last executing test programs: 620.047185ms ago: executing program 1 (id=3054): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x7ffff000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x25, 0x29, 0x32, 0xc0fe}}, @ip_tos_u8={{0x11, 0x4410, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x64}, 0x0) 605.932905ms ago: executing program 1 (id=3057): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="02", 0x1}], 0x1}, 0x0) 504.115847ms ago: executing program 1 (id=3062): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x81) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 454.088679ms ago: executing program 1 (id=3068): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000002700)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffead}}, 0x20) 453.162259ms ago: executing program 4 (id=3069): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010724bdf000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04000000039500002400128009000100626f6e640000000014000280050001000600000008000b0028"], 0x44}, 0x1, 0x0, 0x0, 0x49083}, 0x4040800) 425.551059ms ago: executing program 2 (id=3072): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) 424.779849ms ago: executing program 1 (id=3073): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0xff}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 351.908452ms ago: executing program 4 (id=3074): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, 0xffffffffffffffff) 351.387212ms ago: executing program 3 (id=3076): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000100039042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="011802007537a940300012800b00010065727370616e00002000028004001200050016000200000005001700010000000600180069"], 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x14040030) 335.413952ms ago: executing program 1 (id=3077): syz_usb_connect(0x2, 0x2e, &(0x7f0000004100)={{0x12, 0x1, 0x110, 0x9d, 0x87, 0x16, 0x20, 0x41e, 0x3f19, 0x14f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x9, 0x2, 0x60, 0x3, "", [{{0x9, 0x4, 0x97, 0x0, 0x0, 0xff, 0xd8, 0x25, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0xa}}]}}]}}]}}, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5ad, &(0x7f0000000c40)="$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") 311.262622ms ago: executing program 3 (id=3078): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x40800) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 264.127564ms ago: executing program 0 (id=3079): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xfffffffe, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x4}) 263.946704ms ago: executing program 2 (id=3080): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000100000004000000003"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20) 263.866954ms ago: executing program 4 (id=3081): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c0002"], 0x48}}, 0x0) 263.807544ms ago: executing program 4 (id=3082): r0 = socket(0x18, 0x0, 0x2) getsockname$l2tp(r0, 0x0, &(0x7f0000001100)) 232.257864ms ago: executing program 3 (id=3083): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@delalloc}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@grpjquota, 0x22}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x300) 231.139964ms ago: executing program 2 (id=3084): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000003c00070101000000f4dbdf25027c000004008c800c0001"], 0x24}}, 0x0) 226.701304ms ago: executing program 0 (id=3085): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x208008, &(0x7f0000000000)=ANY=[], 0x80, 0x162, &(0x7f00000005c0)="$eJzs2rFKw0AYB/BPGi3UzdGpUKkONkkTrbNjcXNzLG2uDV5sSQRpX0CcBIVz8CUEn8BHyOimi4MvEUlzhCQWzSDkhP9vyR++NPlyV77pOv7U67KgQ7Q/uzv92PKnXrNnHw1Zlw0o0SeiZhzCKHrQ6Zu3tB5GpK+4oVo7n8m1tTcWJzfM5Y5VdUsAAAAAAAAAAAAAAAAAAAAAAFBSuyFDYyK8a+Zyp5upBi3tfMC54wcVtVe5dlOe4SIm+GO8Pnb+hrNNGVxx7Md1M//7exl2J4K/F9fXuPRmRjBfdFxvMHbGzoVl2T3zwDQPLWP5LKP4xPaT7InC6NnUKZLSeua82WuZ82Zy/7VtV9xeFd8WzBdy/xUIa2q0UTLUiEiBNlQKfU2xf9S/CTVSoo1MSEfExsqpov06d1TRWE+uo7rdeonnnz6c8pEsLr+1Tn+0ZvJNlC9V9eEA8LOvAAAA//8Jlzfq") newfstatat(0xffffffffffffff9c, &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x100) 164.111516ms ago: executing program 4 (id=3086): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2000b, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @win={{0x2, 0x80, 0x10001}, 0x3, 0x9, 0x0, 0x1, 0x0, 0x1}}) 163.977906ms ago: executing program 2 (id=3087): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'trylock', ' ', 'io+mem'}, 0xf) 163.908606ms ago: executing program 0 (id=3088): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) 153.243576ms ago: executing program 4 (id=3089): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000000c0)=ANY=[@ANYBLOB='intr,heartbeat=none,dir_resv_level=000000000,resv_level=00000000000000000006,coherency=full,localflocks,coherency=full,commit=00000000001613114240,\x00'], 0x3, 0x444b, &(0x7f0000004480)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) 136.794427ms ago: executing program 3 (id=3090): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@fd={0x0, 0x1, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2e1379f1"}}) 108.477187ms ago: executing program 0 (id=3091): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)={0x18, 0x52, 0x1, 0x0, 0x25dfdbfd, {0xa}, [@generic="b5"]}, 0x18}}, 0x0) 105.347638ms ago: executing program 2 (id=3092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x2, 0x2, 0x5, 0x0, 0x0, {0x8, 0x0, 0x6}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x200080d4}, 0x4) 28.07369ms ago: executing program 3 (id=3093): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x9, 0xc, 0x9, 0x2, 0x0, 0x70bd29, 0x25dfdbfd}, 0x10}}, 0x40000) 27.87345ms ago: executing program 0 (id=3094): r0 = socket(0x29, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x8927, &(0x7f00000000c0)={'veth0_vlan\x00', 0x5000}) 27.74108ms ago: executing program 2 (id=3095): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000900)='./file0\x00', 0x0, &(0x7f0000000180)={[{@acl}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@inlinecrypt}, {@errors_remount}]}, 0x7, 0x60a, &(0x7f00000027c0)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380)={0x2b9, 0x0, 0x0, 0x5}) 19.67657ms ago: executing program 0 (id=3096): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005"], 0x1ac}}, 0x0) 0s ago: executing program 3 (id=3097): r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.267275][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.331057][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.332336][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.335356][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.358170][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.359416][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.361760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.379742][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.389029][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.390484][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.420827][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.422180][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.423928][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.425103][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.426413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.428903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.572604][ T4461] loop2: detected capacity change from 0 to 64 [ 33.740332][ T4482] loop0: detected capacity change from 0 to 2048 [ 33.759200][ T4492] loop1: detected capacity change from 0 to 512 [ 33.782559][ T4492] ======================================================= [ 33.782559][ T4492] WARNING: The mand mount option has been deprecated and [ 33.782559][ T4492] and is ignored by this kernel. Remove the mand [ 33.782559][ T4492] option from the mount to silence this warning. [ 33.782559][ T4492] ======================================================= [ 33.783578][ T4482] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.799940][ T4492] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 33.802801][ T4492] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c800e018, mo2=0002] [ 33.806625][ T4492] EXT4-fs (loop1): orphan cleanup on readonly fs [ 33.808701][ T4492] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.40: bg 0: block 361: padding at end of block bitmap is not set [ 33.815011][ T4492] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 33.816687][ T4492] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.40: attempt to clear invalid blocks 33619980 len 1 [ 33.819157][ T4492] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.40: invalid indirect mapped block 1811939328 (level 0) [ 33.821127][ T4492] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.40: invalid indirect mapped block 2185560079 (level 1) [ 33.826194][ T4492] EXT4-fs (loop1): 1 truncate cleaned up [ 33.827064][ T4492] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 33.857670][ T4501] netlink: 'syz.4.43': attribute type 10 has an invalid length. [ 33.886999][ T4501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.897937][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 33.912917][ T4501] team0: Port device bond0 added [ 33.920152][ T4508] capability: warning: `syz.2.48' uses deprecated v2 capabilities in a way that may be insecure [ 33.978303][ T4336] EXT4-fs (loop0): unmounting filesystem. [ 34.097815][ T4337] Bluetooth: hci0: command 0x041b tx timeout [ 34.098918][ T4337] Bluetooth: hci2: command 0x041b tx timeout [ 34.099824][ T4337] Bluetooth: hci1: command 0x041b tx timeout [ 34.100719][ T4337] Bluetooth: hci3: command 0x041b tx timeout [ 34.101722][ T4337] Bluetooth: hci4: command 0x041b tx timeout [ 34.250718][ T4554] xt_TCPMSS: Only works on TCP SYN packets [ 34.307584][ T27] audit: type=1326 audit(34.290:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.4.67" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b781a8 code=0x0 [ 34.396992][ T4576] xt_CT: You must specify a L4 protocol and not use inversions on it [ 34.401544][ T4578] syz.1.77 uses obsolete (PF_INET,SOCK_PACKET) [ 34.470010][ T4584] loop4: detected capacity change from 0 to 1024 [ 34.526284][ T4584] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 34.560051][ T4603] loop3: detected capacity change from 0 to 1024 [ 34.591322][ T4603] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.88: lblock 2 mapped to illegal pblock 2 (length 1) [ 34.597746][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 34.601899][ T4603] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 34.606391][ T4603] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.88: lblock 0 mapped to illegal pblock 48 (length 1) [ 34.608578][ T4603] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 34.609922][ T4603] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.88: Failed to acquire dquot type 0 [ 34.611809][ T4603] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 34.614488][ T4603] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.88: mark_inode_dirty error [ 34.616351][ T4603] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 34.619865][ T4603] EXT4-fs (loop3): 1 orphan inode deleted [ 34.620819][ T4603] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 34.674413][ T39] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 34.678852][ T39] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 34.680258][ T39] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 0 [ 34.747662][ T4341] EXT4-fs (loop3): unmounting filesystem. [ 34.749154][ T11] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 34.751890][ T11] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 34.753166][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 0 [ 34.758538][ T4341] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 34.760836][ T4341] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 34.770112][ T4341] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 34.805076][ T4621] mmap: syz.0.97 (4621): VmData 49250304 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 34.807902][ T4624] capability: warning: `syz.4.98' uses 32-bit capabilities (legacy support in use) [ 34.923214][ T4633] loop0: detected capacity change from 0 to 512 [ 34.931000][ T4633] EXT4-fs: Ignoring removed bh option [ 34.964158][ T4633] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 34.980855][ T4637] loop1: detected capacity change from 0 to 4096 [ 34.999409][ T4633] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.102: invalid size [ 35.001650][ T4637] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 35.013470][ T4633] EXT4-fs (loop0): Remounting filesystem read-only [ 35.031995][ T4646] loop3: detected capacity change from 0 to 1024 [ 35.050206][ T4336] EXT4-fs (loop0): unmounting filesystem. [ 35.075844][ T4637] ntfs3: loop1: failed to convert "c46c" to maccroatian [ 35.169640][ T4386] hfsplus: b-tree write err: -5, ino 25 [ 35.170898][ T4386] hfsplus: b-tree write err: -5, ino 4 [ 35.171820][ T4386] hfsplus: b-tree write err: -5, ino 2 [ 35.243963][ T4663] loop2: detected capacity change from 0 to 256 [ 35.315134][ T4678] loop1: detected capacity change from 0 to 16 [ 35.328738][ T4678] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 35.618361][ T4724] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 35.669262][ T4731] erofs: (device loop2): mounted with root inode @ nid 36. [ 35.787092][ T4754] mmap: syz.4.160 (4754) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.838126][ T4759] ÿ: renamed from virt_wifi0 [ 35.910620][ T4769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 36.158485][ T4809] ipt_rpfilter: unknown options [ 36.173340][ T4335] Bluetooth: hci4: command 0x040f tx timeout [ 36.174309][ T4335] Bluetooth: hci3: command 0x040f tx timeout [ 36.175165][ T4335] Bluetooth: hci1: command 0x040f tx timeout [ 36.176006][ T4335] Bluetooth: hci2: command 0x040f tx timeout [ 36.177080][ T4335] Bluetooth: hci0: command 0x040f tx timeout [ 36.274715][ T4822] xt_l2tp: invalid flags combination: 8 [ 36.367290][ T4837] netlink: 'syz.4.201': attribute type 5 has an invalid length. [ 36.368700][ T4837] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.201'. [ 36.464856][ T4853] lo speed is unknown, defaulting to 1000 [ 36.465904][ T4853] lo speed is unknown, defaulting to 1000 [ 36.471305][ T4853] lo speed is unknown, defaulting to 1000 [ 36.479524][ T4853] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 36.491171][ T4853] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 36.507744][ T4853] lo speed is unknown, defaulting to 1000 [ 36.509104][ T4853] lo speed is unknown, defaulting to 1000 [ 36.510334][ T4853] lo speed is unknown, defaulting to 1000 [ 36.511424][ T4853] lo speed is unknown, defaulting to 1000 [ 36.512717][ T4853] lo speed is unknown, defaulting to 1000 [ 36.785851][ T4852] XFS (loop1): Mounting V5 Filesystem [ 36.844924][ T4852] XFS (loop1): Ending clean mount [ 36.846660][ T4877] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.221 (4877) [ 36.860818][ T4852] XFS (loop1): Quotacheck needed: Please wait. [ 36.864748][ T4877] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 36.866410][ T4877] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 36.869818][ T4877] BTRFS info (device loop0): using free space tree [ 36.890031][ T4852] XFS (loop1): Quotacheck: Done. [ 36.974896][ T4328] XFS (loop1): Unmounting Filesystem [ 37.013117][ T4877] BTRFS info (device loop0): enabling ssd optimizations [ 37.057877][ T4877] BTRFS info (device loop0): resizing devid 73709551615 [ 37.059089][ T4877] BTRFS info (device loop0): resizer unable to find device 73709551615 [ 37.116526][ T4336] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 37.290084][ T4960] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 37.338382][ T4970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.251'. [ 37.339783][ T4970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.251'. [ 37.376511][ T4519] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4519) [ 37.551687][ T4993] FAT-fs (loop4): Directory bread(block 64) failed [ 37.552941][ T4993] FAT-fs (loop4): Directory bread(block 65) failed [ 37.573441][ T4993] FAT-fs (loop4): Directory bread(block 66) failed [ 37.574443][ T4993] FAT-fs (loop4): Directory bread(block 67) failed [ 37.575399][ T4993] FAT-fs (loop4): Directory bread(block 68) failed [ 37.576374][ T4993] FAT-fs (loop4): Directory bread(block 69) failed [ 37.577377][ T4993] FAT-fs (loop4): Directory bread(block 70) failed [ 37.578384][ T4993] FAT-fs (loop4): Directory bread(block 71) failed [ 37.579360][ T4993] FAT-fs (loop4): Directory bread(block 72) failed [ 37.580378][ T4993] FAT-fs (loop4): Directory bread(block 73) failed [ 37.627700][ T5002] IPv6: NLM_F_REPLACE set, but no existing node found! [ 37.649997][ T5004] 9pnet: Found fid 0 not clunked [ 37.764157][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 37.837765][ T5019] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.846565][ T5019] EXT4-fs error (device loop1): ext4_xattr_block_list:713: inode #15: comm syz.1.275: corrupted xattr block 33 [ 37.848779][ T5019] EXT4-fs (loop1): Remounting filesystem read-only [ 37.914665][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 37.938028][ T5033] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 37.979334][ T5041] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.049094][ T5054] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 38.195878][ T5073] UBIFS error (pid: 5073): cannot open "ubi:0", error -19 [ 38.263419][ T4337] Bluetooth: hci0: command 0x0419 tx timeout [ 38.263847][ T4335] Bluetooth: hci2: command 0x0419 tx timeout [ 38.264391][ T4337] Bluetooth: hci1: command 0x0419 tx timeout [ 38.265411][ T4335] Bluetooth: hci3: command 0x0419 tx timeout [ 38.266273][ T4337] Bluetooth: hci4: command 0x0419 tx timeout [ 38.318228][ T5052] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 38.321005][ T5052] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 38.352190][ T5052] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 38.368721][ T4377] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 38.369874][ T4377] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 38.409669][ T4377] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 39ms [ 38.411344][ T4377] gfs2: fsid=syz:syz.0: jid=0: Done [ 38.425292][ T5052] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 38.491192][ T5100] EXT2-fs (loop3): nobh option not supported [ 38.493152][ T5100] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 38.557764][ T5052] gfs2: fsid=syz:syz.0: found 1 quota changes [ 38.685864][ T4328] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 38.688263][ T4328] CPU: 1 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 38.688643][ T5125] netlink: 128 bytes leftover after parsing attributes in process `syz.3.320'. [ 38.689316][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 38.690598][ T5125] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 38.692099][ T4328] Call trace: [ 38.692107][ T4328] dump_backtrace+0x1c4/0x1f0 [ 38.692126][ T4328] show_stack+0x2c/0x3c [ 38.696271][ T4328] __dump_stack+0x30/0x40 [ 38.696896][ T4328] dump_stack_lvl+0xf4/0x15c [ 38.697615][ T4328] dump_stack+0x1c/0x5c [ 38.698230][ T4328] gfs2_assert_warn_i+0x16c/0x26c [ 38.698933][ T4328] gfs2_quota_cleanup+0x444/0x640 [ 38.699670][ T4328] gfs2_make_fs_ro+0x36c/0x444 [ 38.700359][ T4328] gfs2_put_super+0x1dc/0x744 [ 38.701095][ T4328] generic_shutdown_super+0x138/0x32c [ 38.701858][ T4328] kill_block_super+0x78/0xe0 [ 38.702555][ T4328] gfs2_kill_sb+0xc4/0xd8 [ 38.703283][ T4328] deactivate_locked_super+0xb4/0x128 [ 38.704081][ T4328] deactivate_super+0xe4/0x104 [ 38.704792][ T4328] cleanup_mnt+0x3a8/0x430 [ 38.705453][ T4328] __cleanup_mnt+0x20/0x30 [ 38.706134][ T4328] task_work_run+0x1f4/0x280 [ 38.706829][ T4328] do_notify_resume+0x20f8/0x2c84 [ 38.707586][ T4328] el0_svc+0x98/0x128 [ 38.708180][ T4328] el0t_64_sync_handler+0x84/0xf0 [ 38.708932][ T4328] el0t_64_sync+0x18c/0x190 [ 38.820681][ T5141] netlink: 'syz.3.327': attribute type 8 has an invalid length. [ 39.004974][ T5169] netlink: 'syz.3.341': attribute type 11 has an invalid length. [ 39.006267][ T5169] netlink: 220 bytes leftover after parsing attributes in process `syz.3.341'. [ 39.060665][ T5177] netlink: 60 bytes leftover after parsing attributes in process `syz.3.345'. [ 39.062086][ T5177] netlink: 60 bytes leftover after parsing attributes in process `syz.3.345'. [ 39.064467][ T5176] ieee802154 phy0 wpan0: encryption failed: -22 [ 39.099425][ T5181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.347'. [ 39.151334][ T5191] set_capacity_and_notify: 12 callbacks suppressed [ 39.151344][ T5191] loop3: detected capacity change from 0 to 64 [ 39.154453][ T5190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.351'. [ 39.166217][ T5188] netlink: 'syz.2.350': attribute type 10 has an invalid length. [ 39.301408][ T5188] team0: Device wg1 is of different type [ 39.391222][ T5223] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 39.397284][ T5223] CIFS mount error: No usable UNC path provided in device string! [ 39.397284][ T5223] [ 39.399210][ T5223] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 39.526858][ T5238] xt_connbytes: Forcing CT accounting to be enabled [ 39.532959][ T5238] Cannot find set identified by id 0 to match [ 39.687224][ T5268] cgroup: Unexpected value for 'cpuset_v2_mode' [ 39.744463][ T5276] netlink: 132 bytes leftover after parsing attributes in process `syz.3.394'. [ 39.814164][ T5286] netlink: 224 bytes leftover after parsing attributes in process `syz.3.399'. [ 39.863000][ T5292] loop3: detected capacity change from 0 to 64 [ 39.875969][ T5292] MINIX-fs: deleted inode referenced: 6 [ 39.877185][ T5292] MINIX-fs: deleted inode referenced: 6 [ 39.940194][ T5303] netlink: 'syz.3.406': attribute type 3 has an invalid length. [ 39.941441][ T5303] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.406'. [ 39.941491][ T5304] loop2: detected capacity change from 0 to 16 [ 39.965042][ T5304] erofs: (device loop2): mounted with root inode @ nid 36. [ 40.162730][ T5284] loop4: detected capacity change from 0 to 40427 [ 40.185814][ T5284] F2FS-fs (loop4): invalid crc value [ 40.196493][ T5284] F2FS-fs (loop4): Found nat_bits in checkpoint [ 40.235480][ T5284] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 40.237570][ T5284] F2FS-fs (loop4): Start checkpoint disabled! [ 40.253591][ T5284] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 40.356654][ T5314] loop2: detected capacity change from 0 to 32768 [ 40.358029][ T5314] XFS: noikeep mount option is deprecated. [ 40.358968][ T5314] XFS: ikeep mount option is deprecated. [ 40.369296][ T5353] No such timeout policy "syz1" [ 40.430687][ T5314] XFS (loop2): Mounting V5 Filesystem [ 40.471595][ T5314] XFS (loop2): Ending clean mount [ 40.521919][ T5374] netlink: 'syz.3.437': attribute type 21 has an invalid length. [ 40.523172][ T5374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 40.529454][ T5376] netlink: 'syz.4.438': attribute type 3 has an invalid length. [ 40.537893][ T5376] netlink: 'syz.4.438': attribute type 3 has an invalid length. [ 40.584003][ T4329] XFS (loop2): Unmounting Filesystem [ 40.637917][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 40.640220][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.647806][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.742892][ T5366] loop0: detected capacity change from 0 to 32768 [ 40.764932][ T5366] XFS (loop0): Mounting V5 Filesystem [ 40.775385][ T5366] XFS (loop0): Ending clean mount [ 40.776504][ T5400] loop3: detected capacity change from 0 to 512 [ 40.777885][ T5400] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.801602][ T5366] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 40.803014][ T5400] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 40.820441][ T5366] XFS (loop0): Corruption warning: Metadata has LSN (1:1536) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 40.822822][ T5366] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x8 [ 40.837712][ T5400] EXT4-fs (loop3): 1 truncate cleaned up [ 40.838666][ T5400] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 40.838670][ T5415] ipt_CLUSTERIP: no such interface pim6reg0 [ 40.844001][ T5366] XFS (loop0): Unmount and run xfs_repair [ 40.844938][ T5366] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 40.846177][ T5366] 00000000: 41 42 33 43 00 00 00 03 ff ff ff ff ff ff ff ff AB3C............ [ 40.847477][ T5366] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 06 00 ................ [ 40.855624][ T5366] 00000020: 00 00 00 00 00 00 42 cb 9f 91 9c b7 20 0a 10 1d ......B..... ... [ 40.857041][ T5366] 00000030: 00 00 00 00 83 85 41 d8 00 00 00 07 00 00 00 01 ......A......... [ 40.858441][ T5366] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 40.863358][ T5366] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.864917][ T5366] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.872368][ T5366] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.876965][ T5366] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x8 len 4 error 74 [ 40.886875][ T5366] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x584/0xae8 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 40.889324][ T5366] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 40.931510][ T4336] XFS (loop0): Unmounting Filesystem [ 40.940650][ T4341] EXT4-fs (loop3): unmounting filesystem. [ 41.087424][ T5438] ieee802154 phy0 wpan0: encryption failed: -22 [ 41.099152][ T5440] loop2: detected capacity change from 0 to 256 [ 41.262465][ T5464] snd_dummy snd_dummy.0: control 4:8201:0:syz0:1 is already present [ 41.502042][ T5494] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4336] was attempted by ""[5494] [ 41.566544][ T5504] loop4: detected capacity change from 0 to 512 [ 41.583856][ T5504] EXT2-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 41.585347][ T5504] EXT2-fs (loop4): DAX unsupported by block device. Turning off DAX. [ 41.587614][ T5504] EXT2-fs (loop4): error: revision level too high, forcing read-only mode [ 41.589643][ T5504] EXT2-fs (loop4): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=800a8] [ 41.637971][ T5514] loop1: detected capacity change from 0 to 256 [ 41.640646][ T5514] exfat: Deprecated parameter 'utf8' [ 41.641697][ T5514] exfat: Deprecated parameter 'namecase' [ 41.642724][ T4321] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.650070][ T5514] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 41.784381][ T5524] nvme nvme1: rdma connection establishment failed (-104) [ 41.837559][ T5535] netlink: 'syz.4.512': attribute type 1 has an invalid length. [ 41.839554][ T5535] netlink: 'syz.4.512': attribute type 2 has an invalid length. [ 41.883023][ T5543] netlink: 'syz.0.516': attribute type 5 has an invalid length. [ 42.085826][ T5462] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 42.266269][ T5547] XFS (loop3): Mounting V5 Filesystem [ 42.295393][ T5547] XFS (loop3): Ending clean mount [ 42.310048][ T5588] hfsplus: catalog record size mismatch (type 2, got 88, expected 248) [ 42.359374][ T5556] XFS (loop0): Mounting V5 Filesystem [ 42.374540][ T4341] XFS (loop3): Unmounting Filesystem [ 42.446936][ T5556] XFS (loop0): Ending clean mount [ 42.536801][ T4336] XFS (loop0): Unmounting Filesystem [ 42.562735][ T5624] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 42.569714][ T5620] nvme nvme1: rdma_resolve_addr failed (-19). [ 43.188887][ T5711] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 43.190348][ T5711] overlayfs: missing 'lowerdir' [ 43.293275][ T4345] Bluetooth: hci0: command 0x0c1a tx timeout [ 43.327506][ T5733] x_tables: unsorted underflow at hook 4 [ 43.373086][ T5741] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 43.399421][ T5741] vhci_hcd: invalid port number 250 [ 43.400218][ T5741] vhci_hcd: invalid port number 250 [ 43.611138][ T5782] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 43.658047][ T5787] cifs: Bad value for 'source' [ 43.965152][ T5789] XFS: noikeep mount option is deprecated. [ 44.001918][ T5842] cifs: Unknown parameter 'zsédN#ñ¦bš,ÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõžÊ [ 44.001918][ T5842] SÃȘØÈžZ§6ŸÂ' [ 44.012950][ T5789] XFS (loop3): Mounting V5 Filesystem [ 44.015053][ T5843] overlayfs: missing 'lowerdir' [ 44.087719][ T5789] XFS (loop3): Ending clean mount [ 44.098091][ T5789] XFS (loop3): Quotacheck needed: Please wait. [ 44.114402][ T5789] XFS (loop3): Quotacheck: Done. [ 44.194278][ T4341] XFS (loop3): Unmounting Filesystem [ 44.326261][ T5882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 44.577640][ T5878] set_capacity_and_notify: 5 callbacks suppressed [ 44.577650][ T5878] loop0: detected capacity change from 0 to 32768 [ 44.591028][ T5878] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 44.594496][ T5878] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 44.616647][ T5878] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 44.620271][ T22] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 44.621454][ T22] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 44.630309][ T5913] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 44.640895][ T27] audit: type=1326 audit(44.620:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.2.686" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855781a8 code=0x50000 [ 44.645711][ T27] audit: type=1326 audit(44.630:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.2.686" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855781a8 code=0x50000 [ 44.655562][ T27] audit: type=1326 audit(44.630:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.2.686" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855781a8 code=0x50000 [ 44.664769][ T22] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 43ms [ 44.666027][ T22] gfs2: fsid=syz:syz.0: jid=0: Done [ 44.666886][ T5878] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 44.670001][ T27] audit: type=1326 audit(44.630:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.2.686" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855781a8 code=0x50000 [ 44.688883][ T27] audit: type=1326 audit(44.630:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.2.686" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855781a8 code=0x50000 [ 44.699280][ T27] audit: type=1326 audit(44.630:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.2.686" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855781a8 code=0x50000 [ 44.708986][ T27] audit: type=1326 audit(44.630:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.2.686" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855781a8 code=0x50000 [ 44.720632][ T27] audit: type=1326 audit(44.630:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.2.686" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855781a8 code=0x50000 [ 44.727837][ T27] audit: type=1326 audit(44.630:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.2.686" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855781a8 code=0x50000 [ 44.737030][ T27] audit: type=1326 audit(44.630:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.2.686" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855781a8 code=0x50000 [ 44.770660][ T5922] __nla_validate_parse: 12 callbacks suppressed [ 44.770673][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 45.020438][ T5946] xt_recent: Unsupported userspace flags (000000de) [ 45.122212][ T5955] x_tables: duplicate underflow at hook 4 [ 45.173823][ T5886] delete_channel: no stack [ 45.211695][ T5971] loop1: detected capacity change from 0 to 128 [ 45.218889][ T5968] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 45.306231][ T5982] loop2: detected capacity change from 0 to 256 [ 45.307883][ T5982] FAT-fs (loop2): Unrecognized mount option "uni_xLate=1" or missing value [ 45.342040][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.723'. [ 45.352880][ T5989] sock: sock_timestamping_bind_phc: sock not bind to device [ 45.381258][ T5993] process 'syz.2.725' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 45.420691][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 45.459860][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.730'. [ 45.541286][ T6017] Unknown vers= option specified: 3.0/ [ 45.541286][ T6017] [ 45.542563][ T6017] CIFS: VFS: Unknown vers= option specified: 3.0/ [ 45.652506][ T6026] loop3: detected capacity change from 0 to 4096 [ 45.659877][ T6026] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.671670][ T6026] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.678764][ T6026] EXT4-fs (loop3): unmounting filesystem. [ 45.737041][ T4318] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 45.782754][ T6004] loop1: detected capacity change from 0 to 32768 [ 45.845010][ T6004] XFS (loop1): Mounting V5 Filesystem [ 45.846650][ T6057] netlink: 'syz.2.748': attribute type 21 has an invalid length. [ 45.847803][ T6057] netlink: 128 bytes leftover after parsing attributes in process `syz.2.748'. [ 45.849289][ T6057] netlink: 3 bytes leftover after parsing attributes in process `syz.2.748'. [ 45.929501][ T6004] XFS (loop1): Ending clean mount [ 46.001518][ T6082] netlink: 32 bytes leftover after parsing attributes in process `syz.4.760'. [ 46.004132][ T6082] netlink: 32 bytes leftover after parsing attributes in process `syz.4.760'. [ 46.023217][ T4328] XFS (loop1): Unmounting Filesystem [ 46.130821][ T6096] loop4: detected capacity change from 0 to 1024 [ 46.174467][ T6102] loop0: detected capacity change from 0 to 2048 [ 46.178622][ T6104] loop2: detected capacity change from 0 to 256 [ 46.219893][ T4883] hfsplus: b-tree write err: -5, ino 25 [ 46.220999][ T4883] hfsplus: b-tree write err: -5, ino 4 [ 46.221899][ T4883] hfsplus: b-tree write err: -5, ino 2 [ 46.233753][ T6105] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 46.268445][ T6102] syz.0.770: attempt to access beyond end of device [ 46.268445][ T6102] loop0: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 46.270634][ T6102] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 46.272019][ T6102] syz.0.770: attempt to access beyond end of device [ 46.272019][ T6102] loop0: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 46.296086][ T6102] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 46.297524][ T6102] NILFS (loop0): error -5 truncating bmap (ino=16) [ 46.387729][ T6100] loop3: detected capacity change from 0 to 32768 [ 46.409516][ T6100] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.769 (6100) [ 46.420751][ T6100] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 46.422259][ T6100] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 46.423977][ T6100] BTRFS info (device loop3): setting nodatasum [ 46.424977][ T6100] BTRFS info (device loop3): force zlib compression, level 3 [ 46.426113][ T6100] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 46.427588][ T6100] BTRFS info (device loop3): use lzo compression, level 0 [ 46.428613][ T6100] BTRFS info (device loop3): turning on flush-on-commit [ 46.439596][ T6100] BTRFS info (device loop3): enabling auto defrag [ 46.440731][ T6100] BTRFS info (device loop3): max_inline at 4096 [ 46.441687][ T6100] BTRFS info (device loop3): force zlib compression, level 3 [ 46.442794][ T6100] BTRFS info (device loop3): using free space tree [ 46.534652][ T6142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.784'. [ 46.559863][ T6107] loop4: detected capacity change from 0 to 32768 [ 46.611028][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.787'. [ 46.621247][ T6107] XFS (loop4): Mounting V5 Filesystem [ 46.636938][ T6100] BTRFS info (device loop3): enabling ssd optimizations [ 46.646049][ T6107] XFS (loop4): Ending clean mount [ 46.685178][ T4341] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 46.729884][ T6151] ntfs3: loop1: ino=3, Correct links count -> 2. [ 46.841504][ T4334] XFS (loop4): Unmounting Filesystem [ 46.850997][ T6185] EXT2-fs (loop3): (no)acl options not supported [ 46.854710][ T6185] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 46.887771][ T6185] EXT2-fs (loop3): error: ext2_get_inode: bad inode number: 15 [ 47.316074][ T6239] device lo entered promiscuous mode [ 47.317336][ T6239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 47.514493][ T6259] ntfs: volume version 3.1. [ 47.654833][ T6288] netlink: 'syz.2.843': attribute type 1 has an invalid length. [ 47.704920][ T6293] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 47.971875][ T6332] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 48.149387][ T6351] xt_bpf: check failed: parse error [ 48.367054][ T6343] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 48.368214][ T6343] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 48.369601][ T6343] F2FS-fs (loop3): build fault injection attr: rate: 64, type: 0x3ffff [ 48.380811][ T6343] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x5 [ 48.383995][ T6343] F2FS-fs (loop3): invalid crc value [ 48.388232][ T6343] F2FS-fs (loop3): Found nat_bits in checkpoint [ 48.399499][ T6343] F2FS-fs (loop3): Start checkpoint disabled! [ 48.403569][ T6343] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 48.404639][ T6343] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 48.483947][ T4883] kworker/u4:6: attempt to access beyond end of device [ 48.483947][ T4883] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 48.540074][ T6385] delete_channel: no stack [ 48.696189][ T6396] device geneve1 entered promiscuous mode [ 48.812949][ T6410] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 48.876005][ T11] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 48.877309][ T4334] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 48.878443][ T4334] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 48.879947][ T4334] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 48.885507][ T11] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 48.886890][ T4334] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 48.961622][ T6400] XFS (loop2): Mounting V5 Filesystem [ 49.055536][ T6400] XFS (loop2): Ending clean mount [ 49.058772][ T6400] XFS (loop2): Quotacheck needed: Please wait. [ 49.073651][ T6400] XFS (loop2): Quotacheck: Done. [ 49.172430][ T4329] XFS (loop2): Unmounting Filesystem [ 49.452013][ T6453] XFS (loop4): Mounting V5 Filesystem [ 49.506880][ T6453] XFS (loop4): Ending clean mount [ 49.592687][ T4334] XFS (loop4): Unmounting Filesystem [ 49.653273][ T6476] set_capacity_and_notify: 11 callbacks suppressed [ 49.653353][ T6476] loop3: detected capacity change from 0 to 32768 [ 49.658561][ T6476] [ 49.658561][ T6476] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 49.658561][ T6476] [ 49.680982][ T6501] netlink: 'syz.0.939': attribute type 5 has an invalid length. [ 49.718961][ T4341] [ 49.718961][ T4341] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 49.718961][ T4341] [ 49.721134][ T4341] [ 49.721134][ T4341] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 49.721134][ T4341] [ 49.839957][ T6524] __nla_validate_parse: 2 callbacks suppressed [ 49.839967][ T6524] netlink: 48 bytes leftover after parsing attributes in process `syz.0.951'. [ 50.033942][ T27] kauditd_printk_skb: 88 callbacks suppressed [ 50.033953][ T27] audit: type=1400 audit(50.004:85): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3AFFFFFFFF pid=6544 comm="syz.1.959" [ 50.081689][ T6555] loop3: detected capacity change from 0 to 1024 [ 50.083691][ T6550] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 50.111519][ T6555] hfsplus: can't free extent [ 50.135037][ T6564] loop4: detected capacity change from 0 to 64 [ 50.443998][ T6609] tmpfs: Bad value for 'mpol' [ 50.557209][ T6630] loop0: detected capacity change from 0 to 256 [ 50.637446][ T6640] fuse: blksize only supported for fuseblk [ 50.642635][ T6644] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1007'. [ 50.792061][ T6659] loop4: detected capacity change from 0 to 4096 [ 50.794835][ T6659] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 50.806494][ T6665] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 50.833091][ T6670] loop3: detected capacity change from 0 to 256 [ 50.924762][ T6685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1027'. [ 50.932557][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1026'. [ 51.043596][ T6694] loop2: detected capacity change from 0 to 2048 [ 51.049963][ T6694] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 51.079176][ T6704] netlink: 'syz.4.1037': attribute type 15 has an invalid length. [ 51.142695][ T6710] deleting an unspecified loop device is not supported. [ 51.209812][ T6718] usb usb8: usbfs: process 6718 (syz.2.1042) did not claim interface 0 before use [ 51.292878][ T6692] loop1: detected capacity change from 0 to 32768 [ 51.319849][ T6692] (syz.1.1031,6692,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 51.331981][ T6692] (syz.1.1031,6692,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 51.357139][ T6692] JBD2: Ignoring recovery information on journal [ 51.433794][ T6748] loop3: detected capacity change from 0 to 16 [ 51.435204][ T6748] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 51.461822][ T6692] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 51.491832][ T9] ocfs2: Finishing quota recovery on device (7,1) for slot 0 [ 51.698319][ T6774] loop4: detected capacity change from 0 to 4096 [ 51.701755][ T4328] ocfs2: Unmounting device (7,1) on (node local) [ 51.730823][ T6774] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 51.825766][ T4883] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 51.826953][ T4334] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 51.827993][ T4334] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 51.829235][ T4334] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 51.830237][ T53] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 51.843658][ T4334] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 51.905912][ T6804] xt_policy: neither incoming nor outgoing policy selected [ 52.066798][ T6827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 52.069356][ T6176] lo speed is unknown, defaulting to 1000 [ 52.076289][ T6828] erofs: (device loop0): mounted with root inode @ nid 36. [ 52.097966][ T6828] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -19 in[52, 4044] out[2639] [ 52.102310][ T6828] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 52.131119][ T6838] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 52.155263][ T6830] syz.4.1095: attempt to access beyond end of device [ 52.155263][ T6830] loop4: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 52.157459][ T6830] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15) [ 52.159048][ T6830] syz.4.1095: attempt to access beyond end of device [ 52.159048][ T6830] loop4: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 52.168252][ T6830] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15) [ 52.169473][ T6830] NILFS (loop4): error -5 truncating bmap (ino=16) [ 52.398051][ T6867] netlink: 'syz.3.1112': attribute type 3 has an invalid length. [ 52.452273][ T6877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1117'. [ 52.534582][ T6887] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 52.669314][ T6912] x_tables: duplicate entry at hook 3 [ 52.712374][ T6910] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 52.750278][ T6910] ntfs3: loop0: failed to convert "c46c" to iso8859-5 [ 52.941451][ T6945] netlink: 'syz.4.1151': attribute type 1 has an invalid length. [ 52.993127][ T6951] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 52.994473][ T6951] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.999892][ T6951] vhci_hcd vhci_hcd.0: Device attached [ 53.011083][ T6952] vhci_hcd: connection closed [ 53.012690][ T11] vhci_hcd: stop threads [ 53.014766][ T11] vhci_hcd: release socket [ 53.015496][ T11] vhci_hcd: disconnect device [ 53.626625][ T7003] Zero length message leads to an empty skb [ 53.730887][ T6927] F2FS-fs (loop2): invalid crc value [ 53.779846][ T7011] hfsplus: trying to free free bnode 0(1) [ 53.787689][ T6927] F2FS-fs (loop2): Found nat_bits in checkpoint [ 53.836744][ T6927] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 53.841085][ T6927] F2FS-fs (loop2): Corrupted max_depth of 3: 16842753 [ 53.845748][ T53] hfsplus: b-tree write err: -5, ino 25 [ 53.846816][ T53] hfsplus: b-tree write err: -5, ino 4 [ 53.847731][ T53] hfsplus: b-tree write err: -5, ino 2 [ 53.850456][ T6959] F2FS-fs (loop3): Wrong NAT boundary, start(2560) end(5) blocks(1024) [ 53.851723][ T6959] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 53.886469][ T6927] F2FS-fs (loop2): dec_valid_node_count: inconsistent i_blocks, ino:7, iblocks:0 [ 53.920214][ T6959] F2FS-fs (loop3): Found nat_bits in checkpoint [ 53.937086][ T6959] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 53.938425][ T6959] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 53.975645][ T7025] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 53.998211][ T7025] ntfs3: loop1: Failed to load $Extend. [ 54.206850][ T7061] netlink: 'syz.0.1204': attribute type 4 has an invalid length. [ 54.973529][ T7180] netlink: 'syz.2.1259': attribute type 5 has an invalid length. [ 55.088192][ T7193] set_capacity_and_notify: 11 callbacks suppressed [ 55.088201][ T7193] loop0: detected capacity change from 0 to 2048 [ 55.120468][ T7193] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 55.388619][ T7233] loop4: detected capacity change from 0 to 128 [ 55.512601][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1294'. [ 55.688366][ T7279] loop4: detected capacity change from 0 to 256 [ 55.733155][ T7283] loop2: detected capacity change from 0 to 1764 [ 55.882323][ T7307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1323'. [ 55.895822][ T7313] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1325'. [ 55.904790][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1325'. [ 55.938069][ T7317] loop0: detected capacity change from 0 to 256 [ 56.107637][ T7338] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 56.139485][ T7299] loop2: detected capacity change from 0 to 32768 [ 56.204197][ T7336] syz.3.1336 (7336): drop_caches: 2 [ 56.284180][ T7299] XFS (loop2): Mounting V5 Filesystem [ 56.307352][ T7367] usb usb8: usbfs: process 7367 (syz.4.1347) did not claim interface 0 before use [ 56.353020][ T7372] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 56.360455][ T7299] XFS (loop2): Ending clean mount [ 56.399158][ T4329] XFS (loop2): Unmounting Filesystem [ 56.536243][ T7378] loop1: detected capacity change from 0 to 32768 [ 56.556753][ T7378] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 56.556753][ T7378] [ 56.633089][ T4386] read_mapping_page failed! [ 56.639384][ T4386] ERROR: (device loop1): txAbort: [ 56.639384][ T4386] [ 56.641519][ T4386] jfs_write_inode: jfs_commit_inode failed! [ 56.864209][ T7434] loop4: detected capacity change from 0 to 512 [ 56.870273][ T7434] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 56.871954][ T7434] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 56.873490][ T7434] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 56.878424][ T7434] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 56.879656][ T7434] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 56.881728][ T7434] EXT4-fs (loop4): orphan cleanup on readonly fs [ 56.887051][ T7434] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1378: bg 0: block 34: padding at end of block bitmap is not set [ 56.912159][ T7434] Quota error (device loop4): write_blk: dquota write failed [ 56.948602][ T7434] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 56.950211][ T7434] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.1378: Failed to acquire dquot type 1 [ 56.982865][ T7448] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 56.999988][ T7434] EXT4-fs (loop4): 1 truncate cleaned up [ 57.036615][ T7434] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 57.111319][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 57.130622][ T7457] loop0: detected capacity change from 0 to 4096 [ 57.262909][ T7481] loop0: detected capacity change from 0 to 16 [ 57.264946][ T7481] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 57.278677][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1401'. [ 57.353925][ T7488] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 57.383156][ T7488] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 57.438869][ T7498] EXT4-fs: Ignoring removed nobh option [ 57.477453][ T7498] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.479850][ T7498] EXT4-fs warning (device loop4): ext4_xattr_inode_get:492: inode #11: comm syz.4.1409: ea_inode file size=1535 entry size=6 [ 57.482546][ T7498] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 57.490514][ T7498] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.1409: corrupted inode contents [ 57.496069][ T7498] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #15: comm syz.4.1409: mark_inode_dirty error [ 57.498295][ T7498] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.1409: corrupted inode contents [ 57.500554][ T7498] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2947: inode #15: comm syz.4.1409: mark_inode_dirty error [ 57.526595][ T7498] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2950: inode #15: comm syz.4.1409: mark inode dirty (error -117) [ 57.540158][ T7498] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 57.541668][ T7498] EXT4-fs (loop4): 1 orphan inode deleted [ 57.542450][ T7498] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 57.638312][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 57.981346][ T7548] ntfs3: loop0: mft corrupted [ 57.982270][ T7548] ntfs3: loop0: Failed to load $MFT. [ 58.124875][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 58.144794][ T7575] EXT4-fs: Ignoring removed bh option [ 58.186236][ T7575] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 58.188541][ T7575] EXT4-fs error (device loop2): __ext4_remount:6650: comm syz.2.1441: Abort forced by user [ 58.190698][ T7575] EXT4-fs (loop2): Remounting filesystem read-only [ 58.190717][ T7575] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 58.231371][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 58.349652][ T7604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1455'. [ 58.351190][ T7604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1455'. [ 58.395389][ T7610] CIFS: Attempting to mount \\127.0.0.1\share [ 58.412652][ T7610] CIFS: VFS: Error connecting to socket. Aborting operation. [ 58.421657][ T7610] CIFS: VFS: cifs_mount failed w/return code = -111 [ 58.452554][ T7618] delete_channel: no stack [ 58.591483][ T7608] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1458 (7608) [ 58.607142][ T7608] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 58.610116][ T7608] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 58.612686][ T7608] BTRFS info (device loop4): setting nodatasum [ 58.615044][ T7608] BTRFS info (device loop4): force zlib compression, level 3 [ 58.617242][ T7608] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 58.619511][ T7608] BTRFS info (device loop4): use lzo compression, level 0 [ 58.621859][ T7608] BTRFS info (device loop4): turning on flush-on-commit [ 58.623464][ T7608] BTRFS info (device loop4): enabling auto defrag [ 58.625768][ T7608] BTRFS info (device loop4): max_inline at 4096 [ 58.627954][ T7608] BTRFS info (device loop4): using free space tree [ 58.666352][ T7643] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 58.667484][ T7643] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.672205][ T7643] vhci_hcd vhci_hcd.0: Device attached [ 58.679601][ T7644] vhci_hcd: connection closed [ 58.679756][ T4883] vhci_hcd: stop threads [ 58.681258][ T4883] vhci_hcd: release socket [ 58.681953][ T4883] vhci_hcd: disconnect device [ 58.776594][ T7608] BTRFS info (device loop4): enabling ssd optimizations [ 58.823219][ T4334] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 58.832022][ T7674] binder: 7673 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 58.832034][ T7674] binder: 7673:7674 ioctl c018620c 20000240 returned -22 [ 58.999520][ T7691] EXT4-fs: Ignoring removed orlov option [ 59.000482][ T7691] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.027001][ T7691] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 59.029889][ T7691] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1489: attempt to clear invalid blocks 2 len 1 [ 59.034001][ T7691] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 59.046996][ T7691] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1489: invalid indirect mapped block 1819239214 (level 0) [ 59.049385][ T7691] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1489: invalid indirect mapped block 1819239214 (level 1) [ 59.051845][ T7691] EXT4-fs (loop4): 1 truncate cleaned up [ 59.052796][ T7691] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 59.081184][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 59.083696][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'. [ 59.099276][ T7700] device gtp0 entered promiscuous mode [ 59.259133][ T7722] EXT2-fs (loop2): nobh option not supported [ 59.270056][ T7722] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 59.276193][ T7717] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 59.287026][ T7717] ntfs3: loop4: Failed to load $Extend. [ 59.476872][ T7750] binder: 7747:7750 ioctl c00c6211 ffffffffffffffff returned -14 [ 59.636929][ T7770] EXT4-fs: Ignoring removed bh option [ 59.650488][ T7775] CIFS mount error: No usable UNC path provided in device string! [ 59.650488][ T7775] [ 59.652213][ T7775] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 59.662976][ T7770] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 59.669253][ T7770] EXT4-fs error (device loop0): __ext4_remount:6650: comm syz.0.1526: Abort forced by user [ 59.671290][ T7770] EXT4-fs (loop0): Remounting filesystem read-only [ 59.672256][ T7770] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 59.684846][ T4336] EXT4-fs (loop0): unmounting filesystem. [ 59.762205][ T7785] hfsplus: trying to free free bnode 0(1) [ 59.807734][ T11] hfsplus: b-tree write err: -5, ino 25 [ 59.808995][ T11] hfsplus: b-tree write err: -5, ino 4 [ 59.809906][ T11] hfsplus: b-tree write err: -5, ino 2 [ 59.899045][ T7808] EXT4-fs: Ignoring removed bh option [ 59.958563][ T7808] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 59.967554][ T7816] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dea2b4, utbl_chksum : 0xe619d30d) [ 59.993099][ T7808] EXT4-fs error (device loop3): __ext4_remount:6650: comm syz.3.1544: Abort forced by user [ 60.003593][ T7808] EXT4-fs (loop3): Remounting filesystem read-only [ 60.004575][ T7808] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 60.077261][ T4341] EXT4-fs (loop3): unmounting filesystem. [ 60.113502][ T7825] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 60.115025][ T7825] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 60.155213][ T7827] set_capacity_and_notify: 13 callbacks suppressed [ 60.155225][ T7827] loop3: detected capacity change from 0 to 2048 [ 60.167125][ T7827] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 60.225524][ T7803] loop4: detected capacity change from 0 to 32768 [ 60.241912][ T7803] __jfs_setxattr: xattr_size = 2175, new_size = 15199 [ 60.361573][ T7859] trusted_key: encrypted_key: insufficient parameters specified [ 60.535222][ T7891] netlink: 'syz.4.1585': attribute type 21 has an invalid length. [ 60.536572][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1585'. [ 60.575440][ T7897] loop2: detected capacity change from 0 to 128 [ 60.576798][ T7897] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.595379][ T7897] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 60.597169][ T7899] @0Ù: renamed from virt_wifi0 [ 60.619176][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 61.016503][ T7923] loop0: detected capacity change from 0 to 32768 [ 61.032738][ T7923] (syz.0.1600,7923,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 61.043319][ T7923] (syz.0.1600,7923,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 61.074973][ T7923] JBD2: Ignoring recovery information on journal [ 61.088766][ T7964] loop4: detected capacity change from 0 to 2048 [ 61.148588][ T7964] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.168901][ T7923] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 61.241735][ T7973] sctp: [Deprecated]: syz.4.1619 (pid 7973) Use of struct sctp_assoc_value in delayed_ack socket option. [ 61.241735][ T7973] Use struct sctp_sack_info instead [ 61.250530][ T7969] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 61.258431][ T7974] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 61.260267][ T7974] overlayfs: missing 'lowerdir' [ 61.268327][ T4336] ocfs2: Unmounting device (7,0) on (node local) [ 61.656578][ T8019] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1641'. [ 61.663174][ T8019] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1641'. [ 61.678907][ T8022] loop0: detected capacity change from 0 to 512 [ 61.686036][ T8022] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 61.698101][ T8022] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 61.699622][ T8022] EXT4-fs (loop0): orphan cleanup on readonly fs [ 61.700599][ T8022] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.1643: bad orphan inode 3 [ 61.719893][ T8022] EXT4-fs (loop0): Remounting filesystem read-only [ 61.720098][ T8026] loop3: detected capacity change from 0 to 2048 [ 61.742283][ T8022] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 61.759455][ T8022] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1643: dx entry: limit 0 != root limit 125 [ 61.792705][ T8022] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1643: Corrupt directory, running e2fsck is recommended [ 61.800340][ T8026] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 61.804817][ T8026] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 61.823893][ T4341] EXT4-fs (loop3): unmounting filesystem. [ 61.829637][ T4336] EXT4-fs (loop0): unmounting filesystem. [ 61.860125][ T8037] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 61.864630][ T8038] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1649'. [ 61.929010][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1654'. [ 62.309422][ T8106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1683'. [ 62.310935][ T8106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1683'. [ 62.312235][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1683'. [ 62.457450][ T8122] device lo left promiscuous mode [ 62.550745][ T8105] loop1: detected capacity change from 0 to 32768 [ 62.557846][ T8105] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1682 (8105) [ 62.578918][ T8105] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 62.581866][ T8105] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 62.584170][ T8105] BTRFS info (device loop1): setting nodatasum [ 62.586479][ T8105] BTRFS info (device loop1): force zlib compression, level 3 [ 62.588799][ T8105] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 62.591488][ T8105] BTRFS info (device loop1): use lzo compression, level 0 [ 62.592615][ T8105] BTRFS info (device loop1): turning on flush-on-commit [ 62.596165][ T8105] BTRFS info (device loop1): enabling auto defrag [ 62.597167][ T8105] BTRFS info (device loop1): max_inline at 4096 [ 62.599224][ T8105] BTRFS info (device loop1): using free space tree [ 62.701763][ T8115] loop3: detected capacity change from 0 to 32768 [ 62.710639][ T8115] (syz.3.1689,8115,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 62.723147][ T8105] BTRFS info (device loop1): enabling ssd optimizations [ 62.730405][ T8115] (syz.3.1689,8115,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 62.763183][ T8115] JBD2: Ignoring recovery information on journal [ 62.801953][ T4328] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 62.810056][ T8115] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 62.832747][ T8173] binder: 8172:8173 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 62.918749][ T4341] ocfs2: Unmounting device (7,3) on (node local) [ 62.924916][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'. [ 62.964206][ T8183] loop4: detected capacity change from 0 to 512 [ 62.980476][ T8188] device veth1 entered promiscuous mode [ 63.036128][ T8183] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 63.037616][ T8183] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 63.038952][ T8183] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #13: comm syz.4.1711: iget: bad i_size value: 12154757448730 [ 63.049872][ T8188] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 63.052615][ T8183] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1711: couldn't read orphan inode 13 (err -117) [ 63.066771][ T8183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 63.079759][ T8193] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000f0b) [ 63.081205][ T8193] FAT-fs (loop2): Filesystem has been set read-only [ 63.102024][ T8193] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000f0b) [ 63.111595][ T8193] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000f0b) [ 63.156672][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 63.223573][ T8207] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 63.244901][ T8207] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 63.789395][ T8266] dlm: Unknown command passed to DLM device : 3 [ 63.789395][ T8266] [ 63.946146][ T8231] syz.4.1731 (8231): drop_caches: 2 [ 63.948478][ T4883] read_mapping_page failed! [ 63.949185][ T4883] ERROR: (device loop3): txAbort: [ 63.949185][ T4883] [ 63.953070][ T4883] jfs_write_inode: jfs_commit_inode failed! [ 63.970023][ T8256] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 63.972457][ T8256] JBD2: Ignoring recovery information on journal [ 64.009269][ T8256] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 64.138181][ T4328] ocfs2: Unmounting device (7,1) on (node local) [ 64.156118][ T8289] befs: (loop3): No write support. Marking filesystem read-only [ 64.161511][ T8289] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.170873][ T8289] befs: (loop3): unable to read superblock [ 64.268774][ T8303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1769'. [ 64.418813][ T8320] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 64.435025][ T8320] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 64.454245][ T8320] EXT4-fs (loop1): 1 truncate cleaned up [ 64.457609][ T8320] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.462026][ T8320] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #2: block 4: comm syz.1.1776: lblock 0 mapped to illegal pblock 4 (length 1) [ 64.486955][ T8301] XFS: attr2 mount option is deprecated. [ 64.498040][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.499168][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.504985][ T8320] EXT4-fs (loop1): Remounting filesystem read-only [ 64.557581][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 64.618717][ T8329] ntfs3: loop3: Failed to load $Extend. [ 64.625941][ T8301] XFS (loop2): Mounting V5 Filesystem [ 64.660435][ T8329] ntfs3: loop3: ino=5, "/" directory corrupted [ 64.702148][ T8301] XFS (loop2): Ending clean mount [ 64.711881][ T8301] XFS (loop2): Corruption warning: Metadata has LSN (1:256) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 64.714437][ T8301] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x50/0x108, xfs_finobt block 0x10 [ 64.716065][ T8301] XFS (loop2): Unmount and run xfs_repair [ 64.716858][ T8301] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 64.717960][ T8301] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 64.719244][ T8301] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 01 00 ................ [ 64.720522][ T8301] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 64.726048][ T8343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.784881][ T8357] netlink: 'syz.4.1791': attribute type 1 has an invalid length. [ 64.786040][ T8301] 00000030: 00 00 00 00 66 dd 03 89 00 00 18 00 00 00 40 37 ....f.........@7 [ 64.786089][ T8301] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 64.788709][ T8301] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 64.789934][ T8301] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 64.791476][ T8301] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 64.792945][ T8301] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x10 len 4 error 74 [ 64.814084][ T8301] XFS (loop2): Failed to initialize disk quotas. [ 64.848847][ T8301] XFS (loop2): Corruption warning: Metadata has LSN (1:256) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 64.851186][ T8301] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x50/0x108, xfs_finobt block 0x10 [ 64.860848][ T8301] XFS (loop2): Unmount and run xfs_repair [ 64.861753][ T8301] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 64.862834][ T8301] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 64.873954][ T8301] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 01 00 ................ [ 64.875362][ T8301] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 64.876860][ T8301] 00000030: 00 00 00 00 66 dd 03 89 00 00 18 00 00 00 40 37 ....f.........@7 [ 64.878243][ T8301] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 64.879600][ T8301] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 64.880866][ T8301] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 64.882295][ T8301] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 64.895784][ T8301] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x10 len 4 error 74 [ 64.935107][ T4329] XFS (loop2): Unmounting Filesystem [ 64.970384][ T8374] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 65.003347][ T8374] ntfs: (device loop4): parse_options(): The disable_sparse option requires a boolean argument. [ 65.048292][ T4318] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 65.201604][ T8402] set_capacity_and_notify: 9 callbacks suppressed [ 65.201613][ T8402] loop3: detected capacity change from 0 to 128 [ 65.345447][ T8416] loop2: detected capacity change from 0 to 512 [ 65.348779][ T8416] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.353099][ T8416] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.359398][ T8420] tmpfs: Bad value for 'size' [ 65.371216][ T8416] EXT4-fs (loop2): 1 orphan inode deleted [ 65.372231][ T8416] EXT4-fs (loop2): 1 truncate cleaned up [ 65.373033][ T8416] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 65.401501][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 65.433988][ T8428] loop1: detected capacity change from 0 to 256 [ 65.510276][ T8435] netlink: 'syz.1.1828': attribute type 21 has an invalid length. [ 65.511627][ T8435] IPv6: NLM_F_CREATE should be specified when creating new route [ 65.513949][ T8435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.515084][ T8435] IPv6: NLM_F_CREATE should be set when creating new route [ 65.516264][ T8435] IPv6: NLM_F_CREATE should be set when creating new route [ 65.517348][ T8435] IPv6: NLM_F_CREATE should be set when creating new route [ 65.599006][ T8448] No such timeout policy "syz1" [ 65.687463][ T8460] loop0: detected capacity change from 0 to 512 [ 65.696084][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 65.697769][ T8461] __nla_validate_parse: 4 callbacks suppressed [ 65.697779][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1843'. [ 65.725732][ T8460] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 65.736615][ T8467] comedi: No check for data length of config insn id 35 is implemented [ 65.738007][ T8467] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 65.739491][ T8467] comedi: Assuming n=15 is correct [ 65.787210][ T4336] EXT4-fs (loop0): unmounting filesystem. [ 65.841975][ T8479] loop0: detected capacity change from 0 to 2048 [ 65.850813][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'. [ 65.859110][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'. [ 65.859199][ T8479] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.860341][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'. [ 65.862923][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'. [ 65.883611][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'. [ 65.885020][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'. [ 65.886295][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'. [ 65.887673][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'. [ 65.888989][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'. [ 65.998770][ T8503] loop3: detected capacity change from 0 to 512 [ 66.000130][ T8503] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.001214][ T8503] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.015868][ T8503] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 66.034560][ T8503] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 66.035867][ T8503] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 66.070119][ T8513] cgroup: name respecified [ 66.072083][ T8503] EXT4-fs (loop3): 1 truncate cleaned up [ 66.073008][ T8503] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 66.120408][ T8503] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 4: comm syz.3.1861: lblock 0 mapped to illegal pblock 4 (length 1) [ 66.200051][ T4341] EXT4-fs (loop3): unmounting filesystem. [ 66.329189][ T8549] loop0: detected capacity change from 0 to 512 [ 66.330494][ T8549] EXT4-fs: Ignoring removed orlov option [ 66.370883][ T8548] loop2: detected capacity change from 0 to 4096 [ 66.377141][ T8549] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 66.412268][ T8549] EXT4-fs error (device loop0): ext4_get_verity_descriptor_location:337: inode #15: comm syz.0.1883: verity file corrupted; can't find descriptor [ 66.416040][ T8558] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.417530][ T8560] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 66.431714][ T8549] EXT4-fs (loop0): Remounting filesystem read-only [ 66.432948][ T8549] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size [ 66.527094][ T4336] EXT4-fs (loop0): unmounting filesystem. [ 66.601757][ T8573] netlink: 'syz.1.1896': attribute type 21 has an invalid length. [ 66.705085][ T8592] loop4: detected capacity change from 0 to 1024 [ 66.706438][ T8592] EXT4-fs: Ignoring removed bh option [ 66.732693][ T8594] loop0: detected capacity change from 0 to 4096 [ 66.737560][ T8594] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.740635][ T8594] EXT4-fs (loop0): Test dummy encryption mode enabled [ 66.751015][ T8592] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 66.768435][ T8594] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 66.833411][ T8584] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 66.833411][ T8584] [ 66.835415][ T8584] ERROR: (device loop2): remounting filesystem as read-only [ 66.860723][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 66.863950][ T4336] EXT4-fs (loop0): unmounting filesystem. [ 67.000758][ T8628] jffs2: notice: (8628) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 67.366610][ T8686] xt_TCPMSS: Only works on TCP SYN packets [ 67.642610][ T8719] syz.2.1964 (8719): drop_caches: 2 [ 67.709696][ T8683] XFS (loop1): Mounting V5 Filesystem [ 67.761350][ T8683] XFS (loop1): Ending clean mount [ 67.794241][ T8741] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 67.840547][ T8747] netlink: 'syz.0.1976': attribute type 5 has an invalid length. [ 67.843769][ T4328] XFS (loop1): Unmounting Filesystem [ 67.997168][ T8771] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 68.024412][ T8773] device erspan1 entered promiscuous mode [ 68.205928][ T8791] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 68.213019][ T8791] ntfs3: loop4: Failed to load $MFT. [ 68.286519][ T4502] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.327441][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 68.335979][ T8811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 68.673703][ T8845] netlink: 'syz.4.2023': attribute type 1 has an invalid length. [ 68.766648][ T8855] netlink: 'syz.3.2028': attribute type 30 has an invalid length. [ 69.023675][ T8877] xt_hashlimit: max too large, truncated to 1048576 [ 69.037052][ T8873] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 69.085268][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 69.208038][ T8890] xt_policy: too many policy elements [ 69.229342][ T8807] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(512) [ 69.230704][ T8807] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 69.233839][ T8807] F2FS-fs (loop2): invalid crc value [ 69.247307][ T8807] F2FS-fs (loop2): Found nat_bits in checkpoint [ 69.257627][ T8861] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 69.259160][ T8861] XFS (loop1): Mounting V5 Filesystem [ 69.297740][ T8861] XFS (loop1): Ending clean mount [ 69.312966][ T8803] F2FS-fs (loop0): Found nat_bits in checkpoint [ 69.314085][ T8861] XFS (loop1): Quotacheck needed: Please wait. [ 69.320096][ T8807] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 69.321307][ T8807] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 69.331382][ T8861] XFS (loop1): Quotacheck: Done. [ 69.350440][ T8908] device team0 entered promiscuous mode [ 69.351581][ T8803] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 69.360555][ T8908] device team_slave_0 entered promiscuous mode [ 69.370906][ T8908] device team_slave_1 entered promiscuous mode [ 69.372533][ T8803] F2FS-fs (loop0): list inode (7) has corrupted xattr [ 69.446852][ T4328] XFS (loop1): Unmounting Filesystem [ 69.615187][ T114] cfg80211: failed to load regulatory.db [ 69.756919][ T8947] erofs: (device loop2): mounted with root inode @ nid 36. [ 69.767457][ T8947] erofs: (device loop2): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 69.834117][ T8926] ERROR: (device loop0): diAllocBit: iag inconsistent [ 69.834117][ T8926] [ 69.836932][ T8926] ialloc: diAlloc returned -5! [ 69.864001][ T8953] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 69.866716][ T8958] xt_CONNSECMARK: invalid mode: 0 [ 69.883486][ T8960] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.885371][ T8953] syz.3.2069: attempt to access beyond end of device [ 69.885371][ T8953] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 69.944861][ T8953] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 69.947614][ T8966] dlm: no locking on control device [ 69.956357][ T8953] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 69.957930][ T8953] NILFS (loop3): error -5 truncating bmap (ino=16) [ 69.981541][ T8968] netlink: 'syz.2.2077': attribute type 1 has an invalid length. [ 70.030667][ T8974] netlink: 'syz.1.2078': attribute type 1 has an invalid length. [ 70.374659][ T9011] netlink: 'syz.4.2095': attribute type 1 has an invalid length. [ 70.463489][ T9021] set_capacity_and_notify: 11 callbacks suppressed [ 70.463503][ T9021] loop4: detected capacity change from 0 to 64 [ 70.784239][ T9065] loop4: detected capacity change from 0 to 64 [ 70.854539][ T9076] Non-string source [ 70.951032][ T9085] netlink: 'syz.1.2131': attribute type 1 has an invalid length. [ 70.952259][ T9085] __nla_validate_parse: 64 callbacks suppressed [ 70.952274][ T9085] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2131'. [ 71.002462][ T9087] loop4: detected capacity change from 0 to 2048 [ 71.004400][ T9091] tmpfs: Bad value for 'nr_blocks' [ 71.084435][ T9093] loop1: detected capacity change from 0 to 4096 [ 71.086860][ T9093] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 71.109048][ T9093] ntfs: volume version 3.1. [ 71.119369][ T9075] loop3: detected capacity change from 0 to 32768 [ 71.139716][ T9075] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.2127 (9075) [ 71.153700][ T9075] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 71.155436][ T9075] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 71.156706][ T9075] BTRFS info (device loop3): using free space tree [ 71.321652][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2144'. [ 71.337981][ T9129] xt_connbytes: Forcing CT accounting to be enabled [ 71.389359][ T9075] BTRFS info (device loop3): enabling ssd optimizations [ 71.433782][ T4341] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 71.587937][ T9149] openvswitch: netlink: Missing key (keys=48, expected=2000) [ 71.641052][ T9133] loop0: detected capacity change from 0 to 32768 [ 71.644686][ T4502] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop3 scanned by udevd (4502) [ 71.721853][ T9167] loop1: detected capacity change from 0 to 128 [ 71.725522][ T9160] loop4: detected capacity change from 0 to 4096 [ 71.728458][ T9133] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 71.730506][ T9167] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 71.732509][ T9167] hpfs: filesystem error: improperly stopped [ 71.745973][ T9167] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 71.747161][ T9167] hpfs: You really don't want any checks? You are crazy... [ 71.748342][ T9167] hpfs: hpfs_map_sector(): read error [ 71.749113][ T9167] hpfs: code page support is disabled [ 71.752230][ T9160] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 71.772547][ T9096] loop2: detected capacity change from 0 to 131072 [ 71.775959][ T9096] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 71.776959][ T9096] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 71.778897][ T9096] F2FS-fs (loop2): invalid crc value [ 71.780732][ T9167] hpfs: hpfs_map_4sectors(): unaligned read [ 71.782050][ T9167] hpfs: hpfs_map_4sectors(): unaligned read [ 71.782937][ T9167] hpfs: filesystem error: unable to find root dir [ 71.795283][ T9096] F2FS-fs (loop2): Found nat_bits in checkpoint [ 71.814255][ T9096] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 71.815467][ T9096] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 71.820574][ T4336] XFS (loop0): Unmounting Filesystem [ 72.095799][ T9164] loop3: detected capacity change from 0 to 32768 [ 72.107656][ T9164] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 72.109062][ T9164] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 72.111504][ T9164] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 72.145726][ T9164] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 72.211355][ T9190] EXT4-fs (loop2): 1 truncate cleaned up [ 72.212303][ T9190] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 72.257866][ T9192] xt_CT: No such helper "snmp_trap" [ 72.318618][ T9190] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2159: bg 0: block 491: padding at end of block bitmap is not set [ 72.348555][ T9190] EXT4-fs (loop2): Remounting filesystem read-only [ 72.349695][ T9190] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 72.367987][ T9190] EXT4-fs (loop2): Remounting filesystem read-only [ 72.369126][ T9190] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2159: invalid indirect mapped block 234881024 (level 0) [ 72.376390][ T9201] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 72.385971][ T9201] ntfs3: loop1: Failed to load $Extend. [ 72.387755][ T9190] EXT4-fs (loop2): Remounting filesystem read-only [ 72.451890][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 72.516973][ T9215] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2179'. [ 72.543830][ T4328] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 72.549012][ T4328] ntfs3: loop1: ntfs_evict_inode r=9 failed, -22. [ 72.697014][ T9186] F2FS-fs (loop4): Found nat_bits in checkpoint [ 72.731670][ T9186] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 72.904696][ T9260] tmpfs: Bad value for 'mpol' [ 72.930050][ T9265] netlink: 'syz.0.2200': attribute type 1 has an invalid length. [ 73.055323][ T9284] bad cache= option: nonw [ 73.055323][ T9284] [ 73.056502][ T9284] CIFS: VFS: bad cache= option: nonw [ 73.229350][ T9316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2226'. [ 73.230894][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2226'. [ 73.241260][ T9320] netlink: 'syz.0.2228': attribute type 1 has an invalid length. [ 73.328494][ T9325] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 73.330060][ T9325] FAT-fs (loop3): Filesystem has been set read-only [ 73.451518][ T9343] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 73.466746][ T9343] ntfs3: loop1: Failed to load $Extend. [ 73.506282][ T9351] EXT4-fs: inline encryption not supported [ 73.507242][ T9351] EXT4-fs: Ignoring removed i_version option [ 73.521576][ T9351] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.523197][ T9351] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 73.523197][ T9351] [ 73.601038][ T9351] Injecting memory failure for pfn 0x13a51f at process virtual address 0x20001000 [ 73.613061][ T9351] Memory failure: 0x13a51f: recovery action for dirty LRU page: Recovered [ 73.626261][ T9351] Injecting memory failure for pfn 0x210d76 at process virtual address 0x20002000 [ 73.627719][ T9351] Memory failure: 0x210d76: recovery action for reserved kernel page: Ignored [ 73.780474][ T9388] xt_l2tp: missing protocol rule (udp|l2tpip) [ 73.798477][ T9383] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 73.802446][ T9383] ntfs3: loop3: Failed to load $Extend. [ 74.031159][ T9409] hfsplus: keylen 65060 too large [ 74.032300][ T9409] hfsplus: keylen 65060 too large [ 74.092607][ T9415] netlink: 'syz.1.2274': attribute type 13 has an invalid length. [ 74.173967][ T9399] JBD2: Ignoring recovery information on journal [ 74.210821][ T9411] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 74.213125][ T9411] JBD2: Ignoring recovery information on journal [ 74.239194][ T9399] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 74.266767][ T9411] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 74.279979][ T4329] ocfs2: Unmounting device (7,2) on (node local) [ 74.302184][ T9411] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 74.313419][ T9429] EXT2-fs (loop3): (no)acl options not supported [ 74.314599][ T9429] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 74.315685][ T9429] EXT2-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 74.318830][ T9411] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 74.320338][ T9411] OCFS2: File system is now read-only. [ 74.325005][ T9411] (syz.0.2271,9411,0):ocfs2_search_chain:1783 ERROR: status = -30 [ 74.326401][ T9411] (syz.0.2271,9411,0):ocfs2_search_chain:1893 ERROR: status = -30 [ 74.327541][ T9411] (syz.0.2271,9411,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 74.331735][ T9411] (syz.0.2271,9411,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 74.333034][ T9411] (syz.0.2271,9411,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 74.335210][ T9411] (syz.0.2271,9411,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 74.336627][ T9411] (syz.0.2271,9411,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 74.337982][ T9411] (syz.0.2271,9411,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 74.350745][ T9411] (syz.0.2271,9411,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 74.352317][ T9411] (syz.0.2271,9411,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 74.364260][ T9411] (syz.0.2271,9411,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 74.365805][ T9411] (syz.0.2271,9411,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 74.371328][ T9411] (syz.0.2271,9411,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 74.384350][ T9411] (syz.0.2271,9411,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 74.385909][ T9411] (syz.0.2271,9411,0):ocfs2_mknod:357 ERROR: status = -30 [ 74.388473][ T9411] (syz.0.2271,9411,0):ocfs2_mknod:502 ERROR: status = -30 [ 74.389703][ T9411] (syz.0.2271,9411,0):ocfs2_mkdir:659 ERROR: status = -30 [ 74.406569][ T4336] ocfs2: Unmounting device (7,0) on (node local) [ 74.450428][ T9443] autofs4:pid:9443:autofs_fill_super: called with bogus options [ 74.861539][ T4502] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 74.871467][ T9492] netlink: 'syz.2.2305': attribute type 2 has an invalid length. [ 74.922277][ T9502] set match dimension is over the limit! [ 74.924236][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2313'. [ 75.131510][ T9521] syz.3.2323 (9521): drop_caches: 2 [ 75.183378][ T9537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2331'. [ 75.230937][ T9542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2333'. [ 75.232674][ T9542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2333'. [ 75.359925][ T9569] 8021q: VLANs not supported on lo [ 75.637681][ T9603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2363'. [ 75.748025][ T4345] Bluetooth: hci4: link tx timeout [ 75.753631][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 75.839358][ T9622] set_capacity_and_notify: 18 callbacks suppressed [ 75.839367][ T9622] loop0: detected capacity change from 0 to 4096 [ 75.853147][ T9622] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 75.927200][ T4883] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 75.928659][ T4336] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 75.929572][ T4336] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 75.940880][ T4336] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 75.956662][ T4386] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 75.958060][ T4336] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 75.987586][ T9636] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 75.989674][ T9636] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 76.102485][ T9648] __nla_validate_parse: 2 callbacks suppressed [ 76.102496][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2386'. [ 76.364760][ T9681] loop0: detected capacity change from 0 to 512 [ 76.366806][ T9681] EXT4-fs: Ignoring removed nobh option [ 76.409401][ T9681] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #3: comm syz.0.2401: corrupted inode contents [ 76.414359][ T4345] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 76.415921][ T4345] Bluetooth: hci4: Injecting HCI hardware error event [ 76.417982][ T4345] Bluetooth: hci4: hardware error 0x00 [ 76.421286][ T9681] EXT4-fs (loop0): Remounting filesystem read-only [ 76.422376][ T9681] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #3: comm syz.0.2401: mark_inode_dirty error [ 76.424382][ T9685] loop2: detected capacity change from 0 to 2048 [ 76.425503][ T9681] EXT4-fs (loop0): Remounting filesystem read-only [ 76.430602][ T9681] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #3: comm syz.0.2401: corrupted inode contents [ 76.432703][ T9681] EXT4-fs (loop0): Remounting filesystem read-only [ 76.437097][ T9685] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.443734][ T9681] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.2401: mark_inode_dirty error [ 76.452929][ T9681] EXT4-fs (loop0): Remounting filesystem read-only [ 76.465247][ T9681] Quota error (device loop0): write_blk: dquota write failed [ 76.466427][ T9681] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 76.468011][ T9681] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.2401: Failed to acquire dquot type 0 [ 76.469978][ T9687] nvme_tcp: malformed address passed: 127.0.0.1:44.0 [ 76.496391][ T9681] EXT4-fs (loop0): Remounting filesystem read-only [ 76.528386][ T9681] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.2401: corrupted inode contents [ 76.548691][ T9681] EXT4-fs (loop0): Remounting filesystem read-only [ 76.549702][ T9681] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #16: comm syz.0.2401: mark_inode_dirty error [ 76.573802][ T9681] EXT4-fs (loop0): Remounting filesystem read-only [ 76.576153][ T9681] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.2401: corrupted inode contents [ 76.578180][ T9681] EXT4-fs (loop0): Remounting filesystem read-only [ 76.579215][ T9681] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.2401: mark_inode_dirty error [ 76.588843][ T9681] EXT4-fs (loop0): Remounting filesystem read-only [ 76.589898][ T9681] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.2401: corrupted inode contents [ 76.613775][ T9681] EXT4-fs (loop0): Remounting filesystem read-only [ 76.614778][ T9681] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 76.619068][ T9681] EXT4-fs (loop0): Remounting filesystem read-only [ 76.620074][ T9681] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.2401: corrupted inode contents [ 76.624417][ T9681] EXT4-fs (loop0): Remounting filesystem read-only [ 76.625409][ T9681] EXT4-fs error (device loop0): ext4_truncate:4325: inode #16: comm syz.0.2401: mark_inode_dirty error [ 76.645810][ T9681] EXT4-fs (loop0): Remounting filesystem read-only [ 76.646838][ T9681] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 76.673328][ T9681] EXT4-fs (loop0): Remounting filesystem read-only [ 76.675399][ T9681] EXT4-fs (loop0): 1 truncate cleaned up [ 76.676343][ T9681] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 76.755014][ T4336] EXT4-fs (loop0): unmounting filesystem. [ 76.756190][ T4883] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 76.757782][ T4883] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 1 [ 76.760475][ T4883] EXT4-fs (loop0): Remounting filesystem read-only [ 76.805242][ T9716] device veth3 entered promiscuous mode [ 77.133027][ T9567] loop4: detected capacity change from 0 to 262144 [ 77.161859][ T9748] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 77.166516][ T9567] F2FS-fs (loop4): Found nat_bits in checkpoint [ 77.180740][ T9567] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 77.217952][ T9718] loop3: detected capacity change from 0 to 40427 [ 77.231228][ T9718] F2FS-fs (loop3): invalid crc value [ 77.232144][ T9718] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 77.257484][ T9718] F2FS-fs (loop3): Found nat_bits in checkpoint [ 77.267690][ T9718] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 77.268761][ T9718] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 77.302781][ T9718] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 77.432721][ T9769] binder: 9768:9769 got reply transaction with no transaction stack [ 77.434800][ T9769] binder: 9768:9769 transaction reply to 0:0 failed 1/29201/-71, size 0-0 line 2963 [ 77.586941][ T9791] netlink: 'syz.0.2451': attribute type 21 has an invalid length. [ 77.588384][ T9791] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2451'. [ 77.591589][ T9789] loop3: detected capacity change from 0 to 1024 [ 77.649361][ T9799] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2455'. [ 77.659309][ T9789] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 77.689428][ T9789] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - no `..' [ 77.754469][ T4341] EXT4-fs (loop3): unmounting filesystem. [ 77.771574][ T9811] loop0: detected capacity change from 0 to 8192 [ 77.779635][ T9811] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.007457][ T9845] loop4: detected capacity change from 0 to 512 [ 78.008878][ T9845] EXT4-fs: Ignoring removed nobh option [ 78.040421][ T9853] loop3: detected capacity change from 0 to 8 [ 78.059484][ T9845] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #3: comm syz.4.2475: corrupted inode contents [ 78.061448][ T9845] EXT4-fs (loop4): Remounting filesystem read-only [ 78.062525][ T9845] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #3: comm syz.4.2475: mark_inode_dirty error [ 78.080289][ T9858] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 78.081918][ T9853] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 78.088860][ T9845] EXT4-fs (loop4): Remounting filesystem read-only [ 78.097676][ T9845] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #3: comm syz.4.2475: corrupted inode contents [ 78.099928][ T9845] EXT4-fs (loop4): Remounting filesystem read-only [ 78.100859][ T9845] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.2475: mark_inode_dirty error [ 78.120740][ T9845] EXT4-fs (loop4): Remounting filesystem read-only [ 78.136266][ T9845] Quota error (device loop4): write_blk: dquota write failed [ 78.137514][ T9845] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 78.138933][ T9845] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.2475: Failed to acquire dquot type 0 [ 78.145087][ T9845] EXT4-fs (loop4): Remounting filesystem read-only [ 78.157133][ T9845] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.2475: corrupted inode contents [ 78.175491][ T9845] EXT4-fs (loop4): Remounting filesystem read-only [ 78.176523][ T9845] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #16: comm syz.4.2475: mark_inode_dirty error [ 78.179134][ T9845] EXT4-fs (loop4): Remounting filesystem read-only [ 78.180224][ T9845] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.2475: corrupted inode contents [ 78.182443][ T9845] EXT4-fs (loop4): Remounting filesystem read-only [ 78.183520][ T9845] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.2475: mark_inode_dirty error [ 78.192471][ T9845] EXT4-fs (loop4): Remounting filesystem read-only [ 78.194119][ T9845] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.2475: corrupted inode contents [ 78.199112][ T9845] EXT4-fs (loop4): Remounting filesystem read-only [ 78.200046][ T9845] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 78.201449][ T9845] EXT4-fs (loop4): Remounting filesystem read-only [ 78.202440][ T9845] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.2475: corrupted inode contents [ 78.212540][ T9845] EXT4-fs (loop4): Remounting filesystem read-only [ 78.214119][ T9845] EXT4-fs error (device loop4): ext4_truncate:4325: inode #16: comm syz.4.2475: mark_inode_dirty error [ 78.216433][ T9845] EXT4-fs (loop4): Remounting filesystem read-only [ 78.217472][ T9845] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 78.219344][ T9845] EXT4-fs (loop4): Remounting filesystem read-only [ 78.220635][ T9845] EXT4-fs (loop4): 1 truncate cleaned up [ 78.221506][ T9845] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 78.306104][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 78.307271][ T4386] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 78.308970][ T4386] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 1 [ 78.310991][ T4386] EXT4-fs (loop4): Remounting filesystem read-only [ 78.312443][ T9872] loop0: detected capacity change from 0 to 4096 [ 78.326405][ T9878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2492'. [ 78.330509][ T9872] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 78.335214][ T9872] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 78.337225][ T9872] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 78.349987][ T9872] ntfs: volume version 3.1. [ 78.392457][ T9886] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 78.432548][ T4336] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 78.464403][ T9895] netlink: 'syz.3.2500': attribute type 17 has an invalid length. [ 78.465840][ T9895] netlink: 'syz.3.2500': attribute type 16 has an invalid length. [ 78.467008][ T9895] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2500'. [ 78.622618][ T9920] CIFS: VFS: Unable to allocate memory for devname [ 78.653380][ T4345] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 78.789577][ T4345] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 78.789967][ T9942] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.2525: missing EA_INODE flag [ 78.798639][ T9942] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2525: error while reading EA inode 2 err=-117 [ 78.846050][ T9942] EXT4-fs (loop2): 1 orphan inode deleted [ 78.847070][ T9942] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 78.875633][ T9956] nft_compat: unsupported protocol 1 [ 78.888956][ T9959] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2531'. [ 78.934099][ T9954] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 78.947184][ T9954] EXT4-fs error (device loop4): ext4_get_first_dir_block:3605: inode #12: comm syz.4.2528: directory missing '..' [ 78.967223][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 78.996654][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 79.068686][ T9979] xt_hashlimit: invalid rate [ 79.078549][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2542'. [ 79.080021][ T9981] openvswitch: netlink: Flow key attr not present in new flow. [ 79.087446][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2543'. [ 79.384669][T10026] netlink: 'syz.2.2562': attribute type 21 has an invalid length. [ 79.385986][T10026] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2562'. [ 79.492440][T10038] hfs: inconsistency in B*Tree (1,2,0,3,3) [ 79.507246][T10041] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.541832][T10046] netlink: 'syz.4.2573': attribute type 5 has an invalid length. [ 79.591389][T10055] netlink: 'syz.3.2576': attribute type 1 has an invalid length. [ 79.592611][T10055] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2576'. [ 79.802400][T10085] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.818703][T10085] EXT4-fs (loop0): orphan cleanup on readonly fs [ 79.820841][T10085] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.2592: Allocating blocks 41-42 which overlap fs metadata [ 79.837547][T10085] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.2592: Failed to acquire dquot type 0 [ 79.857362][T10085] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 79.867374][T10085] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.2592: corrupted inode contents [ 79.885923][T10085] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #12: comm syz.0.2592: mark_inode_dirty error [ 79.897345][T10085] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.2592: corrupted inode contents [ 79.912073][T10085] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.2592: mark_inode_dirty error [ 79.922715][T10085] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.2592: corrupted inode contents [ 79.927115][T10085] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 79.930025][T10085] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.2592: corrupted inode contents [ 79.931972][T10085] EXT4-fs error (device loop0): ext4_truncate:4325: inode #12: comm syz.0.2592: mark_inode_dirty error [ 79.936099][T10085] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 79.937684][T10085] EXT4-fs (loop0): 1 truncate cleaned up [ 79.938638][T10085] EXT4-fs (loop0): pa 000000007d993c34: logic 1, phys. 41, len 23 [ 79.939813][T10085] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 79.942423][T10085] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 79.970317][ T4336] EXT4-fs (loop0): unmounting filesystem. [ 80.023929][T10106] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 80.157906][T10135] netlink: 'syz.0.2617': attribute type 10 has an invalid length. [ 80.180632][T10135] team0: Device ipvlan1 failed to register rx_handler [ 80.236146][T10142] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 80.249678][T10142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.263863][T10148] tc_dump_action: action bad kind [ 80.273054][T10142] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 80.591343][T10150] XFS (loop0): Mounting V5 Filesystem [ 80.679061][T10150] XFS (loop0): Ending clean mount [ 80.768133][ T4336] XFS (loop0): Unmounting Filesystem [ 80.823481][T10211] ipt_ECN: cannot use operation on non-tcp rule [ 81.220500][T10251] set_capacity_and_notify: 12 callbacks suppressed [ 81.220509][T10251] loop1: detected capacity change from 0 to 512 [ 81.226886][T10251] EXT4-fs: Ignoring removed oldalloc option [ 81.230139][T10251] EXT4-fs: inline encryption not supported [ 81.232688][T10251] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.261022][T10258] __nla_validate_parse: 7 callbacks suppressed [ 81.261034][T10258] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2671'. [ 81.274760][T10251] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2670: bg 0: block 64: padding at end of block bitmap is not set [ 81.277328][T10251] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.2670: Failed to acquire dquot type 0 [ 81.294055][T10169] loop2: detected capacity change from 0 to 131072 [ 81.296351][T10169] F2FS-fs (loop2): invalid crc value [ 81.298568][T10251] EXT4-fs (loop1): 1 truncate cleaned up [ 81.299496][T10251] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 81.331170][T10169] F2FS-fs (loop2): Found nat_bits in checkpoint [ 81.359489][T10169] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 81.370737][T10169] F2FS-fs (loop2): Corrupted max_depth of 3: 16842753 [ 81.382399][T10169] F2FS-fs (loop2): sanity_check_inode: corrupted inode footer i_ino=4, ino,nid: [4227858436, 4] run fsck to fix. [ 81.415048][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 81.623129][T10291] loop1: detected capacity change from 0 to 164 [ 81.643731][T10291] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 81.709065][T10302] netlink: 'syz.0.2692': attribute type 1 has an invalid length. [ 81.719327][T10306] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2693'. [ 81.748477][T10309] Soft offlining pfn 0x1417f9 at process virtual address 0x20ff9000 [ 81.752266][T10309] Memory failure: 0x1417f9: unhandlable page. [ 81.792314][T10313] loop0: detected capacity change from 0 to 2048 [ 81.811716][T10313] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 81.823597][T10313] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.836787][T10313] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 81.959173][T10337] Soft offlining pfn 0x1417f9 at process virtual address 0x20ff9000 [ 82.007066][T10337] Memory failure: 0x1417f9: unhandlable page. [ 82.136294][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2723'. [ 82.146635][T10362] loop1: detected capacity change from 0 to 164 [ 82.212108][T10376] loop3: detected capacity change from 0 to 2048 [ 82.240537][T10376] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 82.246078][T10376] EXT4-fs error (device loop3): ext4_find_extent:936: inode #2: comm syz.3.2727: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 82.250850][T10384] loop2: detected capacity change from 0 to 256 [ 82.252254][T10384] exfat: Deprecated parameter 'namecase' [ 82.266630][T10384] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 82.279989][T10388] binder: 10387:10388 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 82.284918][ T4341] EXT4-fs (loop3): unmounting filesystem. [ 82.397985][T10404] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2741'. [ 82.399689][T10404] netlink: 'syz.0.2741': attribute type 1 has an invalid length. [ 82.461714][T10400] device wlan0 entered promiscuous mode [ 82.464562][T10410] delete_channel: no stack [ 82.651299][T10434] netlink: 'syz.2.2756': attribute type 21 has an invalid length. [ 82.653954][T10434] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2756'. [ 82.705562][T10395] loop1: detected capacity change from 0 to 32768 [ 82.725966][T10395] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 82.727364][T10395] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 82.736970][T10446] tmpfs: Bad value for 'mpol' [ 82.739019][T10395] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 82.747012][ T6169] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 82.748128][ T6169] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 82.768905][T10448] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.771055][T10448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.772207][T10448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.774006][ T6169] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 25ms [ 82.779117][ T6169] gfs2: fsid=syz:syz.0: jid=0: Done [ 82.780000][T10395] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 82.847625][T10448] device wlan0 left promiscuous mode [ 82.948895][T10395] gfs2: fsid=syz:syz.0: found 1 quota changes [ 82.989692][ T4328] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 82.992090][ T4328] CPU: 1 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 82.993250][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 82.994861][ T4328] Call trace: [ 82.995352][ T4328] dump_backtrace+0x1c4/0x1f0 [ 82.996068][ T4328] show_stack+0x2c/0x3c [ 82.996797][ T4328] __dump_stack+0x30/0x40 [ 82.997494][ T4328] dump_stack_lvl+0xf4/0x15c [ 82.998195][ T4328] dump_stack+0x1c/0x5c [ 82.998854][ T4328] gfs2_assert_warn_i+0x16c/0x26c [ 82.999588][ T4328] gfs2_quota_cleanup+0x444/0x640 [ 83.000324][ T4328] gfs2_make_fs_ro+0x36c/0x444 [ 83.001064][ T4328] gfs2_put_super+0x1dc/0x744 [ 83.001781][ T4328] generic_shutdown_super+0x138/0x32c [ 83.002604][ T4328] kill_block_super+0x78/0xe0 [ 83.003308][ T4328] gfs2_kill_sb+0xc4/0xd8 [ 83.003965][ T4328] deactivate_locked_super+0xb4/0x128 [ 83.004701][ T4328] deactivate_super+0xe4/0x104 [ 83.005415][ T4328] cleanup_mnt+0x3a8/0x430 [ 83.006070][ T4328] __cleanup_mnt+0x20/0x30 [ 83.006708][ T4328] task_work_run+0x1f4/0x280 [ 83.007427][ T4328] do_notify_resume+0x20f8/0x2c84 [ 83.008176][ T4328] el0_svc+0x98/0x128 [ 83.008785][ T4328] el0t_64_sync_handler+0x84/0xf0 [ 83.009479][ T4328] el0t_64_sync+0x18c/0x190 [ 83.065775][T10482] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2780'. [ 83.067222][T10482] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2780'. [ 83.158237][T10495] ieee802154 phy1 wpan1: encryption failed: -22 [ 83.248021][T10509] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 83.503435][T10537] [U] ^C [ 83.651760][T10550] loop1: detected capacity change from 0 to 4096 [ 83.675112][T10550] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 83.702476][T10530] loop4: detected capacity change from 0 to 32768 [ 83.722567][T10550] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.1.2813: bad entry in directory: inode out of bounds - offset=24, inode=41227, rec_len=20, size=4096 fake=0 [ 83.755212][T10550] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 83.756938][T10550] EXT4-fs warning (device loop1): ext4_rename_delete:3778: inode #2: comm syz.1.2813: Deleting old file: nlink 4, error=-117 [ 83.774997][T10530] XFS (loop4): Mounting V5 Filesystem [ 83.801442][T10558] XFS (loop0): Mounting V5 Filesystem [ 83.817709][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 83.870182][T10530] XFS (loop4): Ending clean mount [ 83.917132][T10558] XFS (loop0): Ending clean mount [ 84.010618][ T4334] XFS (loop4): Unmounting Filesystem [ 84.013087][ T4336] XFS (loop0): Unmounting Filesystem [ 84.018723][T10589] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2823'. [ 84.020147][T10589] netlink: 'syz.3.2823': attribute type 1 has an invalid length. [ 84.146330][T10596] misc userio: No port type given on /dev/userio [ 84.199866][T10602] netlink: 'syz.3.2832': attribute type 1 has an invalid length. [ 84.201161][T10602] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2832'. [ 84.281521][T10604] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 84.292119][T10472] F2FS-fs (loop2): Invalid log sectors per block(570425347) log sectorsize(9) [ 84.294064][T10472] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 84.298685][T10472] F2FS-fs (loop2): invalid crc value [ 84.321358][T10472] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 84.353148][T10472] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 84.378303][T10472] F2FS-fs (loop2): Bad quota inode 2:50331648 [ 84.379358][T10472] F2FS-fs (loop2): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 84.381009][T10472] F2FS-fs (loop2): Cannot turn on quotas: error -22 [ 84.394763][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 84.404998][T10472] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 84.406100][T10472] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 84.410331][T10472] F2FS-fs (loop2): quota sysfile already exists [ 84.567569][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2848'. [ 84.694345][T10659] erofs: (device loop4): mounted with root inode @ nid 36. [ 84.705801][T10657] SET target dimension over the limit! [ 85.162485][T10718] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 85.353461][T10742] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.368491][T10743] erofs: (device loop1): mounted with root inode @ nid 36. [ 85.372354][T10743] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 85.397197][T10743] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 85.398833][T10743] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 85.697580][T10747] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 85.698825][T10747] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 85.736770][T10747] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 85.738503][ T6176] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 85.739635][ T6176] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 85.767755][ T6176] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 28ms [ 85.769822][ T6176] gfs2: fsid=syz:syz.0: jid=0: Done [ 85.770621][T10747] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 85.828633][T10786] ip6gretap0: refused to change device tx_queue_len [ 85.931603][T10747] gfs2: fsid=syz:syz.0: found 1 quota changes [ 86.017026][ T4334] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 86.019357][ T4334] CPU: 1 PID: 4334 Comm: syz-executor Not tainted syzkaller #0 [ 86.020488][ T4334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 86.022137][ T4334] Call trace: [ 86.022650][ T4334] dump_backtrace+0x1c4/0x1f0 [ 86.023340][ T4334] show_stack+0x2c/0x3c [ 86.023975][ T4334] __dump_stack+0x30/0x40 [ 86.024611][ T4334] dump_stack_lvl+0xf4/0x15c [ 86.025299][ T4334] dump_stack+0x1c/0x5c [ 86.025944][ T4334] gfs2_assert_warn_i+0x16c/0x26c [ 86.026744][ T4334] gfs2_quota_cleanup+0x444/0x640 [ 86.027454][ T4334] gfs2_make_fs_ro+0x36c/0x444 [ 86.028237][ T4334] gfs2_put_super+0x1dc/0x744 [ 86.028904][ T4334] generic_shutdown_super+0x138/0x32c [ 86.029770][ T4334] kill_block_super+0x78/0xe0 [ 86.030478][ T4334] gfs2_kill_sb+0xc4/0xd8 [ 86.031162][ T4334] deactivate_locked_super+0xb4/0x128 [ 86.032071][ T4334] deactivate_super+0xe4/0x104 [ 86.032788][ T4334] cleanup_mnt+0x3a8/0x430 [ 86.033445][ T4334] __cleanup_mnt+0x20/0x30 [ 86.034096][ T4334] task_work_run+0x1f4/0x280 [ 86.034733][ T4334] do_notify_resume+0x20f8/0x2c84 [ 86.035479][ T4334] el0_svc+0x98/0x128 [ 86.036108][ T4334] el0t_64_sync_handler+0x84/0xf0 [ 86.036828][ T4334] el0t_64_sync+0x18c/0x190 [ 86.171612][T10834] netlink: 'syz.0.2938': attribute type 39 has an invalid length. [ 86.398577][T10872] ksmbd: Unknown IPC event: 4, ignore. [ 86.527746][T10892] __nla_validate_parse: 2 callbacks suppressed [ 86.527757][T10892] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2965'. [ 86.585122][T10905] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2973'. [ 86.718965][T10926] netlink: 'syz.2.2982': attribute type 1 has an invalid length. [ 86.780879][T10936] ipt_CLUSTERIP: Please specify destination IP [ 86.831182][T10945] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2991'. [ 86.890569][T10954] CIFS: Attempting to mount \\::1\share [ 86.891668][T10954] CIFS: VFS: No username specified [ 86.955789][T10964] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 86.960083][ T52] block nbd2: Attempted send on invalid socket [ 86.961170][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.109822][T10979] x_tables: ip6_tables: SET.1 target: invalid size 8 (kernel) != (user) 0 [ 87.118655][T10946] set_capacity_and_notify: 7 callbacks suppressed [ 87.118668][T10946] loop1: detected capacity change from 0 to 32768 [ 87.129504][T10946] XFS (loop1): Mounting V5 Filesystem [ 87.142475][T10946] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 87.169028][T10946] XFS (loop1): Starting recovery (logdev: internal) [ 87.210642][T10995] loop0: detected capacity change from 0 to 4096 [ 87.212304][T10995] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 87.212758][T10946] XFS (loop1): Ending recovery (logdev: internal) [ 87.216268][T10995] ntfs3: loop0: Failed to load $MFTMirr. [ 87.276050][T10946] XFS (loop1): Metadata corruption detected at xfs_inobt_verify+0xb0/0x1f8, xfs_finobt block 0x8 [ 87.278158][T10946] XFS (loop1): Unmount and run xfs_repair [ 87.279040][T10946] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 87.287177][T10946] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 87.288552][T10946] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 87.309179][T10946] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 87.310923][T10946] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 87.312203][T10946] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 87.319229][T10946] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 87.320580][T10946] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 87.321925][T10946] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 87.335367][T10993] loop4: detected capacity change from 0 to 32768 [ 87.336964][T10946] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x8 len 8 error 117 [ 87.354869][T10993] ERROR: (device loop4): dbFindCtl: Corrupt dmapctl page [ 87.354869][T10993] [ 87.363149][T10993] ERROR: (device loop4): remounting filesystem as read-only [ 87.372349][T10993] ialloc: diAlloc returned -5! [ 87.395009][ T4328] XFS (loop1): Unmounting Filesystem [ 87.497599][T11012] sp0: Synchronizing with TNC [ 87.598352][T11034] loop4: detected capacity change from 0 to 4096 [ 87.603116][T11034] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 87.636617][T11034] ntfs3: loop4: ntfs_evict_inode r=6 failed, -22. [ 87.637566][T11034] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 87.777798][T11054] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3045'. [ 87.883478][T11069] delete_channel: no stack [ 88.050944][T11100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3064'. [ 88.230863][T11127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.232642][T11127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.268620][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3081'. [ 88.273205][T11127] loop1: detected capacity change from 0 to 512 [ 88.282726][T11127] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4613: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 88.303464][T11127] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 88.316557][ T4502] udevd[4502]: incorrect ext4 checksum on /dev/loop1 [ 88.338832][T11141] loop3: detected capacity change from 0 to 512 [ 88.343615][T11143] loop0: detected capacity change from 0 to 24 [ 88.346960][T11139] netlink: del zone limit has 8 unknown bytes [ 88.385725][T11141] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 88.387031][T11141] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 88.388379][T11141] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.3083: bad orphan inode 15 [ 88.390190][T11141] ext4_test_bit(bit=14, block=4) = 1 [ 88.391044][T11141] is_bad_inode(inode)=0 [ 88.393653][T11141] NEXT_ORPHAN(inode)=0 [ 88.394397][T11141] max_ino=32 [ 88.394877][T11141] i_nlink=1 [ 88.395426][T11141] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 88.400201][T11141] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 4: comm syz.3.3083: lblock 0 mapped to illegal pblock 4 (length 1) [ 88.418036][ T4341] EXT4-fs (loop3): unmounting filesystem. [ 88.450862][T11155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3091'. [ 88.505249][T11161] loop2: detected capacity change from 0 to 1024 [ 88.506643][T11161] EXT4-fs: Ignoring removed bh option [ 88.520456][T11161] EXT4-fs: inline encryption not supported [ 88.539628][T11161] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.3095: lblock 2 mapped to illegal pblock 2 (length 1) [ 88.556212][T11161] EXT4-fs (loop2): Remounting filesystem read-only [ 88.557223][T11161] __quota_error: 4 callbacks suppressed [ 88.557235][T11161] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 88.563216][T11170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3096'. [ 88.568916][T11161] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.3095: Invalid inode table block 1 in block_group 0 [ 88.582278][T11161] EXT4-fs (loop2): Remounting filesystem read-only [ 88.582823][T11153] loop4: detected capacity change from 0 to 32768 [ 88.583181][T11161] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 88.588307][T11153] JBD2: Ignoring recovery information on journal [ 88.589849][T11153] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 88.591333][T11153] JBD2: bad block at offset 32 [ 88.593037][T11153] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 88.598685][T11161] EXT4-fs (loop2): Remounting filesystem read-only [ 88.598838][T11153] [ 88.599652][T11161] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.3095: mark_inode_dirty error [ 88.600009][T11153] ====================================================== [ 88.602659][T11153] WARNING: possible circular locking dependency detected [ 88.603678][T11153] syzkaller #0 Not tainted [ 88.604367][T11153] ------------------------------------------------------ [ 88.605399][T11153] syz.4.3089/11153 is trying to acquire lock: [ 88.606269][T11153] ffff0000f908b488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 88.608292][T11153] [ 88.608292][T11153] but task is already holding lock: [ 88.609416][T11153] ffff0000f908eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x348/0xf0c [ 88.610905][T11153] [ 88.610905][T11153] which lock already depends on the new lock. [ 88.610905][T11153] [ 88.612422][T11153] [ 88.612422][T11153] the existing dependency chain (in reverse order) is: [ 88.613458][T11161] EXT4-fs (loop2): Remounting filesystem read-only [ 88.613765][T11153] [ 88.613765][T11153] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 88.615975][T11153] down_read+0x64/0x300 [ 88.615997][T11161] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 88.616615][T11153] ocfs2_init_acl+0x264/0x61c [ 88.618854][T11153] ocfs2_mknod+0x12b0/0x218c [ 88.619586][T11153] ocfs2_mkdir+0x19c/0x51c [ 88.620338][T11153] vfs_mkdir+0x314/0x4d8 [ 88.620341][T11161] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.3095: Failed to acquire dquot type 0 [ 88.621053][T11153] do_mkdirat+0x1b8/0x3ec [ 88.623497][T11153] __arm64_sys_mkdirat+0x90/0xa8 [ 88.624306][T11153] invoke_syscall+0x98/0x290 [ 88.625142][T11153] el0_svc_common+0x13c/0x258 [ 88.625962][T11153] do_el0_svc+0x5c/0x134 [ 88.626307][T11161] EXT4-fs (loop2): Remounting filesystem read-only [ 88.626672][T11153] el0_svc+0x58/0x128 [ 88.628347][T11153] el0t_64_sync_handler+0x84/0xf0 [ 88.629155][T11153] el0t_64_sync+0x18c/0x190 [ 88.629886][T11153] [ 88.629886][T11153] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 88.629984][T11161] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 88.631130][T11153] down_read+0x64/0x300 [ 88.631146][T11153] ocfs2_start_trans+0x38c/0x6f4 [ 88.634002][T11153] ocfs2_modify_bh+0xd8/0x44c [ 88.634725][T11153] ocfs2_local_read_info+0x1054/0x13c4 [ 88.634892][T11161] EXT4-fs (loop2): Remounting filesystem read-only [ 88.635607][T11153] dquot_load_quota_sb+0x68c/0x998 [ 88.637517][T11153] dquot_load_quota_inode+0x274/0x4dc [ 88.638402][T11153] ocfs2_enable_quotas+0x17c/0x3c4 [ 88.638897][T11161] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.3095: mark_inode_dirty error [ 88.639260][T11153] ocfs2_fill_super+0x32f8/0x417c [ 88.641834][T11153] mount_bdev+0x264/0x35c [ 88.642551][T11153] ocfs2_mount+0x44/0x58 [ 88.643297][T11153] legacy_get_tree+0xd8/0x174 [ 88.643659][T11161] EXT4-fs (loop2): Remounting filesystem read-only [ 88.644096][T11153] vfs_get_tree+0x90/0x278 [ 88.645840][T11153] do_new_mount+0x228/0x804 [ 88.646583][T11153] path_mount+0x5ac/0xe6c [ 88.647141][T11161] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 88.647272][T11153] __arm64_sys_mount+0x4a0/0x5a0 [ 88.649887][T11153] invoke_syscall+0x98/0x290 [ 88.650654][T11153] el0_svc_common+0x13c/0x258 [ 88.650910][T11161] EXT4-fs (loop2): 1 orphan inode deleted [ 88.651439][T11153] do_el0_svc+0x5c/0x134 [ 88.653050][T11153] el0_svc+0x58/0x128 [ 88.653743][T11153] el0t_64_sync_handler+0x84/0xf0 [ 88.654565][T11153] el0t_64_sync+0x18c/0x190 [ 88.655178][ T53] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 88.655323][T11153] [ 88.655323][T11153] -> #2 (sb_internal#5){.+.+}-{0:0}: [ 88.657759][ T53] EXT4-fs (loop2): Remounting filesystem read-only [ 88.658761][T11153] ocfs2_start_trans+0x20c/0x6f4 [ 88.659799][ T53] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 88.660567][T11153] ocfs2_reserve_suballoc_bits+0x6a8/0x3d40 [ 88.661864][T11161] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.662647][T11153] ocfs2_reserve_new_metadata_blocks+0x340/0x7e4 [ 88.664863][T11153] ocfs2_extend_dir+0x9e8/0x3c48 [ 88.665051][ T53] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0 [ 88.665671][T11153] ocfs2_prepare_dir_for_insert+0x2aa8/0x4a80 [ 88.668243][T11153] ocfs2_mknod+0x794/0x218c [ 88.668980][T11153] ocfs2_mkdir+0x19c/0x51c [ 88.669712][T11153] vfs_mkdir+0x314/0x4d8 [ 88.670399][T11153] do_mkdirat+0x1b8/0x3ec [ 88.670725][ T53] EXT4-fs (loop2): Remounting filesystem read-only [ 88.671141][T11153] __arm64_sys_mkdirat+0x90/0xa8 [ 88.672989][T11153] invoke_syscall+0x98/0x290 [ 88.673765][T11153] el0_svc_common+0x13c/0x258 [ 88.674576][T11153] do_el0_svc+0x5c/0x134 [ 88.675323][T11153] el0_svc+0x58/0x128 [ 88.675583][T11161] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #3: block 48: comm syz.2.3095: lblock 0 mapped to illegal pblock 48 (length 1) [ 88.675997][T11153] el0t_64_sync_handler+0x84/0xf0 [ 88.678915][T11153] el0t_64_sync+0x18c/0x190 [ 88.679618][T11153] [ 88.679618][T11153] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 88.681151][T11153] down_write+0x5c/0x88 [ 88.681852][T11153] ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 88.682890][T11153] ocfs2_reserve_clusters_with_limit+0x290/0xa3c [ 88.683961][T11153] ocfs2_reserve_suballoc_bits+0x688/0x3d40 [ 88.684963][T11153] ocfs2_reserve_new_metadata_blocks+0x340/0x7e4 [ 88.685917][T11161] EXT4-fs (loop2): Remounting filesystem read-only [ 88.685929][T11161] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 88.686897][T11153] ocfs2_extend_dir+0x9e8/0x3c48 [ 88.689030][T11153] ocfs2_prepare_dir_for_insert+0x2aa8/0x4a80 [ 88.690002][T11153] ocfs2_mknod+0x794/0x218c [ 88.690781][T11153] ocfs2_mkdir+0x19c/0x51c [ 88.691534][T11153] vfs_mkdir+0x314/0x4d8 [ 88.692234][T11153] do_mkdirat+0x1b8/0x3ec [ 88.692966][T11153] __arm64_sys_mkdirat+0x90/0xa8 [ 88.693801][T11153] invoke_syscall+0x98/0x290 [ 88.694637][T11153] el0_svc_common+0x13c/0x258 [ 88.695427][T11153] do_el0_svc+0x5c/0x134 [ 88.696130][T11153] el0_svc+0x58/0x128 [ 88.696792][T11153] el0t_64_sync_handler+0x84/0xf0 [ 88.697622][T11153] el0t_64_sync+0x18c/0x190 [ 88.698382][T11153] [ 88.698382][T11153] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 88.699988][T11153] __lock_acquire+0x2808/0x6634 [ 88.700788][T11153] lock_acquire+0x20c/0x638 [ 88.701535][T11153] down_write+0x5c/0x88 [ 88.702231][T11153] ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 88.703214][T11153] ocfs2_reserve_new_metadata_blocks+0x340/0x7e4 [ 88.704313][T11153] ocfs2_init_xattr_set_ctxt+0x310/0x7dc [ 88.705361][T11153] ocfs2_xattr_set+0x978/0xf0c [ 88.706240][T11153] ocfs2_set_acl+0x410/0x4cc [ 88.707042][T11153] ocfs2_iop_set_acl+0x178/0x258 [ 88.707993][T11153] posix_acl_xattr_set+0x2f8/0x394 [ 88.708907][T11153] __vfs_setxattr+0x374/0x390 [ 88.709724][T11153] __vfs_setxattr_noperm+0x120/0x56c [ 88.710654][T11153] __vfs_setxattr_locked+0x1e8/0x214 [ 88.711555][T11153] vfs_setxattr+0x158/0x2a8 [ 88.712300][T11153] setxattr+0x258/0x2d8 [ 88.713005][T11153] path_setxattr+0x130/0x260 [ 88.713866][T11153] __arm64_sys_setxattr+0xc4/0xe0 [ 88.714704][T11153] invoke_syscall+0x98/0x290 [ 88.715468][T11153] el0_svc_common+0x13c/0x258 [ 88.716316][T11153] do_el0_svc+0x5c/0x134 [ 88.717047][T11153] el0_svc+0x58/0x128 [ 88.717686][T11153] el0t_64_sync_handler+0x84/0xf0 [ 88.718494][T11153] el0t_64_sync+0x18c/0x190 [ 88.719185][T11153] [ 88.719185][T11153] other info that might help us debug this: [ 88.719185][T11153] [ 88.720663][T11153] Chain exists of: [ 88.720663][T11153] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 88.720663][T11153] [ 88.723334][T11153] Possible unsafe locking scenario: [ 88.723334][T11153] [ 88.724428][T11153] CPU0 CPU1 [ 88.725240][T11153] ---- ---- [ 88.726101][T11153] lock(&oi->ip_xattr_sem); [ 88.726814][T11153] lock(&journal->j_trans_barrier); [ 88.728063][T11153] lock(&oi->ip_xattr_sem); [ 88.729176][T11153] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 88.730350][T11153] [ 88.730350][T11153] *** DEADLOCK *** [ 88.730350][T11153] [ 88.731581][T11153] 3 locks held by syz.4.3089/11153: [ 88.732420][T11153] #0: ffff0000f2d2a460 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 88.734014][T11153] #1: ffff0000f908ed88 (&type->i_mutex_dir_key#32){+.+.}-{3:3}, at: vfs_setxattr+0x138/0x2a8 [ 88.735713][T11153] #2: ffff0000f908eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x348/0xf0c [ 88.737259][T11153] [ 88.737259][T11153] stack backtrace: [ 88.738146][T11153] CPU: 1 PID: 11153 Comm: syz.4.3089 Not tainted syzkaller #0 [ 88.739243][T11153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 88.740768][T11153] Call trace: [ 88.741230][T11153] dump_backtrace+0x1c4/0x1f0 [ 88.741950][T11153] show_stack+0x2c/0x3c [ 88.742546][T11153] __dump_stack+0x30/0x40 [ 88.743290][T11153] dump_stack_lvl+0xf4/0x15c [ 88.744023][T11153] dump_stack+0x1c/0x5c [ 88.744626][T11153] print_circular_bug+0x148/0x1b0 [ 88.745406][T11153] check_noncircular+0x264/0x2f8 [ 88.746113][T11153] __lock_acquire+0x2808/0x6634 [ 88.746903][T11153] lock_acquire+0x20c/0x638 [ 88.747625][T11153] down_write+0x5c/0x88 [ 88.748253][T11153] ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 88.749132][T11153] ocfs2_reserve_new_metadata_blocks+0x340/0x7e4 [ 88.750113][T11153] ocfs2_init_xattr_set_ctxt+0x310/0x7dc [ 88.750969][T11153] ocfs2_xattr_set+0x978/0xf0c [ 88.751725][T11153] ocfs2_set_acl+0x410/0x4cc [ 88.752384][T11153] ocfs2_iop_set_acl+0x178/0x258 [ 88.753153][T11153] posix_acl_xattr_set+0x2f8/0x394 [ 88.753892][T11153] __vfs_setxattr+0x374/0x390 [ 88.754644][T11153] __vfs_setxattr_noperm+0x120/0x56c [ 88.755434][T11153] __vfs_setxattr_locked+0x1e8/0x214 [ 88.756207][T11153] vfs_setxattr+0x158/0x2a8 [ 88.756872][T11153] setxattr+0x258/0x2d8 [ 88.757515][T11153] path_setxattr+0x130/0x260 [ 88.758202][T11153] __arm64_sys_setxattr+0xc4/0xe0 [ 88.758975][T11153] invoke_syscall+0x98/0x290 [ 88.759658][T11153] el0_svc_common+0x13c/0x258 [ 88.760338][T11153] do_el0_svc+0x5c/0x134 [ 88.761000][T11153] el0_svc+0x58/0x128 [ 88.761566][T11153] el0t_64_sync_handler+0x84/0xf0 [ 88.762385][T11153] el0t_64_sync+0x18c/0x190 [ 88.768544][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 88.769824][ T4329] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 88.771803][ T4329] EXT4-fs (loop2): Remounting filesystem read-only [ 88.771825][T11153] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 88.772687][ T4329] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 88.776916][T11153] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 88.779035][T11153] OCFS2: File system is now read-only. [ 88.779402][ T4329] EXT4-fs (loop2): Remounting filesystem read-only [ 88.779886][T11153] (syz.4.3089,11153,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 88.780843][ T4329] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 88.782366][T11153] (syz.4.3089,11153,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 88.785145][T11153] (syz.4.3089,11153,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 88.786452][T11153] (syz.4.3089,11153,1):ocfs2_block_group_alloc_contig:455 ERROR: status = -30 [ 88.787833][T11153] (syz.4.3089,11153,1):ocfs2_block_group_alloc:727 ERROR: status = -30 [ 88.788451][ T4329] EXT4-fs (loop2): Remounting filesystem read-only [ 88.789805][T11153] (syz.4.3089,11153,1):ocfs2_block_group_alloc:780 ERROR: status = -30 [ 88.791582][T11153] (syz.4.3089,11153,1):ocfs2_reserve_suballoc_bits:855 ERROR: status = -30 [ 88.793559][T11153] (syz.4.3089,11153,1):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30 [ 88.794826][T11153] (syz.4.3089,11153,1):ocfs2_reserve_new_metadata_blocks:1012 ERROR: status = -30 [ 88.796396][T11153] (syz.4.3089,11153,1):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -30 [ 88.798025][T11153] (syz.4.3089,11153,1):ocfs2_init_xattr_set_ctxt:3284 ERROR: status = -30 [ 88.802326][T11153] (syz.4.3089,11153,0):ocfs2_xattr_set:3641 ERROR: status = -30 [ 88.812669][ T4334] ocfs2: Unmounting device (7,4) on (node local)