fs (loop4): Directory bread(block 70) failed [ 156.505117][T18754] FAT-fs (loop4): Directory bread(block 71) failed [ 156.515538][T18754] FAT-fs (loop4): Directory bread(block 72) failed [ 156.516974][T18754] FAT-fs (loop4): Directory bread(block 73) failed [ 156.525415][T18761] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6392'. [ 156.544922][T18765] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 156.546978][T18764] loop3: detected capacity change from 0 to 512 [ 156.578776][T18764] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 156.604637][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 156.656916][T18776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.675447][T18784] netlink: 'syz.6.6403': attribute type 1 has an invalid length. [ 156.684028][T18784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6403'. [ 156.795508][T18801] loop4: detected capacity change from 0 to 512 [ 156.841350][T18801] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 156.843194][T18801] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 156.844755][T18801] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.6411: Failed to acquire dquot type 1 [ 156.855279][T18801] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 156.861430][T18801] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 156.862941][T18801] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.6411: Failed to acquire dquot type 1 [ 156.875561][T18801] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.6411: bg 0: block 248: padding at end of block bitmap is not set [ 156.891936][T18801] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 156.907596][T18801] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 156.909191][T18801] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 156.910667][T18801] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.6411: Failed to acquire dquot type 1 [ 156.929847][T18801] EXT4-fs (loop4): 1 orphan inode deleted [ 156.930843][T18801] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 156.965141][T18801] Quota error (device loop4): do_check_range: Getting block 1536 out of range 0-5 [ 157.018157][ T4321] EXT4-fs (loop4): unmounting filesystem. [ 157.127331][ T27] audit: type=1400 audit(413.115:9): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=18837 comm="syz.4.6428" [ 157.468562][T18892] x_tables: unsorted underflow at hook 3 [ 157.644195][T18873] loop5: detected capacity change from 0 to 32768 [ 157.655947][T18873] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.6446 (18873) [ 157.668568][T18873] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.670163][T18873] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 157.671452][T18873] BTRFS info (device loop5): using free space tree [ 157.762497][T18898] loop3: detected capacity change from 0 to 32768 [ 157.799805][T18898] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 157.802528][T18898] JBD2: Ignoring recovery information on journal [ 157.812748][T18936] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 157.829153][T18873] BTRFS info (device loop5): enabling ssd optimizations [ 157.845144][T18898] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 157.867546][T18898] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 157.870189][T18898] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 157.871595][T18898] OCFS2: File system is now read-only. [ 157.884105][T18898] (syz.3.6457,18898,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 157.885667][T18898] (syz.3.6457,18898,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 157.890887][T11820] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.905402][T18898] (syz.3.6457,18898,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 157.913520][T18898] (syz.3.6457,18898,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 157.919096][T18898] (syz.3.6457,18898,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 157.925082][T18898] (syz.3.6457,18898,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 157.929402][T18898] (syz.3.6457,18898,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 157.933853][T18898] (syz.3.6457,18898,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 157.939930][T18898] (syz.3.6457,18898,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 157.943001][T18898] (syz.3.6457,18898,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 157.959968][T18898] (syz.3.6457,18898,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 157.961947][T18898] (syz.3.6457,18898,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 157.977317][T18898] (syz.3.6457,18898,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 158.023638][T18898] (syz.3.6457,18898,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 158.041195][T18898] (syz.3.6457,18898,0):ocfs2_symlink:1911 ERROR: status = -30 [ 158.042554][T18898] (syz.3.6457,18898,0):ocfs2_symlink:2065 ERROR: status = -30 [ 158.076818][T13322] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop5 scanned by udevd (13322) [ 158.109656][T18966] overlayfs: './file0' not a directory [ 158.119341][ T4325] ocfs2: Unmounting device (7,3) on (node local) [ 158.531300][T19022] loop4: detected capacity change from 0 to 16 [ 158.541738][T19024] loop5: detected capacity change from 0 to 1764 [ 158.547160][T19022] erofs: (device loop4): mounted with root inode @ nid 36. [ 158.562627][T19024] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 158.574259][T19022] syz.4.6511: attempt to access beyond end of device [ 158.574259][T19022] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 158.595869][T19022] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 158.724670][T19043] loop4: detected capacity change from 0 to 512 [ 158.761667][T19043] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 158.790567][ T4321] EXT4-fs (loop4): unmounting filesystem. [ 158.802526][T19049] hfsplus: invalid length 256 has been corrected to 255 [ 158.848147][T19057] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.854651][ T39] hfsplus: b-tree write err: -5, ino 4 [ 159.053496][T19081] xt_hashlimit: size too large, truncated to 1048576 [ 159.054579][T19081] xt_hashlimit: max too large, truncated to 1048576 [ 159.123674][T19088] netlink: 'syz.5.6540': attribute type 3 has an invalid length. [ 159.234026][T19097] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d) [ 159.253505][T19097] exFAT-fs (loop4): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 159.255571][T19097] exFAT-fs (loop4): Filesystem has been set read-only [ 159.357352][T19116] netlink: 'syz.3.6555': attribute type 10 has an invalid length. [ 159.362937][T19116] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.364914][T19116] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.395249][T19116] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.396514][T19116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.397743][T19116] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.398744][T19116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.412886][T19116] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 159.531963][T19103] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 159.533339][T19103] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 159.535029][T19103] F2FS-fs (loop0): invalid crc value [ 159.540178][T19103] F2FS-fs (loop0): Found nat_bits in checkpoint [ 159.550119][T19103] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 159.551281][T19103] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 159.604702][T19142] netlink: 'syz.3.6566': attribute type 9 has an invalid length. [ 159.792960][T19172] device bridge4 entered promiscuous mode [ 159.987525][T19199] ipt_ECN: cannot use operation on non-tcp rule [ 160.209442][T19223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.346958][T19256] x_tables: duplicate entry at hook 1 [ 160.511978][T19282] netlink: 'syz.3.6636': attribute type 21 has an invalid length. [ 160.513308][T19282] __nla_validate_parse: 10 callbacks suppressed [ 160.513314][T19282] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6636'. [ 160.530207][T19282] netlink: 'syz.3.6636': attribute type 4 has an invalid length. [ 160.531451][T19282] netlink: 'syz.3.6636': attribute type 3 has an invalid length. [ 160.532544][T19282] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6636'. [ 160.576004][T19288] netlink: 'syz.0.6639': attribute type 5 has an invalid length. [ 160.588022][T19288] device ip6erspan0 entered promiscuous mode [ 160.645494][T19298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.700366][T19304] netlink: 'syz.4.6646': attribute type 10 has an invalid length. [ 160.733769][T19304] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.758282][T19304] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.759388][T19304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.767586][T19304] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 160.889198][T19324] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #3: comm syz.3.6656: corrupted inode contents [ 160.896967][T19324] EXT4-fs error (device loop3): ext4_dirty_inode:6137: inode #3: comm syz.3.6656: mark_inode_dirty error [ 160.901751][T19324] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #3: comm syz.3.6656: corrupted inode contents [ 160.905903][T19324] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.6656: mark_inode_dirty error [ 160.919833][T19324] Quota error (device loop3): write_blk: dquota write failed [ 160.921062][T19324] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 160.922598][T19324] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.6656: Failed to acquire dquot type 0 [ 160.930122][T19324] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #16: comm syz.3.6656: corrupted inode contents [ 160.976631][T19312] F2FS-fs (loop6): invalid crc value [ 160.976645][T19324] EXT4-fs error (device loop3): ext4_dirty_inode:6137: inode #16: comm syz.3.6656: mark_inode_dirty error [ 160.992949][T19324] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #16: comm syz.3.6656: corrupted inode contents [ 160.996986][T19312] F2FS-fs (loop6): Found nat_bits in checkpoint [ 161.034212][T19312] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 161.036907][T19324] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.6656: mark_inode_dirty error [ 161.044358][T19312] F2FS-fs (loop6): Start checkpoint disabled! [ 161.053095][T19324] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #16: comm syz.3.6656: corrupted inode contents [ 161.057018][T19312] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 161.075822][T19336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.078781][T19324] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 161.083892][T19324] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #16: comm syz.3.6656: corrupted inode contents [ 161.086705][T19324] EXT4-fs error (device loop3): ext4_truncate:4318: inode #16: comm syz.3.6656: mark_inode_dirty error [ 161.088573][T19324] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 161.090358][T19324] EXT4-fs (loop3): 1 truncate cleaned up [ 161.091253][T19324] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 161.110542][T19324] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #12: block 13: comm syz.3.6656: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 161.139921][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 161.141357][ T11] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 161.142910][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 1 [ 161.174468][T19353] x_tables: unsorted underflow at hook 4 [ 161.271164][T19370] set_capacity_and_notify: 5 callbacks suppressed [ 161.271174][T19370] loop4: detected capacity change from 0 to 764 [ 161.291799][T19370] rock: directory entry would overflow storage [ 161.292875][T19370] rock: sig=0x4f50, size=4, remaining=3 [ 161.293869][T19370] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 161.409100][T19384] netlink: 'syz.3.6685': attribute type 1 has an invalid length. [ 161.410754][T19384] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6685'. [ 161.412060][T19384] NCSI netlink: No device for ifindex 0 [ 161.613536][T19415] loop5: detected capacity change from 0 to 512 [ 161.617072][T19414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.622502][T19415] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.6702: bg 0: block 104: invalid block bitmap [ 161.638136][T19415] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 161.643777][T19415] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.6702: invalid indirect mapped block 1 (level 1) [ 161.646799][T19415] EXT4-fs (loop5): 1 truncate cleaned up [ 161.647698][T19415] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 161.689202][T11820] EXT4-fs (loop5): unmounting filesystem. [ 161.738051][T19433] netlink: 'syz.3.6710': attribute type 2 has an invalid length. [ 161.798430][ T4781] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.881234][T19453] loop3: detected capacity change from 0 to 512 [ 161.882694][T19453] EXT4-fs: Ignoring removed orlov option [ 161.912188][T19453] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 161.962840][T19467] loop5: detected capacity change from 0 to 256 [ 162.049171][T19467] FAT-fs (loop5): Directory bread(block 64) failed [ 162.050265][T19467] FAT-fs (loop5): Directory bread(block 65) failed [ 162.051239][T19467] FAT-fs (loop5): Directory bread(block 66) failed [ 162.052189][T19467] FAT-fs (loop5): Directory bread(block 67) failed [ 162.053166][T19467] FAT-fs (loop5): Directory bread(block 68) failed [ 162.054176][T19467] FAT-fs (loop5): Directory bread(block 69) failed [ 162.055207][T19467] FAT-fs (loop5): Directory bread(block 70) failed [ 162.066822][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 162.092368][T19467] FAT-fs (loop5): Directory bread(block 71) failed [ 162.093829][T19467] FAT-fs (loop5): Directory bread(block 72) failed [ 162.094847][T19467] FAT-fs (loop5): Directory bread(block 73) failed [ 162.231736][T19489] xt_ecn: cannot match TCP bits for non-tcp packets [ 162.273962][T19496] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 162.289581][T19496] CIFS mount error: No usable UNC path provided in device string! [ 162.289581][T19496] [ 162.291238][T19496] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 162.349523][T19503] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 162.353018][T19505] loop4: detected capacity change from 0 to 64 [ 162.371401][T19507] dlm: no locking on control device [ 162.384279][ T11] ------------[ cut here ]------------ [ 162.385161][ T11] kernel BUG at fs/hfs/inode.c:449! [ 162.386128][ T11] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 162.387288][ T11] Modules linked in: [ 162.387921][ T11] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 162.389019][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 162.390508][ T11] Workqueue: writeback wb_workfn (flush-7:4) [ 162.391408][ T11] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 162.392510][ T11] pc : hfs_write_inode+0x8d8/0x8dc [ 162.393240][ T11] lr : hfs_write_inode+0x8d8/0x8dc [ 162.393966][ T11] sp : ffff80001c9d7280 [ 162.394550][ T11] x29: ffff80001c9d73c0 x28: 1fffe0001b5c5ee6 x27: dfff800000000000 [ 162.395696][ T11] x26: dfff800000000000 x25: ffff80001c9d7280 x24: ffff70000393ae50 [ 162.396839][ T11] x23: ffff800011cdcb80 x22: 0000000000000000 x21: 0000000000000000 [ 162.397976][ T11] x20: ffff0000dae2f658 x19: ffff80001c9d7300 x18: ffff800011b8bf60 [ 162.399120][ T11] x17: 0000000000000000 x16: ffff8000082ef028 x15: 0000000000000000 [ 162.400253][ T11] x14: 0000000000000004 x13: 0000000000ff0100 x12: 0000000000ff0100 [ 162.401388][ T11] x11: ff00800008fb2070 x10: 0000000000000000 x9 : ffff800008fb2070 [ 162.402529][ T11] x8 : ffff0000c09ab780 x7 : 0000000000000000 x6 : 0000000000000000 [ 162.403671][ T11] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000020 [ 162.404801][ T11] x2 : 0000000000000006 x1 : ffff8000155ce0a0 x0 : 0000000000000000 [ 162.405939][ T11] Call trace: [ 162.406400][ T11] hfs_write_inode+0x8d8/0x8dc [ 162.407086][ T11] __writeback_single_inode+0x5e0/0x1554 [ 162.407891][ T11] writeback_sb_inodes+0x858/0x143c [ 162.408636][ T11] wb_writeback+0x414/0xfcc [ 162.409284][ T11] wb_workfn+0x360/0xe18 [ 162.409891][ T11] process_one_work+0x7f8/0x13a4 [ 162.410622][ T11] worker_thread+0x8c4/0xfec [ 162.411284][ T11] kthread+0x250/0x2d8 [ 162.411886][ T11] ret_from_fork+0x10/0x20 [ 162.412529][ T11] Code: aa1403e0 97e4ce64 17ffff9c 97d3e501 (d4210000) [ 162.413500][ T11] ---[ end trace 0000000000000000 ]--- [ 162.749562][ T11] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 162.750638][ T11] SMP: stopping secondary CPUs [ 162.751320][ T11] Kernel Offset: disabled [ 162.751949][ T11] CPU features: 0x080000,000f0097,a65bfea7 [ 162.752791][ T11] Memory Limit: none [ 163.070145][ T11] Rebooting in 86400 seconds..