last executing test programs: 1m19.782852609s ago: executing program 2 (id=319): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000240)={[{@utf8}, {@gid}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@discard}, {@discard}, {}, {@discard}, {@errors_remount}, {@time_offset={'time_offset', 0x3d, 0x78}}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000001f80)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x121500, 0x9b) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 1m19.710096526s ago: executing program 2 (id=321): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0xfffffd46}], 0x1, 0x1000000000000}}], 0x48}, 0x0) 1m19.633213531s ago: executing program 2 (id=333): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000001080)) 1m19.566442608s ago: executing program 2 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 1m19.497743815s ago: executing program 2 (id=328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000900), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), 0x0}, 0x20) 1m19.018268753s ago: executing program 2 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40055}, 0x8000) 1m18.969610064s ago: executing program 32 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40055}, 0x8000) 1m2.913787915s ago: executing program 4 (id=721): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x10000}) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, {0x10, 0x7}, {0x0, 0x8}, {0x1, 0xffe0}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0xa, 0xc4, 0x10, 0x88, 0x2, 0x0, 0x3}}, {0x4}}]}]}, 0x68}}, 0x0) 1m2.856857174s ago: executing program 4 (id=726): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000001640)={[{@grpquota}, {@data_ordered}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@grpid}, {@dioread_nolock}, {}, {@debug}, {@noauto_da_alloc}]}, 0x1, 0x5f7, &(0x7f00000016c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x19a) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) 1m2.662788987s ago: executing program 4 (id=733): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) 1m2.513546209s ago: executing program 5 (id=738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x58, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 1m2.513482689s ago: executing program 4 (id=739): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 1m2.47152321s ago: executing program 4 (id=742): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000740)={0xc20006dc, 0xfffffffd, 0x7, 0x10008, 0xb, "5000000d01e3002b0072940294a300"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa) 1m2.428656062s ago: executing program 5 (id=746): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 1m2.372638971s ago: executing program 5 (id=750): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) 1m2.300361558s ago: executing program 5 (id=754): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 1m2.221559702s ago: executing program 5 (id=758): r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) r1 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) close_range(r0, r1, 0x0) 1m1.95040534s ago: executing program 4 (id=766): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r0, 0x0, 0x0, 0x2) 1m1.94565379s ago: executing program 33 (id=766): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r0, 0x0, 0x0, 0x2) 1m1.778483737s ago: executing program 5 (id=771): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) write$binfmt_misc(r0, &(0x7f0000000dc0), 0x386) 1m1.761749014s ago: executing program 34 (id=771): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) write$binfmt_misc(r0, &(0x7f0000000dc0), 0x386) 841.518807ms ago: executing program 3 (id=2453): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000000000000}, 0x1}) 780.148174ms ago: executing program 3 (id=2456): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f00000000c0)) 703.470898ms ago: executing program 3 (id=2464): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000000c0)) 645.385596ms ago: executing program 6 (id=2467): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x28b00, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x8000, {0x0, 0x0, 0x0, 0xffffffffffffff80, 0x0, 0x0, 0x0, 0x6, 0x846fe97dc65f6e46, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1173939c787a16c1ca43f8539f3d33697c176d1bb29f35239d20000000080b000000000000000001e00000000000000947d00000200", "24431a1e77a68e174ff60000000000000010e200"}}) 614.659559ms ago: executing program 7 (id=2468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x64, r1, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}]}, 0x64}}, 0x40000) 607.813298ms ago: executing program 6 (id=2469): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000010000), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000100c0)={0x0, 0x0, &(0x7f0000010080)={&(0x7f0000010040)={0x24, r1, 0xe11, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) 580.959272ms ago: executing program 6 (id=2470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000200000a400004803c0001800b00010065787468647200002c000280050002008900000008000340000000000800044000e60001080006400000000408000140000000010900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 559.800467ms ago: executing program 7 (id=2471): keyctl$clear(0x5, 0xffffffffffffffff) r0 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "4798c876e465feab8953b1418649e6b2208f982a3af615ad1141a7f3fc80bcefc645677fb06e8abd9c46ffeee91b4643705ab775577a0e1dbfec86930e0bbc04", 0x24}, 0x48, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 523.71912ms ago: executing program 3 (id=2472): r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r0, &(0x7f00000008c0)=""/257, 0x101) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 492.221584ms ago: executing program 7 (id=2474): unshare(0x20000680) r0 = socket(0x22, 0x2, 0x4) bind$bt_hci(r0, &(0x7f0000001200)={0x1f, 0x3}, 0x6) 474.49151ms ago: executing program 7 (id=2475): r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x0, 0xc9, 0x8001}}}, 0x8) 456.679046ms ago: executing program 7 (id=2476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8}, @NFTA_HASH_DREG={0x8}, @NFTA_HASH_SREG={0x8}, @NFTA_HASH_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 455.805176ms ago: executing program 6 (id=2477): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x70bd28, 0x2, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4054}, 0x0) 415.157947ms ago: executing program 6 (id=2479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a01010000000000000000070000060900010073797a1c5e000000080002400000000214000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x7, 0xa, 0x601, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000881}, 0x4000084) 382.24211ms ago: executing program 1 (id=2481): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setresuid(0xee01, 0xee01, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 358.972336ms ago: executing program 7 (id=2482): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0xcc0, &(0x7f0000000840)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0", @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES16, @ANYRES16, @ANYRES16], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff) 336.038361ms ago: executing program 6 (id=2483): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x53, 0x2) 326.439859ms ago: executing program 0 (id=2484): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0}, 0x94) r0 = socket(0xa, 0x3, 0xfc) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) 295.776602ms ago: executing program 3 (id=2485): io_uring_setup(0x7ac3, &(0x7f0000000080)={0x0, 0x0, 0x10d2}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0x2020) 280.536229ms ago: executing program 0 (id=2486): unshare(0x2040400) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000001080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0xfffffffe}, 0x20) 280.046559ms ago: executing program 1 (id=2487): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x10}, 0x19}, 0x20048000) 228.504958ms ago: executing program 0 (id=2488): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x231000, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {}, {@errors_remount}, {@grpid}, {@resuid}]}, 0x0, 0x572, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1f,h\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 220.235737ms ago: executing program 1 (id=2489): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3, 0x80000002, 0x5, 0xfff, 0x6, 0x1ff, 0x0, 0xa}, &(0x7f0000000140)={0x9, 0x3, 0x0, 0x1, 0xcf9, 0x0, 0x6, 0x7}, 0x0, 0x0, 0x0) 217.849016ms ago: executing program 3 (id=2490): r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 123.046426ms ago: executing program 1 (id=2491): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket(0x18, 0x1, 0x0) getsockname$unix(r0, 0x0, 0xffffffffffffffff) 121.973456ms ago: executing program 0 (id=2492): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048004) 93.10579ms ago: executing program 1 (id=2493): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 53.924402ms ago: executing program 0 (id=2494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, r0, 0x2) fcntl$dupfd(r0, 0x406, r0) 49.48663ms ago: executing program 1 (id=2495): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@cswp={0x58, 0x114, 0x7, {{0x0, 0x2000008}, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x10, 0x4, 0x8000, 0x11, 0x9, 0x1, 0x4b}}, @rdma_args={0x47, 0x114, 0x1, {{0x4}, {&(0x7f0000000100)=""/182, 0xc0}, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000240)=""/234, 0xea}, {&(0x7f0000000340)=""/45, 0x2d}, {&(0x7f0000000380)=""/209, 0xd1}], 0x46, 0x2, 0xfffffffffffffffd}}], 0xa0, 0x20040054}, 0x0) 0s ago: executing program 0 (id=2496): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000000)=0x82) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) kernel console output (not intermixed with test programs): [ T4330] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.704887][ T4330] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.706203][ T4330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.738972][ T6415] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 60.784741][ T6416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.778'. [ 60.850536][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 60.876565][ T4330] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.879325][ T4330] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.881002][ T4330] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.883394][ T4330] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.885055][ T4330] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.887510][ T4330] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.896641][ T421] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.920752][ T6435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.786'. [ 60.966768][ T421] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.993541][ T6446] EXT4-fs: Ignoring removed nobh option [ 61.039012][ T6446] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 61.055788][ T421] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.067986][ T4326] EXT4-fs (loop3): unmounting filesystem. [ 61.165656][ T421] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.177505][ T6461] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 61.239601][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 61.322830][ T6432] chnl_net:caif_netlink_parms(): no params data found [ 61.393793][ T6417] chnl_net:caif_netlink_parms(): no params data found [ 61.402240][ T6489] EXT4-fs: Ignoring removed nobh option [ 61.432569][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.433854][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.435909][ T6432] device bridge_slave_0 entered promiscuous mode [ 61.468594][ T6489] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 61.473338][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.479947][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.481766][ T6432] device bridge_slave_1 entered promiscuous mode [ 61.528158][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 61.670145][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.671420][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.673074][ T6417] device bridge_slave_0 entered promiscuous mode [ 61.684390][ T6432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.696124][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.697383][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.699430][ T6417] device bridge_slave_1 entered promiscuous mode [ 61.758571][ T6432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.776872][ T6417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.782991][ T6432] team0: Port device team_slave_0 added [ 61.785345][ T6417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.787660][ T6432] team0: Port device team_slave_1 added [ 61.793093][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.794163][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.798890][ T6432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.801164][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.802335][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.806753][ T6432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.886473][ T6432] device hsr_slave_0 entered promiscuous mode [ 61.924788][ T6432] device hsr_slave_1 entered promiscuous mode [ 61.954561][ T6432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.955825][ T6432] Cannot create hsr debugfs directory [ 61.960034][ T6417] team0: Port device team_slave_0 added [ 62.011094][ T6417] team0: Port device team_slave_1 added [ 62.021734][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.022860][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.027185][ T6417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.036060][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.037196][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.041190][ T6417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.195800][ T6417] device hsr_slave_0 entered promiscuous mode [ 62.234694][ T6417] device hsr_slave_1 entered promiscuous mode [ 62.284476][ T6417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.285772][ T6417] Cannot create hsr debugfs directory [ 62.402757][ T6432] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 62.459720][ T6432] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 62.506044][ T6432] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 62.596557][ T6432] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 62.721039][ T6417] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 62.767489][ T6417] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 62.786277][ T6417] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 62.808543][ T4324] Bluetooth: hci3: command 0x0409 tx timeout [ 62.836135][ T6417] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 62.954489][ T4336] Bluetooth: hci4: command 0x0409 tx timeout [ 63.163878][ T6432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.169881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.171374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.215583][ T6432] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.221981][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.223602][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.225208][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.226344][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.228464][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.232251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.234333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.236510][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.237621][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.243850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.255404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.257133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.259839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.562065][ T6432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.563567][ T6432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.566152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.567581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.569124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.570693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.572078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.573664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.575546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.577085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.582681][ T6417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.590390][ T6417] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.624311][ T421] device hsr_slave_0 left promiscuous mode [ 63.665145][ T421] device hsr_slave_1 left promiscuous mode [ 63.744541][ T421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.745762][ T421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.747342][ T421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.748557][ T421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.749842][ T421] device bridge_slave_1 left promiscuous mode [ 63.750792][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.786021][ T421] device bridge_slave_0 left promiscuous mode [ 63.787092][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.914976][ T421] device veth1_macvtap left promiscuous mode [ 63.915984][ T421] device veth0_macvtap left promiscuous mode [ 63.916852][ T421] device veth1_vlan left promiscuous mode [ 63.917864][ T421] device veth0_vlan left promiscuous mode [ 64.486109][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.487215][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.874504][ T4324] Bluetooth: hci3: command 0x041b tx timeout [ 65.034518][ T4324] Bluetooth: hci4: command 0x041b tx timeout [ 66.057507][ T421] team0 (unregistering): Port device team_slave_1 removed [ 66.229542][ T421] team0 (unregistering): Port device team_slave_0 removed [ 66.415498][ T421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.635074][ T421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.954606][ T4324] Bluetooth: hci3: command 0x040f tx timeout [ 67.114493][ T4324] Bluetooth: hci4: command 0x040f tx timeout [ 68.166345][ T421] bond0 (unregistering): Released all slaves [ 68.467136][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.468727][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.470116][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.471646][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.473052][ T1693] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.474052][ T1693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.475534][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.477158][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.478639][ T1693] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.479720][ T1693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.481116][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.482772][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.490842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.492719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.496558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.498672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.500088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.503368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.505498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.506994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.508617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.518779][ T6417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.522687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.606094][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.607347][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.610328][ T6432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.641904][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.643223][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.650338][ T6417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.755901][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.757563][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.763277][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.765194][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.768625][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.776260][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.787993][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.789596][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.792424][ T6417] device veth0_vlan entered promiscuous mode [ 68.796622][ T6417] device veth1_vlan entered promiscuous mode [ 68.800193][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.801752][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.803329][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.806660][ T6432] device veth0_vlan entered promiscuous mode [ 68.810077][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.811898][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.819075][ T6432] device veth1_vlan entered promiscuous mode [ 68.822438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.823994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.826133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.827807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.840426][ T6417] device veth0_macvtap entered promiscuous mode [ 68.850600][ T6417] device veth1_macvtap entered promiscuous mode [ 68.853281][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.854770][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.856266][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.857781][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.859891][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.863832][ T6432] device veth0_macvtap entered promiscuous mode [ 68.870848][ T6432] device veth1_macvtap entered promiscuous mode [ 68.873033][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.875222][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.876795][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.878356][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.879811][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.881350][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.882768][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.888456][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.891215][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.895718][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.897183][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.898607][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.909320][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.912689][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.914174][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.915917][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.917580][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.919050][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.922409][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.923748][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.925720][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.927295][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.929305][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.931632][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.933011][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.934927][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.936334][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.937813][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.939172][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.940689][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.942010][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.943439][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.948993][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.951504][ T6417] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.952845][ T6417] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.954220][ T6417] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.956919][ T6417] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.959405][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.961070][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.962550][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.964074][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.976411][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.977876][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.979310][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.980748][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.982231][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.983671][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.989319][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.990857][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.992317][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.993763][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.997148][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.998734][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.000321][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.010540][ T6432] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.011820][ T6432] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.013095][ T6432] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.018111][ T6432] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.034533][ T4324] Bluetooth: hci3: command 0x0419 tx timeout [ 69.051081][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.052395][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.053899][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.118095][ T1574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.119391][ T1574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.121379][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.134748][ T1574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.135956][ T1574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.140046][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.145698][ T5222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.146869][ T5222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.148655][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.194543][ T4324] Bluetooth: hci4: command 0x0419 tx timeout [ 69.329565][ T6654] set_capacity_and_notify: 6 callbacks suppressed [ 69.329575][ T6654] loop1: detected capacity change from 0 to 8192 [ 69.557298][ T421] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.596827][ T111] cfg80211: failed to load regulatory.db [ 69.772916][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 69.776169][ T421] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.906111][ T421] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.932528][ T6715] loop1: detected capacity change from 0 to 512 [ 69.963901][ T6722] loop0: detected capacity change from 0 to 256 [ 69.983793][ T6715] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 70.023059][ T6666] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 70.057635][ T6698] loop6: detected capacity change from 0 to 32768 [ 70.062510][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 70.080713][ T6652] loop3: detected capacity change from 0 to 65536 [ 70.087249][ T421] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.100136][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.828'. [ 70.127706][ T6698] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 70.141676][ T6652] XFS (loop3): Mounting V5 Filesystem [ 70.231331][ T6417] ocfs2: Unmounting device (7,6) on (node local) [ 70.247473][ T6652] XFS (loop3): Ending clean mount [ 70.253303][ T6652] XFS (loop3): Quotacheck needed: Please wait. [ 70.297321][ T6652] XFS (loop3): Quotacheck: Done. [ 70.411351][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.7.836'. [ 70.440012][ T4326] XFS (loop3): Unmounting Filesystem [ 70.465175][ T421] tipc: Disabling bearer [ 70.532058][ T421] tipc: Left network mode [ 70.532075][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.6.838'. [ 70.582801][ T6751] loop0: detected capacity change from 0 to 32768 [ 70.588217][ T6786] loop7: detected capacity change from 0 to 512 [ 70.608099][ T6751] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 70.669140][ T6786] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 70.761036][ T4325] ocfs2: Unmounting device (7,0) on (node local) [ 70.928233][ T6432] EXT4-fs (loop7): unmounting filesystem. [ 71.128920][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 71.149824][ T6808] loop1: detected capacity change from 0 to 40427 [ 71.170342][ T6808] F2FS-fs (loop1): invalid crc value [ 71.188730][ T6808] F2FS-fs (loop1): Found nat_bits in checkpoint [ 71.214853][ T6808] F2FS-fs (loop1): Start checkpoint disabled! [ 71.231461][ T6808] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 71.328311][ T6860] can0: slcan on ptm0. [ 71.397444][ T6856] can0 (unregistered): slcan off ptm0. [ 71.458701][ T6877] loop0: detected capacity change from 0 to 2048 [ 71.498015][ T6877] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003] [ 71.499512][ T6877] System zones: 0-7 [ 71.504644][ T6877] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.532746][ T6877] EXT4-fs error (device loop0): ext4_ext_precache:627: inode #2: comm syz.0.871: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 71.574278][ T6877] EXT4-fs (loop0): Remounting filesystem read-only [ 71.643605][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 71.694383][ T6889] loop1: detected capacity change from 0 to 4096 [ 71.712339][ T6889] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 71.717888][ T6889] ntfs3: loop1: Failed to load $Extend. [ 71.886971][ T6873] XFS (loop6): Mounting V5 Filesystem [ 71.931425][ T6873] XFS (loop6): Ending clean mount [ 71.932972][ T6873] XFS (loop6): Quotacheck needed: Please wait. [ 71.969327][ T6873] XFS (loop6): Quotacheck: Done. [ 72.052175][ T6417] XFS (loop6): Unmounting Filesystem [ 72.092991][ T6931] can0: slcan on ptm0. [ 72.184940][ T6930] can0 (unregistered): slcan off ptm0. [ 72.342895][ T6924] F2FS-fs (loop0): invalid crc value [ 72.366932][ T6924] F2FS-fs (loop0): Found nat_bits in checkpoint [ 72.372799][ T6924] F2FS-fs (loop0): Start checkpoint disabled! [ 72.378658][ T6924] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 73.058775][ T7028] netlink: 'syz.0.914': attribute type 30 has an invalid length. [ 73.132005][ T421] device hsr_slave_0 left promiscuous mode [ 73.168125][ T421] device hsr_slave_1 left promiscuous mode [ 73.244630][ T421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.246105][ T421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.247907][ T421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.249068][ T421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.250651][ T421] device bridge_slave_1 left promiscuous mode [ 73.253213][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.285704][ T421] device bridge_slave_0 left promiscuous mode [ 73.287210][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.474754][ T421] device veth1_macvtap left promiscuous mode [ 73.475863][ T421] device veth0_macvtap left promiscuous mode [ 73.477593][ T421] device veth1_vlan left promiscuous mode [ 73.478611][ T421] device veth0_vlan left promiscuous mode [ 74.611753][ T7084] set_capacity_and_notify: 4 callbacks suppressed [ 74.611770][ T7084] loop7: detected capacity change from 0 to 32768 [ 74.623038][ T7084] XFS (loop7): Mounting V5 Filesystem [ 74.634023][ T7084] XFS (loop7): Ending clean mount [ 74.679959][ T6432] XFS (loop7): Unmounting Filesystem [ 76.357228][ T421] team0 (unregistering): Port device team_slave_1 removed [ 76.547069][ T421] team0 (unregistering): Port device team_slave_0 removed [ 76.735435][ T421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.947598][ T421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.456247][ T421] bond0 (unregistering): Released all slaves [ 79.165159][ T7144] loop7: detected capacity change from 0 to 8 [ 79.567818][ T7180] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 79.677376][ T7189] loop0: detected capacity change from 0 to 256 [ 79.720483][ T7189] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 80.182283][ T22] kernel write not supported for file /uinput (pid: 22 comm: kworker/1:0) [ 80.529833][ T7299] loop0: detected capacity change from 0 to 1024 [ 80.545651][ T7299] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c801e018, mo2=0000] [ 80.566348][ T7307] loop1: detected capacity change from 0 to 64 [ 80.575384][ T7299] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.1014: lblock 2 mapped to illegal pblock 2 (length 1) [ 80.582063][ T7299] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 80.583299][ T7299] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.1014: lblock 0 mapped to illegal pblock 48 (length 1) [ 80.609117][ T7299] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 80.610585][ T7299] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.1014: Failed to acquire dquot type 0 [ 80.635524][ T7299] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 80.641865][ T7299] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.1014: mark_inode_dirty error [ 80.648524][ T7299] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 80.650131][ T7299] EXT4-fs (loop0): 1 orphan inode deleted [ 80.651104][ T7299] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 80.654932][ T11] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.657327][ T11] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 80.658837][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 0 [ 80.788413][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 80.789565][ T5222] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.792533][ T5222] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 80.793855][ T5222] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:6: Failed to release dquot type 0 [ 80.801500][ T4325] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 80.803644][ T4325] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 80.828431][ T4325] EXT4-fs error (device loop0): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 80.862709][ T7339] loop7: detected capacity change from 0 to 128 [ 80.909054][ T7339] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 80.912745][ T7339] FAT-fs (loop7): Filesystem has been set read-only [ 80.929406][ T14] kernel write not supported for file /uhid (pid: 14 comm: kworker/0:1) [ 81.083038][ T7329] loop3: detected capacity change from 0 to 32768 [ 81.140105][ T7329] jfs: Unrecognized mount option "errops=remount-ro" or missing value [ 81.146032][ T7369] loop7: detected capacity change from 0 to 2048 [ 81.153571][ T7369] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 81.176479][ T7374] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.202224][ T7369] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 81.209528][ T7369] Remounting filesystem read-only [ 81.210464][ T7369] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 3044605952 [ 81.215056][ T7369] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=15) [ 81.219833][ T7369] NILFS (loop7): error -5 truncating bmap (ino=15) [ 81.251266][ T6432] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 81.333185][ T7385] mkiss: ax0: crc mode is auto. [ 81.561592][ T7409] loop6: detected capacity change from 0 to 4096 [ 81.564936][ T7409] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 81.603745][ T7409] ntfs3: loop6: ntfs3_write_inode r=1e failed, -22. [ 81.643355][ T6417] ntfs3: loop6: ntfs_evict_inode r=1e failed, -22. [ 81.644543][ T6417] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 81.766718][ T7426] tipc: New replicast peer: 255.255.255.255 [ 81.783536][ T7426] tipc: Enabled bearer , priority 10 [ 81.789581][ T7394] loop0: detected capacity change from 0 to 40427 [ 81.804765][ T7394] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 81.806163][ T7394] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 81.819538][ T7394] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 81.820862][ T7394] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 81.832389][ T7394] F2FS-fs (loop0): invalid crc value [ 81.842344][ T7394] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.859493][ T7394] F2FS-fs (loop0): Start checkpoint disabled! [ 81.872825][ T7394] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 81.873924][ T7394] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 81.977381][ T11] kworker/u4:1: attempt to access beyond end of device [ 81.977381][ T11] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 82.037857][ T7420] loop6: detected capacity change from 0 to 32768 [ 82.082905][ T7420] jfs: Unrecognized mount option "errops=remount-ro" or missing value [ 82.112635][ T7456] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 82.183282][ T7471] loop7: detected capacity change from 0 to 2048 [ 82.200481][ T7471] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 82.215558][ T7476] tipc: Started in network mode [ 82.216399][ T7476] tipc: Node identity ac14140f, cluster identity 4711 [ 82.217550][ T7476] tipc: New replicast peer: 255.255.255.255 [ 82.218609][ T7476] tipc: Enabled bearer , priority 10 [ 82.264200][ T6432] EXT4-fs (loop7): unmounting filesystem. [ 82.356451][ T7490] EXT4-fs: Ignoring removed orlov option [ 82.439110][ T7490] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 82.499724][ T7490] erspan0: default FDB implementation only supports local addresses [ 82.508108][ T7488] non-latin1 character 0x230 found in JFS file name [ 82.509067][ T7488] mount with iocharset=utf8 to access [ 82.578501][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 82.667656][ T7514] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1086'. [ 82.704699][ T7506] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 82.709366][ T7513] mkiss: ax0: crc mode is auto. [ 82.870845][ T7525] NILFS (loop6): mounting unchecked fs [ 82.872468][ T7525] NILFS (loop6): invalid segment: Sequence number mismatch [ 82.873636][ T7525] NILFS (loop6): trying rollback from an earlier position [ 82.901838][ T7536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1094'. [ 82.903436][ T7525] NILFS (loop6): recovery complete [ 82.916284][ T7539] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.988006][ T7544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'. [ 83.003614][ T7544] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 83.110774][ T7551] NILFS (loop1): mounting unchecked fs [ 83.116911][ T7551] NILFS (loop1): invalid segment: Sequence number mismatch [ 83.122581][ T7551] NILFS (loop1): trying rollback from an earlier position [ 83.137079][ T7551] NILFS (loop1): recovery complete [ 83.145148][ T7557] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.335442][ T14] tipc: Node number set to 2886997007 [ 83.380684][ T7548] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 83.381980][ T7548] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 83.422979][ T7548] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 83.431780][ T14] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 83.432878][ T14] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 83.459573][ T14] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 26ms [ 83.466139][ T14] gfs2: fsid=syz:syz.0: jid=0: Done [ 83.467757][ T7548] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 83.808127][ T7575] F2FS-fs (loop3): invalid crc value [ 83.822134][ T7575] F2FS-fs (loop3): Found nat_bits in checkpoint [ 83.844640][ T7575] F2FS-fs (loop3): Start checkpoint disabled! [ 83.854068][ T7575] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 84.172473][ T7648] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.257347][ T7648] NILFS (loop7): vblocknr = 22 has abnormal lifetime: start cno (= 1099511627778) > current cno (= 3) [ 84.260343][ T7648] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=6) [ 84.265492][ T7648] Remounting filesystem read-only [ 84.290728][ T6432] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 84.533252][ T7643] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 84.539373][ T7643] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 84.556855][ T7643] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 2ms [ 84.559968][ T22] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 84.561090][ T22] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 84.597550][ T22] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 36ms [ 84.602496][ T22] gfs2: fsid=syz:syz.0: jid=0: Done [ 84.603369][ T7643] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 84.881330][ T7694] binder: 7693:7694 ioctl c0306201 9999999999999999 returned -14 [ 84.887682][ T7655] set_capacity_and_notify: 8 callbacks suppressed [ 84.887690][ T7655] loop6: detected capacity change from 0 to 40427 [ 84.939415][ T7655] F2FS-fs (loop6): invalid crc value [ 84.947953][ T7655] F2FS-fs (loop6): Found nat_bits in checkpoint [ 84.971813][ T7655] F2FS-fs (loop6): Start checkpoint disabled! [ 84.984086][ T7655] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 85.097147][ T7709] loop0: detected capacity change from 0 to 128 [ 85.104702][ T7707] loop1: detected capacity change from 0 to 2048 [ 85.121950][ T7707] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 85.123216][ T7707] UDF-fs: Scanning with blocksize 512 failed [ 85.143031][ T7707] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.298044][ T7725] loop1: detected capacity change from 0 to 136 [ 85.396124][ T7713] loop7: detected capacity change from 0 to 40427 [ 85.405803][ T7713] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 85.407558][ T7713] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 85.423695][ T7713] F2FS-fs (loop7): Found nat_bits in checkpoint [ 85.448113][ T7713] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 85.449345][ T7713] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 85.569564][ T7736] loop1: detected capacity change from 0 to 32768 [ 85.574157][ T7736] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 85.575492][ T7736] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 85.588499][ T7736] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 4ms [ 85.591672][ T22] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 85.592709][ T22] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 85.621141][ T22] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 28ms [ 85.628943][ T22] gfs2: fsid=syz:syz.0: jid=0: Done [ 85.629788][ T7736] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 86.073360][ T7769] loop3: detected capacity change from 0 to 136 [ 86.198040][ T7754] loop7: detected capacity change from 0 to 40427 [ 86.214364][ T7754] F2FS-fs (loop7): invalid crc value [ 86.233171][ T7754] F2FS-fs (loop7): Found nat_bits in checkpoint [ 86.261689][ T7754] F2FS-fs (loop7): Start checkpoint disabled! [ 86.274616][ T7754] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 86.861167][ T7842] loop7: detected capacity change from 0 to 32768 [ 86.911671][ T7842] XFS (loop7): Mounting V5 Filesystem [ 86.917708][ T7848] loop6: detected capacity change from 0 to 32768 [ 86.965482][ T7848] ERROR: (device loop6): dbAllocAG: Corrupt dmapctl page [ 86.965482][ T7848] [ 86.967483][ T7842] XFS (loop7): Ending clean mount [ 86.969557][ T7842] XFS (loop7): Quotacheck needed: Please wait. [ 86.985263][ T7848] ERROR: (device loop6): remounting filesystem as read-only [ 86.999357][ T7842] XFS (loop7): Quotacheck: Done. [ 87.006555][ T7858] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 87.008924][ T7858] JBD2: Ignoring recovery information on journal [ 87.042042][ T6432] XFS (loop7): Unmounting Filesystem [ 87.045928][ T7858] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 87.180998][ T4325] ocfs2: Unmounting device (7,0) on (node local) [ 87.229144][ T7891] netlink: 4112 bytes leftover after parsing attributes in process `syz.1.1230'. [ 87.230638][ T7891] netlink: 65 bytes leftover after parsing attributes in process `syz.1.1230'. [ 87.232018][ T7891] tipc: Enabling of bearer rejected, already enabled [ 87.474255][ T7916] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 87.522690][ T7920] netlink: 4112 bytes leftover after parsing attributes in process `syz.0.1242'. [ 87.524160][ T7920] netlink: 65 bytes leftover after parsing attributes in process `syz.0.1242'. [ 87.535249][ T7920] tipc: Enabling of bearer rejected, already enabled [ 87.551326][ T7895] XFS (loop3): Mounting V5 Filesystem [ 87.594560][ T7895] XFS (loop3): Ending clean mount [ 87.597254][ T7895] XFS (loop3): Quotacheck needed: Please wait. [ 87.625570][ T7895] XFS (loop3): Quotacheck: Done. [ 87.686383][ T7903] ERROR: (device loop1): dbAllocAG: Corrupt dmapctl page [ 87.686383][ T7903] [ 87.688175][ T7903] ERROR: (device loop1): remounting filesystem as read-only [ 87.726267][ T7941] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 87.740088][ T4326] XFS (loop3): Unmounting Filesystem [ 87.776361][ T6417] EXT4-fs (loop6): unmounting filesystem. [ 88.127744][ T7953] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 88.128831][ T7953] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 88.137993][ T7953] F2FS-fs (loop0): invalid crc value [ 88.178538][ T7953] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 88.203389][ T7953] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 88.205741][ T7953] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 88.254724][ T7968] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 88.257019][ T7968] JBD2: Ignoring recovery information on journal [ 88.300660][ T4325] syz-executor: attempt to access beyond end of device [ 88.300660][ T4325] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 88.356177][ T7968] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 88.427555][ T4326] ocfs2: Unmounting device (7,3) on (node local) [ 88.611119][ T8006] erofs: (device loop6): mounted with root inode @ nid 36. [ 88.651695][ T8006] erofs: (device loop6): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 88.653452][ T8006] syz.6.1276: attempt to access beyond end of device [ 88.653452][ T8006] loop6: rw=0, sector=16392, nr_sectors = 8 limit=16 [ 88.677579][ T8006] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 88.679070][ T8006] erofs: (device loop6): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 88.786910][ T8002] ERROR: (device loop0): dbAllocAG: Corrupt dmapctl page [ 88.786910][ T8002] [ 88.788777][ T8002] ERROR: (device loop0): remounting filesystem as read-only [ 89.050490][ T8043] hpfs: filesystem error: improperly stopped; already mounted read-only [ 89.052031][ T8043] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 89.053246][ T8043] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000003 [ 89.096039][ T8043] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1291'. [ 89.097457][ T8043] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 89.119260][ T8022] XFS (loop6): Mounting V5 Filesystem [ 89.179283][ T8022] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 89.207689][ T8022] XFS (loop6): Starting recovery (logdev: internal) [ 89.245923][ T8022] XFS (loop6): Ending recovery (logdev: internal) [ 89.324111][ T6417] XFS (loop6): Unmounting Filesystem [ 89.452994][ T8047] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 89.452994][ T8047] [ 89.476524][ T8047] ERROR: (device loop3): remounting filesystem as read-only [ 89.477799][ T8047] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 89.477799][ T8047] [ 89.479243][ T8047] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 89.479243][ T8047] [ 89.578560][ T8082] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 89.587949][ T8082] JBD2: Ignoring recovery information on journal [ 89.629686][ T8082] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 89.657213][ T8101] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 89.658237][ T8101] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 89.659936][ T8101] F2FS-fs (loop7): invalid crc value [ 89.695627][ T8101] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 89.709440][ T4321] ocfs2: Unmounting device (7,1) on (node local) [ 89.734023][ T8101] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 89.735652][ T8101] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 89.799065][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1318'. [ 89.903788][ T6432] syz-executor: attempt to access beyond end of device [ 89.903788][ T6432] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 89.929233][ T8136] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1323'. [ 90.085834][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1330'. [ 90.219902][ T8172] netlink: 47 bytes leftover after parsing attributes in process `syz.6.1338'. [ 90.450192][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1347'. [ 90.612344][ T8225] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1357'. [ 90.636459][ T8221] set_capacity_and_notify: 15 callbacks suppressed [ 90.636470][ T8221] loop6: detected capacity change from 0 to 2048 [ 90.641312][ T8221] hpfs: filesystem error: improperly stopped; already mounted read-only [ 90.642627][ T8221] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 90.643889][ T8221] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000003 [ 90.759902][ T8221] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1353'. [ 90.761481][ T8221] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 90.789112][ T8242] loop0: detected capacity change from 0 to 1024 [ 90.791913][ T8244] fuse: Unexpected value for 'default_permissions' [ 90.894907][ T8242] hfsplus: can't free extent [ 90.899289][ T8224] loop7: detected capacity change from 0 to 32768 [ 90.980880][ T8224] XFS (loop7): DAX unsupported by block device. Turning off DAX. [ 90.982539][ T8224] XFS (loop7): Mounting V5 Filesystem [ 91.003838][ T8268] loop6: detected capacity change from 0 to 512 [ 91.034146][ T8224] XFS (loop7): Ending clean mount [ 91.037998][ T8268] EXT4-fs: inline encryption not supported [ 91.039774][ T8224] XFS (loop7): Quotacheck needed: Please wait. [ 91.043090][ T8268] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 91.056114][ T8224] XFS (loop7): Quotacheck: Done. [ 91.081260][ T8268] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 91.082492][ T8268] System zones: 1-12 [ 91.112552][ T8268] EXT4-fs (loop6): 1 truncate cleaned up [ 91.113555][ T8268] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 91.118281][ T6432] XFS (loop7): Unmounting Filesystem [ 91.166812][ T8252] loop3: detected capacity change from 0 to 32768 [ 91.229722][ T6417] EXT4-fs (loop6): unmounting filesystem. [ 91.231047][ T8252] XFS (loop3): Mounting V5 Filesystem [ 91.273721][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1377'. [ 91.284328][ T8252] XFS (loop3): Ending clean mount [ 91.359139][ T8275] loop0: detected capacity change from 0 to 32768 [ 91.363108][ T4326] XFS (loop3): Unmounting Filesystem [ 91.394652][ T8275] XFS (loop0): Mounting V5 Filesystem [ 91.431405][ T8275] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 91.442170][ T8275] XFS (loop0): Starting recovery (logdev: internal) [ 91.451297][ T8275] XFS (loop0): Ending recovery (logdev: internal) [ 91.518378][ T4325] XFS (loop0): Unmounting Filesystem [ 91.642032][ T8317] option changes via remount are deprecated (pid=8316 comm=syz.6.1388) [ 91.939360][ T8344] loop6: detected capacity change from 0 to 1024 [ 91.979846][ T8344] hfsplus: can't free extent [ 92.246476][ T8374] netlink: 'syz.6.1415': attribute type 3 has an invalid length. [ 92.247953][ T8374] netlink: 153952 bytes leftover after parsing attributes in process `syz.6.1415'. [ 92.254365][ T8376] loop1: detected capacity change from 0 to 1024 [ 92.308537][ T8376] hfsplus: can't free extent [ 92.513338][ T1965] kernel write not supported for file [eventfd] (pid: 1965 comm: kworker/1:2) [ 92.538105][ T8402] loop0: detected capacity change from 0 to 512 [ 92.539604][ T8402] EXT4-fs: inline encryption not supported [ 92.567051][ T8402] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.576151][ T8402] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 92.577611][ T8402] System zones: 1-12 [ 92.583935][ T8402] EXT4-fs (loop0): 1 truncate cleaned up [ 92.587437][ T8402] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 92.608430][ T8408] option changes via remount are deprecated (pid=8406 comm=syz.1.1428) [ 92.651423][ T8386] loop7: detected capacity change from 0 to 32768 [ 92.682426][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 92.767543][ T8417] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 92.773030][ T8386] XFS (loop7): Mounting V5 Filesystem [ 92.806534][ T8386] XFS (loop7): Ending clean mount [ 92.808078][ T8386] XFS (loop7): Quotacheck needed: Please wait. [ 92.827761][ T8417] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 92.841380][ T8386] XFS (loop7): Quotacheck: Done. [ 92.861568][ T8430] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 92.863179][ T8430] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 92.867474][ T8430] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.1433: Failed to acquire dquot type 1 [ 92.905601][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 92.940564][ T6432] XFS (loop7): Unmounting Filesystem [ 92.956183][ T8438] EXT4-fs (loop3): Test dummy encryption mode enabled [ 92.968799][ T8438] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 92.970174][ T8438] System zones: 0-5 [ 92.971583][ T8438] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 92.987972][ T8446] netlink: 'syz.6.1440': attribute type 2 has an invalid length. [ 93.091663][ T4326] EXT4-fs (loop3): unmounting filesystem. [ 93.311349][ T8444] XFS (loop1): Mounting V5 Filesystem [ 93.347847][ T8472] ntfs: volume version 3.1. [ 93.372496][ T8459] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 93.384332][ T8444] XFS (loop1): Ending clean mount [ 93.385672][ T8459] XFS (loop3): Mounting V5 Filesystem [ 93.448577][ T8459] XFS (loop3): Ending clean mount [ 93.452103][ T8459] XFS (loop3): Quotacheck needed: Please wait. [ 93.481847][ T4321] XFS (loop1): Unmounting Filesystem [ 93.482858][ T8459] XFS (loop3): Quotacheck: Done. [ 93.588144][ T1965] kernel write not supported for file [eventfd] (pid: 1965 comm: kworker/1:2) [ 93.603305][ T4326] XFS (loop3): Unmounting Filesystem [ 93.661232][ T8502] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 93.718577][ T6432] EXT4-fs (loop7): unmounting filesystem. [ 93.793381][ T8514] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (536871168) [ 93.795270][ T8514] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 94.001274][ T1965] kernel write not supported for file [eventfd] (pid: 1965 comm: kworker/1:2) [ 94.012118][ T8530] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 94.034677][ T8530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.053048][ T8530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.054746][ T8530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.061893][ T4324] Bluetooth: hci3: Unknown advertising packet type: 0x3030 [ 94.061939][ T4324] Bluetooth: hci3: Unknown advertising packet type: 0x110 [ 94.063198][ T4324] Bluetooth: hci3: Malformed LE Event: 0x0d [ 94.168730][ T8524] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 94.170514][ T8524] XFS (loop1): Mounting V5 Filesystem [ 94.222758][ T8524] XFS (loop1): Ending clean mount [ 94.237736][ T8524] XFS (loop1): Quotacheck needed: Please wait. [ 94.259641][ T8524] XFS (loop1): Quotacheck: Done. [ 94.271348][ T8548] ntfs: volume version 3.1. [ 94.290809][ T8547] F2FS-fs (loop7): invalid crc value [ 94.332878][ T8547] F2FS-fs (loop7): Found nat_bits in checkpoint [ 94.350082][ T4321] XFS (loop1): Unmounting Filesystem [ 94.350957][ T8547] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 94.386435][ T8547] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 94.407385][ T6432] syz-executor: attempt to access beyond end of device [ 94.407385][ T6432] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.730802][ T8568] XFS (loop0): Mounting V5 Filesystem [ 94.756291][ T8568] XFS (loop0): Ending clean mount [ 94.758533][ T8568] XFS (loop0): Quotacheck needed: Please wait. [ 94.805775][ T8568] XFS (loop0): Quotacheck: Done. [ 94.831739][ T8614] ntfs: volume version 3.1. [ 94.911316][ T8624] __nla_validate_parse: 4 callbacks suppressed [ 94.911328][ T8624] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1493'. [ 94.938309][ T4325] XFS (loop0): Unmounting Filesystem [ 95.272544][ T8660] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1508'. [ 95.526019][ T8695] SQUASHFS error: Unable to read directory block [629:26] [ 95.605192][ T8708] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1524'. [ 95.716852][ T8720] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (536871168) [ 95.718511][ T8720] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 95.783821][ T27] audit: type=1326 audit(95.770:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91576de8 code=0x7ffc0000 [ 95.787366][ T27] audit: type=1326 audit(95.770:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91576de8 code=0x7ffc0000 [ 95.792713][ T27] audit: type=1326 audit(95.780:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=117 compat=0 ip=0xffff91576de8 code=0x7ffc0000 [ 95.806852][ T27] audit: type=1326 audit(95.780:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91576de8 code=0x7ffc0000 [ 95.822749][ T27] audit: type=1326 audit(95.780:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91576de8 code=0x7ffc0000 [ 95.859779][ T8733] set_capacity_and_notify: 14 callbacks suppressed [ 95.859789][ T8733] loop3: detected capacity change from 0 to 1024 [ 95.901784][ T8697] loop6: detected capacity change from 0 to 40427 [ 95.903284][ T8733] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 95.930986][ T8697] F2FS-fs (loop6): invalid crc value [ 95.977385][ T4326] EXT4-fs (loop3): unmounting filesystem. [ 95.980889][ T8697] F2FS-fs (loop6): Found nat_bits in checkpoint [ 96.008115][ T8697] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 96.030089][ T8757] Injecting memory failure for pfn 0x1390d5 at process virtual address 0x20001000 [ 96.033717][ T8697] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 96.057889][ T8757] Memory failure: 0x1390d5: recovery action for clean LRU page: Recovered [ 96.063594][ T8757] Injecting memory failure for pfn 0x137bbd at process virtual address 0x20002000 [ 96.069836][ T8757] Memory failure: 0x137bbd: recovery action for clean LRU page: Recovered [ 96.076244][ T8757] Injecting memory failure for pfn 0x13fb43 at process virtual address 0x20003000 [ 96.086997][ T8757] Memory failure: 0x13fb43: recovery action for clean LRU page: Recovered [ 96.131428][ T8767] loop3: detected capacity change from 0 to 2048 [ 96.134553][ T6417] syz-executor: attempt to access beyond end of device [ 96.134553][ T6417] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.215322][ T8767] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 96.220937][ T8767] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.251295][ T8767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.252812][ T8767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.597545][ T8816] loop6: detected capacity change from 0 to 8 [ 96.613712][ T8816] SQUASHFS error: Unable to read directory block [629:26] [ 96.638001][ T27] audit: type=1326 audit(96.630:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.7.1560" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc176de8 code=0x7ffc0000 [ 96.641634][ T27] audit: type=1326 audit(96.630:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.7.1560" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc176de8 code=0x7ffc0000 [ 96.654806][ T27] audit: type=1326 audit(96.640:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.7.1560" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=117 compat=0 ip=0xffffbc176de8 code=0x7ffc0000 [ 96.746479][ T8827] loop0: detected capacity change from 0 to 8 [ 96.777789][ T8827] SQUASHFS error: Unable to read directory block [629:26] [ 96.791565][ T8832] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1563'. [ 96.817717][ T8805] loop1: detected capacity change from 0 to 40427 [ 96.838617][ T8805] F2FS-fs (loop1): invalid crc value [ 96.869792][ T8805] F2FS-fs (loop1): Found nat_bits in checkpoint [ 96.882526][ T8805] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 96.886340][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1577'. [ 96.889198][ T8805] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 96.946012][ T4321] syz-executor: attempt to access beyond end of device [ 96.946012][ T4321] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.047088][ T8863] Injecting memory failure for pfn 0x1450e7 at process virtual address 0x20001000 [ 97.048974][ T8863] Memory failure: 0x1450e7: recovery action for clean LRU page: Recovered [ 97.050365][ T8863] Injecting memory failure for pfn 0x1377c9 at process virtual address 0x20002000 [ 97.058898][ T8863] Memory failure: 0x1377c9: recovery action for clean LRU page: Recovered [ 97.060385][ T8863] Injecting memory failure for pfn 0x1442a6 at process virtual address 0x20003000 [ 97.102592][ T8863] Memory failure: 0x1442a6: recovery action for clean LRU page: Recovered [ 97.193633][ T8879] IPVS: length: 24 != 51539644440 [ 97.246166][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'. [ 97.258835][ T8891] IPVS: length: 24 != 51539644440 [ 97.386052][ T8909] Injecting memory failure for pfn 0x1452ac at process virtual address 0x20001000 [ 97.391437][ T8909] Memory failure: 0x1452ac: recovery action for clean LRU page: Recovered [ 97.392844][ T8909] Injecting memory failure for pfn 0x13f465 at process virtual address 0x20002000 [ 97.408636][ T8909] Memory failure: 0x13f465: recovery action for clean LRU page: Recovered [ 97.410107][ T8909] Injecting memory failure for pfn 0x1384d8 at process virtual address 0x20003000 [ 97.421226][ T8909] Memory failure: 0x1384d8: recovery action for clean LRU page: Recovered [ 97.538265][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1599'. [ 97.597546][ T8936] IPVS: length: 24 != 51539644440 [ 97.780786][ T8926] loop1: detected capacity change from 0 to 32768 [ 97.808594][ T8955] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1606'. [ 97.841232][ T8931] loop0: detected capacity change from 0 to 40427 [ 97.843001][ T8931] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 97.844692][ T8931] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 97.846246][ T8926] XFS (loop1): Mounting V5 Filesystem [ 97.847935][ T8931] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 97.849184][ T8931] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 97.857559][ T8931] F2FS-fs (loop0): invalid crc value [ 97.868601][ T8931] F2FS-fs (loop0): Found nat_bits in checkpoint [ 97.894840][ T8926] XFS (loop1): Ending clean mount [ 97.897424][ T8931] F2FS-fs (loop0): Start checkpoint disabled! [ 97.900422][ T8926] XFS (loop1): Quotacheck needed: Please wait. [ 97.937532][ T8926] XFS (loop1): Quotacheck: Done. [ 97.947805][ T8931] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 97.948871][ T8931] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 97.996338][ T4321] XFS (loop1): Unmounting Filesystem [ 98.051749][ T421] kworker/u4:3: attempt to access beyond end of device [ 98.051749][ T421] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 98.180658][ T8990] loop0: detected capacity change from 0 to 128 [ 98.187875][ T8990] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.208146][ T8990] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.352695][ T9005] netlink: 'syz.7.1619': attribute type 11 has an invalid length. [ 98.435545][ T9010] loop1: detected capacity change from 0 to 512 [ 98.444819][ T9010] EXT2-fs (loop1): nobh option not supported [ 98.446235][ T9010] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 98.467043][ T9008] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 98.496163][ T9016] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.672484][ T8980] XFS (loop6): Mounting V5 Filesystem [ 98.709897][ T8980] XFS (loop6): Ending clean mount [ 98.711544][ T8980] XFS (loop6): Quotacheck needed: Please wait. [ 98.756876][ T8980] XFS (loop6): Quotacheck: Done. [ 98.806386][ T9049] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 98.807750][ T9049] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 98.816823][ T9053] EXT2-fs (loop7): nobh option not supported [ 98.826884][ T9053] EXT2-fs (loop7): warning: mounting ext3 filesystem as ext2 [ 98.829861][ T9049] EXT4-fs (loop3): 1 truncate cleaned up [ 98.830713][ T9049] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 98.832530][ T8980] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x8004 [ 98.848859][ T8980] XFS (loop6): Unmount and run xfs_repair [ 98.853041][ T8980] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 98.854140][ T8980] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 98.862399][ T8980] 00000010: 00 00 00 00 00 00 80 04 00 00 00 00 00 00 00 00 ................ [ 98.863800][ T8980] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 98.884672][ T8980] 00000030: 00 00 00 01 21 05 00 0a 00 00 00 05 00 00 00 03 ....!........... [ 98.886101][ T8980] 00000040: 00 00 04 a4 00 00 3b 5c 00 00 00 00 00 00 00 00 ......;\........ [ 98.889006][ T8980] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.890411][ T8980] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.891661][ T8980] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.893057][ T8980] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x184/0x290" at daddr 0x8004 len 2 error 74 [ 98.923610][ T9061] netlink: 'syz.0.1646': attribute type 11 has an invalid length. [ 98.951172][ T4326] EXT4-fs (loop3): unmounting filesystem. [ 98.982534][ T6417] XFS (loop6): Unmounting Filesystem [ 99.056287][ T9075] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 99.093541][ T9084] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.135977][ T9091] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 99.137686][ T9091] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 99.227334][ T9099] EXT2-fs (loop3): nobh option not supported [ 99.232517][ T9099] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 99.466317][ T9123] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 99.467694][ T9123] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 99.501366][ T9123] EXT4-fs (loop1): 1 truncate cleaned up [ 99.502290][ T9123] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 99.591978][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 99.602383][ T9097] XFS (loop0): Mounting V5 Filesystem [ 99.672173][ T9097] XFS (loop0): Ending clean mount [ 99.678568][ T9097] XFS (loop0): Quotacheck needed: Please wait. [ 99.696632][ T9097] XFS (loop0): Quotacheck: Done. [ 99.722865][ T14] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x8004 [ 99.725260][ T14] XFS (loop0): Unmount and run xfs_repair [ 99.726006][ T14] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 99.726971][ T14] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 99.728236][ T14] 00000010: 00 00 00 00 00 00 80 04 00 00 00 00 00 00 00 00 ................ [ 99.729616][ T14] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 99.730920][ T14] 00000030: 00 00 00 01 21 05 00 0a 00 00 00 05 00 00 00 03 ....!........... [ 99.732279][ T14] 00000040: 00 00 04 a4 00 00 3b 5c 00 00 00 00 00 00 00 00 ......;\........ [ 99.735440][ T14] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 99.736619][ T14] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 99.737834][ T14] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 99.739262][ T9097] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x184/0x290" at daddr 0x8004 len 2 error 74 [ 99.770459][ T4325] XFS (loop0): Unmounting Filesystem [ 99.791127][ T9155] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 99.795088][ T9129] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 99.808764][ T9129] JBD2: Ignoring recovery information on journal [ 99.813235][ T9156] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.901260][ T9129] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 99.988675][ T6432] ocfs2: Unmounting device (7,7) on (node local) [ 100.133755][ T9193] netlink: 236 bytes leftover after parsing attributes in process `syz.7.1674'. [ 100.159955][ T9193] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1674'. [ 100.240831][ T9160] XFS (loop1): Mounting V5 Filesystem [ 100.275121][ T9160] XFS (loop1): Ending clean mount [ 100.276733][ T9160] XFS (loop1): Quotacheck needed: Please wait. [ 100.296263][ T9160] XFS (loop1): Quotacheck: Done. [ 100.348266][ T4321] XFS (loop1): Unmounting Filesystem [ 100.582272][ T9218] EXT4-fs: inline encryption not supported [ 100.583283][ T9218] EXT4-fs: Ignoring removed bh option [ 100.592906][ T9218] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.602512][ T9209] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 100.603889][ T9209] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 100.608314][ T9209] F2FS-fs (loop3): invalid crc value [ 100.620544][ T9209] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.632243][ T9218] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 100.640264][ T9209] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 100.657676][ T9218] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1683'. [ 100.669331][ T9209] syz.3.1678: attempt to access beyond end of device [ 100.669331][ T9209] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.725775][ T6432] EXT4-fs (loop7): unmounting filesystem. [ 100.740099][ T4326] syz-executor: attempt to access beyond end of device [ 100.740099][ T4326] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 100.804143][ T9194] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.814586][ T9233] overlayfs: failed to set xattr on upper [ 100.821894][ T9233] overlayfs: ...falling back to index=off,metacopy=off. [ 100.823201][ T9233] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 100.829533][ T9194] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.862385][ T9194] F2FS-fs (loop0): lookup inode (7) has corrupted xattr [ 100.893576][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1688'. [ 100.933777][ T9239] Injecting memory failure for pfn 0x148c76 at process virtual address 0x203ff000 [ 100.936380][ T9239] Memory failure: 0x148c76: recovery action for clean LRU page: Recovered [ 101.053680][ T9243] set_capacity_and_notify: 14 callbacks suppressed [ 101.053694][ T9243] loop7: detected capacity change from 0 to 8192 [ 101.080614][ T9243] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 101.082524][ T9243] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 101.083967][ T9243] REISERFS (device loop7): using ordered data mode [ 101.085793][ T9243] reiserfs: using flush barriers [ 101.088394][ T9243] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 101.090865][ T9243] REISERFS (device loop7): checking transaction log (loop7) [ 101.099130][ T9243] REISERFS (device loop7): Using r5 hash to sort names [ 101.101913][ T9243] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 101.148452][ T9243] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 101.200911][ T9243] REISERFS warning (device loop7): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 101.203626][ T9258] loop3: detected capacity change from 0 to 1024 [ 101.204344][ T9243] REISERFS warning (device loop7): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 101.244191][ T9243] REISERFS warning (device loop7): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 101.438709][ T9276] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1701'. [ 101.497474][ T9282] loop7: detected capacity change from 0 to 256 [ 101.498947][ T9282] exfat: Deprecated parameter 'namecase' [ 101.512990][ T9286] loop3: detected capacity change from 0 to 512 [ 101.521895][ T9282] exFAT-fs (loop7): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 101.559562][ T9286] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1710: bg 0: block 5: invalid block bitmap [ 101.583534][ T9286] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 101.598103][ T9286] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1710: invalid indirect mapped block 3 (level 2) [ 101.608945][ T9286] EXT4-fs (loop3): 1 orphan inode deleted [ 101.617956][ T9286] EXT4-fs (loop3): 1 truncate cleaned up [ 101.618916][ T9286] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 101.731516][ T4326] EXT4-fs (loop3): unmounting filesystem. [ 101.808905][ T9306] sp0: Synchronizing with TNC [ 102.096689][ T9347] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 102.101574][ T9347] CIFS: Unable to determine destination address [ 102.137376][ T9351] loop6: detected capacity change from 0 to 64 [ 102.214548][ T4367] kernel write not supported for file /dsp1 (pid: 4367 comm: kworker/1:5) [ 102.281588][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1751'. [ 102.283041][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1751'. [ 102.295113][ T9368] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1751'. [ 102.301497][ T9371] loop3: detected capacity change from 0 to 1024 [ 102.346519][ T9371] hfsplus: bad catalog entry type [ 102.387627][ T421] hfsplus: b-tree write err: -5, ino 4 [ 102.412924][ T9349] loop0: detected capacity change from 0 to 32768 [ 102.498135][ T9349] XFS (loop0): Mounting V5 Filesystem [ 102.542189][ T9349] XFS (loop0): Ending clean mount [ 102.605673][ T4325] XFS (loop0): Unmounting Filesystem [ 102.629562][ T9407] netlink: 'syz.7.1768': attribute type 27 has an invalid length. [ 102.630844][ T9407] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1768'. [ 102.660107][ T9409] loop6: detected capacity change from 0 to 164 [ 102.679071][ T9413] loop1: detected capacity change from 0 to 1024 [ 102.728844][ T9413] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 102.882605][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 103.171278][ T9462] loop0: detected capacity change from 0 to 256 [ 103.203464][ T9462] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 103.213424][ T9462] FAT-fs (loop0): Filesystem has been set read-only [ 103.215112][ T9462] FAT-fs (loop0): error, clusters badly computed (1 != 129) [ 103.216309][ T9462] FAT-fs (loop0): error, clusters badly computed (2 != 130) [ 103.242078][ T9463] __ntfs_error: 2 callbacks suppressed [ 103.242093][ T9463] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 103.245125][ T9463] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 103.251514][ T9463] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 103.253320][ T9463] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 103.267817][ T9463] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 103.272256][ T9463] ntfs: volume version 3.1. [ 103.275477][ T9463] ntfs: (device loop7): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 103.277418][ T9463] ntfs: (device loop7): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 103.287686][ T9463] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 103.289399][ T9463] ntfs: (device loop7): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 103.291130][ T9463] ntfs: (device loop7): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 103.626479][ T9513] EXT4-fs: Ignoring removed nobh option [ 103.627426][ T9513] EXT4-fs: Ignoring removed bh option [ 103.665336][ T9513] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 103.717750][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 104.029613][ T9557] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 104.030818][ T9557] FAT-fs (loop6): Filesystem has been set read-only [ 104.032318][ T9557] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 104.180548][ T9544] overlayfs: upper fs needs to support d_type. [ 104.181999][ T9544] overlayfs: upper fs does not support tmpfile. [ 104.200390][ T9544] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 104.212877][ T9544] ERROR: (device loop7): dbAlloc: the hint is outside the map [ 104.212877][ T9544] [ 104.216062][ T9544] overlayfs: failed to verify origin (/, ino=2, err=-5) [ 104.218454][ T9544] overlayfs: failed to verify upper root origin [ 104.279144][ T9] read_mapping_page failed! [ 104.280167][ T9] ERROR: (device loop7): txAbort: [ 104.280167][ T9] [ 104.281372][ T9] jfs_write_inode: jfs_commit_inode failed! [ 104.333764][ T9581] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 104.355137][ T9581] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 104.393026][ T9581] ntfs3: loop1: ino=5, "/" directory corrupted [ 104.469202][ T9568] F2FS-fs (loop0): Found nat_bits in checkpoint [ 104.492195][ T9568] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 104.516228][ T9592] f2fs_ckpt-7:0: attempt to access beyond end of device [ 104.516228][ T9592] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.632255][ T9594] JBD2: Ignoring recovery information on journal [ 104.663889][ T9594] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 104.745801][ T6417] ocfs2: Unmounting device (7,6) on (node local) [ 104.884861][ T9627] netlink: 'syz.6.1871': attribute type 27 has an invalid length. [ 104.886118][ T9627] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1871'. [ 105.095385][ T9653] netlink: 'syz.7.1883': attribute type 2 has an invalid length. [ 105.101099][ T9653] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 105.214056][ T9640] JBD2: Ignoring recovery information on journal [ 105.243928][ T9640] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 105.338274][ T4321] ocfs2: Unmounting device (7,1) on (node local) [ 105.452344][ T4367] kernel write not supported for file /dsp1 (pid: 4367 comm: kworker/1:5) [ 105.648293][ T9669] XFS (loop3): Mounting V5 Filesystem [ 105.666086][ T9637] F2FS-fs (loop6): invalid crc value [ 105.680560][ T9669] XFS (loop3): Ending clean mount [ 105.701829][ T9637] F2FS-fs (loop6): Found nat_bits in checkpoint [ 105.710091][ T9637] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 105.734532][ T9675] overlayfs: upper fs needs to support d_type. [ 105.735592][ T9675] overlayfs: upper fs does not support tmpfile. [ 105.751438][ T9675] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 105.757300][ T9675] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 105.757300][ T9675] [ 105.758765][ T9675] overlayfs: failed to verify origin (/, ino=2, err=-5) [ 105.759895][ T9675] overlayfs: failed to verify upper root origin [ 105.828688][ T4326] XFS (loop3): Unmounting Filesystem [ 105.833457][ T5222] read_mapping_page failed! [ 105.834185][ T5222] ERROR: (device loop1): txAbort: [ 105.834185][ T5222] [ 105.852125][ T5222] jfs_write_inode: jfs_commit_inode failed! [ 106.189140][ T9720] set_capacity_and_notify: 14 callbacks suppressed [ 106.189155][ T9720] loop6: detected capacity change from 0 to 4096 [ 106.199835][ T9701] loop7: detected capacity change from 0 to 32768 [ 106.204691][ T9720] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 106.220048][ T9701] JBD2: Ignoring recovery information on journal [ 106.225647][ T9720] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 106.243980][ T9732] __nla_validate_parse: 1 callbacks suppressed [ 106.243990][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1914'. [ 106.275070][ T9701] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 106.289828][ T9720] ntfs3: loop6: ino=5, "/" directory corrupted [ 106.334024][ T6432] ocfs2: Unmounting device (7,7) on (node local) [ 106.423100][ T9746] loop1: detected capacity change from 0 to 512 [ 106.448486][ T9753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1924'. [ 106.456184][ T9746] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1921: bg 0: block 5: invalid block bitmap [ 106.458516][ T9746] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 106.459978][ T9746] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1921: invalid indirect mapped block 3 (level 2) [ 106.471289][ T9746] EXT4-fs (loop1): 1 orphan inode deleted [ 106.472285][ T9746] EXT4-fs (loop1): 1 truncate cleaned up [ 106.473193][ T9746] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 106.563521][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 106.702933][ T9782] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 106.952585][ T9776] loop1: detected capacity change from 0 to 32768 [ 107.000067][ T9777] loop0: detected capacity change from 0 to 40427 [ 107.005619][ T9776] XFS (loop1): Mounting V5 Filesystem [ 107.009737][ T9777] F2FS-fs (loop0): invalid crc value [ 107.028799][ T9798] loop6: detected capacity change from 0 to 8192 [ 107.045408][ T9776] XFS (loop1): Ending clean mount [ 107.053197][ T9777] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.060584][ T9798] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 107.062655][ T9798] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 107.064214][ T9798] REISERFS (device loop6): using ordered data mode [ 107.082338][ T9798] reiserfs: using flush barriers [ 107.087101][ T9777] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.103127][ T9798] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 107.117574][ T9798] REISERFS (device loop6): checking transaction log (loop6) [ 107.134008][ T9798] REISERFS (device loop6): Using r5 hash to sort names [ 107.137744][ T4321] XFS (loop1): Unmounting Filesystem [ 107.155474][ T9798] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 107.157652][ T9798] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 107.174097][ T4325] syz-executor: attempt to access beyond end of device [ 107.174097][ T4325] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.203018][ T9798] REISERFS warning (device loop6): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 107.205428][ T9798] REISERFS warning (device loop6): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 107.215864][ T9798] REISERFS warning (device loop6): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 107.382525][ T9824] loop0: detected capacity change from 0 to 4096 [ 107.390375][ T9824] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 107.411444][ T9824] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 107.432829][ T9824] ntfs3: loop0: ino=5, "/" directory corrupted [ 107.518508][ T9842] loop0: detected capacity change from 0 to 1024 [ 107.597279][ T9848] loop1: detected capacity change from 0 to 2048 [ 107.614591][ T9848] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.704351][ T9860] overlayfs: failed to set xattr on upper [ 107.711834][ T9860] overlayfs: ...falling back to index=off,metacopy=off. [ 107.712971][ T9860] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 107.737315][ T9856] loop0: detected capacity change from 0 to 4096 [ 107.758581][ T9856] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 107.772256][ T9856] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 107.781132][ T9856] ntfs3: loop0: mft corrupted [ 107.781963][ T9856] ntfs3: loop0: Failed to load $Extend. [ 107.903477][ T9881] Injecting memory failure for pfn 0x1449a4 at process virtual address 0x203ff000 [ 107.906932][ T9881] Memory failure: 0x1449a4: recovery action for clean LRU page: Recovered [ 107.961466][ T9887] EXT4-fs: Ignoring removed bh option [ 108.002478][ T9887] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 2: comm syz.7.1993: lblock 2 mapped to illegal pblock 2 (length 1) [ 108.022787][ T9887] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 48: comm syz.7.1993: lblock 0 mapped to illegal pblock 48 (length 1) [ 108.043032][ T9887] EXT4-fs error (device loop7): ext4_acquire_dquot:6835: comm syz.7.1993: Failed to acquire dquot type 0 [ 108.053179][ T9887] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 108.070012][ T9887] EXT4-fs error (device loop7): ext4_evict_inode:279: inode #11: comm syz.7.1993: mark_inode_dirty error [ 108.073106][ T9887] EXT4-fs warning (device loop7): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 108.085240][ T9887] EXT4-fs (loop7): 1 orphan inode deleted [ 108.086161][ T9887] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 108.098194][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1989'. [ 108.104653][ T5222] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 108.108611][ T5222] EXT4-fs error (device loop7): ext4_release_dquot:6871: comm kworker/u4:6: Failed to release dquot type 0 [ 108.148661][ T9887] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 48: comm syz.7.1993: lblock 0 mapped to illegal pblock 48 (length 1) [ 108.185180][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1990'. [ 108.227469][ T6432] EXT4-fs (loop7): unmounting filesystem. [ 108.359826][ T9917] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 108.639068][ T9911] F2FS-fs (loop1): invalid crc value [ 108.659936][ T9911] F2FS-fs (loop1): Found nat_bits in checkpoint [ 108.693759][ T9911] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 108.747736][ T4321] syz-executor: attempt to access beyond end of device [ 108.747736][ T4321] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.846767][ T9935] XFS (loop6): Mounting V5 Filesystem [ 108.847570][ T9901] F2FS-fs (loop0): invalid crc value [ 108.879738][ T9901] F2FS-fs (loop0): Found nat_bits in checkpoint [ 108.893575][ T9935] XFS (loop6): Ending clean mount [ 108.895543][ T9935] XFS (loop6): Quotacheck needed: Please wait. [ 108.917875][ T9935] XFS (loop6): Quotacheck: Done. [ 108.948076][ T9901] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 109.030673][ T6417] XFS (loop6): Unmounting Filesystem [ 109.094103][ T9952] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 109.098152][ T9952] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 109.099703][ T9952] F2FS-fs (loop1): invalid crc value [ 109.106160][ T9952] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.128361][ T9952] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 109.152073][ T9952] syz.1.2007: attempt to access beyond end of device [ 109.152073][ T9952] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 109.215471][ T4321] syz-executor: attempt to access beyond end of device [ 109.215471][ T4321] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 109.265622][ T9983] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 109.286546][ T9985] erofs: (device loop3): mounted with root inode @ nid 36. [ 109.302645][ T9985] syz.3.2024: attempt to access beyond end of device [ 109.302645][ T9985] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 109.344905][ T9987] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 109.361434][ T9997] CUSE: info not properly terminated [ 109.401854][ T9987] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 109.403761][ T9987] ntfs3: loop6: mft corrupted [ 109.407248][ T9987] ntfs3: loop6: Failed to load $Extend. [ 109.424068][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2030'. [ 109.579599][T10020] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 109.711049][ T9996] XFS (loop0): Mounting V5 Filesystem [ 109.742496][ T9996] XFS (loop0): Ending clean mount [ 109.844324][ T4325] XFS (loop0): Unmounting Filesystem [ 109.862621][T10052] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2050: iget: bad i_size value: 38620345925642 [ 109.889514][T10052] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2050: couldn't read orphan inode 15 (err -117) [ 109.903544][T10052] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 109.942807][T10052] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2050: bg 0: block 5: invalid block bitmap [ 109.964919][T10052] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 57 with error 28 [ 109.967082][T10052] EXT4-fs (loop3): This should not happen!! Data will be lost [ 109.967082][T10052] [ 109.994936][T10052] EXT4-fs (loop3): Total free blocks count 0 [ 109.995891][T10052] EXT4-fs (loop3): Free/Dirty block details [ 109.996993][T10052] EXT4-fs (loop3): free_blocks=0 [ 110.008364][T10052] EXT4-fs (loop3): dirty_blocks=57 [ 110.009177][T10052] EXT4-fs (loop3): Block reservation details [ 110.010226][T10052] EXT4-fs (loop3): i_reserved_data_blocks=57 [ 110.048093][ T4326] EXT4-fs (loop3): unmounting filesystem. [ 110.604335][T10125] CUSE: info not properly terminated [ 110.613062][T10120] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2082: inode has both inline data and extents flags [ 110.615952][T10120] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2082: couldn't read orphan inode 15 (err -117) [ 110.618167][T10120] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 110.657821][ T6417] EXT4-fs (loop6): unmounting filesystem. [ 110.850205][T10143] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.886071][T10123] XFS (loop1): Mounting V5 Filesystem [ 110.887319][T10143] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.917998][T10143] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 110.940461][T10123] XFS (loop1): Ending clean mount [ 110.955723][ T6417] EXT4-fs (loop6): unmounting filesystem. [ 110.983051][ T4321] XFS (loop1): Unmounting Filesystem [ 111.063165][T10140] [ 111.063165][T10140] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.063165][T10140] [ 111.071714][T10140] ERROR: (device loop0): diWrite: ixpxd invalid [ 111.071714][T10140] [ 111.088643][T10140] ERROR: (device loop0): txAbort: [ 111.088643][T10140] [ 111.098109][T10140] ERROR: (device loop0): diWrite: ixpxd invalid [ 111.098109][T10140] [ 111.099547][T10140] ERROR: (device loop0): txAbort: [ 111.099547][T10140] [ 111.118104][ T4325] [ 111.118104][ T4325] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.118104][ T4325] [ 111.119909][ T4325] [ 111.119909][ T4325] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.119909][ T4325] [ 111.256811][T10179] set_capacity_and_notify: 17 callbacks suppressed [ 111.256822][T10179] loop6: detected capacity change from 0 to 512 [ 111.291143][T10179] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2105: iget: bad i_size value: 38620345925642 [ 111.293345][T10179] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2105: couldn't read orphan inode 15 (err -117) [ 111.296285][T10179] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 111.322270][T10179] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.2105: bg 0: block 5: invalid block bitmap [ 111.324976][T10179] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 57 with error 28 [ 111.326699][T10179] EXT4-fs (loop6): This should not happen!! Data will be lost [ 111.326699][T10179] [ 111.328190][T10179] EXT4-fs (loop6): Total free blocks count 0 [ 111.329134][T10179] EXT4-fs (loop6): Free/Dirty block details [ 111.330061][T10179] EXT4-fs (loop6): free_blocks=0 [ 111.330863][T10179] EXT4-fs (loop6): dirty_blocks=57 [ 111.331584][T10179] EXT4-fs (loop6): Block reservation details [ 111.332489][T10179] EXT4-fs (loop6): i_reserved_data_blocks=57 [ 111.360914][ T6417] EXT4-fs (loop6): unmounting filesystem. [ 111.414781][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2109'. [ 111.427121][T10166] loop7: detected capacity change from 0 to 32768 [ 111.504013][T10166] XFS (loop7): Mounting V5 Filesystem [ 111.522456][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2112'. [ 111.528560][T10176] loop3: detected capacity change from 0 to 32768 [ 111.567622][T10176] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 111.569804][T10166] XFS (loop7): Ending clean mount [ 111.644399][ T6432] XFS (loop7): Unmounting Filesystem [ 111.677802][ T4326] ocfs2: Unmounting device (7,3) on (node local) [ 111.681518][T10214] loop0: detected capacity change from 0 to 512 [ 111.710437][T10214] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 111.741169][T10214] EXT4-fs: Ignoring sb option on remount [ 111.742141][T10214] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 111.743314][T10214] EXT4-fs: Cannot change journaled quota options when quota turned on [ 111.758753][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 111.863082][T10230] loop6: detected capacity change from 0 to 4096 [ 111.887633][T10234] loop1: detected capacity change from 0 to 512 [ 111.896718][T10230] __ntfs_error: 10 callbacks suppressed [ 111.896729][T10230] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing. [ 111.907978][T10230] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 111.912216][T10230] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 111.915006][T10236] loop0: detected capacity change from 0 to 512 [ 111.928806][T10236] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.2129: iget: bad i_size value: 38620345925642 [ 111.932184][T10236] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2129: couldn't read orphan inode 15 (err -117) [ 111.941964][T10234] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.951983][T10230] ntfs: volume version 3.1. [ 111.962832][T10236] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 111.965424][T10222] loop3: detected capacity change from 0 to 32768 [ 111.969562][T10222] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.2120 (10222) [ 111.972578][T10222] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 111.974184][T10222] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 111.987170][T10222] BTRFS info (device loop3): force zlib compression, level 3 [ 111.988401][T10222] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 111.989770][T10222] BTRFS info (device loop3): use lzo compression, level 0 [ 111.990862][T10222] BTRFS info (device loop3): max_inline at 4096 [ 111.991775][T10222] BTRFS info (device loop3): using free space tree [ 111.998413][T10234] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 112.000434][T10234] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 112.002000][T10234] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.2128: Failed to acquire dquot type 0 [ 112.035868][T10236] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.2129: bg 0: block 5: invalid block bitmap [ 112.048123][T10236] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 57 with error 28 [ 112.050022][T10236] EXT4-fs (loop0): This should not happen!! Data will be lost [ 112.050022][T10236] [ 112.051397][T10236] EXT4-fs (loop0): Total free blocks count 0 [ 112.052315][T10236] EXT4-fs (loop0): Free/Dirty block details [ 112.053293][T10236] EXT4-fs (loop0): free_blocks=0 [ 112.053985][T10236] EXT4-fs (loop0): dirty_blocks=57 [ 112.078398][T10230] ntfs: (device loop6): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 112.080247][T10230] ntfs: (device loop6): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 112.090132][T10236] EXT4-fs (loop0): Block reservation details [ 112.091061][T10236] EXT4-fs (loop0): i_reserved_data_blocks=57 [ 112.122746][T10222] BTRFS info (device loop3): enabling ssd optimizations [ 112.134016][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 112.168720][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 112.188881][ T6417] ntfs: (device loop6): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 112.201422][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2132'. [ 112.258811][ T4326] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 112.276049][T10271] delete_channel: no stack [ 112.277555][T10269] delete_channel: no stack [ 112.405263][T10281] netlink: 'syz.0.2140': attribute type 32 has an invalid length. [ 112.406554][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'. [ 112.408167][T10281] (unnamed net_device) (uninitialized): option coupled_control: invalid value (110) [ 112.459236][T10288] use of bytesused == 0 is deprecated and will be removed in the future, [ 112.460776][T10288] use the actual size instead. [ 112.519468][ T7328] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop3 scanned by udevd (7328) [ 112.828655][T10296] loop0: detected capacity change from 0 to 32768 [ 112.833841][T10320] loop3: detected capacity change from 0 to 4096 [ 112.854090][T10320] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 112.887634][T10310] F2FS-fs (loop7): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 112.889167][T10310] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 112.890727][T10310] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x35f7 [ 112.906425][T10310] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x3ffff [ 112.908259][T10310] F2FS-fs (loop7): invalid crc value [ 112.922062][T10310] F2FS-fs (loop7): Found nat_bits in checkpoint [ 112.950614][T10310] F2FS-fs (loop7): Start checkpoint disabled! [ 112.957970][T10310] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 112.959176][T10310] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 113.052385][ T11] kworker/u4:1: attempt to access beyond end of device [ 113.052385][ T11] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.135370][T10346] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2170'. [ 113.306654][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2181'. [ 113.448703][T10360] JBD2: Ignoring recovery information on journal [ 113.588524][T10360] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 113.621568][T10379] XFS (loop0): Mounting V5 Filesystem [ 113.621713][ T4326] ocfs2: Unmounting device (7,3) on (node local) [ 113.676661][T10379] XFS (loop0): Ending clean mount [ 113.678365][T10379] XFS (loop0): Quotacheck needed: Please wait. [ 113.732384][T10379] XFS (loop0): Quotacheck: Done. [ 113.840915][ T4325] XFS (loop0): Unmounting Filesystem [ 113.850100][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2194'. [ 113.896735][T10383] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 113.901479][T10372] XFS (loop7): Mounting V5 Filesystem [ 113.960707][T10372] XFS (loop7): Ending clean mount [ 113.963812][T10372] XFS (loop7): Quotacheck needed: Please wait. [ 114.008252][T10372] XFS (loop7): Quotacheck: Done. [ 114.059270][T10421] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 114.077116][T10421] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 3: comm syz.6.2200: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=2048 fake=0 [ 114.078642][ T6432] XFS (loop7): Unmounting Filesystem [ 114.142176][ T6417] EXT4-fs (loop6): unmounting filesystem. [ 114.192604][T10429] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 114.193719][T10429] UDF-fs: Scanning with blocksize 512 failed [ 114.200149][T10429] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 114.201313][T10429] UDF-fs: Scanning with blocksize 1024 failed [ 114.210326][T10429] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 114.211455][T10429] UDF-fs: Scanning with blocksize 2048 failed [ 114.228301][T10429] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 114.230733][T10429] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.249874][T10422] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.2199 (10422) [ 114.258627][T10422] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 114.260213][T10422] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 114.261516][T10422] BTRFS info (device loop3): enabling disk space caching [ 114.262769][T10422] BTRFS info (device loop3): force clearing of disk cache [ 114.263920][T10422] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 114.270113][T10422] BTRFS info (device loop3): use zstd compression, level 3 [ 114.271253][T10422] BTRFS info (device loop3): disk space caching is enabled [ 114.449392][T10422] BTRFS info (device loop3): enabling ssd optimizations [ 114.450907][T10422] BTRFS info (device loop3): rebuilding free space tree [ 114.454394][T10422] BTRFS info (device loop3): disabling free space tree [ 114.455842][T10422] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.455865][T10422] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.480901][T10465] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.496602][T10465] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 114.516318][ T4326] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 114.860493][T10497] hfsplus: unable to parse mount options [ 114.931962][T10497] autofs4:pid:10497:autofs_fill_super: called with bogus options [ 114.969885][T10482] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.2212 (10482) [ 114.989069][T10482] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 114.990833][T10482] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 114.992372][T10482] BTRFS info (device loop0): force zlib compression, level 3 [ 114.993461][T10482] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 115.009277][T10482] BTRFS info (device loop0): use lzo compression, level 0 [ 115.010414][T10482] BTRFS info (device loop0): max_inline at 4096 [ 115.010731][T10502] siw: device registration error -23 [ 115.011329][T10482] BTRFS info (device loop0): using free space tree [ 115.090623][T10498] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 115.091923][T10498] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 115.113526][T10498] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 115.128529][ T4380] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 115.129785][ T4380] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 115.167359][ T4380] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms [ 115.168668][ T4380] gfs2: fsid=syz:syz.0: jid=0: Done [ 115.169567][T10498] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 115.177899][T10500] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x3ffff [ 115.179550][T10500] F2FS-fs (loop7): invalid crc value [ 115.209883][T10500] F2FS-fs (loop7): Found nat_bits in checkpoint [ 115.237646][T10500] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 115.267936][T10482] BTRFS info (device loop0): enabling ssd optimizations [ 115.302679][T10536] sp0: Synchronizing with TNC [ 115.354051][T10498] gfs2: fsid=syz:syz.0: found 1 quota changes [ 115.388989][ T4326] gfs2: fsid=syz:syz.0: inum=2340 error=-28, nblocks=1, full=1 fail_pt=0 [ 115.390573][ T4326] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 115.392004][ T4326] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 115.393334][ T4326] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 115.399792][ T4325] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 115.441071][ T4326] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 115.465009][ T4326] CPU: 0 PID: 4326 Comm: syz-executor Not tainted syzkaller #0 [ 115.466253][ T4326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 115.467765][ T4326] Call trace: [ 115.468269][ T4326] dump_backtrace+0x1c0/0x1ec [ 115.468936][ T4326] show_stack+0x2c/0x3c [ 115.469498][ T4326] __dump_stack+0x30/0x40 [ 115.470133][ T4326] dump_stack_lvl+0xf4/0x15c [ 115.470779][ T4326] dump_stack+0x1c/0x5c [ 115.471375][ T4326] gfs2_assert_warn_i+0x16c/0x26c [ 115.472153][ T4326] gfs2_quota_cleanup+0x464/0x668 [ 115.472897][ T4326] gfs2_make_fs_ro+0x368/0x438 [ 115.473659][ T4326] gfs2_put_super+0x1e0/0x760 [ 115.474377][ T4326] generic_shutdown_super+0x130/0x324 [ 115.475152][ T4326] kill_block_super+0x70/0xdc [ 115.475844][ T4326] gfs2_kill_sb+0xc0/0xd4 [ 115.476523][ T4326] deactivate_locked_super+0xac/0x120 [ 115.477272][ T4326] deactivate_super+0xe4/0x104 [ 115.477962][ T4326] cleanup_mnt+0x390/0x418 [ 115.478625][ T4326] __cleanup_mnt+0x20/0x30 [ 115.479341][ T4326] task_work_run+0x1ec/0x278 [ 115.480010][ T4326] do_notify_resume+0x1fa0/0x2aa4 [ 115.480743][ T4326] el0_svc+0x98/0x128 [ 115.481349][ T4326] el0t_64_sync_handler+0x84/0xf0 [ 115.482109][ T4326] el0t_64_sync+0x18c/0x190 [ 115.516298][ T9] hfsplus: b-tree write err: -5, ino 4 [ 115.740924][ T7095] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop0 scanned by udevd (7095) [ 115.762873][ T9] hfsplus: b-tree write err: -5, ino 4 [ 115.840882][T10586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2251'. [ 115.842301][T10586] nbd: socks must be embedded in a SOCK_ITEM attr [ 115.924359][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2255'. [ 116.080688][ T5222] hfsplus: b-tree write err: -5, ino 4 [ 116.120369][T10609] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 116.159571][T10614] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2263'. [ 116.207741][T10585] XFS (loop3): Mounting V5 Filesystem [ 116.301019][T10585] XFS (loop3): Ending clean mount [ 116.302624][T10585] XFS (loop3): Quotacheck needed: Please wait. [ 116.319941][T10585] XFS (loop3): Quotacheck: Done. [ 116.341268][T10636] set_capacity_and_notify: 17 callbacks suppressed [ 116.341279][T10636] loop0: detected capacity change from 0 to 256 [ 116.371489][T10636] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 116.378921][T10629] loop6: detected capacity change from 0 to 32768 [ 116.379840][ T4326] XFS (loop3): Unmounting Filesystem [ 116.381127][T10629] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2268 (10629) [ 116.387193][T10629] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.389161][T10629] BTRFS info (device loop6): using crc32c (crc32c-generic) checksum algorithm [ 116.390716][T10629] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 116.392438][T10629] BTRFS info (device loop6): trying to use backup root at mount time [ 116.393594][T10629] BTRFS info (device loop6): setting nodatasum [ 116.394639][T10629] BTRFS info (device loop6): enabling ssd optimizations [ 116.395661][T10629] BTRFS info (device loop6): using spread ssd allocation scheme [ 116.396818][T10629] BTRFS info (device loop6): turning on flush-on-commit [ 116.398050][T10629] BTRFS info (device loop6): force zlib compression, level 3 [ 116.401388][T10629] BTRFS info (device loop6): using free space tree [ 116.582927][T10634] loop1: detected capacity change from 0 to 32768 [ 116.630617][T10660] loop0: detected capacity change from 0 to 32768 [ 116.632790][T10660] (syz.0.2275,10660,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.642251][T10660] (syz.0.2275,10660,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.673270][T10666] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2277'. [ 116.698720][ T6417] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.764398][T10660] JBD2: Ignoring recovery information on journal [ 116.872573][T10660] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 116.962450][ T4325] ocfs2: Unmounting device (7,0) on (node local) [ 116.986980][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2285'. [ 117.180858][T10684] loop7: detected capacity change from 0 to 32768 [ 117.198191][T10684] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.2282 (10684) [ 117.259029][T10684] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.262965][T10684] BTRFS info (device loop7): using sha256 (sha256-ce) checksum algorithm [ 117.270168][T10684] BTRFS info (device loop7): using free space tree [ 117.344532][T10726] loop6: detected capacity change from 0 to 4096 [ 117.354116][T10726] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 117.423083][T10726] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #15: comm syz.6.2302: corrupted inode contents [ 117.446877][T10726] EXT4-fs error (device loop6): ext4_dirty_inode:6137: inode #15: comm syz.6.2302: mark_inode_dirty error [ 117.450474][T10726] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #15: comm syz.6.2302: corrupted inode contents [ 117.454868][T10726] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #15: comm syz.6.2302: mark_inode_dirty error [ 117.481509][T10726] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #15: comm syz.6.2302: corrupted inode contents [ 117.493690][T10726] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #15: comm syz.6.2302: mark_inode_dirty error [ 117.505526][T10726] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #15: comm syz.6.2302: corrupted inode contents [ 117.524127][T10684] BTRFS info (device loop7): enabling ssd optimizations [ 117.539931][T10726] EXT4-fs error (device loop6): ext4_truncate:4318: inode #15: comm syz.6.2302: mark_inode_dirty error [ 117.546077][T10726] EXT4-fs error (device loop6) in ext4_setattr:5676: Corrupt filesystem [ 117.584756][T10753] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #15: comm syz.6.2302: corrupted inode contents [ 117.661688][ T6417] EXT4-fs (loop6): unmounting filesystem. [ 117.702236][ T6432] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.986644][T10766] loop0: detected capacity change from 0 to 40427 [ 118.011945][T10766] F2FS-fs (loop0): invalid crc value [ 118.016010][T10768] loop1: detected capacity change from 0 to 32768 [ 118.017675][T10774] loop3: detected capacity change from 0 to 32768 [ 118.020071][T10768] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2314 (10768) [ 118.021320][T10766] F2FS-fs (loop0): Found nat_bits in checkpoint [ 118.041733][T10766] F2FS-fs (loop0): Start checkpoint disabled! [ 118.047970][T10768] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.049498][T10768] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 118.050769][T10768] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 118.052306][T10768] BTRFS info (device loop1): trying to use backup root at mount time [ 118.054993][T10768] BTRFS info (device loop1): setting nodatasum [ 118.057051][T10768] BTRFS info (device loop1): enabling ssd optimizations [ 118.059345][T10768] BTRFS info (device loop1): using spread ssd allocation scheme [ 118.059387][T10766] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 118.061763][T10768] BTRFS info (device loop1): turning on flush-on-commit [ 118.062947][T10768] BTRFS info (device loop1): force zlib compression, level 3 [ 118.063122][T10774] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 118.065410][T10768] BTRFS info (device loop1): using free space tree [ 118.072666][T10774] JBD2: Ignoring recovery information on journal [ 118.107504][T10774] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 118.175954][ T4326] ocfs2: Unmounting device (7,3) on (node local) [ 118.284486][T10796] loop6: detected capacity change from 0 to 32768 [ 118.290025][T10796] JBD2: Ignoring recovery information on journal [ 118.327274][ T4321] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.332796][T10796] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 118.514359][ T6417] ocfs2: Unmounting device (7,6) on (node local) [ 118.579480][ T7331] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (7331) [ 118.676323][T10802] F2FS-fs (loop0): invalid crc value [ 118.706368][T10825] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2328 (10825) [ 118.709182][T10825] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.710812][T10825] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 118.711985][T10825] BTRFS info (device loop3): using free space tree [ 118.718461][T10802] F2FS-fs (loop0): Found nat_bits in checkpoint [ 118.727252][T10802] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 118.918212][T10867] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 118.922371][T10867] fs-verity (loop1, inode 16): Unknown hash algorithm number: 0 [ 118.938211][T10825] BTRFS info (device loop3): enabling ssd optimizations [ 118.956280][T10872] Driver unsupported XDP return value 0 on prog (id 75) dev N/A, expect packet loss! [ 118.960791][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 119.080876][ T4326] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.172999][T10891] FAT-fs (loop0): Directory bread(block 32) failed [ 119.174068][T10891] FAT-fs (loop0): Directory bread(block 33) failed [ 119.180680][T10891] FAT-fs (loop0): Directory bread(block 34) failed [ 119.184085][T10891] FAT-fs (loop0): Directory bread(block 35) failed [ 119.189732][T10891] FAT-fs (loop0): Directory bread(block 36) failed [ 119.189929][T10894] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2351'. [ 119.194235][T10891] FAT-fs (loop0): Directory bread(block 37) failed [ 119.197593][T10891] FAT-fs (loop0): Directory bread(block 38) failed [ 119.199305][T10894] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2351'. [ 119.203144][T10891] FAT-fs (loop0): Directory bread(block 39) failed [ 119.207734][T10891] FAT-fs (loop0): Directory bread(block 40) failed [ 119.208840][T10891] FAT-fs (loop0): Directory bread(block 41) failed [ 119.365353][T10539] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (10539) [ 119.715884][T10925] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2363'. [ 119.729432][T10926] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 119.976186][T10888] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 119.979709][T10888] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.990542][T10888] F2FS-fs (loop1): invalid crc value [ 120.002842][T10888] F2FS-fs (loop1): Found nat_bits in checkpoint [ 120.021282][T10888] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 120.022595][T10888] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 120.057360][T10949] can0: slcan on ttyS3. [ 120.115190][T10947] can0 (unregistered): slcan off ttyS3. [ 120.268698][T10971] CUSE: info not properly terminated [ 120.323812][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2385'. [ 120.348714][T10977] nbd: socks must be embedded in a SOCK_ITEM attr [ 120.428155][T10985] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2390'. [ 120.429766][T10985] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2390'. [ 120.444046][ T9] hfsplus: b-tree write err: -5, ino 4 [ 120.484263][T10959] XFS (loop7): Mounting V5 Filesystem [ 120.560944][T10959] XFS (loop7): Ending clean mount [ 120.564318][T10959] XFS (loop7): Quotacheck needed: Please wait. [ 120.590577][T10959] XFS (loop7): Quotacheck: Done. [ 120.673835][ T6432] XFS (loop7): Unmounting Filesystem [ 120.763445][T11003] XFS (loop6): Mounting V5 Filesystem [ 120.816359][T11003] XFS (loop6): Ending clean mount [ 120.817570][ T5901] XFS (loop6): Metadata CRC error detected at xfs_inobt_read_verify+0x50/0x108, xfs_finobt block 0x20 [ 120.819681][ T5901] XFS (loop6): Unmount and run xfs_repair [ 120.820519][ T5901] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 120.821765][ T5901] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 120.823113][ T5901] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 120.824384][ T5901] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 120.843233][ T5901] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 120.851634][ T5901] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 120.853101][ T5901] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 120.866411][ T5901] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 120.875913][ T5901] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 120.877426][T11003] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x184/0x290" at daddr 0x20 len 8 error 74 [ 120.879670][T11003] XFS (loop6): Failed to initialize disk quotas. [ 120.959402][T11003] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x8 [ 120.959467][T11003] XFS (loop6): Unmount and run xfs_repair [ 120.959474][T11003] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 120.959484][T11003] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 120.959492][T11003] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 120.959499][T11003] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 120.959506][T11003] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02 ....r.oz........ [ 120.959513][T11003] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50 ...............P [ 120.959519][T11003] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 120.959526][T11003] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 120.959532][T11003] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 ................ [ 120.959544][T11003] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x184/0x290" at daddr 0x8 len 8 error 74 [ 121.003267][ T6417] XFS (loop6): Unmounting Filesystem [ 121.101436][T11053] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 121.104940][T11053] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.145713][T11053] UDF-fs: unknown compression code (0) [ 121.176003][T11061] netlink: 'syz.1.2421': attribute type 1 has an invalid length. [ 121.218994][T11065] usb usb8: usbfs: process 11065 (syz.7.2422) did not claim interface 0 before use [ 121.244770][T11066] netlink: 'syz.0.2423': attribute type 2 has an invalid length. [ 121.405355][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2431'. [ 121.406963][T11085] netlink: 288 bytes leftover after parsing attributes in process `syz.7.2431'. [ 121.606889][T11111] set_capacity_and_notify: 11 callbacks suppressed [ 121.606900][T11111] loop1: detected capacity change from 0 to 1024 [ 121.719504][ T39] hfsplus: b-tree write err: -5, ino 4 [ 121.936999][T11156] loop0: detected capacity change from 0 to 1024 [ 121.938423][T11156] EXT4-fs: Ignoring removed nobh option [ 121.939297][T11156] EXT4-fs: inline encryption not supported [ 121.953196][T11156] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.995291][T11156] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 122.064366][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 122.120572][T11179] __nla_validate_parse: 1 callbacks suppressed [ 122.120586][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2473'. [ 122.351728][T11203] loop0: detected capacity change from 0 to 1024 [ 122.399963][T11203] cifs: Unknown parameter 'h}#úä [ 122.399963][T11203] Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 122.399963][T11203] SÃȘØÈžZ§6ŸÂ' [ 122.512200][T11190] loop7: detected capacity change from 0 to 32768 [ 122.531444][T11190] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 122.551298][T11190] [ 122.551759][T11190] ====================================================== [ 122.552914][T11190] WARNING: possible circular locking dependency detected [ 122.554045][T11190] syzkaller #0 Not tainted [ 122.554731][T11190] ------------------------------------------------------ [ 122.555726][T11190] syz.7.2482/11190 is trying to acquire lock: [ 122.556673][T11190] ffff0000f5f1a378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x264/0x61c [ 122.558126][T11190] [ 122.558126][T11190] but task is already holding lock: [ 122.559088][T11190] ffff0000f4ece4e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x374/0x6cc [ 122.560558][T11190] [ 122.560558][T11190] which lock already depends on the new lock. [ 122.560558][T11190] [ 122.562031][T11190] [ 122.562031][T11190] the existing dependency chain (in reverse order) is: [ 122.563290][T11190] [ 122.563290][T11190] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 122.564489][T11190] down_read+0x64/0x300 [ 122.565152][T11190] ocfs2_start_trans+0x374/0x6cc [ 122.565912][T11190] ocfs2_mknod+0xd1c/0x2110 [ 122.566637][T11190] vfs_mknod+0x3c4/0x44c [ 122.567366][T11190] do_mknodat+0x324/0x558 [ 122.568129][T11190] __arm64_sys_mknodat+0xb0/0xcc [ 122.568867][T11190] invoke_syscall+0x98/0x2b4 [ 122.569574][T11190] el0_svc_common+0x138/0x258 [ 122.570362][T11190] do_el0_svc+0x58/0x130 [ 122.571128][T11190] el0_svc+0x58/0x128 [ 122.571788][T11190] el0t_64_sync_handler+0x84/0xf0 [ 122.572591][T11190] el0t_64_sync+0x18c/0x190 [ 122.573298][T11190] [ 122.573298][T11190] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 122.574380][T11190] ocfs2_start_trans+0x20c/0x6cc [ 122.575215][T11190] ocfs2_truncate_file+0x60c/0x14f8 [ 122.576061][T11190] ocfs2_setattr+0x1288/0x1930 [ 122.576849][T11190] notify_change+0xb0c/0xdcc [ 122.577631][T11190] do_truncate+0x188/0x20c [ 122.578364][T11190] path_openat+0x2110/0x26bc [ 122.579121][T11190] do_filp_open+0x194/0x384 [ 122.579849][T11190] do_sys_openat2+0x134/0x3f4 [ 122.580654][T11190] __arm64_sys_openat+0x118/0x14c [ 122.581446][T11190] invoke_syscall+0x98/0x2b4 [ 122.582239][T11190] el0_svc_common+0x138/0x258 [ 122.583005][T11190] do_el0_svc+0x58/0x130 [ 122.583713][T11190] el0_svc+0x58/0x128 [ 122.584377][T11190] el0t_64_sync_handler+0x84/0xf0 [ 122.585199][T11190] el0t_64_sync+0x18c/0x190 [ 122.585900][T11190] [ 122.585900][T11190] -> #1 (&oi->ip_alloc_sem){+.+.}-{3:3}: [ 122.587007][T11190] down_write+0x5c/0x88 [ 122.587691][T11190] ocfs2_try_remove_refcount_tree+0xb4/0x2e4 [ 122.588657][T11190] ocfs2_truncate_file+0xd24/0x14f8 [ 122.589543][T11190] ocfs2_setattr+0x1288/0x1930 [ 122.590300][T11190] notify_change+0xb0c/0xdcc [ 122.591075][T11190] do_truncate+0x188/0x20c [ 122.591829][T11190] path_openat+0x2110/0x26bc [ 122.592622][T11190] do_filp_open+0x194/0x384 [ 122.593367][T11190] do_sys_openat2+0x134/0x3f4 [ 122.594109][T11190] __arm64_sys_openat+0x118/0x14c [ 122.594986][T11190] invoke_syscall+0x98/0x2b4 [ 122.595704][T11190] el0_svc_common+0x138/0x258 [ 122.596451][T11190] do_el0_svc+0x58/0x130 [ 122.597155][T11190] el0_svc+0x58/0x128 [ 122.597837][T11190] el0t_64_sync_handler+0x84/0xf0 [ 122.598683][T11190] el0t_64_sync+0x18c/0x190 [ 122.599394][T11190] [ 122.599394][T11190] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 122.600520][T11190] __lock_acquire+0x2880/0x6800 [ 122.601244][T11190] lock_acquire+0x20c/0x63c [ 122.601932][T11190] down_read+0x64/0x300 [ 122.602597][T11190] ocfs2_init_acl+0x264/0x61c [ 122.603435][T11190] ocfs2_mknod+0x129c/0x2110 [ 122.604239][T11190] ocfs2_create+0x19c/0x4f8 [ 122.604930][T11190] path_openat+0xe18/0x26bc [ 122.605639][T11190] do_filp_open+0x194/0x384 [ 122.606408][T11190] do_sys_openat2+0x134/0x3f4 [ 122.607115][T11190] __arm64_sys_openat+0x118/0x14c [ 122.607897][T11190] invoke_syscall+0x98/0x2b4 [ 122.608820][T11190] el0_svc_common+0x138/0x258 [ 122.609511][T11190] do_el0_svc+0x58/0x130 [ 122.610229][T11190] el0_svc+0x58/0x128 [ 122.610841][T11190] el0t_64_sync_handler+0x84/0xf0 [ 122.611674][T11190] el0t_64_sync+0x18c/0x190 [ 122.612491][T11190] [ 122.612491][T11190] other info that might help us debug this: [ 122.612491][T11190] [ 122.613961][T11190] Chain exists of: [ 122.613961][T11190] &oi->ip_xattr_sem --> sb_internal#2 --> &journal->j_trans_barrier [ 122.613961][T11190] [ 122.616054][T11190] Possible unsafe locking scenario: [ 122.616054][T11190] [ 122.617157][T11190] CPU0 CPU1 [ 122.617947][T11190] ---- ---- [ 122.618777][T11190] lock(&journal->j_trans_barrier); [ 122.619581][T11190] lock(sb_internal#2); [ 122.620559][T11190] lock(&journal->j_trans_barrier); [ 122.621744][T11190] lock(&oi->ip_xattr_sem); [ 122.622448][T11190] [ 122.622448][T11190] *** DEADLOCK *** [ 122.622448][T11190] [ 122.623670][T11190] 8 locks held by syz.7.2482/11190: [ 122.624395][T11190] #0: ffff0000d44b4460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 122.625736][T11190] #1: ffff0000f5f1a648 (&type->i_mutex_dir_key#14){+.+.}-{3:3}, at: path_openat+0x5f4/0x26bc [ 122.627220][T11190] #2: ffff0000f5db09c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x10c/0x3c80 [ 122.629240][T11190] #3: ffff0000f5f189c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x10c/0x3c80 [ 122.631323][T11190] #4: ffff0000f5db2648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0xe4/0x26c8 [ 122.633450][T11190] #5: ffff0000d44b4650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xd1c/0x2110 [ 122.634872][T11190] #6: ffff0000f4ece4e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x374/0x6cc [ 122.636499][T11190] #7: ffff0000df1f0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1020/0x1280 [ 122.637905][T11190] [ 122.637905][T11190] stack backtrace: [ 122.638780][T11190] CPU: 0 PID: 11190 Comm: syz.7.2482 Not tainted syzkaller #0 [ 122.639826][T11190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 122.641346][T11190] Call trace: [ 122.641876][T11190] dump_backtrace+0x1c0/0x1ec [ 122.642554][T11190] show_stack+0x2c/0x3c [ 122.643154][T11190] __dump_stack+0x30/0x40 [ 122.643829][T11190] dump_stack_lvl+0xf4/0x15c [ 122.644499][T11190] dump_stack+0x1c/0x5c [ 122.645149][T11190] print_circular_bug+0x148/0x1b0 [ 122.645913][T11190] check_noncircular+0x264/0x2f8 [ 122.646632][T11190] __lock_acquire+0x2880/0x6800 [ 122.647381][T11190] lock_acquire+0x20c/0x63c [ 122.648028][T11190] down_read+0x64/0x300 [ 122.648618][T11190] ocfs2_init_acl+0x264/0x61c [ 122.649266][T11190] ocfs2_mknod+0x129c/0x2110 [ 122.649949][T11190] ocfs2_create+0x19c/0x4f8 [ 122.650605][T11190] path_openat+0xe18/0x26bc [ 122.651272][T11190] do_filp_open+0x194/0x384 [ 122.651917][T11190] do_sys_openat2+0x134/0x3f4 [ 122.652952][T11190] __arm64_sys_openat+0x118/0x14c [ 122.653822][T11190] invoke_syscall+0x98/0x2b4 [ 122.654563][T11190] el0_svc_common+0x138/0x258 [ 122.655277][T11190] do_el0_svc+0x58/0x130 [ 122.655867][T11190] el0_svc+0x58/0x128 [ 122.656433][T11190] el0t_64_sync_handler+0x84/0xf0 [ 122.657151][T11190] el0t_64_sync+0x18c/0x190 [ 122.659249][T11224] usb usb8: usbfs: process 11224 (syz.0.2496) did not claim interface 0 before use [ 122.689838][ T6432] ocfs2: Unmounting device (7,7) on (node local) [ 123.223311][T11207] caif:caif_disconnect_client(): nothing to disconnect [ 125.914889][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.915947][ T2061] ieee802154 phy1 wpan1: encryption failed: -22