last executing test programs: 1.767203704s ago: executing program 1 (id=2302): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e1d, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b04"], 0x20}, 0x24000876) 1.726369894s ago: executing program 4 (id=2303): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix_mp={0x0, 0x0, 0x33565348, 0x0, 0x0, [{}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0xffff}]}}) 1.647198446s ago: executing program 1 (id=2306): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) writev(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)="a77b31480ae99c7b1bbd08dc4aa23de0a6f5f919f085664fd3117e6994bc79ade2e42a8da30e2bd7678b5e1f02fecb79f729edba004047712dbfabc1fd5759f1ee39627a95f31dafac2cb8e254a5edf9ece731785ca80f1f6415845dc18e5983e537307fb41dc784cad7ae0e3f54ff0cf40b08baf207d17f4239d9d1776d6c005b0b0b23881d9606e7b9b8dbcfecd1695f4a7ed7ca4692d470b0f55d1d9c3151880c3cd2630bfc8c712d99bdedb76945c992829238507a0be6", 0xffffffe5}, {&(0x7f0000000200)="88f7a4efedc459fb5544544f643b25ceb587ecccf69c9eaed1e9644e4ece5b7b166344ea6684e04b1bec0c2381f8af1233ef440af2f18641ed4334119145fe152c44e0c9", 0x44}], 0x2) 1.610495476s ago: executing program 4 (id=2308): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900010027bd700000000000021800000054376d"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 1.507373098s ago: executing program 2 (id=2309): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14}}}}) 1.466273518s ago: executing program 2 (id=2310): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x178, 0x394, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "fc6b061134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0xa}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "08db"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 1.431842219s ago: executing program 1 (id=2311): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) 1.389133989s ago: executing program 2 (id=2312): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000400)=ANY=[@ANYBLOB='trylock '], 0x17) 1.33536109s ago: executing program 4 (id=2314): setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) 1.305662781s ago: executing program 1 (id=2316): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x4401, &(0x7f0000001400)=ANY=[@ANYBLOB="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"/716], 0x5, 0x55af, &(0x7f0000002080)="$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") mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x118823, 0x0) 1.302864221s ago: executing program 2 (id=2317): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@gid}, {@gid}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0xffff}}, {}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x5d}}, {@time_offset={'time_offset', 0x3d, 0x3}}, {@errors_continue}]}, 0x1, 0x152d, &(0x7f0000001f80)="$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") mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) 1.175256443s ago: executing program 4 (id=2319): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x8c0}], 0x1}, 0x0) 1.175152703s ago: executing program 0 (id=2320): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000016c0)) 1.107095074s ago: executing program 2 (id=2322): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="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", @ANYBLOB="1d139ea82bf95c2a5474d4a0d51d574c1e80c08468a1d0ffcaa5beda1d1e735401cddf133954ac1858a89458dfcc08fd460fd4095d862fefdd7b67249f863619a16200c3158d5c0f1d41e7e236a48ed97a83105f991550cd52d04afc5d4236e333c523630f55e3335db9f3008ffba8c0caf3b9cea8aa798e4b36b3cd801c9bb3c666bd5a41ea3c09e7583961eb53a6c5948b47502e0d4b2959fb217a2ea66fd7e4f5eaa78c31c69a1c9d5f"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x5d, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4b) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0x2, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.092233684s ago: executing program 0 (id=2323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) 1.031420115s ago: executing program 4 (id=2324): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r0, 0x894a, &(0x7f0000000240)="7bc0f5bb3a") 912.526967ms ago: executing program 0 (id=2326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) 819.338178ms ago: executing program 4 (id=2327): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000000c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c67727071756f74612c696e6f646536342c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c6c6f63616c666c6f636b732c00a5ac95942a38e6bfeea96108fa50b58440ef6041bea5aa31e2dd2532458d802e41aa4599ba680aa7bd6d04004258b7a8902f078e686e0ad0017a9f40cab7e8ed9483c468cbe8b5111b52c62ae7bd99dde7768746459302ef1adff359935a901d9a93c2ee3190699fae61911c9956efa1b72ad683a0acc6d36539173f0f11dd2011263c662522d12cca07a4a3d593ee6ca5954cd0b5674f92faa9f828438f930b721d144e46001a56724219f14c2c58ef31aee3852b15bddc24bade32ed8f3cba254e2dbc6baf27"], 0x0, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0xfffffffffffffffb, 0x9, 0x0, 0x1}) 758.165879ms ago: executing program 0 (id=2329): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='mpol=prefer=rdlative:\t']) 591.344902ms ago: executing program 3 (id=2331): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000340)={0x3, 0x0, 0x1, 0x0, 0x7fffffff}) 591.201452ms ago: executing program 0 (id=2332): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) 561.236802ms ago: executing program 2 (id=2333): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x10, &(0x7f0000000200), 0x4) 366.025955ms ago: executing program 32 (id=2333): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x10, &(0x7f0000000200), 0x4) 355.645885ms ago: executing program 1 (id=2335): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) ioctl$RNDADDENTROPY(r0, 0x5452, &(0x7f0000005300)=ANY=[]) 355.502805ms ago: executing program 3 (id=2336): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0xfffffffffffffffe) 239.379387ms ago: executing program 3 (id=2337): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081", 0x2, r0) 181.354838ms ago: executing program 3 (id=2338): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x600}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x55}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4c) 111.291969ms ago: executing program 1 (id=2339): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x621, 0x70bd2a, 0x25dfdbbd, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000, 0x0, 0x4080}, 0x2000c0d4) 55.10661ms ago: executing program 0 (id=2340): r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000140)="a6bea8a120e5f8320c30e45088a8", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 33.68742ms ago: executing program 3 (id=2341): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setgroups(0x5c, 0xffffffffffffffff) 0s ago: executing program 3 (id=2342): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000200)={0x6, 0x8, 0x4, 0x9, @vifc_lcl_addr=@multicast1, @broadcast}, 0x10) kernel console output (not intermixed with test programs): mended to keep mac addresses unique to avoid problems! [ 40.114280][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.122604][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.125200][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.129387][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.131999][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.134830][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.142519][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.144821][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.153800][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.156532][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.193127][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.195873][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.199869][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.202576][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.205133][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.208586][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.211212][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.213878][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.219279][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.231796][ T4393] netlink: 'syz.1.13': attribute type 4 has an invalid length. [ 40.233732][ T4393] netlink: 140 bytes leftover after parsing attributes in process `syz.1.13'. [ 40.238953][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.241722][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.305627][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.313278][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.316205][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.323223][ T4307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.332099][ T4307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.334431][ T4307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.346917][ T4307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.414553][ T4343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.416811][ T4343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.439347][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.480207][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.482457][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.486277][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.582388][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.602835][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.615789][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.638984][ T4406] syz.1.18 uses old SIOCAX25GETINFO [ 40.685937][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.697526][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.710181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.759624][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.762500][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.766088][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.210200][ T4439] x_tables: unsorted underflow at hook 3 [ 41.220902][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 41.297586][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 41.299211][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 41.300844][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 41.302409][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 41.335202][ T4450] netlink: 'syz.3.37': attribute type 1 has an invalid length. [ 41.351824][ T4451] loop1: detected capacity change from 0 to 1024 [ 41.448835][ T4455] netlink: 20 bytes leftover after parsing attributes in process `syz.4.38'. [ 41.521975][ T4451] EXT4-fs (loop1): Test dummy encryption mode enabled [ 41.576774][ T4451] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 41.796556][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 41.866586][ T4484] loop2: detected capacity change from 0 to 64 [ 41.889342][ T4487] mmap: syz.0.51 (4487): VmData 37498880 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 41.934918][ T4491] xt_cgroup: path and classid specified [ 41.945234][ T4484] Trying to free block not in datazone [ 41.991059][ T4489] loop1: detected capacity change from 0 to 1024 [ 42.136866][ T4357] hfsplus: b-tree write err: -5, ino 4 [ 42.245706][ T4505] loop2: detected capacity change from 0 to 512 [ 42.285912][ T4504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 42.314955][ T4505] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 42.454668][ T4495] loop0: detected capacity change from 0 to 32768 [ 42.456882][ T4495] XFS: noikeep mount option is deprecated. [ 42.528614][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 42.542845][ T4495] XFS (loop0): Mounting V5 Filesystem [ 42.553170][ T4523] loop4: detected capacity change from 0 to 512 [ 42.555262][ T4523] ======================================================= [ 42.555262][ T4523] WARNING: The mand mount option has been deprecated and [ 42.555262][ T4523] and is ignored by this kernel. Remove the mand [ 42.555262][ T4523] option from the mount to silence this warning. [ 42.555262][ T4523] ======================================================= [ 42.635762][ T4523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.660220][ T4495] XFS (loop0): Ending clean mount [ 42.664260][ T4523] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.665378][ T4495] XFS (loop0): Quotacheck needed: Please wait. [ 42.673746][ T4523] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 42.681266][ T4523] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 42.701710][ T4495] XFS (loop0): Quotacheck: Done. [ 42.717714][ T4523] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.66: Failed to acquire dquot type 1 [ 42.739888][ T4523] EXT4-fs (loop4): 1 truncate cleaned up [ 42.741645][ T4523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 42.803373][ T4523] EXT4-fs error (device loop4): __ext4_remount:6611: comm syz.4.66: Abort forced by user [ 42.827553][ T4523] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 42.857802][ T4300] XFS (loop0): Unmounting Filesystem [ 42.878721][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 42.901729][ T4539] loop3: detected capacity change from 0 to 2048 [ 42.935299][ T4539] NILFS (loop3): invalid segment: Checksum error in segment payload [ 42.941501][ T4539] NILFS (loop3): trying rollback from an earlier position [ 42.955884][ T4544] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.75'. [ 42.963085][ T4539] NILFS (loop3): recovery complete [ 43.013910][ T4546] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 43.297943][ T4306] Bluetooth: hci0: command 0x0419 tx timeout [ 43.388155][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 43.389866][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 43.391448][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 43.393082][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 43.404557][ T4564] loop4: detected capacity change from 0 to 512 [ 43.413751][ T4564] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 43.415981][ T4564] EXT2-fs (loop4): error: revision level too high, forcing read-only mode [ 43.431266][ T4564] EXT2-fs (loop4): error: ext2_iget: bad extended attribute block 1 [ 43.489000][ T4307] EXT2-fs (loop4): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 13 [ 43.492090][ T4307] EXT2-fs (loop4): error: ext2_free_blocks: Freeing blocks in system zones - Block = 13, count = 1 [ 43.495026][ T4307] EXT2-fs (loop4): error: ext2_free_inode: reserved or nonexistent inode 2 [ 43.795999][ T4548] loop2: detected capacity change from 0 to 32768 [ 43.816799][ T4582] TCP: TCP_TX_DELAY enabled [ 43.932596][ T4548] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 43.935277][ T4548] XFS (loop2): Mounting V5 Filesystem [ 44.033673][ T4548] XFS (loop2): Ending clean mount [ 44.038845][ T4548] XFS (loop2): Quotacheck needed: Please wait. [ 44.054745][ T4548] XFS (loop2): Quotacheck: Done. [ 44.158985][ T4299] XFS (loop2): Unmounting Filesystem [ 44.246181][ T4576] loop1: detected capacity change from 0 to 32768 [ 44.262593][ T4572] loop4: detected capacity change from 0 to 32768 [ 44.268061][ T4576] XFS: attr2 mount option is deprecated. [ 44.313613][ T4572] ERROR: (device loop4): dbAlloc: unable to allocate blocks [ 44.313613][ T4572] [ 44.331236][ T4572] ERROR: (device loop4): remounting filesystem as read-only [ 44.333345][ T4572] jfs_mkdir: dtInsert returned -EIO [ 44.334950][ T4572] ERROR: (device loop4): txAbort: [ 44.334950][ T4572] [ 44.386883][ T4576] XFS (loop1): Mounting V5 Filesystem [ 44.541629][ T4576] XFS (loop1): Ending clean mount [ 44.552980][ T4576] XFS (loop1): Quotacheck needed: Please wait. [ 44.560676][ T4626] netlink: 'syz.4.104': attribute type 2 has an invalid length. [ 44.588382][ T4576] XFS (loop1): Quotacheck: Done. [ 44.736342][ T4636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 44.741689][ T4294] XFS (loop1): Unmounting Filesystem [ 44.871584][ T4644] netlink: 108 bytes leftover after parsing attributes in process `syz.0.114'. [ 44.966014][ T4650] xt_TPROXY: Can be used only with -p tcp or -p udp [ 45.348214][ T4668] netlink: 36 bytes leftover after parsing attributes in process `syz.0.124'. [ 45.519968][ T4643] loop3: detected capacity change from 0 to 32768 [ 45.550476][ T4643] ERROR: (device loop3): dbAlloc: unable to allocate blocks [ 45.550476][ T4643] [ 45.561919][ T4643] ERROR: (device loop3): remounting filesystem as read-only [ 45.563846][ T4643] jfs_mkdir: dtInsert returned -EIO [ 45.565228][ T4643] ERROR: (device loop3): txAbort: [ 45.565228][ T4643] [ 45.638887][ T4686] loop0: detected capacity change from 0 to 64 [ 45.695561][ T4686] Trying to free block not in datazone [ 45.904187][ T4701] loop3: detected capacity change from 0 to 256 [ 45.970299][ T4701] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 46.491895][ T4705] loop2: detected capacity change from 0 to 32768 [ 46.497646][ T4702] loop1: detected capacity change from 0 to 32768 [ 46.498080][ T4705] XFS: attr2 mount option is deprecated. [ 46.542900][ T4705] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 46.546000][ T4712] loop0: detected capacity change from 0 to 32768 [ 46.563320][ T4702] XFS (loop1): Mounting V5 Filesystem [ 46.570302][ T4712] ERROR: (device loop0): dbAlloc: unable to allocate blocks [ 46.570302][ T4712] [ 46.573077][ T4712] ERROR: (device loop0): remounting filesystem as read-only [ 46.574974][ T4712] jfs_mkdir: dtInsert returned -EIO [ 46.576310][ T4712] ERROR: (device loop0): txAbort: [ 46.576310][ T4712] [ 46.582722][ T4705] XFS (loop2): Quotacheck needed: Please wait. [ 46.615696][ T4705] XFS (loop2): Quotacheck: Done. [ 46.633164][ T4702] XFS (loop1): Ending clean mount [ 46.690474][ T4735] loop3: detected capacity change from 0 to 64 [ 46.695810][ T4737] loop4: detected capacity change from 0 to 16 [ 46.699445][ T4737] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 46.707652][ T4294] XFS (loop1): Unmounting Filesystem [ 46.726273][ T4737] erofs: (device loop4): mounted with root inode @ nid 36. [ 46.746627][ T4735] Trying to free block not in datazone [ 46.758545][ T4299] XFS (loop2): Unmounting Filesystem [ 46.761622][ T4737] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 46.776492][ T4737] CIFS mount error: No usable UNC path provided in device string! [ 46.776492][ T4737] [ 46.779485][ T4737] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 47.601156][ T4780] Cannot find del_set index 286 as target [ 47.666553][ T4743] loop3: detected capacity change from 0 to 40427 [ 47.671043][ T4743] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 47.672968][ T4743] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 47.697767][ T4743] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3ffff [ 47.700062][ T4743] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 47.726836][ T4743] F2FS-fs (loop3): invalid crc value [ 47.764705][ T4743] F2FS-fs (loop3): Found nat_bits in checkpoint [ 47.791319][ T4794] netlink: 32 bytes leftover after parsing attributes in process `syz.2.179'. [ 47.831172][ T4743] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 47.833215][ T4743] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 47.926735][ T4743] syz.3.158: attempt to access beyond end of device [ 47.926735][ T4743] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 47.990722][ T4806] netlink: 'syz.2.185': attribute type 21 has an invalid length. [ 47.994656][ T4797] loop1: detected capacity change from 0 to 4096 [ 48.011402][ T4806] IPv6: NLM_F_CREATE should be specified when creating new route [ 48.012985][ T4797] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 48.013407][ T4806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 48.020884][ T4806] IPv6: NLM_F_CREATE should be set when creating new route [ 48.023183][ T4806] IPv6: NLM_F_CREATE should be set when creating new route [ 48.025151][ T4806] IPv6: NLM_F_CREATE should be set when creating new route [ 48.037414][ T4807] loop4: detected capacity change from 0 to 128 [ 48.040051][ T4797] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 48.042840][ T4797] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 48.054015][ T4797] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 48.062702][ T4298] syz-executor: attempt to access beyond end of device [ 48.062702][ T4298] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 48.086023][ T4797] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 48.142249][ T4797] ntfs: volume version 3.1. [ 48.147847][ T4797] ntfs: (device loop1): load_and_init_quota(): Failed to find inode number for $Quota. [ 48.150621][ T4797] ntfs: (device loop1): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 48.206557][ T4809] loop2: detected capacity change from 0 to 512 [ 48.221501][ T4809] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.252980][ T4809] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.187: invalid indirect mapped block 8 (level 2) [ 48.278014][ T4809] EXT4-fs (loop2): 1 truncate cleaned up [ 48.279527][ T4809] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 48.299704][ T4815] AppArmor: change_hat: Invalid input '0' [ 48.405724][ T4819] ieee802154 phy0 wpan0: encryption failed: -22 [ 48.408031][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 48.528504][ T4827] loop4: detected capacity change from 0 to 256 [ 48.632974][ T4827] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 48.632974][ T4827] SÃȘØÈžZ§6ŸÂ' [ 48.680638][ T4803] loop0: detected capacity change from 0 to 32768 [ 48.849483][ T4845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 48.990590][ T4855] tmpfs: Bad value for 'mpol' [ 49.087245][ T4860] loop1: detected capacity change from 0 to 512 [ 49.130987][ T4860] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 49.389195][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 49.403966][ T4879] loop0: detected capacity change from 0 to 512 [ 49.406130][ T4879] journal_path: Lookup failure for './file0/../file0' [ 49.436270][ T4879] EXT4-fs: error: could not find journal device path [ 49.477582][ T4887] netlink: 44 bytes leftover after parsing attributes in process `syz.4.221'. [ 49.479880][ T4887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 49.482181][ T4887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 49.516282][ T4889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 49.518342][ T4889] IPv6: NLM_F_CREATE should be set when creating new route [ 49.520226][ T4889] IPv6: NLM_F_CREATE should be set when creating new route [ 49.654270][ T4903] netlink: 'syz.1.229': attribute type 10 has an invalid length. [ 49.656328][ T4903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.229'. [ 49.672828][ T4903] batman_adv: batadv0: Adding interface: vlan1 [ 49.674520][ T4903] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.695276][ T4898] loop0: detected capacity change from 0 to 2048 [ 49.716402][ T4903] batman_adv: batadv0: Interface activated: vlan1 [ 49.718594][ T4907] loop4: detected capacity change from 0 to 512 [ 49.720932][ T4907] EXT4-fs: Ignoring removed oldalloc option [ 49.732106][ T4901] loop3: detected capacity change from 0 to 4096 [ 49.744162][ T4907] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.230: Parent and EA inode have the same ino 15 [ 49.751988][ T4907] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.755751][ T4901] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 49.759790][ T4907] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.230: Parent and EA inode have the same ino 15 [ 49.771731][ T4898] loop0: p1 < > p3 p4 < > [ 49.774966][ T4898] loop0: p3 start 4284289 is beyond EOD, truncated [ 49.783593][ T4907] EXT4-fs (loop4): 1 orphan inode deleted [ 49.785274][ T4907] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 49.857921][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 49.872045][ T4898] syz.0.225: attempt to access beyond end of device [ 49.872045][ T4898] loop0p1: rw=2048, sector=0, nr_sectors = 8 limit=2 [ 49.875932][ T4898] SQUASHFS error: Failed to read block 0x0: -5 [ 49.905923][ T4898] unable to read squashfs_super_block [ 49.931979][ T4912] loop1: detected capacity change from 0 to 4096 [ 50.085785][ T4919] netlink: 'syz.3.237': attribute type 1 has an invalid length. [ 50.148590][ T4923] loop0: detected capacity change from 0 to 64 [ 50.187692][ T4923] syz.0.236: attempt to access beyond end of device [ 50.187692][ T4923] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 50.191489][ T4923] Buffer I/O error on dev loop0, logical block 512, async page read [ 50.193801][ T4923] syz.0.236: attempt to access beyond end of device [ 50.193801][ T4923] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 50.234341][ T4923] Buffer I/O error on dev loop0, logical block 56576, async page read [ 50.359061][ T4935] binder: 4934:4935 ioctl c0046209 9999999999999999 returned -22 [ 50.437546][ T4942] xt_TCPMSS: Only works on TCP SYN packets [ 50.643276][ T4956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.254'. [ 50.645578][ T4956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.254'. [ 50.669598][ T4956] netlink: 32 bytes leftover after parsing attributes in process `syz.4.254'. [ 50.729309][ T4608] udevd[4608]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 50.858614][ T4608] udevd[4608]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 50.873910][ T4975] loop4: detected capacity change from 0 to 16 [ 50.899035][ T4975] erofs: (device loop4): mounted with root inode @ nid 36. [ 50.909305][ T4977] netlink: 'syz.3.265': attribute type 10 has an invalid length. [ 50.923963][ T4975] erofs: (device loop4): erofs_read_inode: unsupported i_format 65535 of nid 89 [ 50.974774][ T4977] device macvlan0 entered promiscuous mode [ 51.006028][ T4977] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 51.044647][ T4985] loop0: detected capacity change from 0 to 8 [ 51.093819][ T4985] SQUASHFS error: zlib decompression failed, data probably corrupt [ 51.095939][ T4985] SQUASHFS error: Failed to read block 0x9b: -5 [ 51.107178][ T4985] SQUASHFS error: Unable to read metadata cache entry [99] [ 51.123569][ T4985] SQUASHFS error: Unable to read inode 0x127 [ 51.224641][ T4608] udevd[4608]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 51.250018][ T4519] udevd[4519]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 51.310906][ T5003] netlink: 'syz.4.278': attribute type 1 has an invalid length. [ 51.346500][ T5007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 51.546783][ T5021] netlink: 'syz.2.287': attribute type 1 has an invalid length. [ 51.974621][ T5049] sctp: [Deprecated]: syz.4.301 (pid 5049) Use of int in max_burst socket option deprecated. [ 51.974621][ T5049] Use struct sctp_assoc_value instead [ 52.166173][ T5061] loop4: detected capacity change from 0 to 256 [ 52.176016][ T5063] netlink: 'syz.1.308': attribute type 6 has an invalid length. [ 52.179831][ T5061] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 52.216046][ T5061] syz.4.307: attempt to access beyond end of device [ 52.216046][ T5061] loop4: rw=2049, sector=34359738491, nr_sectors = 1 limit=256 [ 52.235194][ T5061] Buffer I/O error on dev loop4, logical block 34359738491, lost async page write [ 52.245400][ T5061] syz.4.307: attempt to access beyond end of device [ 52.245400][ T5061] loop4: rw=2049, sector=34359738492, nr_sectors = 1 limit=256 [ 52.256315][ T5061] Buffer I/O error on dev loop4, logical block 34359738492, lost async page write [ 52.317128][ T5069] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 52.433384][ T5073] netlink: 132 bytes leftover after parsing attributes in process `syz.1.313'. [ 52.482486][ T5075] loop3: detected capacity change from 0 to 2048 [ 52.521985][ T5075] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 52.591970][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 52.617199][ T5081] netlink: 76 bytes leftover after parsing attributes in process `syz.1.316'. [ 52.621067][ T5057] loop2: detected capacity change from 0 to 32768 [ 52.654859][ T5089] loop3: detected capacity change from 0 to 512 [ 52.674954][ T5089] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.676725][ T5089] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 52.683979][ T5089] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 52.692900][ T5057] XFS (loop2): Mounting V5 Filesystem [ 52.697487][ T5089] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.318: attempt to clear invalid blocks 2 len 1 [ 52.707677][ T5089] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.318: invalid indirect mapped block 1819239214 (level 0) [ 52.714206][ T5089] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.318: invalid indirect mapped block 1819239214 (level 1) [ 52.720106][ T5089] EXT4-fs (loop3): 1 truncate cleaned up [ 52.721645][ T5089] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 52.744076][ T5089] EXT4-fs error (device loop3): __ext4_remount:6611: comm syz.3.318: Abort forced by user [ 52.755754][ T5089] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 52.835819][ T5057] XFS (loop2): Ending clean mount [ 52.842299][ T5057] XFS (loop2): Quotacheck needed: Please wait. [ 52.867779][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 52.873920][ T5057] XFS (loop2): Quotacheck: Done. [ 52.940656][ T4299] XFS (loop2): Unmounting Filesystem [ 52.951100][ T5104] loop3: detected capacity change from 0 to 1024 [ 52.953175][ T5104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.995242][ T5104] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 53.004015][ T5104] System zones: 0-1, 3-12 [ 53.015994][ T5104] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 53.033846][ T5101] loop4: detected capacity change from 0 to 8192 [ 53.057962][ T5104] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #12: comm syz.3.323: corrupted in-inode xattr [ 53.066719][ T5101] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 53.076769][ T5101] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 53.079456][ T5101] REISERFS (device loop4): using ordered data mode [ 53.081241][ T5101] reiserfs: using flush barriers [ 53.086906][ T5101] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 53.096060][ T5101] REISERFS (device loop4): checking transaction log (loop4) [ 53.169160][ T5101] REISERFS (device loop4): Using tea hash to sort names [ 53.172237][ T5101] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 53.207671][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 53.350013][ T5115] netlink: 172 bytes leftover after parsing attributes in process `syz.3.327'. [ 53.352394][ T5115] netlink: 22 bytes leftover after parsing attributes in process `syz.3.327'. [ 53.559324][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 53.856427][ T5148] loop1: detected capacity change from 0 to 512 [ 53.894831][ T5150] loop3: detected capacity change from 0 to 1024 [ 53.911062][ T5152] loop4: detected capacity change from 0 to 256 [ 53.912066][ T5148] EXT2-fs (loop1): error: invalid #inodes per group: 2 [ 53.950600][ T5148] Option ' W' to dns_resolver key: bad/missing value [ 53.974639][ T5152] FAT-fs (loop4): Directory bread(block 64) failed [ 53.976764][ T5152] FAT-fs (loop4): Directory bread(block 65) failed [ 53.983166][ T5150] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 53.983617][ T5152] FAT-fs (loop4): Directory bread(block 66) failed [ 53.990257][ T5152] FAT-fs (loop4): Directory bread(block 67) failed [ 53.992587][ T5152] FAT-fs (loop4): Directory bread(block 68) failed [ 53.994340][ T5152] FAT-fs (loop4): Directory bread(block 69) failed [ 53.996194][ T5152] FAT-fs (loop4): Directory bread(block 70) failed [ 53.998658][ T5152] FAT-fs (loop4): Directory bread(block 71) failed [ 54.000701][ T5152] FAT-fs (loop4): Directory bread(block 72) failed [ 54.002450][ T5152] FAT-fs (loop4): Directory bread(block 73) failed [ 54.015833][ T5150] EXT4-fs error (device loop3): ext4_lookup:1858: comm syz.3.343: inode #12: comm syz.3.343: iget: illegal inode # [ 54.058276][ T5150] EXT4-fs (loop3): Remounting filesystem read-only [ 54.211371][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 54.321316][ T5168] loop0: detected capacity change from 0 to 16 [ 54.327565][ T5168] erofs: (device loop0): mounted with root inode @ nid 36. [ 54.537795][ T5183] loop1: detected capacity change from 0 to 2048 [ 54.545168][ T5183] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18576, location=18576 [ 54.557239][ T5187] xt_hashlimit: max too large, truncated to 1048576 [ 54.565935][ T5183] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 54.809748][ T5193] loop1: detected capacity change from 0 to 1024 [ 54.822034][ T5193] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 54.827741][ T5198] binder: 5197:5198 ioctl c018620b 9999999999999999 returned -14 [ 54.857271][ T5193] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 54.891120][ T5193] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 37: comm syz.1.364: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=4278190080, rec_len=65535, size=1024 fake=0 [ 54.924458][ T5193] EXT4-fs (loop1): Remounting filesystem read-only [ 54.971966][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 55.001354][ T5207] dlm: plock device version mismatch: kernel (1.2.0), user (1.33554432.0) [ 55.076892][ T5177] loop3: detected capacity change from 0 to 32768 [ 55.157790][ T5215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 55.632908][ T5245] x_tables: unsorted underflow at hook 1 [ 55.651275][ T5247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.390'. [ 55.692057][ T5250] loop4: detected capacity change from 0 to 22 [ 55.694084][ T5250] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 55.766302][ T5250] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 55.799739][ T5250] process 'syz.4.391' launched './file2' with NULL argv: empty string added [ 55.894885][ T5266] loop1: detected capacity change from 0 to 8 [ 56.116723][ T5280] netlink: 'syz.0.407': attribute type 9 has an invalid length. [ 56.119329][ T5280] netlink: 'syz.0.407': attribute type 7 has an invalid length. [ 56.121529][ T5280] netlink: 'syz.0.407': attribute type 8 has an invalid length. [ 56.154462][ T5284] loop4: detected capacity change from 0 to 512 [ 56.176397][ T5284] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 56.205800][ T5284] syz.4.408: attempt to access beyond end of device [ 56.205800][ T5284] loop4: rw=524288, sector=3606377190, nr_sectors = 2 limit=512 [ 56.222843][ T5284] syz.4.408: attempt to access beyond end of device [ 56.222843][ T5284] loop4: rw=0, sector=3606377190, nr_sectors = 2 limit=512 [ 56.335266][ T5296] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967282 > 32) [ 56.675077][ T5319] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.695594][ T5319] FAT-fs (loop5): unable to read boot sector [ 56.875375][ T5336] loop0: detected capacity change from 0 to 16 [ 56.897796][ T5336] erofs: (device loop0): mounted with root inode @ nid 36. [ 57.155945][ T5359] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 57.179754][ T5362] netlink: 'syz.3.447': attribute type 2 has an invalid length. [ 57.225680][ T5365] loop0: detected capacity change from 0 to 8 [ 57.322536][ T5370] loop3: detected capacity change from 0 to 2048 [ 57.390280][ T5375] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 57.403390][ T5370] syz.3.451: attempt to access beyond end of device [ 57.403390][ T5370] loop3: rw=0, sector=19791209300040, nr_sectors = 2 limit=2048 [ 57.417595][ T5370] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 57.474995][ T5379] IPv6: NLM_F_REPLACE set, but no existing node found! [ 57.943472][ T5368] loop1: detected capacity change from 0 to 32768 [ 57.993491][ T5368] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt [ 57.993491][ T5368] [ 58.005138][ T5368] ERROR: (device loop1): remounting filesystem as read-only [ 58.025092][ T4306] Bluetooth: hci2: Unknown advertising packet type: 0x1e [ 58.025283][ T5368] jfs_lookup: dtSearch returned -5 [ 58.047172][ T5411] netlink: 'syz.4.471': attribute type 9 has an invalid length. [ 58.603972][ T5405] loop3: detected capacity change from 0 to 32768 [ 58.628173][ T5405] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.468 (5405) [ 58.667525][ T5405] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 58.670486][ T5405] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 58.672703][ T5405] BTRFS info (device loop3): using free space tree [ 58.809447][ T5460] loop4: detected capacity change from 0 to 2048 [ 58.823343][ T5460] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=26504, location=26504 [ 58.839814][ T5460] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 58.952661][ T5405] BTRFS info (device loop3): enabling ssd optimizations [ 59.118000][ T4298] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 59.157693][ T5485] loop4: detected capacity change from 0 to 64 [ 59.498625][ T5510] loop3: detected capacity change from 0 to 47 [ 59.594733][ T5518] netlink: 'syz.4.513': attribute type 2 has an invalid length. [ 59.615650][ T5520] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 60.013934][ T5549] loop2: detected capacity change from 0 to 64 [ 60.100357][ T5553] loop0: detected capacity change from 0 to 2048 [ 60.125839][ T5553] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 60.129241][ T5553] System zones: 0-4 [ 60.162522][ T5558] random: crng reseeded on system resumption [ 60.187356][ T5553] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 60.210636][ T5553] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.530: bg 0: block 345: padding at end of block bitmap is not set [ 60.235703][ T5553] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 60.304421][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 60.329073][ T5564] loop4: detected capacity change from 0 to 764 [ 60.365398][ T5564] rock: directory entry would overflow storage [ 60.382610][ T5564] rock: sig=0x4654, size=5, remaining=4 [ 60.497213][ T5541] loop3: detected capacity change from 0 to 32768 [ 60.549905][ T5573] loop4: detected capacity change from 0 to 64 [ 60.725450][ T5583] xt_bpf: check failed: parse error [ 60.912512][ T5598] xt_TPROXY: Can be used only with -p tcp or -p udp [ 60.992557][ T5603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.554'. [ 61.122788][ T5614] device netdevsim0 entered promiscuous mode [ 61.601918][ T5637] loop1: detected capacity change from 0 to 8192 [ 61.623524][ T5637] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 61.626037][ T5650] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.577'. [ 61.632920][ T5637] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 61.635664][ T5637] REISERFS (device loop1): using ordered data mode [ 61.638588][ T5637] reiserfs: using flush barriers [ 61.642270][ T5637] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 61.650871][ T5637] REISERFS (device loop1): checking transaction log (loop1) [ 61.677657][ T5637] REISERFS (device loop1): Using r5 hash to sort names [ 61.680661][ T5637] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 61.685139][ T5637] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 61.710135][ T5653] netlink: 40 bytes leftover after parsing attributes in process `syz.2.579'. [ 61.896447][ T5663] loop2: detected capacity change from 0 to 1024 [ 61.969696][ T5663] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 62.116586][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 62.492204][ T5707] loop2: detected capacity change from 0 to 512 [ 62.525229][ T5707] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 62.530737][ T5710] netlink: 'syz.4.606': attribute type 15 has an invalid length. [ 62.558812][ T5712] netlink: 40 bytes leftover after parsing attributes in process `syz.1.607'. [ 62.591882][ T5707] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #3: comm syz.2.603: corrupted inode contents [ 62.596748][ T5708] loop3: detected capacity change from 0 to 4096 [ 62.607400][ T5708] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 62.673008][ T5707] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #3: comm syz.2.603: mark_inode_dirty error [ 62.695388][ T5716] loop4: detected capacity change from 0 to 2048 [ 62.704778][ T5707] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #3: comm syz.2.603: corrupted inode contents [ 62.735202][ T5707] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.603: mark_inode_dirty error [ 62.761778][ T5716] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 62.773885][ T5707] Quota error (device loop2): write_blk: dquota write failed [ 62.776092][ T5707] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 62.792622][ T5707] EXT4-fs error (device loop2): ext4_acquire_dquot:6795: comm syz.2.603: Failed to acquire dquot type 0 [ 62.807101][ T5716] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 62.815824][ T5707] EXT4-fs (loop2): 1 orphan inode deleted [ 62.818834][ T5707] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 62.852210][ T150] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 62.854957][ T150] EXT4-fs error (device loop2): ext4_release_dquot:6818: comm kworker/u4:4: Failed to release dquot type 1 [ 62.896004][ T5724] loop1: detected capacity change from 0 to 64 [ 62.965656][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 63.134889][ T5744] netlink: 40 bytes leftover after parsing attributes in process `syz.3.619'. [ 63.323004][ T5747] loop4: detected capacity change from 0 to 8192 [ 63.346546][ T5747] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 63.350334][ T5747] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 63.352910][ T5747] REISERFS (device loop4): using ordered data mode [ 63.354620][ T5747] reiserfs: using flush barriers [ 63.366252][ T5747] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 63.372051][ T5747] REISERFS (device loop4): checking transaction log (loop4) [ 63.382954][ T5747] REISERFS (device loop4): Using r5 hash to sort names [ 63.384937][ T5747] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 63.391358][ T5747] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 63.584498][ T5769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 63.766051][ T5780] loop2: detected capacity change from 0 to 256 [ 64.351437][ T5813] loop0: detected capacity change from 0 to 8192 [ 64.356819][ T5813] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 64.386572][ T5813] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 64.389362][ T5823] netlink: 'syz.3.654': attribute type 15 has an invalid length. [ 64.439961][ T5813] REISERFS (device loop0): using ordered data mode [ 64.441733][ T5813] reiserfs: using flush barriers [ 64.450170][ T5828] loop1: detected capacity change from 0 to 256 [ 64.476084][ T5813] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 64.482320][ T5813] REISERFS (device loop0): checking transaction log (loop0) [ 64.493761][ T5813] REISERFS (device loop0): Using r5 hash to sort names [ 64.496672][ T5813] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 64.501268][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.503010][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.538987][ T5813] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 64.662066][ T5837] loop4: detected capacity change from 0 to 512 [ 64.664088][ T5838] random: crng reseeded on system resumption [ 64.664424][ T5832] loop3: detected capacity change from 0 to 2048 [ 64.676748][ T5832] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 64.694766][ T5832] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.705534][ T5837] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.662: corrupted inode contents [ 64.714650][ T5837] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #3: comm syz.4.662: mark_inode_dirty error [ 64.718713][ T5837] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.662: corrupted inode contents [ 64.722269][ T5837] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.662: mark_inode_dirty error [ 64.732425][ T5837] Quota error (device loop4): write_blk: dquota write failed [ 64.734515][ T5837] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 64.742506][ T5837] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.662: Failed to acquire dquot type 0 [ 64.764091][ T5837] EXT4-fs (loop4): 1 orphan inode deleted [ 64.765704][ T5837] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 64.787390][ T150] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 64.790182][ T150] EXT4-fs error (device loop4): ext4_release_dquot:6818: comm kworker/u4:4: Failed to release dquot type 1 [ 64.863408][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 65.163303][ T5864] netlink: 'syz.2.673': attribute type 15 has an invalid length. [ 65.323730][ T5879] loop0: detected capacity change from 0 to 512 [ 65.356235][ T5878] loop1: detected capacity change from 0 to 2048 [ 65.375095][ T5878] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 65.380036][ T5878] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.417209][ T5879] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #3: comm syz.0.679: corrupted inode contents [ 65.425448][ T5879] EXT4-fs error (device loop0): ext4_dirty_inode:6089: inode #3: comm syz.0.679: mark_inode_dirty error [ 65.453056][ T5879] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #3: comm syz.0.679: corrupted inode contents [ 65.483266][ T5879] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.679: mark_inode_dirty error [ 65.489096][ T5879] Quota error (device loop0): write_blk: dquota write failed [ 65.491208][ T5879] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 65.493834][ T5879] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.679: Failed to acquire dquot type 0 [ 65.498889][ T5890] loop4: detected capacity change from 0 to 64 [ 65.530366][ T5893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'. [ 65.595524][ T5879] EXT4-fs (loop0): 1 orphan inode deleted [ 65.615559][ T5879] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 65.625071][ T4357] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 65.628843][ T4357] EXT4-fs error (device loop0): ext4_release_dquot:6818: comm kworker/u4:6: Failed to release dquot type 1 [ 65.741967][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 65.851021][ T5909] Cannot find add_set index 0 as target [ 65.898712][ T5915] loop3: detected capacity change from 0 to 64 [ 66.266153][ T5932] loop2: detected capacity change from 0 to 4096 [ 66.269942][ T5940] Cannot find add_set index 0 as target [ 66.273373][ T5932] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 66.339454][ T5932] ntfs: volume version 3.1. [ 66.427182][ T5949] netlink: 'syz.1.713': attribute type 21 has an invalid length. [ 66.429271][ T5949] IPv6: NLM_F_CREATE should be specified when creating new route [ 66.466415][ T5949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.468440][ T5949] IPv6: NLM_F_CREATE should be set when creating new route [ 66.470400][ T5949] IPv6: NLM_F_CREATE should be set when creating new route [ 66.472344][ T5949] IPv6: NLM_F_CREATE should be set when creating new route [ 66.489500][ T5953] loop0: detected capacity change from 0 to 128 [ 66.554211][ T5955] loop2: detected capacity change from 0 to 256 [ 66.643342][ T5955] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 66.643342][ T5955] SÃȘØÈžZ§6ŸÂ' [ 66.653332][ T5961] netlink: 32 bytes leftover after parsing attributes in process `syz.1.721'. [ 66.697498][ T5964] netlink: 'syz.4.733': attribute type 21 has an invalid length. [ 66.699555][ T5964] IPv6: NLM_F_CREATE should be specified when creating new route [ 66.701739][ T5964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.703652][ T5964] IPv6: NLM_F_CREATE should be set when creating new route [ 66.705638][ T5964] IPv6: NLM_F_CREATE should be set when creating new route [ 66.707596][ T5964] IPv6: NLM_F_CREATE should be set when creating new route [ 66.902693][ T5979] loop4: detected capacity change from 0 to 512 [ 66.919934][ T5979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.956217][ T5979] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.728: invalid indirect mapped block 8 (level 2) [ 66.965540][ T5979] EXT4-fs (loop4): 1 truncate cleaned up [ 66.971461][ T5979] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 67.127166][ T5992] netlink: 32 bytes leftover after parsing attributes in process `syz.0.735'. [ 67.131571][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 67.145822][ T5986] loop3: detected capacity change from 0 to 4096 [ 67.208813][ T5998] tmpfs: Bad value for 'mpol' [ 67.218645][ T5986] ntfs: volume version 3.1. [ 67.476811][ T6014] AppArmor: change_hat: Invalid input '0' [ 67.532851][ T6018] loop0: detected capacity change from 0 to 512 [ 67.589020][ T6024] loop3: detected capacity change from 0 to 512 [ 67.591132][ T6024] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.594807][ T6018] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 67.636149][ T6024] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 33261: comm syz.3.749: invalid block [ 67.684627][ T6024] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.749: invalid indirect mapped block 8 (level 2) [ 67.750571][ T6024] EXT4-fs (loop3): 1 truncate cleaned up [ 67.752543][ T6024] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 67.846467][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 67.853441][ T6040] netlink: 44 bytes leftover after parsing attributes in process `syz.2.757'. [ 67.855825][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'. [ 67.877068][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'. [ 67.883676][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 67.994268][ T6047] xt_CT: You must specify a L4 protocol and not use inversions on it [ 68.122656][ T6054] loop3: detected capacity change from 0 to 512 [ 68.131406][ T6057] netlink: 'syz.2.768': attribute type 10 has an invalid length. [ 68.133483][ T6057] netlink: 40 bytes leftover after parsing attributes in process `syz.2.768'. [ 68.136396][ T6054] journal_path: Lookup failure for './file0/../file0' [ 68.146053][ T6054] EXT4-fs: error: could not find journal device path [ 68.166203][ T6057] batman_adv: batadv0: Adding interface: vlan1 [ 68.168280][ T6057] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.175052][ T6057] batman_adv: batadv0: Interface activated: vlan1 [ 68.370473][ T6037] loop1: detected capacity change from 0 to 32768 [ 68.476078][ T6071] loop3: detected capacity change from 0 to 2048 [ 68.547861][ T6071] loop3: p1 < > p3 p4 < > [ 68.549852][ T6071] loop3: p3 start 4284289 is beyond EOD, truncated [ 68.575674][ T6071] syz.3.773: attempt to access beyond end of device [ 68.575674][ T6071] loop3p1: rw=2048, sector=0, nr_sectors = 8 limit=2 [ 68.587130][ T6071] SQUASHFS error: Failed to read block 0x0: -5 [ 68.588878][ T6071] unable to read squashfs_super_block [ 68.705718][ T6084] netlink: 44 bytes leftover after parsing attributes in process `syz.1.775'. [ 68.708348][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.775'. [ 68.710679][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.775'. [ 68.810557][ T6088] binder: 6087:6088 ioctl c0046209 9999999999999999 returned -22 [ 68.859766][ T6092] netlink: 'syz.4.780': attribute type 10 has an invalid length. [ 68.861873][ T6092] netlink: 40 bytes leftover after parsing attributes in process `syz.4.780'. [ 68.877304][ T6092] batman_adv: batadv0: Adding interface: vlan1 [ 68.878897][ T6092] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.909847][ T6092] batman_adv: batadv0: Interface activated: vlan1 [ 68.923778][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 68.925818][ T6095] IPv6: NLM_F_CREATE should be set when creating new route [ 68.927756][ T6095] IPv6: NLM_F_CREATE should be set when creating new route [ 68.983975][ T6100] loop3: detected capacity change from 0 to 64 [ 69.031675][ T6100] syz.3.787: attempt to access beyond end of device [ 69.031675][ T6100] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 69.035207][ T6100] Buffer I/O error on dev loop3, logical block 512, async page read [ 69.064358][ T6100] syz.3.787: attempt to access beyond end of device [ 69.064358][ T6100] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 69.075732][ T6100] Buffer I/O error on dev loop3, logical block 56576, async page read [ 69.083814][ T6107] loop4: detected capacity change from 0 to 512 [ 69.097611][ T4608] udevd[4608]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 69.114240][ T4519] udevd[4519]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 69.130639][ T6107] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 69.141371][ T6112] xt_TCPMSS: Only works on TCP SYN packets [ 69.247157][ T6114] loop1: detected capacity change from 0 to 4096 [ 69.250854][ T6114] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 69.280023][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 69.428910][ T6125] loop2: detected capacity change from 0 to 16 [ 69.434703][ T6125] erofs: (device loop2): mounted with root inode @ nid 36. [ 69.465792][ T6125] erofs: (device loop2): erofs_read_inode: unsupported i_format 65535 of nid 89 [ 69.628222][ T1516] cfg80211: failed to load regulatory.db [ 69.649753][ T6135] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 69.656496][ T6133] netlink: 'syz.3.801': attribute type 10 has an invalid length. [ 69.665196][ T6133] batman_adv: batadv0: Adding interface: vlan1 [ 69.666861][ T6133] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.675246][ T6133] batman_adv: batadv0: Interface activated: vlan1 [ 69.939594][ T6150] netlink: 'syz.4.821': attribute type 1 has an invalid length. [ 70.015078][ T6153] loop3: detected capacity change from 0 to 512 [ 70.080440][ T6153] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 70.231588][ T6162] loop4: detected capacity change from 0 to 4096 [ 70.240744][ T6162] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 70.316320][ T6170] netlink: 'syz.0.819': attribute type 10 has an invalid length. [ 70.324500][ T6170] batman_adv: batadv0: Adding interface: vlan1 [ 70.326166][ T6170] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.343501][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 70.378460][ T6170] batman_adv: batadv0: Interface activated: vlan1 [ 70.890879][ T6203] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.026027][ T6212] loop3: detected capacity change from 0 to 256 [ 71.094447][ T6212] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 71.188007][ T6212] syz.3.837: attempt to access beyond end of device [ 71.188007][ T6212] loop3: rw=2049, sector=34359738491, nr_sectors = 1 limit=256 [ 71.222524][ T6222] netlink: 'syz.2.845': attribute type 5 has an invalid length. [ 71.227704][ T6212] Buffer I/O error on dev loop3, logical block 34359738491, lost async page write [ 71.230362][ T6212] syz.3.837: attempt to access beyond end of device [ 71.230362][ T6212] loop3: rw=2049, sector=34359738492, nr_sectors = 1 limit=256 [ 71.234037][ T6212] Buffer I/O error on dev loop3, logical block 34359738492, lost async page write [ 71.280114][ T6228] loop0: detected capacity change from 0 to 1024 [ 71.305530][ T6228] EXT4-fs (loop0): Test dummy encryption mode enabled [ 71.314095][ T6228] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 71.581515][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 71.740449][ T6249] netlink: 'syz.3.857': attribute type 1 has an invalid length. [ 71.812443][ T6253] __nla_validate_parse: 11 callbacks suppressed [ 71.812456][ T6253] netlink: 172 bytes leftover after parsing attributes in process `syz.2.871'. [ 71.816358][ T6253] netlink: 22 bytes leftover after parsing attributes in process `syz.2.871'. [ 71.846416][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'. [ 71.873453][ T6258] netlink: 'syz.3.860': attribute type 5 has an invalid length. [ 71.875444][ T6258] netlink: 176 bytes leftover after parsing attributes in process `syz.3.860'. [ 71.947145][ T6261] netlink: 'syz.1.863': attribute type 1 has an invalid length. [ 71.964903][ T6263] loop2: detected capacity change from 0 to 256 [ 72.040964][ T6263] FAT-fs (loop2): Directory bread(block 64) failed [ 72.043132][ T6263] FAT-fs (loop2): Directory bread(block 65) failed [ 72.045195][ T6263] FAT-fs (loop2): Directory bread(block 66) failed [ 72.064145][ T6263] FAT-fs (loop2): Directory bread(block 67) failed [ 72.065931][ T6263] FAT-fs (loop2): Directory bread(block 68) failed [ 72.074272][ T6263] FAT-fs (loop2): Directory bread(block 69) failed [ 72.076061][ T6263] FAT-fs (loop2): Directory bread(block 70) failed [ 72.092684][ T6263] FAT-fs (loop2): Directory bread(block 71) failed [ 72.094554][ T6263] FAT-fs (loop2): Directory bread(block 72) failed [ 72.096251][ T6263] FAT-fs (loop2): Directory bread(block 73) failed [ 72.383450][ T6279] loop1: detected capacity change from 0 to 8192 [ 72.406555][ T6279] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 72.441835][ T6289] xt_hashlimit: max too large, truncated to 1048576 [ 72.448072][ T6279] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 72.450482][ T6279] REISERFS (device loop1): using ordered data mode [ 72.452155][ T6279] reiserfs: using flush barriers [ 72.475599][ T6279] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 72.500523][ T6279] REISERFS (device loop1): checking transaction log (loop1) [ 72.595485][ T6295] netlink: 176 bytes leftover after parsing attributes in process `syz.0.878'. [ 72.700481][ T6301] loop2: detected capacity change from 0 to 1024 [ 72.703770][ T6279] REISERFS (device loop1): Using tea hash to sort names [ 72.712768][ T6279] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 72.775119][ T6301] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 72.882367][ T6301] EXT4-fs error (device loop2): ext4_lookup:1858: comm syz.2.880: inode #12: comm syz.2.880: iget: illegal inode # [ 72.926081][ T6301] EXT4-fs (loop2): Remounting filesystem read-only [ 72.930416][ T6313] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 72.981031][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 73.062272][ T6319] netlink: 132 bytes leftover after parsing attributes in process `syz.0.895'. [ 73.168112][ T6326] binder: 6325:6326 ioctl c018620b 9999999999999999 returned -14 [ 73.168866][ T6328] validate_nla: 2 callbacks suppressed [ 73.168879][ T6328] netlink: 'syz.4.897': attribute type 10 has an invalid length. [ 73.199628][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 73.226164][ T6333] netlink: 76 bytes leftover after parsing attributes in process `syz.3.898'. [ 73.248420][ T6328] device macvlan0 entered promiscuous mode [ 73.278741][ T6328] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 73.495246][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.905'. [ 73.573485][ T6351] loop0: detected capacity change from 0 to 512 [ 73.599126][ T6351] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.600897][ T6351] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 73.630244][ T6351] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 73.643517][ T6351] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.907: attempt to clear invalid blocks 2 len 1 [ 73.683324][ T6351] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.907: invalid indirect mapped block 1819239214 (level 0) [ 73.707756][ T6365] netlink: 76 bytes leftover after parsing attributes in process `syz.4.913'. [ 73.714037][ T6351] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.907: invalid indirect mapped block 1819239214 (level 1) [ 73.724436][ T6351] EXT4-fs (loop0): 1 truncate cleaned up [ 73.725993][ T6351] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 73.810265][ T6351] EXT4-fs error (device loop0): __ext4_remount:6611: comm syz.0.907: Abort forced by user [ 73.823807][ T6351] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 73.892882][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 74.002367][ T6383] loop1: detected capacity change from 0 to 1024 [ 74.008818][ T6383] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.068155][ T6388] loop4: detected capacity change from 0 to 512 [ 74.071609][ T6388] EXT2-fs (loop4): error: invalid #inodes per group: 2 [ 74.081154][ T6383] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 74.083313][ T6383] System zones: 0-1, 3-12 [ 74.095225][ T6383] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 74.131159][ T6383] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #12: comm syz.1.920: corrupted in-inode xattr [ 74.135422][ T4519] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 74.200205][ T6388] Option ' W' to dns_resolver key: bad/missing value [ 74.208115][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 74.472954][ T6417] netlink: 'syz.1.949': attribute type 9 has an invalid length. [ 74.497260][ T6417] netlink: 'syz.1.949': attribute type 7 has an invalid length. [ 74.499296][ T6417] netlink: 'syz.1.949': attribute type 8 has an invalid length. [ 74.516515][ T6420] loop2: detected capacity change from 0 to 22 [ 74.527629][ T6420] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 74.539858][ T6420] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 74.584191][ T6425] loop3: detected capacity change from 0 to 8 [ 74.593007][ T6425] SQUASHFS error: zlib decompression failed, data probably corrupt [ 74.608630][ T6425] SQUASHFS error: Failed to read block 0x9b: -5 [ 74.610315][ T6425] SQUASHFS error: Unable to read metadata cache entry [99] [ 74.612169][ T6425] SQUASHFS error: Unable to read inode 0x127 [ 74.746172][ T6435] loop0: detected capacity change from 0 to 1024 [ 74.764276][ T6425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.792652][ T6425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.814591][ T6435] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 74.840937][ T6435] EXT4-fs error (device loop0): ext4_lookup:1858: comm syz.0.945: inode #12: comm syz.0.945: iget: illegal inode # [ 74.850727][ T6435] EXT4-fs (loop0): Remounting filesystem read-only [ 74.895749][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 75.136099][ T6461] xt_hashlimit: max too large, truncated to 1048576 [ 75.366578][ T6477] loop1: detected capacity change from 0 to 256 [ 75.405127][ T6481] loop2: detected capacity change from 0 to 512 [ 75.426382][ T6481] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 75.440136][ T6477] FAT-fs (loop1): Directory bread(block 64) failed [ 75.441934][ T6477] FAT-fs (loop1): Directory bread(block 65) failed [ 75.454948][ T6485] binder: 6483:6485 ioctl c018620b 9999999999999999 returned -14 [ 75.464527][ T6477] FAT-fs (loop1): Directory bread(block 66) failed [ 75.466271][ T6477] FAT-fs (loop1): Directory bread(block 67) failed [ 75.474970][ T6481] syz.2.967: attempt to access beyond end of device [ 75.474970][ T6481] loop2: rw=524288, sector=3606377190, nr_sectors = 2 limit=512 [ 75.478923][ T6481] syz.2.967: attempt to access beyond end of device [ 75.478923][ T6481] loop2: rw=0, sector=3606377190, nr_sectors = 2 limit=512 [ 75.489534][ T6477] FAT-fs (loop1): Directory bread(block 68) failed [ 75.491266][ T6477] FAT-fs (loop1): Directory bread(block 69) failed [ 75.493071][ T6477] FAT-fs (loop1): Directory bread(block 70) failed [ 75.494753][ T6477] FAT-fs (loop1): Directory bread(block 71) failed [ 75.517733][ T6477] FAT-fs (loop1): Directory bread(block 72) failed [ 75.519505][ T6477] FAT-fs (loop1): Directory bread(block 73) failed [ 76.368972][ T6544] loop2: detected capacity change from 0 to 8 [ 76.416387][ T6548] loop1: detected capacity change from 0 to 16 [ 76.437462][ T6548] erofs: (device loop1): mounted with root inode @ nid 36. [ 76.963773][ T4306] Bluetooth: hci4: Unknown advertising packet type: 0x1e [ 77.006437][ T6590] loop1: detected capacity change from 0 to 22 [ 77.007865][ T6594] netlink: 'syz.2.1024': attribute type 9 has an invalid length. [ 77.017106][ T6594] netlink: 'syz.2.1024': attribute type 7 has an invalid length. [ 77.019333][ T6594] netlink: 'syz.2.1024': attribute type 8 has an invalid length. [ 77.022761][ T6590] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 77.029028][ T6590] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 77.484333][ T6627] loop2: detected capacity change from 0 to 8 [ 77.669754][ T6640] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.672242][ T6640] FAT-fs (loop9): unable to read boot sector [ 77.893994][ T6657] netlink: 'syz.1.1053': attribute type 2 has an invalid length. [ 77.904835][ T6659] loop3: detected capacity change from 0 to 16 [ 77.918743][ T6659] erofs: (device loop3): mounted with root inode @ nid 36. [ 78.016113][ T6664] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 78.054003][ T6665] loop2: detected capacity change from 0 to 2048 [ 78.073452][ T6665] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=26504, location=26504 [ 78.100093][ T6665] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.340905][ T6684] netlink: 'syz.2.1069': attribute type 2 has an invalid length. [ 78.380079][ T6689] loop4: detected capacity change from 0 to 16 [ 78.409235][ T6689] erofs: (device loop4): mounted with root inode @ nid 36. [ 78.446757][ T6694] loop0: detected capacity change from 0 to 47 [ 78.534958][ T6700] loop4: detected capacity change from 0 to 8 [ 78.689960][ T6708] loop2: detected capacity change from 0 to 2048 [ 78.734238][ T6710] loop3: detected capacity change from 0 to 64 [ 78.763521][ T6713] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.804452][ T6708] syz.2.1078: attempt to access beyond end of device [ 78.804452][ T6708] loop2: rw=0, sector=19791209300040, nr_sectors = 2 limit=2048 [ 78.825755][ T6708] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=1) [ 78.952821][ T6725] device netdevsim0 entered promiscuous mode [ 79.123329][ T6734] loop2: detected capacity change from 0 to 2048 [ 79.149435][ T6734] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 79.151758][ T6734] System zones: 0-4 [ 79.188544][ T6734] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 79.267403][ T6734] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1091: bg 0: block 345: padding at end of block bitmap is not set [ 79.293021][ T6734] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 79.332460][ T6738] loop4: detected capacity change from 0 to 32768 [ 79.345061][ T6738] ERROR: (device loop4): dtSearch: DT_GETPAGE: dtree page corrupt [ 79.345061][ T6738] [ 79.353018][ T6738] ERROR: (device loop4): remounting filesystem as read-only [ 79.354908][ T6738] jfs_lookup: dtSearch returned -5 [ 79.428470][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 79.455328][ T6752] loop0: detected capacity change from 0 to 764 [ 79.515344][ T6752] rock: directory entry would overflow storage [ 79.526264][ T6752] rock: sig=0x4654, size=5, remaining=4 [ 79.674030][ T6766] xt_bpf: check failed: parse error [ 79.851612][ T6778] xt_TPROXY: Can be used only with -p tcp or -p udp [ 80.244877][ T6799] __nla_validate_parse: 2 callbacks suppressed [ 80.244891][ T6799] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1123'. [ 80.415633][ T6809] netlink: 'syz.0.1127': attribute type 2 has an invalid length. [ 80.462878][ T6812] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 80.789569][ T6835] random: crng reseeded on system resumption [ 80.838007][ T6836] loop1: detected capacity change from 0 to 2048 [ 80.874667][ T6841] loop4: detected capacity change from 0 to 47 [ 80.896013][ T6836] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 80.903270][ T6836] System zones: 0-4 [ 80.905345][ T6836] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 80.979227][ T6845] loop2: detected capacity change from 0 to 64 [ 81.003062][ T6836] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1151: bg 0: block 345: padding at end of block bitmap is not set [ 81.018463][ T6836] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 81.059542][ T6829] loop0: detected capacity change from 0 to 32768 [ 81.133592][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 81.344693][ T6863] loop0: detected capacity change from 0 to 64 [ 81.584547][ T6874] loop2: detected capacity change from 0 to 47 [ 81.790943][ T6885] xt_TPROXY: Can be used only with -p tcp or -p udp [ 82.116112][ T6906] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.1175'. [ 82.200556][ T6909] xt_CT: No such helper "snmp" [ 82.322765][ T6924] loop4: detected capacity change from 0 to 64 [ 82.476733][ T6930] loop4: detected capacity change from 0 to 1024 [ 82.524021][ T6930] hfsplus: bad catalog entry type [ 82.645174][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 82.763218][ T6944] loop4: detected capacity change from 0 to 1764 [ 83.077127][ T6958] loop4: detected capacity change from 0 to 2048 [ 83.081810][ T6934] loop0: detected capacity change from 0 to 32768 [ 83.099922][ T6958] loop4: p1 < > p3 p4 < > [ 83.102181][ T6958] loop4: p3 start 4284289 is beyond EOD, truncated [ 83.117792][ T6934] (syz.0.1186,6934,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 83.132605][ T6934] (syz.0.1186,6934,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 83.147748][ T6958] hpfs: hpfs_map_sector(): read error [ 83.192563][ T6934] (syz.0.1186,6934,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 83.254916][ T6934] JBD2: Ignoring recovery information on journal [ 83.322274][ T4519] udevd[4519]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 83.329916][ T4286] udevd[4286]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 83.343365][ T6934] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 83.389372][ T6972] xt_CT: No such helper "snmp" [ 83.440345][ T6934] (syz.0.1186,6934,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 83.448540][ T6934] (syz.0.1186,6934,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 83.465027][ T6934] (syz.0.1186,6934,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 83.475197][ T6934] (syz.0.1186,6934,1):ocfs2_quota_read:201 ERROR: status = -5 [ 83.477577][ T6934] __quota_error: 13 callbacks suppressed [ 83.477588][ T6934] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 5 [ 83.488159][ T6934] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 83.501990][ T6934] (syz.0.1186,6934,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 83.512565][ T6934] (syz.0.1186,6934,1):ocfs2_symlink:1879 ERROR: status = -5 [ 83.514781][ T6934] (syz.0.1186,6934,1):ocfs2_symlink:2065 ERROR: status = -5 [ 83.655543][ T4300] ocfs2: Unmounting device (7,0) on (node local) [ 83.722924][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'. [ 84.088363][ T7012] xt_CT: No such helper "snmp" [ 84.093569][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1226'. [ 84.284863][ T7039] delete_channel: no stack [ 84.324249][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1234'. [ 84.924857][ T7119] delete_channel: no stack [ 84.986881][ T7129] CIFS mount error: No usable UNC path provided in device string! [ 84.986881][ T7129] [ 85.036915][ T7129] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 85.517640][ T7161] delete_channel: no stack [ 85.562275][ T7163] CIFS mount error: No usable UNC path provided in device string! [ 85.562275][ T7163] [ 85.564946][ T7163] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 85.764641][ T7130] loop2: detected capacity change from 0 to 32768 [ 85.823156][ T7130] ialloc: diAlloc returned -5! [ 86.488774][ T7234] CIFS mount error: No usable UNC path provided in device string! [ 86.488774][ T7234] [ 86.548953][ T7234] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 86.570542][ T7238] loop0: detected capacity change from 0 to 2048 [ 86.609280][ T7238] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.804459][ T7248] loop2: detected capacity change from 0 to 256 [ 86.865643][ T7248] FAT-fs (loop2): Directory bread(block 64) failed [ 86.867645][ T7248] FAT-fs (loop2): Directory bread(block 65) failed [ 86.869511][ T7248] FAT-fs (loop2): Directory bread(block 66) failed [ 86.871295][ T7248] FAT-fs (loop2): Directory bread(block 67) failed [ 86.873046][ T7248] FAT-fs (loop2): Directory bread(block 68) failed [ 86.874864][ T7248] FAT-fs (loop2): Directory bread(block 69) failed [ 86.876655][ T7248] FAT-fs (loop2): Directory bread(block 70) failed [ 86.895016][ T7251] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1289'. [ 86.896099][ T7188] loop3: detected capacity change from 0 to 32768 [ 86.918019][ T7248] FAT-fs (loop2): Directory bread(block 71) failed [ 86.919867][ T7248] FAT-fs (loop2): Directory bread(block 72) failed [ 86.921699][ T7248] FAT-fs (loop2): Directory bread(block 73) failed [ 86.944872][ T7188] ialloc: diAlloc returned -5! [ 87.024361][ T7254] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1301'. [ 87.209932][ T7232] loop1: detected capacity change from 0 to 32768 [ 87.300992][ T7232] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 87.420872][ T4294] ocfs2: Unmounting device (7,1) on (node local) [ 87.497276][ T7285] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1300'. [ 87.646833][ T7292] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 87.650287][ T7292] overlayfs: conflicting options: userxattr,metacopy=on [ 87.755012][ T7300] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 87.777594][ T7300] overlayfs: conflicting options: userxattr,metacopy=on [ 87.843267][ T7304] loop4: detected capacity change from 0 to 2048 [ 87.863990][ T7304] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.363418][ T7335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1324'. [ 88.409497][ T7291] loop2: detected capacity change from 0 to 32768 [ 88.461737][ T7301] loop1: detected capacity change from 0 to 32768 [ 88.504326][ T7301] (syz.1.1305,7301,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.508482][ T7301] (syz.1.1305,7301,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.549015][ T7301] (syz.1.1305,7301,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 88.555825][ T7301] JBD2: Ignoring recovery information on journal [ 88.636182][ T7348] CIFS mount error: No usable UNC path provided in device string! [ 88.636182][ T7348] [ 88.639251][ T7348] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 88.694099][ T7301] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 88.738115][ T7354] capability: warning: `syz.2.1322' uses deprecated v2 capabilities in a way that may be insecure [ 88.772356][ T7355] loop0: detected capacity change from 0 to 256 [ 88.786402][ T7301] (syz.1.1305,7301,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 88.830277][ T7301] (syz.1.1305,7301,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 88.834187][ T7301] (syz.1.1305,7301,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 88.836655][ T7301] (syz.1.1305,7301,1):ocfs2_quota_read:201 ERROR: status = -5 [ 88.846811][ T7301] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 5 [ 88.865605][ T7301] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 88.869917][ T7301] (syz.1.1305,7301,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 88.874229][ T7301] (syz.1.1305,7301,1):ocfs2_symlink:1879 ERROR: status = -5 [ 88.882501][ T7301] (syz.1.1305,7301,1):ocfs2_symlink:2065 ERROR: status = -5 [ 88.904265][ T7331] loop4: detected capacity change from 0 to 32768 [ 88.942346][ T7363] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1327'. [ 88.953344][ T7331] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 89.054629][ T4294] ocfs2: Unmounting device (7,1) on (node local) [ 89.080431][ T7371] CIFS mount error: No usable UNC path provided in device string! [ 89.080431][ T7371] [ 89.083106][ T7371] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 89.090028][ T4307] ocfs2: Unmounting device (7,4) on (node local) [ 89.135389][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 89.150126][ T7376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1328'. [ 89.169607][ T7376] device veth5 entered promiscuous mode [ 89.199676][ T7378] loop2: detected capacity change from 0 to 256 [ 89.366522][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1335'. [ 89.453955][ T7398] tc_dump_action: action bad kind [ 89.756600][ T7422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1355'. [ 89.903879][ T7433] tc_dump_action: action bad kind [ 90.232017][ T7458] loop4: detected capacity change from 0 to 128 [ 90.233650][ T7460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1374'. [ 90.269879][ T7458] befs: (loop4): invalid magic header [ 90.339916][ T7467] tc_dump_action: action bad kind [ 90.492035][ T7479] No such timeout policy "syz0" [ 90.691804][ T7490] device veth5 entered promiscuous mode [ 90.740586][ T7492] loop1: detected capacity change from 0 to 4096 [ 90.753130][ T7492] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 90.843587][ T7502] loop2: detected capacity change from 0 to 128 [ 90.857929][ T7502] befs: (loop2): invalid magic header [ 90.865633][ T7492] ntfs: (device loop1): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 90.870376][ T7492] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 90.886367][ T7492] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 90.919118][ T7492] ntfs: volume version 3.1. [ 91.000459][ T7509] netlink: 'syz.4.1396': attribute type 17 has an invalid length. [ 91.002645][ T7509] netlink: 'syz.4.1396': attribute type 16 has an invalid length. [ 91.296795][ T7525] device veth3 entered promiscuous mode [ 91.409528][ T7499] loop0: detected capacity change from 0 to 32768 [ 91.461865][ T7499] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 91.508022][ T7538] loop1: detected capacity change from 0 to 256 [ 91.510376][ T7538] exfat: Deprecated parameter 'namecase' [ 91.531696][ T7537] loop3: detected capacity change from 0 to 128 [ 91.571052][ T7538] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 91.586619][ T7537] befs: (loop3): invalid magic header [ 91.692864][ T7543] binfmt_misc: register: failed to install interpreter file ./file0 [ 91.707472][ T4300] ocfs2: Unmounting device (7,0) on (node local) [ 92.119161][ T7572] binfmt_misc: register: failed to install interpreter file ./file0 [ 92.144249][ T7575] No such timeout policy "syz0" [ 92.200453][ T7577] loop0: detected capacity change from 0 to 256 [ 92.202723][ T7577] exfat: Deprecated parameter 'namecase' [ 92.243589][ T7577] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 92.546258][ T7590] loop2: detected capacity change from 0 to 4096 [ 92.581800][ T7590] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 92.608723][ T7569] loop3: detected capacity change from 0 to 32768 [ 92.706914][ T7590] ntfs: (device loop2): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 92.710740][ T7569] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 92.716004][ T7590] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 92.728963][ T7590] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 92.760478][ T7590] ntfs: volume version 3.1. [ 92.799856][ T7608] binfmt_misc: register: failed to install interpreter file ./file0 [ 92.833150][ T7606] loop4: detected capacity change from 0 to 1024 [ 92.840929][ T7612] loop0: detected capacity change from 0 to 512 [ 92.884120][ T4298] ocfs2: Unmounting device (7,3) on (node local) [ 92.946401][ T7612] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.1443: Failed to acquire dquot type 1 [ 92.951645][ T7612] EXT4-fs (loop0): 1 truncate cleaned up [ 92.953124][ T7612] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 93.069756][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 93.294385][ T7638] netlink: 'syz.4.1455': attribute type 1 has an invalid length. [ 93.543452][ T7658] __nla_validate_parse: 5 callbacks suppressed [ 93.543465][ T7658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1464'. [ 93.637374][ T7662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1477'. [ 93.773772][ T7671] loop0: detected capacity change from 0 to 256 [ 94.063046][ T7687] loop0: detected capacity change from 0 to 4096 [ 94.065235][ T7687] __ntfs_warning: 2 callbacks suppressed [ 94.065245][ T7687] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 94.124980][ T7699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1482'. [ 94.201584][ T7687] ntfs: (device loop0): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 94.207365][ T7687] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 94.211428][ T7687] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 94.236097][ T7687] ntfs: volume version 3.1. [ 94.276761][ T7705] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 94.311048][ T7709] loop2: detected capacity change from 0 to 256 [ 94.445247][ T7715] netlink: 'syz.1.1491': attribute type 1 has an invalid length. [ 94.471189][ T7713] loop4: detected capacity change from 0 to 512 [ 94.498011][ T7713] EXT4-fs (loop4): orphan cleanup on readonly fs [ 94.500382][ T7713] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 94.504087][ T7718] loop2: detected capacity change from 0 to 1024 [ 94.524525][ T7713] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 94.553031][ T7713] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.1500: Failed to acquire dquot type 1 [ 94.588462][ T7713] EXT4-fs (loop4): 1 truncate cleaned up [ 94.598147][ T7713] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 94.654488][ T7713] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.1500: deleted inode referenced: 12 [ 94.734973][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 94.999608][ T7746] netlink: 'syz.0.1506': attribute type 1 has an invalid length. [ 95.035059][ T7742] loop3: detected capacity change from 0 to 4096 [ 95.054812][ T7742] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 95.174871][ T7742] ntfs: (device loop3): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 95.178889][ T7742] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 95.183373][ T7742] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 95.227572][ T7742] ntfs: volume version 3.1. [ 95.429764][ T7771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1527'. [ 95.612414][ T7785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1534'. [ 95.862328][ T7801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1535'. [ 95.900444][ T7804] netlink: 'syz.4.1532': attribute type 5 has an invalid length. [ 95.902945][ T7807] netlink: 'syz.3.1533': attribute type 2 has an invalid length. [ 96.094386][ T7819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1543'. [ 96.361102][ T7837] syz.0.1552 uses obsolete (PF_INET,SOCK_PACKET) [ 96.368842][ T7838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1561'. [ 96.393778][ T7839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1551'. [ 96.485703][ T7845] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 96.551813][ T7847] loop3: detected capacity change from 0 to 512 [ 96.624066][ T7847] EXT4-fs (loop3): orphan cleanup on readonly fs [ 96.633834][ T7847] EXT4-fs error (device loop3): ext4_acquire_dquot:6795: comm syz.3.1556: Failed to acquire dquot type 1 [ 96.692211][ T7847] EXT4-fs (loop3): 1 truncate cleaned up [ 96.715043][ T7862] loop0: detected capacity change from 0 to 512 [ 96.721350][ T7862] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 96.721664][ T7847] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 96.744834][ T7847] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.1556: deleted inode referenced: 12 [ 96.857875][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 96.946897][ T7874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1571'. [ 96.972777][ T7876] netlink: 'syz.3.1570': attribute type 5 has an invalid length. [ 97.119016][ T7879] loop2: detected capacity change from 0 to 4096 [ 97.169024][ T7879] NILFS (loop2): invalid segment: Checksum error in segment payload [ 97.171207][ T7879] NILFS (loop2): trying rollback from an earlier position [ 97.207404][ T7879] NILFS (loop2): recovery complete [ 97.227060][ T7889] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.309945][ T7891] loop1: detected capacity change from 0 to 4096 [ 97.369644][ T7898] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.448069][ T7891] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 97.492418][ T7906] netlink: 'syz.3.1584': attribute type 11 has an invalid length. [ 97.578175][ T7910] netlink: 'syz.0.1585': attribute type 5 has an invalid length. [ 97.653948][ T7918] netlink: 'syz.4.1590': attribute type 21 has an invalid length. [ 97.657906][ T7914] loop2: detected capacity change from 0 to 1024 [ 97.795814][ T7131] hfsplus: b-tree write err: -5, ino 4 [ 98.094310][ T7936] loop2: detected capacity change from 0 to 512 [ 98.113778][ T7936] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 98.122026][ T7934] loop4: detected capacity change from 0 to 4096 [ 98.174056][ T7939] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.242676][ T7941] netlink: 'syz.0.1599': attribute type 11 has an invalid length. [ 98.259231][ T7934] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 98.271851][ T7923] loop1: detected capacity change from 0 to 32768 [ 98.376041][ T7945] loop0: detected capacity change from 0 to 1024 [ 98.478512][ T9] hfsplus: b-tree write err: -5, ino 4 [ 98.782988][ T7970] netlink: 'syz.4.1615': attribute type 11 has an invalid length. [ 98.785043][ T7970] __nla_validate_parse: 6 callbacks suppressed [ 98.785053][ T7970] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1615'. [ 98.987880][ T7981] loop4: detected capacity change from 0 to 1024 [ 99.099800][ T7097] hfsplus: b-tree write err: -5, ino 4 [ 99.267464][ T7961] loop2: detected capacity change from 0 to 32768 [ 99.273711][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 99.365705][ T7961] XFS (loop2): Mounting V5 Filesystem [ 99.461343][ T7961] XFS (loop2): Ending clean mount [ 99.624396][ T8014] loop1: detected capacity change from 0 to 4096 [ 99.635400][ T7977] loop3: detected capacity change from 0 to 32768 [ 99.644458][ T4299] XFS (loop2): Unmounting Filesystem [ 99.652090][ T8014] __ntfs_error: 2 callbacks suppressed [ 99.652104][ T8014] ntfs: (device loop1): load_attribute_list(): Cannot read attribute list since runlist is missing. [ 99.698354][ T8014] ntfs: (device loop1): ntfs_read_locked_inode(): Failed to load attribute list attribute. [ 99.718675][ T8014] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 99.722237][ T8014] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 99.775156][ T8014] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 99.779481][ T8014] ntfs: volume version 3.1. [ 99.780779][ T8014] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Missing length entry in mapping pairs array. [ 99.798809][ T8014] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Invalid length in mapping pairs array. [ 99.801713][ T8014] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 99.826199][ T8014] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Missing length entry in mapping pairs array. [ 99.829551][ T8014] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Invalid length in mapping pairs array. [ 99.878953][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1642'. [ 100.017740][ T8038] device macsec0 entered promiscuous mode [ 100.299436][ T8059] loop1: detected capacity change from 0 to 1024 [ 100.382046][ T8059] fuse: Bad value for 'fd' [ 100.434919][ T9] hfsplus: b-tree write err: -5, ino 4 [ 100.437766][ T8064] loop3: detected capacity change from 0 to 2048 [ 100.486398][ T8064] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.635348][ T8073] netlink: 'syz.1.1664': attribute type 10 has an invalid length. [ 100.881117][ T8053] loop0: detected capacity change from 0 to 32768 [ 100.956676][ T8092] loop4: detected capacity change from 0 to 1024 [ 101.051345][ T8092] fuse: Bad value for 'fd' [ 101.112739][ T7131] hfsplus: b-tree write err: -5, ino 4 [ 101.440734][ T8113] loop3: detected capacity change from 0 to 4096 [ 101.462009][ T8113] ntfs: volume version 3.1. [ 101.772577][ T8138] loop0: detected capacity change from 0 to 2048 [ 101.814179][ T8138] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.987125][ T8117] loop1: detected capacity change from 0 to 32768 [ 102.003837][ T8117] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1685 (8117) [ 102.027065][ T8117] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 102.029943][ T8117] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 102.032179][ T8117] BTRFS info (device loop1): setting nodatacow, compression disabled [ 102.034390][ T8117] BTRFS info (device loop1): enabling disk space caching [ 102.036223][ T8117] BTRFS info (device loop1): doing ref verification [ 102.057660][ T8117] BTRFS info (device loop1): force clearing of disk cache [ 102.059572][ T8117] BTRFS info (device loop1): turning off barriers [ 102.061259][ T8117] BTRFS info (device loop1): enabling ssd optimizations [ 102.071219][ T8117] BTRFS info (device loop1): using spread ssd allocation scheme [ 102.073339][ T8117] BTRFS info (device loop1): force zlib compression, level 3 [ 102.082116][ T8117] BTRFS info (device loop1): disk space caching is enabled [ 102.172239][ T8163] loop2: detected capacity change from 0 to 4096 [ 102.176352][ T8163] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 102.314677][ T8163] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 102.323197][ T8163] ntfs3: loop2: ino=1b, "file0" attr_set_size [ 102.376226][ T8184] netlink: 'syz.4.1712': attribute type 10 has an invalid length. [ 102.410761][ T8117] BTRFS info (device loop1): rebuilding free space tree [ 102.466514][ T4299] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 102.508238][ T4299] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 102.540916][ T8192] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 102.542719][ T8192] [U] J"—e:ÀÆ" [ 102.569391][ T8195] loop4: detected capacity change from 0 to 8 [ 102.570992][ T8117] BTRFS info (device loop1): disabling free space tree [ 102.572923][ T8117] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 102.575611][ T8117] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 102.608438][ T8195] SQUASHFS error: lzo decompression failed, data probably corrupt [ 102.614263][ T8195] SQUASHFS error: Failed to read block 0x1dd: -5 [ 102.615972][ T8195] SQUASHFS error: Unable to read metadata cache entry [1db] [ 102.621351][ T8195] SQUASHFS error: Unable to read inode 0xa7 [ 102.785993][ T8208] block nbd0: NBD_DISCONNECT [ 102.823762][ T4294] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 102.948859][ T8215] loop4: detected capacity change from 0 to 1024 [ 103.044249][ T8215] hfsplus: keylen 65060 too large [ 103.045862][ T8215] hfsplus: xattr searching failed [ 103.095087][ T8227] netlink: 'syz.3.1726': attribute type 10 has an invalid length. [ 103.143224][ T8229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1729'. [ 103.669668][ T8265] netlink: 'syz.2.1746': attribute type 10 has an invalid length. [ 103.672089][ T8266] loop0: detected capacity change from 0 to 256 [ 103.674244][ T8266] exfat: Deprecated parameter 'namecase' [ 103.735909][ T8266] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 103.788561][ T8271] loop2: detected capacity change from 0 to 8 [ 103.834041][ T8271] SQUASHFS error: lzo decompression failed, data probably corrupt [ 103.836070][ T8271] SQUASHFS error: Failed to read block 0x1dd: -5 [ 103.850968][ T8271] SQUASHFS error: Unable to read metadata cache entry [1db] [ 103.853019][ T8271] SQUASHFS error: Unable to read inode 0xa7 [ 103.984623][ T8280] loop1: detected capacity change from 0 to 8 [ 104.039303][ T8248] loop3: detected capacity change from 0 to 32768 [ 104.044824][ T8280] SQUASHFS error: lzo decompression failed, data probably corrupt [ 104.046801][ T8280] SQUASHFS error: Failed to read block 0x1dd: -5 [ 104.053543][ T8280] SQUASHFS error: Unable to read metadata cache entry [1db] [ 104.055446][ T8280] SQUASHFS error: Unable to read inode 0xa7 [ 104.263240][ T8291] block nbd4: NBD_DISCONNECT [ 104.380767][ T8299] loop0: detected capacity change from 0 to 1024 [ 104.441317][ T8299] hfsplus: keylen 65060 too large [ 104.442654][ T8299] hfsplus: xattr searching failed [ 104.806193][ T8329] block nbd2: NBD_DISCONNECT [ 104.973853][ T8335] loop1: detected capacity change from 0 to 1024 [ 105.093730][ T8339] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1784'. [ 105.112756][ T8335] hfsplus: keylen 65060 too large [ 105.114075][ T8335] hfsplus: xattr searching failed [ 105.271697][ T8319] loop4: detected capacity change from 0 to 32768 [ 105.305649][ T8347] loop1: detected capacity change from 0 to 256 [ 105.322042][ T8347] exfat: Deprecated parameter 'namecase' [ 105.348385][ T8347] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 105.381482][ T8323] loop0: detected capacity change from 0 to 32768 [ 105.402512][ T8323] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1786 (8323) [ 105.431075][ T8323] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 105.433892][ T8323] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 105.436174][ T8323] BTRFS info (device loop0): setting nodatacow, compression disabled [ 105.459076][ T8323] BTRFS info (device loop0): enabling disk space caching [ 105.460978][ T8323] BTRFS info (device loop0): doing ref verification [ 105.462708][ T8323] BTRFS info (device loop0): force clearing of disk cache [ 105.464543][ T8323] BTRFS info (device loop0): turning off barriers [ 105.466224][ T8323] BTRFS info (device loop0): enabling ssd optimizations [ 105.484151][ T8323] BTRFS info (device loop0): using spread ssd allocation scheme [ 105.486189][ T8323] BTRFS info (device loop0): force zlib compression, level 3 [ 105.501067][ T8323] BTRFS info (device loop0): disk space caching is enabled [ 105.549923][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 105.549938][ T27] audit: type=1400 audit(105.520:2): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3A1CD2A12F2F263E pid=8361 comm="syz.4.1791" [ 105.734375][ T8323] BTRFS info (device loop0): rebuilding free space tree [ 105.747103][ T8323] BTRFS info (device loop0): disabling free space tree [ 105.749113][ T8323] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.751789][ T8323] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 106.005242][ T4300] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 106.032250][ T8401] netlink: 'syz.2.1807': attribute type 39 has an invalid length. [ 106.363946][ T8413] loop3: detected capacity change from 0 to 1024 [ 106.590146][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1820'. [ 106.599069][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1820'. [ 106.601543][ T8427] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1820'. [ 106.633168][ T8394] loop1: detected capacity change from 0 to 32768 [ 106.815424][ T8440] loop2: detected capacity change from 0 to 1024 [ 106.824425][ T8442] loop3: detected capacity change from 0 to 64 [ 106.839752][ T27] audit: type=1400 audit(106.810:3): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3A1CD2A12F2F263E pid=8439 comm="syz.0.1827" [ 106.933254][ T8447] loop4: detected capacity change from 0 to 1024 [ 106.952267][ T8451] loop3: detected capacity change from 0 to 64 [ 107.195570][ T8463] loop4: detected capacity change from 0 to 1024 [ 107.216340][ T8463] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 107.246331][ T8463] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 107.301801][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 107.348873][ T8476] netlink: 'syz.1.1842': attribute type 39 has an invalid length. [ 107.574016][ T8491] loop2: detected capacity change from 0 to 1024 [ 107.889067][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1857'. [ 107.895976][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1857'. [ 107.910308][ T8512] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1857'. [ 108.401485][ T8507] loop0: detected capacity change from 0 to 32768 [ 108.461568][ T8508] loop2: detected capacity change from 0 to 32768 [ 108.464316][ T8508] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1853 (8508) [ 108.478621][ T8507] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 108.486838][ T8507] ocfs2: Unmounting device (7,0) on (node local) [ 108.517936][ T8508] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 108.530971][ T8508] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 108.533171][ T8508] BTRFS info (device loop2): setting nodatacow, compression disabled [ 108.545654][ T8508] BTRFS info (device loop2): enabling disk space caching [ 108.552996][ T8508] BTRFS info (device loop2): doing ref verification [ 108.554670][ T8508] BTRFS info (device loop2): force clearing of disk cache [ 108.563058][ T8508] BTRFS info (device loop2): turning off barriers [ 108.564748][ T8508] BTRFS info (device loop2): enabling ssd optimizations [ 108.566492][ T8508] BTRFS info (device loop2): using spread ssd allocation scheme [ 108.587122][ T8508] BTRFS info (device loop2): force zlib compression, level 3 [ 108.589207][ T8508] BTRFS info (device loop2): disk space caching is enabled [ 108.691429][ T8539] loop4: detected capacity change from 0 to 64 [ 108.878005][ T8508] BTRFS info (device loop2): rebuilding free space tree [ 108.913768][ T8508] BTRFS info (device loop2): disabling free space tree [ 108.915745][ T8508] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.931418][ T8508] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 109.140285][ T4299] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 109.494085][ T8587] loop2: detected capacity change from 0 to 64 [ 109.644482][ T8594] loop4: detected capacity change from 0 to 22 [ 109.646634][ T8594] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 109.662489][ T8594] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 110.099128][ T27] audit: type=1800 audit(110.070:4): pid=8605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.1892" name="/" dev="sockfs" ino=42262 res=0 errno=0 [ 110.109451][ T8626] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1902'. [ 110.296710][ T8639] loop1: detected capacity change from 0 to 22 [ 110.299585][ T8639] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 110.311662][ T8639] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 110.837189][ T8659] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1916'. [ 110.924107][ T27] audit: type=1800 audit(110.890:5): pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.1914" name="/" dev="sockfs" ino=42334 res=0 errno=0 [ 110.993748][ T8666] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 111.018410][ T8666] vhci_hcd: default hub control req: 4011 v8001 i0001 l0 [ 111.024220][ T8671] loop0: detected capacity change from 0 to 22 [ 111.026431][ T8671] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 111.042283][ T8671] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 111.269952][ T8686] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1930'. [ 111.679390][ T27] audit: type=1800 audit(111.650:6): pid=8691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.1933" name="/" dev="sockfs" ino=41890 res=0 errno=0 [ 111.786319][ T8680] loop3: detected capacity change from 0 to 32768 [ 111.844019][ T8680] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 111.895271][ T8680] ocfs2: Unmounting device (7,3) on (node local) [ 112.109938][ T8720] loop4: detected capacity change from 0 to 4096 [ 112.574758][ T8760] loop4: detected capacity change from 0 to 512 [ 112.627062][ T8760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.701736][ T8760] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 112.815440][ T8752] loop1: detected capacity change from 0 to 32768 [ 112.820670][ T8752] XFS: ikeep mount option is deprecated. [ 112.827104][ T8752] XFS: noikeep mount option is deprecated. [ 112.870238][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 112.915123][ T8780] netlink: 'syz.3.1971': attribute type 1 has an invalid length. [ 112.917319][ T8780] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1971'. [ 112.924090][ T8752] XFS (loop1): Mounting V5 Filesystem [ 113.074870][ T8752] XFS (loop1): Ending clean mount [ 113.088314][ T8752] XFS (loop1): Quotacheck needed: Please wait. [ 113.120163][ T8762] loop0: detected capacity change from 0 to 32768 [ 113.141046][ T8752] XFS (loop1): Quotacheck: Done. [ 113.298567][ T4294] XFS (loop1): Unmounting Filesystem [ 113.502014][ T8804] loop3: detected capacity change from 0 to 512 [ 113.514610][ T8804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.548792][ T8804] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 113.602669][ T8812] netlink: 'syz.0.1982': attribute type 1 has an invalid length. [ 113.605025][ T8812] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1982'. [ 113.615914][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 114.251926][ T8845] loop1: detected capacity change from 0 to 512 [ 114.267389][ T8845] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.340164][ T8843] loop2: detected capacity change from 0 to 4096 [ 114.358182][ T8845] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 114.378431][ T8827] loop0: detected capacity change from 0 to 32768 [ 114.380765][ T8827] XFS: ikeep mount option is deprecated. [ 114.382343][ T8827] XFS: noikeep mount option is deprecated. [ 114.407856][ T8853] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2001'. [ 114.431650][ T8820] loop4: detected capacity change from 0 to 32768 [ 114.487151][ T8827] XFS (loop0): Mounting V5 Filesystem [ 114.506837][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 114.640830][ T8827] XFS (loop0): Ending clean mount [ 114.645815][ T8827] XFS (loop0): Quotacheck needed: Please wait. [ 114.704632][ T8827] XFS (loop0): Quotacheck: Done. [ 114.813507][ T4300] XFS (loop0): Unmounting Filesystem [ 114.849903][ T8877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2018'. [ 114.966185][ T8884] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2013'. [ 115.112007][ T8892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2017'. [ 115.513433][ T8888] loop3: detected capacity change from 0 to 32768 [ 115.836105][ T8918] loop2: detected capacity change from 0 to 128 [ 115.896020][ T8900] loop4: detected capacity change from 0 to 32768 [ 115.931807][ T8900] XFS: ikeep mount option is deprecated. [ 115.933415][ T8900] XFS: noikeep mount option is deprecated. [ 115.952729][ T8924] netlink: 'syz.0.2033': attribute type 1 has an invalid length. [ 116.064696][ T8900] XFS (loop4): Mounting V5 Filesystem [ 116.119037][ T8938] loop0: detected capacity change from 0 to 8 [ 116.215860][ T8900] XFS (loop4): Ending clean mount [ 116.222267][ T8940] netlink: 'syz.2.2037': attribute type 16 has an invalid length. [ 116.224402][ T8940] netlink: 'syz.2.2037': attribute type 17 has an invalid length. [ 116.237971][ T8900] XFS (loop4): Quotacheck needed: Please wait. [ 116.242438][ T8940] netlink: 'syz.2.2037': attribute type 27 has an invalid length. [ 116.277874][ T8900] XFS (loop4): Quotacheck: Done. [ 116.359035][ T4307] XFS (loop4): Unmounting Filesystem [ 116.546081][ T8922] loop1: detected capacity change from 0 to 40427 [ 116.566832][ T8922] F2FS-fs (loop1): invalid crc value [ 116.572785][ T8922] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 116.594489][ T8922] F2FS-fs (loop1): Found nat_bits in checkpoint [ 116.595573][ T8920] loop3: detected capacity change from 0 to 40427 [ 116.602732][ T8920] F2FS-fs (loop3): invalid crc value [ 116.632602][ T8920] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 116.634325][ T8922] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 116.640269][ T8922] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 116.667459][ T8922] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 116.699079][ T8920] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 116.708863][ T8920] F2FS-fs (loop3): Start checkpoint disabled! [ 116.732154][ T8920] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 116.902575][ T8961] loop4: detected capacity change from 0 to 128 [ 117.082029][ T8967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2043'. [ 117.121904][ T8969] netlink: 'syz.4.2048': attribute type 16 has an invalid length. [ 117.124124][ T8969] netlink: 'syz.4.2048': attribute type 17 has an invalid length. [ 117.126227][ T8969] netlink: 'syz.4.2048': attribute type 27 has an invalid length. [ 117.171656][ T8965] loop2: detected capacity change from 0 to 4096 [ 117.184625][ T8965] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 117.194600][ T8971] loop1: detected capacity change from 0 to 8 [ 117.253907][ T8975] netlink: 'syz.3.2046': attribute type 1 has an invalid length. [ 117.258315][ T8974] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2050'. [ 117.260751][ T8974] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2050'. [ 117.397907][ T4299] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 117.399602][ T4299] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 117.438389][ T4299] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 117.525528][ T8989] i2c i2c-0: Invalid block write size 34 [ 118.001387][ T9007] loop4: detected capacity change from 0 to 4096 [ 118.018469][ T9007] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 118.084967][ T8979] loop3: detected capacity change from 0 to 32768 [ 118.143113][ T8979] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 118.143113][ T8979] [ 118.148490][ T8979] ERROR: (device loop3): remounting filesystem as read-only [ 118.171108][ T4307] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 118.176114][ T4307] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 118.188067][ T4307] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 118.364799][ T8985] loop0: detected capacity change from 0 to 40427 [ 118.381824][ T8985] F2FS-fs (loop0): invalid crc value [ 118.411025][ T8985] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 118.459241][ T8985] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 118.477487][ T8985] F2FS-fs (loop0): Start checkpoint disabled! [ 118.502276][ T8985] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 119.260290][ T9057] loop3: detected capacity change from 0 to 4096 [ 119.295175][ T9057] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 119.463823][ T4298] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 119.465415][ T4298] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 119.483791][ T4298] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 119.502493][ T9043] loop1: detected capacity change from 0 to 32768 [ 119.542685][ T9043] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 119.542685][ T9043] [ 119.561077][ T9043] ERROR: (device loop1): remounting filesystem as read-only [ 120.034918][ T9097] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2110'. [ 120.104590][ T9094] loop3: detected capacity change from 0 to 8192 [ 120.153479][ T9094] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 120.170130][ T9067] loop2: detected capacity change from 0 to 40427 [ 120.174057][ T9094] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 120.176647][ T9094] REISERFS (device loop3): using ordered data mode [ 120.183064][ T9067] F2FS-fs (loop2): invalid crc value [ 120.200418][ T9094] reiserfs: using flush barriers [ 120.217082][ T9094] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.221617][ T9094] REISERFS (device loop3): checking transaction log (loop3) [ 120.253616][ T9067] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 120.358124][ T9067] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 120.360376][ T9067] F2FS-fs (loop2): Start checkpoint disabled! [ 120.381852][ T9067] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 120.466627][ T9099] loop4: detected capacity change from 0 to 40427 [ 120.482714][ T9099] F2FS-fs (loop4): invalid crc value [ 120.484168][ T9099] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 120.509470][ T9099] F2FS-fs (loop4): Found nat_bits in checkpoint [ 120.551746][ T9099] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 120.554061][ T9099] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 120.554921][ T9094] REISERFS (device loop3): Using tea hash to sort names [ 120.561427][ T9094] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 120.568910][ T9099] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 120.582660][ T9094] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 120.669853][ T9113] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20002 [ 121.173779][ T9136] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2122'. [ 121.409219][ T9151] loop0: detected capacity change from 0 to 256 [ 121.416329][ T9151] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 121.667107][ T9169] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2140'. [ 121.778176][ T9176] loop0: detected capacity change from 0 to 256 [ 122.034154][ T9187] loop2: detected capacity change from 0 to 256 [ 122.053359][ T9187] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 122.122680][ T9193] loop1: detected capacity change from 0 to 64 [ 122.143612][ T9193] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 122.191372][ T9191] loop0: detected capacity change from 0 to 8192 [ 122.207410][ T9191] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 122.214629][ T9191] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 122.217895][ T9191] REISERFS (device loop0): using ordered data mode [ 122.219810][ T9191] reiserfs: using flush barriers [ 122.235982][ T9191] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.272262][ T9191] REISERFS (device loop0): checking transaction log (loop0) [ 122.347846][ T9203] loop3: detected capacity change from 0 to 64 [ 122.541706][ T9191] REISERFS (device loop0): Using tea hash to sort names [ 122.547609][ T9191] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 122.551316][ T9191] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 122.650433][ T9215] loop1: detected capacity change from 0 to 256 [ 122.739460][ T9222] loop3: detected capacity change from 0 to 64 [ 122.752535][ T9222] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 122.823926][ T9224] loop4: detected capacity change from 0 to 256 [ 123.070199][ T9240] loop1: detected capacity change from 0 to 256 [ 123.116603][ T9240] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 123.390885][ T9248] loop4: detected capacity change from 0 to 8192 [ 123.412160][ T9258] loop2: detected capacity change from 0 to 256 [ 123.415378][ T9248] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 123.432915][ T9248] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 123.465781][ T9248] REISERFS (device loop4): using ordered data mode [ 123.474438][ T9248] reiserfs: using flush barriers [ 123.495921][ T9248] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 123.520586][ T9248] REISERFS (device loop4): checking transaction log (loop4) [ 123.573440][ T9261] loop1: detected capacity change from 0 to 256 [ 123.703737][ T9248] REISERFS (device loop4): Using tea hash to sort names [ 123.709515][ T9248] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 123.720470][ T9248] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 124.338831][ T9297] loop4: detected capacity change from 0 to 64 [ 124.489363][ T9305] loop2: detected capacity change from 0 to 64 [ 124.846326][ T9331] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2220'. [ 124.922222][ T9336] loop0: detected capacity change from 0 to 64 [ 125.366853][ T9365] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2236'. [ 125.596512][ T9382] netlink: 'syz.2.2246': attribute type 10 has an invalid length. [ 125.622975][ T9382] device veth1_macvtap left promiscuous mode [ 125.803524][ T9389] device veth7 entered promiscuous mode [ 125.937860][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.939669][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.988396][ T9399] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2253'. [ 126.449130][ T9417] loop0: detected capacity change from 0 to 128 [ 126.468754][ T9391] loop2: detected capacity change from 0 to 32768 [ 126.516226][ T9391] ea_get: invalid extended attribute [ 126.519505][ T9417] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 126.526102][ T9391] 000000002642efc1: 04 00 00 00 .... [ 126.631744][ T9395] loop3: detected capacity change from 0 to 32768 [ 126.638764][ T9425] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (65) [ 126.644377][ T9395] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 126.646753][ T9395] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 126.687167][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 126.724415][ T9395] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 126.762510][ T22] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 126.764580][ T22] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 126.787372][ T9432] device team_slave_1 entered promiscuous mode [ 126.837402][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2269'. [ 126.861256][ T22] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 96ms [ 126.863889][ T22] gfs2: fsid=syz:syz.0: jid=0: Done [ 126.866228][ T9395] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 127.033722][ T9446] loop2: detected capacity change from 0 to 512 [ 127.063223][ T9446] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.065779][ T9446] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.194695][ T9395] gfs2: fsid=syz:syz.0: found 1 quota changes [ 127.281054][ T9456] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 127.376743][ T4298] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 127.386431][ T4298] CPU: 0 PID: 4298 Comm: syz-executor Not tainted 6.1.133-syzkaller #0 [ 127.388635][ T4298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.391416][ T4298] Call trace: [ 127.392334][ T4298] dump_backtrace+0x1c8/0x1f4 [ 127.393607][ T4298] show_stack+0x2c/0x3c [ 127.394723][ T4298] dump_stack_lvl+0x108/0x170 [ 127.395991][ T4298] dump_stack+0x1c/0x5c [ 127.397081][ T4298] gfs2_assert_warn_i+0x16c/0x278 [ 127.398450][ T4298] gfs2_quota_cleanup+0x45c/0x664 [ 127.399748][ T4298] gfs2_make_fs_ro+0x398/0x460 [ 127.401024][ T4298] gfs2_put_super+0x1ec/0x754 [ 127.402302][ T4298] generic_shutdown_super+0x130/0x328 [ 127.403847][ T4298] kill_block_super+0x70/0xdc [ 127.405108][ T4298] gfs2_kill_sb+0xc0/0xd4 [ 127.406229][ T4298] deactivate_locked_super+0xac/0x124 [ 127.407746][ T4298] deactivate_super+0xf0/0x110 [ 127.409000][ T4298] cleanup_mnt+0x394/0x41c [ 127.410185][ T4298] __cleanup_mnt+0x20/0x30 [ 127.411453][ T4298] task_work_run+0x240/0x2f0 [ 127.412631][ T4298] do_notify_resume+0x2080/0x2cb8 [ 127.414005][ T4298] el0_svc+0x9c/0x168 [ 127.415126][ T4298] el0t_64_sync_handler+0x84/0xf0 [ 127.416445][ T4298] el0t_64_sync+0x18c/0x190 [ 127.776805][ T9492] usb usb1: check_ctrlrecip: process 9492 (syz.4.2299) requesting ep 01 but needs 81 [ 127.806653][ T9492] usb usb1: usbfs: process 9492 (syz.4.2299) did not claim interface 0 before use [ 127.814518][ T9494] ip6t_srh: unknown srh match flags 4000 [ 127.852509][ T9496] netlink: 'syz.2.2300': attribute type 1 has an invalid length. [ 127.992590][ T9505] loop3: detected capacity change from 0 to 512 [ 128.005518][ T9505] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 128.029016][ T9505] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 128.031229][ T9505] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.2304: bad orphan inode 13 [ 128.037221][ T9505] EXT4-fs (loop3): Remounting filesystem read-only [ 128.039087][ T9505] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 128.053406][ T9513] loop0: detected capacity change from 0 to 764 [ 128.062164][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2308'. [ 128.068083][ T9513] rock: directory entry would overflow storage [ 128.069870][ T9513] rock: sig=0x4654, size=5, remaining=4 [ 128.144126][ T9517] xt_addrtype: ipv6 does not support BROADCAST matching [ 128.189257][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 128.353460][ T9530] loop2: detected capacity change from 0 to 256 [ 128.355672][ T9530] exfat: Deprecated parameter 'namecase' [ 128.380018][ T9530] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 128.687933][ T9547] xt_TPROXY: Can be used only with -p tcp or -p udp [ 128.900022][ T9557] tmpfs: Bad value for 'mpol' [ 129.065337][ T9531] loop1: detected capacity change from 0 to 40427 [ 129.098754][ T9531] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 129.100785][ T9531] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 129.119591][ T9531] F2FS-fs (loop1): invalid crc value [ 129.140796][ T9531] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 129.177945][ T9531] F2FS-fs (loop1): recover fsync data on readonly fs [ 129.180048][ T9531] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 129.181972][ T9531] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 129.334687][ T9551] loop4: detected capacity change from 0 to 32768 [ 129.345828][ T9551] (syz.4.2327,9551,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 129.365996][ T9551] (syz.4.2327,9551,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 129.391384][ T7124] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.414574][ T9551] JBD2: Ignoring recovery information on journal [ 129.518245][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.522235][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.524930][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.528041][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.530428][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 129.532741][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.574662][ T9551] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 129.634937][ T9551] [ 129.635633][ T9551] ====================================================== [ 129.637451][ T9551] WARNING: possible circular locking dependency detected [ 129.639352][ T9551] 6.1.133-syzkaller #0 Not tainted [ 129.640681][ T9551] ------------------------------------------------------ [ 129.642561][ T9551] syz.4.2327/9551 is trying to acquire lock: [ 129.644277][ T9551] ffff0000dacb2650 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_write_info+0x114/0x354 [ 129.646847][ T9551] [ 129.646847][ T9551] but task is already holding lock: [ 129.648851][ T9551] ffff0000f42614a0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1d4/0x260 [ 129.651847][ T9551] [ 129.651847][ T9551] which lock already depends on the new lock. [ 129.651847][ T9551] [ 129.654630][ T9551] [ 129.654630][ T9551] the existing dependency chain (in reverse order) is: [ 129.657164][ T9551] [ 129.657164][ T9551] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 129.659620][ T9551] down_write+0x5c/0x88 [ 129.660923][ T9551] ocfs2_lock_global_qf+0x1d4/0x260 [ 129.662503][ T9551] ocfs2_acquire_dquot+0x27c/0xb1c [ 129.664101][ T9551] dqget+0x660/0xcec [ 129.665337][ T9551] __dquot_initialize+0x344/0xc04 [ 129.666870][ T9551] dquot_initialize+0x24/0x34 [ 129.668278][ T9551] ocfs2_get_init_inode+0x14c/0x1c0 [ 129.669872][ T9551] ocfs2_symlink+0x7f8/0x25cc [ 129.671235][ T9551] vfs_symlink+0x244/0x3a8 [ 129.672594][ T9551] do_symlinkat+0x1bc/0x45c [ 129.674012][ T9551] __arm64_sys_symlinkat+0xa4/0xbc [ 129.675567][ T9551] invoke_syscall+0x98/0x2bc [ 129.677103][ T9551] el0_svc_common+0x138/0x258 [ 129.678534][ T9551] do_el0_svc+0x58/0x13c [ 129.679761][ T9551] el0_svc+0x58/0x168 [ 129.681030][ T9551] el0t_64_sync_handler+0x84/0xf0 [ 129.682623][ T9551] el0t_64_sync+0x18c/0x190 [ 129.683992][ T9551] [ 129.683992][ T9551] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 129.686883][ T9551] down_write+0x5c/0x88 [ 129.688186][ T9551] ocfs2_lock_global_qf+0x1b8/0x260 [ 129.689837][ T9551] ocfs2_acquire_dquot+0x27c/0xb1c [ 129.691411][ T9551] dqget+0x660/0xcec [ 129.692588][ T9551] __dquot_initialize+0x344/0xc04 [ 129.694162][ T9551] dquot_initialize+0x24/0x34 [ 129.695649][ T9551] ocfs2_get_init_inode+0x14c/0x1c0 [ 129.697224][ T9551] ocfs2_symlink+0x7f8/0x25cc [ 129.698687][ T9551] vfs_symlink+0x244/0x3a8 [ 129.700080][ T9551] do_symlinkat+0x1bc/0x45c [ 129.701487][ T9551] __arm64_sys_symlinkat+0xa4/0xbc [ 129.702982][ T9551] invoke_syscall+0x98/0x2bc [ 129.704347][ T9551] el0_svc_common+0x138/0x258 [ 129.705745][ T9551] do_el0_svc+0x58/0x13c [ 129.707104][ T9551] el0_svc+0x58/0x168 [ 129.708389][ T9551] el0t_64_sync_handler+0x84/0xf0 [ 129.709958][ T9551] el0t_64_sync+0x18c/0x190 [ 129.711406][ T9551] [ 129.711406][ T9551] -> #4 (&dquot->dq_lock){+.+.}-{3:3}: [ 129.713624][ T9551] __mutex_lock_common+0x190/0x21a0 [ 129.715169][ T9551] mutex_lock_nested+0x38/0x44 [ 129.716618][ T9551] dquot_commit+0x54/0x240 [ 129.718016][ T9551] ext4_write_dquot+0x1b4/0x314 [ 129.719523][ T9551] ext4_mark_dquot_dirty+0xe8/0x140 [ 129.721087][ T9551] mark_all_dquot_dirty+0x108/0x424 [ 129.722661][ T9551] __dquot_free_space+0x840/0xce4 [ 129.724194][ T9551] ext4_free_blocks+0x1b14/0x2b64 [ 129.725783][ T9551] ext4_ext_remove_space+0x1acc/0x42ec [ 129.727444][ T9551] ext4_ext_truncate+0x168/0x210 [ 129.728981][ T9551] ext4_truncate+0xa08/0x1178 [ 129.730348][ T9551] ext4_evict_inode+0xc3c/0x12cc [ 129.731835][ T9551] evict+0x418/0x894 [ 129.733083][ T9551] iput+0x7c0/0x8a4 [ 129.734281][ T9551] ext4_process_orphan+0x244/0x2b8 [ 129.735816][ T9551] ext4_orphan_cleanup+0x974/0x1134 [ 129.737306][ T9551] ext4_fill_super+0x6f00/0x73a4 [ 129.738839][ T9551] get_tree_bdev+0x360/0x54c [ 129.740215][ T9551] ext4_get_tree+0x28/0x38 [ 129.741610][ T9551] vfs_get_tree+0x90/0x274 [ 129.742930][ T9551] do_new_mount+0x278/0x8fc [ 129.744336][ T9551] path_mount+0x590/0xe5c [ 129.745722][ T9551] __arm64_sys_mount+0x498/0x588 [ 129.747215][ T9551] invoke_syscall+0x98/0x2bc [ 129.748626][ T9551] el0_svc_common+0x138/0x258 [ 129.750124][ T9551] do_el0_svc+0x58/0x13c [ 129.751403][ T9551] el0_svc+0x58/0x168 [ 129.752652][ T9551] el0t_64_sync_handler+0x84/0xf0 [ 129.754124][ T9551] el0t_64_sync+0x18c/0x190 [ 129.755572][ T9551] [ 129.755572][ T9551] -> #3 (&ei->i_data_sem){++++}-{3:3}: [ 129.757640][ T9551] down_write+0x5c/0x88 [ 129.758956][ T9551] ext4_truncate+0x7e0/0x1178 [ 129.760416][ T9551] ext4_setattr+0xda0/0x14e8 [ 129.761815][ T9551] notify_change+0xb58/0xe1c [ 129.763203][ T9551] do_truncate+0x1c0/0x28c [ 129.764581][ T9551] do_sys_ftruncate+0x288/0x31c [ 129.766064][ T9551] __arm64_sys_ftruncate+0x60/0x74 [ 129.767698][ T9551] invoke_syscall+0x98/0x2bc [ 129.769091][ T9551] el0_svc_common+0x138/0x258 [ 129.770569][ T9551] do_el0_svc+0x58/0x13c [ 129.772005][ T9551] el0_svc+0x58/0x168 [ 129.773314][ T9551] el0t_64_sync_handler+0x84/0xf0 [ 129.774827][ T9551] el0t_64_sync+0x18c/0x190 [ 129.776223][ T9551] [ 129.776223][ T9551] -> #2 (jbd2_handle){++++}-{0:0}: [ 129.778225][ T9551] start_this_handle+0x1140/0x13ac [ 129.779826][ T9551] jbd2__journal_start+0x298/0x544 [ 129.781518][ T9551] jbd2_journal_start+0x3c/0x4c [ 129.783016][ T9551] ocfs2_start_trans+0x3e8/0x73c [ 129.784663][ T9551] ocfs2_modify_bh+0xe4/0x484 [ 129.786103][ T9551] ocfs2_local_read_info+0x1220/0x15bc [ 129.787767][ T9551] dquot_load_quota_sb+0x6f0/0xb1c [ 129.789340][ T9551] dquot_load_quota_inode+0x280/0x4f4 [ 129.790959][ T9551] ocfs2_enable_quotas+0x17c/0x3cc [ 129.792579][ T9551] ocfs2_fill_super+0x3ea4/0x4a58 [ 129.794126][ T9551] mount_bdev+0x274/0x370 [ 129.795493][ T9551] ocfs2_mount+0x44/0x58 [ 129.796827][ T9551] legacy_get_tree+0xd4/0x16c [ 129.798241][ T9551] vfs_get_tree+0x90/0x274 [ 129.799637][ T9551] do_new_mount+0x278/0x8fc [ 129.801005][ T9551] path_mount+0x590/0xe5c [ 129.802368][ T9551] __arm64_sys_mount+0x498/0x588 [ 129.803861][ T9551] invoke_syscall+0x98/0x2bc [ 129.805344][ T9551] el0_svc_common+0x138/0x258 [ 129.806754][ T9551] do_el0_svc+0x58/0x13c [ 129.808060][ T9551] el0_svc+0x58/0x168 [ 129.809326][ T9551] el0t_64_sync_handler+0x84/0xf0 [ 129.810923][ T9551] el0t_64_sync+0x18c/0x190 [ 129.812324][ T9551] [ 129.812324][ T9551] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 129.814788][ T9551] down_read+0x64/0x308 [ 129.816095][ T9551] ocfs2_start_trans+0x3dc/0x73c [ 129.817706][ T9551] ocfs2_modify_bh+0xe4/0x484 [ 129.819172][ T9551] ocfs2_local_read_info+0x1220/0x15bc [ 129.820866][ T9551] dquot_load_quota_sb+0x6f0/0xb1c [ 129.822426][ T9551] dquot_load_quota_inode+0x280/0x4f4 [ 129.824049][ T9551] ocfs2_enable_quotas+0x17c/0x3cc [ 129.825655][ T9551] ocfs2_fill_super+0x3ea4/0x4a58 [ 129.827239][ T9551] mount_bdev+0x274/0x370 [ 129.828657][ T9551] ocfs2_mount+0x44/0x58 [ 129.829960][ T9551] legacy_get_tree+0xd4/0x16c [ 129.831385][ T9551] vfs_get_tree+0x90/0x274 [ 129.832763][ T9551] do_new_mount+0x278/0x8fc [ 129.834154][ T9551] path_mount+0x590/0xe5c [ 129.835536][ T9551] __arm64_sys_mount+0x498/0x588 [ 129.837060][ T9551] invoke_syscall+0x98/0x2bc [ 129.838499][ T9551] el0_svc_common+0x138/0x258 [ 129.839916][ T9551] do_el0_svc+0x58/0x13c [ 129.841217][ T9551] el0_svc+0x58/0x168 [ 129.842480][ T9551] el0t_64_sync_handler+0x84/0xf0 [ 129.844041][ T9551] el0t_64_sync+0x18c/0x190 [ 129.845436][ T9551] [ 129.845436][ T9551] -> #0 (sb_internal#5){.+.+}-{0:0}: [ 129.847527][ T9551] __lock_acquire+0x3338/0x7680 [ 129.849013][ T9551] lock_acquire+0x26c/0x7cc [ 129.850432][ T9551] ocfs2_start_trans+0x260/0x73c [ 129.851913][ T9551] ocfs2_write_info+0x114/0x354 [ 129.853363][ T9551] dquot_set_dqinfo+0x398/0x5f4 [ 129.854888][ T9551] quota_setinfo+0x3b0/0x4fc [ 129.856275][ T9551] do_quotactl+0x4c0/0x698 [ 129.857622][ T9551] __arm64_sys_quotactl+0x2d8/0x7a0 [ 129.859124][ T9551] invoke_syscall+0x98/0x2bc [ 129.860582][ T9551] el0_svc_common+0x138/0x258 [ 129.861994][ T9551] do_el0_svc+0x58/0x13c [ 129.863336][ T9551] el0_svc+0x58/0x168 [ 129.864557][ T9551] el0t_64_sync_handler+0x84/0xf0 [ 129.866050][ T9551] el0t_64_sync+0x18c/0x190 [ 129.867451][ T9551] [ 129.867451][ T9551] other info that might help us debug this: [ 129.867451][ T9551] [ 129.870299][ T9551] Chain exists of: [ 129.870299][ T9551] sb_internal#5 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &ocfs2_quota_ip_alloc_sem_key [ 129.870299][ T9551] [ 129.875055][ T9551] Possible unsafe locking scenario: [ 129.875055][ T9551] [ 129.877177][ T9551] CPU0 CPU1 [ 129.878686][ T9551] ---- ---- [ 129.880202][ T9551] lock(&ocfs2_quota_ip_alloc_sem_key); [ 129.881809][ T9551] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 129.884532][ T9551] lock(&ocfs2_quota_ip_alloc_sem_key); [ 129.886823][ T9551] lock(sb_internal#5); [ 129.887978][ T9551] [ 129.887978][ T9551] *** DEADLOCK *** [ 129.887978][ T9551] [ 129.890234][ T9551] 3 locks held by syz.4.2327/9551: [ 129.891587][ T9551] #0: ffff0000dacb20e0 (&type->s_umount_key#94){++++}-{3:3}, at: user_get_super+0x11c/0x240 [ 129.894394][ T9551] #1: ffff0000f4261808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1b8/0x260 [ 129.898012][ T9551] #2: ffff0000f42614a0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1d4/0x260 [ 129.901250][ T9551] [ 129.901250][ T9551] stack backtrace: [ 129.902936][ T9551] CPU: 0 PID: 9551 Comm: syz.4.2327 Not tainted 6.1.133-syzkaller #0 [ 129.905127][ T9551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.907878][ T9551] Call trace: [ 129.908805][ T9551] dump_backtrace+0x1c8/0x1f4 [ 129.910030][ T9551] show_stack+0x2c/0x3c [ 129.911140][ T9551] dump_stack_lvl+0x108/0x170 [ 129.912644][ T9551] dump_stack+0x1c/0x5c [ 129.914070][ T9551] print_circular_bug+0x150/0x1b8 [ 129.915463][ T9551] check_noncircular+0x2cc/0x378 [ 129.916824][ T9551] __lock_acquire+0x3338/0x7680 [ 129.918198][ T9551] lock_acquire+0x26c/0x7cc [ 129.919502][ T9551] ocfs2_start_trans+0x260/0x73c [ 129.920903][ T9551] ocfs2_write_info+0x114/0x354 [ 129.922278][ T9551] dquot_set_dqinfo+0x398/0x5f4 [ 129.923716][ T9551] quota_setinfo+0x3b0/0x4fc [ 129.925077][ T9551] do_quotactl+0x4c0/0x698 [ 129.926382][ T9551] __arm64_sys_quotactl+0x2d8/0x7a0 [ 129.927835][ T9551] invoke_syscall+0x98/0x2bc [ 129.929114][ T9551] el0_svc_common+0x138/0x258 [ 129.930474][ T9551] do_el0_svc+0x58/0x13c [ 129.931638][ T9551] el0_svc+0x58/0x168 [ 129.932760][ T9551] el0t_64_sync_handler+0x84/0xf0 [ 129.934105][ T9551] el0t_64_sync+0x18c/0x190 [ 129.938588][ T7124] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 129.985821][ T4307] ocfs2: Unmounting device (7,4) on (node local) [ 130.041044][ T7124] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.162149][ T7124] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.457649][ T7124] device hsr_slave_0 left promiscuous mode [ 132.497205][ T7124] device hsr_slave_1 left promiscuous mode [ 132.587185][ T7124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.589393][ T7124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.592882][ T7124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.594825][ T7124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.597126][ T7124] batman_adv: batadv0: Interface deactivated: vlan1 [ 132.598904][ T7124] batman_adv: batadv0: Removing interface: vlan1 [ 132.600969][ T7124] device bridge_slave_1 left promiscuous mode [ 132.602616][ T7124] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.628533][ T7124] device bridge_slave_0 left promiscuous mode [ 132.630200][ T7124] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.777287][ T7124] device veth0_macvtap left promiscuous mode [ 132.779006][ T7124] device veth0_vlan left promiscuous mode [ 134.857868][ T7124] team0 (unregistering): Port device team_slave_1 removed [ 135.027847][ T7124] team0 (unregistering): Port device team_slave_0 removed [ 135.198242][ T7124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.418910][ T7124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.871159][ T7124] bond0 (unregistering): Released all slaves