last executing test programs: 1.467511774s ago: executing program 1 (id=7925): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x12, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}, @sadb_x_nat_t_port={0x1, 0x16}]}, 0x90}, 0x1, 0x7}, 0x0) 1.330932189s ago: executing program 1 (id=7928): r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x0) mmap(&(0x7f0000001000/0xe000)=nil, 0xe000, 0x0, 0x12, r0, 0x0) 1.269438101s ago: executing program 1 (id=7929): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x208000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x80000008, 0x6, 0x4, 0x47, 0x3, 0xb, 0x200, 0x9, 0x6}) 828.516474ms ago: executing program 1 (id=7936): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x29, 0x21, 0x0, 0x0) 680.888209ms ago: executing program 1 (id=7940): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 524.631104ms ago: executing program 3 (id=7947): r0 = timerfd_create(0x7, 0x800) timerfd_gettime(r0, &(0x7f0000000000)) 500.010555ms ago: executing program 1 (id=7949): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc001}, 0x400) 466.812126ms ago: executing program 3 (id=7952): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1) 426.506107ms ago: executing program 4 (id=7954): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) utimensat(r0, 0x0, &(0x7f0000000100)={{}, {0x0, 0xffffffffffffffff}}, 0x0) 406.372018ms ago: executing program 3 (id=7955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2d7}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) 389.551278ms ago: executing program 2 (id=7956): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 376.511069ms ago: executing program 4 (id=7957): r0 = socket$l2tp(0x2, 0x2, 0x73) sendto(r0, 0x0, 0x0, 0x80000, &(0x7f0000000140)=@ieee802154, 0x80) 345.500069ms ago: executing program 2 (id=7959): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xdc, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x52}, 0x0, 0x1}, 0xe) 336.57941ms ago: executing program 4 (id=7960): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}, 0x1, 0x4000, 0x0, 0x44000}, 0x0) 312.108371ms ago: executing program 3 (id=7961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e6174001400048008000240f1ffffff080001"], 0xb0}}, 0x0) 255.707422ms ago: executing program 0 (id=7962): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000003680)) 245.111473ms ago: executing program 2 (id=7963): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x2, &(0x7f0000000340)=[{0x16, '\x00', @buffer={"21e109bbd40fa147212cff67a0000000000004903e9583d9fa9372c5b07700", 0x20}, 0x4}, {0x6, '\x00', @buffer={"4d1785d62ebc69ff19744e74776c2cf3f21c224c23b8b1552ad010c3085bd746", 0x20}, 0x2}]}) 191.373204ms ago: executing program 0 (id=7964): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000400)=""/116, &(0x7f0000000280)=0x74) 185.159125ms ago: executing program 3 (id=7965): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) 175.810735ms ago: executing program 2 (id=7966): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x70bd25, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5ad, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca3, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x3fffff, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) 161.218855ms ago: executing program 0 (id=7967): r0 = syz_io_uring_setup(0x6af, &(0x7f00000001c0)={0x0, 0x400bcf6, 0x40, 0x1, 0x1fd}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000002c0)=[@ioring_restriction_sqe_flags_allowed={0x4f, 0x13}], 0x1) 143.859106ms ago: executing program 4 (id=7968): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x34, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x7, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xa5e9}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 91.987677ms ago: executing program 0 (id=7969): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(0xffffffffffffffff, 0xac, 0x6) 91.845717ms ago: executing program 2 (id=7970): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 91.165108ms ago: executing program 3 (id=7971): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000011c0)={[{}, {@errors_remount}, {@errors_remount}, {@jqfmt_vfsv0}]}, 0x0, 0x4e6, &(0x7f0000000980)="$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") fdatasync(r0) 64.425309ms ago: executing program 4 (id=7972): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x34524742}}) 39.648919ms ago: executing program 0 (id=7973): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000480)) 19.97901ms ago: executing program 2 (id=7974): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xff, 0x234, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0) 11.70959ms ago: executing program 4 (id=7975): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) add_key(&(0x7f0000002240)='dns_resolver\x00', &(0x7f0000002180)={'syz', 0x3}, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff) 0s ago: executing program 0 (id=7976): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0xc}) kernel console output (not intermixed with test programs): xtends beyond EOD, truncated [ 178.417431][T18931] loop2: p51 size 8388608 extends beyond EOD, truncated [ 178.421145][T18931] loop2: p52 size 8388608 extends beyond EOD, truncated [ 178.429469][T18931] loop2: p53 size 8388608 extends beyond EOD, truncated [ 178.431380][T18931] loop2: p54 size 8388608 extends beyond EOD, truncated [ 178.444568][T18931] loop2: p55 size 8388608 extends beyond EOD, truncated [ 178.446522][T18931] loop2: p56 size 8388608 extends beyond EOD, truncated [ 178.448046][T18931] loop2: p57 size 8388608 extends beyond EOD, truncated [ 178.449731][T18931] loop2: p58 size 8388608 extends beyond EOD, truncated [ 178.458575][T18931] loop2: p59 size 8388608 extends beyond EOD, truncated [ 178.462655][T18931] loop2: p60 size 8388608 extends beyond EOD, truncated [ 178.467504][T18931] loop2: p61 size 8388608 extends beyond EOD, truncated [ 178.471424][T18931] loop2: p62 size 8388608 extends beyond EOD, truncated [ 178.476865][T18931] loop2: p63 size 8388608 extends beyond EOD, truncated [ 178.485099][T18931] loop2: p64 size 8388608 extends beyond EOD, truncated [ 178.491229][T18931] loop2: p65 size 8388608 extends beyond EOD, truncated [ 178.503477][T18931] loop2: p66 size 8388608 extends beyond EOD, truncated [ 178.511473][T18931] loop2: p67 size 8388608 extends beyond EOD, truncated [ 178.519955][T18931] loop2: p68 size 8388608 extends beyond EOD, truncated [ 178.524534][T18931] loop2: p69 size 8388608 extends beyond EOD, truncated [ 178.527807][T18931] loop2: p70 size 8388608 extends beyond EOD, truncated [ 178.529379][T18931] loop2: p71 size 8388608 extends beyond EOD, truncated [ 178.535749][T18931] loop2: p72 size 8388608 extends beyond EOD, truncated [ 178.541656][T18931] loop2: p73 size 8388608 extends beyond EOD, truncated [ 178.544171][T18931] loop2: p74 size 8388608 extends beyond EOD, truncated [ 178.546838][T18931] loop2: p75 size 8388608 extends beyond EOD, truncated [ 178.551506][T18931] loop2: p76 size 8388608 extends beyond EOD, truncated [ 178.553076][T18931] loop2: p77 size 8388608 extends beyond EOD, truncated [ 178.554467][T18931] loop2: p78 size 8388608 extends beyond EOD, truncated [ 178.557191][T18931] loop2: p79 size 8388608 extends beyond EOD, truncated [ 178.563756][T18931] loop2: p80 size 8388608 extends beyond EOD, truncated [ 178.566544][T18931] loop2: p81 size 8388608 extends beyond EOD, truncated [ 178.573163][T18931] loop2: p82 size 8388608 extends beyond EOD, truncated [ 178.578423][T18931] loop2: p83 size 8388608 extends beyond EOD, truncated [ 178.582422][T18931] loop2: p84 size 8388608 extends beyond EOD, truncated [ 178.587509][T18931] loop2: p85 size 8388608 extends beyond EOD, truncated [ 178.593080][T18931] loop2: p86 size 8388608 extends beyond EOD, truncated [ 178.596832][T18931] loop2: p87 size 8388608 extends beyond EOD, truncated [ 178.601647][T18931] loop2: p88 size 8388608 extends beyond EOD, truncated [ 178.607332][T18931] loop2: p89 size 8388608 extends beyond EOD, truncated [ 178.613635][T18931] loop2: p90 size 8388608 extends beyond EOD, truncated [ 178.620716][T18931] loop2: p91 size 8388608 extends beyond EOD, truncated [ 178.627022][T18931] loop2: p92 size 8388608 extends beyond EOD, truncated [ 178.630966][T18931] loop2: p93 size 8388608 extends beyond EOD, truncated [ 178.635742][T18931] loop2: p94 size 8388608 extends beyond EOD, truncated [ 178.641706][T18931] loop2: p95 size 8388608 extends beyond EOD, truncated [ 178.656796][T18931] loop2: p96 size 8388608 extends beyond EOD, truncated [ 178.665319][T18931] loop2: p97 size 8388608 extends beyond EOD, truncated [ 178.666424][T18972] loop1: detected capacity change from 0 to 32768 [ 178.666834][T18931] loop2: p98 size 8388608 extends beyond EOD, truncated [ 178.669867][T18972] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 178.673781][T18972] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 178.676307][T18931] loop2: p99 size 8388608 extends beyond EOD, truncated [ 178.679360][T18931] loop2: p100 size 8388608 extends beyond EOD, truncated [ 178.680033][T18972] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent points beyond end of block (not first in block) [ 178.684892][T18931] loop2: p101 size 8388608 extends beyond EOD, truncated [ 178.686143][T18972] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 178.686143][T18972] inode = 3 2073 [ 178.686143][T18972] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 178.689709][T18931] loop2: p102 size 8388608 extends beyond EOD, truncated [ 178.698499][T18972] gfs2: fsid=syz:syz.0: G: s:SH n:2/819 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 178.701367][T18972] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:18972 [syz.1.6696] init_inodes+0xe0/0x2d4 [ 178.705405][T18972] gfs2: fsid=syz:syz.0: I: n:3/2073 t:4 f:0x00 d:0x00000201 s:3864 p:0 [ 178.707952][T18931] loop2: p103 size 8388608 extends beyond EOD, truncated [ 178.709872][T18931] loop2: p104 size 8388608 extends beyond EOD, truncated [ 178.711500][T18931] loop2: p105 size 8388608 extends beyond EOD, truncated [ 178.711714][T18972] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 178.713072][T18988] loop3: detected capacity change from 0 to 1156 [ 178.716857][T18931] loop2: p106 size 8388608 extends beyond EOD, truncated [ 178.719024][T18931] loop2: p107 size 8388608 extends beyond EOD, truncated [ 178.719545][T18972] gfs2: fsid=syz:syz.0: File system withdrawn [ 178.720565][T18931] loop2: p108 size 8388608 extends beyond EOD, truncated [ 178.722794][T18988] ISOFS: unable to read i-node block [ 178.723637][T18972] CPU: 1 PID: 18972 Comm: syz.1.6696 Not tainted syzkaller #0 [ 178.724576][T18988] isofs_fill_super: get root inode failed [ 178.724830][T18972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 178.726281][T18931] loop2: p109 size 8388608 extends beyond EOD, [ 178.727459][T18972] Call trace: [ 178.727467][T18972] dump_backtrace+0x1c0/0x1ec [ 178.728449][T18931] truncated [ 178.729008][T18972] show_stack+0x2c/0x3c [ 178.729025][T18972] __dump_stack+0x30/0x40 [ 178.731732][T18972] dump_stack_lvl+0xf4/0x15c [ 178.732583][T18972] dump_stack+0x1c/0x5c [ 178.733237][T18972] gfs2_withdraw+0x9ec/0x127c [ 178.733870][T18972] gfs2_consist_inode_i+0xf0/0x10c [ 178.734685][T18972] gfs2_dirent_scan+0x458/0x584 [ 178.735469][T18972] gfs2_dirent_search+0x250/0x6f0 [ 178.735505][T18931] loop2: p110 size 8388608 extends beyond EOD, [ 178.736427][T18972] gfs2_dir_check+0x54/0x250 [ 178.736439][T18931] truncated [ 178.736447][T18972] init_journal+0x330/0x1e94 [ 178.739589][T18972] init_inodes+0xe0/0x2d4 [ 178.740305][T18972] gfs2_fill_super+0x11c0/0x194c [ 178.741155][T18972] get_tree_bdev+0x358/0x544 [ 178.741909][T18972] gfs2_get_tree+0x54/0x1b4 [ 178.742675][T18972] vfs_get_tree+0x90/0x274 [ 178.743412][T18972] do_new_mount+0x228/0x810 [ 178.744151][T18972] path_mount+0x5bc/0xe80 [ 178.744819][T18972] __arm64_sys_mount+0x49c/0x59c [ 178.745565][T18972] invoke_syscall+0x98/0x2b4 [ 178.746280][T18972] el0_svc_common+0x138/0x258 [ 178.746292][T18931] loop2: p111 size 8388608 extends beyond EOD, truncated [ 178.746944][T18972] do_el0_svc+0x58/0x130 [ 178.748195][T18931] loop2: p112 size 8388608 extends beyond EOD, [ 178.748502][T18972] el0_svc+0x58/0x128 [ 178.749358][T18931] truncated [ 178.749930][T18972] el0t_64_sync_handler+0x84/0xf0 [ 178.750718][T18931] loop2: p113 size 8388608 extends beyond EOD, [ 178.751237][T18972] el0t_64_sync+0x18c/0x190 [ 178.752217][T18931] truncated [ 178.757434][T18931] loop2: p114 size 8388608 extends beyond EOD, truncated [ 178.761385][T18931] loop2: p115 size 8388608 extends beyond EOD, truncated [ 178.767968][T18931] loop2: p116 size 8388608 extends beyond EOD, truncated [ 178.769819][T18931] loop2: p117 size 8388608 extends beyond EOD, truncated [ 178.781954][T18931] loop2: p118 size 8388608 extends beyond EOD, truncated [ 178.797757][T18972] gfs2: fsid=syz:syz.0: can't read journal index: -5 [ 178.805306][T18931] loop2: p119 size 8388608 extends beyond EOD, truncated [ 178.806954][T18931] loop2: p120 size 8388608 extends beyond EOD, truncated [ 178.812248][T18931] loop2: p121 size 8388608 extends beyond EOD, truncated [ 178.817847][T18931] loop2: p122 size 8388608 extends beyond EOD, truncated [ 178.828898][T18931] loop2: p123 size 8388608 extends beyond EOD, truncated [ 178.836359][T18931] loop2: p124 size 8388608 extends beyond EOD, truncated [ 178.839910][T18931] loop2: p125 size 8388608 extends beyond EOD, truncated [ 178.843335][T18931] loop2: p126 size 8388608 extends beyond EOD, truncated [ 178.850597][T18931] loop2: p127 size 8388608 extends beyond EOD, truncated [ 178.861686][T18931] loop2: p128 size 8388608 extends beyond EOD, truncated [ 178.863912][T18995] zonefs (nullb0) ERROR: Not a zoned block device [ 178.865883][T18931] loop2: p129 size 8388608 extends beyond EOD, truncated [ 178.869194][T18931] loop2: p130 size 8388608 extends beyond EOD, truncated [ 178.884615][T18931] loop2: p131 size 8388608 extends beyond EOD, truncated [ 178.889214][T18931] loop2: p132 size 8388608 extends beyond EOD, truncated [ 178.890887][T18931] loop2: p133 size 8388608 extends beyond EOD, truncated [ 178.895043][T18931] loop2: p134 size 8388608 extends beyond EOD, truncated [ 178.903150][T18931] loop2: p135 size 8388608 extends beyond EOD, truncated [ 178.908381][T18931] loop2: p136 size 8388608 extends beyond EOD, truncated [ 178.912054][T18931] loop2: p137 size 8388608 extends beyond EOD, truncated [ 178.917355][T18981] F2FS-fs (loop4): invalid crc value [ 178.924467][T18931] loop2: p138 size 8388608 extends beyond EOD, truncated [ 178.926002][T18981] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 178.935317][T18931] loop2: p139 size 8388608 extends beyond EOD, truncated [ 178.936872][T18931] loop2: p140 size 8388608 extends beyond EOD, truncated [ 178.942685][T18931] loop2: p141 size 8388608 extends beyond EOD, truncated [ 178.956213][T18931] loop2: p142 size 8388608 extends beyond EOD, truncated [ 178.969169][T18931] loop2: p143 size 8388608 extends beyond EOD, truncated [ 178.970608][T18931] loop2: p144 size 8388608 extends beyond EOD, truncated [ 178.975399][T18931] loop2: p145 size 8388608 extends beyond EOD, truncated [ 178.986430][T18931] loop2: p146 size 8388608 extends beyond EOD, truncated [ 178.998339][T18931] loop2: p147 size 8388608 extends beyond EOD, truncated [ 179.006657][T18931] loop2: p148 size 8388608 extends beyond EOD, truncated [ 179.008692][T18931] loop2: p149 size 8388608 extends beyond EOD, truncated [ 179.017158][T19011] cgroup: Invalid name [ 179.017919][T18931] loop2: p150 size 8388608 extends beyond EOD, truncated [ 179.018210][T18931] loop2: p151 size 8388608 extends beyond EOD, truncated [ 179.023133][T18931] loop2: p152 size 8388608 extends beyond EOD, truncated [ 179.024573][T18931] loop2: p153 size 8388608 extends beyond EOD, truncated [ 179.028841][T18931] loop2: p154 size 8388608 extends beyond EOD, truncated [ 179.042265][T18931] loop2: p155 size 8388608 extends beyond EOD, truncated [ 179.046137][T18931] loop2: p156 size 8388608 extends beyond EOD, truncated [ 179.056879][T18931] loop2: p157 size 8388608 extends beyond EOD, truncated [ 179.058408][T18931] loop2: p158 size 8388608 extends beyond EOD, truncated [ 179.060863][T18931] loop2: p159 size 8388608 extends beyond EOD, truncated [ 179.071560][T18931] loop2: p160 size 8388608 extends beyond EOD, truncated [ 179.074728][T18931] loop2: p161 size 8388608 extends beyond EOD, truncated [ 179.082394][T18931] loop2: p162 size 8388608 extends beyond EOD, truncated [ 179.085120][T18931] loop2: p163 size 8388608 extends beyond EOD, truncated [ 179.092444][T18931] loop2: p164 size 8388608 extends beyond EOD, truncated [ 179.103691][T18931] loop2: p165 size 8388608 extends beyond EOD, truncated [ 179.105569][T18931] loop2: p166 size 8388608 extends beyond EOD, truncated [ 179.114189][T18931] loop2: p167 size 8388608 extends beyond EOD, truncated [ 179.118025][T18931] loop2: p168 size 8388608 extends beyond EOD, truncated [ 179.119474][T18931] loop2: p169 size 8388608 extends beyond EOD, truncated [ 179.122259][T18931] loop2: p170 size 8388608 extends beyond EOD, truncated [ 179.129892][T18931] loop2: p171 size 8388608 extends beyond EOD, truncated [ 179.136723][T18931] loop2: p172 size 8388608 extends beyond EOD, truncated [ 179.151009][T18931] loop2: p173 size 8388608 extends beyond EOD, truncated [ 179.152487][T18931] loop2: p174 size 8388608 extends beyond EOD, truncated [ 179.157003][T18931] loop2: p175 size 8388608 extends beyond EOD, truncated [ 179.165416][T18931] loop2: p176 size 8388608 extends beyond EOD, truncated [ 179.170115][T18931] loop2: p177 size 8388608 extends beyond EOD, truncated [ 179.189834][T18931] loop2: p178 size 8388608 extends beyond EOD, truncated [ 179.191803][T18931] loop2: p179 size 8388608 extends beyond EOD, truncated [ 179.199260][T18931] loop2: p180 size 8388608 extends beyond EOD, truncated [ 179.201183][T18931] loop2: p181 size 8388608 extends beyond EOD, truncated [ 179.207152][T18931] loop2: p182 size 8388608 extends beyond EOD, truncated [ 179.208647][T18931] loop2: p183 size 8388608 extends beyond EOD, truncated [ 179.210258][T18931] loop2: p184 size 8388608 extends beyond EOD, truncated [ 179.211913][T18931] loop2: p185 size 8388608 extends beyond EOD, truncated [ 179.213387][T18931] loop2: p186 size 8388608 extends beyond EOD, truncated [ 179.221258][T18931] loop2: p187 size 8388608 extends beyond EOD, truncated [ 179.225435][T18931] loop2: p188 size 8388608 extends beyond EOD, truncated [ 179.226831][T18931] loop2: p189 size 8388608 extends beyond EOD, truncated [ 179.228346][T18931] loop2: p190 size 8388608 extends beyond EOD, truncated [ 179.231745][T18931] loop2: p191 size 8388608 extends beyond EOD, truncated [ 179.242546][T18931] loop2: p192 size 8388608 extends beyond EOD, truncated [ 179.244038][T18931] loop2: p193 size 8388608 extends beyond EOD, truncated [ 179.245440][T18931] loop2: p194 size 8388608 extends beyond EOD, truncated [ 179.253589][T18931] loop2: p195 size 8388608 extends beyond EOD, truncated [ 179.254969][T18931] loop2: p196 size 8388608 extends beyond EOD, truncated [ 179.256410][T18931] loop2: p197 size 8388608 extends beyond EOD, truncated [ 179.260886][T18931] loop2: p198 size 8388608 extends beyond EOD, truncated [ 179.265793][T18931] loop2: p199 size 8388608 extends beyond EOD, truncated [ 179.271433][T18931] loop2: p200 size 8388608 extends beyond EOD, truncated [ 179.273022][T18931] loop2: p201 size 8388608 extends beyond EOD, truncated [ 179.274387][T19007] (syz.0.6714,19007,0):ocfs2_verify_volume:2360 ERROR: found superblock with bad version: found 0.65281, should be 0.90 [ 179.276712][T19007] (syz.0.6714,19007,0):ocfs2_verify_volume:2388 ERROR: status = -22 [ 179.278098][T19007] (syz.0.6714,19007,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 179.279582][T19007] (syz.0.6714,19007,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 179.288797][T18931] loop2: p202 size 8388608 extends beyond EOD, truncated [ 179.290435][T18931] loop2: p203 size 8388608 extends beyond EOD, truncated [ 179.291885][T18931] loop2: p204 size 8388608 extends beyond EOD, truncated [ 179.296236][T18931] loop2: p205 size 8388608 extends beyond EOD, truncated [ 179.297645][T18931] loop2: p206 size 8388608 extends beyond EOD, truncated [ 179.301465][T18931] loop2: p207 size 8388608 extends beyond EOD, truncated [ 179.322400][T18931] loop2: p208 size 8388608 extends beyond EOD, truncated [ 179.324015][T18931] loop2: p209 size 8388608 extends beyond EOD, truncated [ 179.325621][T18931] loop2: p210 size 8388608 extends beyond EOD, truncated [ 179.327307][T19042] isofs_fill_super: root inode is not a directory. Corrupted media? [ 179.336403][T18931] loop2: p211 size 8388608 extends beyond EOD, truncated [ 179.338938][T18931] loop2: p212 size 8388608 extends beyond EOD, truncated [ 179.340369][T18931] loop2: p213 size 8388608 extends beyond EOD, truncated [ 179.348623][T18931] loop2: p214 size 8388608 extends beyond EOD, truncated [ 179.352502][T18931] loop2: p215 size 8388608 extends beyond EOD, truncated [ 179.355105][T18931] loop2: p216 size 8388608 extends beyond EOD, truncated [ 179.358132][T18931] loop2: p217 size 8388608 extends beyond EOD, truncated [ 179.366131][T18931] loop2: p218 size 8388608 extends beyond EOD, truncated [ 179.367798][T18931] loop2: p219 size 8388608 extends beyond EOD, truncated [ 179.370319][T18931] loop2: p220 size 8388608 extends beyond EOD, truncated [ 179.376106][ T5383] udevd[5383]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 179.386029][ T4910] udevd[4910]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 179.388299][T18931] loop2: p221 size 8388608 extends beyond EOD, truncated [ 179.389837][T18931] loop2: p222 size 8388608 extends beyond EOD, truncated [ 179.391380][T18931] loop2: p223 size 8388608 extends beyond EOD, truncated [ 179.395579][ T5382] udevd[5382]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 179.396036][T18931] loop2: p224 size 8388608 extends beyond EOD, truncated [ 179.409616][T18931] loop2: p225 size 8388608 extends beyond EOD, truncated [ 179.414300][T18931] loop2: p226 size 8388608 extends beyond EOD, truncated [ 179.417275][T18931] loop2: p227 size 8388608 extends beyond EOD, truncated [ 179.422919][T19045] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 179.425584][T19045] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 179.427365][T18931] loop2: p228 size 8388608 extends beyond EOD, truncated [ 179.431281][T18931] loop2: p229 size 8388608 extends beyond EOD, truncated [ 179.436089][T18931] loop2: p230 size 8388608 extends beyond EOD, truncated [ 179.442495][T18931] loop2: p231 size 8388608 extends beyond EOD, truncated [ 179.457156][T18931] loop2: p232 size 8388608 extends beyond EOD, truncated [ 179.458833][T18931] loop2: p233 size 8388608 extends beyond EOD, truncated [ 179.460331][T19048] EXT4-fs (loop1): SIPHASH is not a valid default hash value [ 179.462054][T18931] loop2: p234 size 8388608 extends beyond EOD, truncated [ 179.465167][T18931] loop2: p235 size 8388608 extends beyond EOD, truncated [ 179.469252][T18931] loop2: p236 size 8388608 extends beyond EOD, truncated [ 179.470658][T18931] loop2: p237 size 8388608 extends beyond EOD, truncated [ 179.478057][T18931] loop2: p238 size 8388608 extends beyond EOD, truncated [ 179.482372][T18931] loop2: p239 size 8388608 extends beyond EOD, truncated [ 179.484179][T18931] loop2: p240 size 8388608 extends beyond EOD, truncated [ 179.490786][T18931] loop2: p241 size 8388608 extends beyond EOD, truncated [ 179.494747][T18931] loop2: p242 size 8388608 extends beyond EOD, truncated [ 179.496890][T18931] loop2: p243 size 8388608 extends beyond EOD, truncated [ 179.503409][T18931] loop2: p244 size 8388608 extends beyond EOD, truncated [ 179.505045][T18931] loop2: p245 size 8388608 extends beyond EOD, truncated [ 179.512756][T18931] loop2: p246 size 8388608 extends beyond EOD, truncated [ 179.515489][T18931] loop2: p247 size 8388608 extends beyond EOD, truncated [ 179.520028][T18931] loop2: p248 size 8388608 extends beyond EOD, truncated [ 179.528048][T18931] loop2: p249 size 8388608 extends beyond EOD, truncated [ 179.545607][T18931] loop2: p250 size 8388608 extends beyond EOD, truncated [ 179.547187][T18931] loop2: p251 size 8388608 extends beyond EOD, truncated [ 179.549543][ T5367] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.555534][T18931] loop2: p252 size 8388608 extends beyond EOD, truncated [ 179.558682][T18931] loop2: p253 size 8388608 extends beyond EOD, truncated [ 179.561857][T18931] loop2: p254 size 8388608 extends beyond EOD, truncated [ 179.572496][T18931] loop2: p255 size 8388608 extends beyond EOD, truncated [ 179.647974][T19043] (syz.4.6732,19043,1):ocfs2_journal_addressable:1992 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2 [ 179.648003][T19043] (syz.4.6732,19043,1):ocfs2_check_volume:2489 ERROR: status = -27 [ 179.652678][T19043] (syz.4.6732,19043,1):ocfs2_mount_volume:1821 ERROR: status = -27 [ 179.658583][T19043] (syz.4.6732,19043,1):ocfs2_fill_super:1176 ERROR: status = -27 [ 179.766903][T19081] EXT4-fs error (device loop0): __ext4_fill_super:5465: inode #2: comm syz.0.6749: inode has both inline data and extents flags [ 179.769685][T19081] EXT4-fs (loop0): get root inode failed [ 179.770669][T19081] EXT4-fs (loop0): mount failed [ 179.841101][T19101] nfs: Unexpected value for 'acl' [ 180.066660][T19117] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 180.068678][T19117] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 180.070668][T19117] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 180.071776][T19117] ntfs: (device loop0): ntfs_read_locked_attr_inode(): Failed with error code -5 while reading attribute inode (mft_no 0x0, type 0xb0, name_len 0). Marking corrupt inode and base inode 0x0 as bad. Run chkdsk. [ 180.085951][T19117] ntfs: (device loop0): load_system_files(): Failed to load $MFT/$BITMAP attribute. [ 180.091330][T19117] ntfs: (device loop0): ntfs_fill_super(): Failed to load system files. [ 180.115426][T19108] Mount JFS Failure: -22 [ 180.116160][T19108] jfs_mount failed w/return code = -22 [ 180.125154][T19104] XFS (loop4): invalid logbufsize: 164 [not 16k,32k,64k,128k or 256k] [ 180.287688][T19139] EXT2-fs (loop3): (no)acl options not supported [ 180.288740][T19139] EXT2-fs (loop3): error: #blocks per group too big: 24576 [ 180.343537][ T5381] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.557213][T19143] F2FS-fs (loop4): Invalid segment/section count (24 != 2 * 1) [ 180.558515][T19143] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 180.566211][T19143] F2FS-fs (loop4): build fault injection attr: rate: 6, type: 0x3ffff [ 180.567710][T19143] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x14c/0x520 [ 180.573561][ C0] F2FS-fs (loop4) : inject read IO error in f2fs_read_end_io of bio_endio+0x750/0x794 [ 180.588860][T19143] F2FS-fs (loop4) : inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0xa88/0x4234 [ 180.591440][T19143] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-12) [ 180.595547][T19172] syz.1.6793: attempt to access beyond end of device [ 180.595547][T19172] loop1: rw=0, sector=4612, nr_sectors = 4 limit=64 [ 180.600029][T19172] Buffer I/O error on dev loop1, logical block 1153, async page read [ 180.601332][T19172] syz.1.6793: attempt to access beyond end of device [ 180.601332][T19172] loop1: rw=0, sector=4616, nr_sectors = 4 limit=64 [ 180.603416][T19172] Buffer I/O error on dev loop1, logical block 1154, async page read [ 180.604884][T19172] hfs: unable to open catalog tree [ 180.617928][T19172] hfs: can't find a HFS filesystem on dev loop1 [ 180.657531][ T5382] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.674539][T19065] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 180.678691][T19065] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 180.680362][T19065] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 180.690644][T19065] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 180.691949][T19065] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 180.693188][T19065] EXT4-fs (loop2): failed to initialize system zone (-117) [ 180.694434][T19065] EXT4-fs (loop2): mount failed [ 180.754872][ T5369] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.794426][ T27] audit: type=1326 audit(527560.204:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19184 comm="syz.4.6799" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f77a28 code=0x0 [ 180.830577][T19189] IPv6: addrconf: prefix option has invalid lifetime [ 180.926526][T19197] cgroup: Unknown subsys name 'subj_type' [ 180.930402][T19174] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1 [ 180.932041][T19174] F2FS-fs (loop0): LFS not compatible with ATGC [ 180.983926][ T5367] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.992077][T19176] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x3ffff [ 180.993946][T19176] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x77 [ 181.000039][T19176] F2FS-fs (loop3): invalid crc value [ 181.011224][T19176] F2FS-fs (loop3) : inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0xaf8/0x4234 [ 181.013295][T19176] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12) [ 181.019764][T19206] NILFS (loop1): corrupt root inode [ 181.060605][ T5369] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 181.120871][ T5381] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 181.230370][T19221] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.231550][T19221] EXT4-fs: Ignoring removed i_version option [ 181.247678][T19221] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 181.291175][T19222] can: request_module (can-proto-0) failed. [ 181.305906][T19212] jfs_mount: dbMount failed w/rc = -22 [ 181.312179][T19212] Mount JFS Failure: -22 [ 181.312894][T19212] jfs_mount failed w/return code = -22 [ 181.402983][ T5382] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 181.445182][T19239] erofs: (device loop3): mounted with root inode @ nid 36. [ 181.670355][T19261] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117.87.150326315.2007.15776.1 [ 181.680741][T19261] PKCS7: Only support pkcs7_signedData type [ 181.722571][T19268] overlayfs: bad mount option "redirect_dir=on\" [ 181.733885][T19236] XFS (loop1): Mounting V5 Filesystem [ 181.785690][T19236] XFS (loop1): Internal error head_block >= tail_block || head_cycle != tail_cycle + 1 at line 1649 of file fs/xfs/xfs_log_recover.c. Caller xlog_clear_stale_blocks+0x284/0x39c [ 181.793117][T19236] CPU: 0 PID: 19236 Comm: syz.1.6823 Not tainted syzkaller #0 [ 181.794455][T19236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 181.796269][T19236] Call trace: [ 181.796808][T19236] dump_backtrace+0x1c0/0x1ec [ 181.797549][T19236] show_stack+0x2c/0x3c [ 181.798248][T19236] __dump_stack+0x30/0x40 [ 181.798982][T19236] dump_stack_lvl+0xf4/0x15c [ 181.799749][T19236] dump_stack+0x1c/0x5c [ 181.800469][T19236] xfs_corruption_error+0x12c/0x188 [ 181.801330][T19236] xlog_clear_stale_blocks+0x31c/0x39c [ 181.802153][T19236] xlog_find_tail+0x6e4/0x930 [ 181.802892][T19236] xlog_recover+0x4c/0x414 [ 181.803643][T19236] xfs_log_mount+0x240/0x3ec [ 181.804416][T19236] xfs_mountfs+0x988/0x17a0 [ 181.805194][T19236] xfs_fs_fill_super+0xdf8/0x1054 [ 181.805981][T19236] get_tree_bdev+0x358/0x544 [ 181.806724][T19236] xfs_fs_get_tree+0x28/0x38 [ 181.807478][T19236] vfs_get_tree+0x90/0x274 [ 181.808262][T19236] do_new_mount+0x228/0x810 [ 181.808988][T19236] path_mount+0x5bc/0xe80 [ 181.809734][T19236] __arm64_sys_mount+0x49c/0x59c [ 181.810588][T19236] invoke_syscall+0x98/0x2b4 [ 181.811330][T19236] el0_svc_common+0x138/0x258 [ 181.812091][T19236] do_el0_svc+0x58/0x130 [ 181.812807][T19236] el0_svc+0x58/0x128 [ 181.813446][T19236] el0t_64_sync_handler+0x84/0xf0 [ 181.814278][T19236] el0t_64_sync+0x18c/0x190 [ 181.907993][T19236] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 181.909310][T19236] XFS (loop1): failed to locate log tail [ 181.912401][T19236] XFS (loop1): log mount/recovery failed: error -117 [ 181.969285][T19293] EXT4-fs: Ignoring removed orlov option [ 181.971433][T19293] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.975062][T19293] EXT4-fs (loop3): INFO: recovery required on readonly filesystem [ 181.976958][T19236] XFS (loop1): log mount failed [ 181.979863][T19293] EXT4-fs (loop3): write access will be enabled during recovery [ 181.981176][T19293] EXT4-fs (loop3): barriers disabled [ 181.983337][T19293] JBD2: no valid journal superblock found [ 181.984375][T19293] EXT4-fs (loop3): error loading journal [ 182.137066][T19287] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 182.332195][ T4317] udevd[4317]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 182.332241][ T5383] udevd[5383]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 182.348822][ T5369] udevd[5369]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 182.398924][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 182.424615][ T4910] udevd[4910]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 182.439292][ T4911] udevd[4911]: inotify_add_watch(7, /dev/loop4p10, 10) failed: No such file or directory [ 182.455664][ T5368] udevd[5368]: inotify_add_watch(7, /dev/loop4p8, 10) failed: No such file or directory [ 182.645916][T19343] EXT4-fs error (device loop4): ext4_quota_enable:7049: inode #4: comm syz.4.6873: casefold flag without casefold feature [ 182.648339][T19343] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.6873: Bad quota inode: 4, type: 1 [ 182.652758][T19343] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 182.655602][T19343] EXT4-fs (loop4): mount failed [ 182.683819][ T4318] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 182.838699][T19339] set_capacity_and_notify: 24 callbacks suppressed [ 182.838709][T19339] loop1: detected capacity change from 0 to 32768 [ 182.886009][T19339] (syz.1.6871,19339,0):ocfs2_find_slot:468 ERROR: no free slots available! [ 182.887263][T19339] (syz.1.6871,19339,0):ocfs2_mount_volume:1808 ERROR: status = -22 [ 182.892940][T19339] (syz.1.6871,19339,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 183.035032][T19297] loop3: detected capacity change from 0 to 131072 [ 183.046453][T19297] F2FS-fs (loop3): Mismatch start address, segment0(256) cp_blkaddr(640) [ 183.047890][T19297] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 183.064026][T19357] loop4: detected capacity change from 0 to 2048 [ 183.093928][T19357] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.145004][T19359] loop1: detected capacity change from 0 to 128 [ 183.195798][ T5367] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 183.209814][T19210] loop2: detected capacity change from 0 to 262144 [ 183.251065][T19210] F2FS-fs (loop2): Found nat_bits in checkpoint [ 183.276961][T19210] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 183.440843][T19378] loop3: detected capacity change from 0 to 8192 [ 183.454100][T19378] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 183.456302][T19378] REISERFS warning (device loop3): sh-2012 read_super_block: found unknown format "770" of reiserfs with non-standard magic [ 183.458470][T19378] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 183.589366][T19375] loop4: detected capacity change from 0 to 32768 [ 183.625890][T19375] loop4: p1 p3 < p5 p6 p7 > p4 < p8 p9 p10 > [ 183.626815][T19375] loop4: p1 start 146641443 is beyond EOD, truncated [ 183.636752][T19375] loop4: p6 start 50334720 is beyond EOD, truncated [ 183.638040][T19375] loop4: p7 start 68608 is beyond EOD, truncated [ 183.639218][T19375] loop4: p8 start 146641443 is beyond EOD, truncated [ 183.648012][T19375] loop4: p10 start 50334720 is beyond EOD, truncated [ 183.746936][T19406] loop3: detected capacity change from 0 to 64 [ 183.785418][T19408] loop2: detected capacity change from 0 to 128 [ 183.846689][T19412] loop3: detected capacity change from 0 to 128 [ 184.066695][T19410] BTRFS: device fsid a4d06b90-61a4-49cd-bf5f-2183c3574322 devid 1 transid 8 /dev/loop4 scanned by syz.4.6903 (19410) [ 184.072800][T19410] BTRFS info (device loop4): first mount of filesystem a4d06b90-61a4-49cd-bf5f-2183c3574322 [ 184.074486][T19410] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 184.084243][T19410] BTRFS info (device loop4): using free space tree [ 184.259453][T19410] BTRFS info (device loop4): enabling ssd optimizations [ 184.265108][T19414] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 184.266498][T19414] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 184.292153][T19414] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 184.293936][ T4331] BTRFS info (device loop4): last unmount of filesystem a4d06b90-61a4-49cd-bf5f-2183c3574322 [ 184.321876][ T4488] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 184.323067][ T4488] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 184.324809][ T4488] kworker/0:15: attempt to access beyond end of device [ 184.324809][ T4488] loop2: rw=0, sector=805306368, nr_sectors = 8 limit=32768 [ 184.380934][ T4488] gfs2: fsid=syz:syz.0: jid=0: Failed [ 184.381986][T19414] gfs2: fsid=syz:syz.0: error recovering journal 0: -5 [ 184.440645][T19420] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 184.441818][T19420] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 184.448457][T19420] gfs2: fsid=syz:syz.0: journal 0 mapped with 21 extents in 0ms [ 184.456250][ T7996] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 184.457435][ T7996] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 184.480139][ T5369] udevd[5369]: inotify_add_watch(7, /dev/loop4p118, 10) failed: No such file or directory [ 184.485128][ T7996] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 29ms [ 184.486540][ T7996] gfs2: fsid=syz:syz.0: jid=0: Done [ 184.487322][T19420] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 184.497812][ T4317] udevd[4317]: inotify_add_watch(7, /dev/loop4p122, 10) failed: No such file or directory [ 184.547267][ T4910] udevd[4910]: inotify_add_watch(7, /dev/loop4p121, 10) failed: No such file or directory [ 184.553533][T19420] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 184.553533][T19420] bh = 2049 (type: exp=14, found=8) [ 184.553533][T19420] function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1406 [ 184.558091][ T5382] udevd[5382]: inotify_add_watch(7, /dev/loop4p119, 10) failed: No such file or directory [ 184.560378][ T5383] udevd[5383]: inotify_add_watch(7, /dev/loop4p120, 10) failed: No such file or directory [ 184.563568][T19420] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 184.568460][T19396] F2FS-fs (loop1): invalid crc value [ 184.577293][T19420] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 184.586287][T19420] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 184.587790][T19420] gfs2: fsid=syz:syz.0: File system withdrawn [ 184.588931][T19420] CPU: 1 PID: 19420 Comm: syz.3.6906 Not tainted syzkaller #0 [ 184.589058][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop4p123, 10) failed: No such file or directory [ 184.590156][T19420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 184.593323][T19420] Call trace: [ 184.593855][T19420] dump_backtrace+0x1c0/0x1ec [ 184.594568][T19420] show_stack+0x2c/0x3c [ 184.595188][T19420] __dump_stack+0x30/0x40 [ 184.595805][T19420] dump_stack_lvl+0xf4/0x15c [ 184.596561][T19420] dump_stack+0x1c/0x5c [ 184.597292][T19420] gfs2_withdraw+0x9ec/0x127c [ 184.598072][T19420] gfs2_metatype_check_ii+0x8c/0xac [ 184.598618][ T5368] udevd[5368]: inotify_add_watch(7, /dev/loop4p124, 10) failed: No such file or directory [ 184.598854][T19420] gfs2_quota_init+0xbb0/0xd80 [ 184.600972][T19420] gfs2_make_fs_rw+0x33c/0x45c [ 184.601709][T19420] gfs2_fill_super+0x1300/0x194c [ 184.602571][T19420] get_tree_bdev+0x358/0x544 [ 184.603386][T19420] gfs2_get_tree+0x54/0x1b4 [ 184.604165][T19420] vfs_get_tree+0x90/0x274 [ 184.604861][T19420] do_new_mount+0x228/0x810 [ 184.605569][T19420] path_mount+0x5bc/0xe80 [ 184.606287][T19420] __arm64_sys_mount+0x49c/0x59c [ 184.607282][T19420] invoke_syscall+0x98/0x2b4 [ 184.608030][T19420] el0_svc_common+0x138/0x258 [ 184.608350][ T4316] udevd[4316]: inotify_add_watch(7, /dev/loop4p125, 10) failed: No such file or directory [ 184.608638][T19420] do_el0_svc+0x58/0x130 [ 184.610462][T19420] el0_svc+0x58/0x128 [ 184.611090][T19420] el0t_64_sync_handler+0x84/0xf0 [ 184.611850][T19420] el0t_64_sync+0x18c/0x190 [ 184.622179][T19396] F2FS-fs (loop1): SIT is corrupted node# 0 vs 1 [ 184.623648][T19396] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 184.631675][T19420] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 184.641706][ T4911] udevd[4911]: inotify_add_watch(7, /dev/loop4p126, 10) failed: No such file or directory [ 184.819872][ T5382] udevd[5382]: inotify_add_watch(7, /dev/loop4p128, 10) failed: No such file or directory [ 184.858546][T19439] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop4 scanned by syz.4.6908 (19439) [ 184.863168][T19439] BTRFS info (device loop4): first mount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 184.864892][T19439] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 184.866334][T19439] BTRFS info (device loop4): using free space tree [ 184.868937][T19452] erofs: (device loop2): mounted with root inode @ nid 36. [ 184.914435][T19462] erofs: (device loop2): mounted with root inode @ nid 36. [ 184.941880][T19465] erofs: (device loop3): mounted with root inode @ nid 36. [ 184.976303][T19448] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 184.980656][T19448] F2FS-fs (loop0): invalid crc value [ 184.981825][T19448] F2FS-fs (loop0): invalid crc value [ 184.982734][T19448] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 185.020207][T19475] hpfs: filesystem error: improperly stopped; already mounted read-only [ 185.023196][T19475] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 185.034154][T19439] BTRFS info (device loop4): enabling ssd optimizations [ 185.087108][ T4331] BTRFS info (device loop4): last unmount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 185.095281][T19483] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 185.175950][T19482] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 185.194045][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 185.207074][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 185.257890][T19485] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 185.292771][T19493] EXT4-fs (loop3): Unsupported blocksize for fs-verity [ 185.294670][T19499] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 185.314951][T19491] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 185.331175][ T4324] EXT4-fs (loop1): unmounting filesystem. [ 185.332770][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 185.378051][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 185.519795][T19496] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop2 scanned by syz.2.6925 (19496) [ 185.529134][T19496] BTRFS info (device loop2): first mount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 185.532895][T19496] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 185.534505][T19496] BTRFS info (device loop2): using free space tree [ 185.631067][T19509] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 8 /dev/loop4 scanned by syz.4.6928 (19509) [ 185.640005][T19509] BTRFS info (device loop4): first mount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc [ 185.641433][T19509] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 185.642736][T19509] BTRFS info (device loop4): using free space tree [ 185.695144][T19507] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.6927 (19507) [ 185.699907][T19507] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 185.707800][T19507] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 185.709091][T19507] BTRFS info (device loop0): using free space tree [ 185.711141][T19503] BTRFS: device fsid 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 devid 1 transid 8 /dev/loop1 scanned by syz.1.6926 (19503) [ 185.722315][T19503] BTRFS info (device loop1): first mount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 [ 185.723785][T19503] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 185.725075][T19503] BTRFS info (device loop1): using free space tree [ 185.748193][T19496] BTRFS info (device loop2): enabling ssd optimizations [ 185.798530][T19509] BTRFS info (device loop4): enabling ssd optimizations [ 185.827980][ T4326] BTRFS info (device loop2): last unmount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 185.829925][ T4331] BTRFS info (device loop4): last unmount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc [ 185.915790][T19507] BTRFS info (device loop0): enabling ssd optimizations [ 185.921196][ T5381] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 9 /dev/loop2 scanned by udevd (5381) [ 186.008159][ T4327] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 186.010289][T19503] BTRFS info (device loop1): enabling ssd optimizations [ 186.129803][ T4324] BTRFS info (device loop1): last unmount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 [ 186.130979][ T5382] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 9 /dev/loop4 scanned by udevd (5382) [ 186.377729][ T5367] BTRFS: device fsid 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 devid 1 transid 9 /dev/loop1 scanned by udevd (5367) [ 186.399946][ T4318] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop0 scanned by udevd (4318) [ 187.063416][T19598] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 187.064903][T19598] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 187.075522][T19598] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 187.075522][T19598] inode = 3 8331 [ 187.075522][T19598] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 187.078476][T19598] gfs2: fsid=syz:syz.0: G: s:SH n:2/208b f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 187.080081][T19598] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:19598 [syz.2.6936] init_inodes+0xe0/0x2d4 [ 187.093544][T19598] gfs2: fsid=syz:syz.0: I: n:3/8331 t:4 f:0x00 d:0x00000200 s:0 p:0 [ 187.094849][T19598] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 187.096223][T19598] gfs2: fsid=syz:syz.0: File system withdrawn [ 187.097296][T19598] CPU: 0 PID: 19598 Comm: syz.2.6936 Not tainted syzkaller #0 [ 187.098583][T19598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 187.100228][T19598] Call trace: [ 187.100667][T19598] dump_backtrace+0x1c0/0x1ec [ 187.101499][T19598] show_stack+0x2c/0x3c [ 187.102207][T19598] __dump_stack+0x30/0x40 [ 187.102800][T19598] dump_stack_lvl+0xf4/0x15c [ 187.103526][T19598] dump_stack+0x1c/0x5c [ 187.104250][T19598] gfs2_withdraw+0x9ec/0x127c [ 187.105077][T19598] gfs2_consist_inode_i+0xf0/0x10c [ 187.105926][T19598] gfs2_inode_refresh+0x918/0xd64 [ 187.106747][T19598] inode_go_instantiate+0x4c/0x68 [ 187.107577][T19598] gfs2_instantiate+0x178/0x2b4 [ 187.108350][T19598] gfs2_glock_wait+0x1b4/0x298 [ 187.109081][T19598] gfs2_glock_nq+0x8bc/0x11c4 [ 187.109912][T19598] init_journal+0x27c/0x1e94 [ 187.110668][T19598] init_inodes+0xe0/0x2d4 [ 187.111413][T19598] gfs2_fill_super+0x11c0/0x194c [ 187.112156][T19598] get_tree_bdev+0x358/0x544 [ 187.112832][T19598] gfs2_get_tree+0x54/0x1b4 [ 187.113598][T19598] vfs_get_tree+0x90/0x274 [ 187.114334][T19598] do_new_mount+0x228/0x810 [ 187.115067][T19598] path_mount+0x5bc/0xe80 [ 187.115862][T19598] __arm64_sys_mount+0x49c/0x59c [ 187.116776][T19598] invoke_syscall+0x98/0x2b4 [ 187.117598][T19598] el0_svc_common+0x138/0x258 [ 187.118383][T19598] do_el0_svc+0x58/0x130 [ 187.119169][T19598] el0_svc+0x58/0x128 [ 187.119833][T19598] el0t_64_sync_handler+0x84/0xf0 [ 187.120752][T19598] el0t_64_sync+0x18c/0x190 [ 187.186858][T19598] gfs2: fsid=syz:syz.0: can't read journal index: -5 [ 187.236476][ T5381] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.253526][T19506] BTRFS: device fsid fd264d70-4fa2-405d-a1bb-708262ad6b73 devid 1 transid 8 /dev/loop3 scanned by syz.3.6929 (19506) [ 187.257301][T19506] BTRFS info (device loop3): first mount of filesystem fd264d70-4fa2-405d-a1bb-708262ad6b73 [ 187.258969][T19506] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 187.260517][T19506] BTRFS info (device loop3): using free space tree [ 187.460727][T19506] BTRFS info (device loop3): enabling ssd optimizations [ 187.535667][ T4325] BTRFS info (device loop3): last unmount of filesystem fd264d70-4fa2-405d-a1bb-708262ad6b73 [ 187.555061][T19600] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 187.561572][T19600] dlm: no local IP address has been set [ 187.565109][T19600] dlm: cannot start dlm midcomms -107 [ 187.565831][T19600] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 187.744882][T19623] set_capacity_and_notify: 28 callbacks suppressed [ 187.744893][T19623] loop1: detected capacity change from 0 to 1024 [ 187.915463][T19581] loop4: detected capacity change from 0 to 262144 [ 187.925708][T19581] BTRFS: device fsid 2e7f6522-f0ad-43c0-a6fa-d526fe21d829 devid 1 transid 8 /dev/loop4 scanned by syz.4.6931 (19581) [ 187.942669][T19581] BTRFS info (device loop4): first mount of filesystem 2e7f6522-f0ad-43c0-a6fa-d526fe21d829 [ 187.944472][T19581] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 187.946006][T19581] BTRFS info (device loop4): using free space tree [ 187.993549][T19633] loop1: detected capacity change from 0 to 1024 [ 188.021833][T19621] loop0: detected capacity change from 0 to 32768 [ 188.027378][T19621] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 scanned by syz.0.6940 (19621) [ 188.037555][T19621] BTRFS info (device loop0): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 188.050634][T19639] loop3: detected capacity change from 0 to 64 [ 188.053963][T19621] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 188.055344][T19621] BTRFS info (device loop0): using free space tree [ 188.057205][T19633] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 188.131885][T19581] BTRFS info (device loop4): enabling ssd optimizations [ 188.137342][ T4324] EXT4-fs (loop1): unmounting filesystem. [ 188.247890][T19621] BTRFS info (device loop0): enabling ssd optimizations [ 188.323166][ T4331] BTRFS info (device loop4): last unmount of filesystem 2e7f6522-f0ad-43c0-a6fa-d526fe21d829 [ 188.351258][ T4327] BTRFS info (device loop0): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 188.587329][T19681] loop1: detected capacity change from 0 to 21 [ 188.588754][T19681] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 188.699353][ T4318] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 9 /dev/loop0 scanned by udevd (4318) [ 188.746265][ T5382] BTRFS: device fsid 2e7f6522-f0ad-43c0-a6fa-d526fe21d829 devid 1 transid 9 /dev/loop4 scanned by udevd (5382) [ 189.495883][T19609] loop2: detected capacity change from 0 to 262144 [ 189.510611][T19609] BTRFS: device fsid 01e7dcfc-cef3-4c81-9d7c-4c36d00e3312 devid 1 transid 8 /dev/loop2 scanned by syz.2.6938 (19609) [ 189.516817][T19609] BTRFS info (device loop2): first mount of filesystem 01e7dcfc-cef3-4c81-9d7c-4c36d00e3312 [ 189.518547][T19609] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 189.519996][T19609] BTRFS info (device loop2): using free space tree [ 189.793756][T19609] BTRFS info (device loop2): enabling ssd optimizations [ 189.828792][ T4326] BTRFS info (device loop2): last unmount of filesystem 01e7dcfc-cef3-4c81-9d7c-4c36d00e3312 [ 189.960015][T19685] loop1: detected capacity change from 0 to 131072 [ 190.008215][T19685] F2FS-fs (loop1): Found nat_bits in checkpoint [ 190.016620][ T5381] BTRFS: device fsid 01e7dcfc-cef3-4c81-9d7c-4c36d00e3312 devid 1 transid 9 /dev/loop2 scanned by udevd (5381) [ 190.038496][T19685] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 190.330700][T19673] loop3: detected capacity change from 0 to 262144 [ 190.333977][T19673] BTRFS: device fsid 463a41b7-dcdb-4737-908d-003c22b40004 devid 1 transid 8 /dev/loop3 scanned by syz.3.6946 (19673) [ 190.347247][T19673] BTRFS info (device loop3): first mount of filesystem 463a41b7-dcdb-4737-908d-003c22b40004 [ 190.356235][T19673] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 190.357819][T19673] BTRFS info (device loop3): using free space tree [ 190.510527][T19673] BTRFS info (device loop3): enabling ssd optimizations [ 190.616396][ T4325] BTRFS info (device loop3): last unmount of filesystem 463a41b7-dcdb-4737-908d-003c22b40004 [ 190.692628][T19675] loop4: detected capacity change from 0 to 262144 [ 190.701456][T19675] BTRFS: device fsid 54365b1f-1ff9-4520-a729-28996e9915cf devid 1 transid 8 /dev/loop4 scanned by syz.4.6948 (19675) [ 190.710803][T19675] BTRFS info (device loop4): first mount of filesystem 54365b1f-1ff9-4520-a729-28996e9915cf [ 190.715073][T19675] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 190.716765][T19675] BTRFS info (device loop4): using free space tree [ 190.767061][ T5369] BTRFS: device fsid 463a41b7-dcdb-4737-908d-003c22b40004 devid 1 transid 9 /dev/loop3 scanned by udevd (5369) [ 191.015552][T19675] BTRFS info (device loop4): enabling ssd optimizations [ 191.054937][ T4331] BTRFS info (device loop4): last unmount of filesystem 54365b1f-1ff9-4520-a729-28996e9915cf [ 191.168316][T19689] BTRFS: device fsid 1b52c0b7-0b80-4691-b8ad-99f687904088 devid 1 transid 8 /dev/loop0 scanned by syz.0.6954 (19689) [ 191.177494][T19689] BTRFS info (device loop0): first mount of filesystem 1b52c0b7-0b80-4691-b8ad-99f687904088 [ 191.179249][T19689] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 191.180503][T19689] BTRFS info (device loop0): using free space tree [ 191.385014][T19689] BTRFS info (device loop0): enabling ssd optimizations [ 191.428555][ T4327] BTRFS info (device loop0): last unmount of filesystem 1b52c0b7-0b80-4691-b8ad-99f687904088 [ 191.944411][ T4318] BTRFS: device fsid 1b52c0b7-0b80-4691-b8ad-99f687904088 devid 1 transid 9 /dev/loop0 scanned by udevd (4318) [ 192.088463][T19817] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.711700][T19731] set_capacity_and_notify: 4 callbacks suppressed [ 192.711715][T19731] loop2: detected capacity change from 0 to 262144 [ 192.723972][T19731] BTRFS: device fsid ee456214-da33-4366-8ba0-b289b748333f devid 1 transid 8 /dev/loop2 scanned by syz.2.6964 (19731) [ 192.733738][T19731] BTRFS info (device loop2): first mount of filesystem ee456214-da33-4366-8ba0-b289b748333f [ 192.735453][T19731] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 192.736732][T19731] BTRFS info (device loop2): using free space tree [ 193.065884][T19731] BTRFS info (device loop2): enabling ssd optimizations [ 193.143261][ T4326] BTRFS info (device loop2): last unmount of filesystem ee456214-da33-4366-8ba0-b289b748333f [ 193.262454][T19807] loop3: detected capacity change from 0 to 262144 [ 193.277091][T19807] BTRFS: device fsid 11f48b31-c56c-4ac8-b2ac-117247207a11 devid 1 transid 8 /dev/loop3 scanned by syz.3.6977 (19807) [ 193.290076][T19807] BTRFS info (device loop3): first mount of filesystem 11f48b31-c56c-4ac8-b2ac-117247207a11 [ 193.294480][T19807] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 193.296021][T19807] BTRFS info (device loop3): using free space tree [ 193.325556][T19803] loop4: detected capacity change from 0 to 262144 [ 193.342673][T19803] BTRFS: device fsid 33aaa230-f607-4ad5-bb55-a15117a94b92 devid 1 transid 8 /dev/loop4 scanned by syz.4.6974 (19803) [ 193.353215][T19803] BTRFS info (device loop4): first mount of filesystem 33aaa230-f607-4ad5-bb55-a15117a94b92 [ 193.354966][T19803] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 193.382387][ T5382] BTRFS: device fsid ee456214-da33-4366-8ba0-b289b748333f devid 1 transid 9 /dev/loop2 scanned by udevd (5382) [ 193.384650][T19803] BTRFS info (device loop4): using free space tree [ 193.516181][T19819] loop1: detected capacity change from 0 to 131072 [ 193.525558][T19807] BTRFS info (device loop3): enabling ssd optimizations [ 193.525770][T19819] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 193.530271][T19819] dlm: no local IP address has been set [ 193.531180][T19819] dlm: cannot start dlm midcomms -107 [ 193.532216][T19819] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 193.585348][ T4325] BTRFS info (device loop3): last unmount of filesystem 11f48b31-c56c-4ac8-b2ac-117247207a11 [ 193.608315][T19803] BTRFS info (device loop4): enabling ssd optimizations [ 193.817578][ T4331] BTRFS info (device loop4): last unmount of filesystem 33aaa230-f607-4ad5-bb55-a15117a94b92 [ 194.001168][ T5381] BTRFS: device fsid 33aaa230-f607-4ad5-bb55-a15117a94b92 devid 1 transid 9 /dev/loop4 scanned by udevd (5381) [ 194.158003][T19814] loop0: detected capacity change from 0 to 262144 [ 194.178105][T19814] BTRFS: device fsid 3774c215-6a0b-4ae7-a77a-f00a83ff6367 devid 1 transid 8 /dev/loop0 scanned by syz.0.6980 (19814) [ 194.189529][T19814] BTRFS info (device loop0): first mount of filesystem 3774c215-6a0b-4ae7-a77a-f00a83ff6367 [ 194.191339][T19814] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 194.192959][T19814] BTRFS info (device loop0): using free space tree [ 194.198268][T19898] loop2: detected capacity change from 0 to 4096 [ 194.229813][ T5369] BTRFS: device fsid 11f48b31-c56c-4ac8-b2ac-117247207a11 devid 1 transid 9 /dev/loop3 scanned by udevd (5369) [ 194.294612][T19902] loop3: detected capacity change from 0 to 4096 [ 194.304044][T19902] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 194.456555][T19814] BTRFS info (device loop0): enabling ssd optimizations [ 194.481530][T19922] loop3: detected capacity change from 0 to 4096 [ 194.493870][T19921] loop2: detected capacity change from 0 to 4096 [ 194.496674][T19921] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 194.500520][T19922] ntfs: volume version 3.1. [ 194.578072][ T4327] BTRFS info (device loop0): last unmount of filesystem 3774c215-6a0b-4ae7-a77a-f00a83ff6367 [ 194.667406][T19927] loop2: detected capacity change from 0 to 4096 [ 194.700738][T19927] ntfs: volume version 3.1. [ 194.822230][T19924] (syz.3.6998,19924,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 194.823947][T19924] (syz.3.6998,19924,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 195.003837][T19931] (syz.2.7003,19931,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 195.005275][T19931] (syz.2.7003,19931,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 195.481322][T19938] (syz.2.7006,19938,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 195.483205][T19938] (syz.2.7006,19938,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 195.570476][ T5382] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 195.937604][T19889] F2FS-fs (loop1): Found nat_bits in checkpoint [ 195.960277][T19889] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 196.206936][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.208059][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.685577][T19940] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 196.687030][T19940] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 196.694401][T19940] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 196.705393][ T1514] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 196.706453][ T1514] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 196.805853][ T1514] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 104ms [ 196.825224][T19948] (syz.1.7008,19948,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 196.828325][ T1514] gfs2: fsid=syz:syz.0: jid=0: Done [ 196.829350][ T1514] gfs2: fsid=syz:syz.0: jid=1: Trying to acquire journal glock... [ 196.831286][ T1514] gfs2: fsid=syz:syz.0: jid=1: Looking at journal... [ 196.833440][ T1514] gfs2: fsid=syz:syz.0: journal 1 mapped with 1 extents in 0ms [ 196.846715][T19948] (syz.1.7008,19948,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 196.892836][ T1514] gfs2: fsid=syz:syz.0: jid=1: Journal head lookup took 64ms [ 196.900341][ T1514] gfs2: fsid=syz:syz.0: jid=1: Done [ 196.901251][T19940] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 196.922855][ T5367] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.965771][T19934] BTRFS: device fsid 59d3f0ab-0505-4d86-af97-7d6a258edb0a devid 1 transid 8 /dev/loop4 scanned by syz.4.7004 (19934) [ 197.006976][T19934] BTRFS info (device loop4): first mount of filesystem 59d3f0ab-0505-4d86-af97-7d6a258edb0a [ 197.011586][T19934] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 197.013163][T19934] BTRFS info (device loop4): using free space tree [ 197.082974][T19942] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 197.084263][T19942] CPU: 0 PID: 19942 Comm: syz.2.7007 Not tainted syzkaller #0 [ 197.085515][T19942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 197.087104][T19942] Call trace: [ 197.087655][T19942] dump_backtrace+0x1c0/0x1ec [ 197.088528][T19942] show_stack+0x2c/0x3c [ 197.089271][T19942] __dump_stack+0x30/0x40 [ 197.089824][T19942] dump_stack_lvl+0xf4/0x15c [ 197.090557][T19942] dump_stack+0x1c/0x5c [ 197.091179][T19942] sysfs_create_dir_ns+0x244/0x264 [ 197.091999][T19942] kobject_add_internal+0x598/0xb08 [ 197.092920][T19942] kobject_init_and_add+0x124/0x190 [ 197.093834][T19942] gfs2_sys_fs_add+0x200/0x41c [ 197.094654][T19942] gfs2_fill_super+0xdec/0x194c [ 197.095504][T19942] get_tree_bdev+0x358/0x544 [ 197.096318][T19942] gfs2_get_tree+0x54/0x1b4 [ 197.097121][T19942] vfs_get_tree+0x90/0x274 [ 197.097954][T19942] do_new_mount+0x228/0x810 [ 197.098734][T19942] path_mount+0x5bc/0xe80 [ 197.099416][T19942] __arm64_sys_mount+0x49c/0x59c [ 197.100299][T19942] invoke_syscall+0x98/0x2b4 [ 197.101014][T19942] el0_svc_common+0x138/0x258 [ 197.101834][T19942] do_el0_svc+0x58/0x130 [ 197.102580][T19942] el0_svc+0x58/0x128 [ 197.103314][T19942] el0t_64_sync_handler+0x84/0xf0 [ 197.104118][T19942] el0t_64_sync+0x18c/0x190 [ 197.120880][T19942] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 197.123230][T19942] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 197.145307][T19955] ntfs: volume version 3.1. [ 197.145740][ T5383] udevd[5383]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 197.147652][ T5382] udevd[5382]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 197.190305][T19936] F2FS-fs (loop3): Found nat_bits in checkpoint [ 197.227655][ T5369] udevd[5369]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 197.235951][T19936] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 197.299239][T19934] BTRFS info (device loop4): enabling ssd optimizations [ 197.358302][ T4331] BTRFS info (device loop4): last unmount of filesystem 59d3f0ab-0505-4d86-af97-7d6a258edb0a [ 197.705270][ T5381] BTRFS: device fsid 59d3f0ab-0505-4d86-af97-7d6a258edb0a devid 1 transid 9 /dev/loop4 scanned by udevd (5381) [ 197.890671][T19981] set_capacity_and_notify: 10 callbacks suppressed [ 197.890682][T19981] loop3: detected capacity change from 0 to 32768 [ 197.898690][T19981] (syz.3.7011,19981,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 197.900192][T19981] (syz.3.7011,19981,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 197.948450][T19983] loop0: detected capacity change from 0 to 32768 [ 197.982510][T19983] (syz.0.7014,19983,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 197.985074][T19983] (syz.0.7014,19983,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 198.146334][T19986] loop2: detected capacity change from 0 to 32768 [ 198.158710][T19986] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 198.160109][T19986] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 198.176781][T19986] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 198.205699][ T7994] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 198.207098][ T7994] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 198.235127][ T7994] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 29ms [ 198.242449][ T7994] gfs2: fsid=syz:syz.0: jid=0: Done [ 198.243403][T19986] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 198.558256][T19990] loop3: detected capacity change from 0 to 65536 [ 198.597203][T19990] (syz.3.7017,19990,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 198.598793][T19990] (syz.3.7017,19990,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 198.814760][T19992] loop0: detected capacity change from 0 to 65536 [ 198.831218][T19992] (syz.0.7018,19992,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 198.832709][T19992] (syz.0.7018,19992,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 198.862721][T19998] loop3: detected capacity change from 0 to 128 [ 198.880521][T19995] loop4: detected capacity change from 0 to 65536 [ 198.882174][T19995] (syz.4.7019,19995,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 198.885187][T19998] omfs: Invalid superblock (7b3184f9) [ 198.889128][T19995] (syz.4.7019,19995,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 199.192742][T20002] loop0: detected capacity change from 0 to 8192 [ 199.194903][T20002] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 199.208884][T20002] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 199.210407][T20002] REISERFS (device loop0): using ordered data mode [ 199.211421][T20002] reiserfs: using flush barriers [ 199.216417][T20002] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 199.218986][T20002] REISERFS (device loop0): checking transaction log (loop0) [ 199.370926][T20002] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 199.373539][T20002] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 199.375284][T20002] REISERFS (device loop0): Remounting filesystem read-only [ 199.376486][T20002] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 199.378728][T20002] REISERFS warning (device loop0): reiserfs_fill_super: corrupt root inode, run fsck [ 199.513905][T20000] loop3: detected capacity change from 0 to 65536 [ 199.515455][T20000] (syz.3.7021,20000,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 199.517133][T20000] (syz.3.7021,20000,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 199.519016][T20007] loop2: detected capacity change from 0 to 16384 [ 199.533609][T20007] REISERFS warning (device loop2): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop2, block 16, size 4096) [ 199.535720][T20007] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 199.587467][ T5382] I/O error, dev loop3, sector 65408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.777791][ T5369] I/O error, dev loop2, sector 16256 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.944066][T19988] BTRFS: device fsid 61058517-f88a-44e9-ab5f-dbbe39372da4 devid 1 transid 8 /dev/loop1 scanned by syz.1.7016 (19988) [ 199.952253][T19988] BTRFS info (device loop1): first mount of filesystem 61058517-f88a-44e9-ab5f-dbbe39372da4 [ 199.953990][T19988] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 199.955634][T19988] BTRFS info (device loop1): using free space tree [ 200.077103][T20014] REISERFS warning (device loop2): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop2, block 16, size 4096) [ 200.079326][T20014] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 200.175875][T19988] BTRFS info (device loop1): enabling ssd optimizations [ 200.297520][ T4324] BTRFS info (device loop1): last unmount of filesystem 61058517-f88a-44e9-ab5f-dbbe39372da4 [ 200.609650][ T5367] BTRFS: device fsid 61058517-f88a-44e9-ab5f-dbbe39372da4 devid 1 transid 9 /dev/loop1 scanned by udevd (5367) [ 201.257825][ T5383] udevd[5383]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 201.281218][ T5382] udevd[5382]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 201.304610][ T4910] udevd[4910]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 201.331647][ T4317] udevd[4317]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 201.334577][ T5369] udevd[5369]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 201.352167][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop2p8, 10) failed: No such file or directory [ 201.362068][T20032] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 201.364158][T20032] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 201.365474][T20032] REISERFS (device loop2): using ordered data mode [ 201.366549][T20032] reiserfs: using flush barriers [ 201.370383][ T5368] udevd[5368]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory [ 201.377937][T20032] REISERFS (device loop2): journal params: device loop2, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 201.381556][T20032] REISERFS (device loop2): checking transaction log (loop2) [ 201.915578][ T5383] udevd[5383]: inotify_add_watch(7, /dev/loop2p42, 10) failed: No such file or directory [ 201.919719][ T5382] udevd[5382]: inotify_add_watch(7, /dev/loop2p41, 10) failed: No such file or directory [ 201.935087][ T4910] udevd[4910]: inotify_add_watch(7, /dev/loop2p43, 10) failed: No such file or directory [ 201.953021][ T4317] udevd[4317]: inotify_add_watch(7, /dev/loop2p44, 10) failed: No such file or directory [ 201.976225][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop2p45, 10) failed: No such file or directory [ 202.005940][ T5368] udevd[5368]: inotify_add_watch(7, /dev/loop2p46, 10) failed: No such file or directory [ 202.027484][ T4316] udevd[4316]: inotify_add_watch(7, /dev/loop2p47, 10) failed: No such file or directory [ 202.060159][ T4911] udevd[4911]: inotify_add_watch(7, /dev/loop2p48, 10) failed: No such file or directory [ 202.100499][T20012] (syz.3.7026,20012,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 202.112198][ T5369] udevd[5369]: inotify_add_watch(7, /dev/loop2p49, 10) failed: No such file or directory [ 202.122508][T20012] (syz.3.7026,20012,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 202.127275][ T5383] udevd[5383]: inotify_add_watch(7, /dev/loop2p51, 10) failed: No such file or directory [ 202.395487][T20043] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 202.400824][T20043] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 202.402360][T20043] REISERFS (device loop1): using ordered data mode [ 202.403411][T20043] reiserfs: using flush barriers [ 202.430077][T20043] REISERFS (device loop1): journal params: device loop1, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 202.433802][T20043] REISERFS (device loop1): checking transaction log (loop1) [ 202.979802][T20051] set_capacity_and_notify: 7 callbacks suppressed [ 202.979812][T20051] loop3: detected capacity change from 0 to 24 [ 202.989207][T20051] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 202.994809][T20051] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 203.113188][T20053] loop3: detected capacity change from 0 to 8 [ 203.192114][T20055] loop3: detected capacity change from 0 to 8 [ 203.378281][T20057] Can't find a SQUASHFS superblock on loop3 [ 203.520410][T20032] REISERFS (device loop2): Using rupasov hash to sort names [ 203.522047][T20032] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 203.847755][T20059] loop3: detected capacity change from 0 to 32768 [ 203.851830][T20059] (syz.3.7039,20059,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 203.853482][T20059] (syz.3.7039,20059,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 203.933547][T20046] loop4: detected capacity change from 0 to 262144 [ 203.935139][T20046] (syz.4.7033,20046,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 203.936552][T20046] (syz.4.7033,20046,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 204.233697][T20048] loop0: detected capacity change from 0 to 262144 [ 204.252651][T20048] BTRFS: device fsid d77fbf5b-793b-4b7a-bb75-7d2ee0bed15d devid 1 transid 8 /dev/loop0 scanned by syz.0.7034 (20048) [ 204.266402][T20048] BTRFS info (device loop0): first mount of filesystem d77fbf5b-793b-4b7a-bb75-7d2ee0bed15d [ 204.268194][T20048] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 204.269615][T20048] BTRFS info (device loop0): using free space tree [ 204.437762][T20048] BTRFS info (device loop0): enabling ssd optimizations [ 204.444679][T20080] loop4: detected capacity change from 0 to 128 [ 204.447840][T20080] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 204.453186][T20080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.559670][ T4327] BTRFS info (device loop0): last unmount of filesystem d77fbf5b-793b-4b7a-bb75-7d2ee0bed15d [ 204.847238][T20043] REISERFS (device loop1): Using tea hash to sort names [ 204.848647][T20043] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 205.589088][T20090] loop2: detected capacity change from 0 to 1 [ 205.592142][T20090] syz.2.7040: attempt to access beyond end of device [ 205.592142][T20090] loop2: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 205.594264][T20090] SQUASHFS error: Failed to read block 0x0: -5 [ 205.595182][T20090] unable to read squashfs_super_block [ 205.658623][T20092] loop2: detected capacity change from 0 to 256 [ 205.666941][T20092] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 205.668907][T20092] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 205.676740][T20092] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 205.678065][T20092] UDF-fs: Scanning with blocksize 512 failed [ 205.688344][T20092] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 205.693490][T20092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.817425][T20061] loop3: detected capacity change from 0 to 262144 [ 205.818900][T20061] (syz.3.7041,20061,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 205.822333][T20061] (syz.3.7041,20061,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 206.375735][T20096] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 206.377044][T20096] UDF-fs: Scanning with blocksize 512 failed [ 206.394025][T20096] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.452684][T20098] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 206.454030][T20098] UDF-fs: Scanning with blocksize 512 failed [ 206.462161][T20082] (syz.4.7043,20082,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 206.463878][T20082] (syz.4.7043,20082,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 206.481571][T20098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.569353][T20102] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 206.572169][T20102] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.681226][T20105] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 206.704337][T20105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.801414][T20107] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.932100][T20111] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 206.933381][T20111] UDF-fs: Scanning with blocksize 512 failed [ 206.944271][T20111] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 206.945745][T20111] UDF-fs: Scanning with blocksize 1024 failed [ 206.950282][T20111] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 206.952026][T20111] UDF-fs: Scanning with blocksize 2048 failed [ 206.956324][T20111] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 206.976726][T20111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.022145][T20087] (syz.0.7044,20087,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 207.023780][T20087] (syz.0.7044,20087,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 207.168630][T20117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.176671][T20119] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 207.201577][T20119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.509397][T20126] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 207.510612][T20126] UDF-fs: Scanning with blocksize 512 failed [ 207.522522][T20126] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 207.523836][T20126] UDF-fs: Scanning with blocksize 1024 failed [ 207.534572][T20126] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 207.535682][T20126] UDF-fs: Scanning with blocksize 2048 failed [ 207.539777][T20126] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.851308][T20141] set_capacity_and_notify: 17 callbacks suppressed [ 207.851321][T20141] loop3: detected capacity change from 0 to 8192 [ 207.898771][T20094] loop2: detected capacity change from 0 to 262144 [ 207.900302][T20094] (syz.2.7048,20094,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 207.901836][T20094] (syz.2.7048,20094,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 207.909820][T20140] loop4: detected capacity change from 0 to 16384 [ 207.922905][T20140] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 207.924167][T20140] UDF-fs: Scanning with blocksize 512 failed [ 207.935454][T20140] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 207.936729][T20140] UDF-fs: Scanning with blocksize 1024 failed [ 207.945523][T20140] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 207.946777][T20140] UDF-fs: Scanning with blocksize 2048 failed [ 207.951721][T20140] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.964541][ T5369] I/O error, dev loop2, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 208.004441][T20145] loop0: detected capacity change from 0 to 128 [ 208.578338][T20100] loop1: detected capacity change from 0 to 262144 [ 208.585248][T20100] (syz.1.7050,20100,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 208.586874][T20100] (syz.1.7050,20100,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 208.650441][ T5381] I/O error, dev loop1, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 209.157811][T20148] loop0: detected capacity change from 0 to 131072 [ 209.200491][T20148] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 209.202808][T20148] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 209.204307][T20148] REISERFS (device loop0): using ordered data mode [ 209.205412][T20148] reiserfs: using flush barriers [ 209.236026][T20148] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 209.248919][T20148] REISERFS (device loop0): checking transaction log (loop0) [ 209.728469][T20143] loop3: detected capacity change from 0 to 262144 [ 209.730081][T20143] (syz.3.7070,20143,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 209.741544][T20143] (syz.3.7070,20143,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 210.422851][T20149] loop4: detected capacity change from 0 to 262144 [ 210.424619][T20149] (syz.4.7071,20149,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 210.426084][T20149] (syz.4.7071,20149,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 211.044779][T20151] loop2: detected capacity change from 0 to 262144 [ 211.056753][T20151] (syz.2.7074,20151,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 211.066480][T20151] (syz.2.7074,20151,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 211.293507][T20161] loop4: detected capacity change from 0 to 32768 [ 211.389475][T20148] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 211.392192][T20148] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 211.404015][T20148] REISERFS (device loop0): Remounting filesystem read-only [ 211.405274][T20148] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 211.413836][T20148] REISERFS warning (device loop0): reiserfs_fill_super: corrupt root inode, run fsck [ 211.779500][T20154] (syz.1.7075,20154,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 211.781180][T20154] (syz.1.7075,20154,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 212.000901][T20175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.002449][T20175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.095724][T20157] (syz.3.7076,20157,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 212.097475][T20157] (syz.3.7076,20157,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 212.155108][T20163] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 212.157602][T20163] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 212.159232][T20163] REISERFS (device loop2): using ordered data mode [ 212.163118][T20163] reiserfs: using flush barriers [ 212.167412][T20163] REISERFS (device loop2): journal params: device loop2, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 212.175045][T20163] REISERFS (device loop2): checking transaction log (loop2) [ 213.205437][T20165] set_capacity_and_notify: 4 callbacks suppressed [ 213.205448][T20165] loop4: detected capacity change from 0 to 262144 [ 213.227179][T20165] (syz.4.7080,20165,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 213.228848][T20165] (syz.4.7080,20165,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 213.413809][T20169] loop0: detected capacity change from 0 to 32768 [ 213.487252][T20169] XFS (loop0): Mounting V5 Filesystem [ 213.538233][T20169] XFS (loop0): Ending clean mount [ 213.656564][ T4327] XFS (loop0): Unmounting Filesystem [ 214.203542][T20163] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 214.206227][T20163] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 214.219491][T20163] REISERFS (device loop2): Remounting filesystem read-only [ 214.220733][T20163] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 214.226931][T20163] REISERFS warning (device loop2): reiserfs_fill_super: corrupt root inode, run fsck [ 214.570860][T20182] loop3: detected capacity change from 0 to 262144 [ 214.579805][T20182] REISERFS warning (device loop3): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop3, block 16, size 4096) [ 214.582071][T20182] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 214.624344][T20180] loop1: detected capacity change from 0 to 262144 [ 214.636838][T20180] BTRFS: device fsid f6a2c972-d317-4ba6-81c0-e8141f61b8ec devid 1 transid 8 /dev/loop1 scanned by syz.1.7087 (20180) [ 214.655626][T20180] BTRFS info (device loop1): first mount of filesystem f6a2c972-d317-4ba6-81c0-e8141f61b8ec [ 214.657657][T20180] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 214.659404][T20180] BTRFS info (device loop1): using free space tree [ 214.831816][T20180] BTRFS info (device loop1): enabling ssd optimizations [ 214.869314][T20194] loop0: detected capacity change from 0 to 131072 [ 214.923581][T20194] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 214.972249][ T4324] BTRFS info (device loop1): last unmount of filesystem f6a2c972-d317-4ba6-81c0-e8141f61b8ec [ 215.463001][ T5381] BTRFS: device fsid f6a2c972-d317-4ba6-81c0-e8141f61b8ec devid 1 transid 9 /dev/loop1 scanned by udevd (5381) [ 215.997457][ T5383] udevd[5383]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 216.008468][ T4910] udevd[4910]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 216.011806][ T4317] udevd[4317]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory [ 216.020282][T20192] loop4: detected capacity change from 0 to 262144 [ 216.027691][T20192] REISERFS warning (device loop4): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop4, block 16, size 4096) [ 216.030020][T20192] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 [ 216.095459][ T5367] udevd[5367]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 216.630382][T20196] loop2: detected capacity change from 0 to 262144 [ 216.644301][T20196] REISERFS warning (device loop2): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop2, block 16, size 4096) [ 216.646602][T20196] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 216.946258][T20203] loop3: detected capacity change from 0 to 262144 [ 216.964992][T20203] REISERFS warning (device loop3): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop3, block 16, size 4096) [ 216.967151][T20203] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 217.525616][T20225] loop0: detected capacity change from 0 to 262144 [ 217.534674][T20225] REISERFS warning (device loop0): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop0, block 16, size 4096) [ 217.536477][T20225] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 217.915028][T20240] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7099'. [ 218.270913][T20229] loop4: detected capacity change from 0 to 262144 [ 218.293023][T20229] REISERFS warning (device loop4): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop4, block 16, size 4096) [ 218.331528][T20229] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 [ 218.792194][T20231] loop1: detected capacity change from 0 to 262144 [ 218.806330][T20231] REISERFS warning (device loop1): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop1, block 16, size 4096) [ 218.815673][T20231] REISERFS warning (device loop1): sh-2021 reiserfs_fill_super: can not find reiserfs on loop1 [ 218.851875][T20234] loop2: detected capacity change from 0 to 262144 [ 218.867998][T20234] REISERFS warning (device loop2): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop2, block 16, size 4096) [ 218.870372][T20234] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 219.052972][T20261] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.055447][T20261] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.082194][T20261] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 219.457616][T20250] loop3: detected capacity change from 0 to 131072 [ 219.485849][T20281] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 219.504747][T20250] XFS (loop3): Mounting V5 Filesystem [ 219.588356][T20250] XFS (loop3): Ending clean mount [ 219.699569][ T4325] XFS (loop3): Unmounting Filesystem [ 219.717266][T20297] loop2: detected capacity change from 0 to 764 [ 219.734629][T20301] netlink: 'syz.1.7125': attribute type 10 has an invalid length. [ 219.736040][T20301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7125'. [ 219.743442][T20297] Symlink component flag not implemented [ 219.744434][T20297] Symlink component flag not implemented [ 219.745582][T20297] Symlink component flag not implemented (129) [ 219.746540][T20297] Symlink component flag not implemented (6) [ 219.759283][T20301] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 219.778556][T20301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.823406][T20307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7127'. [ 219.874264][T20238] loop0: detected capacity change from 0 to 262144 [ 219.878593][T20313] deleting an unspecified loop device is not supported. [ 219.915159][T20238] REISERFS warning (device loop0): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop0, block 16, size 4096) [ 219.917411][T20238] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 219.999518][T20325] loop1: detected capacity change from 0 to 2048 [ 220.028092][T20325] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.109912][T20343] snd_dummy snd_dummy.0: control 4:8201:0:syz0:1 is already present [ 220.191588][T20344] loop2: detected capacity change from 0 to 8192 [ 220.204525][T20344] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 220.206572][T20344] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 220.208134][T20344] REISERFS (device loop2): using ordered data mode [ 220.220223][T20344] reiserfs: using flush barriers [ 220.227454][T20344] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 220.230264][T20344] REISERFS (device loop2): checking transaction log (loop2) [ 220.239201][T20344] REISERFS (device loop2): Using rupasov hash to sort names [ 220.240493][T20344] REISERFS (device loop2): using 3.5.x disk format [ 220.241639][T20344] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 220.243527][T20344] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 220.245457][T20344] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 220.277887][T20344] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 220.308006][T20344] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 220.311177][T20344] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 220.719602][T20384] binder: 20383:20384 got transaction to invalid handle, 1 [ 220.720845][T20384] binder: 20384:20383 cannot find target node [ 220.721921][T20384] binder: 20383:20384 transaction call to 0:0 failed 1/29201/-22, size 120-24 line 3045 [ 220.732557][ T7990] binder: undelivered TRANSACTION_ERROR: 29201 [ 220.786135][T20370] loop4: detected capacity change from 0 to 32768 [ 220.880860][T20396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7170'. [ 221.043060][T20365] loop1: detected capacity change from 0 to 65536 [ 221.090868][T20392] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.7168 (20392) [ 221.102671][T20392] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 221.109322][T20365] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel. [ 221.130345][T20392] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 221.132081][T20392] BTRFS info (device loop2): force clearing of disk cache [ 221.135671][T20392] BTRFS info (device loop2): force zlib compression, level 3 [ 221.136909][T20392] BTRFS info (device loop2): enabling auto defrag [ 221.137815][T20392] BTRFS info (device loop2): max_inline at 0 [ 221.138812][T20392] BTRFS info (device loop2): enabling disk space caching [ 221.139994][T20392] BTRFS info (device loop2): disk space caching is enabled [ 221.226089][T20425] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 221.233481][T20425] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 221.235030][T20425] REISERFS (device loop3): using ordered data mode [ 221.235907][T20425] reiserfs: using flush barriers [ 221.237377][T20425] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 221.240117][T20425] REISERFS (device loop3): checking transaction log (loop3) [ 221.270311][T20392] BTRFS info (device loop2): enabling ssd optimizations [ 221.271947][T20392] BTRFS info (device loop2): rebuilding free space tree [ 221.278964][T20392] BTRFS info (device loop2): disabling free space tree [ 221.280177][T20392] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 221.281895][T20392] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 221.318501][T20392] BTRFS error (device loop2: state M): unrecognized mount option 'max_inline' [ 221.349787][ T4326] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 221.443386][T20425] REISERFS (device loop3): Using tea hash to sort names [ 221.458237][T20425] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 221.567046][ T5381] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop2 scanned by udevd (5381) [ 221.573227][T20469] netlink: 'syz.1.7196': attribute type 1 has an invalid length. [ 221.733585][T20494] Injecting memory failure for pfn 0x13fffe at process virtual address 0x20ffe000 [ 221.735190][T20494] huge_memory: Called split_huge_page for huge zero page [ 221.736527][T20494] Memory failure: 0x13fffe: recovery action for unsplit thp: Ignored [ 222.125765][T20545] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7231'. [ 222.127213][T20545] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7231'. [ 222.128466][T20545] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 222.156510][T20545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.177858][T20550] netlink: 'syz.4.7234': attribute type 2 has an invalid length. [ 222.335477][T20519] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 222.335477][T20519] [ 222.366957][T20519] ERROR: (device loop0): remounting filesystem as read-only [ 222.392994][T20566] syz.1.7241: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 222.395940][T20566] CPU: 1 PID: 20566 Comm: syz.1.7241 Not tainted syzkaller #0 [ 222.397192][T20566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 222.398909][T20566] Call trace: [ 222.399477][T20566] dump_backtrace+0x1c0/0x1ec [ 222.400264][T20566] show_stack+0x2c/0x3c [ 222.400963][T20566] __dump_stack+0x30/0x40 [ 222.401624][T20566] dump_stack_lvl+0xf4/0x15c [ 222.402313][T20566] dump_stack+0x1c/0x5c [ 222.402917][T20566] warn_alloc+0x214/0x328 [ 222.403572][T20566] __vmalloc_node_range+0x118/0xe3c [ 222.404385][T20566] vmalloc+0x9c/0xd4 [ 222.405009][T20566] dvb_dvr_do_ioctl+0x120/0x1f8 [ 222.405688][T20566] dvb_usercopy+0x240/0x45c [ 222.406480][T20566] dvb_dvr_ioctl+0x3c/0x54 [ 222.407249][T20566] __arm64_sys_ioctl+0x14c/0x1c8 [ 222.407996][T20566] invoke_syscall+0x98/0x2b4 [ 222.408706][T20566] el0_svc_common+0x138/0x258 [ 222.408953][T20569] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 222.409512][T20566] do_el0_svc+0x58/0x130 [ 222.412122][T20566] el0_svc+0x58/0x128 [ 222.412774][T20566] el0t_64_sync_handler+0x84/0xf0 [ 222.413699][T20566] el0t_64_sync+0x18c/0x190 [ 222.420399][ T4354] hfsplus: b-tree write err: -5, ino 25 [ 222.423598][ T4354] hfsplus: b-tree write err: -5, ino 4 [ 222.424501][ T4354] hfsplus: b-tree write err: -5, ino 2 [ 222.425438][ T4354] hfsplus: b-tree write err: -5, ino 26 [ 222.474776][T20566] Mem-Info: [ 222.475350][T20566] active_anon:17003 inactive_anon:0 isolated_anon:0 [ 222.475350][T20566] active_file:22495 inactive_file:3092 isolated_file:0 [ 222.475350][T20566] unevictable:768 dirty:501 writeback:0 [ 222.475350][T20566] slab_reclaimable:20780 slab_unreclaimable:91397 [ 222.475350][T20566] mapped:29779 shmem:7042 pagetables:701 [ 222.475350][T20566] sec_pagetables:0 bounce:0 [ 222.475350][T20566] kernel_misc_reclaimable:0 [ 222.475350][T20566] free:1419498 free_pcp:3092 free_cma:7360 [ 222.499025][T20566] Node 0 active_anon:62512kB inactive_anon:0kB active_file:89980kB inactive_file:12368kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:119116kB dirty:2004kB writeback:0kB shmem:22968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9076kB pagetables:2704kB sec_pagetables:0kB all_unreclaimable? no [ 222.505268][T20566] Node 0 DMA free:3076864kB boost:0kB min:20656kB low:25820kB high:30984kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 222.519090][T20566] lowmem_reserve[]: 0 0 3552 3552 3552 [ 222.520183][T20566] Node 0 Normal free:2600652kB boost:0kB min:24396kB low:30492kB high:36588kB reserved_highatomic:0KB active_anon:62012kB inactive_anon:0kB active_file:89980kB inactive_file:12368kB unevictable:3072kB writepending:2004kB present:5242880kB managed:3641540kB mlocked:0kB bounce:0kB free_pcp:18144kB local_pcp:10964kB free_cma:0kB [ 222.539245][T20566] lowmem_reserve[]: 0 0 0 0 0 [ 222.540056][T20566] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 222.556580][T20566] Node 0 Normal: 2385*4kB (UME) 2655*8kB (UME) 2922*16kB (UME) 2434*32kB (UME) 2458*64kB (UME) 1501*128kB (UME) 726*256kB (UME) 269*512kB (UME) 72*1024kB (UME) 11*2048kB (UM) 409*4096kB (UM) = 2599964kB [ 222.566460][T20566] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.568225][T20566] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 222.570506][T20566] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 222.572029][T20566] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 222.577881][T20566] 29758 total pagecache pages [ 222.578586][T20566] 0 pages in swap cache [ 222.579756][T20566] Free swap = 124740kB [ 222.584160][T20566] Total swap = 124996kB [ 222.584925][T20566] 2097152 pages RAM [ 222.585573][T20566] 0 pages HighMem/MovableOnly [ 222.586357][T20566] 416719 pages reserved [ 222.587066][T20566] 8192 pages cma reserved [ 222.601528][T20566] 1 pages hwpoisoned [ 222.621715][T20596] xt_ipcomp: unknown flags 2 [ 222.708862][T20607] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 222.733162][T20610] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7263'. [ 222.739396][T20611] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7262'. [ 222.751855][T20614] netlink: 'syz.0.7264': attribute type 30 has an invalid length. [ 222.788197][T20620] netlink: 'syz.2.7267': attribute type 32 has an invalid length. [ 222.804968][T20618] Illegal XDP return value 548573818 on prog (id 579) dev N/A, expect packet loss! [ 222.812313][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7267'. [ 222.814199][T20620] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 223.013935][T20641] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 223.092295][T20650] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 223.247306][T20675] set_capacity_and_notify: 6 callbacks suppressed [ 223.247316][T20675] loop1: detected capacity change from 0 to 256 [ 223.280996][T20681] sctp: [Deprecated]: syz.4.7297 (pid 20681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.280996][T20681] Use struct sctp_sack_info instead [ 223.326712][T20685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7299'. [ 223.446647][ T6202] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 223.530385][T20718] xt_l2tp: v2 doesn't support IP mode [ 223.590348][T20727] loop3: detected capacity change from 0 to 64 [ 223.617985][ T6202] usb 1-1: Using ep0 maxpacket: 32 [ 223.625997][ T6202] usb 1-1: unable to get BOS descriptor or descriptor too short [ 223.631612][ T6202] usb 1-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 223.633507][ T6202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.634890][ T6202] usb 1-1: Product: syz [ 223.635608][ T6202] usb 1-1: Manufacturer: syz [ 223.636278][ T6202] usb 1-1: SerialNumber: syz [ 223.704359][T20737] netlink: 'syz.3.7325': attribute type 1 has an invalid length. [ 223.731315][T20742] loop1: detected capacity change from 0 to 164 [ 223.770071][T20742] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 223.861179][ T6202] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 223.873013][T20759] loop4: detected capacity change from 0 to 256 [ 223.877919][ T6202] usb 1-1: unit 37 not found! [ 223.878713][ T6202] usb 1-1: unit 0 not found! [ 223.891635][T20759] exfat: Deprecated parameter 'namecase' [ 223.892700][T20759] exfat: Deprecated parameter 'utf8' [ 223.921706][T20759] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 223.924555][ T6202] usb 1-1: USB disconnect, device number 2 [ 224.091848][T20756] loop3: detected capacity change from 0 to 32768 [ 224.101834][T20778] random: crng reseeded on system resumption [ 224.108525][T20756] (syz.3.7335,20756,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 224.110843][T20756] (syz.3.7335,20756,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 224.125466][T20756] JBD2: Ignoring recovery information on journal [ 224.166227][T20756] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 224.217300][T20756] (syz.3.7335,20756,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 224.219922][T20756] (syz.3.7335,20756,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 224.222003][T20756] (syz.3.7335,20756,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 224.223496][T20756] (syz.3.7335,20756,1):ocfs2_quota_read:201 ERROR: status = -5 [ 224.245301][T20756] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 4 [ 224.254512][T20756] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 224.265592][T20756] (syz.3.7335,20756,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 224.268268][T20756] (syz.3.7335,20756,0):ocfs2_symlink:1879 ERROR: status = -5 [ 224.277007][T20756] (syz.3.7335,20756,0):ocfs2_symlink:2065 ERROR: status = -5 [ 224.353254][ T4325] ocfs2: Unmounting device (7,3) on (node local) [ 224.635531][T20831] binder: 20830:20831 ioctl c0046209 9999999999999999 returned -22 [ 224.661002][T20802] loop1: detected capacity change from 0 to 32768 [ 224.739620][T20849] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.763992][T20802] XFS (loop1): Mounting V5 Filesystem [ 224.806116][ T4910] udevd[4910]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.822455][T20802] XFS (loop1): Ending clean mount [ 224.910432][ T4324] XFS (loop1): Unmounting Filesystem [ 224.968717][T20867] loop3: detected capacity change from 0 to 8192 [ 224.981229][T20867] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 225.025502][T20887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7394'. [ 225.029117][T20867] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 1046) [ 225.031344][T20867] FAT-fs (loop3): Filesystem has been set read-only [ 225.068704][ T4325] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 1046) [ 225.093416][T20894] loop0: detected capacity change from 0 to 512 [ 225.116000][T20894] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 225.165734][T20894] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 225.171777][T20894] EXT4-fs (loop0): Remounting filesystem read-only [ 225.176521][T20894] Quota error (device loop0): write_blk: dquota write failed [ 225.187108][T20894] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 225.195996][T20894] Quota error (device loop0): write_blk: dquota write failed [ 225.205195][T20894] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 225.209900][T20894] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.7398: Failed to acquire dquot type 1 [ 225.212111][T20894] EXT4-fs (loop0): Remounting filesystem read-only [ 225.213295][T20894] EXT4-fs (loop0): 1 truncate cleaned up [ 225.214338][T20894] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 225.224299][T20894] Quota error (device loop0): write_blk: dquota write failed [ 225.225862][T20894] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 225.228479][T20894] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.7398: Failed to acquire dquot type 1 [ 225.232220][T20894] EXT4-fs (loop0): Remounting filesystem read-only [ 225.257009][T20899] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.313479][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 225.406059][T20919] [U] ‚ [ 225.523841][T20942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.708281][T20972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7433'. [ 225.709796][T20972] netlink: 312 bytes leftover after parsing attributes in process `syz.1.7433'. [ 225.711073][T20972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7433'. [ 225.892824][T20996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7445'. [ 225.899236][T20996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7445'. [ 226.063459][T21018] loop1: detected capacity change from 0 to 8 [ 226.069987][T21018] SQUASHFS error: lzo decompression failed, data probably corrupt [ 226.082046][T21018] SQUASHFS error: Failed to read block 0x91: -5 [ 226.083076][T21018] SQUASHFS error: Unable to read metadata cache entry [8f] [ 226.106450][T21018] SQUASHFS error: Unable to read inode 0x11f [ 226.145767][ T5369] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.367103][T21055] loop4: detected capacity change from 0 to 64 [ 226.842558][T21109] netlink: 'syz.1.7502': attribute type 6 has an invalid length. [ 226.853918][T20964] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 226.871171][T20964] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 226.872825][T20964] REISERFS (device loop0): using ordered data mode [ 226.873930][T20964] reiserfs: using flush barriers [ 226.887767][T20964] REISERFS (device loop0): journal params: device loop0, size 8192, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 226.891012][T20964] REISERFS (device loop0): checking transaction log (loop0) [ 227.004792][T21106] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 227.019670][ T6032] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x50/0x108, xfs_finobt block 0x20 [ 227.022537][ T6032] XFS (loop3): Unmount and run xfs_repair [ 227.023413][ T6032] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 227.024580][ T6032] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 227.032624][ T6032] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 227.043046][ T6032] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 227.053563][ T6032] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 227.061757][ T6032] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 227.067256][T21133] netlink: 'syz.4.7508': attribute type 1 has an invalid length. [ 227.070870][ T6032] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.072375][ T6032] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.073783][ T6032] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.093047][T21106] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x184/0x290" at daddr 0x20 len 8 error 74 [ 227.095413][T21106] XFS (loop3): Failed to initialize disk quotas. [ 227.169753][ T4325] XFS (loop3): Unmounting Filesystem [ 227.257606][T21149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.259253][T21149] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.322342][T21149] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 227.566103][T21176] FAT-fs (loop2): Directory bread(block 64) failed [ 227.568186][T21176] FAT-fs (loop2): Directory bread(block 65) failed [ 227.569961][T21176] FAT-fs (loop2): Directory bread(block 66) failed [ 227.583731][T21176] FAT-fs (loop2): Directory bread(block 67) failed [ 227.585046][T21176] FAT-fs (loop2): Directory bread(block 68) failed [ 227.587388][T21176] FAT-fs (loop2): Directory bread(block 69) failed [ 227.588545][T21176] FAT-fs (loop2): Directory bread(block 70) failed [ 227.592349][T21176] FAT-fs (loop2): Directory bread(block 71) failed [ 227.593637][T21176] FAT-fs (loop2): Directory bread(block 72) failed [ 227.606496][T21176] FAT-fs (loop2): Directory bread(block 73) failed [ 227.945783][T21203] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 227.963008][T20964] REISERFS (device loop0): Using r5 hash to sort names [ 227.964332][T20964] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 228.053014][T21214] __nla_validate_parse: 7 callbacks suppressed [ 228.053028][T21214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7547'. [ 228.061174][T21214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7547'. [ 228.138038][T21227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7551'. [ 228.187935][T21235] set_capacity_and_notify: 4 callbacks suppressed [ 228.187951][T21235] loop1: detected capacity change from 0 to 256 [ 228.191608][T21235] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.193482][T21235] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 228.201642][T21235] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 228.452184][T21259] sctp: [Deprecated]: syz.1.7568 (pid 21259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.452184][T21259] Use struct sctp_sack_info instead [ 228.466770][T21263] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 228.502340][T21265] loop0: detected capacity change from 0 to 1024 [ 228.503487][ T4339] Bluetooth: hci2: unexpected cc 0x0402 length: 61 > 1 [ 228.505830][ T4339] Bluetooth: hci2: Ignoring error of Inquiry Cancel command [ 228.506591][T21267] loop2: detected capacity change from 0 to 64 [ 228.539917][T21267] MINIX-fs: bad superblock [ 228.681485][T21275] loop2: detected capacity change from 0 to 8192 [ 228.748797][T21275] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 228.750264][T21275] FAT-fs (loop2): Filesystem has been set read-only [ 228.771925][T21301] usb usb1: usbfs: process 21301 (syz.1.7590) did not claim interface 5 before use [ 228.780932][T21306] netlink: 'syz.4.7589': attribute type 1 has an invalid length. [ 228.954204][T21315] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 228.958371][T21329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7602'. [ 228.960054][T21329] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 228.982911][T21329] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 229.024469][T21337] loop0: detected capacity change from 0 to 64 [ 229.025047][T21337] MINIX-fs: bad superblock [ 229.059060][T21343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7610'. [ 229.060901][T21343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7610'. [ 229.062603][T21343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7610'. [ 229.064179][T21343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7610'. [ 229.103017][T21351] No source specified [ 229.165581][T21360] device bridge_slave_1 left promiscuous mode [ 229.166740][T21360] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.205562][T21360] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 229.313227][T21382] loop2: detected capacity change from 0 to 512 [ 229.367189][T21382] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 229.424875][T21367] loop0: detected capacity change from 0 to 32768 [ 229.433797][T21394] loop4: detected capacity change from 0 to 256 [ 229.449710][T21367] JBD2: Ignoring recovery information on journal [ 229.450643][T21399] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7637'. [ 229.451408][T21367] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 229.453461][T21367] JBD2: bad block at offset 32 [ 229.460391][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 229.478593][T21367] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 229.637206][ T4327] ocfs2: Unmounting device (7,0) on (node local) [ 229.705292][T21422] loop4: detected capacity change from 0 to 512 [ 229.738947][T21429] loop1: detected capacity change from 0 to 512 [ 229.740657][T21429] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 229.747666][T21429] EXT4-fs (loop1): 1 truncate cleaned up [ 229.748692][T21429] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 229.755209][T21422] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 229.832549][ T4324] EXT4-fs (loop1): unmounting filesystem. [ 229.880122][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 229.881895][T21441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7655'. [ 230.206883][T21484] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.236373][T21494] EXT4-fs: inline encryption not supported [ 230.254766][T21494] EXT4-fs: Ignoring removed i_version option [ 230.261252][T21494] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 230.263577][T21494] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 230.263577][T21494] [ 230.272054][T21494] Injecting memory failure for pfn 0x159fae at process virtual address 0x20001000 [ 230.276926][T21494] Memory failure: 0x159fae: recovery action for dirty LRU page: Recovered [ 230.278851][T21494] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20002000 [ 230.280349][T21494] Memory failure: 0x225a04: recovery action for reserved kernel page: Ignored [ 230.340398][T21497] EXT2-fs (loop4): (no)acl options not supported [ 230.341844][T21497] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 230.460130][T21504] ntfs: (device loop0): parse_options(): NLS character set is not found. Using previous one default. [ 230.462293][T21504] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 230.472263][T21521] x_tables: ip6_tables: SET.1 target: invalid size 8 (kernel) != (user) 0 [ 230.488641][T21504] ntfs: volume version 3.1. [ 230.593291][T15268] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 230.688992][T21505] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 230.694653][T21505] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 230.736786][T21505] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 230.738994][ T6032] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 230.740061][ T6032] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 230.754857][T21549] netlink: 'syz.3.7705': attribute type 10 has an invalid length. [ 230.756501][T21549] device virt_wifi0 entered promiscuous mode [ 230.758521][T21549] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 230.777752][ T6032] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 39ms [ 230.779196][ T6032] gfs2: fsid=syz:syz.0: jid=0: Done [ 230.780122][T21505] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 230.805655][T21551] netlink: 'syz.2.7706': attribute type 13 has an invalid length. [ 230.807018][T21551] netlink: 'syz.2.7706': attribute type 27 has an invalid length. [ 231.046481][T21583] overlayfs: missing 'lowerdir' [ 231.170774][ T4339] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 231.172391][ T4339] Bluetooth: hci4: Injecting HCI hardware error event [ 231.174652][ T4339] Bluetooth: hci4: hardware error 0x00 [ 231.300117][T21610] netlink: 'syz.3.7734': attribute type 10 has an invalid length. [ 231.634197][T21648] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 231.657242][T21648] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.684601][T21654] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 231.737779][T21659] netlink: 'syz.3.7757': attribute type 1 has an invalid length. [ 231.794884][T21664] usb usb7: usbfs: process 21664 (syz.4.7760) did not claim interface 0 before use [ 231.799762][T21668] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 231.882561][T21682] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9218ae8, utbl_chksum : 0xe619d30d) [ 231.904501][T21682] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 231.906273][T21682] exFAT-fs (loop1): Filesystem has been set read-only [ 231.911102][ T39] hfsplus: b-tree write err: -5, ino 25 [ 231.912381][ T39] hfsplus: b-tree write err: -5, ino 4 [ 231.913307][ T39] hfsplus: b-tree write err: -5, ino 2 [ 231.972116][T21688] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 232.376885][T21746] FAT-fs (loop0): Directory bread(block 64) failed [ 232.378003][T21746] FAT-fs (loop0): Directory bread(block 65) failed [ 232.398559][T21746] FAT-fs (loop0): Directory bread(block 66) failed [ 232.402271][T21746] FAT-fs (loop0): Directory bread(block 67) failed [ 232.403341][T21746] FAT-fs (loop0): Directory bread(block 68) failed [ 232.404398][T21746] FAT-fs (loop0): Directory bread(block 69) failed [ 232.405476][T21746] FAT-fs (loop0): Directory bread(block 70) failed [ 232.406474][T21746] FAT-fs (loop0): Directory bread(block 71) failed [ 232.407407][T21746] FAT-fs (loop0): Directory bread(block 72) failed [ 232.408507][T21746] FAT-fs (loop0): Directory bread(block 73) failed [ 232.449831][T21707] XFS (loop4): Mounting V5 Filesystem [ 232.544052][T21707] XFS (loop4): Ending clean mount [ 232.622997][ T4331] XFS (loop4): Unmounting Filesystem [ 232.730229][T21794] overlayfs: workdir and upperdir must be separate subtrees [ 232.802353][T21800] netlink: 'syz.1.7825': attribute type 1 has an invalid length. [ 233.164987][T21850] set_capacity_and_notify: 11 callbacks suppressed [ 233.165005][T21850] loop3: detected capacity change from 0 to 512 [ 233.182860][T21850] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.7848: bad orphan inode 13 [ 233.184801][T21850] ext4_test_bit(bit=12, block=4) = 1 [ 233.185781][T21850] is_bad_inode(inode)=0 [ 233.186530][T21850] NEXT_ORPHAN(inode)=0 [ 233.188370][T21850] max_ino=32 [ 233.193016][T21850] i_nlink=1 [ 233.193591][T21850] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 233.211451][T21850] EXT4-fs warning (device loop3): dx_probe:845: inode #2: comm syz.3.7848: Hash code is SIPHASH, but hash not in dirent [ 233.217178][T21850] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.7848: Corrupt directory, running e2fsck is recommended [ 233.226178][T21850] EXT4-fs warning (device loop3): dx_probe:845: inode #2: comm syz.3.7848: Hash code is SIPHASH, but hash not in dirent [ 233.228060][ T4339] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 233.228950][T21850] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.7848: Corrupt directory, running e2fsck is recommended [ 233.231800][T21850] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.7848: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 233.286150][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 233.317281][T21872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.324974][T21872] device batadv_slave_0 entered promiscuous mode [ 233.424448][T21886] netlink: 'syz.4.7865': attribute type 10 has an invalid length. [ 233.425946][T21886] __nla_validate_parse: 4 callbacks suppressed [ 233.425957][T21886] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7865'. [ 233.524683][T21900] loop2: detected capacity change from 0 to 1024 [ 233.540605][T21900] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 233.613672][T21906] loop0: detected capacity change from 0 to 256 [ 233.786249][T21933] netlink: 'syz.2.7890': attribute type 10 has an invalid length. [ 233.787600][T21933] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7890'. [ 233.870221][T21948] usb usb1: usbfs: process 21948 (syz.0.7896) did not claim interface 0 before use [ 233.871882][T21945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7894'. [ 233.874700][T21945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7894'. [ 233.951339][T21954] loop1: detected capacity change from 0 to 256 [ 233.952897][T21954] exfat: Deprecated parameter 'namecase' [ 233.953850][T21954] exfat: Deprecated parameter 'namecase' [ 234.014648][T21954] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d) [ 234.117594][T21969] loop0: detected capacity change from 0 to 4096 [ 234.134571][T21969] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 234.144459][T21969] ntfs3: loop0: Failed to load $Extend. [ 234.255871][T21988] loop0: detected capacity change from 0 to 128 [ 234.260707][T21988] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 234.298567][ T4327] sysv_free_block: flc_count > flc_size [ 234.299626][ T4327] sysv_free_block: flc_count > flc_size [ 234.300531][ T4327] sysv_free_block: flc_count > flc_size [ 234.301400][ T4327] sysv_free_block: flc_count > flc_size [ 234.302286][ T4327] sysv_free_block: flc_count > flc_size [ 234.303222][ T4327] sysv_free_block: flc_count > flc_size [ 234.304168][ T4327] sysv_free_block: flc_count > flc_size [ 234.308904][T21961] loop4: detected capacity change from 0 to 32768 [ 234.310646][ T4327] sysv_free_block: flc_count > flc_size [ 234.311501][ T4327] sysv_free_block: flc_count > flc_size [ 234.312280][ T4327] sysv_free_block: flc_count > flc_size [ 234.317593][ T4327] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 234.370934][T21961] XFS (loop4): Mounting V5 Filesystem [ 234.437007][T21961] XFS (loop4): Ending clean mount [ 234.545569][ T4331] XFS (loop4): Unmounting Filesystem [ 234.673290][T22024] loop0: detected capacity change from 0 to 1024 [ 234.684114][T21993] loop3: detected capacity change from 0 to 32768 [ 234.692245][T21993] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 234.697551][T21993] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 234.719725][T21993] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 234.726298][ T6202] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 234.727346][ T6202] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 234.748213][ T6202] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 21ms [ 234.755270][ T6202] gfs2: fsid=syz:syz.0: jid=0: Done [ 234.757411][T21993] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 234.864854][T22022] loop1: detected capacity change from 0 to 32768 [ 234.871779][T22022] (syz.1.7929,22022,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 234.874617][T22022] (syz.1.7929,22022,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 234.898918][T22022] JBD2: Ignoring recovery information on journal [ 234.961483][T22022] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 235.082955][T22038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.122887][T22038] device batadv_slave_0 entered promiscuous mode [ 235.138419][ T4324] ocfs2: Unmounting device (7,1) on (node local) [ 235.243646][T22046] syz.4.7938: attempt to access beyond end of device [ 235.243646][T22046] loop4: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 235.245977][T22046] Buffer I/O error on dev loop4, logical block 22533, async page read [ 235.264723][T22050] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 235.279024][T22046] syz.4.7938: attempt to access beyond end of device [ 235.279024][T22046] loop4: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 235.279074][T22046] Buffer I/O error on dev loop4, logical block 22533, async page read [ 235.292799][ T4325] sysv_free_block: flc_count > flc_size [ 235.292841][ T4325] sysv_free_block: flc_count > flc_size [ 235.292846][ T4325] sysv_free_block: flc_count > flc_size [ 235.292851][ T4325] sysv_free_block: flc_count > flc_size [ 235.292856][ T4325] sysv_free_block: flc_count > flc_size [ 235.292860][ T4325] sysv_free_block: flc_count > flc_size [ 235.292864][ T4325] sysv_free_block: flc_count > flc_size [ 235.292868][ T4325] sysv_free_block: flc_count > flc_size [ 235.292872][ T4325] sysv_free_block: flc_count > flc_size [ 235.292876][ T4325] sysv_free_block: flc_count > flc_size [ 235.305434][ T4325] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 235.331484][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7942'. [ 235.415724][T22066] vxcan1 speed is unknown, defaulting to 1000 [ 235.447128][T22066] vxcan1 speed is unknown, defaulting to 1000 [ 235.448988][T22066] vxcan1 speed is unknown, defaulting to 1000 [ 235.482730][T22074] netlink: 'syz.2.7951': attribute type 21 has an invalid length. [ 235.484371][T22074] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7951'. [ 235.529370][ T7992] vxcan1 speed is unknown, defaulting to 1000 [ 235.536866][T22066] infiniband syz0: set active [ 235.538026][T22066] infiniband syz0: added vxcan1 [ 235.586042][T22089] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 235.635436][T22066] RDS/IB: syz0: added [ 235.636630][T22066] smc: adding ib device syz0 with port count 1 [ 235.641177][T22066] smc: ib device syz0 port 1 has pnetid [ 235.693242][ T6032] vxcan1 speed is unknown, defaulting to 1000 [ 235.696567][T22066] vxcan1 speed is unknown, defaulting to 1000 [ 235.769207][T22066] vxcan1 speed is unknown, defaulting to 1000 [ 235.808311][T22066] vxcan1 speed is unknown, defaulting to 1000 [ 235.873988][T22116] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 235.885703][T22066] vxcan1 speed is unknown, defaulting to 1000 [ 235.922973][T22116] ================================================================== [ 235.924405][T22116] BUG: KASAN: use-after-free in __ext4_iget+0x23c/0x32ac [ 235.925739][T22116] Read of size 8 at addr ffff0000e25199b0 by task syz.3.7971/22116 [ 235.927065][T22116] [ 235.927461][T22116] CPU: 1 PID: 22116 Comm: syz.3.7971 Not tainted syzkaller #0 [ 235.928784][T22116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 235.930422][T22116] Call trace: [ 235.930962][T22116] dump_backtrace+0x1c0/0x1ec [ 235.931852][T22116] show_stack+0x2c/0x3c [ 235.932572][T22116] __dump_stack+0x30/0x40 [ 235.933278][T22116] dump_stack_lvl+0xf4/0x15c [ 235.934038][T22116] print_address_description+0x88/0x218 [ 235.934983][T22116] print_report+0x50/0x68 [ 235.935754][T22116] kasan_report+0xa8/0xfc [ 235.936487][T22116] __asan_report_load8_noabort+0x2c/0x38 [ 235.937387][T22116] __ext4_iget+0x23c/0x32ac [ 235.938125][T22116] ext4_fill_super+0x4e2c/0x61b0 [ 235.938824][T22116] get_tree_bdev+0x358/0x544 [ 235.939597][T22116] ext4_get_tree+0x28/0x38 [ 235.940388][T22116] vfs_get_tree+0x90/0x274 [ 235.941226][T22116] do_new_mount+0x228/0x810 [ 235.942075][T22116] path_mount+0x5bc/0xe80 [ 235.942861][T22116] __arm64_sys_mount+0x49c/0x59c [ 235.943735][T22116] invoke_syscall+0x98/0x2b4 [ 235.944534][T22116] el0_svc_common+0x138/0x258 [ 235.945376][T22116] do_el0_svc+0x58/0x130 [ 235.946184][T22116] el0_svc+0x58/0x128 [ 235.946901][T22116] el0t_64_sync_handler+0x84/0xf0 [ 235.947742][T22116] el0t_64_sync+0x18c/0x190 [ 235.948505][T22116] [ 235.948881][T22116] Allocated by task 11833: [ 235.949647][T22116] kasan_set_track+0x4c/0x80 [ 235.950426][T22116] kasan_save_alloc_info+0x24/0x30 [ 235.951343][T22116] __kasan_slab_alloc+0x70/0x88 [ 235.952205][T22116] slab_post_alloc_hook+0x74/0x430 [ 235.953125][T22116] kmem_cache_alloc_lru+0x1a4/0x280 [ 235.953973][T22116] reiserfs_alloc_inode+0x2c/0xc4 [ 235.954643][T22116] new_inode_pseudo+0x68/0x1cc [ 235.955345][T22116] new_inode+0x38/0x174 [ 235.956136][T22116] reiserfs_mkdir+0x19c/0x7bc [ 235.956982][T22116] reiserfs_xattr_init+0x2b0/0x6b4 [ 235.957677][T22116] reiserfs_fill_super+0x1944/0x1d40 [ 235.958548][T22116] mount_bdev+0x264/0x358 [ 235.959288][T22116] get_super_block+0x44/0x58 [ 235.960057][T22116] legacy_get_tree+0xd4/0x16c [ 235.960882][T22116] vfs_get_tree+0x90/0x274 [ 235.961657][T22116] do_new_mount+0x228/0x810 [ 235.962482][T22116] path_mount+0x5bc/0xe80 [ 235.963196][T22116] __arm64_sys_mount+0x49c/0x59c [ 235.964026][T22116] invoke_syscall+0x98/0x2b4 [ 235.964898][T22116] el0_svc_common+0x138/0x258 [ 235.965709][T22116] do_el0_svc+0x58/0x130 [ 235.966421][T22116] el0_svc+0x58/0x128 [ 235.967117][T22116] el0t_64_sync_handler+0x84/0xf0 [ 235.967935][T22116] el0t_64_sync+0x18c/0x190 [ 235.968726][T22116] [ 235.969210][T22116] Last potentially related work creation: [ 235.970300][T22116] kasan_save_stack+0x40/0x70 [ 235.971108][T22116] __kasan_record_aux_stack+0xc0/0xdc [ 235.971987][T22116] kasan_record_aux_stack_noalloc+0x14/0x20 [ 235.972961][T22116] call_rcu+0x100/0x94c [ 235.973728][T22116] evict+0x760/0x828 [ 235.974433][T22116] iput+0x754/0x7e4 [ 235.975095][T22116] reiserfs_mkdir+0x304/0x7bc [ 235.975892][T22116] reiserfs_xattr_init+0x2b0/0x6b4 [ 235.976787][T22116] reiserfs_fill_super+0x1944/0x1d40 [ 235.977679][T22116] mount_bdev+0x264/0x358 [ 235.978444][T22116] get_super_block+0x44/0x58 [ 235.979232][T22116] legacy_get_tree+0xd4/0x16c [ 235.979915][T22116] vfs_get_tree+0x90/0x274 [ 235.980534][T22116] do_new_mount+0x228/0x810 [ 235.981249][T22116] path_mount+0x5bc/0xe80 [ 235.981856][T22116] __arm64_sys_mount+0x49c/0x59c [ 235.982571][T22116] invoke_syscall+0x98/0x2b4 [ 235.983262][T22116] el0_svc_common+0x138/0x258 [ 235.983911][T22116] do_el0_svc+0x58/0x130 [ 235.984512][T22116] el0_svc+0x58/0x128 [ 235.985075][T22116] el0t_64_sync_handler+0x84/0xf0 [ 235.985787][T22116] el0t_64_sync+0x18c/0x190 [ 235.986478][T22116] [ 235.986795][T22116] The buggy address belongs to the object at ffff0000e25193e0 [ 235.986795][T22116] which belongs to the cache reiser_inode_cache of size 1568 [ 235.989005][T22116] The buggy address is located 1488 bytes inside of [ 235.989005][T22116] 1568-byte region [ffff0000e25193e0, ffff0000e2519a00) [ 235.991614][T22116] [ 235.991937][T22116] The buggy address belongs to the physical page: [ 235.992853][T22116] page:0000000083c49617 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000e251bba0 pfn:0x122518 [ 235.994677][T22116] head:0000000083c49617 order:3 compound_mapcount:0 compound_pincount:0 [ 235.996122][T22116] memcg:ffff0000d212be01 [ 235.996702][T22116] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 235.998002][T22116] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c4ae6c00 [ 235.999461][T22116] raw: ffff0000e251bba0 000000008013000a 00000001ffffffff ffff0000d212be01 [ 236.001023][T22116] page dumped because: kasan: bad access detected [ 236.002252][T22116] [ 236.002677][T22116] Memory state around the buggy address: [ 236.003579][T22116] ffff0000e2519880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.004902][T22116] ffff0000e2519900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.006364][T22116] >ffff0000e2519980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.007766][T22116] ^ [ 236.008641][T22116] ffff0000e2519a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 236.009935][T22116] ffff0000e2519a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.011360][T22116] ================================================================== [ 236.012935][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.045084][T22066] vxcan1 speed is unknown, defaulting to 1000 [ 236.080160][T22116] Disabling lock debugging due to kernel taint [ 236.081330][T22116] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 236.082557][T22116] EXT4-fs (loop3): mount failed