last executing test programs: 32.947098615s ago: executing program 2 (id=4189): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond0\x00'}) 31.895636967s ago: executing program 2 (id=4198): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x8003, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0xb, 0x200a, 0x1}) 31.814597501s ago: executing program 2 (id=4205): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xde}]}}}]}, 0x3c}}, 0x0) 31.754021414s ago: executing program 2 (id=4209): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 31.658988279s ago: executing program 2 (id=4215): r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) 31.262061598s ago: executing program 2 (id=4239): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6}]}, 0x10) 31.20633056s ago: executing program 32 (id=4239): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6}]}, 0x10) 899.356217ms ago: executing program 3 (id=5567): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000080)={[{@umask={'umask', 0x3d, 0x5}}, {@creator={'creator', 0x3d, "71c54bc5"}}, {@gid}, {@barrier}, {@nobarrier}, {@uid}, {@nls={'nls', 0x3d, 'iso8859-9'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$eJzs3U1sHGf5APBn1uu1N5XcbZu0/f+FFKsRETSQ2F5KgoREqBDyoUKRuPS6JE5jee1GtoucCBEXKBzhhHLooQiZQ0+oB6QiDohyRkLiinKPxD3iwKKZnVnvh73ebfyRhN9Pmp13Zt6PZ57OvN6dbbQB/M9afDsmtyOJxQtvbaXbD3bqzQc79dWiHBFTEVGKKLdXkaxFJJ9FXI32Ev+X7sy7S/Yb542Hn354/v7H9fZWOV+y+qVh7Xa1hoywnS8xGxET+XpM5f36ux5vDvR3b6yuk07cacLOFYmDk9YasD1O8xHuW+BJdy9iYnKP/bWIUxExnb8PiHx2KB1zeIdurFkOAAAAnkwTB1V4/lE8iq2YOZ5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NmQtH8zMMmXUlGejaT4/f9Kvi9VqZxwvMN95YDjH9w8pkAAAAAAAAAA4Eh8kn9xf/ZRPIqtmCn2t5LsO//Xso3T2etz8V5sxFKsx8XYikZsxmasx3zE5ExXh5Wtxubm+vxgy19H2rLVat3LWy5ERG2g5cI+gZYO+cQBAAAAAAAA4Nn0k1iMmZMOAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuiURE+1VtpwuyrUolSNiOiIqab3tiD8V5afZn086AAAAADh61Xw9k/ynXWgl2Wf+l7PP/dPxXqzFZizHZjRjKW5kzwLan/pLf9+uNx/s1FfTZbDjb/9rrDiyHiNiIt7fZ+S5rMaZTovF+G58Py7EbFyL9ViOH0YjNmMpZqOankQ0Iolatf30olbEuXe8V3u2rvXHdrZv+9UskmrcjOUstotxvRLtxybZOaRjvto12h8qEX0jvp9mJ/lWbsQc3ej67/Wr/LlMrvX8iH0cjVp25pOdjMyluc+z8cLw3I95nfSPNB+lzjOo07ujpJv9IxU5/8E4OT/VXk2nLz/vzflhG/NRWn8mFqKUX30RL/fm/PYX77/Y2/jL//jLtVultZVbNzcuHOEpPY7ZgypMFoX+TNS7MvHK8Ksvz0QzzcT26JmY7N8xPWrLo1XJs5FNRSPOlt/JSo14resSfDduxFJcjrmYjysxF9+Ihah3rrB0OdOT13J9tTcn2b1WGpzfqkOCP/elrkq/OKDy8Urz8kJXXrtnulp2LN9z9Zcx13X1vTj86hv7r0A6/v/n5XSMn3b+4jwJejKRz81FdC8Nz8RvWunrRnNtZf1W4/aI453P1+lt+0Hv3Pzb0aPu/+t+GNLrJZ1xy9lWlpNqcb2kx17qRNubr0r+jUu7XWng2JnOsVrMxHJ8b987tZK/hxvsqX3sle5j/9ydOSv5+5viWM+7nHg3mtm7kD4HTtUAHLNTr5+qVB9W/1b9qPqz6q3qW9NvTl2Z+kIlJv9a/uPE70u/K30zeT0+ih/HzElHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4KNO3dXGs3m0nqnENP9ex63UNl3rOGFKB1YZ+e50TqMWsTwsZK8UDncc38aC9Xo21P8wtLj9vxJRAypU3ns4JOxr7GxC2keDqXDVqud1GxPa2KM5uWi1d51yrExHSuNpLzHHTe1exdEbaXR/Herp3k1um4Z4Bl3aXP19qWNO3e/urzaeGfpnaW1hSuXr1yuf33+a5duLjeX5tqvJx0lcBQ27tyd2GP3wC/dAgAAAAAAAAAAAE+O/P/+3/zc/5ihfECdyvrG3iOfPe5TBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5Si2/H5HYkMT93cS7dfrBTb6ZLUd6tWY6IUkQkP4pIPou4Gu0lal3dJfuN88bDTz88f//j+m5f5aJ+aVi70WznS8xGxES+PtjUHt0M9ne9q7/tzxVe0jnDNGHnisTBSftvAAAA//9u//cB") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 825.96633ms ago: executing program 3 (id=5572): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) 711.120286ms ago: executing program 3 (id=5578): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x1389, 0x5, 0xf, 0xffff, 0x0, 0x1ed, 0x2, 0x3, 0xbf, 0x4, 0x72, 0x81, 0xfffffff7, 0xffff794b, 0xa1b], 0x0, 0x4}) 668.288228ms ago: executing program 3 (id=5580): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000003940)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c696f636861727365743d63703737352c696f636861727365743d69736f383835392d342c73686f72746e616d653d77696e39352c636f6465706167653d3837342c73686f72746e616d653d77696e6e742c726f6469722c757466383d312c696f636861727365743d6d6163726f6d616e2c74696d655f6f66667365743d3078303030303030303030303030303136612c757466383d302c757466383d302c000f18ee2f276692b33bd676c8d33a96b93a60f29c1c863bdbe951c4940e59574e521461edaed66ab09303fc17c55161a376e601f117fac53cda39921ba5297b34ac641d3445250e3ae71e63a64514e61059c27362b7c4fead59b43f81377ea3de1e1696339030e77852152a4e8cf69849f4bfff6b4d99464c2f94be088b678e9f9aa5"], 0x26, 0x34c, &(0x7f0000001ac0)="$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") removexattr(&(0x7f0000000080)='./file0\x00', 0x0) 475.863527ms ago: executing program 1 (id=5592): r0 = syz_io_uring_setup(0x28c7, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 473.755537ms ago: executing program 3 (id=5594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) 427.32428ms ago: executing program 3 (id=5596): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000840)={0x8, 0x4, {0x8, @usage=0x61, 0x0, 0x100, 0xd, 0xffffffffffff8000, 0x9, 0x28, 0x96, @struct={0x40, 0x1949}, 0x8, 0x3, [0x2d03, 0x1, 0xffffffffffffff8c, 0x5, 0x2, 0x4d]}, {0x1, @usage=0x8, 0x0, 0x1, 0xd6a9, 0x8001, 0x2, 0x2, 0x4, @struct={0x8001, 0x7}, 0xfff, 0x101, [0x4, 0x9d4, 0x0, 0x8, 0x1, 0x8]}, {0x5, @struct={0xb, 0x80000000}, 0x0, 0x400, 0x2, 0xf, 0x0, 0x56, 0x22, @usage=0xd0, 0x4, 0x7b, [0xe, 0x5, 0xffffffffffffffff, 0x7ff, 0xbf54, 0x9]}, {0xd, 0x1, 0x80000000}}) 426.52597ms ago: executing program 5 (id=5605): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1b108, 0x116245af0baa4483}, [@IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_bridge\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 419.36497ms ago: executing program 1 (id=5598): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x40080, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000340)={0x8, 0x5, &(0x7f0000000240)=[0x0, 0x401, 0x6, 0x800, 0x4], 0x0, 0x0, &(0x7f0000000300)}) 392.752811ms ago: executing program 0 (id=5599): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000440)) 315.615315ms ago: executing program 1 (id=5601): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{0x3c, '\x00', @data=0xce, 0x3}, {0x45, '\x00', @data=0x80000000, 0x1c}]}) 315.416285ms ago: executing program 5 (id=5602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x305, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x8800) 315.340075ms ago: executing program 0 (id=5603): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 310.962595ms ago: executing program 1 (id=5604): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1010000007c0004060000000000bf852c8986626691b01b5f44e4ce28712829"], 0xe0}], 0x1}, 0x40040) 297.835376ms ago: executing program 4 (id=5606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 293.270086ms ago: executing program 5 (id=5607): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 195.323841ms ago: executing program 5 (id=5608): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4000, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$eJzs279rE2Ecx/HPXS7pNdpWrDqIQlGsLjb+mBxE3Tr1H+hU2qjFE6tVsEWwWdRB6OTm4iQIDo4idRMn/wAHwU0pdgg4OfTkzvvR5JLmB5ecpO/X0ueez/Pkee7oJd82iQDsWVc1IUOGCt7BMfvA+riR9ZYA9Ikb/Ny23JgZhgAG282RrHcAIBtb16SXp6Rf1UfzyhXCssCrAL5tStqYfKo1Bbk5JOn1F8mK6oetinTUCnLD1nB9ffFKOh3ON4q14UNbqkjFKN+3IxyWKq7/+GdOhuvv14hGNZb38oMaD9ZfiOYfaVnvWJ2XSAAADBxDU63yXQeYur7olM81zfN+fr5pXvDzCy3yi9HxUNSafTHz4IN7edvLp+bvOAu7bRNAA2YX9//X43E71+L+t5rc//V/JwDov+WV1VtzjuM+lvxG+V7QEzTC/wjEPbnEmFQa4XsObQwO36FMRN5j7OjJJaevTybPPb2zMOONjUnqzYX6jxtqEH2f/ndNoh6zF1e+pnHi558nS8/fvW9n8NsOlzCj37rZjXK1boxMqYfnNZG4C+Ycu73pxprrdrhow6eL+MMBdtrPRAD6rXT/9lJpeWX17GJO0o1yPnzBn/6x6Vf2pZr6Pp/dTgGkLX7Rb5RWEj1u7eHMp8+/q5fePOti5SuSPha7mAgAAAAAAAAAAAAAAOoc0uGstwAAAACgT5Lf/rk7mvZXl7I+RwAAAAAAAAAAAAAAAAAABs3fAAAA///PtQqI") truncate(&(0x7f0000000000)='./file1\x00', 0x8000) 195.184231ms ago: executing program 0 (id=5609): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100feff020037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 194.989221ms ago: executing program 4 (id=5610): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, 0xffffffffffffffff) 170.178582ms ago: executing program 0 (id=5611): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20120, 0x60181}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_batadv\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x35, 0x9}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000804) 158.460413ms ago: executing program 5 (id=5612): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000000}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 111.626005ms ago: executing program 4 (id=5613): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x521, 0x70bd26, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @rand_addr=0x64010101}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 100.750725ms ago: executing program 1 (id=5614): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x1d) 85.716016ms ago: executing program 0 (id=5615): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f00000000c0)={[{@auto_da_alloc}, {@test_dummy_encryption_v1}]}, 0x0, 0x24d, &(0x7f00000009c0)="$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") mount(0x0, &(0x7f0000000080)='mnt\x00', 0x0, 0x240032, &(0x7f0000000140)='test_dummy_encryption=v1') 54.843548ms ago: executing program 5 (id=5616): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x15}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 54.639808ms ago: executing program 4 (id=5617): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@userptr={0x389b, 0xa, 0x4, 0x10, 0x7, {0x0, 0x2710}, {0x4, 0x1, 0x5, 0x9, 0x3, 0x40, "2f3f0551"}, 0xfff, 0x2, {&(0x7f0000000180)}, 0x4}) 989.62µs ago: executing program 4 (id=5618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000010500010007000000180007800c00018008000140fffffffe05000300080000"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 824.9µs ago: executing program 0 (id=5619): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030373737372c6469725f756d61736b3d30303030303030303030303030303030303030303030302c696f636861727365743d69736f383835392d362c636f6465706167653d63703835352c63726561746f723d4ddd71752c00eeabc72a9832436950c6116498dda8be60a94746ea68766f63d1d63944fbda2a9337439b37b6f2a694ba98f40070d09c3890bd28a2018f1adfe1e0a630020a9cac1a43800a70a9328ddb2a2f2e207da7cd3caf243b39eaff4966b7aa97cb6cc7d2cfc59e7a976de0a00d23c7ffaaa056cc4f8bc7b4c0f9a21db642b3e832e30a90ba1b9e7933b77c60f6a1b9ca9128f0a2d0e23373c9d15c79865bae97ddd82b98001b6aa9c5390e4deaf5f0ee492c6842b1c08486e479a889491459a257e9d4083634dac6cd58520f72e6c2f11bbd5b03655bb1863b16f3", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$eJzs3U1rE08cB/Dv7KZN+m/pf7UVwYNINWAvovUiXiIlL8KTqE0KxSWitviAYBVPIvbu3aNXX4N4UQTP9eRJPHiqBxmZh2SfN6lmd1P9fsCy2dmZ/e3OzlPALIjon7Xa3n11/ov6JwAXLvDsIuAAaAA1AEdwtLHV29zY9LudvIJcHK+bXAImp0gcs9brpmVtwOawPPWphrnwPiqGlPLS56qDoMrp1i/d6M4Tuieo29apExsVxZfl8f6zfJsBsF1EMBMlv6bEHvZwD/OlhUNERBNJmPHdseP8nJ2/Ow7QtIOJSpu48f937VUdQOFkbmpo/NerLClUvf+vk4L1nl7CqXSnv0pMK+t17PNU7PM0zNMTmV2KYatKHYszs77hd8+s3fQ7Dp6gZYUOW9R/O/bxtCLR1hNFL6WsTXMMSpvJPESkzyhn9TVMqWtYMfHfBRCJfyH3jAUQ78QHcUV4eInOYP5Xk0JVk64pL1ZTJv6z2SXqq/TUUbDdRqvVciKHHNInOWbPYA25ygbcrDNO2zIjXxB4w+LUuQ7HcpmrOzck10JqrhW9vQwnI9diJJe6mvUN/232qUohXojLYglf8Qbt0PzfUfE1kWyZoYc+aDWiaYYCfcdV64zWbEitaXsiPXJsfdp9aPYnm8vgLiYbrPUjv0+jfXiO67iA+Tv3H9xwfb97W21c89XjqjcGe27N2Q2/O/UUCCdNyga2gz11SC1xcH9QKjOw5bEWqPqPlCTVsHrf+3tUKxtW4KM/jUf1A4XeutkRrmJ/G/2uazwFtt+P50HqTxsiST+llCU2oh17Z+JJ1XRLVK6g0kc7PmWqQwebqlJh1n/BeqVmJnvqj5c6Tx/xiwBbolRz7MEKLsgrzYwcwH85K7i0YjNXcMk1V2LNqNdcJ08Dp0Y/o2fj/EuINj7iKr//JyIiIiIiIiIiIiIiIiIiIiIiIiI6aMr4zzBVXyMRERERERERERERERERERERERERERER0UG32oD53Wv03/+L0d7/G38Vi2t+Enws7//d6YHv/yUq3q8AAAD///B/c8c=") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) 763.78µs ago: executing program 1 (id=5620): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x10b}, {0x10, 0x110, 0xc}], 0x20}, 0x0) 0s ago: executing program 4 (id=5621): futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) kernel console output (not intermixed with test programs): te:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 74.926275][ T9978] (syz.1.2574,9978,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 74.973365][ T9978] (syz.1.2574,9978,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 74.997176][ T9978] (syz.1.2574,9978,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 74.999185][ T9978] (syz.1.2574,9978,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 75.000719][ T9978] (syz.1.2574,9978,0):ocfs2_quota_read:201 ERROR: status = -5 [ 75.002080][ T9978] (syz.1.2574,9978,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 75.021743][ T9978] (syz.1.2574,9978,0):ocfs2_mknod:314 ERROR: status = -5 [ 75.023024][ T9978] (syz.1.2574,9978,0):ocfs2_mknod:502 ERROR: status = -5 [ 75.049181][ T9978] (syz.1.2574,9978,0):ocfs2_create:676 ERROR: status = -5 [ 75.115808][ T4322] ocfs2: Unmounting device (7,1) on (node local) [ 75.155784][T10009] loop4: detected capacity change from 0 to 32768 [ 75.167054][T10009] gfs2: fsid=Ô±rÐÛ»ð_î [ 75.167054][T10009] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’tY_U§æM: Trying to join cluster "lock_nolock", "Ô±rÐÛ»ð_î [ 75.167054][T10009] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’tY_U§æM" [ 75.170430][T10009] gfs2: fsid=Ô±rÐÛ»ð_î [ 75.170430][T10009] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’tY_U§æM: Now mounting FS (format 1801)... [ 75.194277][T10009] gfs2: fsid=Ô±rÐÛ»ð_î [ 75.194277][T10009] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’tY_U§æM.s: journal 0 mapped with 5 extents in 0ms [ 75.229117][T10009] gfs2: fsid=Ô±rÐÛ»ð_î [ 75.229117][T10009] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’tY_U§æM.s: first mount done, others may mount [ 75.260482][T10051] FAT-fs (loop0): Directory bread(block 414) failed [ 75.261637][T10051] FAT-fs (loop0): Directory bread(block 415) failed [ 75.262750][T10051] FAT-fs (loop0): Directory bread(block 416) failed [ 75.288088][T10051] FAT-fs (loop0): Directory bread(block 417) failed [ 75.289189][T10051] FAT-fs (loop0): Directory bread(block 418) failed [ 75.290405][T10051] FAT-fs (loop0): Directory bread(block 419) failed [ 75.291492][T10051] FAT-fs (loop0): Directory bread(block 420) failed [ 75.292681][T10051] FAT-fs (loop0): Directory bread(block 421) failed [ 75.302080][T10049] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.2607: iget: bad extra_isize 90 (inode size 256) [ 75.316320][T10049] EXT4-fs (loop2): Remounting filesystem read-only [ 75.317561][T10049] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2607: error while reading EA inode 11 err=-117 [ 75.320483][T10049] EXT4-fs (loop2): Remounting filesystem read-only [ 75.321460][T10049] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.334220][T10049] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.2607: iget: bad extra_isize 90 (inode size 256) [ 75.338629][T10049] EXT4-fs (loop2): Remounting filesystem read-only [ 75.339782][T10049] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2607: error while reading EA inode 11 err=-117 [ 75.341944][T10049] EXT4-fs (loop2): Remounting filesystem read-only [ 75.343037][T10049] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.2607: iget: bad extra_isize 90 (inode size 256) [ 75.346655][T10049] EXT4-fs (loop2): Remounting filesystem read-only [ 75.347672][T10049] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2607: error while reading EA inode 18 err=-117 [ 75.354020][T10049] EXT4-fs (loop2): Remounting filesystem read-only [ 75.355709][T10049] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.2607: iget: bad extra_isize 90 (inode size 256) [ 75.358461][T10049] EXT4-fs (loop2): Remounting filesystem read-only [ 75.359588][T10049] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2607: error while reading EA inode 18 err=-117 [ 75.361961][T10051] FAT-fs (loop0): FAT read failed (blocknr 128) [ 75.364016][T10049] EXT4-fs (loop2): Remounting filesystem read-only [ 75.365211][T10049] EXT4-fs (loop2): 1 orphan inode deleted [ 75.366189][T10049] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 75.368739][T10049] EXT4-fs (loop2): unmounting filesystem. [ 75.405924][T10064] __nla_validate_parse: 8 callbacks suppressed [ 75.405936][T10064] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2613'. [ 75.408465][T10064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2613'. [ 75.409896][T10064] netlink: 'syz.3.2613': attribute type 2 has an invalid length. [ 75.411771][T10064] netlink: 'syz.3.2613': attribute type 3 has an invalid length. [ 75.450528][ T4966] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.491777][T10072] device lo entered promiscuous mode [ 75.496099][T10072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.869454][T10126] FAT-fs (loop4): Directory bread(block 64) failed [ 75.870557][T10126] FAT-fs (loop4): Directory bread(block 65) failed [ 75.871805][T10126] FAT-fs (loop4): Directory bread(block 66) failed [ 75.872843][T10126] FAT-fs (loop4): Directory bread(block 67) failed [ 75.892197][T10126] FAT-fs (loop4): Directory bread(block 68) failed [ 75.893408][T10126] FAT-fs (loop4): Directory bread(block 69) failed [ 75.895116][T10126] FAT-fs (loop4): Directory bread(block 70) failed [ 75.896201][T10126] FAT-fs (loop4): Directory bread(block 71) failed [ 75.897343][T10126] FAT-fs (loop4): Directory bread(block 72) failed [ 75.898585][T10126] FAT-fs (loop4): Directory bread(block 73) failed [ 76.013632][T10148] device veth3 entered promiscuous mode [ 76.016627][T10152] tmpfs: Bad value for 'mpol' [ 76.260835][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2672'. [ 76.310607][T10188] binder: 10186:10188 ioctl c00c620f 0 returned -14 [ 76.364287][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 76.364300][ T27] audit: type=1400 audit(76.350:8): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=10195 comm="syz.2.2678" [ 76.370003][T10194] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 76.424038][T10204] netlink: 'syz.2.2682': attribute type 1 has an invalid length. [ 76.441365][T10208] IPv6: Can't replace route, no match found [ 76.492872][T10219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2688'. [ 76.585521][T10230] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 76.721303][T10252] Zero length message leads to an empty skb [ 76.802509][T10258] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 76.833306][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2710'. [ 76.846773][T10260] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2710'. [ 76.929079][T10269] netlink: 'syz.2.2714': attribute type 1 has an invalid length. [ 76.930337][T10269] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2714'. [ 76.968880][T10240] XFS (loop4): Mounting V5 Filesystem [ 76.979003][T10236] XFS (loop3): Mounting V5 Filesystem [ 77.008328][T10240] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 77.022397][T10240] XFS (loop4): Starting recovery (logdev: internal) [ 77.029017][T10294] netlink: 'syz.2.2720': attribute type 1 has an invalid length. [ 77.031644][T10294] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2720'. [ 77.055391][T10240] XFS (loop4): Ending recovery (logdev: internal) [ 77.077798][T10300] netlink: zone id is out of range [ 77.096208][T10236] XFS (loop3): Ending clean mount [ 77.164599][ T4332] XFS (loop4): Unmounting Filesystem [ 77.168830][ T4321] XFS (loop3): Unmounting Filesystem [ 77.239510][ T51] block nbd0: Attempted send on invalid socket [ 77.240718][ T51] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.242359][T10314] EXT2-fs (nbd0): error: unable to read superblock [ 77.312921][T10321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2732'. [ 77.315065][T10321] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2732'. [ 77.406901][T10334] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 77.452699][T10342] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 77.560774][T10351] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 77.574163][T10351] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 77.576097][T10351] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume. [ 77.764060][T10383] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 99999999 out of range (1000000..45000000) [ 77.816400][T10391] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 77.819882][T10391] sysv_free_block: trying to free block not in datazone [ 77.832312][T10391] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 77.899358][T10406] ieee802154 phy0 wpan0: encryption failed: -90 [ 77.947707][T10409] misc userio: The device must be registered before sending interrupts [ 77.984497][T10419] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 78.043804][T10421] set_capacity_and_notify: 10 callbacks suppressed [ 78.043814][T10421] loop2: detected capacity change from 0 to 4096 [ 78.117150][T10421] ntfs3: loop2: ino=9, attr_set_size [ 78.122259][T10436] xt_TCPMSS: Only works on TCP SYN packets [ 78.204652][T10450] netlink: 'syz.3.2789': attribute type 3 has an invalid length. [ 78.438397][T10486] netlink: 'syz.4.2807': attribute type 14 has an invalid length. [ 78.610306][T10513] netlink: 'syz.3.2819': attribute type 2 has an invalid length. [ 78.709418][T10530] capability: warning: `syz.4.2829' uses 32-bit capabilities (legacy support in use) [ 78.781378][T10542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.839099][T10549] device gre1 entered promiscuous mode [ 78.910375][T10560] overlayfs: missing 'lowerdir' [ 78.982498][T10570] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 79.010398][T10573] netlink: 'syz.3.2850': attribute type 9 has an invalid length. [ 79.086406][T10582] loop4: detected capacity change from 0 to 2048 [ 79.088071][T10582] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2362, location=2362 [ 79.092504][T10582] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 79.111657][T10582] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 79.124070][T10582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.262875][T10602] loop0: detected capacity change from 0 to 4096 [ 79.279941][T10602] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 79.343440][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 79.446775][T10628] loop2: detected capacity change from 0 to 1024 [ 79.522255][T10632] loop4: detected capacity change from 0 to 4096 [ 79.540574][T10640] validate_nla: 1 callbacks suppressed [ 79.540586][T10640] netlink: 'syz.3.2883': attribute type 1 has an invalid length. [ 79.559960][T10632] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 79.627573][T10632] ntfs3: loop4: ino=0, attr_set_size [ 79.701860][T10663] loop3: detected capacity change from 0 to 64 [ 79.703000][T10664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.832957][T10684] xt_limit: Overflow, try lower: 2147483649/3300 [ 80.237255][T10742] loop2: detected capacity change from 0 to 4096 [ 80.351888][T10759] dlm: no locking on control device [ 80.469500][T10770] loop3: detected capacity change from 0 to 164 [ 80.494182][T10770] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 80.517683][T10749] loop4: detected capacity change from 0 to 32768 [ 80.559821][T10745] loop0: detected capacity change from 0 to 32768 [ 80.625706][T10745] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 80.646636][T10790] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2953: inode has both inline data and extents flags [ 80.660225][T10790] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2953: couldn't read orphan inode 15 (err -117) [ 80.678291][T10745] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x258/0xe3c, inode 0x1803 dinode [ 80.680184][T10745] XFS (loop0): Unmount and run xfs_repair [ 80.681003][T10745] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 80.682268][T10745] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 80.685402][T10790] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 80.703041][T10745] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 80.716236][T10745] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 80.717621][T10745] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 80.719179][T10745] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 80.720606][T10745] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 80.722041][T10745] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 80.723484][T10745] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 80.802594][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 80.847895][ T4328] XFS (loop0): Unmounting Filesystem [ 80.979923][T10816] EXT4-fs: inline encryption not supported [ 81.009384][T10821] futex_wake_op: syz.4.2967 tries to shift op by 36; fix this program [ 81.024370][T10816] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 81.042786][T10816] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 6: comm syz.1.2965: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=4096 fake=0 [ 81.084251][T10816] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 81.085950][T10816] EXT4-fs warning (device loop1): ext4_rename_delete:3778: inode #2: comm syz.1.2965: Deleting old file: nlink 4, error=-117 [ 81.099058][T10825] device lo left promiscuous mode [ 81.111406][T10825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.170397][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 81.251902][T10833] __nla_validate_parse: 13 callbacks suppressed [ 81.251915][T10833] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2960'. [ 81.413029][T10853] tmpfs: Bad value for 'mpol' [ 81.540004][T10871] netlink: 'syz.4.2991': attribute type 11 has an invalid length. [ 81.672365][T10876] syz.3.2993 (10876): drop_caches: 2 [ 81.699538][T10887] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 81.731211][T10890] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 81.770656][T10900] EXT4-fs: inline encryption not supported [ 81.788211][T10900] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 81.811622][T10900] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 6: comm syz.0.3004: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=4096 fake=0 [ 81.822306][T10900] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 81.824352][T10900] EXT4-fs warning (device loop0): ext4_rename_delete:3778: inode #2: comm syz.0.3004: Deleting old file: nlink 4, error=-117 [ 81.837206][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 81.865425][T10912] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3010'. [ 81.899990][T10917] netlink: 'syz.4.3013': attribute type 7 has an invalid length. [ 81.926459][T10923] comedi comedi0: comedi_config --init_data is deprecated [ 81.961405][T10925] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 82.217784][T10971] IPv6: sit1: Disabled Multicast RS [ 82.372201][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3049'. [ 82.437784][T10965] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3037 (10965) [ 82.449061][T10965] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.450740][T10965] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 82.452070][T10965] BTRFS info (device loop3): using free space tree [ 82.460160][T10995] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 82.578807][T11014] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3056'. [ 82.664724][T10965] BTRFS info (device loop3): enabling ssd optimizations [ 82.817160][ T4321] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.953204][T11067] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3075'. [ 82.956794][T11067] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3075'. [ 82.997300][ T4314] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4314) [ 83.006563][ T78] block nbd3: Attempted send on invalid socket [ 83.007545][ T78] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.009425][T11072] REISERFS warning (device nbd3): sh-2006 read_super_block: bread failed (dev nbd3, block 2, size 4096) [ 83.011735][ T78] block nbd3: Attempted send on invalid socket [ 83.012703][ T78] I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.017608][T11072] REISERFS warning (device nbd3): sh-2006 read_super_block: bread failed (dev nbd3, block 16, size 4096) [ 83.019298][T11072] REISERFS warning (device nbd3): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd3 [ 83.076664][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3082'. [ 83.142322][T11088] set_capacity_and_notify: 9 callbacks suppressed [ 83.142332][T11088] loop2: detected capacity change from 0 to 256 [ 83.177083][T11079] syz.0.3080 (11079): drop_caches: 2 [ 83.183637][T11088] FAT-fs (loop2): Directory bread(block 64) failed [ 83.185274][T11088] FAT-fs (loop2): Directory bread(block 65) failed [ 83.186525][T11088] FAT-fs (loop2): Directory bread(block 66) failed [ 83.187590][T11088] FAT-fs (loop2): Directory bread(block 67) failed [ 83.188797][T11088] FAT-fs (loop2): Directory bread(block 68) failed [ 83.189942][T11088] FAT-fs (loop2): Directory bread(block 69) failed [ 83.191014][T11088] FAT-fs (loop2): Directory bread(block 70) failed [ 83.192140][T11088] FAT-fs (loop2): Directory bread(block 71) failed [ 83.214026][T11088] FAT-fs (loop2): Directory bread(block 72) failed [ 83.215171][T11088] FAT-fs (loop2): Directory bread(block 73) failed [ 83.255622][T11098] tmpfs: Bad value for 'mpol' [ 83.279469][T11102] netlink: 'syz.0.3090': attribute type 28 has an invalid length. [ 83.338040][T11114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3096'. [ 83.495237][T11134] netlink: 'syz.4.3106': attribute type 1 has an invalid length. [ 83.496584][T11134] netlink: 'syz.4.3106': attribute type 3 has an invalid length. [ 83.497856][T11134] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3106'. [ 83.588300][T11145] binder: 11141 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 83.588323][T11145] binder: 11141:11145 ioctl c018620c 200002c0 returned -22 [ 83.630953][T11143] loop4: detected capacity change from 0 to 4096 [ 83.648395][T11143] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 83.670661][T11143] ntfs3: loop4: Failed to load $Extend. [ 83.770980][T11120] loop0: detected capacity change from 0 to 32768 [ 83.808521][T11168] loop2: detected capacity change from 0 to 256 [ 83.818201][T11168] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 83.821759][T11120] XFS (loop0): Mounting V5 Filesystem [ 83.848664][T11168] overlayfs: filesystem on './file0' not supported [ 83.906479][T11180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3125'. [ 83.909781][T11120] XFS (loop0): Ending clean mount [ 84.002364][ T4328] XFS (loop0): Unmounting Filesystem [ 84.033739][T11190] loop2: detected capacity change from 0 to 4096 [ 84.069836][T11190] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 84.076177][T11190] ntfs3: loop2: Failed to load $Extend. [ 84.304566][T11216] overlayfs: failed to resolve './file0': -2 [ 84.440488][T11205] loop3: detected capacity change from 0 to 40427 [ 84.448735][T11205] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x3ffff [ 84.450077][T11205] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 84.454611][T11205] F2FS-fs (loop3): invalid crc value [ 84.467189][T11205] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.472747][T11205] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x54c/0x884 [ 84.501625][T11210] loop4: detected capacity change from 0 to 32768 [ 84.506310][T11205] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 84.517473][T11205] F2FS-fs (loop3) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x64c/0x1b9c [ 84.519937][T11210] (syz.4.3141,11210,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 84.523208][T11210] (syz.4.3141,11210,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 84.541117][T11210] JBD2: Ignoring recovery information on journal [ 84.598720][T11210] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 84.677671][ T4332] ocfs2: Unmounting device (7,4) on (node local) [ 84.827180][T11276] netlink: 'syz.3.3170': attribute type 7 has an invalid length. [ 85.029211][T11306] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 85.108984][T11316] loop3: detected capacity change from 0 to 256 [ 85.131144][T11316] FAT-fs (loop3): Directory bread(block 64) failed [ 85.132222][T11316] FAT-fs (loop3): Directory bread(block 65) failed [ 85.133348][T11316] FAT-fs (loop3): Directory bread(block 66) failed [ 85.154295][T11316] FAT-fs (loop3): Directory bread(block 67) failed [ 85.155501][T11316] FAT-fs (loop3): Directory bread(block 68) failed [ 85.156617][T11316] FAT-fs (loop3): Directory bread(block 69) failed [ 85.157763][T11316] FAT-fs (loop3): Directory bread(block 70) failed [ 85.158793][T11316] FAT-fs (loop3): Directory bread(block 71) failed [ 85.159955][T11316] FAT-fs (loop3): Directory bread(block 72) failed [ 85.161019][T11316] FAT-fs (loop3): Directory bread(block 73) failed [ 85.205640][T11282] loop0: detected capacity change from 0 to 32768 [ 85.207105][T11282] XFS: ikeep mount option is deprecated. [ 85.246835][T11282] XFS (loop0): Mounting V5 Filesystem [ 85.249076][ T27] audit: type=1400 audit(32770.678:9): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=11334 comm="syz.4.3196" [ 85.305399][T11282] XFS (loop0): Ending clean mount [ 85.319991][T11282] XFS (loop0): Quotacheck needed: Please wait. [ 85.350397][T11282] XFS (loop0): Quotacheck: Done. [ 85.446633][T11360] loop3: detected capacity change from 0 to 736 [ 85.449450][ T4328] XFS (loop0): Unmounting Filesystem [ 85.737379][T11397] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.808082][T11394] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 85.810134][T11394] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 85.811887][T11394] REISERFS (device loop2): using ordered data mode [ 85.813146][T11394] reiserfs: using flush barriers [ 85.814905][T11394] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.817522][T11394] REISERFS (device loop2): checking transaction log (loop2) [ 85.824692][T11394] REISERFS (device loop2): Using r5 hash to sort names [ 85.825882][T11394] REISERFS (device loop2): using 3.5.x disk format [ 85.827208][T11394] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 85.944913][T11430] netlink: 'syz.1.3242': attribute type 79 has an invalid length. [ 86.263174][T11482] __nla_validate_parse: 3 callbacks suppressed [ 86.263186][T11482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3267'. [ 86.272995][T11482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3267'. [ 86.513207][T11521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3285'. [ 86.788905][T11553] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 86.861396][T11553] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:106: comm syz.1.3298: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 86.875858][T11543] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.877560][T11543] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 86.878847][T11543] BTRFS info (device loop3): using free space tree [ 86.889908][T11543] BTRFS info (device loop3): enabling ssd optimizations [ 86.927566][T11531] (syz.2.3289,11531,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 86.950416][T11531] (syz.2.3289,11531,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 86.954933][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 86.983293][T11531] JBD2: Ignoring recovery information on journal [ 86.989943][ T4321] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 87.087435][T11531] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 87.121459][ T5827] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.179446][ T4329] ocfs2: Unmounting device (7,2) on (node local) [ 87.226824][T11607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.272496][T11617] sctp: [Deprecated]: syz.1.3315 (pid 11617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.272496][T11617] Use struct sctp_sack_info instead [ 87.362571][T11631] netlink: 'syz.1.3323': attribute type 6 has an invalid length. [ 87.410131][ T4314] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4314) [ 87.445997][T11645] netlink: 'syz.0.3330': attribute type 30 has an invalid length. [ 87.627813][T11676] cgroup: none used incorrectly [ 87.813812][T11708] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3361'. [ 87.891376][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3365'. [ 87.924997][T11721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge4: link becomes ready [ 87.926919][T11717] netlink: 'syz.3.3368': attribute type 4 has an invalid length. [ 87.928200][T11717] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3368'. [ 87.932292][T11726] xt_TCPMSS: Only works on TCP SYN packets [ 87.954456][T11728] binder: 11727:11728 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 88.008755][T11736] netlink: 'syz.2.3375': attribute type 6 has an invalid length. [ 88.082750][T11748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3380'. [ 88.108811][T11754] netlink: 340 bytes leftover after parsing attributes in process `syz.1.3385'. [ 88.114369][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3385'. [ 88.120855][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3384'. [ 88.233542][T11771] netlink: 'syz.2.3392': attribute type 11 has an invalid length. [ 88.423554][T11802] set_capacity_and_notify: 6 callbacks suppressed [ 88.423566][T11802] loop0: detected capacity change from 0 to 2048 [ 88.471486][T11802] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 88.482617][T11802] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3407: bg 0: block 234: padding at end of block bitmap is not set [ 88.512261][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 88.706164][T11843] loop4: detected capacity change from 0 to 1024 [ 88.712290][T11843] EXT4-fs: Ignoring removed bh option [ 88.723804][T11843] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80ce018, mo2=0000] [ 88.725853][T11843] System zones: 0-1, 3-12 [ 88.740075][T11843] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #3: block 1: comm syz.4.3426: lblock 1 mapped to illegal pblock 1 (length 1) [ 88.745333][T11843] Quota error (device loop4): write_blk: dquota write failed [ 88.746543][T11843] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 88.748284][T11843] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.3426: Failed to acquire dquot type 0 [ 88.766279][T11843] EXT4-fs error (device loop4): ext4_free_blocks:6219: comm syz.4.3426: Freeing blocks not in datazone - block = 0, count = 4096 [ 88.770518][T11843] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3426: Invalid inode bitmap blk 0 in block_group 0 [ 88.774074][T11843] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 88.776815][T11843] EXT4-fs (loop4): 1 orphan inode deleted [ 88.777683][T11843] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.784588][ T9] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 88.788113][ T9] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 88.789614][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 88.806328][T11843] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm syz.4.3426: lblock 1 mapped to illegal pblock 1 (length 1) [ 88.819321][T11843] Quota error (device loop4): find_next_id: Can't read quota tree block 1 [ 88.883108][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 88.919117][T11864] netlink: 'syz.1.3436': attribute type 1 has an invalid length. [ 89.030178][T11882] device team0 entered promiscuous mode [ 89.031057][T11882] device team_slave_0 entered promiscuous mode [ 89.032226][T11882] device team_slave_1 entered promiscuous mode [ 89.042620][T11882] device syz_tun entered promiscuous mode [ 89.096420][T11892] netlink: 'syz.4.3449': attribute type 3 has an invalid length. [ 89.097723][T11892] netlink: 'syz.4.3449': attribute type 27 has an invalid length. [ 89.160409][T11903] loop1: detected capacity change from 0 to 1024 [ 89.189235][T11903] hfsplus: catalog name length corrupted [ 89.244023][T11910] vhci_hcd: invalid port number 255 [ 89.247244][T11910] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 89.706195][T11968] loop4: detected capacity change from 0 to 4096 [ 90.060043][T12025] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 90.372987][T12065] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 90.407798][T12027] loop4: detected capacity change from 0 to 40427 [ 90.409546][T12027] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 90.410896][T12027] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 90.415531][T12027] F2FS-fs (loop4): invalid crc value [ 90.420366][T12071] loop0: detected capacity change from 0 to 64 [ 90.427324][T12027] F2FS-fs (loop4): Found nat_bits in checkpoint [ 90.453640][T12027] F2FS-fs (loop4): Start checkpoint disabled! [ 90.473967][T12027] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 90.482274][T12027] syz.4.3514: attempt to access beyond end of device [ 90.482274][T12027] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.516314][T12082] loop3: detected capacity change from 0 to 512 [ 90.521580][ T9] kworker/u4:0: attempt to access beyond end of device [ 90.521580][ T9] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 90.537704][T12082] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 90.548657][T12082] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 90.581293][T12086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.583202][T12086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.630885][T12092] loop3: detected capacity change from 0 to 512 [ 90.636547][T12092] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.638392][T12092] EXT4-fs (loop3): Test dummy encryption mode enabled [ 90.650746][T12092] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 90.659781][T12092] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 90.664321][T12092] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.3547: Directory hole found for htree leaf block 0 [ 90.667091][T12092] EXT4-fs (loop3): Remounting filesystem read-only [ 90.688858][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 91.021445][T12148] loop4: detected capacity change from 0 to 128 [ 91.213330][T12180] loop4: detected capacity change from 0 to 128 [ 91.221797][T12180] FAT-fs (loop4): Directory bread(block 162) failed [ 91.234051][T12180] FAT-fs (loop4): Directory bread(block 163) failed [ 91.239802][T12180] FAT-fs (loop4): Directory bread(block 164) failed [ 91.242339][T12180] FAT-fs (loop4): Directory bread(block 165) failed [ 91.247934][T12180] FAT-fs (loop4): Directory bread(block 166) failed [ 91.251161][T12180] FAT-fs (loop4): Directory bread(block 167) failed [ 91.256092][T12180] FAT-fs (loop4): Directory bread(block 168) failed [ 91.261931][T12180] FAT-fs (loop4): Directory bread(block 169) failed [ 91.282896][T12180] FAT-fs (loop4): Directory bread(block 162) failed [ 91.287965][T12180] FAT-fs (loop4): Directory bread(block 163) failed [ 91.298307][T12180] syz.4.3587: attempt to access beyond end of device [ 91.298307][T12180] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 91.300651][T12180] syz.4.3587: attempt to access beyond end of device [ 91.300651][T12180] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 91.515742][T12226] trusted_key: encrypted_key: keylen parameter is missing [ 91.534465][T12227] __nla_validate_parse: 7 callbacks suppressed [ 91.534477][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3608'. [ 91.640084][T12241] xt_TCPMSS: Only works on TCP SYN packets [ 91.779262][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3624'. [ 91.809754][T12269] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3627'. [ 91.823265][T12265] FAT-fs (loop1): Directory bread(block 64) failed [ 91.824910][T12265] FAT-fs (loop1): Directory bread(block 65) failed [ 91.825993][T12265] FAT-fs (loop1): Directory bread(block 66) failed [ 91.827114][T12265] FAT-fs (loop1): Directory bread(block 67) failed [ 91.828092][T12265] FAT-fs (loop1): Directory bread(block 68) failed [ 91.829157][T12265] FAT-fs (loop1): Directory bread(block 69) failed [ 91.833440][T12265] FAT-fs (loop1): Directory bread(block 70) failed [ 91.834602][T12265] FAT-fs (loop1): Directory bread(block 71) failed [ 91.835908][T12265] FAT-fs (loop1): Directory bread(block 72) failed [ 91.836962][T12265] FAT-fs (loop1): Directory bread(block 73) failed [ 91.858624][T12210] XFS (loop2): Mounting V5 Filesystem [ 91.858645][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3629'. [ 91.923635][T12210] XFS (loop2): Ending clean mount [ 91.977091][T12287] FAT-fs (loop0): Directory bread(block 64) failed [ 91.978196][T12287] FAT-fs (loop0): Directory bread(block 65) failed [ 91.979281][T12287] FAT-fs (loop0): Directory bread(block 66) failed [ 91.980367][T12287] FAT-fs (loop0): Directory bread(block 67) failed [ 91.981411][T12287] FAT-fs (loop0): Directory bread(block 68) failed [ 91.982433][T12287] FAT-fs (loop0): Directory bread(block 69) failed [ 91.983556][T12287] FAT-fs (loop0): Directory bread(block 70) failed [ 92.013617][ T4329] XFS (loop2): Unmounting Filesystem [ 92.042928][T12287] FAT-fs (loop0): Directory bread(block 71) failed [ 92.053954][T12287] FAT-fs (loop0): Directory bread(block 72) failed [ 92.055046][T12287] FAT-fs (loop0): Directory bread(block 73) failed [ 92.145493][T12303] validate_nla: 2 callbacks suppressed [ 92.145505][T12303] netlink: 'syz.4.3643': attribute type 10 has an invalid length. [ 92.363243][T12324] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.555469][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.557156][T12335] FAT-fs (loop3): Filesystem has been set read-only [ 92.558225][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.563446][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.577356][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.578843][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.580230][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.581662][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.582995][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.604055][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.605509][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.610677][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.612195][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.618965][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.620705][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.622111][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.634018][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.635510][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.645156][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.646653][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.648004][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.650952][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.664024][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.665508][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.666959][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.671388][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.678062][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.679386][T12335] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 92.721676][T12370] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 92.793621][T12382] IPVS: length: 120 != 8 [ 92.826286][T12384] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3682'. [ 92.967255][T12403] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 92.968831][T12403] FAT-fs (loop0): Filesystem has been set read-only [ 93.167527][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3711'. [ 93.216941][T12437] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 93.451421][T12438] set_capacity_and_notify: 6 callbacks suppressed [ 93.451431][T12438] loop0: detected capacity change from 0 to 32768 [ 93.538538][T12438] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 93.540144][T12438] XFS (loop0): Mounting V5 Filesystem [ 93.592549][T12438] XFS (loop0): Ending clean mount [ 93.606084][T12464] loop2: detected capacity change from 0 to 32768 [ 93.633184][ T4328] XFS (loop0): Unmounting Filesystem [ 93.676253][T12471] loop3: detected capacity change from 0 to 32768 [ 93.678877][T12471] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.3723 (12471) [ 93.692836][T12471] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 93.694681][T12471] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 93.696100][T12471] BTRFS info (device loop3): enabling auto defrag [ 93.697107][T12471] BTRFS info (device loop3): turning off barriers [ 93.698111][T12471] BTRFS info (device loop3): trying to use backup root at mount time [ 93.699687][T12471] BTRFS info (device loop3): unrecognized rescue option 'imetacsums' [ 93.701066][T12471] BTRFS error (device loop3): unrecognized rescue value imetacsums [ 93.706887][T12471] BTRFS error (device loop3): open_ctree failed: -22 [ 93.831930][T12505] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3737'. [ 94.062404][T12545] loop0: detected capacity change from 0 to 64 [ 94.077760][ T4808] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by udevd (4808) [ 94.453052][T12592] loop2: detected capacity change from 0 to 512 [ 94.458715][T12592] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.516886][T12592] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.3778: bad orphan inode 131083 [ 94.519258][T12592] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 94.531935][T12592] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 13: comm syz.2.3778: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=1 [ 94.544650][T12600] netlink: 352 bytes leftover after parsing attributes in process `syz.3.3781'. [ 94.635831][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 94.662381][T12606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3785'. [ 94.836732][T12616] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 94.837812][T12616] [U] J"—e:ÀÆ" [ 94.869853][T12572] loop1: detected capacity change from 0 to 65536 [ 94.926847][T12604] loop3: detected capacity change from 0 to 32768 [ 94.935837][T12604] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.3783 (12604) [ 94.956510][T12572] XFS (loop1): Mounting V5 Filesystem [ 94.979699][T12604] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 94.981378][T12604] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 94.982768][T12604] BTRFS info (device loop3): enabling ssd optimizations [ 94.992544][T12635] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 94.997682][T12604] BTRFS info (device loop3): not using ssd optimizations [ 94.998893][T12604] BTRFS info (device loop3): turning off barriers [ 94.999923][T12604] BTRFS info (device loop3): using free space tree [ 95.005213][T12638] openvswitch: netlink: Missing key (keys=40, expected=100) [ 95.020135][T12572] XFS (loop1): Ending clean mount [ 95.022879][T12572] XFS (loop1): Quotacheck needed: Please wait. [ 95.062147][T12572] XFS (loop1): Quotacheck: Done. [ 95.112254][ T4322] XFS (loop1): Unmounting Filesystem [ 95.117844][T12559] loop4: detected capacity change from 0 to 131072 [ 95.124290][T12559] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 95.125350][T12559] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 95.128423][T12559] F2FS-fs (loop4): invalid crc value [ 95.153685][T12559] F2FS-fs (loop4): Found nat_bits in checkpoint [ 95.179310][T12559] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 95.180458][T12559] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 95.256128][T12559] F2FS-fs (loop4): inconsistent node block, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 95.281880][T12604] BTRFS warning (device loop3): can't clear the compat_ro:1 feature bit while mounted [ 95.335510][ T4321] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 95.445092][T12681] netlink: 'syz.1.3800': attribute type 41 has an invalid length. [ 95.446370][T12681] netlink: 'syz.1.3800': attribute type 4 has an invalid length. [ 95.447671][T12681] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3800'. [ 95.448175][ T4808] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop3 scanned by udevd (4808) [ 95.504473][T12681] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 95.524823][T12691] loop2: detected capacity change from 0 to 8 [ 95.701763][T12705] netlink: 'syz.1.3817': attribute type 1 has an invalid length. [ 95.755658][T12715] ipt_REJECT: TCP_RESET invalid for non-tcp [ 95.893513][T12664] loop0: detected capacity change from 0 to 131072 [ 95.916013][T12664] F2FS-fs (loop0): Test dummy encryption mode enabled [ 95.923548][T12664] F2FS-fs (loop0): invalid crc value [ 95.956857][T12664] F2FS-fs (loop0): Found nat_bits in checkpoint [ 95.978485][T12664] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 95.983590][T12664] F2FS-fs (loop0): Test dummy encryption mode enabled [ 96.017787][T12747] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 96.108429][T12755] overlayfs: missing 'lowerdir' [ 96.168509][T12761] netlink: 'syz.2.3842': attribute type 1 has an invalid length. [ 96.270345][T12729] XFS (loop3): Mounting V5 Filesystem [ 96.307100][T12785] trusted_key: encrypted_key: insufficient parameters specified [ 96.322157][T12781] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 96.333286][T12787] netlink: 'syz.2.3852': attribute type 2 has an invalid length. [ 96.365898][T12781] EXT4-fs error (device loop4): ext4_xattr_block_list:713: inode #15: comm syz.4.3849: corrupted xattr block 33 [ 96.369473][T12729] XFS (loop3): Ending clean mount [ 96.372031][T12729] XFS (loop3): Quotacheck needed: Please wait. [ 96.393584][T12729] XFS (loop3): Quotacheck: Done. [ 96.439537][ T4321] XFS (loop3): Unmounting Filesystem [ 96.439721][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 96.442302][T12793] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.509310][T12797] netlink: 'syz.0.3856': attribute type 46 has an invalid length. [ 96.778699][T12834] __nla_validate_parse: 2 callbacks suppressed [ 96.778711][T12834] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3875'. [ 96.781131][T12834] tc_dump_action: action bad kind [ 96.792660][T12835] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 96.882392][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 96.930658][T12857] xt_TCPMSS: Only works on TCP SYN packets [ 97.005617][T12868] CIFS mount error: No usable UNC path provided in device string! [ 97.005617][T12868] [ 97.005633][T12868] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 97.216832][T12899] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 97.223549][T12901] block nbd1: NBD_DISCONNECT [ 97.265867][T12903] NILFS (loop2): invalid segment: Checksum error in segment payload [ 97.275285][T12907] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3909'. [ 97.279773][T12903] NILFS (loop2): trying rollback from an earlier position [ 97.312741][T12903] NILFS (loop2): recovery complete [ 97.322359][T12911] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.354101][T12915] netlink: 'syz.3.3911': attribute type 41 has an invalid length. [ 97.355458][T12915] netlink: 'syz.3.3911': attribute type 4 has an invalid length. [ 97.356740][T12915] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3911'. [ 97.385674][T12915] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 97.495940][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3916'. [ 97.648319][T12910] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 97.750244][T12968] device gtp0 entered promiscuous mode [ 97.860105][T12981] CIFS: VFS: Malformed UNC in devname [ 97.875387][T12985] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3942'. [ 97.961771][ T4314] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 98.142291][T13028] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 98.153052][T13030] device ip6tnl3 entered promiscuous mode [ 98.201334][T13035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3965'. [ 98.211590][T13038] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3968'. [ 98.215852][T13039] netlink: 'syz.4.3967': attribute type 21 has an invalid length. [ 98.217137][T13039] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3967'. [ 98.218633][T13039] netlink: 'syz.4.3967': attribute type 5 has an invalid length. [ 98.219880][T13039] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3967'. [ 98.221412][T13038] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3968'. [ 98.222703][T13038] netlink: 'syz.3.3968': attribute type 6 has an invalid length. [ 98.234016][T13038] netlink: 'syz.3.3968': attribute type 5 has an invalid length. [ 98.419154][T13061] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 98.451819][T13061] ntfs3: loop3: ino=5, "/" directory corrupted [ 98.453051][T13061] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 98.469648][T13075] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 98.557832][T13088] set_capacity_and_notify: 8 callbacks suppressed [ 98.557842][T13088] loop3: detected capacity change from 0 to 64 [ 98.564712][T13088] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 98.639777][ T27] audit: type=1400 audit(32784.068:10): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13101 comm="syz.3.3999" [ 98.673159][T13105] loop0: detected capacity change from 0 to 1024 [ 98.718851][T13113] loop2: detected capacity change from 0 to 256 [ 98.726727][T13113] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d) [ 98.729249][ T9] hfsplus: b-tree write err: -5, ino 25 [ 98.730238][ T9] hfsplus: b-tree write err: -5, ino 4 [ 98.731111][ T9] hfsplus: b-tree write err: -5, ino 2 [ 98.779694][T13113] exFAT-fs (loop2): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 98.790411][T13113] exFAT-fs (loop2): Filesystem has been set read-only [ 98.817683][T13123] random: crng reseeded on system resumption [ 98.860889][T13123] Restarting kernel threads ... done. [ 99.010272][T13109] loop3: detected capacity change from 0 to 40427 [ 99.024876][T13109] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x3ffff [ 99.026180][T13109] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x724 [ 99.030213][T13109] F2FS-fs (loop3): invalid crc value [ 99.051100][T13109] F2FS-fs (loop3): Found nat_bits in checkpoint [ 99.063805][T13109] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x54c/0x884 [ 99.082831][T13109] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 99.111052][T13109] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x110/0x8e4 [ 99.298924][T13179] overlayfs: unrecognized mount option "\" or missing value [ 99.381047][T13187] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.389540][T13187] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 99.436457][T13160] loop2: detected capacity change from 0 to 32768 [ 99.442103][T13160] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 99.443575][T13160] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 99.469498][T13160] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 99.473455][ T4398] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 99.474589][ T4398] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 99.518735][ T4398] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 44ms [ 99.520055][ T4398] gfs2: fsid=syz:syz.0: jid=0: Done [ 99.528594][T13160] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 99.754547][T13234] netlink: 'syz.4.4063': attribute type 1 has an invalid length. [ 99.787844][T13223] infiniband syz0: set active [ 99.788909][T13223] infiniband syz0: added bond0 [ 99.802399][T13238] xt_hashlimit: size too large, truncated to 1048576 [ 99.825637][T13223] RDS/IB: syz0: added [ 99.826670][T13223] smc: adding ib device syz0 with port count 1 [ 99.827762][T13223] smc: ib device syz0 port 1 has pnetid [ 100.201067][T13276] overlayfs: missing 'lowerdir' [ 100.285491][T13287] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 100.376120][T13302] loop0: detected capacity change from 0 to 512 [ 100.394707][T13302] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 100.462811][T13316] loop1: detected capacity change from 0 to 128 [ 100.484464][T13316] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 100.510905][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 100.598763][T13337] x_tables: unsorted underflow at hook 3 [ 100.612049][T13335] loop0: detected capacity change from 0 to 4096 [ 100.643143][T13335] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 100.645845][T13335] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 100.659846][T13335] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 100.661705][T13335] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 100.663780][T13335] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 100.664095][T13345] netlink: 'syz.4.4115': attribute type 1 has an invalid length. [ 100.670599][T13335] ntfs: volume version 3.1. [ 100.673268][T13335] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 100.680182][T13335] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 100.686942][T13335] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 100.688604][T13335] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 100.711868][T13341] loop3: detected capacity change from 0 to 4096 [ 100.722561][T13341] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 100.780223][T13355] netlink: 'syz.1.4122': attribute type 15 has an invalid length. [ 100.793384][T13359] loop3: detected capacity change from 0 to 16 [ 100.806485][T13359] erofs: (device loop3): mounted with root inode @ nid 36. [ 100.883892][T13374] syz.4.4128 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 101.022212][T13390] 9p: Unknown access argument z: -22 [ 101.044012][T13397] Cannot find add_set index 0 as target [ 101.100608][T13407] netlink: 'syz.0.4147': attribute type 5 has an invalid length. [ 101.109971][T13407] device ip6erspan0 entered promiscuous mode [ 101.291987][T13437] xt_policy: neither incoming nor outgoing policy selected [ 101.543629][T13469] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 101.595588][ T4332] SQUASHFS error: Unable to read directory block [1d0:22] [ 101.601573][ T4332] SQUASHFS error: Unable to read directory block [1d0:22] [ 101.654086][T13479] erofs: (device loop2): mounted with root inode @ nid 36. [ 101.806394][T13468] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.807594][T13468] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.836935][T13468] infiniband syz0: set down [ 102.378671][T13468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.420607][T13468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.569346][T13477] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 102.571563][T13477] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 102.577523][T13477] F2FS-fs (loop0): invalid crc value [ 102.584258][T13477] F2FS-fs (loop0): Found nat_bits in checkpoint [ 102.606197][T13477] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 102.608062][T13477] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 102.743714][T13468] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.745304][T13468] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.746630][T13468] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.748128][T13468] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.855929][T12677] bond0 speed is unknown, defaulting to 1000 [ 102.855952][T13491] bond0: Error: Cannot enslave bond to itself. [ 102.858070][ T4367] bond0 speed is unknown, defaulting to 1000 [ 102.859747][T13499] netlink: 'syz.1.4192': attribute type 21 has an invalid length. [ 102.861115][T13499] __nla_validate_parse: 10 callbacks suppressed [ 102.861124][T13499] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4192'. [ 102.863750][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4193'. [ 102.930446][T13517] erofs: (device loop4): mounted with root inode @ nid 36. [ 102.998421][T13531] Error parsing options; rc = [-22] [ 103.032490][T13533] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 103.038968][T13533] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.071210][T13533] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 103.072900][T13533] UDF-fs: error (device loop2): udf_count_free_bitmap: udf_count_free failed [ 103.136977][ T4329] UDF-fs: error (device loop2): udf_read_inode: (ino 104) failed !bh [ 103.138543][ T4329] UDF-fs: error (device loop2): udf_read_inode: (ino 104) failed !bh [ 103.260028][T13563] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 103.272725][T13563] EXT4-fs (loop1): orphan cleanup on readonly fs [ 103.277106][T13563] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:511: comm syz.1.4223: Block bitmap for bg 0 marked uninitialized [ 103.284220][T13563] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 103.291211][T13563] EXT4-fs (loop1): 1 orphan inode deleted [ 103.292159][T13563] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 103.321668][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 103.700483][ T4326] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.703706][ T4326] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.705917][ T4326] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.710312][ T4326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.711836][ T4326] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 103.713268][ T4326] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.717244][T13602] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 103.725887][ T4327] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.730335][ T4327] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.732881][ T4327] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.735812][ T4327] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.738736][ T4327] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 103.740185][ T4327] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.827194][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.861778][T13626] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4253'. [ 103.958014][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.992250][T13612] bond0 speed is unknown, defaulting to 1000 [ 104.055545][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.058562][T13639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4258'. [ 104.154620][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.243087][T13612] chnl_net:caif_netlink_parms(): no params data found [ 104.285028][T13612] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.286468][T13612] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.288174][T13612] device bridge_slave_0 entered promiscuous mode [ 104.290630][T13612] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.291763][T13612] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.293428][T13612] device bridge_slave_1 entered promiscuous mode [ 104.302023][T13612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.305503][T13612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.319252][T13612] team0: Port device team_slave_0 added [ 104.322137][T13612] team0: Port device team_slave_1 added [ 104.337048][T13612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.338257][T13612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.343958][T13612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.346521][T13612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.347794][T13612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.359625][T13612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.415789][T13612] device hsr_slave_0 entered promiscuous mode [ 104.444367][T13612] device hsr_slave_1 entered promiscuous mode [ 104.456677][T13689] set_capacity_and_notify: 8 callbacks suppressed [ 104.456685][T13689] loop0: detected capacity change from 0 to 1024 [ 104.459598][T13689] EXT4-fs: Ignoring removed bh option [ 104.463536][T13689] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 104.465415][T13689] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 104.467942][T13689] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #3: comm syz.0.4277: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 104.471000][T13689] EXT4-fs (loop0): no journal found [ 104.471829][T13689] EXT4-fs (loop0): can't get journal size [ 104.473452][T13689] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 104.476507][T13612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.477731][T13612] Cannot create hsr debugfs directory [ 104.532354][T13693] loop3: detected capacity change from 0 to 512 [ 104.567590][T13693] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 104.571019][T13697] loop1: detected capacity change from 0 to 512 [ 104.572537][T13697] EXT4-fs: inline encryption not supported [ 104.573494][T13697] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.575937][T13693] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 104.577313][T13693] System zones: 0-1, 15-15, 18-18, 34-34 [ 104.578620][T13693] EXT4-fs (loop3): orphan cleanup on readonly fs [ 104.579668][T13693] __quota_error: 7 callbacks suppressed [ 104.579677][T13693] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 104.582004][T13693] EXT4-fs warning (device loop3): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 104.596370][T13697] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.598449][T13697] EXT4-fs (loop1): Test dummy encryption mode enabled [ 104.600603][T13693] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 104.602261][T13693] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.4279: bad orphan inode 16 [ 104.604202][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 104.610603][T13693] ext4_test_bit(bit=15, block=18) = 1 [ 104.611490][T13693] is_bad_inode(inode)=0 [ 104.612092][T13693] NEXT_ORPHAN(inode)=0 [ 104.612672][T13693] max_ino=32 [ 104.613126][T13693] i_nlink=2 [ 104.613638][T13693] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 104.634773][T13697] EXT4-fs (loop1): orphan cleanup on readonly fs [ 104.635896][T13697] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.4280: inode #13: comm syz.1.4280: iget: illegal inode # [ 104.638314][T13697] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.4280: couldn't read orphan inode 13 (err -117) [ 104.641978][T13697] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 104.649409][T13697] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 104.669948][T13693] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 104.688321][T13612] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.709321][T13697] EXT4-fs error (device loop1): __ext4_remount:6644: comm syz.1.4280: Abort forced by user [ 104.713585][T13697] EXT4-fs (loop1): Remounting filesystem read-only [ 104.714749][T13697] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 104.740261][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 104.760047][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 104.768700][T13612] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.787883][T13612] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.020918][T13724] loop0: detected capacity change from 0 to 32768 [ 105.045856][T13724] (syz.0.4286,13724,0):ocfs2_clear_journal_error:1114 ERROR: File system error 1 recorded in journal 0. [ 105.048028][T13724] (syz.0.4286,13724,0):ocfs2_clear_journal_error:1116 ERROR: File system on device loop0 needs checking. [ 105.051292][T13724] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 105.065499][T13724] (syz.0.4286,13724,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=32, inode=17057, rec_len=280, name_len=10 [ 105.070188][T13612] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.071356][T13724] (syz.0.4286,13724,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 105.072761][T13724] (syz.0.4286,13724,0):ocfs2_symlink:1864 ERROR: status = -2 [ 105.076726][T13724] (syz.0.4286,13724,0):ocfs2_symlink:2065 ERROR: status = -2 [ 105.091398][ T4328] ocfs2: Unmounting device (7,0) on (node local) [ 105.200675][T13769] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4301'. [ 105.317305][T13612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.395354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.398864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.403695][T13612] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.408970][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.410765][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.412330][ T1614] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.413511][ T1614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.423364][T13799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4315'. [ 105.428720][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.498520][T13808] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4318'. [ 105.607322][T13816] loop0: detected capacity change from 0 to 4096 [ 105.609286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.610930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.612478][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.613663][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.626075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.629879][T13816] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 105.642757][ T1572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.650861][T13816] ntfs3: loop0: Failed to load $Extend. [ 105.652106][ T1572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.654766][ T1572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.656566][ T1572] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.671025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.673242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.748984][T13612] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.751611][T13612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.754891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.756535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.758118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.759665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.764136][ T4326] Bluetooth: hci3: command 0x0409 tx timeout [ 105.773493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.046173][T13870] loop3: detected capacity change from 0 to 512 [ 106.053401][T13870] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.068609][T13870] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 106.069931][T13870] System zones: 1-12 [ 106.090318][T13612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.092775][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.094393][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.120888][T13870] EXT4-fs (loop3): 1 truncate cleaned up [ 106.145829][T13870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.222270][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 106.260308][T13893] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4348'. [ 106.270288][T13897] netlink: 'syz.3.4347': attribute type 10 has an invalid length. [ 106.276605][T13897] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4347'. [ 106.311830][T13897] netlink: 'syz.3.4347': attribute type 10 has an invalid length. [ 106.313114][T13897] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4347'. [ 106.341505][T13906] loop4: detected capacity change from 0 to 1024 [ 106.452126][T13912] loop3: detected capacity change from 0 to 4096 [ 106.479693][ T1614] hfsplus: b-tree write err: -5, ino 25 [ 106.480701][ T1614] hfsplus: b-tree write err: -5, ino 4 [ 106.481643][ T1614] hfsplus: b-tree write err: -5, ino 2 [ 106.751674][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.753304][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.754387][T13942] loop3: detected capacity change from 0 to 1024 [ 106.804034][T13945] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.819285][T13612] device veth0_vlan entered promiscuous mode [ 106.822542][T13612] device veth1_vlan entered promiscuous mode [ 106.832262][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.834001][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.835603][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.837688][T13849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.839152][T13849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.848382][ T9] hfsplus: b-tree write err: -5, ino 25 [ 106.849371][ T9] hfsplus: b-tree write err: -5, ino 4 [ 106.850367][ T9] hfsplus: b-tree write err: -5, ino 2 [ 106.851339][ T9] hfsplus: b-tree write err: -5, ino 26 [ 107.106022][T13849] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.107625][T13849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.109197][T13849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.119423][T13612] device veth0_macvtap entered promiscuous mode [ 107.125798][T13612] device veth1_macvtap entered promiscuous mode [ 107.184846][T13612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.187001][T13612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.201229][T13612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.202944][T13612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.210642][T13612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.212350][T13612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.221880][T13612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.224510][T13612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.229819][T13612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.241470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.243087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.245345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.246822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.258766][T13612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.260525][T13612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.262219][T13612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.272485][T13612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.288160][T13612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.289791][T13612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.291298][T13612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.292843][T13612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.299622][T13612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.300839][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.302673][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.323033][ T11] device hsr_slave_0 left promiscuous mode [ 107.354059][ T11] device hsr_slave_1 left promiscuous mode [ 107.404569][T14013] netlink: 'syz.4.4396': attribute type 1 has an invalid length. [ 107.409334][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.410597][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.412579][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.414058][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.415787][ T11] batman_adv: batadv0: Removing interface: macvtap0 [ 107.417221][ T11] device bridge_slave_1 left promiscuous mode [ 107.419750][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.466155][ T11] device bridge_slave_0 left promiscuous mode [ 107.467277][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.527622][T14023] loop3: detected capacity change from 0 to 16 [ 107.529560][T14023] erofs: (device loop3): mounted with root inode @ nid 36. [ 107.574964][ T11] device veth1_macvtap left promiscuous mode [ 107.577286][ T11] device veth1_vlan left promiscuous mode [ 107.578327][ T11] device veth0_vlan left promiscuous mode [ 107.722755][T14039] exfat: Deprecated parameter 'namecase' [ 107.728129][T14039] exfat: Deprecated parameter 'namecase' [ 107.749303][T14039] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 107.845392][ T4327] Bluetooth: hci3: command 0x041b tx timeout [ 107.905664][ T11] bond1 (unregistering): Released all slaves [ 108.095768][T14063] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.923887][ T4326] Bluetooth: hci3: command 0x040f tx timeout [ 110.148455][ T11] team0 (unregistering): Port device team_slave_1 removed [ 110.514416][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.734384][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.003938][ T4327] Bluetooth: hci3: command 0x0419 tx timeout [ 112.318436][ T11] bond0 (unregistering): Released all slaves [ 112.663083][T14005] device bridge1 entered promiscuous mode [ 112.665938][T13612] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.667450][T13612] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.668808][T13612] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.670189][T13612] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.682141][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4404'. [ 112.683509][T14031] device netdevsim0 left promiscuous mode [ 112.821573][T14079] set_capacity_and_notify: 2 callbacks suppressed [ 112.821589][T14079] loop4: detected capacity change from 0 to 8192 [ 112.929246][ T7522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.930663][ T7522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.933358][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.963033][ T1572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.964523][ T1572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.966276][ T1572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.003328][T14102] netlink: 'syz.1.4437': attribute type 1 has an invalid length. [ 113.014337][T14102] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4437'. [ 113.429942][T14126] loop4: detected capacity change from 0 to 32768 [ 113.437577][T14159] loop0: detected capacity change from 0 to 2048 [ 113.548084][T14126] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 113.549770][T14126] XFS (loop4): Mounting V5 Filesystem [ 113.593479][T14126] XFS (loop4): Ending clean mount [ 113.605975][T14126] XFS (loop4): Quotacheck needed: Please wait. [ 113.641053][T14190] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4470'. [ 113.669484][T14126] XFS (loop4): Quotacheck: Done. [ 113.678938][T14196] netlink: 'syz.0.4471': attribute type 1 has an invalid length. [ 113.680189][T14196] netlink: 'syz.0.4471': attribute type 3 has an invalid length. [ 113.681500][T14196] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4471'. [ 113.802521][ T4332] XFS (loop4): Unmounting Filesystem [ 113.873800][T14218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4480'. [ 113.931164][T14226] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4483'. [ 113.936679][T14226] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4483'. [ 113.938294][T14226] netlink: 78 bytes leftover after parsing attributes in process `syz.3.4483'. [ 114.042073][T14244] netlink: 388 bytes leftover after parsing attributes in process `syz.4.4477'. [ 114.107504][T14255] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4492'. [ 114.177037][T14263] netlink: 'syz.0.4497': attribute type 21 has an invalid length. [ 114.362806][T14291] ip6t_rpfilter: unknown options [ 114.406250][T14297] loop1: detected capacity change from 0 to 64 [ 114.429734][T14295] loop0: detected capacity change from 0 to 4096 [ 114.493056][T14307] loop1: detected capacity change from 0 to 1024 [ 114.572358][ T9] hfsplus: b-tree write err: -5, ino 25 [ 114.573620][ T9] hfsplus: b-tree write err: -5, ino 4 [ 114.577702][ T9] hfsplus: b-tree write err: -5, ino 2 [ 114.579159][ T9] hfsplus: b-tree write err: -5, ino 26 [ 114.599770][T14309] team0: Port device team_slave_0 removed [ 114.600931][T14309] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 114.640305][T14319] xt_connbytes: Forcing CT accounting to be enabled [ 114.643744][T14287] loop3: detected capacity change from 0 to 32768 [ 114.676613][T14287] ERROR: (device loop3): diAllocAG: error reading iag [ 114.676613][T14287] [ 114.678329][T14287] ERROR: (device loop3): remounting filesystem as read-only [ 114.679545][T14287] ialloc: diAlloc returned -5! [ 114.842074][T14345] loop1: detected capacity change from 0 to 512 [ 114.856718][T14345] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 114.856953][T14352] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 114.942895][T14362] netlink: 'syz.4.4540': attribute type 3 has an invalid length. [ 115.012251][T14371] loop1: detected capacity change from 0 to 1024 [ 115.059546][ T11] hfsplus: b-tree write err: -5, ino 25 [ 115.060623][ T11] hfsplus: b-tree write err: -5, ino 4 [ 115.061518][ T11] hfsplus: b-tree write err: -5, ino 2 [ 115.272294][T14415] device gre1 entered promiscuous mode [ 115.277671][T14419] netlink: 'syz.5.4561': attribute type 32 has an invalid length. [ 115.279053][T14419] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 115.379488][T14432] loop1: detected capacity change from 0 to 1764 [ 115.529867][T14443] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 115.956937][T14501] sctp: [Deprecated]: syz.5.4595 (pid 14501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.956937][T14501] Use struct sctp_sack_info instead [ 116.172160][T14482] XFS (loop4): Mounting V5 Filesystem [ 116.190832][T14523] netlink: 'syz.0.4604': attribute type 4 has an invalid length. [ 116.226824][T14482] XFS (loop4): Ending clean mount [ 116.231005][T14505] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.4598 (14505) [ 116.232380][T14482] XFS (loop4): Quotacheck needed: Please wait. [ 116.246216][T14505] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.248088][T14505] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 116.249573][T14505] BTRFS info (device loop1): using free space tree [ 116.279972][T14482] XFS (loop4): Quotacheck: Done. [ 116.286215][T14505] BTRFS info (device loop1): enabling ssd optimizations [ 116.381465][ T4332] XFS (loop4): Unmounting Filesystem [ 116.424719][ T4322] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.518538][T14085] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (14085) [ 116.526721][T14562] xt_TCPMSS: Only works on TCP SYN packets [ 116.681252][T14554] (syz.0.4611,14554,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.686705][T14554] (syz.0.4611,14554,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.715297][T14554] JBD2: Ignoring recovery information on journal [ 116.840935][T14554] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 116.922858][T14595] EXT2-fs (loop5): (no)acl options not supported [ 116.935361][T14595] EXT2-fs (loop5): warning: mounting ext3 filesystem as ext2 [ 116.955660][ T4328] ocfs2: Unmounting device (7,0) on (node local) [ 117.014114][T14606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.015395][T14606] IPv6: NLM_F_CREATE should be set when creating new route [ 117.016599][T14606] IPv6: NLM_F_CREATE should be set when creating new route [ 117.017844][T14606] IPv6: NLM_F_CREATE should be set when creating new route [ 117.275617][T14411] F2FS-fs (loop3): invalid crc value [ 117.310025][T14411] F2FS-fs (loop3): Found nat_bits in checkpoint [ 117.344002][T14411] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 117.502481][T14672] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.587136][T14678] nvme_fabrics: unknown parameter or missing value 'unlock all' in ctrl creation request [ 117.605491][ T4327] Bluetooth: hci0: command 0x080f tx timeout [ 117.762833][T14702] netlink: zone id is out of range [ 117.763737][T14702] netlink: zone id is out of range [ 117.779745][T14706] binfmt_misc: register: failed to install interpreter file ./file0 [ 117.785269][T14702] netlink: zone id is out of range [ 117.786135][T14702] netlink: zone id is out of range [ 117.786969][T14702] netlink: zone id is out of range [ 117.787785][T14702] netlink: zone id is out of range [ 117.788511][T14702] netlink: zone id is out of range [ 117.789322][T14702] netlink: zone id is out of range [ 117.792171][T14705] 9pnet_fd: p9_fd_create_unix (14705): problem connecting socket: ./file1: -111 [ 117.906036][T14719] netlink: 'syz.4.4683': attribute type 8 has an invalid length. [ 118.077518][T14739] __nla_validate_parse: 9 callbacks suppressed [ 118.077535][T14739] netlink: 264 bytes leftover after parsing attributes in process `syz.3.4694'. [ 118.103374][T14745] set_capacity_and_notify: 7 callbacks suppressed [ 118.103385][T14745] loop4: detected capacity change from 0 to 256 [ 118.129235][T14745] FAT-fs (loop4): Directory bread(block 64) failed [ 118.130325][T14745] FAT-fs (loop4): Directory bread(block 65) failed [ 118.131576][T14745] FAT-fs (loop4): Directory bread(block 66) failed [ 118.132573][T14745] FAT-fs (loop4): Directory bread(block 67) failed [ 118.133626][T14745] FAT-fs (loop4): Directory bread(block 68) failed [ 118.145834][T14745] FAT-fs (loop4): Directory bread(block 69) failed [ 118.146993][T14745] FAT-fs (loop4): Directory bread(block 70) failed [ 118.148002][T14745] FAT-fs (loop4): Directory bread(block 71) failed [ 118.149163][T14745] FAT-fs (loop4): Directory bread(block 72) failed [ 118.150229][T14745] FAT-fs (loop4): Directory bread(block 73) failed [ 118.237880][T14762] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4705'. [ 118.421708][T14793] xt_hashlimit: max too large, truncated to 1048576 [ 118.497985][T14805] loop0: detected capacity change from 0 to 1024 [ 118.552774][ T11] hfsplus: b-tree write err: -5, ino 25 [ 118.553944][ T11] hfsplus: b-tree write err: -5, ino 4 [ 118.554899][ T11] hfsplus: b-tree write err: -5, ino 2 [ 118.589797][T14817] xt_TCPMSS: Only works on TCP SYN packets [ 118.990425][T14884] device bridge0 entered promiscuous mode [ 119.005098][T14885] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 119.006279][T14885] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 119.007475][T14885] vhci_hcd: invalid port number 255 [ 119.008422][T14885] vhci_hcd: invalid port number 255 [ 119.102873][T14901] loop5: detected capacity change from 0 to 1024 [ 119.258901][T14923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4785'. [ 119.356400][T14933] delete_channel: no stack [ 119.435889][T14946] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4794'. [ 119.440396][T14917] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.441673][T14917] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.465414][T14917] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 119.498591][T14951] loop0: detected capacity change from 0 to 64 [ 119.969654][T15019] block device autoloading is deprecated and will be removed. [ 120.127768][T15043] netlink: 272 bytes leftover after parsing attributes in process `syz.4.4843'. [ 120.263949][T15026] loop3: detected capacity change from 0 to 32768 [ 120.273146][T15026] ERROR: (device loop3): diWrite: ixpxd invalid [ 120.273146][T15026] [ 120.285940][T15026] ERROR: (device loop3): remounting filesystem as read-only [ 120.287427][T15026] ERROR: (device loop3): txAbort: [ 120.287427][T15026] [ 120.321437][T15068] loop5: detected capacity change from 0 to 64 [ 120.342324][T15068] syz.5.4856: attempt to access beyond end of device [ 120.342324][T15068] loop5: rw=0, sector=130062, nr_sectors = 2 limit=64 [ 120.344556][T15068] Buffer I/O error on dev loop5, logical block 65031, async page read [ 120.346011][T15068] syz.5.4856: attempt to access beyond end of device [ 120.346011][T15068] loop5: rw=0, sector=130062, nr_sectors = 2 limit=64 [ 120.348209][T15068] Buffer I/O error on dev loop5, logical block 65031, async page read [ 120.415240][T15076] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4859'. [ 120.416660][T15076] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4859'. [ 120.464377][T15081] SET target dimension over the limit! [ 120.496283][T15052] loop1: detected capacity change from 0 to 32768 [ 120.575771][T15052] XFS (loop1): Mounting V5 Filesystem [ 120.610714][T15052] XFS (loop1): Ending clean mount [ 120.613456][T15052] XFS (loop1): Quotacheck needed: Please wait. [ 120.649146][T15052] XFS (loop1): Quotacheck: Done. [ 120.671123][T15066] loop4: detected capacity change from 0 to 32768 [ 120.730225][T15066] XFS (loop4): Mounting V5 Filesystem [ 120.790778][ T4322] XFS (loop1): Unmounting Filesystem [ 120.810857][T15066] XFS (loop4): Ending clean mount [ 120.812598][T15066] XFS (loop4): Quotacheck needed: Please wait. [ 120.819722][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4873'. [ 120.821172][T15122] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4873'. [ 120.851604][T15066] XFS (loop4): Quotacheck: Done. [ 120.958190][T15130] loop3: detected capacity change from 0 to 512 [ 120.971649][ T4332] XFS (loop4): Unmounting Filesystem [ 121.152528][T15151] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 121.160910][T15148] loop5: detected capacity change from 0 to 2048 [ 121.230242][T15148] loop5: p3 p4 < > [ 121.231345][T15148] loop5: p3 start 33554432 is beyond EOD, truncated [ 121.364004][ T4327] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.500074][T15189] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 121.504179][T15189] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 121.505745][T15189] overlayfs: missing 'lowerdir' [ 121.519533][T15160] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x3ffff [ 121.520904][T15160] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 121.529440][T15160] F2FS-fs (loop3): invalid crc value [ 121.549671][T15160] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.556038][T15160] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x54c/0x884 [ 121.578948][T15160] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 121.701491][T15213] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 121.738345][T15172] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 121.741078][T15172] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 121.752190][T15218] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 121.771231][T15172] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 121.774566][ T1513] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 121.775618][ T1513] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 121.801955][ T1513] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 26ms [ 121.817591][ T1513] gfs2: fsid=syz:syz.0: jid=0: Done [ 121.821422][T15172] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 121.959270][T15245] netlink: 'syz.1.4930': attribute type 3 has an invalid length. [ 121.960803][T15245] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4930'. [ 121.964039][T15240] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.223253][T15278] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.246244][T15278] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.247498][T15278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.361104][T15294] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 122.362364][T15294] FAT-fs (loop1): Filesystem has been set read-only [ 122.489740][T15285] (syz.3.4949,15285,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.493583][T15285] (syz.3.4949,15285,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.517626][T15285] JBD2: Ignoring recovery information on journal [ 122.548837][T15285] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 122.623217][T15329] netlink: 'syz.5.4968': attribute type 1 has an invalid length. [ 122.639979][T15330] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 122.678621][ T4321] ocfs2: Unmounting device (7,3) on (node local) [ 122.789771][T15350] erofs: (device loop1): mounted with root inode @ nid 36. [ 122.796574][T15350] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 123.033305][T15389] device gtp1 entered promiscuous mode [ 123.049749][T15393] netlink: 'syz.4.4999': attribute type 11 has an invalid length. [ 123.089718][T15397] netlink: 'syz.5.5001': attribute type 5 has an invalid length. [ 123.106621][T15397] __nla_validate_parse: 3 callbacks suppressed [ 123.106638][T15397] netlink: 176 bytes leftover after parsing attributes in process `syz.5.5001'. [ 123.242742][T15423] set_capacity_and_notify: 8 callbacks suppressed [ 123.242752][T15423] loop1: detected capacity change from 0 to 128 [ 123.267977][T15424] netlink: 'syz.4.5014': attribute type 2 has an invalid length. [ 123.431370][T15449] netlink: 'syz.4.5024': attribute type 1 has an invalid length. [ 123.432708][T15449] netlink: 216 bytes leftover after parsing attributes in process `syz.4.5024'. [ 123.440814][T15449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5024'. [ 123.446418][ T4327] Bluetooth: hci3: command 0x0406 tx timeout [ 123.495878][T15456] xt_time: unknown flags 0x18 [ 123.546145][T15465] device wlan0 entered promiscuous mode [ 123.547241][T15465] net_ratelimit: 357 callbacks suppressed [ 123.547248][T15465] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 123.691795][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5040'. [ 123.794527][T15506] netlink: 'syz.5.5051': attribute type 3 has an invalid length. [ 123.812984][T15504] loop4: detected capacity change from 0 to 2048 [ 123.828607][T15504] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.931393][T15526] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 124.009637][T15536] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5063'. [ 124.032882][T15538] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (65) [ 124.039405][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5066'. [ 124.065660][T15546] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 124.079845][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5068'. [ 124.178498][T15563] loop0: detected capacity change from 0 to 256 [ 124.205219][T15563] FAT-fs (loop0): Directory bread(block 64) failed [ 124.206307][T15563] FAT-fs (loop0): Directory bread(block 65) failed [ 124.207325][T15563] FAT-fs (loop0): Directory bread(block 66) failed [ 124.208434][T15563] FAT-fs (loop0): Directory bread(block 67) failed [ 124.209497][T15563] FAT-fs (loop0): Directory bread(block 68) failed [ 124.210604][T15563] FAT-fs (loop0): Directory bread(block 69) failed [ 124.211659][T15563] FAT-fs (loop0): Directory bread(block 70) failed [ 124.212785][T15563] FAT-fs (loop0): Directory bread(block 71) failed [ 124.231064][T15567] loop5: detected capacity change from 0 to 4096 [ 124.236754][T15563] FAT-fs (loop0): Directory bread(block 72) failed [ 124.237897][T15563] FAT-fs (loop0): Directory bread(block 73) failed [ 124.257702][T15567] ntfs: volume version 3.1. [ 124.260705][T15567] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 124.260727][T15563] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 124.262650][T15567] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 124.274056][T15567] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 124.284675][T15567] ntfs: (device loop5): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 124.288136][T15567] ntfs: (device loop5): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 124.289819][T15567] ntfs: (device loop5): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 124.418239][T15561] loop3: detected capacity change from 0 to 32768 [ 124.447652][T15561] JBD2: Ignoring recovery information on journal [ 124.480407][T15561] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 124.493963][T15561] OCFS2: ERROR (device loop3): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 4106 [ 124.496883][T15561] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 124.498334][T15561] OCFS2: File system is now read-only. [ 124.499203][T15561] (syz.3.5075,15561,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 124.500440][T15561] (syz.3.5075,15561,0):ocfs2_reserve_new_inode:1091 ERROR: status = -30 [ 124.501808][T15561] (syz.3.5075,15561,0):ocfs2_reserve_new_inode:1114 ERROR: status = -30 [ 124.503174][T15561] (syz.3.5075,15561,0):ocfs2_mknod:306 ERROR: status = -30 [ 124.514103][T15561] (syz.3.5075,15561,1):ocfs2_mknod:502 ERROR: status = -30 [ 124.515421][T15561] (syz.3.5075,15561,1):ocfs2_create:676 ERROR: status = -30 [ 124.545294][ T4321] ocfs2: Unmounting device (7,3) on (node local) [ 124.565636][T15608] xt_limit: Overflow, try lower: 0/0 [ 124.577812][T15610] netlink: 'syz.3.5098': attribute type 5 has an invalid length. [ 124.591379][T15612] loop4: detected capacity change from 0 to 16 [ 124.612195][T15612] erofs: (device loop4): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 124.643980][T15618] tmpfs: Bad value for 'mpol' [ 124.686951][T15623] dlm: no locking on control device [ 124.713180][T15627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5105'. [ 124.751952][T15633] loop3: detected capacity change from 0 to 512 [ 124.817960][T15633] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 124.860028][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 124.896253][T15649] netlink: 'syz.4.5113': attribute type 2 has an invalid length. [ 124.897571][T15649] netlink: 'syz.4.5113': attribute type 1 has an invalid length. [ 124.977495][T15663] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 125.147897][T15685] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 125.162517][T15652] loop5: detected capacity change from 0 to 32768 [ 125.180028][T15652] (syz.5.5117,15652,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 125.186447][T15652] (syz.5.5117,15652,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 125.223361][T15652] JBD2: Ignoring recovery information on journal [ 125.232558][T15695] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5138'. [ 125.261354][T15675] loop3: detected capacity change from 0 to 32768 [ 125.285349][T15652] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 125.331598][T15675] XFS (loop3): Mounting V5 Filesystem [ 125.359910][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5139'. [ 125.395983][T15711] loop1: detected capacity change from 0 to 2048 [ 125.408851][T15675] XFS (loop3): Ending clean mount [ 125.446909][T15714] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.449393][T15711] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 125.456947][T15711] Remounting filesystem read-only [ 125.473507][T13612] ocfs2: Unmounting device (7,5) on (node local) [ 125.491111][ T4321] XFS (loop3): Unmounting Filesystem [ 125.864938][T15736] (syz.4.5154,15736,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 125.868935][T15736] (syz.4.5154,15736,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 125.903559][T15736] JBD2: Ignoring recovery information on journal [ 125.926446][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.927529][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.984478][T15736] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 126.141078][ T4332] ocfs2: Unmounting device (7,4) on (node local) [ 126.450824][T15839] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 126.587503][T15861] hfs: invalid catalog max_key_len 1 [ 126.588893][T15861] hfs: unable to open catalog tree [ 126.644022][T14074] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 127.232239][T15945] --map-set only usable from mangle table [ 127.263687][T15944] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 127.429099][T13612] EXT4-fs (loop5): unmounting filesystem. [ 127.566668][T15992] bond0 speed is unknown, defaulting to 1000 [ 127.696671][T16016] tmpfs: Bad value for 'mpol' [ 127.913275][T16037] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 127.918597][T16037] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 127.920040][T16037] REISERFS (device loop3): using ordered data mode [ 127.921158][T16037] reiserfs: using flush barriers [ 127.923152][T16043] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.925844][T16037] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 127.929291][T16037] REISERFS (device loop3): checking transaction log (loop3) [ 127.933662][T16041] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 127.946758][T16037] REISERFS (device loop3): Using rupasov hash to sort names [ 127.947971][T16037] REISERFS (device loop3): using 3.5.x disk format [ 127.949199][T16037] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 127.951207][T16037] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 127.953024][T16037] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 127.993804][T16041] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz.5.5269: Directory block failed checksum [ 127.999410][T16037] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 128.001726][T16037] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 128.048713][T16037] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 128.061830][T16037] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 128.063796][T16037] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 128.123448][T13612] EXT4-fs (loop5): unmounting filesystem. [ 128.243759][T16089] xt_hashlimit: max too large, truncated to 1048576 [ 128.256555][T16086] set_capacity_and_notify: 10 callbacks suppressed [ 128.256570][T16086] loop5: detected capacity change from 0 to 1024 [ 128.273347][T16076] loop1: detected capacity change from 0 to 8192 [ 128.335119][T16086] hfsplus: keylen 65060 too large [ 128.336283][T16086] hfsplus: keylen 65060 too large [ 128.379516][T16076] loop1: p1 < > p2 < > p4 < > [ 128.419933][T16103] loop0: detected capacity change from 0 to 4096 [ 128.424207][T16103] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 128.441142][T16103] ntfs3: loop0: failed to convert "c46c" to maccroatian [ 128.475533][ T3936] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.477309][ T3936] Buffer I/O error on dev loop1, logical block 0, async page read [ 128.478702][ T3936] ldm_validate_partition_table(): Disk read failed. [ 128.479986][ T3936] Dev loop1: unable to read RDB block 0 [ 128.485959][ T3936] loop1: unable to read partition table [ 128.486972][ T3936] loop1: partition table beyond EOD, truncated [ 128.794822][T16160] loop5: detected capacity change from 0 to 64 [ 128.953758][T16167] loop1: detected capacity change from 0 to 4096 [ 128.964924][T16167] ntfs3: loop1: ino=3, Correct links count -> 2. [ 129.042999][T16143] loop3: detected capacity change from 0 to 32768 [ 129.045854][T16147] loop4: detected capacity change from 0 to 32768 [ 129.058809][T16147] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.5308 (16147) [ 129.074003][T16147] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 129.075733][T16147] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 129.077416][T16147] BTRFS info (device loop4): force zlib compression, level 3 [ 129.078479][T16143] [ 129.078479][T16143] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.078479][T16143] [ 129.078625][T16147] BTRFS info (device loop4): force clearing of disk cache [ 129.081393][T16147] BTRFS info (device loop4): setting nodatasum [ 129.091687][T16147] BTRFS info (device loop4): allowing degraded mounts [ 129.092781][T16143] ERROR: (device loop3): diWrite: ixpxd invalid [ 129.092781][T16143] [ 129.093258][T16147] BTRFS info (device loop4): enabling disk space caching [ 129.101815][T16147] BTRFS info (device loop4): disk space caching is enabled [ 129.112102][T16183] loop0: detected capacity change from 0 to 4096 [ 129.114496][T16143] ERROR: (device loop3): txAbort: [ 129.114496][T16143] [ 129.133479][T16183] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 129.149291][T16183] ntfs3: loop0: Failed to load $Extend. [ 129.226704][ T4321] [ 129.226704][ T4321] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.226704][ T4321] [ 129.228517][ T4321] [ 129.228517][ T4321] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.228517][ T4321] [ 129.251936][T16193] loop5: detected capacity change from 0 to 4096 [ 129.293680][T16193] ntfs: (device loop5): ntfs_external_attr_find(): Base inode 0x1 contains corrupt attribute list attribute. Unmount and run chkdsk. [ 129.298920][T16193] ntfs: (device loop5): ntfs_read_locked_inode(): Failed to lookup $DATA attribute. [ 129.310659][T16193] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 129.336770][T16193] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 129.353560][T16193] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 129.359744][T16219] loop3: detected capacity change from 0 to 8 [ 129.361259][T16193] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 129.375766][T16193] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 129.379949][T16221] validate_nla: 2 callbacks suppressed [ 129.379959][T16221] netlink: 'syz.1.5330': attribute type 21 has an invalid length. [ 129.382020][T16221] IPv6: NLM_F_CREATE should be specified when creating new route [ 129.383323][T16221] __nla_validate_parse: 2 callbacks suppressed [ 129.383337][T16221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5330'. [ 129.398407][T16193] ntfs: volume version 3.1. [ 129.407903][T16193] ntfs: (device loop5): ntfs_read_locked_attr_inode(): Resident attribute is corrupt (size exceeds allocation). [ 129.409823][T16193] ntfs: (device loop5): ntfs_read_locked_attr_inode(): Failed with error code -5 while reading attribute inode (mft_no 0x5, type 0xb0, name_len 4). Marking corrupt inode and base inode 0x5 as bad. Run chkdsk. [ 129.413229][T16193] ntfs: (device loop5): ntfs_read_locked_inode(): Failed to get bitmap attribute. [ 129.435225][T16147] BTRFS info (device loop4): rebuilding free space tree [ 129.472643][T16219] SQUASHFS error: Unable to read inode 0xe3 [ 129.484874][T16147] BTRFS info (device loop4): disabling free space tree [ 129.489288][T16147] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.490996][T16147] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.585260][T16147] BTRFS info (device loop4): balance: start -f [ 129.598699][T16147] BTRFS info (device loop4): balance: ended with status: 0 [ 129.601645][T16249] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5338'. [ 129.666364][ T4332] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 129.769345][T16266] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5350'. [ 129.896614][T13849] hfsplus: b-tree write err: -5, ino 25 [ 129.897675][T13849] hfsplus: b-tree write err: -5, ino 4 [ 129.898575][T13849] hfsplus: b-tree write err: -5, ino 2 [ 129.971818][T16293] netlink: 'syz.3.5361': attribute type 1 has an invalid length. [ 129.973074][T16293] netlink: 'syz.3.5361': attribute type 3 has an invalid length. [ 129.984504][T16293] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5361'. [ 129.993207][T16293] NCSI netlink: No device for ifindex 52229 [ 130.030935][T14085] udevd[14085]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 130.043194][T16300] netlink: 'syz.3.5364': attribute type 11 has an invalid length. [ 130.048363][T14193] udevd[14193]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 130.060856][T14074] udevd[14074]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 130.122286][T16309] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5368'. [ 130.217701][T16309] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5368'. [ 130.223554][T16291] JBD2: Ignoring recovery information on journal [ 130.260766][T16291] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 130.269437][T16291] (syz.0.5360,16291,1):ocfs2_remount:630 ERROR: Cannot change data mode on remount [ 130.373775][ T4328] ocfs2: Unmounting device (7,0) on (node local) [ 130.413108][T16337] x_tables: duplicate underflow at hook 1 [ 130.565375][T16361] netlink: 'syz.1.5392': attribute type 7 has an invalid length. [ 130.566756][T16361] netlink: 'syz.1.5392': attribute type 8 has an invalid length. [ 130.649996][T16378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5398'. [ 130.788049][T16392] libceph: secret too big 31 [ 130.792423][T16390] NILFS: invalid option "cp=0x0000000000000002": read-only option is not specified [ 130.896314][T16402] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.5412: bg 0: block 288: padding at end of block bitmap is not set [ 130.915982][T16402] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 130.929980][T16402] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.5412: attempt to clear invalid blocks 1024 len 1 [ 130.951395][T16402] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.5412: invalid indirect mapped block 1819239214 (level 0) [ 130.990595][T16402] EXT4-fs (loop5): 1 truncate cleaned up [ 130.999688][T16402] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 131.066026][T16402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.067607][T16402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.152404][T16426] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 131.164760][T16426] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 131.166257][T16426] REISERFS (device loop1): using ordered data mode [ 131.168668][T16438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5426'. [ 131.170222][T16426] reiserfs: using flush barriers [ 131.176210][T16426] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.178952][T16426] REISERFS (device loop1): checking transaction log (loop1) [ 131.195506][T16426] REISERFS (device loop1): Using r5 hash to sort names [ 131.196647][T16426] REISERFS (device loop1): using 3.5.x disk format [ 131.197818][T16426] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 131.454738][T16459] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 131.491724][T16459] EXT4-fs warning (device loop4): ext4_rmdir:3243: inode #11: comm syz.4.5435: empty directory 'file1' has too many links (111) [ 131.586704][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 131.611922][T13612] EXT4-fs (loop5): unmounting filesystem. [ 131.749575][T16495] autofs4:pid:16495:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 132.205021][T16555] netlink: 'syz.3.5482': attribute type 3 has an invalid length. [ 132.206363][T16555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5482'. [ 132.333639][T16570] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5489'. [ 132.346922][T16567] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 132.348208][T16567] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 132.351825][T16567] vhci_hcd vhci_hcd.0: Device attached [ 132.360485][T16569] vhci_hcd: connection closed [ 132.363475][ T39] vhci_hcd: stop threads [ 132.366481][ T39] vhci_hcd: release socket [ 132.367208][ T39] vhci_hcd: disconnect device [ 132.647059][T16597] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.5502: bad orphan inode 11862016 [ 132.652686][T16597] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 132.708584][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 132.719826][T16519] F2FS-fs (loop0): Invalid log sectorsize (0) [ 132.720907][T16519] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 132.722735][T16519] F2FS-fs (loop0): invalid crc value [ 132.742545][T16607] tmpfs: Bad value for 'mpol' [ 132.762254][T16519] F2FS-fs (loop0): Found nat_bits in checkpoint [ 132.791929][T16519] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 132.793141][T16519] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 132.830961][T16620] netlink: 'syz.3.5510': attribute type 2 has an invalid length. [ 133.012878][T16639] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 133.019902][T16639] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.026259][T16639] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry where CRC length (0) does not match entry length (32) [ 133.187176][T16653] FAT-fs (loop4): Directory bread(block 64) failed [ 133.188337][T16653] FAT-fs (loop4): Directory bread(block 65) failed [ 133.189449][T16653] FAT-fs (loop4): Directory bread(block 66) failed [ 133.190511][T16653] FAT-fs (loop4): Directory bread(block 67) failed [ 133.191529][T16653] FAT-fs (loop4): Directory bread(block 68) failed [ 133.192576][T16653] FAT-fs (loop4): Directory bread(block 69) failed [ 133.193651][T16653] FAT-fs (loop4): Directory bread(block 70) failed [ 133.208700][T16653] FAT-fs (loop4): Directory bread(block 71) failed [ 133.209803][T16653] FAT-fs (loop4): Directory bread(block 72) failed [ 133.210902][T16631] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.5517 (16631) [ 133.214832][T16653] FAT-fs (loop4): Directory bread(block 73) failed [ 133.218010][T16631] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 133.223455][T16631] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 133.236736][T16631] BTRFS info (device loop5): force zlib compression, level 3 [ 133.237897][T16631] BTRFS info (device loop5): force clearing of disk cache [ 133.239140][T16631] BTRFS info (device loop5): setting nodatasum [ 133.240140][T16631] BTRFS info (device loop5): allowing degraded mounts [ 133.258813][T16631] BTRFS info (device loop5): enabling disk space caching [ 133.260023][T16631] BTRFS info (device loop5): disk space caching is enabled [ 133.438180][T16631] BTRFS info (device loop5): rebuilding free space tree [ 133.446732][T16683] set_capacity_and_notify: 13 callbacks suppressed [ 133.446742][T16683] loop0: detected capacity change from 0 to 4096 [ 133.457760][T16631] BTRFS info (device loop5): disabling free space tree [ 133.458959][T16631] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 133.460576][T16631] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 133.474065][T16707] misc userio: Invalid payload size [ 133.488445][T16631] BTRFS info (device loop5): balance: start -f [ 133.489500][T16631] BTRFS info (device loop5): balance: ended with status: 0 [ 133.511305][T13612] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 133.533413][T16683] ntfs: volume version 3.1. [ 133.810919][T16749] kAFS: unable to lookup cell '\/' [ 133.841069][T16755] loop4: detected capacity change from 0 to 1024 [ 133.860338][T16757] loop3: detected capacity change from 0 to 1024 [ 133.873641][T16755] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.5566: lblock 2 mapped to illegal pblock 2 (length 1) [ 133.880094][T16753] loop0: detected capacity change from 0 to 4096 [ 133.882258][T16755] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.5566: lblock 0 mapped to illegal pblock 48 (length 1) [ 133.891321][T16755] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.5566: Failed to acquire dquot type 0 [ 133.893483][T16755] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 133.895679][T16755] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.5566: mark_inode_dirty error [ 133.898686][T16755] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 133.900421][T16755] EXT4-fs (loop4): 1 orphan inode deleted [ 133.901339][T16755] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 133.914032][ T1614] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 133.921612][ T1614] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:4: Failed to release dquot type 0 [ 133.954314][ T1572] hfsplus: b-tree write err: -5, ino 25 [ 133.955310][ T1572] hfsplus: b-tree write err: -5, ino 4 [ 133.956268][ T1572] hfsplus: b-tree write err: -5, ino 2 [ 133.962828][ T1614] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm kworker/u4:4: lblock 2 mapped to illegal pblock 2 (length 1) [ 133.980630][ T1614] EXT4-fs error (device loop4): ext4_write_dquot:6815: comm kworker/u4:4: Failed to commit dquot type 0 [ 134.007911][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 134.009011][ T4332] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 134.020608][ T4332] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 134.031458][ T4332] EXT4-fs error (device loop4): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 134.035863][T16772] ksmbd: Unknown IPC event: 4, ignore. [ 134.152556][T16788] loop3: detected capacity change from 0 to 256 [ 134.175785][T16788] FAT-fs (loop3): Directory bread(block 64) failed [ 134.176984][T16788] FAT-fs (loop3): Directory bread(block 65) failed [ 134.178003][T16788] FAT-fs (loop3): Directory bread(block 66) failed [ 134.179068][T16788] FAT-fs (loop3): Directory bread(block 67) failed [ 134.180204][T16788] FAT-fs (loop3): Directory bread(block 68) failed [ 134.181226][T16788] FAT-fs (loop3): Directory bread(block 69) failed [ 134.197169][T16788] FAT-fs (loop3): Directory bread(block 70) failed [ 134.198261][T16788] FAT-fs (loop3): Directory bread(block 71) failed [ 134.199353][T16788] FAT-fs (loop3): Directory bread(block 72) failed [ 134.200332][T16788] FAT-fs (loop3): Directory bread(block 73) failed [ 134.404729][ T1614] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.565587][T16844] __nla_validate_parse: 7 callbacks suppressed [ 134.565599][T16844] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.5609'. [ 134.568673][T16842] loop5: detected capacity change from 0 to 64 [ 134.632374][T16822] loop3: detected capacity change from 0 to 32768 [ 134.647429][T16822] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.5596 (16822) [ 134.652649][T16849] device veth1_to_batadv entered promiscuous mode [ 134.669647][T16822] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 134.671381][T16822] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 134.672778][T16822] BTRFS info (device loop3): force zlib compression, level 3 [ 134.675257][T16822] BTRFS info (device loop3): force clearing of disk cache [ 134.679134][T16851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5612'. [ 134.683594][T16822] BTRFS info (device loop3): setting nodatasum [ 134.684920][T16822] BTRFS info (device loop3): allowing degraded mounts [ 134.686116][T16822] BTRFS info (device loop3): enabling disk space caching [ 134.687177][T16822] BTRFS info (device loop3): disk space caching is enabled [ 134.704354][T16857] loop0: detected capacity change from 0 to 128 [ 134.707380][T16857] EXT4-fs (loop0): Test dummy encryption mode enabled [ 134.721039][T16857] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 134.731864][T16857] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 134.762399][T16870] netlink: 'syz.5.5616': attribute type 4 has an invalid length. [ 134.782687][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 134.804307][T16879] loop0: detected capacity change from 0 to 64 [ 134.809580][T16879] hfs: unable to locate alternate MDB [ 134.810476][T16879] hfs: continuing without an alternate MDB [ 134.842720][ T11] hfs: new node 0 already hashed? [ 134.843719][ T11] ------------[ cut here ]------------ [ 134.844498][ T11] WARNING: CPU: 1 PID: 11 at fs/hfs/bnode.c:520 hfs_bnode_create+0x40c/0x4c4 [ 134.845983][ T11] Modules linked in: [ 134.846658][ T11] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 134.847963][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 134.849601][ T11] Workqueue: writeback wb_workfn (flush-7:0) [ 134.850607][ T11] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 134.851880][ T11] pc : hfs_bnode_create+0x40c/0x4c4 [ 134.852768][ T11] lr : hfs_bnode_create+0x40c/0x4c4 [ 134.853672][ T11] sp : ffff80001c9d6d40 [ 134.854335][ T11] x29: ffff80001c9d6d60 x28: ffff70000393adbc x27: dfff800000000000 [ 134.855730][ T11] x26: 0000000000000080 x25: 0000000000000000 x24: ffff0000ddfabe88 [ 134.857200][ T11] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000f2fb4000 [ 134.858559][ T11] x20: 0000000000000000 x19: ffff0000ddfabe00 x18: 0000000000000000 [ 134.859924][ T11] x17: 0000000000000000 x16: ffff8000082d91a4 x15: 0000000000000000 [ 134.861233][ T11] x14: 0000000000000001 x13: 1ffff0000393ad10 x12: 0000000000ff0100 [ 134.862610][ T11] x11: ff00800008311550 x10: 0000000000000000 x9 : 52b8d91f23792400 [ 134.863860][ T11] x8 : 52b8d91f23792400 x7 : 0000000000000001 x6 : 0000000000000001 [ 134.865168][ T11] x5 : ffff80001c9d6818 x4 : ffff8000152f4cc0 x3 : ffff80000a88d9f0 [ 134.866396][ T11] x2 : ffff00019f564d10 x1 : 0000000100000000 x0 : 000000000000001f [ 134.867825][ T11] Call trace: [ 134.868391][ T11] hfs_bnode_create+0x40c/0x4c4 [ 134.869266][ T11] hfs_bmap_alloc+0x4fc/0x5ac [ 134.870027][ T11] hfs_btree_inc_height+0x108/0x890 [ 134.870891][ T11] hfs_brec_insert+0x5c4/0x97c [ 134.871717][ T11] __hfs_ext_write_extent+0x22c/0x484 [ 134.872581][ T11] hfs_ext_write_extent+0x154/0x1e0 [ 134.873512][ T11] hfs_write_inode+0xf0/0x8dc [ 134.874302][ T11] __writeback_single_inode+0x5e0/0x1554 [ 134.875161][ T11] writeback_sb_inodes+0x858/0x143c [ 134.875955][ T11] wb_writeback+0x414/0xfcc [ 134.876767][ T11] wb_workfn+0x360/0xe18 [ 134.877490][ T11] process_one_work+0x7f8/0x13a4 [ 134.878324][ T11] worker_thread+0x8c4/0xfec [ 134.879092][ T11] kthread+0x250/0x2d8 [ 134.879743][ T11] ret_from_fork+0x10/0x20 [ 134.880505][ T11] irq event stamp: 6326980 [ 134.881224][ T11] hardirqs last enabled at (6326979): [] __up_console_sem+0xb4/0xfc [ 134.882763][ T11] hardirqs last disabled at (6326980): [] el1_dbg+0x24/0x80 [ 134.884149][ T11] softirqs last enabled at (6326552): [] hash_netport6_gc_do+0x87c/0x8b4 [ 134.885748][ T11] softirqs last disabled at (6326550): [] hash_netport6_gc_do+0xac/0x8b4 [ 134.887415][ T11] ---[ end trace 0000000000000000 ]--- [ 134.890784][ T11] ------------[ cut here ]------------ [ 134.891704][ T11] kernel BUG at fs/hfs/bnode.c:565! [ 134.892631][ T11] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 134.893829][ T11] Modules linked in: [ 134.894401][ T11] CPU: 0 PID: 11 Comm: kworker/u4:1 Tainted: G W syzkaller #0 [ 134.895790][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 134.897315][ T11] Workqueue: writeback wb_workfn (flush-7:0) [ 134.898303][ T11] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 134.899609][ T11] pc : hfs_bnode_put+0x358/0x364 [ 134.900436][ T11] lr : hfs_bnode_put+0x358/0x364 [ 134.901301][ T11] sp : ffff80001c9d6e40 [ 134.902037][ T11] x29: ffff80001c9d6e40 x28: 0000000000000302 x27: dfff800000000000 [ 134.903367][ T11] x26: ffff70000393addc x25: ffff80001c9d6ee0 x24: 1fffe0001bbf57c0 [ 134.904649][ T11] x23: ffff0000f2fb4000 x22: dfff800000000000 x21: 0000000000000000 [ 134.905958][ T11] x20: ffff0000ddfabe80 x19: ffff0000ddfabe00 x18: 0000000000000000 [ 134.907382][ T11] x17: 0000000000000000 x16: ffff8000082eee68 x15: 0000000000000000 [ 134.908769][ T11] x14: 0000000000000001 x13: 1fffe0001bbf57d0 x12: 0000000000ff0100 [ 134.910060][ T11] x11: ff00800008fa0468 x10: 0000000000000000 x9 : ffff800008fa0468 [ 134.911312][ T11] x8 : ffff0000c09ab780 x7 : ffff8000118c0d24 x6 : 0000000000000000 [ 134.912558][ T11] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800008fa016c [ 134.913838][ T11] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 134.915123][ T11] Call trace: [ 134.915139][T16822] BTRFS info (device loop3): rebuilding free space tree [ 134.915649][ T11] hfs_bnode_put+0x358/0x364 [ 134.917532][ T11] hfs_btree_inc_height+0x458/0x890 [ 134.917987][T16822] BTRFS info (device loop3): disabling free space tree [ 134.918311][ T11] hfs_brec_insert+0x5c4/0x97c [ 134.919454][T16822] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.920234][ T11] __hfs_ext_write_extent+0x22c/0x484 [ 134.921731][T16822] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.922546][ T11] hfs_ext_write_extent+0x154/0x1e0 [ 134.924972][ T11] hfs_write_inode+0xf0/0x8dc [ 134.925559][ T11] __writeback_single_inode+0x5e0/0x1554 [ 134.926444][ T11] writeback_sb_inodes+0x858/0x143c [ 134.927376][ T11] wb_writeback+0x414/0xfcc [ 134.928113][ T11] wb_workfn+0x360/0xe18 [ 134.928845][ T11] process_one_work+0x7f8/0x13a4 [ 134.929676][ T11] worker_thread+0x8c4/0xfec [ 134.930492][ T11] kthread+0x250/0x2d8 [ 134.931195][ T11] ret_from_fork+0x10/0x20 [ 134.931932][ T11] Code: aa1403e0 97e514eb 17ffffce 97d42b95 (d4210000) [ 134.933135][ T11] ---[ end trace 0000000000000000 ]--- [ 135.124348][ T11] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 135.125505][ T11] SMP: stopping secondary CPUs [ 135.126319][ T11] Kernel Offset: disabled [ 135.127047][ T11] CPU features: 0x080000,000f0097,a65bfea7 [ 135.128046][ T11] Memory Limit: none [ 135.289413][ T11] Rebooting in 86400 seconds..