last executing test programs: 19.913625143s ago: executing program 0 (id=1504): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3ff}]}, &(0x7f0000000300)=0x10) 19.793344494s ago: executing program 0 (id=1505): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c40), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x80084) 19.687081765s ago: executing program 0 (id=1506): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000006100)=[{{&(0x7f0000000080)=@hci={0x1f, 0x1, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[{0x10, 0x1, 0x25}], 0x10}}], 0x1, 0x4000081) 19.427771226s ago: executing program 0 (id=1519): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") mount(0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x10010, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/180, 0xb4) 19.237603228s ago: executing program 0 (id=1510): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read$dsp(r0, &(0x7f0000002980)=""/4122, 0x101a) 18.500066363s ago: executing program 0 (id=1534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000000000100000004000180100002800c0001800800018008"], 0x28}}, 0x0) 18.420005724s ago: executing program 32 (id=1534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000000000100000004000180100002800c0001800800018008"], 0x28}}, 0x0) 1.46568534s ago: executing program 4 (id=1837): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x8008af26, &(0x7f0000000080)) 1.313931071s ago: executing program 4 (id=1843): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x4b}) 1.160948702s ago: executing program 4 (id=1844): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000100)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}}, 0x20000010) 1.107263562s ago: executing program 1 (id=1849): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000003540), 0x4) 1.066629072s ago: executing program 4 (id=1850): prlimit64(0x0, 0x2, &(0x7f0000000140)={0x7fffffff, 0x20000000000008b}, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000005000/0xc000)=nil) 1.065684332s ago: executing program 3 (id=1860): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x92) 974.089613ms ago: executing program 1 (id=1853): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) 970.973043ms ago: executing program 4 (id=1864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 882.942914ms ago: executing program 1 (id=1854): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000cc0)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setxattr$incfs_id(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) removexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00') 882.081984ms ago: executing program 3 (id=1857): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xc2080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xb7) 775.843985ms ago: executing program 4 (id=1859): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000600)={[{@clear_cache}, {@user_subvol_rm}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x70, 0x32, 0x37, 0x0, 0x32, 0x36, 0x32, 0x36, 0x2d, 0x37]}}, {@nodatacow}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) 775.627324ms ago: executing program 5 (id=1861): r0 = openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xe) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x1000000) 683.280465ms ago: executing program 3 (id=1863): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 683.097645ms ago: executing program 5 (id=1865): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x14, 0x80, 0x0, 0xfc, 0x4}}, 0x1c}}, 0x80) 612.177825ms ago: executing program 2 (id=1866): mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 491.109616ms ago: executing program 3 (id=1867): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 490.779346ms ago: executing program 5 (id=1868): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000190001090000000000000000021800000000fd010014000008000100ac14140008000400", @ANYRES32=r1, @ANYBLOB="100016800c00038000000100", @ANYRES32, @ANYBLOB="060015000400000008000500e0000001"], 0x4c}}, 0x0) 485.861437ms ago: executing program 1 (id=1869): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 464.837247ms ago: executing program 2 (id=1870): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 413.760377ms ago: executing program 2 (id=1871): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, 0xffffffffffffffff) 393.335677ms ago: executing program 5 (id=1872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 392.832757ms ago: executing program 3 (id=1873): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80c81a, &(0x7f0000000040)=ANY=[], 0x1, 0x688, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0xfecc) 319.133627ms ago: executing program 2 (id=1874): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1={0xff, 0x9}, 0x8}, 0x1c, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) 238.967378ms ago: executing program 5 (id=1875): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0xff69) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005a0001000000060000000000000000de07"], 0x1c}}, 0x0) 183.714299ms ago: executing program 1 (id=1876): unshare(0x2c020400) r0 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7fffffffffffffff) 183.248489ms ago: executing program 2 (id=1877): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') lseek(r0, 0x8000, 0x0) getdents64(r0, 0xffffffffffffffff, 0x43) 105.971649ms ago: executing program 2 (id=1878): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x3c}}, 0x0) 73.702749ms ago: executing program 1 (id=1879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 73.154289ms ago: executing program 5 (id=1880): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_clone3(&(0x7f00000004c0)={0x2be00b600, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 0s ago: executing program 3 (id=1881): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2010000, &(0x7f0000000500)={[{@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@fat=@flush}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@utf8}, {@utf8}, {@fat=@check_strict}, {@numtail}, {@utf8no}]}, 0xfe, 0x34c, &(0x7f0000001740)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) kernel console output (not intermixed with test programs): 3754][ T4567] loop2: detected capacity change from 0 to 512 [ 58.611344][ T4568] loop3: detected capacity change from 0 to 1024 [ 58.687380][ T4567] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 58.720211][ T4568] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.984573][ T4579] loop0: detected capacity change from 0 to 2048 [ 59.028556][ T4579] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 59.080359][ T4588] loop2: detected capacity change from 0 to 512 [ 59.142178][ T4591] loop1: detected capacity change from 0 to 2048 [ 59.172490][ T4564] loop4: detected capacity change from 0 to 40427 [ 59.176043][ T4588] EXT4-fs (loop2): orphan cleanup on readonly fs [ 59.180247][ T4588] EXT4-fs error (device loop2): ext4_quota_enable:6384: comm syz.2.186: Bad quota inum: 11, type: 1 [ 59.184355][ T4588] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 59.208143][ T4588] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 59.209835][ T4588] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.266728][ T4564] F2FS-fs (loop4): invalid crc value [ 59.284973][ T4591] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a002e018, mo2=0002] [ 59.287085][ T4591] System zones: 0-4 [ 59.288846][ T4591] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.334450][ T4564] F2FS-fs (loop4): Found nat_bits in checkpoint [ 59.394448][ T4590] loop3: detected capacity change from 0 to 32768 [ 59.407151][ T4564] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 59.420905][ T4590] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.187 (4590) [ 59.434450][ T4564] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 59.471175][ T4590] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 59.473697][ T4590] BTRFS info (device loop3): enabling disk space caching [ 59.475495][ T4590] BTRFS info (device loop3): enabling auto defrag [ 59.479924][ T4590] BTRFS info (device loop3): doing ref verification [ 59.482119][ T4590] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 59.487597][ T4604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.192'. [ 59.489951][ T4604] Zero length message leads to an empty skb [ 59.492642][ T4590] BTRFS info (device loop3): use lzo compression, level 0 [ 59.494489][ T4590] BTRFS info (device loop3): force clearing of disk cache [ 59.496290][ T4590] BTRFS info (device loop3): disabling disk space caching [ 59.536844][ T4590] BTRFS info (device loop3): has skinny extents [ 59.552647][ T4608] loop1: detected capacity change from 0 to 512 [ 59.576094][ T4608] EXT4-fs (loop1): Ignoring removed orlov option [ 59.577902][ T4608] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.611164][ T4608] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 59.613220][ T4608] System zones: 1-12 [ 59.625266][ T4608] EXT4-fs (loop1): 1 truncate cleaned up [ 59.629730][ T4608] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,debug,nogrpid,errors=remount-ro,. Quota mode: none. [ 59.645555][ T4608] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #12: block 7: comm syz.1.191: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 59.689029][ T4608] EXT4-fs (loop1): Remounting filesystem read-only [ 59.889518][ T4590] BTRFS info (device loop3): enabling ssd optimizations [ 59.893195][ T4590] BTRFS info (device loop3): clearing free space tree [ 59.895538][ T4590] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 59.916614][ T4590] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 60.089453][ T4659] deleting an unspecified loop device is not supported. [ 60.320193][ T4671] loop0: detected capacity change from 0 to 1024 [ 60.410441][ T4671] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.678258][ T4698] loop4: detected capacity change from 0 to 512 [ 60.689035][ T4699] loop1: detected capacity change from 0 to 1024 [ 60.706242][ T4700] loop0: detected capacity change from 0 to 1024 [ 60.719552][ T4698] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.735307][ T4698] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.754958][ T4698] EXT4-fs warning (device loop4): verify_group_input:147: Cannot add at group 186 (only 1 groups) [ 60.801107][ T4699] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000036,nombcache,,errors=continue. Quota mode: none. [ 60.835065][ T4700] hfsplus: bad catalog entry type [ 60.857294][ T4699] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.225: corrupted xattr block 128 [ 60.930731][ T9] hfsplus: b-tree write err: -5, ino 4 [ 61.084811][ T4720] loop3: detected capacity change from 0 to 1024 [ 61.150868][ T4720] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 61.173505][ T4729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.236'. [ 61.344278][ T4733] loop1: detected capacity change from 0 to 1024 [ 61.417821][ T4733] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 61.489930][ T4740] loop3: detected capacity change from 0 to 1024 [ 61.574692][ T4740] hfsplus: bad catalog entry type [ 61.587764][ T4744] loop2: detected capacity change from 0 to 512 [ 61.588911][ T4748] loop0: detected capacity change from 0 to 1024 [ 61.623889][ T4744] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.633487][ T136] hfsplus: b-tree write err: -5, ino 4 [ 61.657073][ T4748] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000036,nombcache,,errors=continue. Quota mode: none. [ 61.706757][ T4744] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 61.738714][ T4744] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 186 (only 1 groups) [ 61.741682][ T4748] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.243: corrupted xattr block 128 [ 62.080788][ T4776] loop2: detected capacity change from 0 to 1024 [ 62.086252][ T4778] loop0: detected capacity change from 0 to 512 [ 62.152476][ T4776] hfsplus: bad catalog entry type [ 62.173088][ T4778] EXT4-fs (loop0): orphan cleanup on readonly fs [ 62.175296][ T4778] EXT4-fs error (device loop0): ext4_quota_enable:6384: comm syz.0.258: Bad quota inum: 11, type: 1 [ 62.182302][ T4778] EXT4-fs warning (device loop0): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 62.231568][ T4778] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 62.233371][ T4778] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 62.250685][ T505] hfsplus: b-tree write err: -5, ino 4 [ 62.329869][ T4787] loop3: detected capacity change from 0 to 1024 [ 62.392410][ T4787] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000036,nombcache,,errors=continue. Quota mode: none. [ 62.419852][ T4791] loop1: detected capacity change from 0 to 512 [ 62.422587][ T4787] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.263: corrupted xattr block 128 [ 62.488611][ T4791] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.540175][ T4769] loop4: detected capacity change from 0 to 32768 [ 62.549246][ T4791] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 62.584041][ T4769] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.256 (4769) [ 62.610333][ T4791] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 186 (only 1 groups) [ 62.679419][ T4769] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 62.681787][ T4769] BTRFS info (device loop4): enabling disk space caching [ 62.683539][ T4769] BTRFS info (device loop4): enabling auto defrag [ 62.685179][ T4769] BTRFS info (device loop4): doing ref verification [ 62.699275][ T4769] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 62.701763][ T4769] BTRFS info (device loop4): use lzo compression, level 0 [ 62.729103][ T4769] BTRFS info (device loop4): force clearing of disk cache [ 62.730813][ T4769] BTRFS info (device loop4): disabling disk space caching [ 62.732636][ T4769] BTRFS info (device loop4): has skinny extents [ 62.843428][ T4809] loop0: detected capacity change from 0 to 2048 [ 62.897228][ T4824] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.024704][ T4809] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 63.058955][ T4809] Remounting filesystem read-only [ 63.077553][ T4769] BTRFS info (device loop4): enabling ssd optimizations [ 63.087899][ T4769] BTRFS info (device loop4): clearing free space tree [ 63.089945][ T4769] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 63.092437][ T4769] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 63.119527][ T4820] loop1: detected capacity change from 0 to 8192 [ 63.128386][ T4843] loop3: detected capacity change from 0 to 512 [ 63.154644][ T4843] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.169433][ T4843] EXT4-fs error (device loop3): ext4_quota_enable:6384: comm syz.3.278: Bad quota inum: 11, type: 1 [ 63.179537][ T4843] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 63.183371][ T4843] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 63.197765][ T4843] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 63.206768][ T4820] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 63.210625][ T4820] REISERFS (device loop1): using ordered data mode [ 63.212262][ T4820] reiserfs: using flush barriers [ 63.249791][ T4820] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 63.254416][ T4820] REISERFS (device loop1): checking transaction log (loop1) [ 63.327864][ T4820] REISERFS (device loop1): Using r5 hash to sort names [ 63.541247][ T4854] loop3: detected capacity change from 0 to 4096 [ 64.132397][ T4871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 64.173012][ T4848] loop2: detected capacity change from 0 to 40427 [ 64.229850][ T4848] F2FS-fs (loop2): LFS not compatible with checkpoint=disable [ 64.268677][ T4857] loop0: detected capacity change from 0 to 32768 [ 64.343911][ T4857] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.285 (4857) [ 64.383454][ T4859] loop4: detected capacity change from 0 to 40427 [ 64.392152][ T4857] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 64.394384][ T4857] BTRFS info (device loop0): using free space tree [ 64.396164][ T4857] BTRFS info (device loop0): has skinny extents [ 64.410984][ T4859] F2FS-fs (loop4): invalid crc value [ 64.452050][ T4859] F2FS-fs (loop4): Found nat_bits in checkpoint [ 64.546608][ T4859] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 64.580827][ T4857] BTRFS info (device loop0): enabling ssd optimizations [ 64.609775][ T4877] loop1: detected capacity change from 0 to 32768 [ 64.626778][ T4877] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.294 (4877) [ 64.647709][ T4877] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 64.649815][ T4877] BTRFS info (device loop1): enabling disk space caching [ 64.651556][ T4877] BTRFS info (device loop1): enabling auto defrag [ 64.653121][ T4877] BTRFS info (device loop1): doing ref verification [ 64.671878][ T4859] UBIFS error (pid: 4859): cannot open "./file0", error -22 [ 64.687709][ T4877] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 64.702427][ T4040] attempt to access beyond end of device [ 64.702427][ T4040] loop4: rw=2049, want=45104, limit=40427 [ 64.725034][ T4902] tipc: Started in network mode [ 64.726033][ T4877] BTRFS info (device loop1): use lzo compression, level 0 [ 64.728502][ T4877] BTRFS info (device loop1): force clearing of disk cache [ 64.730290][ T4877] BTRFS info (device loop1): disabling disk space caching [ 64.732041][ T4877] BTRFS info (device loop1): has skinny extents [ 64.747399][ T4902] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 64.749595][ T4902] tipc: Enabled bearer <eth:macvlan0>, priority 7 [ 64.988298][ T4923] loop4: detected capacity change from 0 to 512 [ 65.144166][ T4923] EXT4-fs (loop4): orphan cleanup on readonly fs [ 65.146243][ T4923] EXT4-fs error (device loop4): ext4_quota_enable:6384: comm syz.4.295: Bad quota inum: 11, type: 1 [ 65.175765][ T4923] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 65.185869][ T4877] BTRFS info (device loop1): enabling ssd optimizations [ 65.188476][ T4923] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 65.190191][ T4923] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.204463][ T4877] BTRFS info (device loop1): clearing free space tree [ 65.206273][ T4877] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 65.209405][ T4877] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 65.236663][ T4942] loop0: detected capacity change from 0 to 4096 [ 65.274698][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 65.748109][ T4109] tipc: Node number set to 10398378 [ 65.763977][ T4966] netlink: 'syz.3.316': attribute type 29 has an invalid length. [ 65.766167][ T4966] netlink: 'syz.3.316': attribute type 29 has an invalid length. [ 65.808729][ T4972] netlink: 'syz.3.316': attribute type 29 has an invalid length. [ 65.811563][ T4971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'. [ 66.130749][ T4979] loop4: detected capacity change from 0 to 4096 [ 66.254588][ T5005] netlink: 'syz.1.334': attribute type 29 has an invalid length. [ 66.269300][ T5005] netlink: 'syz.1.334': attribute type 29 has an invalid length. [ 66.287581][ T5005] netlink: 'syz.1.334': attribute type 29 has an invalid length. [ 66.592118][ T5026] loop0: detected capacity change from 0 to 16 [ 66.653717][ T5026] erofs: (device loop0): mounted with root inode @ nid 36. [ 66.685100][ T5026] xt_hashlimit: max too large, truncated to 1048576 [ 66.714092][ T5026] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 66.734343][ T4994] loop2: detected capacity change from 0 to 32768 [ 66.736161][ T5026] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -57 in[61, 4035] out[1851] [ 66.761609][ T5026] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 66.908445][ T5036] loop1: detected capacity change from 0 to 4096 [ 66.908573][ T4994] XFS (loop2): Mounting V5 Filesystem [ 67.044814][ T4994] XFS (loop2): Ending clean mount [ 67.081881][ T4994] XFS (loop2): Quotacheck needed: Please wait. [ 67.150795][ T4994] XFS (loop2): Quotacheck: Done. [ 67.294596][ T4030] XFS (loop2): Unmounting Filesystem [ 67.308370][ T5068] loop4: detected capacity change from 0 to 2048 [ 67.361995][ T5068] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 67.366231][ T5072] tipc: Started in network mode [ 67.372099][ T5072] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 67.374096][ T5072] tipc: Enabled bearer <eth:macvlan0>, priority 7 [ 67.385409][ T5068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.524973][ T5076] loop1: detected capacity change from 0 to 16 [ 67.586323][ T5076] erofs: (device loop1): mounted with root inode @ nid 36. [ 67.613327][ T5076] xt_hashlimit: max too large, truncated to 1048576 [ 67.615499][ T5076] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 67.633491][ T5076] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -57 in[61, 4035] out[1851] [ 67.650790][ T5076] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 68.028182][ T5067] loop3: detected capacity change from 0 to 32768 [ 68.090500][ T5067] XFS (loop3): Mounting V5 Filesystem [ 68.154172][ T5067] XFS (loop3): Ending clean mount [ 68.181572][ T5067] XFS (loop3): Quotacheck needed: Please wait. [ 68.239646][ T5088] loop2: detected capacity change from 0 to 40427 [ 68.263710][ T5081] loop4: detected capacity change from 0 to 32768 [ 68.278000][ T5081] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.367 (5081) [ 68.280403][ T5067] XFS (loop3): Quotacheck: Done. [ 68.295604][ T5081] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 68.301723][ T5088] F2FS-fs (loop2): invalid crc value [ 68.303801][ T5081] BTRFS info (device loop4): using free space tree [ 68.306266][ T5081] BTRFS info (device loop4): has skinny extents [ 68.314551][ T5088] F2FS-fs (loop2): Found nat_bits in checkpoint [ 68.384436][ T4039] XFS (loop3): Unmounting Filesystem [ 68.421204][ T5088] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.470945][ T5088] UBIFS error (pid: 5088): cannot open "./file0", error -22 [ 68.493198][ T7] tipc: Node number set to 10398378 [ 68.514312][ T4030] attempt to access beyond end of device [ 68.514312][ T4030] loop2: rw=2049, want=45104, limit=40427 [ 68.586678][ T5081] BTRFS info (device loop4): enabling ssd optimizations [ 68.964631][ T5132] loop2: detected capacity change from 0 to 4096 [ 69.064013][ T5137] loop1: detected capacity change from 0 to 2048 [ 69.101753][ T5139] loop3: detected capacity change from 0 to 256 [ 69.156537][ T5140] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.186846][ T5137] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 69.195918][ T5137] Remounting filesystem read-only [ 69.228477][ T5139] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 69.621404][ T5130] loop0: detected capacity change from 0 to 32768 [ 69.631847][ T21] cfg80211: failed to load regulatory.db [ 69.636043][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.638885][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.796204][ T5130] XFS (loop0): Mounting V5 Filesystem [ 69.956840][ T5130] XFS (loop0): Ending clean mount [ 69.969026][ T5130] XFS (loop0): Quotacheck needed: Please wait. [ 70.005794][ T5130] XFS (loop0): Quotacheck: Done. [ 70.108004][ T5196] loop2: detected capacity change from 0 to 2048 [ 70.131010][ T5200] capability: warning: `syz.4.403' uses 32-bit capabilities (legacy support in use) [ 70.136270][ T4035] XFS (loop0): Unmounting Filesystem [ 70.189633][ T5196] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 70.205961][ T5196] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.371121][ T5156] loop3: detected capacity change from 0 to 40427 [ 70.414762][ T5214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.411'. [ 70.454822][ T5156] F2FS-fs (loop3): invalid crc value [ 70.500092][ T5156] F2FS-fs (loop3): Found nat_bits in checkpoint [ 70.556625][ T5156] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 70.642141][ T5156] UBIFS error (pid: 5156): cannot open "./file0", error -22 [ 70.714115][ T4039] attempt to access beyond end of device [ 70.714115][ T4039] loop3: rw=2049, want=45104, limit=40427 [ 70.743466][ T5235] loop4: detected capacity change from 0 to 8 [ 70.777346][ T5235] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 70.805792][ T5235] cramfs: Error -3 while decompressing! [ 70.813371][ T5235] cramfs: 00000000979c8fde(26)->00000000937af690(4096) [ 70.816962][ T5235] cramfs: Error -3 while decompressing! [ 70.818374][ T5235] cramfs: 00000000bb9f40da(26)->0000000072c0c9d1(4096) [ 70.820148][ T5235] cramfs: Error -3 while decompressing! [ 70.821512][ T5235] cramfs: 00000000979c8fde(26)->00000000937af690(4096) [ 71.289347][ T5253] loop4: detected capacity change from 0 to 512 [ 71.353509][ T5253] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.409214][ T5229] loop1: detected capacity change from 0 to 32768 [ 71.425789][ T5253] EXT4-fs (loop4): 1 orphan inode deleted [ 71.427380][ T5253] EXT4-fs (loop4): 1 truncate cleaned up [ 71.428795][ T5253] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 71.446365][ T5253] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz.4.428: path /99/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 71.492421][ T5253] EXT4-fs (loop4): Remounting filesystem read-only [ 71.562925][ T5228] loop2: detected capacity change from 0 to 32768 [ 71.571778][ T5274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 71.573966][ T5229] XFS (loop1): Mounting V5 Filesystem [ 71.685568][ T5228] XFS (loop2): Mounting V5 Filesystem [ 71.686300][ T5229] XFS (loop1): Ending clean mount [ 71.702404][ T5229] XFS (loop1): Quotacheck needed: Please wait. [ 71.757741][ T5229] XFS (loop1): Quotacheck: Done. [ 71.822725][ T5298] loop0: detected capacity change from 0 to 256 [ 71.827019][ T5228] XFS (loop2): Ending clean mount [ 71.830541][ T5228] XFS (loop2): Quotacheck needed: Please wait. [ 71.886208][ T5298] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 71.906871][ T5228] XFS (loop2): Quotacheck: Done. [ 71.962836][ T4029] XFS (loop1): Unmounting Filesystem [ 72.073396][ T4030] XFS (loop2): Unmounting Filesystem [ 72.220485][ T5309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 72.517138][ T5321] loop0: detected capacity change from 0 to 1024 [ 72.540499][ T5303] loop3: detected capacity change from 0 to 32768 [ 72.607631][ T5321] hfsplus: bad catalog entry type [ 72.666051][ T148] hfsplus: b-tree write err: -5, ino 4 [ 72.892014][ T5345] loop0: detected capacity change from 0 to 128 [ 72.974517][ T5345] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 72.976784][ T5345] FAT-fs (loop0): Filesystem has been set read-only [ 73.020519][ T5354] loop3: detected capacity change from 0 to 512 [ 73.045960][ T5357] loop2: detected capacity change from 0 to 8 [ 73.055368][ T5357] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 73.063741][ T5354] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.071636][ T5360] loop4: detected capacity change from 0 to 1024 [ 73.112861][ T5357] cramfs: Error -3 while decompressing! [ 73.114256][ T5357] cramfs: 0000000095c20c37(26)->0000000070bc6ec2(4096) [ 73.117120][ T5354] EXT4-fs (loop3): 1 orphan inode deleted [ 73.118570][ T5354] EXT4-fs (loop3): 1 truncate cleaned up [ 73.119932][ T5354] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 73.131844][ T5357] cramfs: Error -3 while decompressing! [ 73.133187][ T5357] cramfs: 0000000067ce52c7(26)->0000000090735d62(4096) [ 73.134948][ T5357] cramfs: Error -3 while decompressing! [ 73.145960][ T5360] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bsdgroups,resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,minixdf,errors=remount-ro,journal_ioprio=0x0000000000000006,data_err=abort,. Quota mode: writeback. [ 73.172562][ T5357] cramfs: 0000000095c20c37(26)->0000000070bc6ec2(4096) [ 73.192883][ T5354] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz.3.459: path /92/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 73.202284][ T5360] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.472: bad inode number: 12 [ 73.219713][ T5360] EXT4-fs (loop4): Remounting filesystem read-only [ 73.222194][ T5360] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.472: bad inode number: 12 [ 73.234105][ T5354] EXT4-fs (loop3): Remounting filesystem read-only [ 73.242962][ T5360] EXT4-fs (loop4): Remounting filesystem read-only [ 73.302455][ T5371] loop0: detected capacity change from 0 to 8 [ 73.357696][ T5371] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 73.395051][ T5371] cramfs: Error -3 while decompressing! [ 73.402615][ T5371] cramfs: 00000000979c8fde(26)->000000008ef69d05(4096) [ 73.404404][ T5371] cramfs: Error -3 while decompressing! [ 73.405757][ T5371] cramfs: 00000000bb9f40da(26)->000000009dfc378e(4096) [ 73.423690][ T5371] cramfs: Error -3 while decompressing! [ 73.425064][ T5371] cramfs: 00000000979c8fde(26)->000000008ef69d05(4096) [ 73.625763][ T5398] loop3: detected capacity change from 0 to 128 [ 73.641144][ T5397] loop2: detected capacity change from 0 to 512 [ 73.679958][ T5397] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.684445][ T5398] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 73.703118][ T5397] EXT4-fs (loop2): 1 orphan inode deleted [ 73.704548][ T5397] EXT4-fs (loop2): 1 truncate cleaned up [ 73.706013][ T5397] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 73.859045][ T5397] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz.2.488: path /97/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 73.906905][ T5397] EXT4-fs (loop2): Remounting filesystem read-only [ 73.968465][ T5414] loop3: detected capacity change from 0 to 1024 [ 74.092361][ T5420] loop1: detected capacity change from 0 to 1024 [ 74.175562][ T5420] EXT4-fs (loop1): Ignoring removed orlov option [ 74.183583][ T5414] EXT4-fs (loop3): Test dummy encryption mode enabled [ 74.199359][ T5420] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,orlov,. Quota mode: none. [ 74.224847][ T5414] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 74.408940][ T5414] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 74.528755][ T5402] loop4: detected capacity change from 0 to 32768 [ 74.671159][ T5454] loop1: detected capacity change from 0 to 1024 [ 74.759938][ T5454] hfsplus: bad catalog entry type [ 74.818563][ T407] hfsplus: b-tree write err: -5, ino 4 [ 75.070055][ T5472] loop1: detected capacity change from 0 to 128 [ 75.117977][ T5472] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 75.120231][ T5472] FAT-fs (loop1): Filesystem has been set read-only [ 75.302988][ T5488] loop3: detected capacity change from 0 to 1024 [ 75.385301][ T5488] hfsplus: bad catalog entry type [ 75.443072][ T505] hfsplus: b-tree write err: -5, ino 4 [ 75.730317][ T5513] loop4: detected capacity change from 0 to 128 [ 75.825327][ T5513] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 75.840255][ T5513] FAT-fs (loop4): Filesystem has been set read-only [ 75.870793][ T5521] loop3: detected capacity change from 0 to 1024 [ 75.959760][ T5521] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bsdgroups,resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,minixdf,errors=remount-ro,journal_ioprio=0x0000000000000006,data_err=abort,. Quota mode: writeback. [ 75.977544][ T5484] loop2: detected capacity change from 0 to 32768 [ 76.104671][ T5521] EXT4-fs error (device loop3): ext4_lookup:1850: inode #2: comm syz.3.539: bad inode number: 12 [ 76.166891][ T5521] EXT4-fs (loop3): Remounting filesystem read-only [ 76.168884][ T5536] EXT4-fs error (device loop3): ext4_lookup:1850: inode #2: comm syz.3.539: bad inode number: 12 [ 76.176009][ T5536] EXT4-fs (loop3): Remounting filesystem read-only [ 76.345440][ T5534] loop0: detected capacity change from 0 to 8192 [ 76.419372][ T5534] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 76.421899][ T5534] REISERFS (device loop0): using ordered data mode [ 76.423550][ T5534] reiserfs: using flush barriers [ 76.429313][ T5534] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.433477][ T5534] REISERFS (device loop0): checking transaction log (loop0) [ 76.439469][ T5534] REISERFS (device loop0): Using r5 hash to sort names [ 76.442613][ T5534] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 76.453809][ T5534] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 76.815845][ T5569] loop2: detected capacity change from 0 to 1024 [ 76.889766][ T5569] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bsdgroups,resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,minixdf,errors=remount-ro,journal_ioprio=0x0000000000000006,data_err=abort,. Quota mode: writeback. [ 76.965202][ T5569] EXT4-fs error (device loop2): ext4_lookup:1850: inode #2: comm syz.2.563: bad inode number: 12 [ 76.975789][ T5577] loop0: detected capacity change from 0 to 128 [ 77.002291][ T5569] EXT4-fs (loop2): Remounting filesystem read-only [ 77.022524][ T5577] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 77.025756][ T5579] EXT4-fs error (device loop2): ext4_lookup:1850: inode #2: comm syz.2.563: bad inode number: 12 [ 77.052752][ T5579] EXT4-fs (loop2): Remounting filesystem read-only [ 77.324746][ T5593] usb usb1: usbfs: process 5593 (syz.0.571) did not claim interface 0 before use [ 77.524524][ T5605] netlink: 'syz.2.579': attribute type 4 has an invalid length. [ 77.530660][ T5605] netlink: 17 bytes leftover after parsing attributes in process `syz.2.579'. [ 77.621419][ T5611] loop4: detected capacity change from 0 to 128 [ 77.663289][ T5611] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 77.747342][ T5617] loop2: detected capacity change from 0 to 1024 [ 77.781708][ T5620] loop3: detected capacity change from 0 to 64 [ 77.793034][ T5617] EXT4-fs (loop2): Ignoring removed orlov option [ 77.849596][ T5617] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,orlov,. Quota mode: none. [ 77.915902][ T5620] attempt to access beyond end of device [ 77.915902][ T5620] loop3: rw=2049, want=268435470, limit=64 [ 77.966880][ T5620] Buffer I/O error on dev loop3, logical block 134217734, lost async page write [ 78.264396][ T5652] loop2: detected capacity change from 0 to 128 [ 78.266681][ T21] Bluetooth: hci4: command 0x0405 tx timeout [ 78.303806][ T5652] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 79.021211][ T5657] loop4: detected capacity change from 0 to 40427 [ 79.133798][ T5657] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 79.135585][ T5657] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 79.172169][ T5657] F2FS-fs (loop4): Found nat_bits in checkpoint [ 79.205291][ T5657] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 79.207003][ T5657] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 79.254021][ T5669] loop2: detected capacity change from 0 to 8192 [ 79.272180][ T4040] attempt to access beyond end of device [ 79.272180][ T4040] loop4: rw=2049, want=45104, limit=40427 [ 79.317604][ T5669] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 79.320036][ T5669] REISERFS (device loop2): using ordered data mode [ 79.321657][ T5669] reiserfs: using flush barriers [ 79.336377][ T5680] loop0: detected capacity change from 0 to 1024 [ 79.340976][ T5665] loop1: detected capacity change from 0 to 32768 [ 79.361466][ T5669] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.372919][ T5680] EXT4-fs (loop0): Test dummy encryption mode enabled [ 79.376107][ T5669] REISERFS (device loop2): checking transaction log (loop2) [ 79.382888][ T5669] REISERFS (device loop2): Using r5 hash to sort names [ 79.384841][ T5669] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 79.391186][ T5665] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.607 (5665) [ 79.411691][ T5669] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 79.430032][ T5665] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 79.432508][ T5665] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 79.434736][ T5665] BTRFS info (device loop1): use zstd compression, level 3 [ 79.450125][ T5680] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 79.463121][ T5665] BTRFS info (device loop1): using free space tree [ 79.464841][ T5665] BTRFS info (device loop1): has skinny extents [ 79.826568][ T5665] BTRFS info (device loop1): enabling ssd optimizations [ 80.175946][ T5730] netlink: 'syz.4.626': attribute type 4 has an invalid length. [ 80.178262][ T5730] netlink: 17 bytes leftover after parsing attributes in process `syz.4.626'. [ 80.378695][ T5742] loop4: detected capacity change from 0 to 764 [ 80.420265][ T5742] rock: directory entry would overflow storage [ 80.421776][ T5742] rock: sig=0x4654, size=5, remaining=4 [ 80.472925][ T5747] loop0: detected capacity change from 0 to 64 [ 80.593657][ T5721] loop3: detected capacity change from 0 to 32768 [ 80.739094][ T5721] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 80.862235][ T5772] loop0: detected capacity change from 0 to 512 [ 80.896658][ T5772] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.937273][ T5772] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 80.947666][ T5772] EXT4-fs (loop0): 1 truncate cleaned up [ 80.949013][ T5772] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.959614][ T4039] (syz-executor,4039,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 80.964486][ T4039] ocfs2: Unmounting device (7,3) on (node local) [ 81.002903][ T5772] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.645: corrupted xattr block 19 [ 81.157360][ T5783] loop2: detected capacity change from 0 to 764 [ 81.181464][ T5785] loop4: detected capacity change from 0 to 512 [ 81.200319][ T5783] rock: directory entry would overflow storage [ 81.201898][ T5783] rock: sig=0x4654, size=5, remaining=4 [ 81.232572][ T5790] loop1: detected capacity change from 0 to 64 [ 81.238605][ T5785] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000002,lazytime,delalloc,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 81.286978][ T5785] EXT4-fs (loop4): Online resizing not supported with sparse_super2 [ 81.336369][ T5795] loop0: detected capacity change from 0 to 2048 [ 81.391204][ T5795] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 81.439602][ T5804] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.559319][ T5811] netlink: 'syz.1.659': attribute type 4 has an invalid length. [ 81.561285][ T5811] netlink: 17 bytes leftover after parsing attributes in process `syz.1.659'. [ 81.653438][ T5816] loop4: detected capacity change from 0 to 64 [ 81.754200][ T5816] attempt to access beyond end of device [ 81.754200][ T5816] loop4: rw=2049, want=268435470, limit=64 [ 81.773672][ T5816] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 81.819625][ T5833] loop1: detected capacity change from 0 to 512 [ 81.900368][ T5833] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000002,lazytime,delalloc,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 81.915449][ T5841] loop3: detected capacity change from 0 to 1024 [ 81.938722][ T5833] EXT4-fs (loop1): Online resizing not supported with sparse_super2 [ 82.018285][ T5850] netlink: 'syz.1.675': attribute type 5 has an invalid length. [ 82.020226][ T5850] netlink: 40 bytes leftover after parsing attributes in process `syz.1.675'. [ 82.066334][ T5841] hfsplus: walked past end of dir [ 82.136786][ T505] hfsplus: b-tree write err: -5, ino 4 [ 82.201000][ T5862] netlink: 'syz.2.696': attribute type 5 has an invalid length. [ 82.202938][ T5862] netlink: 40 bytes leftover after parsing attributes in process `syz.2.696'. [ 82.418388][ T5880] loop2: detected capacity change from 0 to 64 [ 82.423708][ T5882] netlink: 'syz.3.691': attribute type 4 has an invalid length. [ 82.436121][ T5882] netlink: 17 bytes leftover after parsing attributes in process `syz.3.691'. [ 82.484953][ T5884] loop4: detected capacity change from 0 to 1024 [ 82.500836][ T5880] attempt to access beyond end of device [ 82.500836][ T5880] loop2: rw=2049, want=268435470, limit=64 [ 82.503844][ T5880] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 82.516724][ T5888] netlink: 40 bytes leftover after parsing attributes in process `syz.1.693'. [ 82.634723][ T5884] hfsplus: walked past end of dir [ 83.102722][ T5899] loop3: detected capacity change from 0 to 40427 [ 83.134970][ T407] hfsplus: b-tree write err: -5, ino 4 [ 83.162944][ T5899] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 83.164695][ T5899] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 83.208023][ T5905] loop0: detected capacity change from 0 to 512 [ 83.228559][ T5899] F2FS-fs (loop3): Found nat_bits in checkpoint [ 83.240380][ T5905] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.268953][ T5899] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 83.270955][ T5899] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 83.296107][ T5905] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.706: bad orphan inode 131083 [ 83.300175][ T5905] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 83.339101][ T5905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.706'. [ 83.502311][ T5919] IPVS: Error connecting to the multicast addr [ 83.506393][ T4039] attempt to access beyond end of device [ 83.506393][ T4039] loop3: rw=2049, want=45104, limit=40427 [ 83.602644][ T5925] netlink: 40 bytes leftover after parsing attributes in process `syz.0.711'. [ 83.631547][ T5927] loop2: detected capacity change from 0 to 128 [ 83.681502][ T5927] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 83.920880][ T5946] loop1: detected capacity change from 0 to 512 [ 83.979932][ T5946] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.990950][ T5946] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.722: bad orphan inode 131083 [ 83.994277][ T5946] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 84.141892][ T5946] netlink: 28 bytes leftover after parsing attributes in process `syz.1.722'. [ 84.284463][ T5938] loop4: detected capacity change from 0 to 32768 [ 84.345793][ T5970] netlink: 104 bytes leftover after parsing attributes in process `syz.1.744'. [ 84.361114][ T5938] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.719 (5938) [ 84.536576][ T5938] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 84.539972][ T5938] BTRFS info (device loop4): use zlib compression, level 3 [ 84.544025][ T5938] BTRFS info (device loop4): using free space tree [ 84.548925][ T5938] BTRFS info (device loop4): has skinny extents [ 84.790901][ T5938] BTRFS info (device loop4): enabling ssd optimizations [ 85.374555][ T6031] loop3: detected capacity change from 0 to 1024 [ 85.785245][ T6059] loop3: detected capacity change from 0 to 2048 [ 85.871816][ T6059] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.533829][ T6080] loop4: detected capacity change from 0 to 2048 [ 86.579434][ T6085] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.792084][ T6098] affs: No valid root block on device nbd1 [ 87.095281][ T6076] loop3: detected capacity change from 0 to 40427 [ 87.109864][ T6076] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 87.111817][ T6076] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 87.119930][ T6076] F2FS-fs (loop3): invalid crc value [ 87.128782][ T6076] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.152112][ T6076] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 87.153902][ T6076] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 87.224841][ T6122] loop0: detected capacity change from 0 to 64 [ 87.230827][ T4039] attempt to access beyond end of device [ 87.230827][ T4039] loop3: rw=2049, want=45104, limit=40427 [ 87.404253][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.793'. [ 87.433470][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'. [ 87.508372][ T6138] loop1: detected capacity change from 0 to 512 [ 87.627662][ T6138] EXT4-fs (loop1): 1 orphan inode deleted [ 87.635952][ T6138] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 87.683931][ T6146] loop3: detected capacity change from 0 to 2048 [ 87.751589][ T6149] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.161109][ T6170] loop1: detected capacity change from 0 to 1024 [ 88.287773][ T6170] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.452008][ T6186] loop3: detected capacity change from 0 to 512 [ 88.526538][ T6186] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.626368][ T6155] loop4: detected capacity change from 0 to 40427 [ 88.669641][ T6155] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 88.671449][ T6155] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 88.675096][ T6155] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 88.679219][ T6155] F2FS-fs (loop4): Found nat_bits in checkpoint [ 88.715414][ T6155] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 88.721736][ T6155] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 88.775994][ T6155] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 88.929790][ T6182] loop2: detected capacity change from 0 to 32768 [ 89.041232][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.829'. [ 89.052598][ T6182] XFS (loop2): Mounting V5 Filesystem [ 89.119860][ T6182] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 89.160861][ T6182] XFS (loop2): Starting recovery (logdev: internal) [ 89.181596][ T6182] XFS (loop2): Ending recovery (logdev: internal) [ 89.300054][ T4030] XFS (loop2): Unmounting Filesystem [ 89.415217][ T6237] loop0: detected capacity change from 0 to 512 [ 89.444326][ T6241] loop4: detected capacity change from 0 to 1024 [ 89.538208][ T6241] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.572112][ T6237] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.204776][ T6284] netlink: 104 bytes leftover after parsing attributes in process `syz.0.862'. [ 90.362185][ T6251] loop3: detected capacity change from 0 to 32768 [ 90.413121][ T6293] loop0: detected capacity change from 0 to 1024 [ 90.413881][ T6251] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.847 (6251) [ 90.479980][ T6251] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 90.482386][ T6251] BTRFS info (device loop3): use zlib compression, level 3 [ 90.484255][ T6251] BTRFS info (device loop3): using free space tree [ 90.485833][ T6251] BTRFS info (device loop3): has skinny extents [ 90.581069][ T6302] netlink: 'syz.2.871': attribute type 3 has an invalid length. [ 90.638945][ T6273] loop4: detected capacity change from 0 to 32768 [ 90.760898][ T6322] loop2: detected capacity change from 0 to 1024 [ 90.858586][ T6251] BTRFS info (device loop3): enabling ssd optimizations [ 90.890426][ T6273] XFS (loop4): Mounting V5 Filesystem [ 90.953080][ T6273] XFS (loop4): Ending clean mount [ 91.042718][ T4040] XFS (loop4): Unmounting Filesystem [ 91.305417][ T4178] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4178) [ 91.416803][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'. [ 91.537994][ T6359] loop1: detected capacity change from 0 to 1024 [ 91.667832][ T6359] hfsplus: bad catalog entry type [ 91.684970][ T6365] loop4: detected capacity change from 0 to 1024 [ 91.730790][ T505] hfsplus: b-tree write err: -5, ino 4 [ 91.960088][ T6374] loop2: detected capacity change from 0 to 512 [ 92.025122][ T6374] EXT4-fs (loop2): 1 orphan inode deleted [ 92.025476][ T6347] loop0: detected capacity change from 0 to 40427 [ 92.033344][ T6374] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 92.045264][ T6379] loop4: detected capacity change from 0 to 128 [ 92.071921][ T6347] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 92.074046][ T6347] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 92.092947][ T6347] F2FS-fs (loop0): invalid crc value [ 92.127028][ T6347] F2FS-fs (loop0): Found nat_bits in checkpoint [ 92.171372][ T6363] loop3: detected capacity change from 0 to 40427 [ 92.218820][ T6347] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 92.220744][ T6347] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 92.264140][ T6363] F2FS-fs (loop3): Found nat_bits in checkpoint [ 92.322180][ T6363] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 92.382390][ T4035] attempt to access beyond end of device [ 92.382390][ T4035] loop0: rw=2049, want=45104, limit=40427 [ 92.390376][ T4039] attempt to access beyond end of device [ 92.390376][ T4039] loop3: rw=2049, want=45104, limit=40427 [ 92.474824][ T6395] netlink: 48 bytes leftover after parsing attributes in process `syz.2.900'. [ 92.794459][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 92.884057][ T6421] loop1: detected capacity change from 0 to 256 [ 92.894741][ T6424] loop3: detected capacity change from 0 to 128 [ 92.952284][ T6421] FAT-fs (loop1): Directory bread(block 64) failed [ 92.954819][ T6421] FAT-fs (loop1): Directory bread(block 65) failed [ 92.964973][ T6430] loop0: detected capacity change from 0 to 128 [ 92.971863][ T6421] FAT-fs (loop1): Directory bread(block 66) failed [ 92.973501][ T6421] FAT-fs (loop1): Directory bread(block 67) failed [ 92.979626][ T6424] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.993256][ T6421] FAT-fs (loop1): Directory bread(block 68) failed [ 92.996038][ T6421] FAT-fs (loop1): Directory bread(block 69) failed [ 92.998015][ T6421] FAT-fs (loop1): Directory bread(block 70) failed [ 92.999660][ T6421] FAT-fs (loop1): Directory bread(block 71) failed [ 93.001287][ T6421] FAT-fs (loop1): Directory bread(block 72) failed [ 93.002968][ T6421] FAT-fs (loop1): Directory bread(block 73) failed [ 93.051239][ T6430] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 93.056109][ T6430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.289851][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 93.291960][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.923'. [ 93.292824][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'. [ 93.618654][ T6466] netlink: 'syz.0.932': attribute type 1 has an invalid length. [ 93.804758][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 93.842742][ T6476] device gretap0 entered promiscuous mode [ 93.855627][ T6445] loop4: detected capacity change from 0 to 32768 [ 93.906632][ T6445] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 93.998840][ T6445] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 94.016109][ T6447] loop3: detected capacity change from 0 to 32768 [ 94.121960][ T6478] loop0: detected capacity change from 0 to 32768 [ 94.134580][ T4040] ocfs2: Unmounting device (7,4) on (node local) [ 94.233645][ T6478] XFS (loop0): Mounting V5 Filesystem [ 94.299582][ T6502] loop2: detected capacity change from 0 to 512 [ 94.395842][ T6502] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.403903][ T6478] XFS (loop0): Ending clean mount [ 94.543043][ T4035] XFS (loop0): Unmounting Filesystem [ 94.784015][ T6536] loop4: detected capacity change from 0 to 256 [ 94.859063][ T6536] exfat: Deprecated parameter 'namecase' [ 94.871689][ T6536] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 95.301364][ T6551] loop4: detected capacity change from 0 to 4096 [ 95.362886][ T6551] NILFS (loop4): invalid segment: Checksum error in segment payload [ 95.365376][ T6551] NILFS (loop4): trying rollback from an earlier position [ 95.421019][ T6551] NILFS (loop4): recovery complete [ 95.488583][ T6563] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.560830][ T6567] loop1: detected capacity change from 0 to 512 [ 95.622245][ T6571] loop0: detected capacity change from 0 to 256 [ 95.690083][ T6567] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.793634][ T6543] loop3: detected capacity change from 0 to 40427 [ 95.836756][ T6543] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 95.838396][ T6543] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 95.902954][ T6543] F2FS-fs (loop3): Found nat_bits in checkpoint [ 95.987332][ T6543] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 95.989265][ T6543] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 96.193729][ T4039] attempt to access beyond end of device [ 96.193729][ T4039] loop3: rw=2049, want=45104, limit=40427 [ 96.284384][ T6595] loop0: detected capacity change from 0 to 512 [ 96.350303][ T6595] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 96.432157][ T6575] loop4: detected capacity change from 0 to 32768 [ 96.469433][ T6575] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.975 (6575) [ 96.566859][ T6575] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 96.569305][ T6575] BTRFS info (device loop4): using free space tree [ 96.570903][ T6575] BTRFS info (device loop4): has skinny extents [ 96.584788][ T6581] loop2: detected capacity change from 0 to 32768 [ 96.588532][ T6584] loop1: detected capacity change from 0 to 40427 [ 96.607324][ T6581] XFS: ikeep mount option is deprecated. [ 96.607519][ T6584] F2FS-fs (loop1): invalid crc value [ 96.644863][ T6584] F2FS-fs (loop1): Found nat_bits in checkpoint [ 96.688279][ T6581] XFS (loop2): Mounting V5 Filesystem [ 96.739091][ T6584] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 96.783185][ T6581] XFS (loop2): Ending clean mount [ 96.786101][ T6581] XFS (loop2): Quotacheck needed: Please wait. [ 96.797815][ T6575] BTRFS info (device loop4): enabling ssd optimizations [ 96.902983][ T6597] loop0: detected capacity change from 0 to 32768 [ 96.922400][ T6633] raw_sendmsg: syz.3.990 forgot to set AF_INET. Fix it! [ 97.071840][ T6581] XFS (loop2): Quotacheck: Done. [ 97.090564][ T6597] XFS (loop0): Mounting V5 Filesystem [ 97.208758][ T4030] XFS (loop2): Unmounting Filesystem [ 97.248329][ T6597] XFS (loop0): Ending clean mount [ 97.289578][ T6651] device vlan2 entered promiscuous mode [ 97.291042][ T6651] device wlan1 entered promiscuous mode [ 97.295188][ T4035] XFS (loop0): Unmounting Filesystem [ 97.403627][ T6655] loop1: detected capacity change from 0 to 64 [ 97.468420][ T6655] hfs: small file entry [ 97.636281][ T6659] loop1: detected capacity change from 0 to 2048 [ 97.725659][ T6659] NILFS (loop1): invalid segment: Checksum error in segment payload [ 97.733841][ T6659] NILFS (loop1): trying rollback from an earlier position [ 97.770974][ T6659] NILFS (loop1): recovery complete [ 97.781465][ T6666] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.922550][ T6672] binder: 6671:6672 ioctl c0306201 9999999999999999 returned -14 [ 97.963597][ T6647] loop3: detected capacity change from 0 to 32768 [ 98.147032][ T6647] XFS (loop3): Mounting V5 Filesystem [ 98.326351][ T6647] XFS (loop3): Ending clean mount [ 98.409829][ T4039] XFS (loop3): Unmounting Filesystem [ 98.445140][ T6708] loop2: detected capacity change from 0 to 4096 [ 98.454197][ T6715] loop4: detected capacity change from 0 to 256 [ 98.602544][ T6708] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.620629][ T6708] Quota error (device loop2): find_tree_dqentry: Getting block too big (524291 >= 6) [ 98.623256][ T6708] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 98.625767][ T6708] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.1016: Failed to acquire dquot type 0 [ 98.818416][ T6711] loop1: detected capacity change from 0 to 32768 [ 99.219817][ T6752] loop3: detected capacity change from 0 to 164 [ 99.265775][ T6752] isofs_fill_super: root inode is not a directory. Corrupted media? [ 99.378568][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1038'. [ 99.658437][ T6743] loop4: detected capacity change from 0 to 32768 [ 99.702464][ T6743] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1034 (6743) [ 99.708996][ T6743] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 99.711510][ T6743] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 99.726533][ T6743] BTRFS info (device loop4): use zstd compression, level 3 [ 99.728357][ T6743] BTRFS info (device loop4): using free space tree [ 99.730048][ T6743] BTRFS info (device loop4): has skinny extents [ 99.787884][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 99.821053][ T6791] loop1: detected capacity change from 0 to 128 [ 99.843421][ T6744] loop0: detected capacity change from 0 to 40427 [ 99.898662][ T6791] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.916968][ T6744] F2FS-fs (loop0): invalid crc value [ 99.938604][ T6743] BTRFS info (device loop4): enabling ssd optimizations [ 99.943920][ T6744] F2FS-fs (loop0): Found nat_bits in checkpoint [ 99.986322][ T6744] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.098976][ T6811] loop1: detected capacity change from 0 to 512 [ 100.250991][ T6811] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 100.433004][ T6824] loop0: detected capacity change from 0 to 64 [ 100.557000][ T6824] hfs: small file entry [ 100.795432][ T6802] loop2: detected capacity change from 0 to 40427 [ 100.850111][ T6802] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 100.851957][ T6802] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 100.893585][ T6802] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.953387][ T6802] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 100.955104][ T6802] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 100.967897][ T6854] loop0: detected capacity change from 0 to 256 [ 101.059333][ T4030] attempt to access beyond end of device [ 101.059333][ T4030] loop2: rw=2049, want=45104, limit=40427 [ 101.114566][ T6854] FAT-fs (loop0): Directory bread(block 64) failed [ 101.116296][ T6854] FAT-fs (loop0): Directory bread(block 65) failed [ 101.126612][ T6854] FAT-fs (loop0): Directory bread(block 66) failed [ 101.128238][ T6854] FAT-fs (loop0): Directory bread(block 67) failed [ 101.129899][ T6854] FAT-fs (loop0): Directory bread(block 68) failed [ 101.131539][ T6854] FAT-fs (loop0): Directory bread(block 69) failed [ 101.133379][ T6854] FAT-fs (loop0): Directory bread(block 70) failed [ 101.134962][ T6854] FAT-fs (loop0): Directory bread(block 71) failed [ 101.139364][ T6861] binder: 6859:6861 ioctl c0306201 9999999999999999 returned -14 [ 101.177155][ T6854] FAT-fs (loop0): Directory bread(block 72) failed [ 101.178850][ T6854] FAT-fs (loop0): Directory bread(block 73) failed [ 101.229281][ T6822] loop3: detected capacity change from 0 to 40427 [ 101.286659][ T6822] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 101.288744][ T6822] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 101.306940][ T6822] F2FS-fs (loop3): invalid crc value [ 101.365870][ T6822] F2FS-fs (loop3): Found nat_bits in checkpoint [ 101.431644][ T6822] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 101.433385][ T6822] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 101.845241][ T6896] loop2: detected capacity change from 0 to 512 [ 101.908941][ T6896] EXT4-fs (loop2): orphan cleanup on readonly fs [ 101.910925][ T6896] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 101.914287][ T6896] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1091: invalid indirect mapped block 8 (level 2) [ 101.988789][ T6896] EXT4-fs (loop2): Remounting filesystem read-only [ 101.990637][ T6896] EXT4-fs (loop2): 1 truncate cleaned up [ 101.992173][ T6896] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=continue,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4. Quota mode: writeback. [ 102.139775][ T6871] loop4: detected capacity change from 0 to 32768 [ 102.163276][ T6903] loop3: detected capacity change from 0 to 256 [ 102.174331][ T6896] EXT4-fs (loop2): Can't set test_dummy_encryption on remount [ 102.183403][ T6901] loop0: detected capacity change from 0 to 32768 [ 102.195174][ T6871] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 102.226061][ T6903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 102.230068][ T6903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 102.232359][ T6901] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1095 (6901) [ 102.235682][ T6903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 102.261459][ T6903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 102.263725][ T6903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 102.267880][ T6903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 102.270114][ T6903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 102.272609][ T6903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 102.274847][ T6903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 102.282500][ T6901] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 102.285144][ T6901] BTRFS info (device loop0): using free space tree [ 102.286051][ T6903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 102.290006][ T6901] BTRFS info (device loop0): has skinny extents [ 102.355044][ T4040] (syz-executor,4040,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 102.360939][ T4040] ocfs2: Unmounting device (7,4) on (node local) [ 102.457950][ T6918] loop3: detected capacity change from 0 to 256 [ 102.461168][ T6915] loop1: detected capacity change from 0 to 4096 [ 102.486519][ T6918] exfat: Deprecated parameter 'namecase' [ 102.511122][ T6918] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 102.514568][ T6915] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.623232][ T6901] BTRFS info (device loop0): enabling ssd optimizations [ 102.653753][ T6915] Quota error (device loop1): find_tree_dqentry: Getting block too big (524291 >= 6) [ 102.656038][ T6915] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 102.709721][ T6915] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.1099: Failed to acquire dquot type 0 [ 102.934820][ T6949] IPVS: Error connecting to the multicast addr [ 102.995277][ T6946] loop4: detected capacity change from 0 to 2048 [ 103.056794][ T6946] NILFS (loop4): invalid segment: Checksum error in segment payload [ 103.059001][ T6946] NILFS (loop4): trying rollback from an earlier position [ 103.104912][ T6946] NILFS (loop4): recovery complete [ 103.115281][ T6959] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.134298][ T6960] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1107'. [ 103.206108][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1111'. [ 103.212023][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 103.223550][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1111'. [ 103.395076][ T6940] loop2: detected capacity change from 0 to 32768 [ 103.424978][ T6976] loop4: detected capacity change from 0 to 164 [ 103.523572][ T6976] isofs_fill_super: root inode is not a directory. Corrupted media? [ 103.563218][ T6940] XFS (loop2): Mounting V5 Filesystem [ 103.643524][ T6940] XFS (loop2): Ending clean mount [ 103.678001][ T4030] XFS (loop2): Unmounting Filesystem [ 103.690084][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'. [ 103.804028][ T6967] loop1: detected capacity change from 0 to 32768 [ 103.965595][ T6967] XFS (loop1): Mounting V5 Filesystem [ 104.030616][ T7001] loop4: detected capacity change from 0 to 4096 [ 104.127028][ T6967] XFS (loop1): Ending clean mount [ 104.172447][ T7001] ntfs3: loop4: failed to convert "0000" to iso8859-14 [ 104.173751][ T6983] loop3: detected capacity change from 0 to 32768 [ 104.211472][ T7001] ntfs3: loop4: failed to convert name for inode 1e. [ 104.350650][ T4029] XFS (loop1): Unmounting Filesystem [ 104.374455][ T7013] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1124'. [ 104.859095][ T7041] netlink: 'syz.4.1142': attribute type 1 has an invalid length. [ 104.944612][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 104.957746][ T7046] device gretap0 entered promiscuous mode [ 104.959744][ T7022] loop2: detected capacity change from 0 to 32768 [ 105.027198][ T7052] loop4: detected capacity change from 0 to 512 [ 105.062386][ T7022] XFS (loop2): Mounting V5 Filesystem [ 105.112542][ T7052] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.153990][ T7022] XFS (loop2): Ending clean mount [ 105.261658][ T7067] loop0: detected capacity change from 0 to 128 [ 105.329312][ T4030] XFS (loop2): Unmounting Filesystem [ 105.394159][ T7044] loop3: detected capacity change from 0 to 40427 [ 105.429514][ T7044] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 105.431482][ T7044] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 105.443363][ T7044] F2FS-fs (loop3): invalid crc value [ 105.472443][ T7044] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 105.500312][ T7044] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 105.578619][ T7044] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 105.580577][ T7044] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 105.780331][ T7098] loop0: detected capacity change from 0 to 512 [ 105.898159][ T7098] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.154407][ T7095] loop4: detected capacity change from 0 to 32768 [ 106.315760][ T7113] device vlan2 entered promiscuous mode [ 106.323005][ T7095] XFS (loop4): Mounting V5 Filesystem [ 106.336145][ T7113] device wlan1 entered promiscuous mode [ 106.467581][ T7095] XFS (loop4): Ending clean mount [ 106.684005][ T7139] loop0: detected capacity change from 0 to 128 [ 106.712828][ T4040] XFS (loop4): Unmounting Filesystem [ 106.760360][ T7139] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 106.847565][ T7126] loop2: detected capacity change from 0 to 32768 [ 106.945892][ T7126] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 106.989600][ T7126] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 106.991669][ T7153] netlink: 'syz.0.1180': attribute type 2 has an invalid length. [ 107.160688][ T7159] IPVS: Error joining to the multicast group [ 107.196969][ T4030] ocfs2: Unmounting device (7,2) on (node local) [ 107.215494][ T26] audit: type=1326 audit(107.180:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.4.1177" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9274bd28 code=0x0 [ 107.477938][ T7174] loop1: detected capacity change from 0 to 4096 [ 107.529602][ T7174] NILFS (loop1): invalid segment: Checksum error in segment payload [ 107.535166][ T7174] NILFS (loop1): trying rollback from an earlier position [ 107.554544][ T7154] loop3: detected capacity change from 0 to 32768 [ 107.575824][ T7174] NILFS (loop1): recovery complete [ 107.585773][ T7179] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.086539][ T7172] loop0: detected capacity change from 0 to 40427 [ 108.091970][ T7203] loop2: detected capacity change from 0 to 64 [ 108.113895][ T7172] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 108.115959][ T7172] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 108.124377][ T7172] F2FS-fs (loop0): invalid crc value [ 108.154870][ T7172] F2FS-fs (loop0): Found nat_bits in checkpoint [ 108.211753][ T7216] loop2: detected capacity change from 0 to 256 [ 108.239180][ T7172] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 108.241065][ T7172] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 108.257612][ T7216] exfat: Deprecated parameter 'namecase' [ 108.259255][ T7216] exfat: Deprecated parameter 'namecase' [ 108.282809][ T7216] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 108.293024][ T7213] loop3: detected capacity change from 0 to 4096 [ 108.347570][ T7213] NILFS (loop3): invalid segment: Checksum error in segment payload [ 108.349577][ T7213] NILFS (loop3): trying rollback from an earlier position [ 108.358107][ T7222] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 108.402592][ T7213] NILFS (loop3): recovery complete [ 108.461810][ T7227] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.083586][ T7267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1234'. [ 109.114602][ T7225] loop1: detected capacity change from 0 to 32768 [ 109.155221][ T7273] netlink: 'syz.4.1237': attribute type 29 has an invalid length. [ 109.172274][ T7273] netlink: 'syz.4.1237': attribute type 29 has an invalid length. [ 109.183738][ T7273] netlink: 'syz.4.1237': attribute type 29 has an invalid length. [ 109.200143][ T7225] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.1213 (7225) [ 109.239659][ T7225] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 109.242164][ T7225] BTRFS info (device loop1): using free space tree [ 109.257726][ T7225] BTRFS info (device loop1): has skinny extents [ 109.599965][ T7253] loop2: detected capacity change from 0 to 40427 [ 109.615190][ T7311] loop3: detected capacity change from 0 to 2048 [ 109.621820][ T7225] BTRFS info (device loop1): enabling ssd optimizations [ 109.633717][ T7316] IPVS: Error joining to the multicast group [ 109.650844][ T7253] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 109.652771][ T7253] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 109.663942][ T7253] F2FS-fs (loop2): invalid crc value [ 109.700652][ T7253] F2FS-fs (loop2): Found nat_bits in checkpoint [ 109.712870][ T7311] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 109.716859][ T7311] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 109.719375][ T7311] UDF-fs: Scanning with blocksize 512 failed [ 109.757316][ T7253] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 109.759004][ T7253] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 109.863794][ T7311] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 109.865687][ T7311] UDF-fs: Scanning with blocksize 1024 failed [ 109.912085][ T7311] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=533, location=533 [ 109.921501][ T7311] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 109.937869][ T7311] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 109.939824][ T7311] UDF-fs: Scanning with blocksize 2048 failed [ 109.970735][ T7311] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=533, location=533 [ 109.977154][ T7311] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 109.995244][ T7311] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 109.999174][ T7311] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 110.001066][ T7311] UDF-fs: Scanning with blocksize 4096 failed [ 110.012962][ T7311] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 110.494733][ T7373] loop3: detected capacity change from 0 to 256 [ 110.579624][ T7367] loop1: detected capacity change from 0 to 4096 [ 110.598694][ T7378] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 110.613563][ T7367] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 110.662562][ T7382] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 110.683324][ T7367] ntfs3: loop1: failed to convert "c46c" to default [ 111.118954][ T7424] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1299'. [ 111.275531][ T7439] loop4: detected capacity change from 0 to 64 [ 111.358514][ T7439] overlayfs: filesystem on './file1' not supported [ 111.540113][ T7447] loop3: detected capacity change from 0 to 4096 [ 111.548840][ T7452] loop4: detected capacity change from 0 to 512 [ 111.605823][ T7452] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 111.842913][ T7447] ntfs3: loop3: failed to convert "0000" to iso8859-14 [ 111.870436][ T7447] ntfs3: loop3: failed to convert name for inode 1e. [ 111.987461][ T7484] loop0: detected capacity change from 0 to 64 [ 112.084015][ T7492] netlink: 'syz.2.1331': attribute type 3 has an invalid length. [ 112.093028][ T7492] netlink: 'syz.2.1331': attribute type 1 has an invalid length. [ 112.096129][ T7492] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1331'. [ 112.261074][ T7508] futex_wake_op: syz.2.1339 tries to shift op by 32; fix this program [ 112.656094][ T7532] loop2: detected capacity change from 0 to 4096 [ 112.766355][ T7532] ntfs3: loop2: failed to convert "0080" to maciceland [ 112.776046][ T7532] ntfs3: loop2: failed to convert name for inode 1e. [ 113.080906][ T7554] netlink: 'syz.1.1361': attribute type 1 has an invalid length. [ 113.082896][ T7554] netlink: 9388 bytes leftover after parsing attributes in process `syz.1.1361'. [ 113.347925][ T7534] loop4: detected capacity change from 0 to 40427 [ 113.423509][ T7534] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 113.425512][ T7534] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 113.455280][ T7534] F2FS-fs (loop4): invalid crc value [ 113.481896][ T7534] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 113.495595][ T7534] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 113.506862][ T7572] loop3: detected capacity change from 0 to 1024 [ 113.574979][ T7579] loop0: detected capacity change from 0 to 1024 [ 113.589892][ T7534] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 113.591719][ T7534] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 113.711531][ T443] hfsplus: b-tree write err: -5, ino 4 [ 113.850556][ T7548] loop2: detected capacity change from 0 to 40427 [ 113.903085][ T7548] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 113.905070][ T7548] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 113.917783][ T7548] F2FS-fs (loop2): invalid crc value [ 113.977065][ T7548] F2FS-fs (loop2): Found nat_bits in checkpoint [ 114.047538][ T7548] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 114.049435][ T7548] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 114.214214][ T7569] loop1: detected capacity change from 0 to 32768 [ 114.329308][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1385'. [ 115.286185][ T7643] loop4: detected capacity change from 0 to 32768 [ 115.392022][ T7665] loop2: detected capacity change from 0 to 1024 [ 116.265142][ T7728] loop2: detected capacity change from 0 to 512 [ 116.295048][ T7728] EXT4-fs (loop2): Ignoring removed oldalloc option [ 116.314411][ T7728] EXT4-fs (loop2): 1 truncate cleaned up [ 116.318437][ T7728] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,user_xattr,errors=remount-ro,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 116.777063][ T7711] loop4: detected capacity change from 0 to 32768 [ 116.831834][ T7711] lmLogInit: exit(-22) [ 116.833406][ T7711] lmLogOpen: exit(-22) [ 116.834363][ T7711] jfs_mount_rw failed, return code = -22 [ 117.036734][ T7760] loop0: detected capacity change from 0 to 8192 [ 117.143892][ T7760] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 117.146253][ T7760] REISERFS (device loop0): using ordered data mode [ 117.148715][ T7760] reiserfs: using flush barriers [ 117.152635][ T7760] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.157615][ T7760] REISERFS (device loop0): checking transaction log (loop0) [ 117.164924][ T7760] REISERFS (device loop0): Using r5 hash to sort names [ 117.180988][ T7760] REISERFS warning (device loop0): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 117.180988][ T7760] [ 117.732751][ T7773] loop0: detected capacity change from 0 to 4096 [ 117.779152][ T7768] loop1: detected capacity change from 0 to 32768 [ 117.784424][ T7766] loop4: detected capacity change from 0 to 32768 [ 117.827090][ T7773] ntfs3: loop0: ino=5, "/" directory corrupted [ 117.870531][ T7766] ERROR: (device loop4): dbFindCtl: Corrupt dmapctl page [ 117.870531][ T7766] [ 117.885537][ T7766] ERROR: (device loop4): remounting filesystem as read-only [ 117.976343][ T7768] XFS (loop1): Mounting V5 Filesystem [ 118.037925][ T7775] loop2: detected capacity change from 0 to 32768 [ 118.085421][ T7775] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1464 (7775) [ 118.087473][ T7768] XFS (loop1): Ending clean mount [ 118.092216][ T7768] XFS (loop1): Quotacheck needed: Please wait. [ 118.129694][ T7768] XFS (loop1): Quotacheck: Done. [ 118.130586][ T7764] loop3: detected capacity change from 0 to 65536 [ 118.142764][ T7775] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 118.144947][ T7775] BTRFS info (device loop2): doing ref verification [ 118.149375][ T7775] BTRFS info (device loop2): turning off barriers [ 118.151161][ T7775] BTRFS info (device loop2): enabling ssd optimizations [ 118.166357][ T7775] BTRFS info (device loop2): using spread ssd allocation scheme [ 118.173753][ T7775] BTRFS info (device loop2): setting nodatasum [ 118.175285][ T7775] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 118.180191][ T7775] BTRFS info (device loop2): force lzo compression, level 0 [ 118.182061][ T7775] BTRFS info (device loop2): turning on sync discard [ 118.190593][ T4029] XFS (loop1): Unmounting Filesystem [ 118.206403][ T7775] BTRFS info (device loop2): using free space tree [ 118.208115][ T7775] BTRFS info (device loop2): has skinny extents [ 118.300643][ T7764] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 118.343717][ T7764] XFS (loop3): Quotacheck needed: Please wait. [ 118.397789][ T7764] XFS (loop3): Quotacheck: Done. [ 118.435084][ T4039] XFS (loop3): Unmounting Filesystem [ 118.510669][ T7817] UBIFS error (pid: 7817): cannot open "upperdir=./file1,", error -22 [ 118.659410][ T7820] netlink: 'syz.4.1470': attribute type 1 has an invalid length. [ 119.295102][ T7822] loop1: detected capacity change from 0 to 32768 [ 119.553545][ T7828] loop4: detected capacity change from 0 to 32768 [ 119.589065][ T144] Bluetooth: hci4: link tx timeout [ 119.591250][ T144] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 119.594364][ T144] Bluetooth: hci4: link tx timeout [ 119.595602][ T144] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 119.643472][ T7828] read_mapping_page failed! [ 119.771610][ T7837] loop2: detected capacity change from 0 to 32768 [ 119.911564][ T7837] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 120.108714][ T7874] loop0: detected capacity change from 0 to 256 [ 120.115089][ T7866] loop1: detected capacity change from 0 to 32768 [ 120.121532][ T4030] ocfs2: Unmounting device (7,2) on (node local) [ 120.205830][ T7874] FAT-fs (loop0): Directory bread(block 64) failed [ 120.218297][ T7874] FAT-fs (loop0): Directory bread(block 65) failed [ 120.220306][ T7874] FAT-fs (loop0): Directory bread(block 66) failed [ 120.222000][ T7874] FAT-fs (loop0): Directory bread(block 67) failed [ 120.223639][ T7874] FAT-fs (loop0): Directory bread(block 68) failed [ 120.228440][ T7874] FAT-fs (loop0): Directory bread(block 69) failed [ 120.230128][ T7874] FAT-fs (loop0): Directory bread(block 70) failed [ 120.231817][ T7874] FAT-fs (loop0): Directory bread(block 71) failed [ 120.233499][ T7874] FAT-fs (loop0): Directory bread(block 72) failed [ 120.235185][ T7874] FAT-fs (loop0): Directory bread(block 73) failed [ 120.315546][ T7876] loop2: detected capacity change from 0 to 4096 [ 120.360800][ T7876] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 120.657468][ T7891] loop0: detected capacity change from 0 to 256 [ 120.909368][ T7878] loop3: detected capacity change from 0 to 32768 [ 121.113627][ T7902] tipc: Started in network mode [ 121.121028][ T7902] tipc: Node identity fe800000000000000000000000000012, cluster identity 4711 [ 121.138009][ T7902] tipc: Enabled bearer <udp:syz0>, priority 10 [ 121.146386][ T7881] loop4: detected capacity change from 0 to 32768 [ 121.193902][ T7889] loop1: detected capacity change from 0 to 32768 [ 121.203141][ T7881] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1497 (7881) [ 121.253745][ T7881] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 121.256062][ T7881] BTRFS info (device loop4): use zlib compression, level 3 [ 121.262090][ T7881] BTRFS info (device loop4): max_inline at 4096 [ 121.265065][ T7881] BTRFS info (device loop4): enabling ssd optimizations [ 121.273445][ T7881] BTRFS info (device loop4): using spread ssd allocation scheme [ 121.275520][ T7881] BTRFS info (device loop4): setting nodatasum [ 121.277723][ T7881] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 121.280243][ T7881] BTRFS info (device loop4): force lzo compression, level 0 [ 121.282051][ T7881] BTRFS info (device loop4): force clearing of disk cache [ 121.284099][ T7881] BTRFS info (device loop4): using free space tree [ 121.285903][ T7881] BTRFS info (device loop4): has skinny extents [ 121.305454][ T7889] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.1500 (7889) [ 121.355015][ T7881] BTRFS info (device loop4): clearing free space tree [ 121.369962][ T7881] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.372735][ T7881] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.400077][ T7881] BTRFS info (device loop4): creating free space tree [ 121.405975][ T7927] loop0: detected capacity change from 0 to 128 [ 121.416342][ T7881] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.432173][ T7881] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.544420][ T4035] FAT-fs (loop0): error, invalid access to FAT (entry 0xffff0000) [ 121.616986][ T4035] FAT-fs (loop0): Filesystem has been set read-only [ 121.626795][ T4855] Bluetooth: hci4: command 0x0406 tx timeout [ 121.630588][ T7934] loop3: detected capacity change from 0 to 512 [ 121.686173][ T7934] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 121.704346][ T7889] loop1: detected capacity change from 0 to 2048 [ 121.707559][ T4035] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 121.710336][ T4035] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 121.766017][ T7943] loop2: detected capacity change from 0 to 256 [ 121.784519][ T7889] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.792493][ T7889] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: none. [ 121.875180][ T7943] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x0b0ca5f0, utbl_chksum : 0xe619d30d) [ 121.904578][ T7950] binder: 7949:7950 ioctl c0306201 0 returned -14 [ 121.912319][ T7950] binder: 7949:7950 ioctl 1 0 returned -22 [ 122.119632][ T7962] 9pnet: p9_fd_create_unix (7962): problem connecting socket: �q�Y�3aK: -111 [ 122.165863][ T7970] loop2: detected capacity change from 0 to 128 [ 122.230912][ T7974] device bridge1 entered promiscuous mode [ 122.246795][ T4674] tipc: Node number set to 4269801490 [ 122.525415][ T7981] mkiss: ax0: crc mode is auto. [ 122.599929][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1543'. [ 122.642188][ T294] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.762597][ T294] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.870946][ T294] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.918604][ T8014] loop1: detected capacity change from 0 to 512 [ 122.961505][ T8014] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.999484][ T294] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.015374][ T8014] EXT4-fs (loop1): 1 truncate cleaned up [ 123.017036][ T8014] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 123.097205][ T7987] loop4: detected capacity change from 0 to 32768 [ 123.218947][ T7987] XFS (loop4): Mounting V5 Filesystem [ 123.304766][ T8033] loop3: detected capacity change from 0 to 8192 [ 123.325427][ T3606] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x190/0x24c, xfs_agf block 0x1 [ 123.330003][ T3606] XFS (loop4): Unmount and run xfs_repair [ 123.333851][ T3606] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 123.344130][ T3606] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 123.348826][ T3606] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 123.353427][ T3606] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 123.373259][ T3606] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 123.390981][ T3606] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 123.393165][ T3606] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 123.395243][ T3606] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.417810][ T8033] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 123.421440][ T8033] REISERFS (device loop3): using ordered data mode [ 123.423080][ T8033] reiserfs: using flush barriers [ 123.425977][ T8033] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 123.430847][ T3606] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.433369][ T7987] XFS (loop4): metadata I/O error in "xfs_read_agf+0x234/0x584" at daddr 0x1 len 1 error 74 [ 123.438275][ T7996] chnl_net:caif_netlink_parms(): no params data found [ 123.444657][ T7987] XFS (loop4): Error -117 reserving per-AG metadata reserve pool. [ 123.447412][ T7987] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1c4/0x1f0 (fs/xfs/xfs_fsops.c:573). Shutting down filesystem. [ 123.451284][ T7987] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 123.453290][ T7987] XFS (loop4): Ending clean mount [ 123.454924][ T8033] REISERFS (device loop3): checking transaction log (loop3) [ 123.489905][ T7987] XFS (loop4): Failed to initialize disk quotas. [ 123.566021][ T8033] REISERFS (device loop3): Using r5 hash to sort names [ 123.618324][ T8033] REISERFS warning (device loop3): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 123.618324][ T8033] [ 123.706532][ T4674] Bluetooth: hci4: command 0x0406 tx timeout [ 123.754819][ T4040] XFS (loop4): Unmounting Filesystem [ 123.905486][ T7996] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.908729][ T7996] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.911450][ T7996] device bridge_slave_0 entered promiscuous mode [ 123.914927][ T7996] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.925170][ T7996] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.928028][ T7996] device bridge_slave_1 entered promiscuous mode [ 123.951860][ T8056] netlink: 'syz.3.1562': attribute type 1 has an invalid length. [ 124.027348][ T7996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.040597][ T7996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.177428][ T7996] team0: Port device team_slave_0 added [ 124.246371][ T7996] team0: Port device team_slave_1 added [ 124.372924][ T8069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1566'. [ 124.401961][ T7996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.403880][ T7996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.429344][ T8048] loop2: detected capacity change from 0 to 32768 [ 124.431039][ T7996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.435293][ T7996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.472269][ T7996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.486656][ T7996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.669882][ T7996] device hsr_slave_0 entered promiscuous mode [ 124.676673][ T4349] Bluetooth: hci2: command 0x0409 tx timeout [ 124.727102][ T7996] device hsr_slave_1 entered promiscuous mode [ 124.756664][ T7996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.758693][ T7996] Cannot create hsr debugfs directory [ 124.811311][ T8091] loop4: detected capacity change from 0 to 4096 [ 125.025673][ T8091] ntfs3: loop4: ino=5, "/" directory corrupted [ 125.270331][ T7996] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.326209][ T8111] loop1: detected capacity change from 0 to 512 [ 125.358062][ T7996] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 125.390100][ T8088] loop3: detected capacity change from 0 to 40427 [ 125.391059][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1579'. [ 125.422274][ T7996] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.428353][ T8111] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 125.443473][ T8088] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 125.445364][ T8088] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 125.460882][ T7996] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.478826][ T8088] F2FS-fs (loop3): invalid crc value [ 125.485843][ T8111] EXT2-fs (loop1): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 125.540050][ T8088] F2FS-fs (loop3): Found nat_bits in checkpoint [ 125.573853][ T8111] EXT2-fs (loop1): error: ext2_free_blocks: Freeing blocks not in datazone - block = 1, count = 1 [ 125.580809][ T8088] F2FS-fs (loop3): Start checkpoint disabled! [ 125.615104][ T294] device wlan1 left promiscuous mode [ 125.660071][ T8088] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 125.662265][ T8088] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 125.699436][ T8088] F2FS-fs (loop3): Can't enable fs-verity on inode 3: the verity feature is not enabled on this filesystem [ 126.128088][ T294] device hsr_slave_0 left promiscuous mode [ 126.141593][ T8146] loop3: detected capacity change from 0 to 256 [ 126.195268][ T8109] loop2: detected capacity change from 0 to 32768 [ 126.202184][ T294] device hsr_slave_1 left promiscuous mode [ 126.237860][ T8109] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 126.247659][ T8109] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 126.288152][ T294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.290250][ T294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.295936][ T294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.298095][ T294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.300974][ T8109] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 126.301901][ T294] device bridge_slave_1 left promiscuous mode [ 126.307014][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.324566][ T3319] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 126.326835][ T3319] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 126.404111][ T3319] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 77ms [ 126.405930][ T294] device bridge_slave_0 left promiscuous mode [ 126.408310][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.411473][ T3319] gfs2: fsid=syz:syz.0: jid=0: Done [ 126.413798][ T8109] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 126.440055][ T8109] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 126.442735][ T8109] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 126.442735][ T8109] inode = 12 2341 [ 126.442735][ T8109] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 126.461422][ T8109] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 126.463413][ T8109] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 126.465583][ T8109] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 126.475348][ T8109] gfs2: fsid=syz:syz.0: File system withdrawn [ 126.478540][ T8109] CPU: 0 PID: 8109 Comm: syz.2.1577 Not tainted 5.15.178-syzkaller #0 [ 126.480638][ T8109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.483212][ T8109] Call trace: [ 126.484043][ T8109] dump_backtrace+0x0/0x530 [ 126.485202][ T8109] show_stack+0x2c/0x3c [ 126.486247][ T8109] dump_stack_lvl+0x108/0x170 [ 126.487432][ T8109] dump_stack+0x1c/0x58 [ 126.488496][ T8109] gfs2_withdraw+0xeac/0x12a4 [ 126.489692][ T8109] gfs2_consist_inode_i+0xcc/0xe8 [ 126.490982][ T8109] gfs2_dirent_scan+0x458/0x584 [ 126.492197][ T8109] gfs2_dirent_search+0x28c/0x790 [ 126.493562][ T8109] gfs2_dir_search+0xb8/0x280 [ 126.494727][ T8109] gfs2_lookupi+0x3c0/0x538 [ 126.495842][ T8109] __gfs2_lookup+0xac/0x260 [ 126.497053][ T8109] gfs2_lookup+0x2c/0x3c [ 126.498127][ T8109] __lookup_slow+0x250/0x388 [ 126.499274][ T8109] lookup_slow+0x60/0x84 [ 126.500325][ T8109] walk_component+0x394/0x4cc [ 126.501475][ T8109] link_path_walk+0x5a0/0xc38 [ 126.502729][ T8109] path_lookupat+0x90/0x3d0 [ 126.503841][ T8109] do_o_path+0xa8/0x214 [ 126.504897][ T8109] path_openat+0x216c/0x26cc [ 126.506077][ T8109] do_filp_open+0x1a8/0x3b4 [ 126.507334][ T8109] do_sys_openat2+0x128/0x3e0 [ 126.508543][ T8109] __arm64_sys_openat+0x1f0/0x240 [ 126.509828][ T8109] invoke_syscall+0x98/0x2b8 [ 126.510996][ T8109] el0_svc_common+0x138/0x258 [ 126.512266][ T8109] do_el0_svc+0x58/0x14c [ 126.513385][ T8109] el0_svc+0x7c/0x1f0 [ 126.514418][ T8109] el0t_64_sync_handler+0x84/0xe4 [ 126.515780][ T8109] el0t_64_sync+0x1a0/0x1a4 [ 126.598548][ T294] device veth1_macvtap left promiscuous mode [ 126.600363][ T294] device veth0_macvtap left promiscuous mode [ 126.601892][ T294] device veth1_vlan left promiscuous mode [ 126.603424][ T294] device veth0_vlan left promiscuous mode [ 126.675452][ T8148] loop3: detected capacity change from 0 to 32768 [ 126.746777][ T3319] Bluetooth: hci2: command 0x041b tx timeout [ 126.824754][ T8148] XFS (loop3): Mounting V5 Filesystem [ 126.920066][ T4349] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x190/0x24c, xfs_agf block 0x1 [ 126.923062][ T4349] XFS (loop3): Unmount and run xfs_repair [ 126.925743][ T4349] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 126.933074][ T4349] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 126.945619][ T4349] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 126.948059][ T4349] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 126.950380][ T4349] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 126.952525][ T4349] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 126.954655][ T4349] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 126.957360][ T4349] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 126.959663][ T4349] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 126.961974][ T8148] XFS (loop3): metadata I/O error in "xfs_read_agf+0x234/0x584" at daddr 0x1 len 1 error 74 [ 126.964656][ T8148] XFS (loop3): Error -117 reserving per-AG metadata reserve pool. [ 126.966975][ T8148] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1c4/0x1f0 (fs/xfs/xfs_fsops.c:573). Shutting down filesystem. [ 126.970954][ T8148] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 126.972912][ T8148] XFS (loop3): Ending clean mount [ 126.974522][ T8148] XFS (loop3): Failed to initialize disk quotas. [ 127.013309][ T4039] XFS (loop3): Unmounting Filesystem [ 127.125060][ T294] team0 (unregistering): Port device team_slave_1 removed [ 127.149517][ T294] team0 (unregistering): Port device team_slave_0 removed [ 127.161250][ T294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.194916][ T294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.344485][ T294] bond0 (unregistering): Released all slaves [ 127.446764][ T7996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.529562][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.542441][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.559448][ T7996] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.564245][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.572533][ T3319] kernel write not supported for file /input/mice (pid: 3319 comm: kworker/0:2) [ 127.579988][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.589796][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.591629][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.600174][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.618465][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.641600][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.652031][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.653943][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.656171][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.730932][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.733952][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.737679][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.765728][ T7996] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.809753][ T7996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.838121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.840760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.844074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.857268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.865322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.888502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.894772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.917746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.971341][ T8198] mkiss: ax0: crc mode is auto. [ 127.984807][ T8205] loop3: detected capacity change from 0 to 64 [ 128.213416][ T8223] loop3: detected capacity change from 0 to 256 [ 128.273998][ T7996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.276284][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.280882][ T8223] FAT-fs (loop3): Directory bread(block 64) failed [ 128.284600][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.292371][ T8223] FAT-fs (loop3): Directory bread(block 65) failed [ 128.310395][ T8223] FAT-fs (loop3): Directory bread(block 66) failed [ 128.320272][ T8223] FAT-fs (loop3): Directory bread(block 67) failed [ 128.338644][ T8223] FAT-fs (loop3): Directory bread(block 68) failed [ 128.353049][ T8223] FAT-fs (loop3): Directory bread(block 69) failed [ 128.365063][ T8223] FAT-fs (loop3): Directory bread(block 70) failed [ 128.399023][ T8223] FAT-fs (loop3): Directory bread(block 71) failed [ 128.400885][ T8223] FAT-fs (loop3): Directory bread(block 72) failed [ 128.402568][ T8223] FAT-fs (loop3): Directory bread(block 73) failed [ 128.667779][ T8242] [U] [ 128.696850][ T8184] loop2: detected capacity change from 0 to 32768 [ 128.703958][ T8245] loop4: detected capacity change from 0 to 1024 [ 128.770529][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.773192][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.775931][ T8245] hfsplus: bad catalog entry type [ 128.834627][ T148] hfsplus: b-tree write err: -5, ino 4 [ 128.837033][ T4347] Bluetooth: hci2: command 0x040f tx timeout [ 128.853333][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.857542][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.871079][ T7996] device veth0_vlan entered promiscuous mode [ 128.886117][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.890921][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.906012][ T7996] device veth1_vlan entered promiscuous mode [ 129.039190][ T7996] device veth0_macvtap entered promiscuous mode [ 129.054746][ T443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.058254][ T443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.060739][ T443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.063307][ T443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.075009][ T7996] device veth1_macvtap entered promiscuous mode [ 129.087448][ T443] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.104850][ T443] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.119389][ T7996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.122017][ T7996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.124465][ T7996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.170389][ T7996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.172916][ T7996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.175525][ T7996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.205156][ T7996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.222433][ T7996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.224551][ T8270] loop2: detected capacity change from 0 to 512 [ 129.253204][ T7996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.259028][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.261763][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.284410][ T7996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.296492][ T7996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.309231][ T7996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.311923][ T7996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.314245][ T7996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.341036][ T7996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.343541][ T7996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.346116][ T7996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.367594][ T7996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.396274][ T8270] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 129.399991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.403493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.421342][ T7996] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.423674][ T7996] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.425822][ T7996] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.438638][ T7996] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.669008][ T407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.671298][ T407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.691287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.749272][ T8285] loop2: detected capacity change from 0 to 24 [ 129.757310][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.759665][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.765868][ T443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.807338][ T8285] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 129.823673][ T8285] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 129.991393][ T8263] loop1: detected capacity change from 0 to 32768 [ 130.049841][ T8257] loop3: detected capacity change from 0 to 32768 [ 130.074174][ T8263] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1624 (8263) [ 130.129091][ T8263] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 130.131397][ T8263] BTRFS info (device loop1): use zlib compression, level 3 [ 130.133253][ T8263] BTRFS info (device loop1): max_inline at 4096 [ 130.134851][ T8263] BTRFS info (device loop1): enabling ssd optimizations [ 130.159414][ T8263] BTRFS info (device loop1): using spread ssd allocation scheme [ 130.161335][ T8263] BTRFS info (device loop1): setting nodatasum [ 130.163024][ T8257] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1622 (8257) [ 130.182719][ T8263] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 130.185012][ T8263] BTRFS info (device loop1): force lzo compression, level 0 [ 130.192477][ T8263] BTRFS info (device loop1): force clearing of disk cache [ 130.205767][ T8263] BTRFS info (device loop1): using free space tree [ 130.209429][ T8263] BTRFS info (device loop1): has skinny extents [ 130.238906][ T8257] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 130.241243][ T8257] BTRFS info (device loop3): force zlib compression, level 3 [ 130.243115][ T8257] BTRFS info (device loop3): force clearing of disk cache [ 130.245044][ T8257] BTRFS info (device loop3): setting nodatasum [ 130.266329][ T8257] BTRFS info (device loop3): allowing degraded mounts [ 130.296693][ T8257] BTRFS info (device loop3): enabling disk space caching [ 130.307318][ T8257] BTRFS info (device loop3): disk space caching is enabled [ 130.309127][ T8257] BTRFS info (device loop3): has skinny extents [ 130.524270][ T8257] BTRFS info (device loop3): clearing free space tree [ 130.525999][ T8257] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 130.542924][ T8257] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 130.553282][ T8263] BTRFS info (device loop1): clearing free space tree [ 130.554931][ T8263] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 130.563922][ T8263] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 130.606216][ T8263] BTRFS info (device loop1): creating free space tree [ 130.620152][ T8263] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 130.622618][ T8263] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 130.629826][ T8282] loop4: detected capacity change from 0 to 32768 [ 130.632056][ T8282] XFS: ikeep mount option is deprecated. [ 130.633522][ T8282] XFS: noikeep mount option is deprecated. [ 130.863209][ T8282] XFS (loop4): Mounting V5 Filesystem [ 131.068058][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.069733][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.170707][ T4937] Bluetooth: hci2: command 0x0419 tx timeout [ 131.195025][ T8382] lo speed is unknown, defaulting to 1000 [ 131.201572][ T8282] XFS (loop4): Ending clean mount [ 131.202750][ T8382] lo speed is unknown, defaulting to 1000 [ 131.206018][ T8282] XFS (loop4): Quotacheck needed: Please wait. [ 131.225520][ T8382] lo speed is unknown, defaulting to 1000 [ 131.252969][ T8382] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.451878][ T8382] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 131.460826][ T8282] XFS (loop4): Quotacheck: Done. [ 131.465645][ T4023] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop1 scanned by udevd (4023) [ 131.539944][ T8382] lo speed is unknown, defaulting to 1000 [ 131.542074][ T8382] lo speed is unknown, defaulting to 1000 [ 131.555039][ T8382] lo speed is unknown, defaulting to 1000 [ 131.558746][ T8382] lo speed is unknown, defaulting to 1000 [ 131.560768][ T8382] lo speed is unknown, defaulting to 1000 [ 131.597284][ T4040] XFS (loop4): Unmounting Filesystem [ 131.994752][ T8434] netlink: 'syz.2.1668': attribute type 29 has an invalid length. [ 132.019567][ T8434] netlink: 'syz.2.1668': attribute type 29 has an invalid length. [ 132.082716][ T8438] netlink: 'syz.2.1668': attribute type 29 has an invalid length. [ 132.346262][ T8458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1676'. [ 132.670653][ T8477] [U] [ 132.836920][ T8493] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 132.913061][ T8502] loop5: detected capacity change from 0 to 256 [ 132.938360][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1694'. [ 133.060593][ T8502] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 133.911015][ T8558] loop1: detected capacity change from 0 to 4096 [ 133.974036][ T8558] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 133.993466][ T8508] loop4: detected capacity change from 0 to 40427 [ 134.006945][ T8558] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 134.050929][ T8508] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 134.053011][ T8508] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 134.103548][ T8508] F2FS-fs (loop4): Found nat_bits in checkpoint [ 134.123597][ T8578] loop2: detected capacity change from 0 to 256 [ 134.150413][ T8508] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 134.152386][ T8508] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 134.170038][ T4029] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 134.259216][ T8578] FAT-fs (loop2): Directory bread(block 64) failed [ 134.260876][ T8578] FAT-fs (loop2): Directory bread(block 65) failed [ 134.262610][ T8578] FAT-fs (loop2): Directory bread(block 66) failed [ 134.264369][ T8578] FAT-fs (loop2): Directory bread(block 67) failed [ 134.265903][ T8578] FAT-fs (loop2): Directory bread(block 68) failed [ 134.296700][ T8578] FAT-fs (loop2): Directory bread(block 69) failed [ 134.298514][ T8578] FAT-fs (loop2): Directory bread(block 70) failed [ 134.303660][ T8578] FAT-fs (loop2): Directory bread(block 71) failed [ 134.305468][ T8578] FAT-fs (loop2): Directory bread(block 72) failed [ 134.323006][ T8578] FAT-fs (loop2): Directory bread(block 73) failed [ 134.550633][ T8552] loop5: detected capacity change from 0 to 32768 [ 134.612414][ T8552] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 134.614465][ T8552] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 134.638649][ T8552] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 134.644565][ T8597] loop3: detected capacity change from 0 to 64 [ 134.647761][ T6956] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 134.649579][ T6956] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 134.774808][ T6956] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 125ms [ 134.777653][ T6956] gfs2: fsid=syz:syz.0: jid=0: Done [ 134.779127][ T8552] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 134.864515][ T8552] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 134.884148][ T8552] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 134.884148][ T8552] inode = 12 2341 [ 134.884148][ T8552] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 134.906855][ T4349] Bluetooth: hci2: command 0x0405 tx timeout [ 134.921052][ T8611] loop4: detected capacity change from 0 to 2048 [ 134.936284][ T8552] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 134.948397][ T8552] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 134.950674][ T8552] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 134.952428][ T8552] gfs2: fsid=syz:syz.0: File system withdrawn [ 134.953976][ T8552] CPU: 1 PID: 8552 Comm: syz.5.1710 Not tainted 5.15.178-syzkaller #0 [ 134.955890][ T8552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 134.958607][ T8552] Call trace: [ 134.959481][ T8552] dump_backtrace+0x0/0x530 [ 134.960578][ T8552] show_stack+0x2c/0x3c [ 134.961630][ T8552] dump_stack_lvl+0x108/0x170 [ 134.962830][ T8552] dump_stack+0x1c/0x58 [ 134.963958][ T8552] gfs2_withdraw+0xeac/0x12a4 [ 134.965190][ T8552] gfs2_consist_inode_i+0xcc/0xe8 [ 134.966489][ T8552] gfs2_dirent_scan+0x458/0x584 [ 134.967853][ T8552] gfs2_dirent_search+0x28c/0x790 [ 134.969177][ T8552] gfs2_dir_search+0xb8/0x280 [ 134.970413][ T8552] gfs2_lookupi+0x3c0/0x538 [ 134.971601][ T8552] __gfs2_lookup+0xac/0x260 [ 134.972762][ T8552] gfs2_lookup+0x2c/0x3c [ 134.973879][ T8552] __lookup_slow+0x250/0x388 [ 134.975034][ T8552] lookup_slow+0x60/0x84 [ 134.976126][ T8552] walk_component+0x394/0x4cc [ 134.977333][ T8552] link_path_walk+0x5a0/0xc38 [ 134.978561][ T8552] path_lookupat+0x90/0x3d0 [ 134.979765][ T8552] do_o_path+0xa8/0x214 [ 134.980895][ T8552] path_openat+0x216c/0x26cc [ 134.982120][ T8552] do_filp_open+0x1a8/0x3b4 [ 134.983342][ T8552] do_sys_openat2+0x128/0x3e0 [ 134.984598][ T8552] __arm64_sys_openat+0x1f0/0x240 [ 134.985928][ T8552] invoke_syscall+0x98/0x2b8 [ 134.987110][ T8552] el0_svc_common+0x138/0x258 [ 134.988383][ T8552] do_el0_svc+0x58/0x14c [ 134.989460][ T8552] el0_svc+0x7c/0x1f0 [ 134.990502][ T8552] el0t_64_sync_handler+0x84/0xe4 [ 134.991808][ T8552] el0t_64_sync+0x1a0/0x1a4 [ 135.034228][ T8625] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 135.069346][ T8611] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 135.072845][ T8611] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 135.075542][ T8611] UDF-fs: Scanning with blocksize 512 failed [ 135.114489][ T8611] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 135.114517][ T8628] loop1: detected capacity change from 0 to 256 [ 135.116383][ T8611] UDF-fs: Scanning with blocksize 1024 failed [ 135.124215][ T8611] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=533, location=533 [ 135.128531][ T8611] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 135.143562][ T8611] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 135.145551][ T8611] UDF-fs: Scanning with blocksize 2048 failed [ 135.164457][ T8611] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=533, location=533 [ 135.186694][ T8611] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 135.214923][ T8611] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 135.220742][ T8611] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 135.222887][ T8611] UDF-fs: Scanning with blocksize 4096 failed [ 135.224392][ T8611] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 135.485680][ T8639] loop1: detected capacity change from 0 to 24 [ 135.508331][ T8622] loop3: detected capacity change from 0 to 32768 [ 135.557309][ T8639] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 135.571960][ T8639] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 135.650973][ T8652] loop5: detected capacity change from 0 to 512 [ 135.693887][ T8656] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1748'. [ 135.723800][ T8655] loop2: detected capacity change from 0 to 2048 [ 135.765193][ T8652] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 135.870868][ T8666] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.075853][ T8677] loop5: detected capacity change from 0 to 64 [ 136.137581][ T8677] overlayfs: filesystem on './file1' not supported [ 136.270127][ T8671] loop1: detected capacity change from 0 to 8192 [ 136.344452][ T8671] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 136.354630][ T8671] REISERFS (device loop1): using ordered data mode [ 136.356292][ T8671] reiserfs: using flush barriers [ 136.416706][ T8671] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.420940][ T8671] REISERFS (device loop1): checking transaction log (loop1) [ 136.467636][ T8664] loop4: detected capacity change from 0 to 32768 [ 136.490117][ T8671] REISERFS (device loop1): Using r5 hash to sort names [ 136.492765][ T8671] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 136.496208][ T8671] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 136.512564][ T8664] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1750 (8664) [ 136.613761][ T8664] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 136.616480][ T8664] BTRFS info (device loop4): using free space tree [ 136.619664][ T8664] BTRFS info (device loop4): has skinny extents [ 136.684951][ T8671] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 136.708564][ T8671] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 136.728750][ T8671] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 136.993294][ T8664] BTRFS info (device loop4): enabling ssd optimizations [ 137.135266][ T8729] netlink: 'syz.5.1774': attribute type 3 has an invalid length. [ 137.139689][ T8729] netlink: 'syz.5.1774': attribute type 1 has an invalid length. [ 137.144643][ T8729] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.1774'. [ 137.623589][ T8750] loop5: detected capacity change from 0 to 64 [ 137.796734][ T8761] netlink: 'syz.3.1789': attribute type 1 has an invalid length. [ 137.798687][ T8761] netlink: 9388 bytes leftover after parsing attributes in process `syz.3.1789'. [ 137.859750][ T8766] loop1: detected capacity change from 0 to 256 [ 137.898228][ T8760] loop5: detected capacity change from 0 to 4096 [ 138.062252][ T8760] ntfs3: loop5: failed to convert "0080" to maciceland [ 138.065270][ T8760] ntfs3: loop5: failed to convert name for inode 1e. [ 138.826174][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'. [ 138.832195][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1824'. [ 138.847317][ T8839] netlink: 'syz.2.1824': attribute type 6 has an invalid length. [ 138.855035][ T8839] netlink: 'syz.2.1824': attribute type 5 has an invalid length. [ 138.857786][ T8842] loop3: detected capacity change from 0 to 256 [ 139.009022][ T8842] FAT-fs (loop3): Directory bread(block 64) failed [ 139.010755][ T8842] FAT-fs (loop3): Directory bread(block 65) failed [ 139.012528][ T8842] FAT-fs (loop3): Directory bread(block 66) failed [ 139.014203][ T8842] FAT-fs (loop3): Directory bread(block 67) failed [ 139.015823][ T8842] FAT-fs (loop3): Directory bread(block 68) failed [ 139.031459][ T8854] loop2: detected capacity change from 0 to 512 [ 139.052531][ T8842] FAT-fs (loop3): Directory bread(block 69) failed [ 139.054392][ T8842] FAT-fs (loop3): Directory bread(block 70) failed [ 139.056087][ T8842] FAT-fs (loop3): Directory bread(block 71) failed [ 139.067173][ T8842] FAT-fs (loop3): Directory bread(block 72) failed [ 139.068878][ T8842] FAT-fs (loop3): Directory bread(block 73) failed [ 139.245368][ T8854] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 139.254280][ T8870] loop5: detected capacity change from 0 to 1024 [ 139.453560][ T8882] loop1: detected capacity change from 0 to 8 [ 139.486615][ T8884] loop3: detected capacity change from 0 to 1024 [ 139.493611][ T294] hfsplus: b-tree write err: -5, ino 4 [ 139.507553][ T8884] hfsplus: unable to parse mount options [ 139.616038][ T8882] SQUASHFS error: lzo decompression failed, data probably corrupt [ 139.625146][ T8882] SQUASHFS error: Failed to read block 0x202: -5 [ 139.663925][ T8882] SQUASHFS error: Unable to read metadata cache entry [200] [ 139.793530][ T8902] sp0: Synchronizing with TNC [ 139.982453][ T8920] loop1: detected capacity change from 0 to 512 [ 140.032580][ T8921] sp0: Synchronizing with TNC [ 140.047278][ T8918] [U] �` [ 140.144981][ T8920] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 140.313462][ T8926] loop4: detected capacity change from 0 to 32768 [ 140.324254][ T8926] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1859 (8926) [ 140.413363][ T8926] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 140.415731][ T8926] BTRFS info (device loop4): force clearing of disk cache [ 140.443479][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.445491][ T8947] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 140.450381][ T8926] BTRFS info (device loop4): force zlib compression, level 3 [ 140.452307][ T8926] BTRFS info (device loop4): enabling auto defrag [ 140.453808][ T8926] BTRFS info (device loop4): max_inline at 0 [ 140.455298][ T8926] BTRFS info (device loop4): using free space tree [ 140.485859][ T8926] BTRFS info (device loop4): has skinny extents [ 140.488344][ T8947] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 140.493754][ T8950] loop3: detected capacity change from 0 to 1024 [ 140.749571][ T8926] BTRFS info (device loop4): enabling ssd optimizations [ 140.752160][ T8926] BTRFS info (device loop4): clearing free space tree [ 140.753784][ T8926] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 140.756341][ T8926] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 140.810405][ T8926] BTRFS info (device loop4): creating free space tree [ 140.812634][ T8926] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 140.814907][ T8926] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 140.827638][ C1] Unable to handle kernel paging request at virtual address dfff800000000000 [ 140.829909][ C1] Mem abort info: [ 140.830826][ C1] ESR = 0x0000000096000006 [ 140.832013][ C1] EC = 0x25: DABT (current EL), IL = 32 bits [ 140.833497][ C1] SET = 0, FnV = 0 [ 140.834400][ C1] EA = 0, S1PTW = 0 [ 140.835377][ C1] FSC = 0x06: level 2 translation fault [ 140.836897][ C1] Data abort info: [ 140.837843][ C1] ISV = 0, ISS = 0x00000006 [ 140.838967][ C1] CM = 0, WnR = 0 [ 140.839878][ C1] [dfff800000000000] address between user and kernel address ranges [ 140.841942][ C1] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 140.843657][ C1] Modules linked in: [ 140.844522][ C1] CPU: 1 PID: 6956 Comm: kworker/1:17 Not tainted 5.15.178-syzkaller #0 [ 140.846472][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.848886][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 140.850348][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 140.852236][ C1] pc : dev_map_generic_redirect+0x98/0x7b8 [ 140.853656][ C1] lr : dev_map_generic_redirect+0x94/0x7b8 [ 140.855077][ C1] sp : ffff8000206b6fa0 [ 140.856065][ C1] x29: ffff8000206b70d0 x28: ffff0000e99b9a00 x27: ffff80001d486000 [ 140.858093][ C1] x26: ffff800014b71010 x25: dfff800000000000 x24: 000000000000000e [ 140.860081][ C1] x23: ffff800014b71008 x22: 0000000000000000 x21: ffff8000206b7000 [ 140.862055][ C1] x20: ffff7000040d6e00 x19: 0000000000000000 x18: 0000000000000101 [ 140.864012][ C1] x17: 0000000000000000 x16: ffff800010011b6c x15: 0000000000000019 [ 140.866051][ C1] x14: ffff0000ed58d1c0 x13: 0000000000ff0100 x12: ffffffffffffffff [ 140.868042][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : ffff0000ed58d1c0 [ 140.870056][ C1] x8 : ffff80000864c31c x7 : f100000000000004 x6 : 000000000000003f [ 140.872045][ C1] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff80001d486000 [ 140.873931][ C1] x2 : ffff80001d486000 x1 : ffff0000e99b9a00 x0 : 0000000000000000 [ 140.875847][ C1] Call trace: [ 140.876657][ C1] dev_map_generic_redirect+0x98/0x7b8 [ 140.877960][ C1] xdp_do_generic_redirect+0x3f8/0xe2c [ 140.879262][ C1] do_xdp_generic+0x3b8/0x8a8 [ 140.880394][ C1] __netif_receive_skb_core+0x15c4/0x341c [ 140.881774][ C1] __netif_receive_skb+0x114/0x400 [ 140.882992][ C1] process_backlog+0x3ec/0x7e0 [ 140.884149][ C1] __napi_poll+0xb4/0x624 [ 140.885200][ C1] net_rx_action+0x500/0xc10 [ 140.886331][ C1] handle_softirqs+0x384/0xdbc [ 140.887597][ C1] do_softirq+0xfc/0x1b0 [ 140.888707][ C1] __local_bh_enable_ip+0x298/0x470 [ 140.890052][ C1] _raw_read_unlock_bh+0xf8/0x180 [ 140.891280][ C1] wg_socket_send_skb_to_peer+0x158/0x1a8 [ 140.892683][ C1] wg_packet_tx_worker+0x1a8/0x714 [ 140.893983][ C1] process_one_work+0x790/0x11b8 [ 140.895289][ C1] worker_thread+0x910/0x1034 [ 140.896453][ C1] kthread+0x37c/0x45c [ 140.897484][ C1] ret_from_fork+0x10/0x20 [ 140.898561][ C1] Code: b800f289 39004e8a 97f9e064 d343fe76 (38796ac8) [ 140.900248][ C1] ---[ end trace 2a55f0f3849cac15 ]--- [ 141.462778][ C1] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 141.464726][ C1] SMP: stopping secondary CPUs [ 141.465900][ C1] Kernel Offset: disabled [ 141.467004][ C1] CPU features: 0x8,000081c1,21302e40 [ 141.468322][ C1] Memory Limit: none [ 142.002633][ C1] Rebooting in 86400 seconds..