last executing test programs: 1.330732575s ago: executing program 0 (id=6126): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 1.248106427s ago: executing program 0 (id=6134): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000003c0)="42e8", 0x2}, {0x0, 0xfffffd66}], 0x2, 0x0, 0x1e0) 1.098853281s ago: executing program 0 (id=6151): futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x5, 0x40000000, 0x0, &(0x7f0000000000), 0x1ffffff) 722.685532ms ago: executing program 1 (id=6175): r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x3, 0x3, 0x9, 0x0, 0x2, 0x4, [0x6, 0x0, 0xc60, 0xffffffff, 0x0, 0x0, 0x0, 0x8]}}) 675.043973ms ago: executing program 4 (id=6164): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000080)={0x0, 0x80000001, 0x1010, 0x1}) 673.164722ms ago: executing program 1 (id=6166): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0x80000001}) 608.723284ms ago: executing program 1 (id=6172): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001540), 0x2) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)="ffdf1709476c651a87aa903900faffffffffffffff0900ff05c8d5c2", 0x1c}, {&(0x7f0000000000)="e3501b", 0x3}], 0x2) 607.833904ms ago: executing program 4 (id=6173): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005800410f9c10f4f90085b3a85c91fddf080001800000009f0800027fdf000000", 0x24) 556.146996ms ago: executing program 2 (id=6174): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d81500010000000000000000000200ffff7a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x400c044) 555.109686ms ago: executing program 1 (id=6177): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}], 0x1, 0x36, 0x5) 554.241226ms ago: executing program 4 (id=6178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 512.734997ms ago: executing program 1 (id=6179): r0 = syz_open_dev$video(&(0x7f0000000300), 0x8000, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000780)={0x9, @meta={0x4131434d, 0x6f019dec, 0xeb6c, 0x3a36, 0x6915e5f8}}) 512.609547ms ago: executing program 3 (id=6180): r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x3, 0x3, 0x9, 0x0, 0x2, 0x4, [0x6, 0x0, 0xc60, 0xffffffff, 0x0, 0x0, 0x0, 0x8]}}) 188.790145ms ago: executing program 0 (id=6181): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c0) 188.721335ms ago: executing program 2 (id=6182): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000080)={0x0, 0x80000001, 0x1010, 0x1}) 188.664895ms ago: executing program 3 (id=6183): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000003c0)="42e8", 0x2}, {0x0, 0xfffffd66}], 0x2, 0x0, 0x1e0) 188.639815ms ago: executing program 4 (id=6184): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0x80000001}) 187.756215ms ago: executing program 1 (id=6191): futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x5, 0x40000000, 0x0, &(0x7f0000000000), 0x1ffffff) 159.307526ms ago: executing program 3 (id=6185): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001540), 0x2) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)="ffdf1709476c651a87aa903900faffffffffffffff0900ff05c8d5c2", 0x1c}, {&(0x7f0000000000)="e3501b", 0x3}], 0x2) 136.134917ms ago: executing program 2 (id=6186): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005800410f9c10f4f90085b3a85c91fddf080001800000009f0800027fdf000000", 0x24) 135.320707ms ago: executing program 4 (id=6187): r0 = syz_open_dev$I2C(&(0x7f0000000700), 0x0, 0x80080) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000740)=0x8000000000000000) 89.344978ms ago: executing program 2 (id=6188): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 89.265108ms ago: executing program 3 (id=6189): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}], 0x1, 0x36, 0x5) 85.080558ms ago: executing program 0 (id=6190): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='affs\x00', 0x0, &(0x7f0000000140)='grpquota') 84.464668ms ago: executing program 4 (id=6192): r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x3, 0x3, 0x9, 0x0, 0x2, 0x4, [0x6, 0x0, 0xc60, 0xffffffff, 0x0, 0x0, 0x0, 0x8]}}) 42.641119ms ago: executing program 2 (id=6193): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) 42.585149ms ago: executing program 3 (id=6194): r0 = syz_open_dev$video(&(0x7f0000000300), 0x8000, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000780)={0x9, @meta={0x4131434d, 0x6f019dec, 0xeb6c, 0x3a36, 0x6915e5f8}}) 1.90208ms ago: executing program 0 (id=6195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 985.22µs ago: executing program 2 (id=6196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) 0s ago: executing program 3 (id=6197): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000001200)={0x0, 0x0, '\x00', @raw_data}) kernel console output (not intermixed with test programs): oop2: detected capacity change from 0 to 1 [ 258.706325][ T8489] syz.2.1772: attempt to access beyond end of device [ 258.706325][ T8489] loop2: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 258.708599][ T8489] SQUASHFS error: Failed to read block 0x0: -5 [ 258.709697][ T8489] unable to read squashfs_super_block [ 258.865990][ T8491] loop2: detected capacity change from 0 to 2048 [ 258.920149][ T8491] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.019555][ T8493] loop2: detected capacity change from 0 to 1024 [ 259.053158][ T8493] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.758233][ T8439] REISERFS (device loop0): Using tea hash to sort names [ 259.759762][ T8439] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 260.404685][ T8446] REISERFS (device loop4): Using tea hash to sort names [ 260.406242][ T8446] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 261.314970][ T8497] loop2: detected capacity change from 0 to 262144 [ 261.339482][ T8497] (syz.2.1778,8497,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 261.341137][ T8497] (syz.2.1778,8497,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 261.408726][ T8527] loop0: detected capacity change from 0 to 131072 [ 261.430008][ T8527] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 261.432350][ T8527] REISERFS (device loop0): found reiserfs format "3.5" with standard journal [ 261.433869][ T8527] REISERFS (device loop0): using ordered data mode [ 261.435135][ T8527] reiserfs: using flush barriers [ 261.445129][ T8539] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 261.445382][ T8527] REISERFS (device loop0): journal params: device loop0, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 261.449212][ T8539] UDF-fs: Scanning with blocksize 512 failed [ 261.449719][ T8527] REISERFS (device loop0): checking transaction log (loop0) [ 261.457410][ T8539] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 261.459066][ T8539] UDF-fs: Scanning with blocksize 1024 failed [ 261.472215][ T8539] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 261.488119][ T8539] UDF-fs: Scanning with blocksize 2048 failed [ 261.541933][ T8539] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 261.545156][ T8539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.589564][ T8527] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 262.592237][ T8527] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 8211. Fsck? [ 262.594054][ T8527] REISERFS (device loop0): Remounting filesystem read-only [ 262.595307][ T8527] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 262.602029][ T8527] REISERFS warning (device loop0): reiserfs_fill_super: corrupt root inode, run fsck [ 263.565834][ T8552] set_capacity_and_notify: 1 callbacks suppressed [ 263.565844][ T8552] loop0: detected capacity change from 0 to 8192 [ 263.568755][ T8552] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 263.570080][ T8552] UDF-fs: Scanning with blocksize 512 failed [ 263.571499][ T8552] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 263.583896][ T8552] UDF-fs: Scanning with blocksize 1024 failed [ 263.586917][ T8552] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 263.588202][ T8552] UDF-fs: Scanning with blocksize 2048 failed [ 263.592527][ T8540] loop2: detected capacity change from 0 to 262144 [ 263.594176][ T8540] (syz.2.1799,8540,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 263.595848][ T8540] (syz.2.1799,8540,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 263.599005][ T8552] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.684549][ T8542] loop4: detected capacity change from 0 to 262144 [ 263.686042][ T8542] (syz.4.1800,8542,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 263.687707][ T8542] (syz.4.1800,8542,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 263.748738][ T4353] I/O error, dev loop4, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 265.935231][ T8568] loop0: detected capacity change from 0 to 262144 [ 265.943450][ T8568] (syz.0.1813,8568,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 265.945642][ T8568] (syz.0.1813,8568,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 266.413833][ T8570] loop2: detected capacity change from 0 to 262144 [ 266.446918][ T8572] loop4: detected capacity change from 0 to 262144 [ 266.468016][ T8572] (syz.4.1815,8572,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 266.470172][ T8572] (syz.4.1815,8572,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 266.528887][ T8593] Process accounting paused [ 267.057994][ T8589] loop0: detected capacity change from 0 to 131072 [ 267.085345][ T8589] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 267.087596][ T8589] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 267.100287][ T8589] REISERFS (device loop0): using ordered data mode [ 267.101335][ T8589] reiserfs: using flush barriers [ 267.115321][ T8589] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 267.119157][ T8589] REISERFS (device loop0): checking transaction log (loop0) [ 267.336353][ T8606] loop4: detected capacity change from 0 to 32768 [ 267.417235][ T8606] XFS (loop4): Mounting V5 Filesystem [ 267.465711][ T8606] XFS (loop4): Ending clean mount [ 267.486033][ T4370] XFS (loop4): Unmounting Filesystem [ 268.991974][ T8620] loop4: detected capacity change from 0 to 131072 [ 269.011622][ T8620] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 269.014667][ T8620] REISERFS (device loop4): found reiserfs format "3.5" with standard journal [ 269.016255][ T8620] REISERFS (device loop4): using ordered data mode [ 269.019578][ T8620] reiserfs: using flush barriers [ 269.024943][ T8620] REISERFS (device loop4): journal params: device loop4, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 269.050495][ T8620] REISERFS (device loop4): checking transaction log (loop4) [ 269.291166][ T8589] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 269.294101][ T8589] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 269.306872][ T8589] REISERFS (device loop0): Remounting filesystem read-only [ 269.319048][ T8589] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 269.333400][ T8589] REISERFS warning (device loop0): reiserfs_fill_super: corrupt root inode, run fsck [ 269.513232][ T8610] loop2: detected capacity change from 0 to 262144 [ 269.587957][ T8610] REISERFS warning (device loop2): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop2, block 16, size 4096) [ 269.610395][ T8610] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 270.095090][ T8620] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 270.104235][ T8620] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 8211. Fsck? [ 270.106556][ T8620] REISERFS (device loop4): Remounting filesystem read-only [ 270.107762][ T8620] REISERFS error (device loop4): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 270.116482][ T8620] REISERFS warning (device loop4): reiserfs_fill_super: corrupt root inode, run fsck [ 270.224340][ T8635] loop2: detected capacity change from 0 to 65536 [ 270.280520][ T8635] XFS (loop2): Mounting V5 Filesystem [ 270.322476][ T8635] XFS (loop2): Ending clean mount [ 270.381139][ T4371] XFS (loop2): Unmounting Filesystem [ 271.081979][ T8647] loop2: detected capacity change from 0 to 32768 [ 271.126368][ T8632] loop0: detected capacity change from 0 to 262144 [ 271.138323][ T8632] REISERFS warning (device loop0): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop0, block 16, size 4096) [ 271.140475][ T8632] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 271.154776][ T8647] XFS (loop2): Mounting V5 Filesystem [ 271.192892][ T8647] XFS (loop2): Ending clean mount [ 271.204762][ T8645] loop4: detected capacity change from 0 to 8192 [ 271.290497][ T4371] XFS (loop2): Unmounting Filesystem [ 271.889439][ T8660] loop4: detected capacity change from 0 to 65536 [ 271.949312][ T8660] XFS (loop4): Mounting V5 Filesystem [ 271.998612][ T8660] XFS (loop4): Ending clean mount [ 272.084100][ T4370] XFS (loop4): Unmounting Filesystem [ 272.442936][ T8666] loop2: detected capacity change from 0 to 65536 [ 272.504533][ T8666] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 272.967923][ T8658] loop0: detected capacity change from 0 to 262144 [ 272.969555][ T8658] (syz.0.1841,8658,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 272.971188][ T8658] (syz.0.1841,8658,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 274.010978][ T8685] loop0: detected capacity change from 0 to 32768 [ 274.046602][ T8685] XFS (loop0): Mounting V5 Filesystem [ 274.086854][ T8685] XFS (loop0): Ending clean mount [ 274.173713][ T4363] XFS (loop0): Unmounting Filesystem [ 274.561878][ T8676] loop4: detected capacity change from 0 to 262144 [ 274.578836][ T8676] REISERFS warning (device loop4): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop4, block 16, size 4096) [ 274.581217][ T8676] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 [ 274.911165][ T8683] loop2: detected capacity change from 0 to 262144 [ 274.915709][ T8683] REISERFS warning (device loop2): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop2, block 16, size 4096) [ 274.918068][ T8683] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 275.005371][ T8711] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1856'. [ 275.300941][ T8736] loop4: detected capacity change from 0 to 256 [ 275.448540][ T8748] loop4: detected capacity change from 0 to 64 [ 275.692996][ T8763] device gtp0 entered promiscuous mode [ 275.832228][ T8772] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1886'. [ 276.481327][ T8803] ceph: Unknown parameter 'port' [ 276.570509][ T8749] loop2: detected capacity change from 0 to 131072 [ 276.602649][ T8790] loop4: detected capacity change from 0 to 65536 [ 276.611837][ T8695] loop0: detected capacity change from 0 to 262144 [ 276.613609][ T8695] (syz.0.1849,8695,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 276.615266][ T8695] (syz.0.1849,8695,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 276.654283][ T8749] XFS (loop2): Mounting V5 Filesystem [ 276.654958][ T8790] XFS (loop4): Mounting V5 Filesystem [ 276.697471][ T8749] XFS (loop2): Ending clean mount [ 276.717988][ T8790] XFS (loop4): Ending clean mount [ 276.776337][ T4371] XFS (loop2): Unmounting Filesystem [ 276.798473][ T4370] XFS (loop4): Unmounting Filesystem [ 276.801818][ T8833] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 277.200354][ T8864] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 277.518932][ T8905] capability: warning: `syz.0.1937' uses deprecated v2 capabilities in a way that may be insecure [ 277.741468][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1947'. [ 277.779253][ T8927] sp0: Synchronizing with TNC [ 277.865321][ T8931] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 277.945475][ T8935] loop4: detected capacity change from 0 to 4096 [ 277.962847][ T8935] EXT4-fs (loop4): Test dummy encryption mode enabled [ 278.016229][ T8947] loop0: detected capacity change from 0 to 256 [ 278.017868][ T8947] FAT-fs (loop0): Unrecognized mount option "uni_xLate=1" or missing value [ 278.022768][ T8935] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 278.207320][ T8953] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1961'. [ 278.220146][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1961'. [ 278.223870][ T8953] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1961'. [ 278.225394][ T8953] netlink: 'syz.0.1961': attribute type 2 has an invalid length. [ 278.226699][ T8953] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1961'. [ 278.284096][ T4370] EXT4-fs (loop4): unmounting filesystem. [ 278.383581][ T8959] loop0: detected capacity change from 0 to 512 [ 278.549257][ T8969] ip_tables: iptables: counters copy to user failed while replacing table [ 278.698366][ T8979] device geneve2 entered promiscuous mode [ 278.794773][ T8984] syz.0.1975: attempt to access beyond end of device [ 278.794773][ T8984] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 278.797263][ T8984] Buffer I/O error on dev loop0, logical block 512, async page read [ 278.810203][ T8984] syz.0.1975: attempt to access beyond end of device [ 278.810203][ T8984] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 278.812596][ T8984] Buffer I/O error on dev loop0, logical block 56576, async page read [ 279.164985][ T8901] (syz.2.1934,8901,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 279.166696][ T8901] (syz.2.1934,8901,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 279.258661][ T9015] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 279.654761][ T9057] IPv6: sit1: Disabled Multicast RS [ 279.749738][ T9068] random: crng reseeded on system resumption [ 279.830711][ T9078] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2020'. [ 279.904845][ T9086] delete_channel: no stack [ 279.915383][ T9091] netlink: 'syz.0.2027': attribute type 3 has an invalid length. [ 280.016713][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2033'. [ 280.082394][ T9113] device tunl0 entered promiscuous mode [ 280.098889][ T9113] netlink: 'syz.2.2038': attribute type 4 has an invalid length. [ 280.100292][ T9113] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2038'. [ 280.165658][ T9128] netlink: 'syz.4.2044': attribute type 1 has an invalid length. [ 280.258341][ T9143] netlink: 'syz.4.2052': attribute type 21 has an invalid length. [ 280.432949][ T9171] Illegal XDP return value 629793152 on prog (id 130) dev N/A, expect packet loss! [ 280.446037][ T9175] ip6t_srh: unknown srh match flags B153 [ 280.537518][ T9186] device xfrm1 entered promiscuous mode [ 280.589591][ T9196] netlink: 'syz.4.2078': attribute type 3 has an invalid length. [ 280.634085][ T9200] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.635424][ T9200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.636785][ T9200] IPv6: NLM_F_CREATE should be set when creating new route [ 280.736483][ T9215] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 280.882203][ T9245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2100'. [ 280.884294][ T9245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2100'. [ 280.935212][ T9253] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2106'. [ 281.122996][ T9284] netlink: 'syz.1.2121': attribute type 10 has an invalid length. [ 281.132106][ T9284] team0: Device wlan1 is up. Set it down before adding it as a team port [ 281.195321][ T9289] set_capacity_and_notify: 2 callbacks suppressed [ 281.195330][ T9289] loop2: detected capacity change from 0 to 4096 [ 281.241770][ T9289] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 281.257581][ T9289] ntfs3: loop2: Failed to load $Extend. [ 281.630421][ T9334] CIFS mount error: No usable UNC path provided in device string! [ 281.630421][ T9334] [ 281.632164][ T9334] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 281.913121][ T9372] loop0: detected capacity change from 0 to 512 [ 281.916053][ T9372] EXT2-fs (loop0): (no)user_xattr optionsnot supported [ 281.930454][ T9372] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 281.961886][ T9372] EXT2-fs (loop0): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 281.976910][ T9372] EXT2-fs (loop0): error: ext2_free_blocks: bit already cleared for block 28 [ 281.986471][ T9372] EXT2-fs (loop0): error: ext2_free_blocks: bit already cleared for block 29 [ 281.992089][ T9372] EXT2-fs (loop0): error: ext2_free_blocks: bit already cleared for block 30 [ 281.999183][ T9372] EXT2-fs (loop0): error: ext2_free_blocks: bit already cleared for block 31 [ 282.008582][ T9372] EXT2-fs (loop0): error: ext2_free_blocks: bit already cleared for block 32 [ 282.012661][ T9372] EXT2-fs (loop0): error: ext2_free_blocks: bit already cleared for block 33 [ 282.025910][ T9372] EXT2-fs (loop0): error: ext2_free_blocks: bit already cleared for block 34 [ 282.028862][ T9372] EXT2-fs (loop0): error: ext2_free_blocks: bit already cleared for block 35 [ 282.033460][ T9372] EXT2-fs (loop0): error: ext2_free_branches: Read failure, inode=16, block=4294965504 [ 282.041454][ T9372] EXT2-fs (loop0): error: ext2_free_branches: Read failure, inode=16, block=4294967295 [ 282.144963][ T9395] IPv6: Can't replace route, no match found [ 282.470307][ T9432] netlink: 'syz.1.2194': attribute type 4 has an invalid length. [ 282.473136][ T9432] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2194'. [ 282.478213][ T9432] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 283.067625][ T9285] loop4: detected capacity change from 0 to 262144 [ 283.106295][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2223'. [ 283.122059][ T9285] REISERFS warning (device loop4): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop4, block 16, size 4096) [ 283.124544][ T9285] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 [ 283.333913][ T9509] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2232'. [ 283.335604][ T9509] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2232'. [ 283.488130][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2244'. [ 283.694415][ T9545] bond0: option arp_validate: invalid value (18446744073491447809) [ 283.694496][ T4407] bond0: (slave bond_slave_0): interface is now down [ 283.697144][ T4407] bond0: (slave bond_slave_1): interface is now down [ 283.699913][ T4407] bond0: now running without any active interface! [ 283.776116][ T9552] loop4: detected capacity change from 0 to 4096 [ 283.805677][ T9552] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 283.817210][ T9552] ntfs3: loop4: Failed to load $Extend. [ 283.850830][ T9569] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2262'. [ 283.933755][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2267'. [ 284.407795][ T9639] device erspan1 entered promiscuous mode [ 284.500203][ T9645] loop2: detected capacity change from 0 to 512 [ 284.738851][ T9678] loop0: detected capacity change from 0 to 256 [ 284.751080][ T9678] FAT-fs (loop0): Directory bread(block 64) failed [ 284.752139][ T9678] FAT-fs (loop0): Directory bread(block 65) failed [ 284.765189][ T9678] FAT-fs (loop0): Directory bread(block 66) failed [ 284.766866][ T9678] FAT-fs (loop0): Directory bread(block 67) failed [ 284.784079][ T9678] FAT-fs (loop0): Directory bread(block 68) failed [ 284.785356][ T9678] FAT-fs (loop0): Directory bread(block 69) failed [ 284.786544][ T9678] FAT-fs (loop0): Directory bread(block 70) failed [ 284.797606][ T9678] FAT-fs (loop0): Directory bread(block 71) failed [ 284.798832][ T9678] FAT-fs (loop0): Directory bread(block 72) failed [ 284.799888][ T9678] FAT-fs (loop0): Directory bread(block 73) failed [ 285.051378][ T9705] loop4: detected capacity change from 0 to 8192 [ 285.056731][ T9705] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 285.059078][ T9705] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 285.060922][ T9705] REISERFS (device loop4): using ordered data mode [ 285.062057][ T9705] reiserfs: using flush barriers [ 285.064784][ T9705] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 285.073776][ T9705] REISERFS (device loop4): checking transaction log (loop4) [ 285.167055][ T9699] loop0: detected capacity change from 0 to 32768 [ 285.215766][ T9705] REISERFS (device loop4): Using tea hash to sort names [ 285.227850][ T9705] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 285.284953][ T9699] XFS (loop0): Mounting V5 Filesystem [ 285.336435][ T9699] XFS (loop0): Ending clean mount [ 285.341462][ T9699] XFS (loop0): Quotacheck needed: Please wait. [ 285.364350][ T9699] XFS (loop0): Quotacheck: Done. [ 285.451382][ T4363] XFS (loop0): Unmounting Filesystem [ 285.596566][ T9754] netlink: 'syz.3.2351': attribute type 21 has an invalid length. [ 285.693626][ T9766] xt_TCPMSS: Only works on TCP SYN packets [ 285.861852][ T9792] netlink: 'syz.3.2367': attribute type 10 has an invalid length. [ 285.907526][ T9792] device veth0_macvtap left promiscuous mode [ 285.958540][ T9792] batman_adv: batadv0: Adding interface: macvtap0 [ 285.959593][ T9792] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.971575][ T9792] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 285.974999][ T9804] netlink: 'syz.0.2373': attribute type 10 has an invalid length. [ 285.976411][ T9804] team0: Device wlan1 is up. Set it down before adding it as a team port [ 286.085638][ T9822] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 286.161241][ T9828] loop0: detected capacity change from 0 to 4096 [ 286.189422][ T9828] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 286.198910][ T9841] netlink: 'syz.2.2393': attribute type 10 has an invalid length. [ 286.215373][ T9841] device veth0_macvtap left promiscuous mode [ 286.253319][ T9841] batman_adv: batadv0: Adding interface: macvtap0 [ 286.259276][ T9841] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.268105][ T9841] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 286.275063][ T9846] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 286.350245][ T4430] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 286.355688][ T4363] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 286.355920][ T9860] loop4: detected capacity change from 0 to 256 [ 286.359447][ T4363] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 286.360707][ T4363] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 286.361976][ T534] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 286.363648][ T4363] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 286.514233][ T9881] __nla_validate_parse: 6 callbacks suppressed [ 286.514244][ T9881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2413'. [ 286.529335][ T9881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2413'. [ 286.720042][ T9903] vhci_hcd: invalid port number 255 [ 286.721170][ T9903] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 286.765488][ T9875] loop2: detected capacity change from 0 to 32768 [ 286.827858][ T9924] __ntfs_error: 14 callbacks suppressed [ 286.827868][ T9924] ntfs: (device nbd3): ntfs_fill_super(): Unable to determine device size. [ 286.851812][ T9875] XFS (loop2): Mounting V5 Filesystem [ 286.874731][ T9875] XFS (loop2): Ending clean mount [ 286.876244][ T9875] XFS (loop2): Quotacheck needed: Please wait. [ 286.897390][ T9875] XFS (loop2): Quotacheck: Done. [ 286.971722][ T4371] XFS (loop2): Unmounting Filesystem [ 286.991869][ T9944] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2442'. [ 287.197028][ T9974] tmpfs: Bad value for 'mpol' [ 287.386192][T10002] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 287.397613][T10005] netlink: 'syz.0.2472': attribute type 5 has an invalid length. [ 287.456101][T10014] netlink: 'syz.0.2476': attribute type 5 has an invalid length. [ 287.457502][T10014] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2476'. [ 287.563878][T10035] netlink: 'syz.0.2486': attribute type 8 has an invalid length. [ 287.585960][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'. [ 287.627856][T10044] loop0: detected capacity change from 0 to 16 [ 287.632028][T10034] loop4: detected capacity change from 0 to 8192 [ 287.632476][T10044] erofs: (device loop0): erofs_read_superblock: dirblkbits 127 isn't supported [ 287.645787][T10034] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 287.648147][T10034] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 287.649729][T10034] REISERFS (device loop4): using ordered data mode [ 287.650804][T10034] reiserfs: using flush barriers [ 287.660894][T10034] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 287.663879][T10034] REISERFS (device loop4): checking transaction log (loop4) [ 287.669936][T10034] REISERFS (device loop4): Using r5 hash to sort names [ 287.671308][T10034] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 287.686311][ T5088] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 287.725577][T10056] netlink: 'syz.0.2495': attribute type 1 has an invalid length. [ 287.727081][T10056] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2495'. [ 287.951819][T10066] netlink: 'syz.2.2501': attribute type 8 has an invalid length. [ 288.156298][T10096] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2515'. [ 288.283365][T10107] loop0: detected capacity change from 0 to 8192 [ 288.285557][T10107] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 288.287950][T10107] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 288.291115][T10107] REISERFS (device loop0): using ordered data mode [ 288.292415][T10107] reiserfs: using flush barriers [ 288.293632][T10107] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 288.296440][T10107] REISERFS (device loop0): checking transaction log (loop0) [ 288.299091][T10107] REISERFS (device loop0): Using r5 hash to sort names [ 288.484998][T10146] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2540'. [ 288.492724][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2541'. [ 288.503269][T10149] netlink: 'syz.0.2542': attribute type 1 has an invalid length. [ 288.604157][T10165] loop4: detected capacity change from 0 to 164 [ 288.633609][T10165] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 288.638754][T10171] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 288.651676][T10173] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2552'. [ 289.016945][T10220] futex_wake_op: syz.1.2578 tries to shift op by 32; fix this program [ 289.084827][T10225] loop2: detected capacity change from 0 to 512 [ 289.145117][T10225] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.2579: inode has both inline data and extents flags [ 289.147977][T10225] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2579: couldn't read orphan inode 15 (err -117) [ 289.150571][T10225] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 289.156684][T10233] ieee802154 phy1 wpan1: encryption failed: -22 [ 289.157837][T10233] ieee802154 phy1 wpan1: encryption failed: -22 [ 289.243465][ T4371] EXT4-fs (loop2): unmounting filesystem. [ 289.254448][T10204] loop4: detected capacity change from 0 to 32768 [ 289.309296][T10204] XFS (loop4): Mounting V5 Filesystem [ 289.354620][T10204] XFS (loop4): Ending clean mount [ 289.357360][T10204] XFS (loop4): Quotacheck needed: Please wait. [ 289.368994][T10204] XFS (loop4): Quotacheck: Done. [ 289.425907][ T4370] XFS (loop4): Unmounting Filesystem [ 289.522939][T10191] loop0: detected capacity change from 0 to 131072 [ 289.532084][T10191] F2FS-fs (loop0): invalid crc value [ 289.567394][T10191] F2FS-fs (loop0): Found nat_bits in checkpoint [ 289.587506][T10191] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 289.592940][T10191] F2FS-fs (loop0): Corrupted max_depth of 3: 16842753 [ 289.598272][T10191] F2FS-fs (loop0): sanity_check_inode: corrupted inode footer i_ino=4, ino,nid: [4227858436, 4] run fsck to fix. [ 289.768772][T10279] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 289.770434][T10279] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 289.984553][T10297] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 290.007456][T10297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.289251][T10349] loop2: detected capacity change from 0 to 136 [ 290.351880][T10355] loop2: detected capacity change from 0 to 256 [ 290.353801][T10355] exfat: Deprecated parameter 'utf8' [ 290.354719][T10355] exfat: Deprecated parameter 'utf8' [ 290.365086][T10358] random: crng reseeded on system resumption [ 290.395302][T10355] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 290.565698][T10382] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 290.574820][T10376] syz.0.2648: attempt to access beyond end of device [ 290.574820][T10376] loop0: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 290.580416][T10376] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 290.582099][T10376] syz.0.2648: attempt to access beyond end of device [ 290.582099][T10376] loop0: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 290.595825][T10376] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 290.597351][T10376] NILFS (loop0): error -5 truncating bmap (ino=16) [ 290.821018][T10416] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 290.822448][T10416] overlayfs: conflicting options: userxattr,redirect_dir=off [ 290.980292][T10436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.177473][T10466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.421125][T10499] openvswitch: netlink: Key type 403 is out of range max 32 [ 291.423932][T10496] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 291.455140][ T4363] EXT4-fs (loop0): unmounting filesystem. [ 291.833672][T10564] sctp: [Deprecated]: syz.2.2738 (pid 10564) Use of int in maxseg socket option. [ 291.833672][T10564] Use struct sctp_assoc_value instead [ 291.968484][T10587] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 291.978765][T10584] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 291.979854][T10584] [U] J"—e:ÀÆ" [ 291.986388][T10580] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 292.025675][T10594] validate_nla: 2 callbacks suppressed [ 292.025687][T10594] netlink: 'syz.3.2752': attribute type 1 has an invalid length. [ 292.028047][T10594] netlink: 'syz.3.2752': attribute type 3 has an invalid length. [ 292.029383][T10594] __nla_validate_parse: 11 callbacks suppressed [ 292.029391][T10594] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2752'. [ 292.062280][T10596] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2753'. [ 292.093959][ T4371] EXT4-fs (loop2): unmounting filesystem. [ 292.181955][T10611] device veth1_macvtap left promiscuous mode [ 292.409533][T10640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.411265][T10643] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2776'. [ 292.413288][T10643] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2776'. [ 292.434824][T10646] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2777'. [ 292.536850][T10656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2778'. [ 292.572834][T10658] set_capacity_and_notify: 4 callbacks suppressed [ 292.572844][T10658] loop4: detected capacity change from 0 to 2048 [ 292.589306][T10658] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 292.606277][T10666] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.608160][T10658] syz.4.2782: attempt to access beyond end of device [ 292.608160][T10658] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 292.622098][T10658] syz.4.2782: attempt to access beyond end of device [ 292.622098][T10658] loop4: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 292.624745][T10658] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=0) [ 292.704422][T10681] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2793'. [ 292.829371][T10701] loop2: detected capacity change from 0 to 256 [ 292.833410][T10703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2802'. [ 292.839731][T10701] exfat: Deprecated parameter 'namecase' [ 292.859863][T10701] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 293.133611][T10753] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2823'. [ 293.252296][T10771] loop2: detected capacity change from 0 to 8 [ 293.293172][T10771] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 293.299091][T10774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.477807][T10804] device ip6gre1 entered promiscuous mode [ 293.531374][T10809] tmpfs: Bad value for 'mpol' [ 293.651692][T10828] device veth1_macvtap left promiscuous mode [ 293.794706][T10844] binder: 10843:10844 ioctl c00c6211 ffffffffffffffff returned -14 [ 293.826718][T10846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.101520][T10881] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2887'. [ 294.137132][T10888] loop4: detected capacity change from 0 to 256 [ 294.138714][T10888] exfat: Deprecated parameter 'utf8' [ 294.139785][T10888] exfat: Deprecated parameter 'namecase' [ 294.140868][T10888] exfat: Deprecated parameter 'namecase' [ 294.158949][T10888] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 294.375492][T10923] device veth1_macvtap left promiscuous mode [ 294.502149][T10928] device ip6gre1 entered promiscuous mode [ 294.665194][T10956] loop0: detected capacity change from 0 to 4096 [ 294.690355][T10956] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 294.730989][T10972] binder: 10968:10972 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 295.080124][T11023] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 295.149990][T11033] netlink: 'syz.0.2963': attribute type 1 has an invalid length. [ 295.734884][T11128] loop0: detected capacity change from 0 to 2048 [ 295.738017][T11128] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.807279][T11134] loop2: detected capacity change from 0 to 4096 [ 295.817815][T11134] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1f, max_cluster = 0x0 [ 295.829478][T11134] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 295.831730][T11134] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 295.835371][T11134] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 295.857591][T11134] ntfs: volume version 3.1. [ 296.324203][T11190] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 296.460870][T11209] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 296.627303][T11234] loop0: detected capacity change from 0 to 128 [ 296.676103][ T4363] sysv_free_block: flc_count > flc_size [ 296.682101][ T4363] sysv_free_block: flc_count > flc_size [ 296.683102][ T4363] sysv_free_block: flc_count > flc_size [ 296.685711][ T4363] sysv_free_block: flc_count > flc_size [ 296.686547][ T4363] sysv_free_block: flc_count > flc_size [ 296.686598][T11244] openvswitch: netlink: Missing key (keys=1000040, expected=200000) [ 296.687400][ T4363] sysv_free_block: flc_count > flc_size [ 296.703984][ T4363] sysv_free_block: flc_count > flc_size [ 296.705032][ T4363] sysv_free_block: flc_count > flc_size [ 296.705891][ T4363] sysv_free_block: flc_count > flc_size [ 296.713791][ T4363] sysv_free_block: flc_count > flc_size [ 296.715751][ T4363] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 296.834229][T11264] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 296.839227][T11264] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 297.266405][T11293] loop2: detected capacity change from 0 to 32768 [ 297.411409][T11348] Cannot find add_set index 2 as target [ 297.617544][ T27] audit: type=1326 audit(784.504:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11382 comm="syz.2.3131" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb41792a8 code=0x0 [ 297.972005][T11433] infiniband syz0: set active [ 297.973210][T11433] infiniband syz0: added bridge_slave_1 [ 297.992415][T11433] RDS/IB: syz0: added [ 297.993447][T11433] smc: adding ib device syz0 with port count 1 [ 297.994740][T11433] smc: ib device syz0 port 1 has pnetid [ 298.078701][T11454] __nla_validate_parse: 12 callbacks suppressed [ 298.078712][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3162'. [ 298.280748][T11480] netlink: 'syz.2.3173': attribute type 1 has an invalid length. [ 298.310179][T11482] netlink: 'syz.3.3175': attribute type 4 has an invalid length. [ 298.311781][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3175'. [ 298.396191][T11489] loop0: detected capacity change from 0 to 4096 [ 298.492868][T11511] loop0: detected capacity change from 0 to 512 [ 298.494326][T11511] EXT4-fs: inline encryption not supported [ 298.536472][T11511] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.3185: corrupted inode contents [ 298.539514][T11511] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 298.549355][T11511] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.3185: corrupted inode contents [ 298.557785][T11511] EXT4-fs error (device loop0): ext4_evict_inode:329: inode #15: comm syz.0.3185: mark_inode_dirty error [ 298.572780][T11511] EXT4-fs (loop0): 1 orphan inode deleted [ 298.582491][T11511] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 298.649381][ T4363] EXT4-fs (loop0): unmounting filesystem. [ 298.696380][T11534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3192'. [ 298.697989][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3192'. [ 298.926221][T11528] loop2: detected capacity change from 0 to 32768 [ 298.969876][T11528] XFS (loop2): Mounting V5 Filesystem [ 299.038945][T11528] XFS (loop2): Ending clean mount [ 299.141739][T11527] Process accounting resumed [ 299.153341][ T4371] XFS (loop2): Unmounting Filesystem [ 299.207440][T11601] netlink: 'syz.0.3220': attribute type 6 has an invalid length. [ 299.241415][T11607] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3225'. [ 299.247745][T11605] netlink: 'syz.4.3223': attribute type 10 has an invalid length. [ 299.259903][T11605] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.279648][T11605] device bridge_slave_1 left promiscuous mode [ 299.280771][T11605] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.313895][T11614] netlink: 'syz.3.3228': attribute type 1 has an invalid length. [ 299.324668][T11605] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 299.441475][T11631] netlink: 'syz.1.3235': attribute type 2 has an invalid length. [ 299.443044][T11631] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.3235'. [ 299.749442][ T52] block nbd0: Attempted send on invalid socket [ 299.750689][ T52] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.755707][T11676] qnx6: unable to read the first superblock [ 299.756992][ T52] block nbd0: Attempted send on invalid socket [ 299.758075][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.760082][T11676] qnx6: unable to read the first superblock [ 299.761173][T11676] qnx6: unable to read the first superblock [ 299.776227][T11680] netlink: 'syz.2.3258': attribute type 22 has an invalid length. [ 299.777897][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3258'. [ 299.818690][T11682] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 299.848780][T11682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.018812][T11715] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 300.083647][T11724] loop2: detected capacity change from 0 to 256 [ 300.217526][T11736] loop0: detected capacity change from 0 to 8192 [ 300.226531][T11736] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 300.551873][T11789] loop0: detected capacity change from 0 to 4096 [ 300.553762][T11789] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 300.570257][T11789] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 300.574229][T11789] ntfs3: loop0: Failed to load $Extend. [ 300.575193][T11801] loop2: detected capacity change from 0 to 64 [ 300.596933][T11801] MINIX-fs: mounting file system with errors, running fsck is recommended [ 300.606536][T11801] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 301.014928][T11846] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 301.017419][T11846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.035147][T11846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.037806][T11846] infiniband syz0: set active [ 301.214935][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3344'. [ 301.232172][T11854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3344'. [ 301.257338][T11856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.263425][T11856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.289754][T11863] loop2: detected capacity change from 0 to 1024 [ 301.439289][T11870] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 301.635311][T11903] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 301.721127][T11904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3365'. [ 301.723089][T11908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 301.724381][T11908] IPv6: NLM_F_CREATE should be set when creating new route [ 301.725779][T11908] IPv6: NLM_F_CREATE should be set when creating new route [ 301.920852][T11931] loop0: detected capacity change from 0 to 4096 [ 302.044322][T11944] loop4: detected capacity change from 0 to 4096 [ 302.082057][T11944] NILFS (loop4): invalid segment: Checksum error in segment payload [ 302.090583][T11944] NILFS (loop4): trying rollback from an earlier position [ 302.101493][T11944] NILFS (loop4): recovery complete [ 302.125818][T11958] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.145449][T11965] erofs: (device loop2): mounted with root inode @ nid 36. [ 302.284690][T11983] MTDSB: Device #1 doesn't appear to exist [ 302.284690][T11983] [ 302.329714][T11990] bpf_jit: unknown opcode 06 [ 302.408964][T12000] openvswitch: netlink: EtherType 535 is less than min 600 [ 302.588693][T12022] netlink: 'syz.4.3424': attribute type 19 has an invalid length. [ 303.013753][T12072] syz.2.3446 uses obsolete (PF_INET,SOCK_PACKET) [ 303.464888][T12103] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.3462 (12103) [ 303.475971][T12103] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 303.477854][T12103] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 303.486781][T12103] BTRFS info (device loop0): enabling disk space caching [ 303.488007][T12103] BTRFS info (device loop0): force clearing of disk cache [ 303.489117][T12103] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 303.497619][T12103] BTRFS info (device loop0): use zstd compression, level 3 [ 303.498855][T12103] BTRFS info (device loop0): disk space caching is enabled [ 303.519888][T12137] netlink: 'syz.1.3476': attribute type 19 has an invalid length. [ 303.607127][T12146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.633112][T12146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.723086][T12103] BTRFS info (device loop0): enabling ssd optimizations [ 303.724862][T12103] BTRFS info (device loop0): rebuilding free space tree [ 303.749422][T12103] BTRFS info (device loop0): disabling free space tree [ 303.750860][T12103] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 303.752734][T12103] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 303.880432][ T4363] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 304.076460][T12209] SET target dimension over the limit! [ 304.124612][T12212] netlink: 'syz.0.3507': attribute type 21 has an invalid length. [ 304.219382][T12193] set_capacity_and_notify: 5 callbacks suppressed [ 304.219392][T12193] loop4: detected capacity change from 0 to 32768 [ 304.232874][T12193] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 304.234511][T12193] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 304.243247][T12193] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 304.252875][ T7357] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 304.254179][ T7357] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 304.281439][ T7357] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 25ms [ 304.282975][ T7357] gfs2: fsid=syz:syz.0: jid=0: Done [ 304.283953][T12193] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 304.379013][T12193] gfs2: fsid=syz:syz.0: found 1 quota changes [ 304.526068][ T4370] gfs2: fsid=syz:syz.0: inum=2340 error=-28, nblocks=1, full=1 fail_pt=0 [ 304.527691][ T4370] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 304.529891][ T4370] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 304.533233][ T4370] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 304.550089][ T4370] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 304.552674][ T4370] CPU: 0 PID: 4370 Comm: syz-executor Not tainted syzkaller #0 [ 304.554031][ T4370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 304.555746][ T4370] Call trace: [ 304.556300][ T4370] dump_backtrace+0x1c4/0x1f0 [ 304.557164][ T4370] show_stack+0x2c/0x3c [ 304.557866][ T4370] __dump_stack+0x30/0x40 [ 304.558648][ T4370] dump_stack_lvl+0xf4/0x15c [ 304.559455][ T4370] dump_stack+0x1c/0x5c [ 304.560153][ T4370] gfs2_assert_warn_i+0x16c/0x26c [ 304.561015][ T4370] gfs2_quota_cleanup+0x444/0x640 [ 304.561908][ T4370] gfs2_make_fs_ro+0x36c/0x444 [ 304.562746][ T4370] gfs2_put_super+0x1dc/0x744 [ 304.563616][ T4370] generic_shutdown_super+0x138/0x32c [ 304.564551][ T4370] kill_block_super+0x78/0xe0 [ 304.565339][ T4370] gfs2_kill_sb+0xc4/0xd8 [ 304.566120][ T4370] deactivate_locked_super+0xb4/0x128 [ 304.567043][ T4370] deactivate_super+0xe4/0x104 [ 304.567908][ T4370] cleanup_mnt+0x3a8/0x430 [ 304.568672][ T4370] __cleanup_mnt+0x20/0x30 [ 304.569426][ T4370] task_work_run+0x1f4/0x280 [ 304.570264][ T4370] do_notify_resume+0x20f8/0x2c84 [ 304.571130][ T4370] el0_svc+0x98/0x128 [ 304.571835][ T4370] el0t_64_sync_handler+0x84/0xf0 [ 304.572712][ T4370] el0t_64_sync+0x18c/0x190 [ 304.714761][T12267] netlink: 'syz.2.3534': attribute type 10 has an invalid length. [ 304.716248][T12267] __nla_validate_parse: 4 callbacks suppressed [ 304.716261][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3534'. [ 304.910296][T12259] loop0: detected capacity change from 0 to 32768 [ 305.097748][T12319] rdma_rxe: rxe_register_device failed with error -23 [ 305.099263][T12319] rdma_rxe: failed to add bridge_slave_1 [ 305.345060][T12341] SET target dimension over the limit! [ 305.919987][T12404] netlink: 'syz.2.3601': attribute type 1 has an invalid length. [ 306.040721][T12419] loop2: detected capacity change from 0 to 128 [ 306.067678][T12417] loop4: detected capacity change from 0 to 1024 [ 306.085946][T12417] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 306.134210][ T14] kernel write not supported for file /vcs (pid: 14 comm: kworker/0:1) [ 306.299441][T12452] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 306.568014][T12454] loop0: detected capacity change from 0 to 40427 [ 306.578619][T12454] F2FS-fs (loop0): Wrong segment_count / block_count (64 > 16384) [ 306.580722][T12454] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 306.616903][T12454] F2FS-fs (loop0): Found nat_bits in checkpoint [ 306.659882][T12454] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 306.661471][T12454] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 306.903252][T12527] netlink: 'syz.3.3661': attribute type 10 has an invalid length. [ 306.919318][T12527] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.921725][T12527] device bridge_slave_1 left promiscuous mode [ 306.922717][T12527] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.975017][T12533] SET target dimension over the limit! [ 306.996951][T12527] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 306.999085][T12532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3665'. [ 307.004119][T12532] netlink: 'syz.2.3665': attribute type 2 has an invalid length. [ 307.005438][T12532] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3665'. [ 307.006879][T12532] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 307.009029][T12532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.031122][T12507] loop4: detected capacity change from 0 to 32768 [ 307.052501][T12541] netlink: 'syz.1.3677': attribute type 1 has an invalid length. [ 307.124641][T12507] XFS (loop4): Mounting V5 Filesystem [ 307.235679][T12507] XFS (loop4): Ending clean mount [ 307.237649][T12507] XFS (loop4): Quotacheck needed: Please wait. [ 307.249066][T12507] XFS (loop4): Quotacheck: Done. [ 307.281579][ T4370] XFS (loop4): Unmounting Filesystem [ 307.347478][ T7356] kernel write not supported for file /vcs (pid: 7356 comm: kworker/1:6) [ 307.445306][T12591] loop0: detected capacity change from 0 to 256 [ 307.458115][T12591] exfat: Deprecated parameter 'namecase' [ 307.488933][T12591] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 307.582049][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3695'. [ 307.909423][T12653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.910680][T12653] IPv6: NLM_F_CREATE should be set when creating new route [ 307.912039][T12653] IPv6: NLM_F_CREATE should be set when creating new route [ 307.924944][T12655] netlink: 'syz.2.3720': attribute type 10 has an invalid length. [ 307.950103][T12655] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.960865][T12655] device bridge_slave_1 left promiscuous mode [ 307.962025][T12655] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.013648][T12655] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 308.027458][T12659] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 308.133977][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3730'. [ 308.135596][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3730'. [ 308.222259][T12681] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 308.243297][T12681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 308.247661][T12681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 308.265936][T12686] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3737'. [ 308.356909][T12699] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 308.391282][T12705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3744'. [ 308.469353][T12715] loop4: detected capacity change from 0 to 16 [ 308.480791][T12715] erofs: (device loop4): mounted with root inode @ nid 36. [ 308.535990][T12724] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3755'. [ 308.616667][T12733] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 308.628400][T12735] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 308.634924][T12735] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 308.653014][T12735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 308.654405][T12735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 308.737072][T12707] loop0: detected capacity change from 0 to 32768 [ 308.750787][T12707] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.3746 (12707) [ 308.756919][T12707] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 308.758701][T12707] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 308.766275][T12707] BTRFS info (device loop0): using free space tree [ 308.954024][T12776] loop4: detected capacity change from 0 to 256 [ 308.977601][T12776] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3163b44b, utbl_chksum : 0xe619d30d) [ 309.042210][T12789] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 309.048017][T12789] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 309.066393][T12789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.067704][T12789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.132270][T12707] BTRFS info (device loop0): enabling ssd optimizations [ 309.223648][ T4363] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 309.494560][T12844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3805'. [ 309.889745][T12894] loop0: detected capacity change from 0 to 4096 [ 309.899814][T12889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.915935][T12898] loop4: detected capacity change from 0 to 1024 [ 309.917622][T12894] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 309.919389][T12894] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 309.921669][T12894] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 309.939441][T12898] EXT4-fs: Ignoring removed nobh option [ 309.993863][T12894] ntfs: volume version 3.1. [ 309.997576][T12894] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 309.999458][T12898] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 310.010109][T12898] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #12: block 7: comm syz.4.3831: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 310.017674][T12894] ntfs: (device loop0): load_and_init_quota(): Failed to find inode number for $Quota. [ 310.021708][T12894] ntfs: (device loop0): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 310.023931][T12894] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 310.030144][T12894] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 310.031953][T12894] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 310.041076][T12906] loop2: detected capacity change from 0 to 4096 [ 310.052255][T12898] EXT4-fs (loop4): Remounting filesystem read-only [ 310.093030][T12913] dlm: no locking on control device [ 310.114055][ T4370] EXT4-fs (loop4): unmounting filesystem. [ 310.277206][T12939] x_tables: duplicate underflow at hook 2 [ 310.301154][T12943] loop4: detected capacity change from 0 to 1024 [ 310.326701][T12943] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 310.377482][T12943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.379809][T12943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.412427][T12957] loop2: detected capacity change from 0 to 256 [ 310.640206][T12985] netlink: 'syz.1.3874': attribute type 17 has an invalid length. [ 310.641732][T12985] netlink: 'syz.1.3874': attribute type 16 has an invalid length. [ 310.643097][T12985] __nla_validate_parse: 3 callbacks suppressed [ 310.643112][T12985] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3874'. [ 310.800934][T12967] loop2: detected capacity change from 0 to 32768 [ 310.810710][T12967] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 310.812157][T12967] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 310.825710][T12967] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 310.831711][ T4410] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 310.833003][ T4410] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 310.864512][ T4410] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 29ms [ 310.866922][ T4410] gfs2: fsid=syz:syz.0: jid=0: Done [ 310.873517][T12967] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 310.888495][T13016] loop0: detected capacity change from 0 to 256 [ 310.906532][T13016] exfat: Deprecated parameter 'namecase' [ 310.907566][T13016] exfat: Deprecated parameter 'namecase' [ 310.931241][T13016] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 310.993434][T12967] gfs2: fsid=syz:syz.0: found 1 quota changes [ 311.068257][T13038] netlink: 'syz.4.3901': attribute type 1 has an invalid length. [ 311.085405][ T4371] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 311.102973][ T4371] CPU: 1 PID: 4371 Comm: syz-executor Not tainted syzkaller #0 [ 311.104362][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 311.106157][ T4371] Call trace: [ 311.106778][ T4371] dump_backtrace+0x1c4/0x1f0 [ 311.107656][ T4371] show_stack+0x2c/0x3c [ 311.108451][ T4371] __dump_stack+0x30/0x40 [ 311.109198][ T4371] dump_stack_lvl+0xf4/0x15c [ 311.110031][ T4371] dump_stack+0x1c/0x5c [ 311.110877][ T4371] gfs2_assert_warn_i+0x16c/0x26c [ 311.111895][ T4371] gfs2_quota_cleanup+0x444/0x640 [ 311.112875][ T4371] gfs2_make_fs_ro+0x36c/0x444 [ 311.113790][ T4371] gfs2_put_super+0x1dc/0x744 [ 311.114687][ T4371] generic_shutdown_super+0x138/0x32c [ 311.115802][ T4371] kill_block_super+0x78/0xe0 [ 311.116675][ T4371] gfs2_kill_sb+0xc4/0xd8 [ 311.117475][ T4371] deactivate_locked_super+0xb4/0x128 [ 311.118369][ T4371] deactivate_super+0xe4/0x104 [ 311.119201][ T4371] cleanup_mnt+0x3a8/0x430 [ 311.119972][ T4371] __cleanup_mnt+0x20/0x30 [ 311.120898][ T4371] task_work_run+0x1f4/0x280 [ 311.121843][ T4371] do_notify_resume+0x20f8/0x2c84 [ 311.122868][ T4371] el0_svc+0x98/0x128 [ 311.123664][ T4371] el0t_64_sync_handler+0x84/0xf0 [ 311.124661][ T4371] el0t_64_sync+0x18c/0x190 [ 311.252852][T13063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3912'. [ 311.673739][T13114] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 41543 - 0 [ 311.675255][T13114] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 41543 - 0 [ 311.676791][T13114] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 41543 - 0 [ 311.689203][T13114] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 41543 - 0 [ 311.690977][T13114] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 41922 - 0 [ 311.697284][T13114] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 41922 - 0 [ 311.699280][T13114] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 41922 - 0 [ 311.708105][T13114] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 41922 - 0 [ 311.710697][T13114] device geneve3 entered promiscuous mode [ 311.720624][T13114] IPv6: ADDRCONF(NETDEV_CHANGE): geneve3: link becomes ready [ 311.814982][T13139] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3950'. [ 312.035448][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3967'. [ 312.083412][T13181] xt_hashlimit: Unknown mode mask 700, kernel too old? [ 312.145671][T13189] netlink: 'syz.1.3974': attribute type 12 has an invalid length. [ 312.168660][T13189] netlink: 'syz.1.3974': attribute type 12 has an invalid length. [ 312.170130][T13189] netlink: 'syz.1.3974': attribute type 12 has an invalid length. [ 312.339230][T13215] x_tables: unsorted entry at hook 3 [ 312.419768][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3990'. [ 312.473321][T13231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3993'. [ 312.543100][T13242] netlink: 'syz.3.3999': attribute type 1 has an invalid length. [ 312.543877][T13240] netlink: 'syz.0.3998': attribute type 15 has an invalid length. [ 312.551606][T13242] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.3999'. [ 312.599847][T13244] device geneve1 entered promiscuous mode [ 312.875667][T13280] loop0: detected capacity change from 0 to 256 [ 312.945659][T13286] device geneve2 entered promiscuous mode [ 313.108525][T13305] loop2: detected capacity change from 0 to 16 [ 313.118490][T13305] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 313.190959][T13314] netlink: 'syz.1.4035': attribute type 1 has an invalid length. [ 313.215111][T13318] x_tables: unsorted underflow at hook 4 [ 313.217065][T13319] Option ' äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 313.341467][T13335] No such timeout policy "syz0" [ 313.560542][T13368] xt_addrtype: ipv6 does not support BROADCAST matching [ 313.609632][T13372] netlink: 'syz.4.4062': attribute type 1 has an invalid length. [ 313.611079][T13372] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4062'. [ 313.621321][T13372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4062'. [ 313.715687][T13353] loop0: detected capacity change from 0 to 32768 [ 313.719691][T13385] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4068'. [ 313.734333][T13353] read_mapping_page failed! [ 313.735243][T13353] ERROR: (device loop0): txAbort: [ 313.735243][T13353] [ 313.754674][T13353] ERROR: (device loop0): remounting filesystem as read-only [ 313.880265][T13399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.881904][T13399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.993751][T13380] XFS (loop4): Mounting V5 Filesystem [ 314.031261][T13420] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.080417][T13380] XFS (loop4): Ending clean mount [ 314.099419][T13431] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 314.159220][ T4370] XFS (loop4): Unmounting Filesystem [ 314.379550][T13467] exfat: Deprecated parameter 'utf8' [ 314.388391][T13467] exfat: Deprecated parameter 'namecase' [ 314.389488][T13467] exfat: Deprecated parameter 'namecase' [ 314.390459][T13467] exfat: Deprecated parameter 'utf8' [ 314.396665][T13467] exFAT-fs (loop2): bogus sector size bits : 0 [ 314.397689][T13467] exFAT-fs (loop2): failed to read boot sector [ 314.398871][T13467] exFAT-fs (loop2): failed to recognize exfat type [ 314.406774][T13469] FAT-fs (loop0): Directory bread(block 64) failed [ 314.408197][T13469] FAT-fs (loop0): Directory bread(block 65) failed [ 314.409325][T13469] FAT-fs (loop0): Directory bread(block 66) failed [ 314.410473][T13469] FAT-fs (loop0): Directory bread(block 67) failed [ 314.411543][T13469] FAT-fs (loop0): Directory bread(block 68) failed [ 314.419070][T13469] FAT-fs (loop0): Directory bread(block 69) failed [ 314.420375][T13469] FAT-fs (loop0): Directory bread(block 70) failed [ 314.421552][T13469] FAT-fs (loop0): Directory bread(block 71) failed [ 314.422795][T13469] FAT-fs (loop0): Directory bread(block 72) failed [ 314.429919][T13469] FAT-fs (loop0): Directory bread(block 73) failed [ 314.882122][T13533] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 314.883561][T13533] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 314.889356][T13533] EXT4-fs (loop0): orphan cleanup on readonly fs [ 314.890575][T13533] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #13: comm syz.0.4138: iget: bad i_size value: 12154761577498 [ 314.920853][T13533] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.4138: couldn't read orphan inode 13 (err -117) [ 314.938046][T13533] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 314.953125][T13533] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.4138: dx entry: limit 65535 != root limit 120 [ 314.955260][T13533] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.4138: Corrupt directory, running e2fsck is recommended [ 315.020381][ T4363] EXT4-fs (loop0): unmounting filesystem. [ 315.040594][T13540] xt_CT: No such helper "snmp_trap" [ 315.068036][T13513] F2FS-fs (loop2): invalid crc value [ 315.084399][T13513] F2FS-fs (loop2): Found nat_bits in checkpoint [ 315.110393][T13513] F2FS-fs (loop2): Start checkpoint disabled! [ 315.135295][T13513] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 315.187106][ T11] kworker/u4:1: attempt to access beyond end of device [ 315.187106][ T11] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 315.486439][T13598] x_tables: unsorted underflow at hook 3 [ 315.881362][T13608] set_capacity_and_notify: 6 callbacks suppressed [ 315.881375][T13608] loop0: detected capacity change from 0 to 32768 [ 315.888127][T13608] XFS: ikeep mount option is deprecated. [ 315.889246][T13608] XFS: noikeep mount option is deprecated. [ 315.997201][T13608] XFS (loop0): Mounting V5 Filesystem [ 316.011630][T13662] loop4: detected capacity change from 0 to 512 [ 316.019472][T13662] EXT4-fs: Ignoring removed orlov option [ 316.020525][T13662] EXT4-fs: Ignoring removed mblk_io_submit option [ 316.075686][T13662] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 316.077489][T13662] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.4196: attempt to clear invalid blocks 2 len 1 [ 316.079995][T13608] XFS (loop0): Ending clean mount [ 316.081325][T13662] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 316.092146][T13662] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4196: invalid indirect mapped block 1819239214 (level 0) [ 316.095029][T13608] XFS (loop0): Quotacheck needed: Please wait. [ 316.106517][T13662] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4196: invalid indirect mapped block 1819239214 (level 1) [ 316.131530][T13662] EXT4-fs (loop4): 1 truncate cleaned up [ 316.132529][T13662] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 316.136304][T13672] validate_nla: 3 callbacks suppressed [ 316.136315][T13672] netlink: 'syz.3.4199': attribute type 1 has an invalid length. [ 316.157718][T13608] XFS (loop0): Quotacheck: Done. [ 316.188943][ T4370] EXT4-fs (loop4): unmounting filesystem. [ 316.265097][ T4363] XFS (loop0): Unmounting Filesystem [ 316.348214][T13701] __nla_validate_parse: 10 callbacks suppressed [ 316.348227][T13701] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4215'. [ 316.469322][T13715] cgroup: noprefix used incorrectly [ 316.650010][T13743] loop4: detected capacity change from 0 to 164 [ 316.661390][T13743] rock: directory entry would overflow storage [ 316.662467][T13743] rock: sig=0x4d4e, size=5, remaining=3 [ 316.663354][T13743] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 316.783829][T13764] set match dimension is over the limit! [ 316.871812][T13775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4249'. [ 316.873465][T13775] netlink: 'syz.4.4249': attribute type 1 has an invalid length. [ 316.900652][T13775] netlink: 'syz.4.4249': attribute type 1 has an invalid length. [ 316.953094][T13781] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4253'. [ 317.012932][T13766] loop0: detected capacity change from 0 to 32768 [ 317.019559][T13766] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.4244 (13766) [ 317.027555][T13766] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 317.029420][T13766] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 317.031522][T13766] BTRFS info (device loop0): force zlib compression, level 3 [ 317.032921][T13766] BTRFS info (device loop0): turning on flush-on-commit [ 317.034373][T13766] BTRFS info (device loop0): max_inline at 0 [ 317.035427][T13766] BTRFS info (device loop0): using free space tree [ 317.139453][T13766] BTRFS info (device loop0): enabling ssd optimizations [ 317.179939][ T4363] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 317.293264][T13827] netlink: 216 bytes leftover after parsing attributes in process `syz.2.4265'. [ 317.388375][T13841] set match dimension is over the limit! [ 317.529662][T13864] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 317.616158][T13873] set match dimension is over the limit! [ 317.705889][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.131005][T13940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4331'. [ 318.191067][T13946] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 318.233413][T13952] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4325'. [ 318.395634][T13865] loop2: detected capacity change from 0 to 131072 [ 318.405816][T13865] F2FS-fs (loop2): Invalid log sectors per block(570425347) log sectorsize(9) [ 318.407558][T13865] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 318.418774][T13865] F2FS-fs (loop2): invalid crc value [ 318.445491][T13865] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 318.481276][T13865] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 318.484155][T13865] F2FS-fs (loop2): Bad quota inode 2:50331648 [ 318.485072][T13865] F2FS-fs (loop2): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 318.486659][T13865] F2FS-fs (loop2): Cannot turn on quotas: error -22 [ 318.498525][T13865] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 318.503089][T13865] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 318.550883][T13865] F2FS-fs (loop2): quota sysfile already exists [ 318.730330][T14009] netlink: 'syz.0.4353': attribute type 10 has an invalid length. [ 318.765821][T14009] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.780242][T14009] infiniband syz0: set down [ 318.781352][T14009] device bridge_slave_1 left promiscuous mode [ 318.782455][T14009] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.837614][T14009] infiniband syz0: set active [ 318.839037][T14009] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 318.843696][ T4430] bond0: (slave bridge_slave_1): interface is now down [ 318.846990][ T9] infiniband syz0: set active [ 318.863753][ T9] bond0: (slave bridge_slave_1): interface is now down [ 318.865184][ T9] bond0: now running without any active interface! [ 318.926571][T14032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4363'. [ 318.979900][T14039] x_tables: duplicate underflow at hook 2 [ 318.999842][T14042] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.117092][T14055] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4374'. [ 319.153713][T14060] loop2: detected capacity change from 0 to 16 [ 319.169255][T14060] erofs: (device loop2): mounted with root inode @ nid 36. [ 319.349958][T14068] netlink: 'syz.1.4380': attribute type 10 has an invalid length. [ 319.353106][T14068] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.358641][T14068] device bridge_slave_1 left promiscuous mode [ 319.360735][T14068] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.410057][T14068] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 319.467912][T14079] netlink: 292 bytes leftover after parsing attributes in process `syz.4.4385'. [ 319.531075][T14088] dlm: no locking on control device [ 319.653359][T14109] netlink: 'syz.1.4402': attribute type 10 has an invalid length. [ 319.799689][T14134] loop0: detected capacity change from 0 to 256 [ 319.898731][T14148] netlink: 'syz.3.4420': attribute type 17 has an invalid length. [ 319.900011][T14148] netlink: 'syz.3.4420': attribute type 16 has an invalid length. [ 319.901202][T14148] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4420'. [ 320.104481][T14180] loop2: detected capacity change from 0 to 4096 [ 320.107294][T14180] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 320.108980][T14180] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 320.111480][T14180] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 320.119458][T14180] ntfs: volume version 3.1. [ 320.127046][T14180] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 320.129340][T14180] ntfs: (device loop2): load_and_init_quota(): Failed to find inode number for $Quota. [ 320.129458][T14179] 8021q: adding VLAN 0 to HW filter on device bond3 [ 320.131025][T14180] ntfs: (device loop2): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 320.134400][T14180] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 320.136469][T14180] ntfs: (device loop2): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 320.138191][T14180] ntfs: (device loop2): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 320.145722][T14184] x_tables: duplicate underflow at hook 2 [ 320.430349][T14212] 8021q: adding VLAN 0 to HW filter on device bond2 [ 320.537559][T14220] loop4: detected capacity change from 0 to 4096 [ 320.540037][T14220] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 320.542086][T14223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.543814][T14223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.555287][T14220] ntfs: volume version 3.1. [ 320.610114][T14235] dlm: no locking on control device [ 320.727505][T14251] loop4: detected capacity change from 0 to 256 [ 320.728769][T14249] netlink: 'syz.0.4481': attribute type 17 has an invalid length. [ 320.736475][T14249] netlink: 'syz.0.4481': attribute type 16 has an invalid length. [ 321.335680][T14295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.337436][T14295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.647178][T14352] loop4: detected capacity change from 0 to 256 [ 321.648601][T14352] exfat: Deprecated parameter 'namecase' [ 321.649634][T14352] exfat: Deprecated parameter 'namecase' [ 321.660171][T14352] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 321.907550][T14389] loop2: detected capacity change from 0 to 256 [ 321.922266][T14389] exfat: Deprecated parameter 'namecase' [ 321.924502][T14389] exfat: Deprecated parameter 'namecase' [ 321.933420][T14389] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 322.215087][T14415] validate_nla: 3 callbacks suppressed [ 322.215101][T14415] netlink: 'syz.1.4553': attribute type 1 has an invalid length. [ 322.314486][T14427] loop2: detected capacity change from 0 to 1024 [ 322.321908][T14427] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 322.331854][T14409] loop0: detected capacity change from 0 to 32768 [ 322.347295][T14409] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 322.357787][T14409] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 322.367180][T14409] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 322.377476][ T4813] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 322.378657][ T4813] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 322.398755][ T4813] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 18ms [ 322.400066][ T4813] gfs2: fsid=syz:syz.0: jid=0: Done [ 322.400979][T14409] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 322.410522][T14427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.420397][T14427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.423071][ T4604] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 322.475203][T14447] __nla_validate_parse: 4 callbacks suppressed [ 322.475214][T14447] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4568'. [ 322.547894][T14409] gfs2: fsid=syz:syz.0: found 1 quota changes [ 322.616459][ T4363] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 322.619087][ T4363] CPU: 0 PID: 4363 Comm: syz-executor Not tainted syzkaller #0 [ 322.620392][ T4363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 322.622136][ T4363] Call trace: [ 322.622722][ T4363] dump_backtrace+0x1c4/0x1f0 [ 322.623535][ T4363] show_stack+0x2c/0x3c [ 322.624311][ T4363] __dump_stack+0x30/0x40 [ 322.625107][ T4363] dump_stack_lvl+0xf4/0x15c [ 322.625917][ T4363] dump_stack+0x1c/0x5c [ 322.626625][ T4363] gfs2_assert_warn_i+0x16c/0x26c [ 322.627472][ T4363] gfs2_quota_cleanup+0x444/0x640 [ 322.628356][ T4363] gfs2_make_fs_ro+0x36c/0x444 [ 322.629187][ T4363] gfs2_put_super+0x1dc/0x744 [ 322.629958][ T4363] generic_shutdown_super+0x138/0x32c [ 322.630844][ T4363] kill_block_super+0x78/0xe0 [ 322.631679][ T4363] gfs2_kill_sb+0xc4/0xd8 [ 322.632393][ T4363] deactivate_locked_super+0xb4/0x128 [ 322.633293][ T4363] deactivate_super+0xe4/0x104 [ 322.634091][ T4363] cleanup_mnt+0x3a8/0x430 [ 322.634860][ T4363] __cleanup_mnt+0x20/0x30 [ 322.635606][ T4363] task_work_run+0x1f4/0x280 [ 322.636405][ T4363] do_notify_resume+0x20f8/0x2c84 [ 322.637255][ T4363] el0_svc+0x98/0x128 [ 322.637934][ T4363] el0t_64_sync_handler+0x84/0xf0 [ 322.638811][ T4363] el0t_64_sync+0x18c/0x190 [ 322.880828][T14491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4600'. [ 322.941528][T14499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4593'. [ 323.040237][T14512] xt_hashlimit: Unknown mode mask 700, kernel too old? [ 323.043336][T14510] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 41820 - 0 [ 323.044989][T14510] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 41820 - 0 [ 323.058543][T14510] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 41820 - 0 [ 323.060066][T14510] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 41820 - 0 [ 323.067511][T14510] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 46790 - 0 [ 323.068968][T14510] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 46790 - 0 [ 323.083227][T14510] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 46790 - 0 [ 323.084596][T14510] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 46790 - 0 [ 323.086104][T14510] device geneve3 entered promiscuous mode [ 323.109696][T14482] loop4: detected capacity change from 0 to 32768 [ 323.121955][T14482] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 323.123317][T14482] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 323.134888][T14482] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 323.141236][ T1990] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 323.142752][ T1990] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 323.167167][ T1990] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 22ms [ 323.168604][ T1990] gfs2: fsid=syz:syz.0: jid=0: Done [ 323.169608][T14482] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 323.299257][T14482] gfs2: fsid=syz:syz.0: found 1 quota changes [ 323.377487][ T4370] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 323.381630][T14549] loop0: detected capacity change from 0 to 1024 [ 323.383418][T14549] EXT4-fs (loop0): The Hurd can't support 64-bit file systems [ 323.388335][ T4370] CPU: 0 PID: 4370 Comm: syz-executor Not tainted syzkaller #0 [ 323.389865][ T4370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 323.391697][ T4370] Call trace: [ 323.392308][ T4370] dump_backtrace+0x1c4/0x1f0 [ 323.393277][ T4370] show_stack+0x2c/0x3c [ 323.394136][ T4370] __dump_stack+0x30/0x40 [ 323.394927][ T4370] dump_stack_lvl+0xf4/0x15c [ 323.395783][ T4370] dump_stack+0x1c/0x5c [ 323.396574][ T4370] gfs2_assert_warn_i+0x16c/0x26c [ 323.397604][ T4370] gfs2_quota_cleanup+0x444/0x640 [ 323.398482][ T4370] gfs2_make_fs_ro+0x36c/0x444 [ 323.399360][ T4370] gfs2_put_super+0x1dc/0x744 [ 323.400216][ T4370] generic_shutdown_super+0x138/0x32c [ 323.401162][ T4370] kill_block_super+0x78/0xe0 [ 323.401997][ T4370] gfs2_kill_sb+0xc4/0xd8 [ 323.402719][ T4370] deactivate_locked_super+0xb4/0x128 [ 323.403650][ T4370] deactivate_super+0xe4/0x104 [ 323.404579][ T4370] cleanup_mnt+0x3a8/0x430 [ 323.405451][ T4370] __cleanup_mnt+0x20/0x30 [ 323.406299][ T4370] task_work_run+0x1f4/0x280 [ 323.407106][ T4370] do_notify_resume+0x20f8/0x2c84 [ 323.408034][ T4370] el0_svc+0x98/0x128 [ 323.408713][ T4370] el0t_64_sync_handler+0x84/0xf0 [ 323.409602][ T4370] el0t_64_sync+0x18c/0x190 [ 323.544129][T14555] netlink: 'syz.3.4618': attribute type 12 has an invalid length. [ 323.545512][T14555] netlink: 'syz.3.4618': attribute type 12 has an invalid length. [ 323.546767][T14555] netlink: 'syz.3.4618': attribute type 12 has an invalid length. [ 323.756390][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 323.846178][T14582] x_tables: unsorted entry at hook 3 [ 323.948733][ T14] usb 1-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 323.950603][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.962205][ T14] usb 1-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 323.963624][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.964969][ T14] usb 1-1: Product: syz [ 323.965666][ T14] usb 1-1: Manufacturer: syz [ 323.980112][ T14] usb 1-1: SerialNumber: syz [ 324.083837][T14610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4656'. [ 324.216984][ T14] usb 1-1: 0:1 : does not exist [ 324.218089][ T14] usb 1-1: unit 63 not found! [ 324.218851][ T14] usb 1-1: unit 224 not found! [ 324.240269][ T14] usb 1-1: USB disconnect, device number 3 [ 324.275577][T14637] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4658'. [ 324.481809][ T5088] udevd[5088]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.486215][T14661] netlink: 'syz.4.4670': attribute type 1 has an invalid length. [ 324.487718][T14661] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.4670'. [ 324.540046][T14667] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4672'. [ 324.553167][T14669] loop4: detected capacity change from 0 to 512 [ 324.561641][T14669] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 324.600710][T14669] UDF-fs: error (device loop4): udf_read_inode: (ino 19) failed ident=264 [ 324.711562][T14691] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 46701 - 0 [ 324.713067][T14691] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 46701 - 0 [ 324.714571][T14691] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 46701 - 0 [ 324.716027][T14691] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 46701 - 0 [ 324.717645][T14691] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 40975 - 0 [ 324.721334][T14694] xt_hashlimit: Unknown mode mask 700, kernel too old? [ 324.728937][T14691] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 40975 - 0 [ 324.730494][T14691] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 40975 - 0 [ 324.748833][T14691] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 40975 - 0 [ 324.750896][T14691] device geneve2 entered promiscuous mode [ 324.775325][T14699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4688'. [ 324.914295][T14719] netlink: 'syz.3.4696': attribute type 15 has an invalid length. [ 324.995845][T14730] netlink: 'syz.2.4701': attribute type 12 has an invalid length. [ 325.001162][T14730] netlink: 'syz.2.4701': attribute type 12 has an invalid length. [ 325.002535][T14730] netlink: 'syz.2.4701': attribute type 12 has an invalid length. [ 325.084984][T14741] device geneve1 entered promiscuous mode [ 325.165769][T14756] device geneve4 entered promiscuous mode [ 325.175258][T14756] IPv6: ADDRCONF(NETDEV_CHANGE): geneve4: link becomes ready [ 325.208150][T14759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.209972][T14759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.433211][T14796] x_tables: unsorted underflow at hook 4 [ 325.439187][T14795] netlink: 'syz.0.4736': attribute type 1 has an invalid length. [ 325.613348][T14817] x_tables: unsorted entry at hook 3 [ 325.661717][T14823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4750'. [ 325.692243][T14831] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4761'. [ 325.719754][T14833] loop0: detected capacity change from 0 to 512 [ 325.721281][T14833] EXT4-fs: Ignoring removed nobh option [ 325.730022][T14833] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 325.748882][T14833] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 325.750628][T14833] EXT4-fs (loop0): orphan cleanup on readonly fs [ 325.778561][T14833] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.4752: attempt to clear invalid blocks 1024 len 1 [ 325.815753][T14833] EXT4-fs (loop0): Remounting filesystem read-only [ 325.825243][T14833] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4752: bg 0: block 361: padding at end of block bitmap is not set [ 325.844459][T14833] EXT4-fs (loop0): Remounting filesystem read-only [ 325.845700][T14833] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 325.852561][T14833] EXT4-fs (loop0): Remounting filesystem read-only [ 325.853843][T14833] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4752: invalid indirect mapped block 1811939328 (level 0) [ 325.880358][T14833] EXT4-fs (loop0): Remounting filesystem read-only [ 325.881690][T14833] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4752: invalid indirect mapped block 2185560079 (level 1) [ 325.885027][T14833] EXT4-fs (loop0): Remounting filesystem read-only [ 325.886275][T14833] EXT4-fs (loop0): 1 truncate cleaned up [ 325.887475][T14833] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 325.905411][ T4363] EXT4-fs (loop0): unmounting filesystem. [ 326.083533][T14876] xt_addrtype: ipv6 does not support BROADCAST matching [ 326.086798][T14878] loop4: detected capacity change from 0 to 1024 [ 326.093771][T14878] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 326.127520][T14878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.129393][T14878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.137783][T14887] Option ' äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 326.209855][T14894] No such timeout policy "syz0" [ 326.437201][T14895] loop2: detected capacity change from 0 to 32768 [ 326.463762][T14895] read_mapping_page failed! [ 326.464640][T14895] ERROR: (device loop2): txAbort: [ 326.464640][T14895] [ 326.483897][T14895] ERROR: (device loop2): remounting filesystem as read-only [ 326.611314][T14942] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 326.688701][ T4363] EXT4-fs (loop0): unmounting filesystem. [ 326.861120][T14972] device geneve3 entered promiscuous mode [ 326.979194][T14988] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 327.085353][ T4370] EXT4-fs (loop4): unmounting filesystem. [ 327.194950][T15003] device geneve1 entered promiscuous mode [ 327.200855][T15011] device geneve3 entered promiscuous mode [ 327.434081][T15042] set_capacity_and_notify: 3 callbacks suppressed [ 327.434091][T15042] loop4: detected capacity change from 0 to 16 [ 327.444242][T15042] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 327.570603][T15050] device geneve1 entered promiscuous mode [ 327.575176][T15055] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 327.631906][T15065] validate_nla: 4 callbacks suppressed [ 327.631917][T15065] netlink: 'syz.4.4868': attribute type 1 has an invalid length. [ 327.643074][T15068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.644698][T15068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.683394][T15070] x_tables: unsorted underflow at hook 4 [ 327.948166][T15111] Option ' äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 327.992459][T15115] netlink: 'syz.0.4888': attribute type 21 has an invalid length. [ 327.993847][T15115] __nla_validate_parse: 5 callbacks suppressed [ 327.993860][T15115] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4888'. [ 328.163923][T15129] xt_addrtype: ipv6 does not support BROADCAST matching [ 328.270117][T15142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4902'. [ 328.290812][T15123] loop4: detected capacity change from 0 to 32768 [ 328.302678][T15147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4905'. [ 328.308022][T15123] read_mapping_page failed! [ 328.308876][T15123] ERROR: (device loop4): txAbort: [ 328.308876][T15123] [ 328.317742][T15147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4905'. [ 328.332554][T15123] ERROR: (device loop4): remounting filesystem as read-only [ 328.394292][T15157] No such timeout policy "syz0" [ 328.577948][T15175] loop2: detected capacity change from 0 to 256 [ 328.595969][T15175] FAT-fs (loop2): Directory bread(block 64) failed [ 328.598451][T15175] FAT-fs (loop2): Directory bread(block 65) failed [ 328.613548][T15175] FAT-fs (loop2): Directory bread(block 66) failed [ 328.615905][T15175] FAT-fs (loop2): Directory bread(block 67) failed [ 328.619804][T15175] FAT-fs (loop2): Directory bread(block 68) failed [ 328.630130][T15175] FAT-fs (loop2): Directory bread(block 69) failed [ 328.635506][T15175] FAT-fs (loop2): Directory bread(block 70) failed [ 328.638021][T15175] FAT-fs (loop2): Directory bread(block 71) failed [ 328.639095][T15175] FAT-fs (loop2): Directory bread(block 72) failed [ 328.645039][T15175] FAT-fs (loop2): Directory bread(block 73) failed [ 328.917407][T15183] loop0: detected capacity change from 0 to 32768 [ 328.985909][T15183] XFS (loop0): Mounting V5 Filesystem [ 329.042233][T15183] XFS (loop0): Ending clean mount [ 329.068019][T15217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4936'. [ 329.152625][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4942'. [ 329.191612][ T4363] XFS (loop0): Unmounting Filesystem [ 329.504574][T15251] loop0: detected capacity change from 0 to 256 [ 329.537008][T15251] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3163b44b, utbl_chksum : 0xe619d30d) [ 329.854390][T15289] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4972'. [ 329.929091][T15295] xt_CT: No such helper "snmp_trap" [ 330.072059][T15286] loop0: detected capacity change from 0 to 32768 [ 330.095192][T15317] netlink: 'syz.4.4987': attribute type 21 has an invalid length. [ 330.096671][T15317] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4987'. [ 330.148365][T15286] XFS (loop0): Mounting V5 Filesystem [ 330.194672][T15286] XFS (loop0): Ending clean mount [ 330.196173][T15286] XFS (loop0): Quotacheck needed: Please wait. [ 330.209554][T15286] XFS (loop0): Quotacheck: Done. [ 330.211971][T15335] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4991'. [ 330.257230][ T4363] XFS (loop0): Unmounting Filesystem [ 330.401711][T15313] loop2: detected capacity change from 0 to 32768 [ 330.468101][T15313] XFS (loop2): Mounting V5 Filesystem [ 330.507947][T15313] XFS (loop2): Ending clean mount [ 330.588143][T15365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.589750][T15365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.591514][ T4371] XFS (loop2): Unmounting Filesystem [ 330.924360][T15381] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5012'. [ 330.962095][T15384] x_tables: unsorted underflow at hook 3 [ 330.962897][T15385] netlink: 'syz.2.5006': attribute type 1 has an invalid length. [ 331.353884][T15427] Process accounting paused [ 331.446984][T15439] loop0: detected capacity change from 0 to 4096 [ 331.502414][T15448] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.627695][T15466] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 331.776975][T15481] netlink: 'syz.0.5061': attribute type 1 has an invalid length. [ 332.018059][T15482] loop4: detected capacity change from 0 to 40427 [ 332.033690][T15482] F2FS-fs (loop4): invalid crc value [ 332.048318][T15482] F2FS-fs (loop4): Found nat_bits in checkpoint [ 332.075607][T15482] F2FS-fs (loop4): Start checkpoint disabled! [ 332.097353][T15482] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 332.169093][ T534] kworker/u4:4: attempt to access beyond end of device [ 332.169093][ T534] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 332.343340][T15540] netlink: 'syz.2.5097': attribute type 1 has an invalid length. [ 332.349063][T15542] netlink: 'syz.3.5087': attribute type 21 has an invalid length. [ 332.349088][T15536] loop4: detected capacity change from 0 to 4096 [ 332.390679][T15543] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 332.444366][T15553] exfat: Deprecated parameter 'utf8' [ 332.455581][T15553] exfat: Deprecated parameter 'namecase' [ 332.456585][T15553] exfat: Deprecated parameter 'namecase' [ 332.457523][T15553] exfat: Deprecated parameter 'utf8' [ 332.469869][T15553] exFAT-fs (loop0): bogus sector size bits : 0 [ 332.470924][T15553] exFAT-fs (loop0): failed to read boot sector [ 332.471998][T15553] exFAT-fs (loop0): failed to recognize exfat type [ 332.529304][ T5088] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 332.615610][T15579] cgroup: noprefix used incorrectly [ 332.774802][T15606] EXT4-fs: Ignoring removed orlov option [ 332.802748][T15606] EXT4-fs: Ignoring removed mblk_io_submit option [ 332.853010][T15606] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 332.854941][T15606] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.5120: attempt to clear invalid blocks 2 len 1 [ 332.863632][T15606] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 332.874605][T15606] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.5120: invalid indirect mapped block 1819239214 (level 0) [ 332.886828][T15606] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.5120: invalid indirect mapped block 1819239214 (level 1) [ 332.902234][T15606] EXT4-fs (loop0): 1 truncate cleaned up [ 332.903337][T15606] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 333.045164][ T4363] EXT4-fs (loop0): unmounting filesystem. [ 333.167873][T15652] set_capacity_and_notify: 2 callbacks suppressed [ 333.167883][T15652] loop4: detected capacity change from 0 to 512 [ 333.191991][T15652] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 333.193328][T15652] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 333.195386][T15652] EXT4-fs (loop4): orphan cleanup on readonly fs [ 333.204635][T15652] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #13: comm syz.4.5141: iget: bad i_size value: 12154761577498 [ 333.211775][T15652] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.5141: couldn't read orphan inode 13 (err -117) [ 333.218682][T15652] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 333.247065][T15652] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.5141: dx entry: limit 65535 != root limit 120 [ 333.262063][T15652] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.5141: Corrupt directory, running e2fsck is recommended [ 333.265028][T15659] xt_CT: No such helper "snmp_trap" [ 333.331723][ T4370] EXT4-fs (loop4): unmounting filesystem. [ 333.386794][T15671] __nla_validate_parse: 10 callbacks suppressed [ 333.386807][T15671] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5161'. [ 333.660669][T15700] loop2: detected capacity change from 0 to 512 [ 333.699813][T15700] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 333.701297][T15700] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 333.715882][T15700] EXT4-fs (loop2): orphan cleanup on readonly fs [ 333.737353][T15700] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #13: comm syz.2.5160: iget: bad i_size value: 12154761577498 [ 333.746484][T15700] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.5160: couldn't read orphan inode 13 (err -117) [ 333.753166][T15686] loop4: detected capacity change from 0 to 32768 [ 333.758163][T15700] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 333.773722][T15686] XFS: ikeep mount option is deprecated. [ 333.774817][T15686] XFS: noikeep mount option is deprecated. [ 333.789983][T15700] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.5160: dx entry: limit 65535 != root limit 120 [ 333.791987][T15700] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.5160: Corrupt directory, running e2fsck is recommended [ 333.831417][ T4371] EXT4-fs (loop2): unmounting filesystem. [ 333.846456][T15723] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5176'. [ 333.853891][T15727] x_tables: unsorted underflow at hook 3 [ 333.867046][T15686] XFS (loop4): Mounting V5 Filesystem [ 333.929065][T15686] XFS (loop4): Ending clean mount [ 333.948953][T15686] XFS (loop4): Quotacheck needed: Please wait. [ 333.971654][T15686] XFS (loop4): Quotacheck: Done. [ 334.077720][ T4370] XFS (loop4): Unmounting Filesystem [ 334.159575][T15765] netlink: 'syz.2.5193': attribute type 1 has an invalid length. [ 334.592132][T15807] netlink: 'syz.1.5211': attribute type 1 has an invalid length. [ 334.595843][T15808] loop2: detected capacity change from 0 to 512 [ 334.597326][T15808] EXT4-fs: Ignoring removed orlov option [ 334.598337][T15808] EXT4-fs: Ignoring removed mblk_io_submit option [ 334.632805][T15808] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 334.635611][T15808] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.5212: attempt to clear invalid blocks 2 len 1 [ 334.656247][T15808] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 334.676471][T15808] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.5212: invalid indirect mapped block 1819239214 (level 0) [ 334.695654][T15808] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.5212: invalid indirect mapped block 1819239214 (level 1) [ 334.704734][T15808] EXT4-fs (loop2): 1 truncate cleaned up [ 334.705802][T15808] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 334.766347][ T4371] EXT4-fs (loop2): unmounting filesystem. [ 334.777102][T15821] cgroup: noprefix used incorrectly [ 334.820799][T15826] loop2: detected capacity change from 0 to 256 [ 334.822250][T15826] exfat: Deprecated parameter 'utf8' [ 334.823210][T15826] exfat: Deprecated parameter 'namecase' [ 334.824213][T15826] exfat: Deprecated parameter 'utf8' [ 334.837441][T15826] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 334.861561][T15832] xt_NFQUEUE: number of total queues is 0 [ 334.941001][T15841] xt_NFQUEUE: number of total queues is 0 [ 334.996752][T15846] xt_NFQUEUE: number of total queues is 0 [ 335.176351][T15844] loop2: detected capacity change from 0 to 32768 [ 335.180772][T15844] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.5230 (15844) [ 335.193155][T15844] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 335.195473][T15844] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 335.197195][T15844] BTRFS info (device loop2): force zlib compression, level 3 [ 335.198509][T15844] BTRFS info (device loop2): turning on flush-on-commit [ 335.199665][T15844] BTRFS info (device loop2): max_inline at 0 [ 335.200729][T15844] BTRFS info (device loop2): using free space tree [ 335.232027][T15865] netlink: 'syz.1.5237': attribute type 10 has an invalid length. [ 335.255875][T15865] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.265313][T15865] bond0: (slave team0): Enslaving as an active interface with an up link [ 335.320674][T15844] BTRFS info (device loop2): enabling ssd optimizations [ 335.346556][ T4371] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 335.447517][T15894] loop0: detected capacity change from 0 to 256 [ 335.463768][T15894] exfat: Deprecated parameter 'utf8' [ 335.464902][T15894] exfat: Deprecated parameter 'namecase' [ 335.470649][T15894] exfat: Deprecated parameter 'utf8' [ 335.482521][T15894] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 335.738723][T15911] netlink: 'syz.2.5255': attribute type 10 has an invalid length. [ 335.757563][T15911] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.766057][T15911] bond0: (slave team0): Enslaving as an active interface with an up link [ 336.010151][T15933] loop4: detected capacity change from 0 to 256 [ 336.011930][T15933] exfat: Deprecated parameter 'utf8' [ 336.012848][T15933] exfat: Deprecated parameter 'namecase' [ 336.013703][T15933] exfat: Deprecated parameter 'utf8' [ 336.050314][T15933] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 336.053299][T15937] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5267'. [ 336.132817][T15943] netlink: 'syz.3.5270': attribute type 10 has an invalid length. [ 336.160026][T15943] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.162660][T15943] bond0: (slave team0): Enslaving as an active interface with an up link [ 336.262561][T15907] loop0: detected capacity change from 0 to 131072 [ 336.267171][T15907] F2FS-fs (loop0): Invalid log sectors per block(570425347) log sectorsize(9) [ 336.271139][T15907] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 336.288628][T15907] F2FS-fs (loop0): invalid crc value [ 336.316957][T15907] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 336.340498][T15907] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 336.348321][T15907] F2FS-fs (loop0): Bad quota inode 2:50331648 [ 336.355580][T15907] F2FS-fs (loop0): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 336.361347][T15907] F2FS-fs (loop0): Cannot turn on quotas: error -22 [ 336.368288][T15971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5281'. [ 336.387614][T15907] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 336.389064][T15907] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 336.408992][T15976] loop4: detected capacity change from 0 to 512 [ 336.422662][T15907] F2FS-fs (loop0): quota sysfile already exists [ 336.430702][T15976] EXT4-fs (loop4): 1 truncate cleaned up [ 336.436504][T15976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 336.526440][ T4370] EXT4-fs (loop4): unmounting filesystem. [ 336.827065][T16011] netlink: 'syz.0.5288': attribute type 10 has an invalid length. [ 336.858436][T16011] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.862854][T16011] bond0: (slave team0): Enslaving as an active interface with an up link [ 336.865662][ T39] bond0: (slave team0): interface is now down [ 336.885774][ T9] bond0: (slave team0): interface is now down [ 336.887079][ T9] bond0: now running without any active interface! [ 337.267849][T16035] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.5315 (16035) [ 337.282119][T16035] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 337.283811][T16035] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 337.285624][T16035] BTRFS info (device loop0): using free space tree [ 337.291054][T16037] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.5314 (16037) [ 337.300104][T16037] BTRFS info (device loop2): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 337.301997][T16037] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 337.306712][T16037] BTRFS info (device loop2): using free space tree [ 337.388157][T16035] BTRFS info (device loop0): enabling ssd optimizations [ 337.435412][T16037] BTRFS info (device loop2): enabling ssd optimizations [ 337.451236][ T4363] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 337.462879][ T4371] BTRFS info (device loop2): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 337.509678][T16004] F2FS-fs (loop4): Invalid log sectors per block(570425347) log sectorsize(9) [ 337.512607][T16004] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 337.524132][T16004] F2FS-fs (loop4): invalid crc value [ 337.581699][T16004] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 337.598621][T16004] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 337.600926][T16004] F2FS-fs (loop4): Bad quota inode 2:50331648 [ 337.602001][T16004] F2FS-fs (loop4): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 337.605052][T16004] F2FS-fs (loop4): Cannot turn on quotas: error -22 [ 337.621450][T16004] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 337.622710][T16004] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 337.634459][T16004] F2FS-fs (loop4): quota sysfile already exists [ 337.929517][T16089] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.5320 (16089) [ 337.936515][T16089] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 337.938164][T16089] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 337.939667][T16089] BTRFS info (device loop2): turning on sync discard [ 337.949923][T16089] BTRFS info (device loop2): using free space tree [ 338.055094][T16127] netlink: 'syz.4.5318': attribute type 10 has an invalid length. [ 338.065457][T16129] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5334'. [ 338.102836][T16127] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.104639][T16127] bond0: (slave team0): Enslaving as an active interface with an up link [ 338.160712][T16089] BTRFS info (device loop2): enabling ssd optimizations [ 338.358283][ T4371] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 338.545785][T16175] Timeout policy `syz1' can only be used by L3 protocol number 33024 [ 338.586563][T16178] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 338.629187][T16185] set_capacity_and_notify: 5 callbacks suppressed [ 338.629197][T16185] loop0: detected capacity change from 0 to 512 [ 338.710116][T16185] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 338.782951][ T4363] EXT4-fs (loop0): unmounting filesystem. [ 338.861072][T16215] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 338.865808][T16214] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5369'. [ 339.079493][T16248] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 339.168865][T16264] loop4: detected capacity change from 0 to 512 [ 339.190601][T16269] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5395'. [ 339.213113][T16264] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 339.241771][T16276] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5413'. [ 339.336306][ T4370] EXT4-fs (loop4): unmounting filesystem. [ 339.366984][T16290] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 339.512324][T16309] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5415'. [ 339.528884][T16310] openvswitch: netlink: Missing key (keys=48, expected=2000) [ 339.538899][T16313] netlink: 'syz.2.5417': attribute type 21 has an invalid length. [ 339.540290][T16313] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5417'. [ 339.684443][T16334] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5430'. [ 339.686165][T16334] tc_dump_action: action bad kind [ 339.777019][T16348] openvswitch: netlink: Missing key (keys=48, expected=2000) [ 339.782504][T16350] netlink: 'syz.1.5437': attribute type 21 has an invalid length. [ 339.783999][T16350] netlink: 160 bytes leftover after parsing attributes in process `syz.1.5437'. [ 339.875113][T16365] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5444'. [ 339.878527][T16365] tc_dump_action: action bad kind [ 339.969465][T16382] netlink: 'syz.4.5452': attribute type 21 has an invalid length. [ 339.971026][T16382] netlink: 160 bytes leftover after parsing attributes in process `syz.4.5452'. [ 339.991760][T16384] openvswitch: netlink: Missing key (keys=48, expected=2000) [ 340.049400][T16394] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5458'. [ 340.050979][T16394] tc_dump_action: action bad kind [ 340.181980][T16415] netlink: 'syz.0.5468': attribute type 21 has an invalid length. [ 340.216063][T16420] openvswitch: netlink: Missing key (keys=48, expected=2000) [ 340.275358][T16431] tc_dump_action: action bad kind [ 340.410938][T16454] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 340.516489][T16472] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 340.613596][T16488] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 340.722441][T16502] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 340.782703][T16515] netlink: 'syz.2.5520': attribute type 5 has an invalid length. [ 340.815072][T16518] netlink: 'syz.1.5532': attribute type 5 has an invalid length. [ 340.831912][T16521] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 340.937831][T16538] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 340.982689][T16544] netlink: 'syz.4.5536': attribute type 5 has an invalid length. [ 341.022145][T16554] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 341.071319][ T534] nvme nvme1: rdma_resolve_route failed (-110). [ 341.074010][T16552] nvme nvme1: rdma connection establishment failed (-19) [ 341.116827][T16568] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 341.215732][T16582] netlink: 'syz.0.5552': attribute type 5 has an invalid length. [ 341.316733][ T534] nvme nvme1: rdma_resolve_route failed (-110). [ 341.320191][T16598] nvme nvme1: rdma connection establishment failed (-19) [ 341.434896][T16616] loop0: detected capacity change from 0 to 256 [ 341.445317][T16616] exfat: Deprecated parameter 'namecase' [ 341.462931][T16616] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 341.491881][T16626] loop4: detected capacity change from 0 to 1024 [ 341.593980][ T4430] nvme nvme1: rdma_resolve_route failed (-110). [ 341.599329][T16634] nvme nvme1: rdma connection establishment failed (-19) [ 341.739596][T16660] loop4: detected capacity change from 0 to 256 [ 341.748292][T16660] exfat: Deprecated parameter 'namecase' [ 341.753550][T16660] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 341.781700][T16669] loop2: detected capacity change from 0 to 1024 [ 341.878955][ T39] nvme nvme1: rdma_resolve_route failed (-110). [ 341.881999][T16676] nvme nvme1: rdma connection establishment failed (-19) [ 342.066616][T16710] loop0: detected capacity change from 0 to 1024 [ 342.077167][T16713] loop2: detected capacity change from 0 to 256 [ 342.078631][T16713] exfat: Deprecated parameter 'namecase' [ 342.106238][T16713] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 342.140416][T16718] netlink: 'syz.4.5619': attribute type 29 has an invalid length. [ 342.142107][T16718] netlink: 'syz.4.5619': attribute type 29 has an invalid length. [ 342.396230][T16763] loop0: detected capacity change from 0 to 8 [ 342.442064][T16763] SQUASHFS error: Failed to read block 0x2d7: -5 [ 342.443144][T16763] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 342.469577][T16767] loop2: detected capacity change from 0 to 4096 [ 342.485613][T16767] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 342.803923][T16810] SQUASHFS error: Failed to read block 0x2d7: -5 [ 342.805107][T16810] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 343.224599][T16862] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 343.602506][T16909] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 344.286387][T17011] jffs2: Bad value for 'rp_size' [ 344.300029][T17014] __nla_validate_parse: 8 callbacks suppressed [ 344.300039][T17014] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5765'. [ 344.520643][T17048] jffs2: Bad value for 'rp_size' [ 344.526806][T17051] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5783'. [ 344.595539][T17060] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 344.658908][T17068] random: crng reseeded on system resumption [ 344.720433][T17074] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5797'. [ 344.759217][T17078] jffs2: Bad value for 'rp_size' [ 344.829224][T17091] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5805'. [ 344.882508][T17098] random: crng reseeded on system resumption [ 344.934520][T17103] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5810'. [ 344.960268][T17107] jffs2: Bad value for 'rp_size' [ 345.023997][T17117] mmap: syz.3.5816 (17117): VmData 49250304 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 345.072244][T17125] validate_nla: 13 callbacks suppressed [ 345.072256][T17125] netlink: 'syz.1.5818': attribute type 11 has an invalid length. [ 345.082367][T17125] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5818'. [ 345.181858][T17137] random: crng reseeded on system resumption [ 345.189136][T17136] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 345.355103][T17157] netlink: 'syz.0.5835': attribute type 11 has an invalid length. [ 345.356445][T17157] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5835'. [ 345.469042][T17166] random: crng reseeded on system resumption [ 345.690942][T17192] netlink: 'syz.3.5850': attribute type 11 has an invalid length. [ 345.692341][T17192] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5850'. [ 346.056820][T17224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5869'. [ 346.075991][T17130] set_capacity_and_notify: 3 callbacks suppressed [ 346.075999][T17130] loop4: detected capacity change from 0 to 131072 [ 346.169250][T17130] F2FS-fs (loop4): Found nat_bits in checkpoint [ 346.207574][T17130] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 346.260205][T17258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5885'. [ 346.370667][T17272] FAT-fs (loop4): bogus number of reserved sectors [ 346.371924][T17272] FAT-fs (loop4): Can't find a valid FAT filesystem [ 347.013644][T17289] loop0: detected capacity change from 0 to 131072 [ 347.036551][T17289] F2FS-fs (loop0): Found nat_bits in checkpoint [ 347.058149][T17289] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 347.170979][T17340] sctp: [Deprecated]: syz.4.5926 (pid 17340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.170979][T17340] Use struct sctp_sack_info instead [ 347.330915][T17362] netlink: 'syz.2.5935': attribute type 21 has an invalid length. [ 347.519132][T17372] netlink: 'syz.1.5951': attribute type 21 has an invalid length. [ 347.552760][T17374] loop4: detected capacity change from 0 to 4096 [ 347.554288][T17374] __ntfs_warning: 8 callbacks suppressed [ 347.554294][T17374] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 347.558715][T17378] sctp: [Deprecated]: syz.2.5942 (pid 17378) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.558715][T17378] Use struct sctp_sack_info instead [ 347.573701][T17374] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 347.579730][T17374] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 347.591011][T17374] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 347.594577][T17374] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 347.608442][T17374] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 347.625269][T17374] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 347.626767][T17374] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 347.641301][T17374] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 347.642697][T17374] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 347.658339][T17374] ntfs: volume version 3.1. [ 347.766931][T17400] netlink: 'syz.4.5954': attribute type 21 has an invalid length. [ 347.789587][T17403] sctp: [Deprecated]: syz.1.5957 (pid 17403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.789587][T17403] Use struct sctp_sack_info instead [ 348.012320][T17430] netlink: 'syz.0.5970': attribute type 21 has an invalid length. [ 348.061530][T17438] sctp: [Deprecated]: syz.0.5971 (pid 17438) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.061530][T17438] Use struct sctp_sack_info instead [ 348.247254][T17454] loop0: detected capacity change from 0 to 4096 [ 348.263316][T17454] ntfs: volume version 3.1. [ 348.343532][T17462] device vlan0 entered promiscuous mode [ 348.485150][T17468] loop2: detected capacity change from 0 to 4096 [ 348.505254][T17468] ntfs: volume version 3.1. [ 348.539113][T17482] dlm: Unknown command passed to DLM device : 3 [ 348.539113][T17482] [ 348.664952][T17493] device vlan0 entered promiscuous mode [ 348.792289][T17511] dlm: Unknown command passed to DLM device : 3 [ 348.792289][T17511] [ 348.883859][T17522] dlm: Unknown command passed to DLM device : 3 [ 348.883859][T17522] [ 349.405742][T17554] device vlan0 entered promiscuous mode [ 349.465802][T17563] dlm: Unknown command passed to DLM device : 3 [ 349.465802][T17563] [ 349.603112][T17585] device vlan0 entered promiscuous mode [ 350.291601][T17691] netlink: 'syz.0.6095': attribute type 1 has an invalid length. [ 350.550614][T17723] netlink: 'syz.1.6111': attribute type 1 has an invalid length. [ 350.605919][T17731] loop4: detected capacity change from 0 to 256 [ 350.846190][T17766] netlink: 'syz.4.6129': attribute type 1 has an invalid length. [ 351.069047][T17789] netlink: 'syz.1.6154': attribute type 3 has an invalid length. [ 351.070562][T17789] __nla_validate_parse: 11 callbacks suppressed [ 351.070581][T17789] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6154'. [ 351.154971][T17800] netlink: 'syz.2.6147': attribute type 1 has an invalid length. [ 351.318807][T17821] netlink: 'syz.3.6158': attribute type 3 has an invalid length. [ 351.320461][T17821] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6158'. [ 351.371837][T17828] netlink: 'syz.4.6171': attribute type 3 has an invalid length. [ 351.372418][T17823] netlink: 'syz.3.6160': attribute type 1 has an invalid length. [ 351.377451][T17828] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6171'. [ 351.423930][T17836] loop2: detected capacity change from 0 to 256 [ 351.598961][T17860] netlink: 'syz.2.6174': attribute type 3 has an invalid length. [ 351.600527][T17860] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6174'. [ 351.960381][T17874] loop0: detected capacity change from 0 to 256 [ 352.066184][T17889] affs: No valid root block on device nbd0 [ 352.146678][ T7358] ------------[ cut here ]------------ [ 352.147897][ T7358] WARNING: CPU: 1 PID: 7358 at net/netfilter/nft_set_pipapo.c:2384 nft_pipapo_destroy+0x784/0x7e0 [ 352.149746][ T7358] Modules linked in: [ 352.150368][ T7358] CPU: 1 PID: 7358 Comm: kworker/1:8 Not tainted syzkaller #0 [ 352.151679][ T7358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 352.153321][ T7358] Workqueue: events nf_tables_trans_destroy_work [ 352.154453][ T7358] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 352.155696][ T7358] pc : nft_pipapo_destroy+0x784/0x7e0 [ 352.156645][ T7358] lr : nft_pipapo_destroy+0x784/0x7e0 [ 352.157555][ T7358] sp : ffff8000215e7990 [ 352.158252][ T7358] x29: ffff8000215e79b0 x28: dfff800000000000 x27: 1fffe0001e612399 [ 352.159600][ T7358] x26: dfff800000000000 x25: ffff0000f3091ccc x24: ffff0000f3091c00 [ 352.160962][ T7358] x23: ffff0000ca565718 x22: 000000000000000b x21: ffff800013c8fab0 [ 352.162342][ T7358] x20: ffff0000ca565710 x19: ffff0000f3091cf0 x18: 1fffe00033e7457e [ 352.163776][ T7358] x17: ffff80001538d000 x16: ffff8000082dd25c x15: 0000000000000000 [ 352.165143][ T7358] x14: 0000000000000018 x13: 0000000000ff0100 x12: ffff800017a94a50 [ 352.166471][ T7358] x11: ff008000103beba8 x10: 0000000000000000 x9 : ffff8000103beba8 [ 352.167847][ T7358] x8 : ffff0000dcbc1c00 x7 : 0000000000000000 x6 : 000000000000003f [ 352.169175][ T7358] x5 : 0000000000000040 x4 : 0000000000000001 x3 : 0000000000000000 [ 352.170484][ T7358] x2 : ffff0000ca565710 x1 : ffff0000f3091c00 x0 : ffff0000ca565728 [ 352.171876][ T7358] Call trace: [ 352.172441][ T7358] nft_pipapo_destroy+0x784/0x7e0 [ 352.173311][ T7358] nft_set_destroy+0x3ac/0x89c [ 352.174092][ T7358] nf_tables_trans_destroy_work+0x980/0xd64 [ 352.175022][ T7358] process_one_work+0x7e4/0x13bc [ 352.175870][ T7358] worker_thread+0x8cc/0xfe8 [ 352.176611][ T7358] kthread+0x254/0x2e0 [ 352.177286][ T7358] ret_from_fork+0x10/0x20 [ 352.178039][ T7358] irq event stamp: 64160 [ 352.178735][ T7358] hardirqs last enabled at (64159): [] kasan_quarantine_put+0xc4/0x200 [ 352.180440][ T7358] hardirqs last disabled at (64160): [] el1_dbg+0x24/0x80 [ 352.181873][ T7358] softirqs last enabled at (64030): [] local_bh_enable+0x10/0x34 [ 352.183526][ T7358] softirqs last disabled at (64028): [] local_bh_disable+0x10/0x34 [ 352.185197][ T7358] ---[ end trace 0000000000000000 ]---