last executing test programs: 2m56.986292578s ago: executing program 1 (id=134): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 2m56.874095225s ago: executing program 1 (id=137): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000600)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2], [0x810003, 0x4, 0x401], [0x5, 0x8, 0xffffffff, 0x45], [0x5, 0x0, 0xffffffffffffffff, 0xfffffffffffffffb]}) 2m56.825166678s ago: executing program 1 (id=138): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)={0x2c, 0x18, 0x15, 0x70bd2c, 0x25dfdbfd, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x10, 0x9, 0x0, 0x1, [@nested={0xc, 0x8c, 0x0, 0x1, [@nested={0x4, 0xc2}, @nested={0x4, 0x15}]}]}]}, 0x2c}], 0x1}, 0x0) 2m56.737038393s ago: executing program 1 (id=140): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002a00)={[{@dmask={'dmask', 0x3d, 0x8}}, {@namecase}, {@dmask={'dmask', 0x3d, 0x6}}, {@utf8}, {@dmask={'dmask', 0x3d, 0x80}}, {@keep_last_dots}, {@keep_last_dots}, {@sys_tz}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x153b, &(0x7f0000000340)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 2m56.525961405s ago: executing program 1 (id=147): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xffffc000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f000000040700000013c18af6543e25c5030000000f00000000000002000000000000002e"], &(0x7f0000002200)=""/4110, 0x45, 0x100e, 0x1}, 0x28) 2m55.045156902s ago: executing program 1 (id=228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 2m55.019230763s ago: executing program 32 (id=228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 2m54.370893782s ago: executing program 4 (id=258): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fdatasync(r0) 2m54.323075274s ago: executing program 4 (id=261): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2m54.241691909s ago: executing program 4 (id=265): r0 = socket$inet(0x2, 0x801, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) 2m54.190804552s ago: executing program 4 (id=268): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002a00)={[{@dmask={'dmask', 0x3d, 0x8}}, {@namecase}, {@dmask={'dmask', 0x3d, 0x6}}, {@utf8}, {@dmask={'dmask', 0x3d, 0x80}}, {@keep_last_dots}, {@keep_last_dots}, {@sys_tz}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x153b, &(0x7f0000000340)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 2m54.05009182s ago: executing program 4 (id=273): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xffffc000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f000000040700000013c18af6543e25c5030000000f00000000000002000000000000002e"], &(0x7f0000002200)=""/4110, 0x45, 0x100e, 0x1}, 0x28) 2m53.802818905s ago: executing program 2 (id=278): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x40000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, 0x0) 2m53.801349135s ago: executing program 0 (id=287): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x3]}, {0xffffffffffffffff}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ttl={{0x28}}, @common=@unspec=@physdev={{0x68}, {'batadv_slave_0\x00', {0xff}, 'ip_vti0\x00', {0xff}, 0xf}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x1, 0x5, 0x2, 0x0, 0x1], 0x1, 0x1}, {0x0, [0x0, 0x4, 0x6, 0x4, 0x1, 0x4], 0x4, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 2m53.735251618s ago: executing program 0 (id=280): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x541, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x4d00, 0x0) 2m53.690937782s ago: executing program 0 (id=282): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0405519, &(0x7f0000001980)={{0x0, 0x0, 0x0, 0x1000000, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 2m53.667053663s ago: executing program 0 (id=283): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002a00)={[{@dmask={'dmask', 0x3d, 0x8}}, {@namecase}, {@dmask={'dmask', 0x3d, 0x6}}, {@utf8}, {@dmask={'dmask', 0x3d, 0x80}}, {@keep_last_dots}, {@keep_last_dots}, {@sys_tz}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x153b, &(0x7f0000000340)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 2m53.661794313s ago: executing program 2 (id=284): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000600)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2], [0x810003, 0x4, 0x401], [0x5, 0x8, 0xffffffff, 0x45], [0x5, 0x0, 0xffffffffffffffff, 0xfffffffffffffffb]}) 2m53.608637066s ago: executing program 2 (id=286): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, @ib={0x1b, 0xffff, 0x1000000, {"71e08c1210690dbf4198cc4583e116e5"}, 0x6, 0x5, 0x7}, @ib={0x1b, 0x2, 0x0, {"0b9d0d373df30230f000"}}}}, 0x118) 2m53.572641668s ago: executing program 0 (id=288): r0 = syz_open_dev$video4linux(&(0x7f0000001c40), 0x6, 0x80001) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000001c80)={0x0, {0x0, 0xff}}) 2m53.360900261s ago: executing program 4 (id=289): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010002, &(0x7f0000002180)=ANY=[], 0x1, 0x60f3, &(0x7f00000097c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) 2m53.350736061s ago: executing program 33 (id=289): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010002, &(0x7f0000002180)=ANY=[], 0x1, 0x60f3, &(0x7f00000097c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) 2m53.345511862s ago: executing program 2 (id=298): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002a00)={[{@dmask={'dmask', 0x3d, 0x8}}, {@namecase}, {@dmask={'dmask', 0x3d, 0x6}}, {@utf8}, {@dmask={'dmask', 0x3d, 0x80}}, {@keep_last_dots}, {@keep_last_dots}, {@sys_tz}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x153b, &(0x7f0000000340)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 2m53.163235072s ago: executing program 2 (id=301): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x2, 0x4) 2m53.121092685s ago: executing program 0 (id=302): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000000140)={[{@discard}, {@errors_continue}, {@gid}, {@time_offset={'time_offset', 0x3d, 0x5}}, {@namecase}, {@umask={'umask', 0x3d, 0x1}}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {@errors_remount}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}]}, 0x1, 0x1540, &(0x7f0000000880)="$eJzs3AucTlXXAPC19t5nDImnSS7D3nsdnuSyTZLkkiSXJEmSJLeEpEleSUgMIUlDEpLLkMQQksvEpHG/3y8JSdIkSUhuyf5+E37qrb73/b73/fL+vln/3+/87DXnrH3Wedac5znnePi269BaTWpXb0RE8C/BC38kAUAsAAwEgLwAEABA+bjycYAB5JSY9K/thP17PZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/x1z/+Bn///x+HP//9HMsuM/XJNmeu6AcT8sync/+yN+///VvDPbMT9z964/9lV7JUugP0H4PM/O8jxp2u4/9kb95+x7OxKP3++0gtE/sNegyM5LzTmrzp+xhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsL3DaX6YA4NL4StfFGGOMMcYYY4yxfx+f40pXwBhjjDHGGGOMsf97CAIkKAggBnJALOSEXCAA4GrIA3khAtdAHFwL+eA6yA8FoCAUgngoDEVAgwELBCEUhWIQheuhONwAJaAklILS4KAMJMCNUBZugnJwM5SHW6AC3AoVoRJUhipwG1SF26Ea3AHV4U6oATWhFtSGu6AO3A114R6oB/dCfbgPGsD90BAegEbwIDSGh6AJPAxN4RFoBs2hBbSEVv+r/OehJ7wAvaA3JEEf6AsvQj/oDwPgJRgIL8MgeAUGw6uQDENgKLwGw+B1GA5vwAgYCaPgTRgNb8EYGAvjYDykwASYCG/DJHgHJsO7MAWmQipMg+nwHsyAmTAL3ofZ8AHMgbkwD+ZDGnwIC2AhpMNHsAg+hgxYDEtgKSyD5bACVsIqWA1rYC2sg/WwATbCJtgMW2ArbIPtsAM+gZ3wKeyC3bAHPoO98Pmv8gGSfunnf5d/6u/yuyEgoECBChXGYAzGYizmwlyYG3NjHsyDEYxgHMZhPsyH+TE/FsSCGI/xWASLoEGDhIRFsShGMYrFsTiWwBJYCkuhQ4cJmIBl8SYsh+WwPJbHClgBK2IlrIRVsApWxapYDathdayONbAG1sJaeBfehX2wLtbFelgP62P9S4+nsBE2wsbYGJtgE2yKTbEZNsMW2AJbYStsja2xDbbBdtgO22N77IAdMBETsSN2xE7YCTtjZ+yCXbArdsVu2B27Zz6fA/AFfAF7Yw3RB/tiX+yHyTkG4Ev4Er6Mg/AVfAVfxWQcgkPxNXwNX8fheBJH4EgchaOwqngLx+BYJDEeUzAFJ+JEnISTMKvQd3EqpuI0nI7TcQbOxJn4Ps7GD/ADnItzcT6mYRouwIWYjum4CE9hBi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjp+gAsBPcTfuxmTci3txH+7D/bgfD+ABzMRMPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hs/NeNPym5OhlEFiWUiBExIlbEilwil8gtcos8Io+IiIiIE3Ein8gn8ov8oqAoKOJFvCgiiggjjCARxgCAiIqoKC6KixKihCglSgknnEgQCaKsKCvKiXKivLhFVBC3ioqikmjrqogqoqpo56qJO0R1UV3UEDVFLVFb1BZ1RB1RV9QV9UQ9UV/UFw3E/aKh6IMD8EGR1ZkmYgg2FUOxmWgu5MV3sNZiOLYRbUU78bgYiSOwg2jtEsVToqMYg53E38RYfEZ0EeOxq3hOdBPdRQ/xvOgp2rheoreYjH1EXzEV+4n+YoB4SczAmuJ9nJ2zlnhVJIshYqh4TczH18Vw8YYYIUaKUeJNMVq8JcaIsWKcGC9SxAQxUbwtJol3xGTxrpgipopUMU1MF++JGWKmmCXeF7PFB2KOmCvmifkiTXwoFoiFIl18JBaJj0WGWCyWiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaIT8RO8anYJXaLPeIzsVd8LvaJL8R+8aU4IL4SmeJrcVB8Iw6Jb8Vh8Z04Ir4XR8UxcVz8IE6IH8VJcUqcFmfEWfGTOCd+FueFFyBRCimlkoGMkTlkrMwpc8mrZG4ZXHx1r5Fx8lqZT14n88sCsqAsJONlYVlEammklSRDWVQWk1F5vSwub5AlZElZSpaWTpaRCfJGWVbeJMvJm2V5eYusIG+VFWUlWVlWkbfJqvJ2CZEL+6gha8pasra8SybB3bKuvEfWk/fK+vI+2UDeLxvKB2Qj+aBsLB+STeTDsql8RDaTzWUL2VK2ko/K1vIx2Ua2le3k47K9fEJ2kE/KRPmU7Cj9xV+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeU/zH/7D/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLrwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1e/IVRpVRp5VQZlaBu/J/kq+LqBlVClfxN/qX6kv6kvlaqlWqtWqs2qo1qp9qp9qq96qA6qESVqDqqjqqT6qQ6q86qi+qiuqquqpvqpnqoHqqn6ql6qV4qSSWpvupF1U/1VwPUS2qgelkNUoPUYDVYJatkNVQNVcPUMDVcDVcj1Ag1So1So9VoNUaNUePUOJWiUtRENVFNUpPUZDVZTVFTVKpKVdPVdDVDzVCz1Cw1W81Wc9QcNU/NU2kqTS1QC1S6SleL1CKVoRarxWqpWqqWq+VqpVqpVqvVaq1aq9ar9SpDbVKb1Ba1RW1T29QOtUPtVDvVLrVL7VF71F61V+1T+9R+tV8dUAdUpspUB9VBdUgdUofVYXVEHVFH1VF1XB1XJ9QJdVKdVKfVaXVWnVXn1Dl1Xp3PuuwLRCACFaggJogJYoPYIFeQK8gd5A7yBHmCSBAJ4oK4IF9wXZA/KBAUDAoF8UHhoEigAxPYQFxsejS4Pige3BCUCEoGpYLSgQvKBAnBjUHZ4KagXHBzUD64JagQ3BpUDCoFlYMqwW1B1eD2oFpwR1A9uDOoEdQMagW1g7uCOsHdQd3gnqBecG9QP7gvaBDcHzQMHggaBQ8GjYOHgibBw0HT4JGgWdA8aBG0DFr9i/NnnfKX5/f+ZIHHXC/dWyfpPrqvflH30/31AP2SHqhf1oP0K3qwflUn6yF6qH5ND9Ov6+H6DT1Cj9Sj9Jt6tH5Lj9Fj9Tg9XqfoCXqifltP0u/oyfpdPUVP1al6mp6u39Mz9Ew9S7+vZ+sP9Bw9V8/T83Wa/lAv0At1uv5IL9If6wy9WC/RS/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1Nr1d79Cf6J36U71L79Z79Gd6r/5c79Nf6P36S31Af6Uz9df6oP5GH9Lf6sP6O31Ef6+P6mP6uP5Bn9A/6pP6lD6tz+iz+id9Tv+sz2ufdXGf9fFulFEmxsSYWBNrcplcJrfJbfKYPCZiIibOxJl8Jp/Jb/KbgqagiTfxpogpYrKQIVPUFDVREzXFTXFTwpQwpUwp44wzCSbBlDVlTTlTzpQ35U0FU8FUNBVNZVPZ3GZuM7eb280d5g5zp7nT1DQ1TW1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MU9PUNDPNTAvTwrQyrUxr09q0MW1MO9POtDftTQfTwSSaRNPRdDSdTCfT2XQ2XUwX09V0Nd1MN9PD9DA9TU/Ty/QySSbJ9DV9TT/TzwwwA8xAM9AMMoPMYDPYJJtkM9QMNcPMMDPcDDcjzEgzKutC1bxlxpixZpwZb1JMiploJppJZpKZbCabKWaKSTWpZrqZbmaYGWaWmWVmm9lmjplj5pl5Js2kmQVmgUk36WaRWWQyTIZZYpaYZWaZWWFWmFVmlVlj1ph1sM5sMBvMJrPJbDFbzDazzewwO8xOs9PsMrvMHrPH7DV7zT6zz+w3+80Bc8Bkmkxz0Bw0h8whc9gcNkfMEXPUHDXHzXFzwpwwJ81Jc9qcNmdNAQmQ9ZHpTazNaXPZq2xue7XNY/Pav48L2kI23ha2Ray2+W2B38TGWlvClrSlbGnrbBmbYG/8XVzRVrKVbRV7m61qb7fVfhfXsXfbuvYeW8/ea2vbu34T17f32Qb2YdsQEcA2t41tS9vEPmyb2kdsM9vctrAtbXv7hO1gn7SJ9inb0T79u3iBXWhX2dV2jV1rd9nd9rQ9Yw/Zb+1Z+5PtZXvbgfZlO8i+YgfbV22yHfK7eJR90462b9kxdqwdZ8f/Lp5ip9pUO81Ot+/ZGXbm7+I0+6GdbdPtHDvXzrPzf4mzakq3H9lF9mObYQNYYpfaZXa5XWFXXqrV57Xr7Qa70e60n9otdqvdZrfbHZcuhO1uu8d+Zvfaz+1B+43db7+0B+xhm2m//iXOOr7D9jt7xH5vj9pj9rj9wZ6wP6pL2VnH/oP92Z633gIhAUlSFFAM5aBYykm56CrKTVdTHspLEbqG4uhaykfXUX4qQAWpEMVTYSpCmgxZIgqpKBWjKF1Pl8orRaXJURlKoBupLN1E5ehmKk+3UAW6lSpSJapMVeg2qkq3UzW6g6rTnVSDalItqk13UR26m+rSPVSP7qX6dB81oPupIT1AjehBakwPURN6mJrSI9SMmlMLakmt6FFqTY9RG2pL7ehxak9PUAd6khLpKepIT1Mn+ht1pmeoCz1LXek56kbdqQc9Tz3pBepFvSmJ+lBfepH6UX8aQC/RQHqZBtErNJhepWQaQkPpNRpGr9NweoNG0EgaRW/SaHqLxtBYGkfjKYUm0ER6mybROzSZ3qUpNJVSaRpNp/doBs2kWfQ+zaYPaA7NpXk0n9LoQ1pACymdPqJF9DFl0GJaQktpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbacd9AntpE9pF+2mPfQZ7aXPaR99QfvpSzpAX1EmfU0H6Rs6RN/SYfrO96bv6Sgdo+P0QyzQj3SSTtFpOkNn6Sc6Rz/TefIEIYYilKEKgzAmzBHGhjnDXOFVYe7w6jBPmDeMhNeEceG1Yb7wujB/WCAsGBYK48PCYZFQhya0IYVhWDQsFkbD68Pi4Q1hibBkWCosHbqwTJgQ3hiWDW8Ky4U3h+XDW8IK4a1hxbBS+PC9VcLbwqrh7WG18I6wenhnWCOsGdYKa4d3hXXCu8O64T1hvfDesFx4X9ggvD9sGD4QNgofDBuHD4VNwofDpuEjYbOwedgibBm2Ch8NW4ePhW3CtmG78PGwffhE2CF8MkwMnwo7hk//sv6+hX++PinsE/YNXwxfDL2/R86Lzo+mRT+MLogujKZHP4ouin4czYguji6JLo0uiy6ProiujK6Kro6uia6Nrouuj26Ibox6XzsHOHTCSadc4GJcDhfrcrpc7iqX213t8ri8LuKucXHuWpfPXefyuwKuoCvk4l1hV8RpZ5x15EJX1BVzUXe9K+5ucCVcSVfKlXbOlXEJrqVr5Vq51u4x18a1de3c4+5x94R7wj3pnnRPuY7uadfJ/c11ds+4Lu5Z96x7znVz3V0P97zr6SbkuXBOJrm+rq/r5/q5AW6AG+gGukFukBvsBrtkl+yGuqFumBvmhrvhboQb4Ua5UW60G+3GuDFunBvnUlyKm+gmuklukpvsJrspbopLdaluupvuZrgZrurMC3uZ4+a4eW6eS3NpboHLumZMd4vcIpfhMtwSt8Qtc8vcCrfCrXKr3Bq3xq1z69wGt8FtcpvcFrfFbXPb3A63w+10O90un/fCpG6v2+f2uf1uvzvgvnKZ7mt30H3jDrlv3WH3nTvivndH3TF33P3gTrgf3Ul3yp12Z9xZ95M753525513KZEJkYmRtyOTIu9EJkfejUyJTI2kRqZFpkfei8yIzIzMirwfmR35IDInMjcyLzI/khb5MLIgsjCSHvkosijycSQjsjiyJLI0siyyPOJ94S2hL+qL+ai/3hf3N/gSvqQv5Ut758v4BH+jL+tv8uX8zb68v8VX8Lf6ir6Sr+wf8c18c9/Ct/St/KO+tX/Mt/FtfTv/uG/vn/Ad/JM+0T/lO/qnfSf/N9/ZP+O7+Gd9V/+c7+a7+x7+ed/Tv+B7+d4+yffxff2Lvp/v7wf4l/xA/7If5F/xg/2rPtkP8UP9a36Yf90P92/4EX6kHxXzph996RYZxvsUP8FP9G/7Sf4dP9m/66f4qT7VT/PT/Xt+hp/pZ/n3/Wz/gZ/j5/p5fr5P8x/6BX6hT/cf+UX+Y5/hF196qOxX+JV+lV/t1/i1fp1f7zf4jX6T3+y3+K1+m9/ud/hP/E7/qd/ld/s9/jO/13/u9/kv/H7/pT/gv/KZ/mt/0H/jD/lv/WH/nT/iv/dH/TF/3P/gT/gf/Ul/yp/2Z/xZ/5M/53/25/+Zf7PG33VjjDHGGIMJl4fit2suPM7v8wc54lcb9wWAq7cWyvz1+qwrynX5L4z7i/j2EQB4qnfXBy8tNWokJSVd3DZDQlBsLsClvwnKEgOX48XQDp6ARGgLZf+w/v6i+1n6B/NHbwHI9aucWLgcX57/CwBM+oP5H3181IIK4em4/2b+uQAlil3OyQmX48XQ7pfnK22h3J/UX6D1n9SPF+fP+WUKQJtf5eSGy/Hl+hPgMXgaEn+zJWOMMcYYY4wxdkF/UbnzpfvPS9/4/KP783h1OScHXI7/0f05Y4wxxhhjjDHGrrxnuvd48tHExLad/+eDav+rrH960BT+r2bmwR8OvAe49BMFAP/ihABZA/lXHsXmv2RfyRdPnb9fteyMD+A/o5X/jsEVfmNijDHGGGOM/dtdvuj/7c/VlSqIMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv6K/07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9VwAAAP//t7H6bg==") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x16f) 2m53.099176636s ago: executing program 34 (id=302): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000000140)={[{@discard}, {@errors_continue}, {@gid}, {@time_offset={'time_offset', 0x3d, 0x5}}, {@namecase}, {@umask={'umask', 0x3d, 0x1}}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {@errors_remount}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}]}, 0x1, 0x1540, &(0x7f0000000880)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x16f) 2m52.837153351s ago: executing program 2 (id=295): r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@security={'security\x00', 0x44, 0x4, 0x4f0, 0xffffffff, 0x248, 0x0, 0x248, 0xffffffff, 0xffffffff, 0x420, 0x420, 0x420, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x120, 0x248, 0x8502, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0xe, 0x0, 0x1}}, @common=@unspec=@helper={{0x48}, {0x1, 'irc-20000\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) 2m52.704476249s ago: executing program 35 (id=295): r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@security={'security\x00', 0x44, 0x4, 0x4f0, 0xffffffff, 0x248, 0x0, 0x248, 0xffffffff, 0xffffffff, 0x420, 0x420, 0x420, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x120, 0x248, 0x8502, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0xe, 0x0, 0x1}}, @common=@unspec=@helper={{0x48}, {0x1, 'irc-20000\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) 2m35.480713631s ago: executing program 5 (id=580): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x800452d3, 0x0) 2m35.458872912s ago: executing program 5 (id=581): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0xffffffffffffffff, 0x108) 2m35.434491513s ago: executing program 5 (id=582): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 2m35.404846365s ago: executing program 5 (id=583): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x9}, 0x8) 2m35.385150896s ago: executing program 5 (id=584): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m34.526931197s ago: executing program 5 (id=585): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x390, 0xf0, 0xffffffff, 0x2a0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private1, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@multicast1, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) 2m19.47488729s ago: executing program 36 (id=585): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x390, 0xf0, 0xffffffff, 0x2a0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private1, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@multicast1, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) 702.339519ms ago: executing program 9 (id=7759): r0 = socket$xdp(0x2c, 0x3, 0x0) lseek(r0, 0x7fffffff, 0x1) 646.564822ms ago: executing program 9 (id=7762): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@v={0x93, 0x8, 0x160, 0x19, @generic=0x9, 0x1, 0x7}) 548.000648ms ago: executing program 9 (id=7778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) read(r0, 0x0, 0x0) 439.275064ms ago: executing program 9 (id=7783): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11079, 0x2b}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc}}}, @IFLA_IFALIASn={0x4}, @IFLA_LINKMODE={0x0, 0x11, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 438.350124ms ago: executing program 7 (id=7773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x12, 0x3, "91abc12404cf378042f26c43f91f"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x90}}, 0x0) 401.686916ms ago: executing program 6 (id=7774): r0 = socket$xdp(0x2c, 0x3, 0x0) lseek(r0, 0x7fffffff, 0x1) 400.633747ms ago: executing program 3 (id=7775): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix_mp={0x0, 0x0, 0x32315659, 0x7, 0x0, [{}, {0xfffffffd}, {0x0, 0x1}, {}, {}, {}, {}, {0x80000000, 0xffff}]}}) 365.703529ms ago: executing program 3 (id=7776): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x10, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) 350.273589ms ago: executing program 7 (id=7777): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@v={0x93, 0x8, 0x160, 0x19, @generic=0x9, 0x1, 0x7}) 350.18485ms ago: executing program 8 (id=7779): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80d}], 0x1c) 347.075159ms ago: executing program 6 (id=7780): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101080) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x1, 0xf8af, 0xfffffff8, {0xfffffffe, 0x9e5}, 0x728, 0x4}) 312.278522ms ago: executing program 6 (id=7781): r0 = io_uring_setup(0x6c9a, &(0x7f0000000000)={0x0, 0x7645, 0x80, 0x3, 0x39e}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0xffffffffffffffff, 0x1) 293.444323ms ago: executing program 3 (id=7782): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002a00)=@raw={'raw\x00', 0x4001, 0x3, 0x328, 0x108, 0x0, 0x148, 0x108, 0x148, 0x290, 0x240, 0x240, 0x290, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x158, 0x188, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x100, 0x2, 'bm\x00', "04ece8caf53ceed2614ff2f52d56db2271f3fb9a72c6185d9b739d30085da0f2ba80e787e605998ac86704b30f2269446fb434d0edde867e78fdfdeb19b0ec70533d1466bf7d37b7300476b13d3b549f322c6710ed1208feebdaed2343dc2ecf1bbee85fea90dec1f0d6f1f68e2e166484d08567f84264bd40744fa1f8b05ff3", 0x30, 0x1, {0xf}}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x1}, {0x4, 0x1, 0x6}, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) 278.736963ms ago: executing program 7 (id=7793): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8990, &(0x7f0000000040)={'ip6tnl0\x00', 0xfffffffffffffffe}) 264.853774ms ago: executing program 8 (id=7794): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xa}], 0x10}, 0x10) 262.753914ms ago: executing program 9 (id=7795): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80d}], 0x1c) 261.831134ms ago: executing program 6 (id=7784): syz_mount_image$bfs(&(0x7f0000000100), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x41, &(0x7f0000000500)=ANY=[], 0xc, 0xb2, &(0x7f0000000900)="$eJzs0rFJBEEYBeA3h6ciBuYGdnA9XAXWcFx4l220YrT92IRgagnbgcGmJiPrTGIuiPB9wbz5ecnA/O+fL/eZkocpqbXe5DtqrRepw/h0OpyHcXs6nJNs85am9LwK/9ymf+c+bQfW+WPfutL72yTz8nycl3JszeNry8u/ezgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/KJy93PeZLfr1+v1+AoAAP//pBMb5A==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 226.356826ms ago: executing program 8 (id=7785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1b8}}, 0x0) 209.969498ms ago: executing program 7 (id=7786): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0477bc45ff810500000000000058000b480400945f64009400050028925a011c0000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 198.496489ms ago: executing program 3 (id=7787): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/198, 0xc6}], 0x1) 197.447898ms ago: executing program 9 (id=7788): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) 133.998272ms ago: executing program 6 (id=7789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x12, 0x3, "91abc12404cf378042f26c43f91f"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x90}}, 0x0) 132.916192ms ago: executing program 8 (id=7790): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000180)={0x0, "836d11f8a2f7337496bff2b4d43d400ebf870e7cf92542da0cbdf188dede83ee", 0x2, 0x20, 0x7fffffff, 0x7, 0x10, 0x1, 0x0, 0x3}) 116.706033ms ago: executing program 3 (id=7791): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x27, 0x14, 0x0, &(0x7f0000000140)="f80204000000000000007f530800d31e0edf4dd3", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 76.364816ms ago: executing program 8 (id=7792): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101080) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x1, 0xf8af, 0xfffffff8, {0xfffffffe, 0x9e5}, 0x728, 0x4}) 75.245836ms ago: executing program 7 (id=7805): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000180)={0x0, "836d11f8a2f7337496bff2b4d43d400ebf870e7cf92542da0cbdf188dede83ee", 0x2, 0x20, 0x7fffffff, 0x7, 0x10, 0x1, 0x0, 0x3}) 14.391909ms ago: executing program 8 (id=7796): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000540)={0x0, 0xfffffffffffffffe}) 14.302489ms ago: executing program 3 (id=7797): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) 14.186589ms ago: executing program 6 (id=7798): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11079, 0x2b}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc}}}, @IFLA_IFALIASn={0x4}, @IFLA_LINKMODE={0x0, 0x11, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 0s ago: executing program 7 (id=7799): r0 = io_uring_setup(0x6c9a, &(0x7f0000000000)={0x0, 0x7645, 0x80, 0x3, 0x39e}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0xffffffffffffffff, 0x1) kernel console output (not intermixed with test programs): .652620][ T79] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.659613][ T51] block nbd7: Attempted send on invalid socket [ 162.660710][ T51] I/O error, dev nbd7, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.662756][ T51] block nbd7: Attempted send on invalid socket [ 162.663874][ T51] I/O error, dev nbd7, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.669032][ T51] block nbd7: Attempted send on invalid socket [ 162.670034][ T51] I/O error, dev nbd7, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.807282][T16741] bond0: Unable to set up delay as MII monitoring is disabled [ 162.816302][T16744] loop3: detected capacity change from 0 to 512 [ 162.858717][T16750] binder: 16749:16750 ioctl c018620c 20000400 returned -1 [ 162.897472][T16744] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 162.899784][T16744] EXT4-fs (loop3): unmounting filesystem. [ 163.029977][T16770] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 163.093009][T16781] loop6: detected capacity change from 0 to 2048 [ 163.109686][T16781] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.129240][T16783] loop7: detected capacity change from 0 to 4096 [ 163.143536][T16783] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 163.150461][T16779] loop8: detected capacity change from 0 to 4096 [ 163.164782][T16779] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 163.168752][T16783] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 163.223407][T16779] ntfs3: loop8: failed to convert "c46c" to macromanian [ 163.333543][T16801] loop9: detected capacity change from 0 to 2048 [ 163.367383][T16801] UDF-fs: error (device loop9): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1376) [ 163.373264][T16801] UDF-fs: error (device loop9): udf_verify_fi: directory (ino 1376) has too big (63528) entry at pos 0 [ 163.449495][T16817] x_tables: duplicate entry at hook 3 [ 163.662182][T16841] loop3: detected capacity change from 0 to 4096 [ 163.672475][T16841] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 163.672712][T16851] netlink: 'syz.6.5238': attribute type 1 has an invalid length. [ 163.675322][T16851] netlink: 'syz.6.5238': attribute type 2 has an invalid length. [ 163.725469][T16841] ntfs3: loop3: failed to convert "c46c" to maciceland [ 163.853404][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 163.854538][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 163.855461][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 163.856443][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 163.882566][T16882] xt_hashlimit: size too large, truncated to 1048576 [ 163.918271][T16882] xt_hashlimit: max too large, truncated to 1048576 [ 163.938091][T16885] tmpfs: Bad value for 'mpol' [ 164.385716][T16934] loop9: detected capacity change from 0 to 256 [ 164.410544][T16934] FAT-fs (loop9): Directory bread(block 64) failed [ 164.411720][T16934] FAT-fs (loop9): Directory bread(block 65) failed [ 164.417888][T16934] FAT-fs (loop9): Directory bread(block 66) failed [ 164.418935][T16934] FAT-fs (loop9): Directory bread(block 67) failed [ 164.419984][T16934] FAT-fs (loop9): Directory bread(block 68) failed [ 164.421002][T16934] FAT-fs (loop9): Directory bread(block 69) failed [ 164.422039][T16934] FAT-fs (loop9): Directory bread(block 70) failed [ 164.436405][T16934] FAT-fs (loop9): Directory bread(block 71) failed [ 164.437549][T16934] FAT-fs (loop9): Directory bread(block 72) failed [ 164.438598][T16934] FAT-fs (loop9): Directory bread(block 73) failed [ 164.439240][T16933] ntfs: (device loop8): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 164.441498][T16933] ntfs: (device loop8): ntfs_read_locked_inode(): $DATA attribute is missing. [ 164.468479][T16933] ntfs: (device loop8): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 164.470623][T16933] ntfs: (device loop8): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 164.499955][T16933] ntfs: volume version 3.1. [ 164.511874][T16933] ntfs: (device loop8): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 164.514118][T16933] ntfs: (device loop8): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 164.515977][T16933] ntfs: (device loop8): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 164.531667][T16913] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 164.533097][T16913] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 164.551569][T16913] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 164.577435][T16913] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 164.760601][T16968] dlm: no local IP address has been set [ 164.761548][T16968] dlm: cannot start dlm midcomms -107 [ 164.792555][T16975] __nla_validate_parse: 12 callbacks suppressed [ 164.792569][T16975] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5308'. [ 165.022970][T17007] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5313'. [ 165.034425][T17007] netlink: 'syz.9.5313': attribute type 1 has an invalid length. [ 165.049998][T17004] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.5312: Failed to acquire dquot type 0 [ 165.079459][T17004] EXT4-fs error (device loop3): mb_free_blocks:1826: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 165.101186][T17004] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #13: comm syz.3.5312: corrupted inode contents [ 165.118066][T17004] EXT4-fs error (device loop3): ext4_dirty_inode:6137: inode #13: comm syz.3.5312: mark_inode_dirty error [ 165.130836][T17004] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #13: comm syz.3.5312: corrupted inode contents [ 165.145829][T17004] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #13: comm syz.3.5312: mark_inode_dirty error [ 165.156497][T17018] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5316'. [ 165.159619][T17004] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #13: comm syz.3.5312: corrupted inode contents [ 165.167922][T17018] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5316'. [ 165.170513][T17004] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 165.179036][T17004] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #13: comm syz.3.5312: corrupted inode contents [ 165.192582][T17004] EXT4-fs error (device loop3): ext4_truncate:4318: inode #13: comm syz.3.5312: mark_inode_dirty error [ 165.200281][T17004] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 165.214057][T17004] EXT4-fs (loop3): 1 truncate cleaned up [ 165.215039][T17004] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 165.260261][T17004] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.5312: Failed to acquire dquot type 0 [ 165.285486][T17024] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5320'. [ 165.315273][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 165.421726][T17037] binder: 17036:17037 got reply transaction with no transaction stack [ 165.423076][T17037] binder: 17036:17037 transaction reply to 0:0 failed 4/29201/-71, size 0-0 line 2946 [ 165.428228][T17014] (syz.7.5318,17014,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 165.431257][T17014] (syz.7.5318,17014,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 165.453002][T17014] (syz.7.5318,17014,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 165.458928][T17014] JBD2: Ignoring recovery information on journal [ 165.505885][T17014] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 165.540259][T17014] (syz.7.5318,17014,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe3940d. Applying ECC. [ 165.543415][T17014] (syz.7.5318,17014,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x98842a5e, computed 0xe3940d [ 165.545531][T17014] (syz.7.5318,17014,0):ocfs2_read_virt_blocks:1021 ERROR: status = -5 [ 165.546782][T17014] (syz.7.5318,17014,0):ocfs2_read_quota_block:150 ERROR: status = -5 [ 165.547928][T17014] (syz.7.5318,17014,0):ocfs2_local_check_quota_file:209 ERROR: status = -5 [ 165.550767][T17014] (syz.7.5318,17014,0):ocfs2_local_check_quota_file:211 ERROR: failed to read global quota file header (type=1) [ 165.553776][T17014] (syz.7.5318,17014,0):ocfs2_enable_quotas:939 ERROR: status = -22 [ 165.577831][ T5092] ocfs2: Unmounting device (7,7) on (node local) [ 165.628728][T17055] delete_channel: no stack [ 165.760049][T17068] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 166.025822][T17094] Trying to free block not in datazone [ 166.041529][T17100] binder: 17099:17100 ERROR: BC_REGISTER_LOOPER called without request [ 166.049722][T17100] binder: 17099:17100 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 166.051291][T17100] binder: 17099:17100 got reply transaction with no transaction stack [ 166.052595][T17100] binder: 17099:17100 transaction reply to 0:0 failed 5/29201/-71, size 0-0 line 2946 [ 166.070031][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 166.075428][T17104] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5357'. [ 166.117683][T17106] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5358'. [ 166.276759][T17124] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5371'. [ 166.645083][T17173] ieee802154 phy0 wpan0: encryption failed: -90 [ 166.845998][T17205] EXT4-fs: Ignoring removed bh option [ 166.908953][T17205] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 166.932721][T17221] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 166.968927][T17221] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (100), value rounded to 0 ms [ 167.005078][ T6419] EXT4-fs (loop9): unmounting filesystem. [ 167.200453][T17250] xt_nat: multiple ranges no longer supported [ 167.305775][T17256] xt_CT: No such helper "pptp" [ 167.370113][T17272] set_capacity_and_notify: 9 callbacks suppressed [ 167.370124][T17272] loop7: detected capacity change from 0 to 1024 [ 167.452134][T17282] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5442'. [ 167.461025][T17282] netlink: 'syz.8.5442': attribute type 1 has an invalid length. [ 167.469235][T17285] loop6: detected capacity change from 0 to 128 [ 167.480961][T17285] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 167.486747][T17285] hpfs: filesystem error: improperly stopped [ 167.487719][T17285] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 167.497618][T17285] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 167.499222][T17285] hpfs: You really don't want any checks? You are crazy... [ 167.500547][T17285] hpfs: hpfs_map_sector(): read error [ 167.501484][T17285] hpfs: code page support is disabled [ 167.506881][T17285] hpfs: hpfs_map_4sectors(): unaligned read [ 167.508062][T17285] hpfs: hpfs_map_4sectors(): unaligned read [ 167.511259][T17285] hpfs: filesystem error: unable to find root dir [ 167.526847][T17292] loop8: detected capacity change from 0 to 16 [ 167.532151][T17292] erofs: (device loop8): mounted with root inode @ nid 36. [ 167.533323][T17285] hpfs: bad mount options. [ 167.722397][T17318] netlink: 'syz.3.5463': attribute type 1 has an invalid length. [ 167.731621][T17318] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5463'. [ 167.748119][T17321] loop7: detected capacity change from 0 to 512 [ 167.761729][T17322] device veth1_to_bond entered promiscuous mode [ 167.776045][T17322] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 167.799832][T17325] loop8: detected capacity change from 0 to 4096 [ 167.801601][T17325] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 167.808419][T17321] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 167.875257][T17321] __quota_error: 6 callbacks suppressed [ 167.875269][T17321] Quota error (device loop7): write_blk: dquota write failed [ 167.877419][T17321] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 167.912693][T17321] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 167.928264][T17321] EXT4-fs error (device loop7): ext4_acquire_dquot:6835: comm syz.7.5462: Failed to acquire dquot type 1 [ 167.936078][T17321] EXT4-fs (loop7): Remounting filesystem read-only [ 167.974028][T17325] ntfs3: loop8: failed to convert "c46c" to macroman [ 167.986007][ T5092] EXT4-fs (loop7): unmounting filesystem. [ 168.119504][T17360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.554756][T17409] loop9: detected capacity change from 0 to 4096 [ 168.561835][T17409] ntfs: (device loop9): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 168.563130][T17409] ntfs: (device loop9): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 168.565673][T17409] ntfs: (device loop9): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 168.580233][T17409] ntfs: (device loop9): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 168.585764][T17409] ntfs: (device loop9): load_system_files(): Failed to load $Volume. [ 168.587360][T17409] ntfs: (device loop9): ntfs_fill_super(): Failed to load system files. [ 168.750977][T17434] tmpfs: Bad value for 'mpol' [ 168.848843][T17413] loop3: detected capacity change from 0 to 40427 [ 168.864216][T17413] F2FS-fs (loop3): invalid crc value [ 168.865095][T17413] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 168.885037][T17413] F2FS-fs (loop3): Found nat_bits in checkpoint [ 168.902214][T17413] F2FS-fs (loop3): recover fsync data on readonly fs [ 168.913657][T17413] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 168.965132][T17422] loop6: detected capacity change from 0 to 40427 [ 168.981448][T17453] rdma_rxe: rxe_register_device failed with error -23 [ 168.982197][T17422] F2FS-fs (loop6): invalid crc value [ 168.983082][T17453] rdma_rxe: failed to add bond_slave_1 [ 169.000339][T17422] F2FS-fs (loop6): Found nat_bits in checkpoint [ 169.028967][T17422] F2FS-fs (loop6): recover fsync data on readonly fs [ 169.048030][T17422] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 169.233596][T17486] xt_TPROXY: Can be used only with -p tcp or -p udp [ 169.324416][T17492] loop9: detected capacity change from 0 to 4096 [ 169.331028][T17492] ntfs3: loop9: Different NTFS' sector size (4096) and media sector size (512) [ 169.423642][T17492] ntfs3: loop9: failed to convert "c46c" to iso8859-5 [ 169.529370][T17524] overlayfs: workdir and upperdir must be separate subtrees [ 169.656548][T17542] loop3: detected capacity change from 0 to 256 [ 169.681298][T17542] FAT-fs (loop3): Directory bread(block 64) failed [ 169.682407][T17542] FAT-fs (loop3): Directory bread(block 65) failed [ 169.683775][T17542] FAT-fs (loop3): Directory bread(block 66) failed [ 169.684735][T17542] FAT-fs (loop3): Directory bread(block 67) failed [ 169.685804][T17542] FAT-fs (loop3): Directory bread(block 68) failed [ 169.686834][T17542] FAT-fs (loop3): Directory bread(block 69) failed [ 169.689123][T17542] FAT-fs (loop3): Directory bread(block 70) failed [ 169.689148][T17542] FAT-fs (loop3): Directory bread(block 71) failed [ 169.689195][T17542] FAT-fs (loop3): Directory bread(block 72) failed [ 169.689210][T17542] FAT-fs (loop3): Directory bread(block 73) failed [ 169.764211][T17553] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.765583][T17553] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.767370][T17556] misc userio: The device must be registered before sending interrupts [ 169.809616][T17553] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3852: comm syz.7.5579: Allocating blocks 41-42 which overlap fs metadata [ 169.812324][T17553] Quota error (device loop7): write_blk: dquota write failed [ 169.821956][T17563] device tunl0 left promiscuous mode [ 169.833379][T17553] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3852: comm syz.7.5579: Allocating blocks 41-42 which overlap fs metadata [ 169.838143][T17553] EXT4-fs error (device loop7): ext4_acquire_dquot:6835: comm syz.7.5579: Failed to acquire dquot type 1 [ 169.842438][T17553] EXT4-fs error (device loop7): mb_free_blocks:1826: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 169.894515][T17553] EXT4-fs error (device loop7): ext4_do_update_inode:5272: inode #12: comm syz.7.5579: corrupted inode contents [ 169.919779][T17553] EXT4-fs error (device loop7): ext4_dirty_inode:6137: inode #12: comm syz.7.5579: mark_inode_dirty error [ 169.924103][T17553] EXT4-fs error (device loop7): ext4_do_update_inode:5272: inode #12: comm syz.7.5579: corrupted inode contents [ 169.942594][T17553] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #12: comm syz.7.5579: mark_inode_dirty error [ 169.952756][T17553] EXT4-fs error (device loop7): ext4_do_update_inode:5272: inode #12: comm syz.7.5579: corrupted inode contents [ 169.963098][T17553] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 169.971187][T17553] EXT4-fs error (device loop7): ext4_do_update_inode:5272: inode #12: comm syz.7.5579: corrupted inode contents [ 169.991015][T17553] EXT4-fs error (device loop7): ext4_truncate:4318: inode #12: comm syz.7.5579: mark_inode_dirty error [ 169.993759][T17553] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 170.000866][T17553] EXT4-fs (loop7): 1 truncate cleaned up [ 170.002454][T17553] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 170.015744][T17573] xt_cgroup: invalid path, errno=-2 [ 170.044281][T17553] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3852: comm syz.7.5579: Allocating blocks 41-42 which overlap fs metadata [ 170.053080][T17553] EXT4-fs error (device loop7): ext4_acquire_dquot:6835: comm syz.7.5579: Failed to acquire dquot type 1 [ 170.076416][T17544] jfs_strtoUCS: char2uni returned -22. [ 170.077386][T17544] charset = cp949, char = 0xd4 [ 170.102525][ T5092] EXT4-fs (loop7): unmounting filesystem. [ 170.293362][T17590] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 170.399304][ T5092] EXT4-fs (loop7): unmounting filesystem. [ 170.517686][T17571] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 170.521974][T17571] XFS (loop3): Mounting V5 Filesystem [ 170.595796][T17571] XFS (loop3): Ending clean mount [ 170.599820][T17571] XFS (loop3): Quotacheck needed: Please wait. [ 170.662995][T17571] XFS (loop3): Quotacheck: Done. [ 170.750373][ T4320] XFS (loop3): Unmounting Filesystem [ 170.897483][T17661] netlink: 'syz.6.5626': attribute type 10 has an invalid length. [ 170.950886][T17664] AppArmor: change_hat: Invalid input ''' [ 171.358067][T17670] F2FS-fs (loop7): invalid crc value [ 171.359921][T17670] F2FS-fs (loop7): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 171.368291][T17670] F2FS-fs (loop7): Found nat_bits in checkpoint [ 171.385676][T17670] F2FS-fs (loop7): recover fsync data on readonly fs [ 171.389382][T17670] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 171.444024][T17707] ntfs3: loop9: Different NTFS' sector size (2048) and media sector size (512) [ 171.740850][T17727] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 171.742238][T17727] FAT-fs (loop6): Filesystem has been set read-only [ 171.814613][T17756] __nla_validate_parse: 3 callbacks suppressed [ 171.814627][T17756] netlink: 10 bytes leftover after parsing attributes in process `syz.8.5673'. [ 171.840040][T17759] cgroup: none used incorrectly [ 171.948592][T17772] IPv6: sit2: Disabled Multicast RS [ 172.173456][T17805] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5706'. [ 172.283117][T17813] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 172.285781][T17813] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 172.289016][T17805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.290633][T17813] EXT4-fs error (device loop8): ext4_get_journal_inode:5756: inode #5: comm syz.8.5700: unexpected bad inode w/o EXT4_IGET_BAD [ 172.298844][T17813] EXT4-fs (loop8): no journal found [ 172.299803][T17813] EXT4-fs (loop8): can't get journal size [ 172.305670][T17813] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 172.323445][ T5125] EXT4-fs (loop8): unmounting filesystem. [ 172.350108][T17805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.355626][T17818] netlink: 'syz.8.5701': attribute type 3 has an invalid length. [ 172.385892][T17805] bond0 (unregistering): Released all slaves [ 172.432833][T17824] netlink: 'syz.8.5704': attribute type 32 has an invalid length. [ 172.487579][T17828] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5707'. [ 172.574668][T17838] openvswitch: netlink: Message has 4 unknown bytes. [ 172.578345][T17843] set_capacity_and_notify: 10 callbacks suppressed [ 172.578355][T17843] loop3: detected capacity change from 0 to 1024 [ 172.626200][T17843] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 172.744397][T17858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5723'. [ 172.745831][T17858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5723'. [ 172.747209][T17858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5723'. [ 172.748631][T17858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5723'. [ 172.792576][T17856] loop7: detected capacity change from 0 to 8192 [ 172.802301][T17856] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 172.804563][T17856] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 172.806113][T17856] REISERFS (device loop7): using ordered data mode [ 172.807109][T17856] reiserfs: using flush barriers [ 172.818815][T17856] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 172.821591][T17856] REISERFS (device loop7): checking transaction log (loop7) [ 172.834712][T17856] REISERFS (device loop7): Using r5 hash to sort names [ 172.835939][T17856] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 172.876013][T17847] loop8: detected capacity change from 0 to 32768 [ 172.956108][T17844] loop6: detected capacity change from 0 to 32768 [ 172.965940][T17844] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 172.968258][T17844] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 172.971431][T17847] XFS (loop8): Mounting V5 Filesystem [ 173.005434][T17844] gfs2: fsid=syz:syz.0: journal 0 mapped with 18 extents in 12ms [ 173.027615][ T4374] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 173.028778][ T4374] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 173.042198][ T4374] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 13ms [ 173.043770][ T4374] gfs2: fsid=syz:syz.0: jid=0: Done [ 173.044534][T17844] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 173.077381][T17844] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 173.077381][T17844] inode = 0 2341 [ 173.077381][T17844] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 173.080261][T17844] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 173.081677][T17844] gfs2: fsid=syz:syz.0: H: s:SH f:AH e:0 p:17844 [syz.6.5714] inode_permission+0x1d0/0x3c0 [ 173.086711][T17847] XFS (loop8): Ending clean mount [ 173.087987][T17844] gfs2: fsid=syz:syz.0: I: n:0/2341 t:4 f:0x00 d:0x00000201 s:0 p:0 [ 173.089297][T17844] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 173.090452][T17844] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 173.091896][T17844] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 173.101466][T17844] gfs2: fsid=syz:syz.0: File system withdrawn [ 173.102479][T17844] CPU: 1 PID: 17844 Comm: syz.6.5714 Not tainted syzkaller #0 [ 173.103681][T17844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 173.105248][T17844] Call trace: [ 173.105756][T17844] dump_backtrace+0x1c0/0x1ec [ 173.106497][T17844] show_stack+0x2c/0x3c [ 173.107111][T17844] __dump_stack+0x30/0x40 [ 173.107794][T17844] dump_stack_lvl+0xf4/0x15c [ 173.108522][T17844] dump_stack+0x1c/0x5c [ 173.109152][T17844] gfs2_withdraw+0xfa4/0x1390 [ 173.109890][T17844] gfs2_consist_inode_i+0xf0/0x10c [ 173.110681][T17844] gfs2_inode_refresh+0x918/0xd64 [ 173.111457][T17844] inode_go_instantiate+0x4c/0x68 [ 173.112209][T17844] gfs2_instantiate+0x178/0x2b4 [ 173.112964][T17844] gfs2_glock_wait+0x1b4/0x298 [ 173.113670][T17844] gfs2_glock_nq+0x8bc/0x11c4 [ 173.114372][T17844] gfs2_permission+0x27c/0x45c [ 173.115140][T17844] inode_permission+0x1d0/0x3c0 [ 173.115910][T17844] may_open+0x274/0x3b8 [ 173.116491][T17844] path_openat+0x1e64/0x26bc [ 173.117253][T17844] do_filp_open+0x194/0x384 [ 173.118043][T17844] do_sys_openat2+0x134/0x3f4 [ 173.118720][T17844] __arm64_sys_openat+0x118/0x14c [ 173.119509][T17844] invoke_syscall+0x98/0x2b4 [ 173.120269][T17844] el0_svc_common+0x138/0x258 [ 173.120979][T17844] do_el0_svc+0x58/0x130 [ 173.121650][T17844] el0_svc+0x58/0x128 [ 173.122265][T17844] el0t_64_sync_handler+0x84/0xf0 [ 173.122968][T17844] el0t_64_sync+0x18c/0x190 [ 173.183894][ T5125] XFS (loop8): Unmounting Filesystem [ 173.421240][T17915] netlink: 'syz.6.5748': attribute type 2 has an invalid length. [ 173.538801][T17930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5766'. [ 173.615801][T17940] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 173.617700][T17940] overlayfs: missing 'lowerdir' [ 173.642526][T17943] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5761'. [ 173.644112][T17943] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5761'. [ 173.998254][T17952] loop6: detected capacity change from 0 to 32768 [ 174.032304][T17952] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 174.057908][T17952] (syz.6.5767,17952,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 174.066153][T17959] loop7: detected capacity change from 0 to 32768 [ 174.070034][T17952] (syz.6.5767,17952,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 174.071430][T17952] (syz.6.5767,17952,0):ocfs2_mknod:298 ERROR: status = -2 [ 174.072633][T17952] (syz.6.5767,17952,0):ocfs2_mknod:502 ERROR: status = -2 [ 174.074055][T17952] (syz.6.5767,17952,0):ocfs2_mkdir:659 ERROR: status = -2 [ 174.131125][ T5079] ocfs2: Unmounting device (7,6) on (node local) [ 174.230965][T18007] netlink: 'syz.7.5792': attribute type 3 has an invalid length. [ 174.329731][T18019] SET target dimension over the limit! [ 174.522946][T18046] loop3: detected capacity change from 0 to 65 [ 174.551671][T18046] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 174.687194][T18009] loop6: detected capacity change from 0 to 40427 [ 174.702830][T18009] F2FS-fs (loop6): invalid crc value [ 174.704115][T18009] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 174.713755][T18009] F2FS-fs (loop6): Found nat_bits in checkpoint [ 174.732072][T18009] F2FS-fs (loop6): recover fsync data on readonly fs [ 174.735013][T18009] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 174.750474][T18065] [U] [ 174.750988][T18065] [U] [ 174.751430][T18065] [U] [ 174.751830][T18065] [U] [ 174.752396][T18065] [U] [ 174.752831][T18065] [U] [ 174.753237][T18065] [U] [ 174.753737][T18065] [U] [ 174.774832][T18065] [U] [ 174.775331][T18065] [U] [ 174.775732][T18065] [U] [ 174.776135][T18065] [U] [ 174.783704][T18065] [U] [ 174.784156][T18065] [U] [ 174.784629][T18065] [U] [ 174.785120][T18065] [U] [ 174.785698][T18065] [U] [ 174.786144][T18065] [U] [ 174.786555][T18065] [U] [ 174.786959][T18065] [U] [ 174.787584][T18065] [U] [ 174.787996][T18065] [U] [ 174.788388][T18065] [U] [ 174.788816][T18065] [U] [ 174.789344][T18065] [U] [ 174.789746][T18065] [U] [ 174.790140][T18065] [U] [ 174.790536][T18065] [U] [ 174.790988][T18065] [U] [ 174.791337][T18065] [U] [ 174.791740][T18065] [U] [ 174.792125][T18065] [U] [ 174.792540][T18065] [U] [ 174.792918][T18065] [U] [ 174.793288][T18065] [U] [ 174.793682][T18065] [U] [ 174.804234][T18065] [U] [ 174.804740][T18065] [U] [ 174.805226][T18065] [U] [ 174.805707][T18065] [U] [ 174.813868][T18065] [U] [ 174.814382][T18065] [U] [ 174.814843][T18065] [U] [ 174.815297][T18065] [U] [ 174.822570][T18065] [U] [ 174.823039][T18065] [U] [ 174.823460][T18065] [U] [ 174.823974][T18065] [U] [ 174.825171][T18065] [U] [ 174.825606][T18065] [U] [ 174.826054][T18065] [U] [ 174.826489][T18065] [U] [ 174.838823][T18065] [U] [ 174.839344][T18065] [U] [ 174.839792][T18065] [U] [ 174.840253][T18065] [U] [ 174.840880][T18065] [U] [ 174.841304][T18065] [U] [ 174.841751][T18065] [U] [ 174.842184][T18065] [U] [ 174.842679][T18065] [U] [ 174.843101][T18065] [U] [ 174.843540][T18065] [U] [ 174.843937][T18065] [U] [ 174.853597][T18065] [U] [ 174.854065][T18065] [U] [ 174.854463][T18065] [U] [ 174.854897][T18065] [U] [ 174.855449][T18065] [U] [ 174.855872][T18065] [U] [ 174.856262][T18065] [U] [ 174.856670][T18065] [U] [ 174.864278][T18065] [U] [ 174.864788][T18065] [U] [ 174.865222][T18065] [U] [ 174.865666][T18065] [U] [ 174.866197][T18065] [U] [ 174.866662][T18065] [U] [ 174.867120][T18065] [U] [ 174.867556][T18065] [U] [ 174.876525][T18065] [U] [ 174.876985][T18065] [U] [ 174.877391][T18065] [U] [ 174.877829][T18065] [U] [ 174.878329][T18065] [U] [ 174.878695][T18065] [U] [ 174.879069][T18065] [U] [ 174.879482][T18065] [U] [ 174.887553][T18065] [U] [ 174.887995][T18065] [U] [ 174.888393][T18065] [U] [ 174.888840][T18065] [U] [ 174.889368][T18065] [U] [ 174.889741][T18065] [U] [ 174.890154][T18065] [U] [ 174.890617][T18065] [U] [ 174.898920][T18065] [U] [ 174.899383][T18065] [U] [ 174.899805][T18065] [U] [ 174.900306][T18065] [U] [ 174.903447][T18065] [U] [ 174.903890][T18065] [U] [ 174.904366][T18065] [U] [ 174.904849][T18065] [U] [ 174.905414][T18065] [U] [ 174.905865][T18065] [U] [ 174.906318][T18065] [U] [ 174.906766][T18065] [U] [ 174.921081][T18065] [U] [ 174.921563][T18065] [U] [ 174.922009][T18065] [U] [ 174.922468][T18065] [U] [ 174.923093][T18065] [U] [ 174.923515][T18065] [U] [ 174.923978][T18065] [U] [ 174.924427][T18065] [U] [ 174.936533][T18065] [U] [ 174.937038][T18065] [U] [ 174.937450][T18065] [U] [ 174.937920][T18065] [U] [ 174.938438][T18065] [U] [ 174.938829][T18065] [U] [ 174.939219][T18065] [U] [ 174.939696][T18065] [U] [ 174.946703][T18065] [U] [ 174.947120][T18065] [U] [ 174.947539][T18065] [U] [ 174.981023][T18064] [U] [ 175.238478][T18111] loop7: detected capacity change from 0 to 4096 [ 175.250520][T18111] __ntfs_error: 5 callbacks suppressed [ 175.250532][T18111] ntfs: (device loop7): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 175.252883][T18111] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 175.261666][T18111] ntfs: (device loop7): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 175.264289][T18111] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 175.278833][T18111] ntfs: (device loop7): load_system_files(): Failed to load $Volume. [ 175.280228][T18111] ntfs: (device loop7): ntfs_fill_super(): Failed to load system files. [ 175.363346][ T6081] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.407333][T18135] loop8: detected capacity change from 0 to 16 [ 175.408979][T18135] erofs: (device loop8): mounted with root inode @ nid 36. [ 175.464272][T18105] F2FS-fs (loop9): invalid crc value [ 175.465152][T18105] F2FS-fs (loop9): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 175.496188][T18105] F2FS-fs (loop9): Found nat_bits in checkpoint [ 175.517432][T18105] F2FS-fs (loop9): recover fsync data on readonly fs [ 175.518740][T18105] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 175.560167][T18141] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 175.562670][T18141] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 175.577829][T18141] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 175.580755][T18141] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 175.900349][T18153] F2FS-fs (loop7): invalid crc value [ 175.901240][T18153] F2FS-fs (loop7): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 175.909591][T18153] F2FS-fs (loop7): Found nat_bits in checkpoint [ 175.912703][T18168] (syz.9.5880,18168,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 175.921259][T18168] (syz.9.5880,18168,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 175.927732][T18153] F2FS-fs (loop7): recover fsync data on readonly fs [ 175.930103][T18153] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 175.931437][T18168] JBD2: Ignoring recovery information on journal [ 175.955292][T18168] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 176.047215][ T6419] ocfs2: Unmounting device (7,9) on (node local) [ 176.241833][T18208] netlink: 'syz.3.5901': attribute type 3 has an invalid length. [ 176.243115][T18208] netlink: 'syz.3.5901': attribute type 27 has an invalid length. [ 176.397504][T18221] erofs: (device loop8): mounted with root inode @ nid 36. [ 176.500594][T18205] (syz.7.5888,18205,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 176.513651][T18205] (syz.7.5888,18205,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 176.532077][T18205] JBD2: Ignoring recovery information on journal [ 176.557290][T18235] erofs: (device loop8): mounted with root inode @ nid 36. [ 176.598724][T18205] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 176.614082][ T6081] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 176.636139][T18239] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 176.651275][T18239] EXT4-fs error (device loop6): ext4_find_extent:900: inode #2: comm syz.6.5902: inode has invalid extent depth: 9 [ 176.655644][T18239] EXT4-fs (loop6): Remounting filesystem read-only [ 176.711232][ T5079] EXT4-fs (loop6): unmounting filesystem. [ 176.748315][ T5092] ocfs2: Unmounting device (7,7) on (node local) [ 176.761790][T18252] netlink: 'syz.6.5905': attribute type 3 has an invalid length. [ 176.763107][T18252] netlink: 'syz.6.5905': attribute type 27 has an invalid length. [ 176.898451][T18272] netlink: 'syz.9.5913': attribute type 9 has an invalid length. [ 176.977630][T18284] netlink: 'syz.7.5933': attribute type 9 has an invalid length. [ 177.030698][T18290] __nla_validate_parse: 7 callbacks suppressed [ 177.030710][T18290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5928'. [ 177.040274][T18290] IPv6: sit1: Disabled Multicast RS [ 177.048487][T18289] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 177.110668][T18301] netlink: 'syz.9.5931': attribute type 2 has an invalid length. [ 177.197827][T18308] netlink: get zone limit has 8 unknown bytes [ 177.223490][T18314] netlink: 'syz.7.5948': attribute type 2 has an invalid length. [ 177.270211][T18320] netlink: 'syz.8.5940': attribute type 9 has an invalid length. [ 177.327654][T18328] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5944'. [ 177.330203][T18328] IPv6: sit2: Disabled Multicast RS [ 177.348876][T18331] netlink: 'syz.8.5959': attribute type 9 has an invalid length. [ 177.391301][T18335] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 177.462582][T18346] netlink: get zone limit has 8 unknown bytes [ 177.942220][T18412] set_capacity_and_notify: 10 callbacks suppressed [ 177.942231][T18412] loop6: detected capacity change from 0 to 256 [ 177.973954][T18412] FAT-fs (loop6): Directory bread(block 64) failed [ 177.975245][T18412] FAT-fs (loop6): Directory bread(block 65) failed [ 177.976717][T18412] FAT-fs (loop6): Directory bread(block 66) failed [ 177.978155][T18412] FAT-fs (loop6): Directory bread(block 67) failed [ 177.981273][T18412] FAT-fs (loop6): Directory bread(block 68) failed [ 177.984052][T18412] FAT-fs (loop6): Directory bread(block 69) failed [ 177.986789][T18412] FAT-fs (loop6): Directory bread(block 70) failed [ 177.988110][T18412] FAT-fs (loop6): Directory bread(block 71) failed [ 178.001487][T18412] FAT-fs (loop6): Directory bread(block 72) failed [ 178.006082][T18412] FAT-fs (loop6): Directory bread(block 73) failed [ 178.119558][T18430] loop3: detected capacity change from 0 to 64 [ 178.251857][T18442] loop6: detected capacity change from 0 to 164 [ 178.318356][T18445] loop7: detected capacity change from 0 to 256 [ 178.366009][T18445] FAT-fs (loop7): Directory bread(block 64) failed [ 178.367203][T18445] FAT-fs (loop7): Directory bread(block 65) failed [ 178.368474][T18445] FAT-fs (loop7): Directory bread(block 66) failed [ 178.370016][T18445] FAT-fs (loop7): Directory bread(block 67) failed [ 178.372992][T18445] FAT-fs (loop7): Directory bread(block 68) failed [ 178.376714][T18445] FAT-fs (loop7): Directory bread(block 69) failed [ 178.382512][T18445] FAT-fs (loop7): Directory bread(block 70) failed [ 178.397629][T18445] FAT-fs (loop7): Directory bread(block 71) failed [ 178.399959][T18445] FAT-fs (loop7): Directory bread(block 72) failed [ 178.401297][T18445] FAT-fs (loop7): Directory bread(block 73) failed [ 178.448726][T18368] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 178.583036][T18461] loop7: detected capacity change from 0 to 64 [ 178.695439][T18473] loop7: detected capacity change from 0 to 164 [ 178.887731][T18488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.189026][T18514] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6051'. [ 179.196823][T18518] netlink: 2 bytes leftover after parsing attributes in process `syz.9.6040'. [ 179.198295][T18518] device batadv_slave_1 entered promiscuous mode [ 179.199439][T18518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.200737][T18518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.202617][T18518] bridge0: port 4(batadv_slave_1) entered blocking state [ 179.203831][T18518] bridge0: port 4(batadv_slave_1) entered disabled state [ 179.206360][T18518] bridge0: port 4(batadv_slave_1) entered blocking state [ 179.207543][T18518] bridge0: port 4(batadv_slave_1) entered forwarding state [ 179.285485][T18521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6056'. [ 179.337197][T18522] netlink: 2 bytes leftover after parsing attributes in process `syz.8.6055'. [ 179.338529][T18522] device batadv_slave_1 entered promiscuous mode [ 179.339616][T18522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.340807][T18522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.342553][T18522] bridge0: port 4(batadv_slave_1) entered blocking state [ 179.344445][T18522] bridge0: port 4(batadv_slave_1) entered disabled state [ 179.346518][T18522] bridge0: port 4(batadv_slave_1) entered blocking state [ 179.347680][T18522] bridge0: port 4(batadv_slave_1) entered forwarding state [ 179.449447][T18533] loop8: detected capacity change from 0 to 512 [ 179.452770][T18534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.462445][T18533] EXT4-fs (loop8): orphan cleanup on readonly fs [ 179.478712][T18533] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 179.480362][T18533] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 179.482879][T18533] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.6058: attempt to clear invalid blocks 2 len 1 [ 179.488482][T18533] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.6058: invalid indirect mapped block 1819239214 (level 0) [ 179.490945][T18533] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.6058: invalid indirect mapped block 1819239214 (level 1) [ 179.496278][T18533] EXT4-fs (loop8): 1 truncate cleaned up [ 179.497206][T18533] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 179.509759][T18533] EXT4-fs error (device loop8): __ext4_remount:6644: comm syz.8.6058: Abort forced by user [ 179.525966][T18533] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 179.538091][ T5125] EXT4-fs (loop8): unmounting filesystem. [ 179.562825][T18539] netlink: 512 bytes leftover after parsing attributes in process `syz.6.6063'. [ 179.600879][T18481] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 179.796060][T18565] loop7: detected capacity change from 0 to 512 [ 179.798504][T18567] netlink: 512 bytes leftover after parsing attributes in process `syz.8.6065'. [ 179.812040][T18569] netlink: 276 bytes leftover after parsing attributes in process `syz.9.6067'. [ 179.817009][T18565] EXT4-fs (loop7): orphan cleanup on readonly fs [ 179.817989][T18565] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 179.824607][T18565] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 179.833609][T18565] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.6064: attempt to clear invalid blocks 2 len 1 [ 179.836184][T18565] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.6064: invalid indirect mapped block 1819239214 (level 0) [ 179.845595][T18565] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.6064: invalid indirect mapped block 1819239214 (level 1) [ 179.851059][T18565] EXT4-fs (loop7): 1 truncate cleaned up [ 179.851966][T18565] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 179.891814][T18565] EXT4-fs error (device loop7): __ext4_remount:6644: comm syz.7.6064: Abort forced by user [ 179.899765][T18565] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 179.940557][ T5092] EXT4-fs (loop7): unmounting filesystem. [ 180.039177][T18588] xt_connbytes: Forcing CT accounting to be enabled [ 180.117775][T18597] xt_connbytes: Forcing CT accounting to be enabled [ 180.212984][T18608] netlink: 276 bytes leftover after parsing attributes in process `syz.8.6081'. [ 180.312574][T18622] loop9: detected capacity change from 0 to 512 [ 180.352140][T18622] EXT4-fs (loop9): orphan cleanup on readonly fs [ 180.366548][T18622] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 180.368601][T18622] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 180.378406][T18622] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #13: comm syz.9.6085: attempt to clear invalid blocks 2 len 1 [ 180.382302][T18622] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.6085: invalid indirect mapped block 1819239214 (level 0) [ 180.385565][T18622] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.6085: invalid indirect mapped block 1819239214 (level 1) [ 180.390250][T18622] EXT4-fs (loop9): 1 truncate cleaned up [ 180.391337][T18622] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 180.406462][T18622] EXT4-fs error (device loop9): __ext4_remount:6644: comm syz.9.6085: Abort forced by user [ 180.410647][T18622] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 180.459325][ T6419] EXT4-fs (loop9): unmounting filesystem. [ 180.500211][T18637] device veth2 entered promiscuous mode [ 180.657919][T18658] loop8: detected capacity change from 0 to 512 [ 180.688441][T18658] EXT4-fs (loop8): orphan cleanup on readonly fs [ 180.689483][T18658] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 180.692541][T18658] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 180.709663][T18658] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.6109: attempt to clear invalid blocks 2 len 1 [ 180.713674][T18658] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.6109: invalid indirect mapped block 1819239214 (level 0) [ 180.722444][T18658] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.6109: invalid indirect mapped block 1819239214 (level 1) [ 180.739655][T18658] EXT4-fs (loop8): 1 truncate cleaned up [ 180.747504][T18658] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 180.773812][T18658] EXT4-fs error (device loop8): __ext4_remount:6644: comm syz.8.6109: Abort forced by user [ 180.775850][T18658] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 180.814167][ T5125] EXT4-fs (loop8): unmounting filesystem. [ 180.912325][T18684] device veth4 entered promiscuous mode [ 181.339481][T18728] device veth2 entered promiscuous mode [ 181.521391][T18714] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 181.523061][T18714] XFS (loop6): Mounting V5 Filesystem [ 181.544893][T18714] XFS (loop6): Ending clean mount [ 181.548643][T18714] XFS (loop6): Quotacheck needed: Please wait. [ 181.609242][T18714] XFS (loop6): Quotacheck: Done. [ 181.674264][ T5079] XFS (loop6): Unmounting Filesystem [ 181.932524][T18774] validate_nla: 2 callbacks suppressed [ 181.932536][T18774] netlink: 'syz.7.6163': attribute type 10 has an invalid length. [ 181.942967][T18774] device bond0 entered promiscuous mode [ 181.948036][T18774] device bond_slave_0 entered promiscuous mode [ 181.949311][T18774] device bond_slave_1 entered promiscuous mode [ 181.950364][T18774] bridge0: port 5(bond0) entered blocking state [ 181.951342][T18774] bridge0: port 5(bond0) entered disabled state [ 181.953124][T18774] bridge0: port 5(bond0) entered blocking state [ 181.954213][T18774] bridge0: port 5(bond0) entered forwarding state [ 182.056585][T18786] device netdevsim0 entered promiscuous mode [ 182.057826][T18786] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 182.058954][T18786] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 182.161878][T18801] __nla_validate_parse: 3 callbacks suppressed [ 182.161890][T18801] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6177'. [ 182.248540][T18810] netlink: 'syz.6.6180': attribute type 10 has an invalid length. [ 182.249730][T18810] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6180'. [ 182.316962][T18816] netlink: 'syz.3.6195': attribute type 10 has an invalid length. [ 182.318216][T18816] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6195'. [ 182.319646][T18816] device bond0 entered promiscuous mode [ 182.323998][T18816] device bond_slave_0 entered promiscuous mode [ 182.325164][T18816] device bond_slave_1 entered promiscuous mode [ 182.326450][T18816] bridge0: port 3(bond0) entered blocking state [ 182.330877][T18816] bridge0: port 3(bond0) entered disabled state [ 182.340391][T18816] bridge0: port 3(bond0) entered blocking state [ 182.341428][T18816] bridge0: port 3(bond0) entered forwarding state [ 182.441887][T18829] device netdevsim0 entered promiscuous mode [ 182.467725][T18829] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 182.469197][T18829] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 182.476317][T18833] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6188'. [ 182.477761][T18833] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6188'. [ 182.494498][T18793] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 182.495993][T18793] XFS (loop8): Mounting V5 Filesystem [ 182.540119][T18793] XFS (loop8): Ending clean mount [ 182.557588][T18845] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6192'. [ 182.567897][T18793] XFS (loop8): Quotacheck needed: Please wait. [ 182.611320][T18793] XFS (loop8): Quotacheck: Done. [ 182.699651][ T5125] XFS (loop8): Unmounting Filesystem [ 182.741089][T18865] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6205'. [ 182.742633][T18865] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6205'. [ 182.981196][T18872] set_capacity_and_notify: 4 callbacks suppressed [ 182.981206][T18872] loop6: detected capacity change from 0 to 32768 [ 183.051282][T18872] XFS (loop6): Mounting V5 Filesystem [ 183.107583][T18890] loop9: detected capacity change from 0 to 32768 [ 183.111016][T18872] XFS (loop6): Ending clean mount [ 183.114940][T18898] device netdevsim0 entered promiscuous mode [ 183.116101][T18898] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 183.117467][T18898] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 183.141333][ T5079] XFS (loop6): Unmounting Filesystem [ 183.194743][T18890] XFS (loop9): DAX unsupported by block device. Turning off DAX. [ 183.196378][T18890] XFS (loop9): Mounting V5 Filesystem [ 183.248321][T18890] XFS (loop9): Ending clean mount [ 183.249865][T18890] XFS (loop9): Quotacheck needed: Please wait. [ 183.290106][T18890] XFS (loop9): Quotacheck: Done. [ 183.309082][T18909] loop7: detected capacity change from 0 to 32768 [ 183.329451][ T6419] XFS (loop9): Unmounting Filesystem [ 183.334744][T18915] libceph: resolve '0' (ret=-3): failed [ 183.410152][T18909] XFS (loop7): Mounting V5 Filesystem [ 183.510085][T18936] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6227'. [ 183.517238][T18936] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6227'. [ 183.526669][T18909] XFS (loop7): Ending clean mount [ 183.548179][ T5092] XFS (loop7): Unmounting Filesystem [ 183.658007][T18949] libceph: resolve '0' (ret=-3): failed [ 184.087485][T18962] loop8: detected capacity change from 0 to 32768 [ 184.142391][T18962] XFS (loop8): Mounting V5 Filesystem [ 184.170396][T19009] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 184.199431][T18962] XFS (loop8): Ending clean mount [ 184.260873][ T5125] XFS (loop8): Unmounting Filesystem [ 184.434247][T19037] loop9: detected capacity change from 0 to 16 [ 184.440740][T19037] erofs: (device loop9): mounted with root inode @ nid 36. [ 184.462282][T19040] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 184.642816][T19050] loop6: detected capacity change from 0 to 16 [ 184.648768][T19043] loop3: detected capacity change from 0 to 32768 [ 184.649584][T19050] erofs: (device loop6): mounted with root inode @ nid 36. [ 184.722996][T19059] ipt_CLUSTERIP: Please specify destination IP [ 184.750876][T19043] XFS (loop3): Mounting V5 Filesystem [ 184.854412][T19043] XFS (loop3): Ending clean mount [ 184.872496][T19077] loop7: detected capacity change from 0 to 764 [ 184.916578][T19077] rock: directory entry would overflow storage [ 184.926525][T19077] rock: sig=0x4654, size=5, remaining=4 [ 184.953476][T19077] isofs: Unable to find the ".." directory for NFS. [ 184.994188][ T4320] XFS (loop3): Unmounting Filesystem [ 185.088054][T19097] ipt_CLUSTERIP: Please specify destination IP [ 185.268476][T19122] loop8: detected capacity change from 0 to 764 [ 185.271307][T19122] rock: directory entry would overflow storage [ 185.272435][T19122] rock: sig=0x4654, size=5, remaining=4 [ 185.294422][T19122] isofs: Unable to find the ".." directory for NFS. [ 185.517905][T19151] loop9: detected capacity change from 0 to 128 [ 185.671678][T19168] SQUASHFS error: zlib decompression failed, data probably corrupt [ 185.672980][T19168] SQUASHFS error: Failed to read block 0x9b: -5 [ 185.688961][T19168] SQUASHFS error: Unable to read metadata cache entry [99] [ 185.690320][T19168] SQUASHFS error: Unable to read inode 0x127 [ 185.815401][T19188] SQUASHFS error: zlib decompression failed, data probably corrupt [ 185.816679][T19188] SQUASHFS error: Failed to read block 0x9b: -5 [ 185.829865][T19188] SQUASHFS error: Unable to read metadata cache entry [99] [ 185.831142][T19188] SQUASHFS error: Unable to read inode 0x127 [ 186.041707][T19222] Cannot find del_set index 3 as target [ 186.150288][T19226] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 186.169708][T19226] EXT4-fs error (device loop7): ext4_lookup:1858: inode #15: comm syz.7.6371: iget: checksum invalid [ 186.269454][T19253] Cannot find del_set index 3 as target [ 186.287620][ T5092] EXT4-fs (loop7): unmounting filesystem. [ 186.584987][T19282] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 186.638215][T19282] EXT4-fs error (device loop8): ext4_lookup:1858: inode #15: comm syz.8.6388: iget: checksum invalid [ 186.765454][ T5125] EXT4-fs (loop8): unmounting filesystem. [ 186.857211][T19309] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 186.942945][T19319] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 186.948462][T19319] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 186.950431][T19319] System zones: 1-12 [ 186.951391][T19319] EXT4-fs (loop9): couldn't mount RDWR because of unsupported optional features (80) [ 186.953070][T19319] EXT4-fs (loop9): Skipping orphan cleanup due to unknown ROCOMPAT features [ 186.955673][T19319] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 186.978186][T19319] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #2: block 3: comm syz.9.6405: lblock 0 mapped to illegal pblock 3 (length 1) [ 186.981794][T19319] EXT4-fs warning (device loop9): dx_probe:823: inode #2: lblock 0: comm syz.9.6405: error -117 reading directory block [ 186.992357][ T6419] EXT4-fs (loop9): unmounting filesystem. [ 187.037553][T19325] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 187.180400][T19342] netlink: 'syz.3.6416': attribute type 21 has an invalid length. [ 187.181791][T19342] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.196608][T19342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.197799][T19342] IPv6: NLM_F_CREATE should be set when creating new route [ 187.198938][T19342] IPv6: NLM_F_CREATE should be set when creating new route [ 187.200102][T19342] IPv6: NLM_F_CREATE should be set when creating new route [ 187.287962][T19351] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 187.289221][T19351] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 187.290387][T19351] System zones: 1-12 [ 187.291339][T19351] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 187.292801][T19351] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 187.317557][T19351] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 187.335631][T19351] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #2: block 3: comm syz.6.6420: lblock 0 mapped to illegal pblock 3 (length 1) [ 187.348381][T19351] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.6420: error -117 reading directory block [ 187.359024][ T5079] EXT4-fs (loop6): unmounting filesystem. [ 187.375628][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.376667][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.542113][T19257] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0) [ 187.545222][T19257] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 187.548429][T19257] F2FS-fs (loop7): invalid crc value [ 187.567332][T19257] F2FS-fs (loop7): Found nat_bits in checkpoint [ 187.594212][T19257] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 187.595419][T19257] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 187.629047][T19388] netlink: 'syz.9.6432': attribute type 21 has an invalid length. [ 187.630383][T19388] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.645531][T19388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.646794][T19388] IPv6: NLM_F_CREATE should be set when creating new route [ 187.647969][T19388] IPv6: NLM_F_CREATE should be set when creating new route [ 187.649066][T19388] IPv6: NLM_F_CREATE should be set when creating new route [ 187.650377][T19389] __nla_validate_parse: 20 callbacks suppressed [ 187.650391][T19389] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6434'. [ 187.901664][T19418] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6449'. [ 187.998357][T19420] set_capacity_and_notify: 13 callbacks suppressed [ 187.998367][T19420] loop3: detected capacity change from 0 to 4096 [ 188.025005][T19420] __ntfs_error: 2 callbacks suppressed [ 188.025016][T19420] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 188.027773][T19420] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 188.030105][T19420] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 188.051728][T19420] ntfs: volume version 3.1. [ 188.221323][T19436] loop7: detected capacity change from 0 to 4096 [ 188.237072][T19436] ntfs: (device loop7): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 188.238804][T19436] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 188.240820][T19436] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 188.257370][T19436] ntfs: volume version 3.1. [ 188.277435][T19449] loop9: detected capacity change from 0 to 128 [ 188.304662][T19449] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 188.343383][ T55] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 188.380823][T19459] loop7: detected capacity change from 0 to 128 [ 188.395058][T19459] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 188.456426][ T4414] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 188.518318][T19397] loop8: detected capacity change from 0 to 131072 [ 188.523352][T19397] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(0) [ 188.524722][T19397] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 188.531183][T19397] F2FS-fs (loop8): invalid crc value [ 188.541203][T19397] F2FS-fs (loop8): Found nat_bits in checkpoint [ 188.555457][T19397] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 188.556723][T19397] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 188.709910][ T79] block nbd6: Attempted send on invalid socket [ 188.710922][ T79] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.712762][ T79] block nbd6: Attempted send on invalid socket [ 188.713907][ T79] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.715844][ T79] block nbd6: Attempted send on invalid socket [ 188.716864][ T79] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.718574][ T79] block nbd6: Attempted send on invalid socket [ 188.719544][ T79] I/O error, dev nbd6, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.721173][ T79] block nbd6: Attempted send on invalid socket [ 188.722176][ T79] I/O error, dev nbd6, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.724825][ T79] block nbd6: Attempted send on invalid socket [ 188.725812][ T79] I/O error, dev nbd6, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.949053][T19505] netlink: 2 bytes leftover after parsing attributes in process `syz.7.6491'. [ 188.982470][T19508] loop9: detected capacity change from 0 to 512 [ 189.021363][T19508] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 189.030688][T19508] EXT4-fs (loop9): unmounting filesystem. [ 189.105255][ T6385] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 189.166893][ T51] block nbd8: Attempted send on invalid socket [ 189.167919][ T51] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.171604][ T51] block nbd8: Attempted send on invalid socket [ 189.172554][ T51] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.176245][ T51] block nbd8: Attempted send on invalid socket [ 189.177169][ T51] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.184715][ T51] block nbd8: Attempted send on invalid socket [ 189.218256][T19527] bond0: Unable to set up delay as MII monitoring is disabled [ 189.274241][T19531] bond0: Unable to set up delay as MII monitoring is disabled [ 189.341408][T19539] netlink: 2 bytes leftover after parsing attributes in process `syz.9.6506'. [ 189.425420][T19547] loop7: detected capacity change from 0 to 512 [ 189.461051][T19547] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 189.464499][T19547] EXT4-fs (loop7): unmounting filesystem. [ 189.541083][T19559] binder: 19558:19559 ioctl c018620c 20000400 returned -1 [ 189.640069][T19490] loop3: detected capacity change from 0 to 131072 [ 189.651376][T19490] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 189.652721][T19490] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 189.653778][T19565] loop8: detected capacity change from 0 to 2048 [ 189.677631][T19490] F2FS-fs (loop3): invalid crc value [ 189.677641][T19565] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.711427][T19577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6524'. [ 189.716010][T19490] F2FS-fs (loop3): Found nat_bits in checkpoint [ 189.725690][T19577] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 189.743864][T19490] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 189.744915][T19490] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 189.780456][T19585] binder: 19584:19585 ioctl c018620c 20000400 returned -1 [ 189.916434][T19597] loop7: detected capacity change from 0 to 4096 [ 189.928084][T19597] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 189.989521][T19597] ntfs3: loop7: failed to convert "c46c" to macromanian [ 190.021974][T19616] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6539'. [ 190.023666][T19616] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 190.078499][T19615] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.085351][T19611] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 190.138922][T19611] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 190.269431][T19644] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6557'. [ 190.277942][T19637] UDF-fs: error (device loop7): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1376) [ 190.280070][T19637] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1376) has too big (63528) entry at pos 0 [ 190.432646][T19654] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1376) [ 190.435177][T19654] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has too big (63528) entry at pos 0 [ 190.601023][T19679] ntfs3: loop9: Different NTFS' sector size (4096) and media sector size (512) [ 190.620620][T19679] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 190.624377][T19687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6571'. [ 190.825694][T19710] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6588'. [ 190.839005][T19708] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 190.908344][T19708] ntfs3: loop6: failed to convert "c46c" to maciceland [ 191.027449][T19731] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6597'. [ 191.051994][T19733] x_tables: duplicate entry at hook 3 [ 191.159556][T19750] netlink: 'syz.9.6607': attribute type 1 has an invalid length. [ 191.160762][T19750] netlink: 'syz.9.6607': attribute type 2 has an invalid length. [ 191.183017][T19746] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 191.268671][T19746] ntfs3: loop8: failed to convert "c46c" to maciceland [ 191.300635][T19765] x_tables: duplicate entry at hook 3 [ 191.381858][T19781] netlink: 'syz.7.6621': attribute type 1 has an invalid length. [ 191.383335][T19781] netlink: 'syz.7.6621': attribute type 2 has an invalid length. [ 191.620999][T19807] xt_hashlimit: size too large, truncated to 1048576 [ 191.622131][T19807] xt_hashlimit: max too large, truncated to 1048576 [ 191.702586][T19818] tmpfs: Bad value for 'mpol' [ 191.948442][T19849] xt_hashlimit: size too large, truncated to 1048576 [ 191.949712][T19849] xt_hashlimit: max too large, truncated to 1048576 [ 191.966757][T19855] tmpfs: Bad value for 'mpol' [ 192.397913][T19901] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 192.399825][T19901] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 192.401237][T19901] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 192.414715][T19901] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 192.430452][T19901] ntfs: volume version 3.1. [ 192.460572][T19907] FAT-fs (loop7): Directory bread(block 64) failed [ 192.461748][T19907] FAT-fs (loop7): Directory bread(block 65) failed [ 192.462902][T19907] FAT-fs (loop7): Directory bread(block 66) failed [ 192.481063][T19907] FAT-fs (loop7): Directory bread(block 67) failed [ 192.482236][T19907] FAT-fs (loop7): Directory bread(block 68) failed [ 192.491371][T19907] FAT-fs (loop7): Directory bread(block 69) failed [ 192.492432][T19907] FAT-fs (loop7): Directory bread(block 70) failed [ 192.503289][T19907] FAT-fs (loop7): Directory bread(block 71) failed [ 192.504307][T19907] FAT-fs (loop7): Directory bread(block 72) failed [ 192.511703][T19907] FAT-fs (loop7): Directory bread(block 73) failed [ 192.652278][T19923] ntfs: volume version 3.1. [ 192.852947][T19908] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 192.856835][T19908] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 192.860224][T19908] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 192.916916][T19908] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 193.230167][T19980] set_capacity_and_notify: 11 callbacks suppressed [ 193.230177][T19980] loop8: detected capacity change from 0 to 64 [ 193.280231][T19984] dlm: no local IP address has been set [ 193.281182][T19984] dlm: cannot start dlm midcomms -107 [ 193.632740][T19979] loop3: detected capacity change from 0 to 32768 [ 193.642368][T19979] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 193.655901][T20016] __nla_validate_parse: 5 callbacks suppressed [ 193.655912][T20016] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6747'. [ 193.658551][T19979] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 193.661437][T19979] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 193.680899][T20019] loop6: detected capacity change from 0 to 64 [ 193.687617][T19979] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 193.693760][T20020] dlm: no local IP address has been set [ 193.694675][T20020] dlm: cannot start dlm midcomms -107 [ 193.922173][T20043] loop7: detected capacity change from 0 to 64 [ 193.971111][T20047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.992491][T20049] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6751'. [ 194.051421][T20056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6754'. [ 194.053083][T20056] netlink: 'syz.6.6754': attribute type 1 has an invalid length. [ 194.140660][T20065] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6771'. [ 194.142360][T20065] netlink: 'syz.7.6771': attribute type 1 has an invalid length. [ 194.149991][T20067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6760'. [ 194.151476][T20067] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6760'. [ 194.218691][T20075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6764'. [ 194.272659][T20082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.277001][T20083] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6780'. [ 194.295802][T20085] loop6: detected capacity change from 0 to 64 [ 194.359381][T20089] loop9: detected capacity change from 0 to 1024 [ 194.388763][T20089] __quota_error: 14 callbacks suppressed [ 194.388777][T20089] Quota error (device loop9): do_check_range: Getting block 64 out of range 1-5 [ 194.405039][T20089] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 194.406594][T20089] EXT4-fs error (device loop9): ext4_acquire_dquot:6835: comm syz.9.6770: Failed to acquire dquot type 0 [ 194.409169][T20089] EXT4-fs error (device loop9): mb_free_blocks:1826: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 194.426870][T20089] EXT4-fs error (device loop9): ext4_do_update_inode:5272: inode #13: comm syz.9.6770: corrupted inode contents [ 194.429275][T20089] EXT4-fs error (device loop9): ext4_dirty_inode:6137: inode #13: comm syz.9.6770: mark_inode_dirty error [ 194.444034][T20089] EXT4-fs error (device loop9): ext4_do_update_inode:5272: inode #13: comm syz.9.6770: corrupted inode contents [ 194.449249][T20089] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #13: comm syz.9.6770: mark_inode_dirty error [ 194.464534][T20089] EXT4-fs error (device loop9): ext4_do_update_inode:5272: inode #13: comm syz.9.6770: corrupted inode contents [ 194.476940][T20089] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 194.481701][T20089] EXT4-fs error (device loop9): ext4_do_update_inode:5272: inode #13: comm syz.9.6770: corrupted inode contents [ 194.488351][T20089] EXT4-fs error (device loop9): ext4_truncate:4318: inode #13: comm syz.9.6770: mark_inode_dirty error [ 194.492446][T20089] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 194.504472][T20077] loop3: detected capacity change from 0 to 32768 [ 194.506876][T20099] binder: 20098:20099 got reply transaction with no transaction stack [ 194.516398][T20099] binder: 20098:20099 transaction reply to 0:0 failed 6/29201/-71, size 0-0 line 2946 [ 194.518132][T20077] (syz.3.6762,20077,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 194.520207][T20089] EXT4-fs (loop9): 1 truncate cleaned up [ 194.520236][T20089] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 194.526118][T20077] (syz.3.6762,20077,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 194.541372][T20077] (syz.3.6762,20077,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 194.541835][T20101] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6775'. [ 194.550490][T20077] JBD2: Ignoring recovery information on journal [ 194.551540][T20101] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6775'. [ 194.554276][T20089] Quota error (device loop9): do_check_range: Getting block 64 out of range 1-5 [ 194.556067][T20089] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 194.557545][T20089] EXT4-fs error (device loop9): ext4_acquire_dquot:6835: comm syz.9.6770: Failed to acquire dquot type 0 [ 194.580681][T20077] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 194.604170][ T6419] EXT4-fs (loop9): unmounting filesystem. [ 194.635726][T20077] (syz.3.6762,20077,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe3940d. Applying ECC. [ 194.638015][T20077] (syz.3.6762,20077,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x98842a5e, computed 0xe3940d [ 194.639924][T20077] (syz.3.6762,20077,0):ocfs2_read_virt_blocks:1021 ERROR: status = -5 [ 194.641235][T20077] (syz.3.6762,20077,0):ocfs2_read_quota_block:150 ERROR: status = -5 [ 194.667264][T20077] (syz.3.6762,20077,0):ocfs2_local_check_quota_file:209 ERROR: status = -5 [ 194.668724][T20077] (syz.3.6762,20077,0):ocfs2_local_check_quota_file:211 ERROR: failed to read global quota file header (type=1) [ 194.670690][T20077] (syz.3.6762,20077,0):ocfs2_enable_quotas:939 ERROR: status = -22 [ 194.694789][T20114] loop7: detected capacity change from 0 to 64 [ 194.715694][ T4320] ocfs2: Unmounting device (7,3) on (node local) [ 194.847247][T20126] binder: 20124:20126 got reply transaction with no transaction stack [ 194.848536][T20126] binder: 20124:20126 transaction reply to 0:0 failed 7/29201/-71, size 0-0 line 2946 [ 194.998826][T20119] loop9: detected capacity change from 0 to 32768 [ 195.005711][T20119] (syz.9.6796,20119,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.008024][T20119] (syz.9.6796,20119,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.017598][T20119] (syz.9.6796,20119,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 195.020947][T20119] JBD2: Ignoring recovery information on journal [ 195.040892][T20119] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 195.066580][T20119] (syz.9.6796,20119,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe3940d. Applying ECC. [ 195.068698][T20119] (syz.9.6796,20119,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x98842a5e, computed 0xe3940d [ 195.070600][T20119] (syz.9.6796,20119,0):ocfs2_read_virt_blocks:1021 ERROR: status = -5 [ 195.071823][T20119] (syz.9.6796,20119,0):ocfs2_read_quota_block:150 ERROR: status = -5 [ 195.073070][T20119] (syz.9.6796,20119,0):ocfs2_local_check_quota_file:209 ERROR: status = -5 [ 195.078942][T20119] (syz.9.6796,20119,0):ocfs2_local_check_quota_file:211 ERROR: failed to read global quota file header (type=1) [ 195.081709][T20119] (syz.9.6796,20119,0):ocfs2_enable_quotas:939 ERROR: status = -22 [ 195.135166][ T6419] ocfs2: Unmounting device (7,9) on (node local) [ 195.252993][T20159] loop6: detected capacity change from 0 to 64 [ 195.330582][T20150] (syz.8.6810,20150,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.340294][T20150] (syz.8.6810,20150,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.360872][T20150] (syz.8.6810,20150,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 195.367465][T20150] JBD2: Ignoring recovery information on journal [ 195.395893][T20167] delete_channel: no stack [ 195.432946][T20150] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 195.457556][T20150] (syz.8.6810,20150,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe3940d. Applying ECC. [ 195.459881][T20150] (syz.8.6810,20150,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x98842a5e, computed 0xe3940d [ 195.480209][T20150] (syz.8.6810,20150,0):ocfs2_read_virt_blocks:1021 ERROR: status = -5 [ 195.481509][T20150] (syz.8.6810,20150,0):ocfs2_read_quota_block:150 ERROR: status = -5 [ 195.482795][T20150] (syz.8.6810,20150,0):ocfs2_local_check_quota_file:209 ERROR: status = -5 [ 195.495655][T20150] (syz.8.6810,20150,0):ocfs2_local_check_quota_file:211 ERROR: failed to read global quota file header (type=1) [ 195.497621][T20150] (syz.8.6810,20150,0):ocfs2_enable_quotas:939 ERROR: status = -22 [ 195.577119][ T5125] ocfs2: Unmounting device (7,8) on (node local) [ 195.642535][T20191] delete_channel: no stack [ 195.737066][T20205] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 195.959901][T20215] (syz.3.6830,20215,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.962476][T20215] (syz.3.6830,20215,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.977740][T20215] (syz.3.6830,20215,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 195.981072][T20215] JBD2: Ignoring recovery information on journal [ 196.045622][T20215] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 196.062429][T20215] (syz.3.6830,20215,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe3940d. Applying ECC. [ 196.069461][T20215] (syz.3.6830,20215,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x98842a5e, computed 0xe3940d [ 196.071431][T20215] (syz.3.6830,20215,1):ocfs2_read_virt_blocks:1021 ERROR: status = -5 [ 196.096731][T20215] (syz.3.6830,20215,1):ocfs2_read_quota_block:150 ERROR: status = -5 [ 196.098119][T20215] (syz.3.6830,20215,1):ocfs2_local_check_quota_file:209 ERROR: status = -5 [ 196.099485][T20215] (syz.3.6830,20215,1):ocfs2_local_check_quota_file:211 ERROR: failed to read global quota file header (type=1) [ 196.101417][T20215] (syz.3.6830,20215,1):ocfs2_enable_quotas:939 ERROR: status = -22 [ 196.180463][ T4320] ocfs2: Unmounting device (7,3) on (node local) [ 196.277863][T20253] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 196.618289][T20287] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 196.631634][T20286] Trying to free block not in datazone [ 197.024332][T20330] binder: 20325:20330 ERROR: BC_REGISTER_LOOPER called without request [ 197.025738][T20330] binder: 20325:20330 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 197.027247][T20330] binder: 20325:20330 got reply transaction with no transaction stack [ 197.028686][T20330] binder: 20325:20330 transaction reply to 0:0 failed 8/29201/-71, size 0-0 line 2946 [ 197.030759][T11918] binder: undelivered TRANSACTION_ERROR: 29201 [ 197.305484][T20365] binder: 20364:20365 ERROR: BC_REGISTER_LOOPER called without request [ 197.306923][T20365] binder: 20364:20365 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 197.308466][T20365] binder: 20364:20365 got reply transaction with no transaction stack [ 197.309737][T20365] binder: 20364:20365 transaction reply to 0:0 failed 9/29201/-71, size 0-0 line 2946 [ 197.323698][T11918] binder: undelivered TRANSACTION_ERROR: 29201 [ 197.805863][T20431] ieee802154 phy0 wpan0: encryption failed: -90 [ 197.890904][T20441] ieee802154 phy0 wpan0: encryption failed: -90 [ 198.251885][T20496] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 198.257127][T20496] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (100), value rounded to 0 ms [ 198.305824][T20506] set_capacity_and_notify: 7 callbacks suppressed [ 198.305835][T20506] loop7: detected capacity change from 0 to 1024 [ 198.308568][T20506] EXT4-fs: Ignoring removed bh option [ 198.416275][T20506] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 198.474444][ T5092] EXT4-fs (loop7): unmounting filesystem. [ 198.542417][T20536] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 198.551134][T20536] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (100), value rounded to 0 ms [ 198.674207][T20550] loop8: detected capacity change from 0 to 1024 [ 198.675666][T20550] EXT4-fs: Ignoring removed bh option [ 198.738160][T20550] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 198.792912][ T5125] EXT4-fs (loop8): unmounting filesystem. [ 198.857513][T20570] xt_nat: multiple ranges no longer supported [ 198.909917][T20580] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 198.911902][T20580] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (100), value rounded to 0 ms [ 199.029638][T20596] __nla_validate_parse: 7 callbacks suppressed [ 199.029650][T20596] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7022'. [ 199.050007][T20596] netlink: 'syz.7.7022': attribute type 1 has an invalid length. [ 199.058396][T20588] xt_CT: No such helper "pptp" [ 199.159357][T20606] xt_nat: multiple ranges no longer supported [ 199.179995][T20608] loop3: detected capacity change from 0 to 128 [ 199.196978][T20608] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 199.199482][T20608] hpfs: filesystem error: improperly stopped [ 199.200455][T20608] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 199.201690][T20608] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 199.221756][T20608] hpfs: You really don't want any checks? You are crazy... [ 199.223004][T20608] hpfs: hpfs_map_sector(): read error [ 199.228011][T20608] hpfs: code page support is disabled [ 199.228946][T20608] hpfs: hpfs_map_4sectors(): unaligned read [ 199.229902][T20608] hpfs: hpfs_map_4sectors(): unaligned read [ 199.230793][T20608] hpfs: filesystem error: unable to find root dir [ 199.240611][T20608] hpfs: bad mount options. [ 199.246089][T20616] loop9: detected capacity change from 0 to 16 [ 199.248539][T20616] erofs: (device loop9): mounted with root inode @ nid 36. [ 199.275352][T20619] loop7: detected capacity change from 0 to 16 [ 199.279277][T20619] erofs: (device loop7): mounted with root inode @ nid 36. [ 199.347808][T20630] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 199.358120][T20630] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (100), value rounded to 0 ms [ 199.467757][T20644] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7028'. [ 199.469379][T20644] netlink: 'syz.6.7028': attribute type 1 has an invalid length. [ 199.490609][T20642] xt_CT: No such helper "pptp" [ 199.655164][T20666] loop7: detected capacity change from 0 to 128 [ 199.659606][T20667] loop9: detected capacity change from 0 to 1024 [ 199.673831][T20666] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 199.676291][T20666] hpfs: filesystem error: improperly stopped [ 199.693406][ T47] Bluetooth: hci5: command 0x0406 tx timeout [ 199.707071][T20666] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 199.708408][T20666] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 199.717973][T20666] hpfs: You really don't want any checks? You are crazy... [ 199.719236][T20666] hpfs: hpfs_map_sector(): read error [ 199.720123][T20666] hpfs: code page support is disabled [ 199.721103][T20666] hpfs: hpfs_map_4sectors(): unaligned read [ 199.722122][T20666] hpfs: hpfs_map_4sectors(): unaligned read [ 199.723041][T20666] hpfs: filesystem error: unable to find root dir [ 199.727816][T20666] hpfs: bad mount options. [ 199.870914][T20693] loop3: detected capacity change from 0 to 1024 [ 200.017960][T20713] loop9: detected capacity change from 0 to 128 [ 200.033940][T20713] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 200.036490][T20713] hpfs: filesystem error: improperly stopped [ 200.037610][T20713] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 200.038711][T20713] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 200.042139][T20712] loop3: detected capacity change from 0 to 4096 [ 200.053332][T20713] hpfs: You really don't want any checks? You are crazy... [ 200.054221][T20716] netlink: 'syz.7.7069': attribute type 1 has an invalid length. [ 200.055828][T20716] netlink: 224 bytes leftover after parsing attributes in process `syz.7.7069'. [ 200.058720][T20712] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 200.060774][T20713] hpfs: hpfs_map_sector(): read error [ 200.061623][T20713] hpfs: code page support is disabled [ 200.063725][T20713] hpfs: hpfs_map_4sectors(): unaligned read [ 200.064655][T20713] hpfs: hpfs_map_4sectors(): unaligned read [ 200.065552][T20713] hpfs: filesystem error: unable to find root dir [ 200.076194][T20713] hpfs: bad mount options. [ 200.125858][T20712] ntfs3: loop3: failed to convert "c46c" to macroman [ 200.193080][T20731] netlink: 'syz.9.7084': attribute type 1 has an invalid length. [ 200.203326][T20731] netlink: 224 bytes leftover after parsing attributes in process `syz.9.7084'. [ 200.268422][T20738] device veth1_to_bond entered promiscuous mode [ 200.292622][T20733] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 200.312784][T20733] Quota error (device loop8): write_blk: dquota write failed [ 200.327818][T20738] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 200.354011][T20733] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 200.368686][T20733] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 200.381004][T20733] EXT4-fs error (device loop8): ext4_acquire_dquot:6835: comm syz.8.7076: Failed to acquire dquot type 1 [ 200.391140][T20733] EXT4-fs (loop8): Remounting filesystem read-only [ 200.428520][ T5125] EXT4-fs (loop8): unmounting filesystem. [ 200.542983][T20760] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 200.612967][T20760] ntfs3: loop6: failed to convert "c46c" to macroman [ 200.699535][T20780] device veth1_to_bond entered promiscuous mode [ 200.722958][T20780] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 200.735228][T20786] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7101'. [ 200.965741][T20818] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7117'. [ 201.083730][T20834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.299648][T20864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.553302][T20897] tmpfs: Bad value for 'mpol' [ 201.659422][T20910] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7162'. [ 201.826736][T20933] tmpfs: Bad value for 'mpol' [ 202.022683][T20955] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7181'. [ 202.045169][T20926] F2FS-fs (loop3): invalid crc value [ 202.058251][T20926] F2FS-fs (loop3): Found nat_bits in checkpoint [ 202.071475][T20926] F2FS-fs (loop3): recover fsync data on readonly fs [ 202.077171][T20926] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 202.162983][T20968] rdma_rxe: rxe_register_device failed with error -23 [ 202.166008][T20970] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7190'. [ 202.170353][T20968] rdma_rxe: failed to add bond_slave_1 [ 202.265431][T20978] rdma_rxe: rxe_register_device failed with error -23 [ 202.266664][T20978] rdma_rxe: failed to add bond_slave_1 [ 202.401235][T20999] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7205'. [ 202.527435][T21013] rdma_rxe: rxe_register_device failed with error -23 [ 202.528621][T21013] rdma_rxe: failed to add bond_slave_1 [ 202.574855][T21016] xt_TPROXY: Can be used only with -p tcp or -p udp [ 202.595486][T21020] rdma_rxe: rxe_register_device failed with error -23 [ 202.596673][T21020] rdma_rxe: failed to add bond_slave_1 [ 202.689106][T20990] F2FS-fs (loop9): invalid crc value [ 202.710653][T20990] F2FS-fs (loop9): Found nat_bits in checkpoint [ 202.730282][T20990] F2FS-fs (loop9): recover fsync data on readonly fs [ 202.731932][T20990] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 202.816667][T21037] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 202.899473][T21037] ntfs3: loop8: failed to convert "c46c" to iso8859-5 [ 202.981312][T21060] xt_TPROXY: Can be used only with -p tcp or -p udp [ 203.058398][T21063] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 203.132317][T21063] ntfs3: loop6: failed to convert "c46c" to iso8859-5 [ 203.214321][T21093] device ipvlan1 left promiscuous mode [ 203.239780][T21095] overlayfs: workdir and upperdir must be separate subtrees [ 203.311947][T21106] overlayfs: workdir and upperdir must be separate subtrees [ 203.580649][T21139] set_capacity_and_notify: 6 callbacks suppressed [ 203.580658][T21139] loop6: detected capacity change from 0 to 512 [ 203.595617][T21139] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 203.596952][T21139] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 203.641951][T21139] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3852: comm syz.6.7277: Allocating blocks 41-42 which overlap fs metadata [ 203.648178][T21147] loop9: detected capacity change from 0 to 256 [ 203.650625][T21139] Quota error (device loop6): write_blk: dquota write failed [ 203.651752][T21139] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 203.672545][T21139] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3852: comm syz.6.7277: Allocating blocks 41-42 which overlap fs metadata [ 203.676847][T21139] Quota error (device loop6): write_blk: dquota write failed [ 203.678113][T21139] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 203.679656][T21139] EXT4-fs error (device loop6): ext4_acquire_dquot:6835: comm syz.6.7277: Failed to acquire dquot type 1 [ 203.681532][T21139] EXT4-fs error (device loop6): mb_free_blocks:1826: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 203.682401][T21147] FAT-fs (loop9): Directory bread(block 64) failed [ 203.684868][T21139] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #12: comm syz.6.7277: corrupted inode contents [ 203.687524][T21147] FAT-fs (loop9): Directory bread(block 65) failed [ 203.688861][T21139] EXT4-fs error (device loop6): ext4_dirty_inode:6137: inode #12: comm syz.6.7277: mark_inode_dirty error [ 203.689844][T21147] FAT-fs (loop9): Directory bread(block 66) failed [ 203.692003][T21139] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #12: comm syz.6.7277: corrupted inode contents [ 203.693665][T21147] FAT-fs (loop9): Directory bread(block 67) failed [ 203.695694][T21147] FAT-fs (loop9): Directory bread(block 68) failed [ 203.696076][T21139] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #12: comm syz.6.7277: mark_inode_dirty error [ 203.696703][T21147] FAT-fs (loop9): Directory bread(block 69) failed [ 203.698614][T21139] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #12: comm syz.6.7277: corrupted inode contents [ 203.699322][T21147] FAT-fs (loop9): Directory bread(block 70) failed [ 203.701362][T21139] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 203.706675][T21139] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #12: comm syz.6.7277: corrupted inode contents [ 203.708920][T21139] EXT4-fs error (device loop6): ext4_truncate:4318: inode #12: comm syz.6.7277: mark_inode_dirty error [ 203.710891][T21139] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 203.712625][T21139] EXT4-fs (loop6): 1 truncate cleaned up [ 203.713675][T21139] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 203.718912][T21147] FAT-fs (loop9): Directory bread(block 71) failed [ 203.719960][T21147] FAT-fs (loop9): Directory bread(block 72) failed [ 203.720893][T21147] FAT-fs (loop9): Directory bread(block 73) failed [ 203.736257][T21126] loop8: detected capacity change from 0 to 32768 [ 203.744821][T21139] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3852: comm syz.6.7277: Allocating blocks 41-42 which overlap fs metadata [ 203.752238][T21126] jfs_strtoUCS: char2uni returned -22. [ 203.777970][T21139] Quota error (device loop6): write_blk: dquota write failed [ 203.779261][T21139] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 203.780761][T21139] EXT4-fs error (device loop6): ext4_acquire_dquot:6835: comm syz.6.7277: Failed to acquire dquot type 1 [ 203.782819][T21126] charset = cp949, char = 0xd4 [ 203.837044][T21150] loop3: detected capacity change from 0 to 512 [ 203.843725][ T5079] EXT4-fs (loop6): unmounting filesystem. [ 203.847161][T21150] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 203.848487][T21150] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 203.870359][T21150] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3852: comm syz.3.7293: Allocating blocks 41-42 which overlap fs metadata [ 203.872903][T21150] Quota error (device loop3): write_blk: dquota write failed [ 203.906203][T21150] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.7293: Failed to acquire dquot type 1 [ 203.918028][T21150] EXT4-fs error (device loop3): mb_free_blocks:1826: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 203.924313][T21150] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #12: comm syz.3.7293: corrupted inode contents [ 203.928349][T21150] EXT4-fs error (device loop3): ext4_dirty_inode:6137: inode #12: comm syz.3.7293: mark_inode_dirty error [ 203.941373][T21150] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #12: comm syz.3.7293: corrupted inode contents [ 203.945189][T21150] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.7293: mark_inode_dirty error [ 203.947599][T21150] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #12: comm syz.3.7293: corrupted inode contents [ 203.950963][T21150] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 203.954279][T21150] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #12: comm syz.3.7293: corrupted inode contents [ 203.957390][T21150] EXT4-fs error (device loop3): ext4_truncate:4318: inode #12: comm syz.3.7293: mark_inode_dirty error [ 203.962751][T21150] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 203.968718][T21150] EXT4-fs (loop3): 1 truncate cleaned up [ 203.969609][T21150] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 204.017922][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 204.020529][ T4414] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:6: Failed to release dquot type 1 [ 204.102665][T21173] misc userio: The device must be registered before sending interrupts [ 204.158970][T21182] loop6: detected capacity change from 0 to 256 [ 204.188700][T21182] FAT-fs (loop6): Directory bread(block 64) failed [ 204.189813][T21182] FAT-fs (loop6): Directory bread(block 65) failed [ 204.190864][T21182] FAT-fs (loop6): Directory bread(block 66) failed [ 204.210642][T21182] FAT-fs (loop6): Directory bread(block 67) failed [ 204.211754][T21182] FAT-fs (loop6): Directory bread(block 68) failed [ 204.230817][T21182] FAT-fs (loop6): Directory bread(block 69) failed [ 204.231919][T21182] FAT-fs (loop6): Directory bread(block 70) failed [ 204.232893][T21182] FAT-fs (loop6): Directory bread(block 71) failed [ 204.247204][T21182] FAT-fs (loop6): Directory bread(block 72) failed [ 204.248304][T21182] FAT-fs (loop6): Directory bread(block 73) failed [ 204.379483][T21204] loop8: detected capacity change from 0 to 512 [ 204.406413][T21200] loop9: detected capacity change from 0 to 4096 [ 204.417908][T21204] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 204.419299][T21204] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 204.434738][T21185] loop7: detected capacity change from 0 to 32768 [ 204.441085][T21200] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 204.459221][T21185] jfs_strtoUCS: char2uni returned -22. [ 204.460096][T21185] charset = cp949, char = 0xd4 [ 204.482713][T21204] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3852: comm syz.8.7302: Allocating blocks 41-42 which overlap fs metadata [ 204.489185][T21204] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3852: comm syz.8.7302: Allocating blocks 41-42 which overlap fs metadata [ 204.491778][T21204] EXT4-fs error (device loop8): ext4_acquire_dquot:6835: comm syz.8.7302: Failed to acquire dquot type 1 [ 204.512809][T21204] EXT4-fs error (device loop8): mb_free_blocks:1826: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 204.517626][ T6419] EXT4-fs (loop9): unmounting filesystem. [ 204.526022][T21204] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.7302: corrupted inode contents [ 204.530382][T21204] EXT4-fs error (device loop8): ext4_dirty_inode:6137: inode #12: comm syz.8.7302: mark_inode_dirty error [ 204.532569][T21204] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.7302: corrupted inode contents [ 204.538261][T21204] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #12: comm syz.8.7302: mark_inode_dirty error [ 204.542180][T21204] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.7302: corrupted inode contents [ 204.550792][T21204] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 204.556177][T21204] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.7302: corrupted inode contents [ 204.559705][T21204] EXT4-fs error (device loop8): ext4_truncate:4318: inode #12: comm syz.8.7302: mark_inode_dirty error [ 204.563753][T21204] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 204.567154][T21204] EXT4-fs (loop8): 1 truncate cleaned up [ 204.568075][T21204] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 204.584772][T21202] loop6: detected capacity change from 0 to 32768 [ 204.596204][T21204] EXT4-fs error (device loop8): ext4_acquire_dquot:6835: comm syz.8.7302: Failed to acquire dquot type 1 [ 204.624089][ T5125] EXT4-fs (loop8): unmounting filesystem. [ 204.670360][T21202] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 204.671902][T21202] XFS (loop6): Mounting V5 Filesystem [ 204.678492][T21220] xt_cgroup: invalid path, errno=-2 [ 204.712698][T21225] misc userio: The device must be registered before sending interrupts [ 204.732228][T21202] XFS (loop6): Ending clean mount [ 204.733993][T21202] XFS (loop6): Quotacheck needed: Please wait. [ 204.748262][T21230] xt_cgroup: invalid path, errno=-2 [ 204.794873][T21202] XFS (loop6): Quotacheck: Done. [ 204.850774][T21238] loop8: detected capacity change from 0 to 512 [ 204.880252][T21238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 204.881626][T21238] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 204.888886][ T5079] XFS (loop6): Unmounting Filesystem [ 204.925198][T21238] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3852: comm syz.8.7320: Allocating blocks 41-42 which overlap fs metadata [ 204.927713][T21238] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3852: comm syz.8.7320: Allocating blocks 41-42 which overlap fs metadata [ 204.941980][T21238] EXT4-fs error (device loop8): ext4_acquire_dquot:6835: comm syz.8.7320: Failed to acquire dquot type 1 [ 204.949674][T21238] EXT4-fs error (device loop8): mb_free_blocks:1826: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 204.981343][T21238] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.7320: corrupted inode contents [ 205.000571][T21238] EXT4-fs error (device loop8): ext4_dirty_inode:6137: inode #12: comm syz.8.7320: mark_inode_dirty error [ 205.003027][T21246] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 205.011945][T21238] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.7320: corrupted inode contents [ 205.019667][T21238] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #12: comm syz.8.7320: mark_inode_dirty error [ 205.038561][T21238] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.7320: corrupted inode contents [ 205.043086][T21238] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 205.052968][T21238] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.7320: corrupted inode contents [ 205.060269][T21238] EXT4-fs error (device loop8): ext4_truncate:4318: inode #12: comm syz.8.7320: mark_inode_dirty error [ 205.062137][T21238] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 205.071081][T21238] EXT4-fs (loop8): 1 truncate cleaned up [ 205.071854][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 205.072042][T21238] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 205.097962][T21238] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3852: comm syz.8.7320: Allocating blocks 41-42 which overlap fs metadata [ 205.100802][T21238] EXT4-fs error (device loop8): ext4_acquire_dquot:6835: comm syz.8.7320: Failed to acquire dquot type 1 [ 205.119022][ T5125] EXT4-fs (loop8): unmounting filesystem. [ 205.292576][T21259] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.303309][T21259] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 205.331391][T21259] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3852: comm syz.7.7335: Allocating blocks 41-42 which overlap fs metadata [ 205.351458][T21259] __quota_error: 15 callbacks suppressed [ 205.351469][T21259] Quota error (device loop7): write_blk: dquota write failed [ 205.362654][T21259] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 205.364873][T21259] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3852: comm syz.7.7335: Allocating blocks 41-42 which overlap fs metadata [ 205.367377][T21259] Quota error (device loop7): write_blk: dquota write failed [ 205.368609][T21259] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 205.370298][T21259] EXT4-fs error (device loop7): ext4_acquire_dquot:6835: comm syz.7.7335: Failed to acquire dquot type 1 [ 205.413619][T21259] EXT4-fs error (device loop7): mb_free_blocks:1826: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 205.423675][T21259] EXT4-fs error (device loop7): ext4_do_update_inode:5272: inode #12: comm syz.7.7335: corrupted inode contents [ 205.434415][T21259] EXT4-fs error (device loop7): ext4_dirty_inode:6137: inode #12: comm syz.7.7335: mark_inode_dirty error [ 205.436766][T21259] EXT4-fs error (device loop7): ext4_do_update_inode:5272: inode #12: comm syz.7.7335: corrupted inode contents [ 205.438836][T21259] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #12: comm syz.7.7335: mark_inode_dirty error [ 205.443372][T21259] EXT4-fs error (device loop7): ext4_do_update_inode:5272: inode #12: comm syz.7.7335: corrupted inode contents [ 205.447794][T21259] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 205.449491][T21259] EXT4-fs error (device loop7): ext4_do_update_inode:5272: inode #12: comm syz.7.7335: corrupted inode contents [ 205.452431][T21259] EXT4-fs error (device loop7): ext4_truncate:4318: inode #12: comm syz.7.7335: mark_inode_dirty error [ 205.455082][T21259] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 205.460245][T21259] EXT4-fs (loop7): 1 truncate cleaned up [ 205.461094][T21259] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 205.515563][T21259] Quota error (device loop7): write_blk: dquota write failed [ 205.516837][T21259] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 205.518399][T21259] EXT4-fs error (device loop7): ext4_acquire_dquot:6835: comm syz.7.7335: Failed to acquire dquot type 1 [ 205.585078][ T5092] EXT4-fs (loop7): unmounting filesystem. [ 205.910213][T21286] XFS (loop9): DAX unsupported by block device. Turning off DAX. [ 205.912123][T21286] XFS (loop9): Mounting V5 Filesystem [ 205.987549][T21286] XFS (loop9): Ending clean mount [ 205.989911][T21286] XFS (loop9): Quotacheck needed: Please wait. [ 206.019463][T21286] XFS (loop9): Quotacheck: Done. [ 206.098795][ T6419] XFS (loop9): Unmounting Filesystem [ 206.751160][T21408] netlink: 'syz.3.7391': attribute type 10 has an invalid length. [ 206.772249][T21413] AppArmor: change_hat: Invalid input ''' [ 207.006705][T21447] AppArmor: change_hat: Invalid input ''' [ 207.071984][T21453] netlink: 'syz.9.7415': attribute type 10 has an invalid length. [ 207.281959][T21475] ntfs3: loop8: Different NTFS' sector size (2048) and media sector size (512) [ 207.633693][T21523] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 207.658275][T21514] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 207.659658][T21514] FAT-fs (loop3): Filesystem has been set read-only [ 208.068337][T21563] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 208.068386][T21563] FAT-fs (loop9): Filesystem has been set read-only [ 208.196984][T21593] netlink: 10 bytes leftover after parsing attributes in process `syz.9.7482'. [ 208.318846][T21605] cgroup: none used incorrectly [ 208.375187][T21576] XFS (loop7): Mounting V5 Filesystem [ 208.416533][T21576] XFS (loop7): Ending clean mount [ 208.483520][T21625] IPv6: sit1: Disabled Multicast RS [ 208.513686][ T5092] XFS (loop7): Unmounting Filesystem [ 208.535505][T21629] netlink: 10 bytes leftover after parsing attributes in process `syz.6.7502'. [ 208.654363][T21639] set_capacity_and_notify: 11 callbacks suppressed [ 208.654373][T21639] loop8: detected capacity change from 0 to 64 [ 208.736445][T21647] cgroup: none used incorrectly [ 208.892041][T21661] IPv6: sit3: Disabled Multicast RS [ 208.959223][T21651] loop3: detected capacity change from 0 to 32768 [ 209.000827][T21672] loop6: detected capacity change from 0 to 64 [ 209.046538][T21651] XFS (loop3): Mounting V5 Filesystem [ 209.082710][T21651] XFS (loop3): Ending clean mount [ 209.149136][ T4320] XFS (loop3): Unmounting Filesystem [ 209.277322][T21703] netlink: 'syz.9.7535': attribute type 32 has an invalid length. [ 209.428944][T21717] loop9: detected capacity change from 0 to 1024 [ 209.432291][T21717] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 209.435375][T21717] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 209.437635][T21717] EXT4-fs error (device loop9): ext4_get_journal_inode:5756: inode #5: comm syz.9.7541: unexpected bad inode w/o EXT4_IGET_BAD [ 209.454307][T21717] EXT4-fs (loop9): no journal found [ 209.455272][T21717] EXT4-fs (loop9): can't get journal size [ 209.462511][T21717] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 209.488881][ T6419] EXT4-fs (loop9): unmounting filesystem. [ 209.524938][T21724] netlink: 'syz.7.7544': attribute type 3 has an invalid length. [ 209.587260][T21734] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7560'. [ 209.599499][T21738] netlink: 'syz.3.7548': attribute type 32 has an invalid length. [ 209.742418][T21754] netlink: 14 bytes leftover after parsing attributes in process `syz.7.7558'. [ 209.746730][T21752] loop3: detected capacity change from 0 to 1024 [ 209.762493][T21754] bridge0: port 5(bond0) entered disabled state [ 209.775306][T21752] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 209.776790][T21752] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 209.780240][T21752] EXT4-fs error (device loop3): ext4_get_journal_inode:5756: inode #5: comm syz.3.7556: unexpected bad inode w/o EXT4_IGET_BAD [ 209.791841][T21752] EXT4-fs (loop3): no journal found [ 209.792667][T21752] EXT4-fs (loop3): can't get journal size [ 209.798178][T21752] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 209.813346][T21757] netlink: 'syz.6.7559': attribute type 3 has an invalid length. [ 209.821630][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 209.849700][T21763] openvswitch: netlink: Message has 4 unknown bytes. [ 209.875118][T21754] bridge0: port 5(bond0) entered disabled state [ 209.906893][T21767] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7563'. [ 209.916975][T21754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.953664][T21754] device bond_slave_0 left promiscuous mode [ 209.959563][T21754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.983899][T21754] device bond_slave_1 left promiscuous mode [ 209.988306][T21754] infiniband syz2: set down [ 209.990662][T21754] bond0 (unregistering): Released all slaves [ 210.106289][T21789] loop6: detected capacity change from 0 to 1024 [ 210.153806][T21789] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 210.225995][T21799] openvswitch: netlink: Message has 4 unknown bytes. [ 210.266764][T21795] loop8: detected capacity change from 0 to 8192 [ 210.289108][T21795] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 210.291219][T21795] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 210.298983][T21795] REISERFS (device loop8): using ordered data mode [ 210.300144][T21795] reiserfs: using flush barriers [ 210.318262][T21795] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 210.321121][T21795] REISERFS (device loop8): checking transaction log (loop8) [ 210.338856][T21795] REISERFS (device loop8): Using r5 hash to sort names [ 210.340111][T21795] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 210.346176][T21784] loop9: detected capacity change from 0 to 32768 [ 210.356903][T21784] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 210.358231][T21784] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 210.361072][T21784] gfs2: fsid=syz:syz.0: journal 0 mapped with 18 extents in 0ms [ 210.373714][T11918] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 210.374814][T11918] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 210.446155][T11918] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 71ms [ 210.449520][T11918] gfs2: fsid=syz:syz.0: jid=0: Done [ 210.450399][T21784] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 210.452928][T21784] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 210.452928][T21784] inode = 0 2341 [ 210.452928][T21784] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 210.460106][T21784] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 210.461401][T21784] gfs2: fsid=syz:syz.0: H: s:SH f:AH e:0 p:21784 [syz.9.7570] inode_permission+0x1d0/0x3c0 [ 210.462925][T21784] gfs2: fsid=syz:syz.0: I: n:0/2341 t:4 f:0x00 d:0x00000201 s:0 p:0 [ 210.466825][T21814] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7588'. [ 210.468354][T21814] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7588'. [ 210.469871][T21814] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7588'. [ 210.470937][T21784] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 210.472476][T21784] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 210.474265][T21814] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7588'. [ 210.497069][T21784] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 210.498245][T21784] gfs2: fsid=syz:syz.0: File system withdrawn [ 210.499165][T21784] CPU: 1 PID: 21784 Comm: syz.9.7570 Not tainted syzkaller #0 [ 210.500422][T21784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 210.501974][T21784] Call trace: [ 210.502512][T21784] dump_backtrace+0x1c0/0x1ec [ 210.503251][T21784] show_stack+0x2c/0x3c [ 210.503899][T21784] __dump_stack+0x30/0x40 [ 210.504557][T21784] dump_stack_lvl+0xf4/0x15c [ 210.505282][T21784] dump_stack+0x1c/0x5c [ 210.505967][T21784] gfs2_withdraw+0xfa4/0x1390 [ 210.506645][T21784] gfs2_consist_inode_i+0xf0/0x10c [ 210.507413][T21784] gfs2_inode_refresh+0x918/0xd64 [ 210.508256][T21784] inode_go_instantiate+0x4c/0x68 [ 210.509108][T21784] gfs2_instantiate+0x178/0x2b4 [ 210.509800][T21784] gfs2_glock_wait+0x1b4/0x298 [ 210.510561][T21784] gfs2_glock_nq+0x8bc/0x11c4 [ 210.511245][T21784] gfs2_permission+0x27c/0x45c [ 210.511928][T21784] inode_permission+0x1d0/0x3c0 [ 210.512701][T21784] may_open+0x274/0x3b8 [ 210.513398][T21784] path_openat+0x1e64/0x26bc [ 210.514061][T21784] do_filp_open+0x194/0x384 [ 210.514728][T21784] do_sys_openat2+0x134/0x3f4 [ 210.515498][T21784] __arm64_sys_openat+0x118/0x14c [ 210.516274][T21784] invoke_syscall+0x98/0x2b4 [ 210.516298][T21818] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7589'. [ 210.517012][T21784] el0_svc_common+0x138/0x258 [ 210.519261][T21784] do_el0_svc+0x58/0x130 [ 210.519895][T21784] el0_svc+0x58/0x128 [ 210.520501][T21784] el0t_64_sync_handler+0x84/0xf0 [ 210.521257][T21784] el0t_64_sync+0x18c/0x190 [ 210.521983][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.544846][T21818] bridge0: port 3(bond0) entered disabled state [ 210.696846][T21818] bridge0: port 3(bond0) entered disabled state [ 210.739764][T21818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.773983][T21818] device bond_slave_0 left promiscuous mode [ 210.779442][T21818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.824090][T21818] device bond_slave_1 left promiscuous mode [ 210.828790][T21818] bond0 (unregistering): Released all slaves [ 210.882993][T21831] loop7: detected capacity change from 0 to 32768 [ 210.922193][T21831] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 210.923762][T21831] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 210.961285][T21831] gfs2: fsid=syz:syz.0: journal 0 mapped with 18 extents in 0ms [ 210.964085][T11918] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 210.965200][T11918] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 210.968060][T21843] loop6: detected capacity change from 0 to 8192 [ 210.971135][T21843] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 210.979312][T21843] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 210.981044][T21843] REISERFS (device loop6): using ordered data mode [ 210.982046][T21843] reiserfs: using flush barriers [ 210.994152][T21843] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 210.997110][T21843] REISERFS (device loop6): checking transaction log (loop6) [ 211.009625][T11918] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 44ms [ 211.010936][T11918] gfs2: fsid=syz:syz.0: jid=0: Done [ 211.011928][T21843] REISERFS (device loop6): Using r5 hash to sort names [ 211.013155][T21843] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 211.018930][T21831] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 211.022961][T21831] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 211.022961][T21831] inode = 0 2341 [ 211.022961][T21831] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 211.033099][T21831] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 211.037256][T21831] gfs2: fsid=syz:syz.0: H: s:SH f:AH e:0 p:21831 [syz.7.7607] inode_permission+0x1d0/0x3c0 [ 211.067451][T21831] gfs2: fsid=syz:syz.0: I: n:0/2341 t:4 f:0x00 d:0x00000201 s:0 p:0 [ 211.068744][T21831] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 211.069814][T21831] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 211.071162][T21831] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 211.072255][T21831] gfs2: fsid=syz:syz.0: File system withdrawn [ 211.085864][T21831] CPU: 1 PID: 21831 Comm: syz.7.7607 Not tainted syzkaller #0 [ 211.087134][T21831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 211.088780][T21831] Call trace: [ 211.089301][T21831] dump_backtrace+0x1c0/0x1ec [ 211.089982][T21831] show_stack+0x2c/0x3c [ 211.090619][T21831] __dump_stack+0x30/0x40 [ 211.091281][T21831] dump_stack_lvl+0xf4/0x15c [ 211.091989][T21831] dump_stack+0x1c/0x5c [ 211.092672][T21831] gfs2_withdraw+0xfa4/0x1390 [ 211.093361][T21831] gfs2_consist_inode_i+0xf0/0x10c [ 211.094085][T21831] gfs2_inode_refresh+0x918/0xd64 [ 211.094886][T21831] inode_go_instantiate+0x4c/0x68 [ 211.095637][T21831] gfs2_instantiate+0x178/0x2b4 [ 211.096450][T21831] gfs2_glock_wait+0x1b4/0x298 [ 211.097210][T21831] gfs2_glock_nq+0x8bc/0x11c4 [ 211.097942][T21831] gfs2_permission+0x27c/0x45c [ 211.098679][T21831] inode_permission+0x1d0/0x3c0 [ 211.099409][T21831] may_open+0x274/0x3b8 [ 211.100077][T21831] path_openat+0x1e64/0x26bc [ 211.100777][T21831] do_filp_open+0x194/0x384 [ 211.101531][T21831] do_sys_openat2+0x134/0x3f4 [ 211.102226][T21831] __arm64_sys_openat+0x118/0x14c [ 211.102961][T21831] invoke_syscall+0x98/0x2b4 [ 211.103754][T21831] el0_svc_common+0x138/0x258 [ 211.104512][T21831] do_el0_svc+0x58/0x130 [ 211.105155][T21831] el0_svc+0x58/0x128 [ 211.105788][T21831] el0t_64_sync_handler+0x84/0xf0 [ 211.106574][T21831] el0t_64_sync+0x18c/0x190 [ 211.107262][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.506987][T21913] netlink: 'syz.3.7637': attribute type 2 has an invalid length. [ 211.742571][T21947] netlink: 'syz.7.7653': attribute type 2 has an invalid length. [ 211.861734][T21963] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 211.871639][T21963] overlayfs: missing 'lowerdir' [ 212.062041][T21945] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 212.113956][T21945] (syz.3.7664,21945,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 212.116542][T21945] (syz.3.7664,21945,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 212.117835][T21945] (syz.3.7664,21945,0):ocfs2_mknod:298 ERROR: status = -2 [ 212.118924][T21945] (syz.3.7664,21945,0):ocfs2_mknod:502 ERROR: status = -2 [ 212.119923][T21945] (syz.3.7664,21945,0):ocfs2_mkdir:659 ERROR: status = -2 [ 212.199431][ T4320] ocfs2: Unmounting device (7,3) on (node local) [ 212.264330][T21997] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 212.266163][T21997] overlayfs: missing 'lowerdir' [ 212.661850][T22015] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 212.682897][T22015] (syz.8.7687,22015,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 212.687063][T22015] (syz.8.7687,22015,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 212.688550][T22015] (syz.8.7687,22015,0):ocfs2_mknod:298 ERROR: status = -2 [ 212.689737][T22015] (syz.8.7687,22015,0):ocfs2_mknod:502 ERROR: status = -2 [ 212.690946][T22015] (syz.8.7687,22015,0):ocfs2_mkdir:659 ERROR: status = -2 [ 212.710202][ T5125] ocfs2: Unmounting device (7,8) on (node local) [ 213.081793][T22091] netlink: 'syz.9.7722': attribute type 3 has an invalid length. [ 213.267734][T22119] SET target dimension over the limit! [ 213.342579][T22131] __nla_validate_parse: 11 callbacks suppressed [ 213.342592][T22131] netlink: 124 bytes leftover after parsing attributes in process `syz.6.7740'. [ 213.347827][T22131] netlink: 'syz.6.7740': attribute type 3 has an invalid length. [ 213.361990][T22135] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7742'. [ 213.454279][T22145] BFS-fs: bfs_fill_super(): NOTE: filesystem loop7 was created with 512 inodes, the real maximum is 511, mounting anyway [ 213.500093][T22150] SET target dimension over the limit! [ 213.561103][T22156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7768'. [ 213.664215][T22164] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7758'. [ 213.720308][T22178] set_capacity_and_notify: 5 callbacks suppressed [ 213.720318][T22178] loop8: detected capacity change from 0 to 65 [ 213.739764][T22178] BFS-fs: bfs_fill_super(): NOTE: filesystem loop8 was created with 512 inodes, the real maximum is 511, mounting anyway [ 213.821271][T22190] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7783'. [ 214.037446][T22217] loop6: detected capacity change from 0 to 65 [ 214.039205][T22217] BFS-fs: bfs_fill_super(): NOTE: filesystem loop6 was created with 512 inodes, the real maximum is 511, mounting anyway [ 214.108433][T22225] [U] [ 214.108947][T22225] [U] [ 214.109363][T22225] [U] [ 214.109819][T22225] [U] [ 214.110266][T22225] [U] [ 214.110710][T22225] [U] [ 214.111155][T22225] [U] [ 214.111564][T22225] [U] [ 214.112165][T22225] [U] [ 214.112572][T22225] [U] [ 214.113016][T22225] [U] [ 214.113449][T22225] [U] [ 214.122410][T22225] [U] [ 214.122894][T22225] [U] [ 214.123340][T22225] [U] [ 214.123766][T22225] [U] [ 214.147115][T22225] [U] [ 214.147647][T22225] [U] [ 214.148068][T22225] [U] [ 214.148552][T22225] [U] [ 214.149206][T22225] [U] [ 214.149625][T22225] [U] [ 214.150049][T22225] [U] [ 214.150523][T22225] [U] [ 214.158006][T22225] [U] [ 214.158499][T22225] [U] [ 214.158997][T22225] [U] [ 214.159483][T22225] [U] [ 214.160068][T22225] [U] [ 214.160487][T22225] [U] [ 214.160923][T22225] [U] [ 214.161344][T22225] [U] [ 214.167013][T22225] [U] [ 214.167510][T22225] [U] [ 214.167998][T22225] [U] [ 214.168425][T22225] [U] [ 214.169115][T22225] [U] [ 214.169542][T22225] [U] [ 214.169981][T22225] [U] [ 214.170459][T22225] [U] [ 214.171067][T22225] [U] [ 214.171512][T22225] [U] [ 214.171963][T22225] [U] [ 214.172398][T22225] [U] [ 214.177781][T22225] [U] [ 214.178192][T22225] [U] [ 214.178642][T22225] [U] [ 214.179035][T22225] [U] [ 214.179911][T22225] [U] [ 214.180331][T22225] [U] [ 214.180731][T22225] [U] [ 214.181135][T22225] [U] [ 214.186239][T22225] [U] [ 214.186673][T22225] [U] [ 214.187141][T22225] [U] [ 214.187534][T22225] [U] [ 214.188096][T22225] [U] [ 214.188509][T22225] [U] [ 214.188918][T22225] [U] [ 214.189351][T22225] [U] [ 214.200361][T22225] [U] [ 214.200829][T22225] [U] [ 214.201237][T22225] [U] [ 214.201722][T22225] [U] [ 214.208277][T22225] [U] [ 214.208769][T22225] [U] [ 214.209185][T22225] [U] [ 214.209606][T22225] [U] [ 214.210139][T22225] [U] [ 214.210520][T22225] [U] [ 214.210952][T22225] [U] [ 214.211413][T22225] [U] [ 214.222609][T22225] [U] [ 214.223100][T22225] [U] [ 214.223533][T22225] [U] [ 214.224004][T22225] [U] [ 214.228172][T22225] [U] [ 214.228620][T22225] [U] [ 214.229091][T22225] [U] [ 214.229579][T22225] [U] [ 214.230186][T22225] [U] [ 214.230625][T22225] [U] [ 214.231068][T22225] [U] [ 214.231543][T22225] [U] [ 214.232107][T22225] [U] [ 214.232532][T22225] [U] [ 214.232984][T22225] [U] [ 214.233417][T22225] [U] [ 214.236461][T22225] [U] [ 214.236915][T22225] [U] [ 214.237346][T22225] [U] [ 214.237775][T22225] [U] [ 214.248119][T22239] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7798'. [ 214.259257][T22225] [U] [ 214.259727][T22225] [U] [ 214.260167][T22225] [U] [ 214.260599][T22225] [U] [ 214.261195][T22225] [U] [ 214.261607][T22225] [U] [ 214.261985][T22225] [U] [ 214.262380][T22225] [U] [ 214.262894][T22225] [U] [ 214.263317][T22225] [U] [ 214.263725][T22225] [U] [ 214.264235][T22225] [U] [ 214.265090][ T28] INFO: task syz-executor:4929 blocked for more than 143 seconds. [ 214.266306][ T28] Not tainted syzkaller #0 [ 214.267083][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 214.269349][ T28] task:syz-executor state:D stack:0 pid:4929 ppid:1 flags:0x00000009 [ 214.271007][ T28] Call trace: [ 214.271551][ T28] __switch_to+0x2f4/0x550 [ 214.273543][ T28] __schedule+0xdd0/0x1b0c [ 214.274224][ T28] schedule+0xc4/0x170 [ 214.275044][ T28] io_schedule+0x84/0x154 [ 214.275691][ T28] folio_wait_bit_common+0x584/0x9e4 [ 214.277903][T22225] [U] [ 214.278343][T22225] [U] [ 214.278778][T22225] [U] [ 214.279292][T22225] [U] [ 214.279887][ T28] __filemap_get_folio+0x510/0xac0 [ 214.280709][ T28] truncate_inode_pages_range+0x378/0xd68 [ 214.284032][ T28] truncate_inode_pages_final+0x8c/0xb8 [ 214.284808][ T28] evict+0x3ec/0x828 [ 214.286857][T22225] [U] [ 214.287307][T22225] [U] [ 214.287733][T22225] [U] [ 214.288185][T22225] [U] [ 214.289863][ T28] evict_inodes+0x604/0x6a4 [ 214.290606][ T28] generic_shutdown_super+0x9c/0x324 [ 214.291725][T22225] [U] [ 214.292145][T22225] [U] [ 214.292606][T22225] [U] [ 214.293033][T22225] [U] [ 214.295853][ T28] kill_block_super+0x70/0xdc [ 214.296624][ T28] deactivate_locked_super+0xac/0x120 [ 214.298387][T22225] [U] [ 214.298811][T22225] [U] [ 214.299276][T22225] [U] [ 214.299725][T22225] [U] [ 214.301433][ T28] deactivate_super+0xe4/0x104 [ 214.302229][ T28] cleanup_mnt+0x390/0x418 [ 214.309030][T22225] [U] [ 214.309442][T22225] [U] [ 214.309863][T22225] [U] [ 214.310273][T22225] [U] [ 214.312011][ T28] __cleanup_mnt+0x20/0x30 [ 214.312718][ T28] task_work_run+0x1ec/0x278 [ 214.313330][T22225] [U] [ 214.313982][T22225] [U] [ 214.314398][T22225] [U] [ 214.315014][ T28] do_notify_resume+0x1fa0/0x2aa4 [ 214.319252][ T28] el0_svc+0x98/0x128 [ 214.320916][ T28] el0t_64_sync_handler+0x84/0xf0 [ 214.323627][ T28] el0t_64_sync+0x18c/0x190 [ 214.328643][ T28] [ 214.328643][ T28] Showing all locks held in the system: [ 214.330922][ T28] 2 locks held by kworker/u4:0/9: [ 214.333039][ T28] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6b8/0x13a4 [ 214.337957][ T28] #1: ffff80001c9a7c20 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x6fc/0x13a4 [ 214.341361][ T28] 1 lock held by rcu_tasks_kthre/12: [ 214.342239][ T28] #0: ffff8000153d7c30 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 [ 214.344567][ T28] 1 lock held by rcu_tasks_trace/13: [ 214.345600][ T28] #0: ffff8000153d8450 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 [ 214.347557][ T28] 1 lock held by khungtaskd/28: [ 214.348426][ T28] #0: ffff8000153d72c0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 214.349934][T22220] [U] [ 214.350175][ T28] 1 lock held by udevd/3935: [ 214.351522][ T28] 2 locks held by getty/4078: [ 214.352241][ T28] #0: ffff0000d6b5b098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 214.354794][ T28] #1: ffff8000207db2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2ec/0xfa0 [ 214.356675][ T28] 1 lock held by syz-executor/4929: [ 214.357463][ T28] #0: ffff0000f967a0e0 (&type->s_umount_key#87){+.+.}-{3:3}, at: deactivate_super+0xdc/0x104 [ 214.359523][ T28] 3 locks held by syz.9.7788/22220: [ 214.360366][ T28] 2 locks held by syz.6.7798/22239: [ 214.361384][ T28] #0: ffff80001786e888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x650/0xcdc [ 214.363072][ T28] #1: ffff8000153dce40 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x58/0x5d0 [ 214.386938][ T28] [ 214.387386][ T28] ============================================= [ 214.387386][ T28] [ 214.388766][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 214.389825][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 214.390975][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 214.392607][ T28] Call trace: [ 214.393194][ T28] dump_backtrace+0x1c0/0x1ec [ 214.393989][ T28] show_stack+0x2c/0x3c [ 214.394659][ T28] __dump_stack+0x30/0x40 [ 214.395417][ T28] dump_stack_lvl+0xf4/0x15c [ 214.396111][ T28] dump_stack+0x1c/0x5c [ 214.396774][ T28] panic+0x2f8/0x7ac [ 214.397408][ T28] hung_task_panic+0x0/0x2c [ 214.398182][ T28] kthread+0x250/0x2d8 [ 214.398839][ T28] ret_from_fork+0x10/0x20 [ 214.399551][ T28] SMP: stopping secondary CPUs [ 214.400356][ T28] Kernel Offset: disabled [ 214.401037][ T28] CPU features: 0x080000,000f0097,a65bfea7 [ 214.402051][ T28] Memory Limit: none [ 214.739638][ T28] Rebooting in 86400 seconds..