last executing test programs: 1.168536621s ago: executing program 4 (id=5133): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') getdents64(r0, 0x0, 0x0) 1.089520683s ago: executing program 4 (id=5131): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x0, 0x20000040, 0x20000070, 0x200000a0], 0x0, 0x0, 0x0}, 0x108) 1.043582224s ago: executing program 4 (id=5135): r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 977.409116ms ago: executing program 4 (id=5139): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) mount$9p_fd(0x0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000240), 0x1, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 693.550483ms ago: executing program 1 (id=5150): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000280)={0x10, "26261357a90629e3823aa88cd56abdd33cdb2b9610a604fc0653a3e4828b783f", 0x0, 0x1}) 684.620923ms ago: executing program 1 (id=5153): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000280), 0x2800) read$qrtrtun(r0, 0x0, 0xeffd) 634.761384ms ago: executing program 1 (id=5157): r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2a00005, &(0x7f00000002c0)=ANY=[], 0x0, 0x2b7, &(0x7f0000000580)="$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") ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0xfffffffffffffffe, 0x408004, 0xfff7fffffffffa40}) 557.397026ms ago: executing program 1 (id=5161): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b02d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 477.552288ms ago: executing program 1 (id=5165): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@polexpire={0xd4, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x6e6bbc}}, [@XFRMA_IF_ID={0x8}, @mark={0xc}]}, 0xd4}}, 0x0) 477.480958ms ago: executing program 2 (id=5166): r0 = socket(0x22, 0x2, 0x3) accept4$alg(r0, 0x0, 0x0, 0x80000) 429.237019ms ago: executing program 1 (id=5169): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000240)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@heartbeat_none}, {@inode64}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000024c0)={{}, {}, [], {}, [{0x8, 0x4}], {}, {0x20, 0x6}}, 0x2c, 0x0) 408.44753ms ago: executing program 2 (id=5171): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r0}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x103, &(0x7f0000000140)=""/259, 0x0, 0x2}, 0x94) 396.87301ms ago: executing program 3 (id=5172): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x10, 0x1, 0x2000000, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0xaa, 0x8c, 0x6, 0x2, 0x1, 0x0, 0x4, 0x3}}, {0xa, 0x2, [0x101, 0xfffa, 0xcca]}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 358.262961ms ago: executing program 2 (id=5173): r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x24, 0x1, 0x20, "67423900fcffff0300", 0x3231564e}) 289.586553ms ago: executing program 2 (id=5175): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000080)=0x40) 289.471803ms ago: executing program 3 (id=5176): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 286.286293ms ago: executing program 2 (id=5178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 243.175914ms ago: executing program 3 (id=5180): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000100)=0x1000) 242.235634ms ago: executing program 2 (id=5181): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f0000004000), 0x80, 0x0, 0x0, 0x0, 0x92020007) 188.857985ms ago: executing program 0 (id=5182): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x80) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) 188.784485ms ago: executing program 3 (id=5183): setuid(0xee00) ioprio_set$pid(0x2, 0x0, 0x0) 187.918385ms ago: executing program 0 (id=5184): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f85948a98ae388123b56361ed3cc4c3e5523eb70372d9fb8f341b24358d32f"]) 129.579307ms ago: executing program 3 (id=5185): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) 129.487897ms ago: executing program 0 (id=5186): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x80) 116.903657ms ago: executing program 4 (id=5187): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff], [0x0, 0x0, 0x1000000], [0x400000000000000]}) 53.431399ms ago: executing program 0 (id=5188): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000300)=0xffffffff, 0x4) 5.5219ms ago: executing program 4 (id=5189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x90, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xffff}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x2, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x93}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x90}}, 0x0) 5.44376ms ago: executing program 0 (id=5190): r0 = io_uring_setup(0x5923, &(0x7f0000000080)={0x0, 0xe37d, 0x1, 0x3, 0x3a}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0xfffffffffffffffe, 0x40) 5.3808ms ago: executing program 0 (id=5191): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0) 0s ago: executing program 3 (id=5192): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) write$P9_RWSTAT(r0, &(0x7f0000000280)={0x7, 0x7f, 0x1}, 0x7) kernel console output (not intermixed with test programs): ][ T8938] BTRFS info (device loop3): enabling disk space caching [ 72.699665][ T8970] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2078'. [ 72.705030][ T8938] BTRFS info (device loop3): disk space caching is enabled [ 72.823044][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2084'. [ 72.876977][ T8998] loop0: detected capacity change from 0 to 512 [ 72.892202][ T9003] loop1: detected capacity change from 0 to 512 [ 72.914718][ T8938] BTRFS info (device loop3): enabling ssd optimizations [ 72.917595][ T8938] BTRFS info (device loop3): rebuilding free space tree [ 72.919148][ T8998] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.927737][ T8998] EXT4-fs error (device loop0): ext4_xattr_block_list:713: inode #15: comm syz.0.2087: corrupted xattr block 33 [ 72.941334][ T9003] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 72.942638][ T9003] EXT2-fs (loop1): error: revision level too high, forcing read-only mode [ 72.965408][ T8938] BTRFS info (device loop3): disabling free space tree [ 72.966843][ T8938] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 72.981419][ T9003] EXT2-fs (loop1): error: ext2_iget: bad extended attribute block 1 [ 72.985435][ T8938] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 72.999212][ T9009] loop2: detected capacity change from 0 to 256 [ 73.026370][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 73.120732][ T8938] BTRFS info (device loop3): balance: start -f -susage=1..7,limit=2..0,stripes=5..7 [ 73.134872][ T8938] BTRFS info (device loop3): balance: ended with status: 0 [ 73.197089][ T4329] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 73.447669][ T9066] kAFS: unable to lookup cell '.,c¾ûL' [ 73.539491][ T9082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2123'. [ 73.736883][ T9110] device bridge0 entered promiscuous mode [ 73.763683][ T9118] loop0: detected capacity change from 0 to 64 [ 73.992522][ T9150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2156'. [ 74.116011][ T9126] loop2: detected capacity change from 0 to 32768 [ 74.129152][ T9166] tmpfs: Bad value for 'mpol' [ 74.180748][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2166'. [ 74.355864][ T9195] xt_cluster: node mask cannot exceed total number of nodes [ 74.418894][ T9206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2182'. [ 74.605981][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2194'. [ 74.672744][ T9240] netlink: 'syz.2.2201': attribute type 30 has an invalid length. [ 74.748150][ T9248] erofs: (device loop0): mounted with root inode @ nid 36. [ 74.828624][ T9264] netlink: 'syz.3.2211': attribute type 21 has an invalid length. [ 74.830232][ T9264] netlink: 'syz.3.2211': attribute type 5 has an invalid length. [ 74.860917][ T9265] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 74.873038][ T9265] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.888550][ T9266] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 74.895770][ T9266] ntfs3: loop0: ntfs_evict_inode r=6 failed, -22. [ 74.897212][ T9266] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 74.907003][ T9270] Attempt to read inode for relocated directory [ 74.912636][ T9265] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 75.213901][ T9312] tmpfs: Bad value for 'nr_blocks' [ 75.363885][ T9335] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.403592][ T9330] syz.2.2245: attempt to access beyond end of device [ 75.403592][ T9330] loop2: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 75.406260][ T9330] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 75.407819][ T9330] syz.2.2245: attempt to access beyond end of device [ 75.407819][ T9330] loop2: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 75.430668][ T9330] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 75.432157][ T9330] NILFS (loop2): error -5 truncating bmap (ino=16) [ 75.486767][ T9344] netlink: 'syz.0.2251': attribute type 2 has an invalid length. [ 75.492386][ T9344] netlink: 'syz.0.2251': attribute type 8 has an invalid length. [ 75.625090][ T9358] device bridge1 entered promiscuous mode [ 75.965145][ T9395] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 76.097437][ T9403] set_capacity_and_notify: 8 callbacks suppressed [ 76.097446][ T9403] loop4: detected capacity change from 0 to 4096 [ 76.108627][ T9403] __ntfs_warning: 4 callbacks suppressed [ 76.108636][ T9403] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 76.128403][ T9403] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 76.130325][ T9417] tipc: Trying to set illegal importance in message [ 76.132457][ T9403] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 76.134109][ T9403] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 76.137198][ T9403] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 76.155122][ T9403] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 76.161179][ T9403] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 76.162652][ T9403] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 76.166172][ T9403] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 76.167643][ T9403] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 76.189502][ T9403] ntfs: volume version 3.1. [ 76.264131][ T9432] loop2: detected capacity change from 0 to 256 [ 76.318905][ T9436] netlink: 'syz.4.2295': attribute type 1 has an invalid length. [ 76.369235][ T9442] ebt_among: dst integrity fail: 101 [ 76.649386][ T9481] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4338] was attempted by ""[9481] [ 76.805627][ T9450] loop0: detected capacity change from 0 to 32768 [ 76.821571][ T9450] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 76.822964][ T9450] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 76.841627][ T9502] netlink: 'syz.1.2328': attribute type 5 has an invalid length. [ 76.844309][ T9450] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 76.846309][ T8417] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 76.847613][ T8417] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 76.877689][ T8417] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 30ms [ 76.882191][ T8417] gfs2: fsid=syz:syz.0: jid=0: Done [ 76.883389][ T9450] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 76.982500][ T9511] loop1: detected capacity change from 0 to 4096 [ 77.000483][ T9521] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.002649][ T9521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.019477][ T9511] ntfs: volume version 3.1. [ 77.030359][ T9517] loop3: detected capacity change from 0 to 4096 [ 77.041427][ T9521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.049598][ T9517] ntfs: volume version 3.1. [ 77.189295][ T9450] syz.0.2303: attempt to access beyond end of device [ 77.189295][ T9450] loop0: rw=12288, sector=1090921711938, nr_sectors = 2 limit=32768 [ 77.227876][ T9450] syz.0.2303: attempt to access beyond end of device [ 77.227876][ T9450] loop0: rw=12288, sector=1090921711938, nr_sectors = 2 limit=32768 [ 77.478851][ T9559] __nla_validate_parse: 10 callbacks suppressed [ 77.478862][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2355'. [ 77.615939][ T9545] loop0: detected capacity change from 0 to 32768 [ 77.717882][ T9576] loop3: detected capacity change from 0 to 24 [ 77.720676][ T9576] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 77.748351][ T9576] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 77.769384][ T9576] VFS: Lookup of 'file0' in romfs loop3 would have caused loop [ 77.923908][ T9596] loop2: detected capacity change from 0 to 1024 [ 78.033103][ T9535] loop4: detected capacity change from 0 to 131072 [ 78.035228][ T9535] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 78.036688][ T9535] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 78.044956][ T9535] F2FS-fs (loop4): invalid crc value [ 78.076983][ T9535] F2FS-fs (loop4): Found nat_bits in checkpoint [ 78.094428][ T9535] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 78.095726][ T9535] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 78.111186][ T9535] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, min: 6, max: 903 [ 78.214006][ T9630] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2389'. [ 78.300841][ T9642] bond0: (slave bond_slave_1): Releasing backup interface [ 78.365577][ T9650] loop3: detected capacity change from 0 to 128 [ 78.386959][ T9650] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 78.394081][ T9650] hpfs: filesystem error: improperly stopped [ 78.395167][ T9650] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 78.396458][ T9650] hpfs: You really don't want any checks? You are crazy... [ 78.397700][ T9650] hpfs: Code page index out of array [ 78.411282][ T9650] hpfs: code page support is disabled [ 78.413438][ T9650] hpfs: hpfs_map_4sectors(): unaligned read [ 78.414663][ T9650] hpfs: hpfs_map_4sectors(): unaligned read [ 78.415676][ T9650] hpfs: filesystem error: unable to find root dir [ 78.439688][ T9660] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2403'. [ 78.441597][ T9660] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 78.499693][ T9666] netlink: 'syz.3.2405': attribute type 2 has an invalid length. [ 78.536740][ T9672] erofs: (device loop0): mounted with root inode @ nid 36. [ 78.709777][ T9698] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 78.729147][ T9698] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.2421: casefold flag without casefold feature [ 78.744603][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 78.811654][ T9714] kAFS: unable to lookup cell '‹ä' [ 78.831877][ T9721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2428'. [ 78.833952][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2428'. [ 79.034004][ T9750] netlink: 400 bytes leftover after parsing attributes in process `syz.0.2442'. [ 79.141809][ T9761] [U] [ 79.142605][ T9761] [U] [ 79.143070][ T9761] [U] [ 79.143516][ T9761] [U] [ 79.144060][ T9761] [U] [ 79.144471][ T9761] [U] [ 79.144904][ T9761] [U] [ 79.145329][ T9761] [U] [ 79.145797][ T9761] [U] [ 79.146224][ T9761] [U] [ 79.146651][ T9761] [U] [ 79.157679][ T9760] [U] [ 79.300177][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2459'. [ 79.468360][ T9814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2473'. [ 79.470020][ T9814] netlink: 'syz.2.2473': attribute type 1 has an invalid length. [ 79.480946][ T9814] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2473'. [ 79.549995][ T9830] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 79.561165][ T9831] FAT-fs (loop0): Directory bread(block 1285) failed [ 79.562398][ T9831] FAT-fs (loop0): Directory bread(block 1286) failed [ 79.563629][ T9831] FAT-fs (loop0): Directory bread(block 1287) failed [ 79.564803][ T9831] FAT-fs (loop0): Directory bread(block 1288) failed [ 79.578769][ T9831] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 79.589367][ T9829] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 79.590747][ T9829] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 79.596431][ T9829] vhci_hcd vhci_hcd.0: Device attached [ 79.606577][ T9832] vhci_hcd: connection closed [ 79.609401][ T4388] vhci_hcd: stop threads [ 79.611637][ T4388] vhci_hcd: release socket [ 79.612387][ T4388] vhci_hcd: disconnect device [ 79.762286][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2494'. [ 80.141512][ T9906] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.143835][ T9906] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.151277][ T9906] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 80.158535][ T9906] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 80.168319][ T9906] EXT4-fs (loop3): 1 truncate cleaned up [ 80.169384][ T9906] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 80.198734][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 80.306934][ T9881] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 80.313890][ T9881] XFS (loop2): Mounting V5 Filesystem [ 80.394107][ T9881] XFS (loop2): Ending clean mount [ 80.458824][ T4338] XFS (loop2): Unmounting Filesystem [ 80.507160][ T9949] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.590975][ T9959] xt_TCPMSS: Only works on TCP SYN packets [ 81.143688][T10023] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.222409][T10034] set_capacity_and_notify: 8 callbacks suppressed [ 81.222419][T10034] loop3: detected capacity change from 0 to 8 [ 81.296499][T10034] SQUASHFS error: Unable to read inode 0x9 [ 81.337228][T10006] loop1: detected capacity change from 0 to 32768 [ 81.341712][T10006] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.2563 (10006) [ 81.389682][T10006] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 81.391575][T10006] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 81.393169][T10006] BTRFS info (device loop1): using free space tree [ 81.409462][T10057] netlink: 'syz.4.2588': attribute type 7 has an invalid length. [ 81.411269][T10057] netlink: 'syz.4.2588': attribute type 6 has an invalid length. [ 81.445077][T10064] loop2: detected capacity change from 0 to 64 [ 81.456043][T10064] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 81.511995][T10077] CIFS mount error: No usable UNC path provided in device string! [ 81.511995][T10077] [ 81.513779][T10077] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 81.558534][T10006] BTRFS info (device loop1): enabling ssd optimizations [ 81.593104][T10092] cgroup2: Unknown parameter 'fsuuid' [ 81.606490][ T4328] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 81.634261][T10096] tmpfs: Bad value for 'mpol' [ 81.865311][T10122] loop4: detected capacity change from 0 to 2048 [ 81.881454][T10128] IPv6: NLM_F_REPLACE set, but no existing node found! [ 81.884613][T10122] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 81.885849][T10122] UDF-fs: Scanning with blocksize 512 failed [ 81.891534][T10122] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.992817][T10138] overlayfs: workdir and upperdir must be separate subtrees [ 82.003022][T10140] loop0: detected capacity change from 0 to 64 [ 82.096145][T10154] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 82.097900][T10154] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 82.349904][T10183] loop1: detected capacity change from 0 to 2048 [ 82.366181][T10183] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 82.371905][T10183] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.416157][T10186] xt_CT: No such helper "netbios-ns" [ 82.750282][T10220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.751603][T10220] IPv6: NLM_F_CREATE should be set when creating new route [ 82.752753][T10220] IPv6: NLM_F_CREATE should be set when creating new route [ 82.918227][T10236] tmpfs: Bad value for 'mpol' [ 82.922270][T10239] loop2: detected capacity change from 0 to 512 [ 82.942278][T10239] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 82.944516][T10239] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.945822][T10239] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.2669: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 82.963653][T10239] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.2669: Bad quota inode: 4, type: 1 [ 82.980594][T10239] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.983103][T10239] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 82.984249][T10239] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 83.015573][T10153] loop0: detected capacity change from 0 to 131072 [ 83.021325][T10153] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 83.022915][T10153] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 83.029805][T10153] F2FS-fs (loop0): invalid crc value [ 83.063677][T10208] loop3: detected capacity change from 0 to 32768 [ 83.066141][T10208] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2652 (10208) [ 83.069397][T10153] F2FS-fs (loop0): Found nat_bits in checkpoint [ 83.077406][T10208] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.079533][T10208] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 83.080910][T10208] BTRFS info (device loop3): using free space tree [ 83.104682][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 83.119161][T10153] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 83.120668][T10153] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 83.154266][T10264] netlink: 'syz.4.2677': attribute type 5 has an invalid length. [ 83.310864][T10263] loop2: detected capacity change from 0 to 32768 [ 83.312345][T10263] XFS: noikeep mount option is deprecated. [ 83.313456][T10263] XFS: ikeep mount option is deprecated. [ 83.355989][T10263] XFS (loop2): Mounting V5 Filesystem [ 83.377292][T10208] BTRFS info (device loop3): enabling ssd optimizations [ 83.403855][ T4329] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.506775][T10263] XFS (loop2): Ending clean mount [ 83.601790][T10314] __nla_validate_parse: 9 callbacks suppressed [ 83.601800][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2690'. [ 83.641160][ T4338] XFS (loop2): Unmounting Filesystem [ 83.972110][T10347] SQUASHFS error: Failed to read block 0x6de: -5 [ 83.974435][T10347] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 83.976805][T10347] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 84.082257][T10358] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 84.155648][T10370] random: crng reseeded on system resumption [ 84.165404][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 84.264009][T10383] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2723'. [ 84.268041][T10383] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 84.363590][T10392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 84.434373][T10392] EXT4-fs error (device loop0): ext4_xattr_block_find:1828: inode #12: comm syz.0.2727: corrupted xattr block 6 [ 84.464518][T10317] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 84.470789][T10392] EXT4-fs (loop0): Remounting filesystem read-only [ 84.503007][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 84.934527][T10406] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x3ffff [ 84.936131][T10406] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 84.937692][T10422] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2741 (10422) [ 84.939970][T10406] F2FS-fs (loop1): invalid crc value [ 84.953489][T10422] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 84.955383][T10422] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 84.956737][T10422] BTRFS info (device loop4): using free space tree [ 84.957294][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2752'. [ 84.959821][T10440] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 84.964038][T10406] F2FS-fs (loop1): Found nat_bits in checkpoint [ 84.970206][T10406] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x57c/0x8b8 [ 85.001966][T10406] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 85.041574][T10406] F2FS-fs (loop1): switch extent_cache option is not allowed [ 85.181209][T10470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2759'. [ 85.258697][T10422] BTRFS info (device loop4): enabling ssd optimizations [ 85.421057][ T4334] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 85.536610][T10498] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.552510][T10498] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 85.553957][T10498] System zones: 1-12 [ 85.561063][T10498] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.2768: bad orphan inode 131072 [ 85.571129][T10498] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 85.588848][T10414] F2FS-fs (loop0): invalid crc value [ 85.622396][T10483] XFS (loop2): Mounting V5 Filesystem [ 85.632281][T10414] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.643377][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 85.656689][T10414] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 85.673605][T10483] XFS (loop2): Ending clean mount [ 85.695182][T10414] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 85.705774][T10414] F2FS-fs (loop0): access invalid blkaddr:36 [ 85.707266][T10414] CPU: 0 PID: 10414 Comm: syz.0.2737 Not tainted syzkaller #0 [ 85.708732][T10414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 85.710728][T10414] Call trace: [ 85.711417][T10414] dump_backtrace+0x1c4/0x1f0 [ 85.712393][T10414] show_stack+0x2c/0x3c [ 85.713175][T10414] __dump_stack+0x30/0x40 [ 85.714014][T10414] dump_stack_lvl+0xf4/0x15c [ 85.714845][T10414] dump_stack+0x1c/0x5c [ 85.715640][T10414] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 85.716640][T10414] f2fs_get_read_data_page+0x24c/0x60c [ 85.717628][T10414] f2fs_find_data_page+0x1c4/0x520 [ 85.718542][T10414] f2fs_empty_dir+0x10c/0x3d4 [ 85.719373][T10414] f2fs_rmdir+0x48/0x7c [ 85.720120][T10414] vfs_rmdir+0x304/0x438 [ 85.720883][T10414] do_rmdir+0x244/0x524 [ 85.721624][T10414] __arm64_sys_unlinkat+0xcc/0xfc [ 85.722619][T10414] invoke_syscall+0x98/0x290 [ 85.723468][T10414] el0_svc_common+0x13c/0x258 [ 85.724342][T10414] do_el0_svc+0x5c/0x134 [ 85.725126][T10414] el0_svc+0x58/0x128 [ 85.725861][T10414] el0t_64_sync_handler+0x84/0xf0 [ 85.726777][T10414] el0t_64_sync+0x18c/0x190 [ 85.738711][ T4338] XFS (loop2): Unmounting Filesystem [ 85.795671][T10536] netlink: 'syz.1.2781': attribute type 1 has an invalid length. [ 85.797089][T10536] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2781'. [ 85.945846][T10552] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 85.952511][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2785'. [ 86.175877][T10576] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2801'. [ 86.177493][T10576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2801'. [ 86.265751][T10556] syz.3.2790 (10556): drop_caches: 2 [ 86.270211][T10574] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.294715][T10572] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.296805][T10574] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 86.302236][T10574] System zones: 1-12 [ 86.303585][T10574] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.2800: bad orphan inode 131072 [ 86.322441][T10574] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 86.333938][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2807'. [ 86.362730][T10572] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 623: comm syz.4.2799: Attempting to read directory block (623) that is past i_size (638464) [ 86.397933][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 86.451082][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 86.530984][T10611] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2813'. [ 86.630157][T10623] befs: (loop3): No write support. Marking filesystem read-only [ 86.636480][T10623] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.650197][T10623] befs: (loop3): unable to read superblock [ 86.652670][T10628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.779112][T10637] IPVS: length: 173 != 24 [ 86.806772][T10639] x_tables: unsorted underflow at hook 2 [ 86.844096][T10621] set_capacity_and_notify: 11 callbacks suppressed [ 86.844106][T10621] loop2: detected capacity change from 0 to 32768 [ 86.900833][T10621] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 86.902735][T10621] XFS (loop2): Mounting V5 Filesystem [ 86.921310][T10651] device vlan0 entered promiscuous mode [ 86.943024][T10621] XFS (loop2): Ending clean mount [ 86.948968][T10621] XFS (loop2): Quotacheck needed: Please wait. [ 86.971486][T10621] XFS (loop2): Quotacheck: Done. [ 87.073147][ T4338] XFS (loop2): Unmounting Filesystem [ 87.076806][T10670] netlink: 'syz.1.2841': attribute type 1 has an invalid length. [ 87.083418][T10670] netlink: 'syz.1.2841': attribute type 2 has an invalid length. [ 87.245600][T10694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.310176][T10706] loop0: detected capacity change from 0 to 128 [ 87.321000][T10706] FAT-fs (loop0): Directory bread(block 32) failed [ 87.327984][T10706] FAT-fs (loop0): Directory bread(block 33) failed [ 87.329992][T10706] FAT-fs (loop0): Directory bread(block 34) failed [ 87.331182][T10706] FAT-fs (loop0): Directory bread(block 35) failed [ 87.333756][T10706] FAT-fs (loop0): Directory bread(block 36) failed [ 87.344200][T10706] FAT-fs (loop0): Directory bread(block 37) failed [ 87.345500][T10706] FAT-fs (loop0): Directory bread(block 38) failed [ 87.346712][T10706] FAT-fs (loop0): Directory bread(block 39) failed [ 87.347922][T10706] FAT-fs (loop0): Directory bread(block 40) failed [ 87.356625][T10706] FAT-fs (loop0): Directory bread(block 41) failed [ 87.481843][T10725] loop3: detected capacity change from 0 to 2048 [ 87.496543][T10725] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.527508][T10725] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 87.540463][T10725] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 87.681815][T10758] random: crng reseeded on system resumption [ 87.882963][T10792] loop0: detected capacity change from 0 to 64 [ 88.235080][T10804] loop1: detected capacity change from 0 to 32768 [ 88.236492][T10819] [U] [ 88.237029][T10819] [U] [ 88.237495][T10819] [U] [ 88.238011][T10819] [U] [ 88.246505][T10819] [U] [ 88.247107][T10819] [U] [ 88.247617][T10819] [U] [ 88.248129][T10819] [U] [ 88.249705][T10804] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2901 (10804) [ 88.252309][T10819] [U] [ 88.252826][T10819] [U] [ 88.253305][T10819] [U] [ 88.254851][T10804] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 88.255920][T10818] [U] [ 88.256727][T10804] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 88.268322][T10804] BTRFS info (device loop1): using free space tree [ 88.412729][T10804] BTRFS info (device loop1): enabling ssd optimizations [ 88.452000][ T4328] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 88.712079][T10791] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 88.819990][T10883] xt_bpf: check failed: parse error [ 88.864481][T10809] loop0: detected capacity change from 0 to 131072 [ 88.880941][T10809] F2FS-fs (loop0): invalid crc value [ 88.908920][T10809] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.917261][T10809] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 88.937760][T10809] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 89.075464][T10916] ipt_CLUSTERIP: Please specify destination IP [ 89.100880][T10917] loop1: detected capacity change from 0 to 4096 [ 89.106461][T10921] loop2: detected capacity change from 0 to 512 [ 89.113662][T10917] __ntfs_error: 42 callbacks suppressed [ 89.113676][T10917] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 89.116209][T10917] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 89.122813][T10917] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 89.134721][T10917] ntfs: volume version 3.1. [ 89.145427][T10921] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 89.157507][T10921] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 89.180292][T10921] EXT4-fs (loop2): 1 truncate cleaned up [ 89.185906][T10921] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 89.253338][T10921] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 89.256174][T10917] ntfs: (device loop1): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 89.326523][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 89.338707][ T4328] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 89.462707][T10959] random: crng reseeded on system resumption [ 89.464688][T10960] __nla_validate_parse: 5 callbacks suppressed [ 89.464697][T10960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2964'. [ 89.644319][T10978] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2974'. [ 89.646006][T10978] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2974'. [ 89.647677][T10978] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2974'. [ 89.767614][T10990] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 90.032429][T10955] syz.4.2960 (10955): drop_caches: 2 [ 90.218038][T11004] loop2: detected capacity change from 0 to 32768 [ 90.242894][T11004] [ 90.242894][T11004] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.242894][T11004] [ 90.264502][T11004] [ 90.264502][T11004] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.264502][T11004] [ 90.288014][T11004] [ 90.288014][T11004] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.288014][T11004] [ 90.290097][T11004] [ 90.290097][T11004] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.290097][T11004] [ 90.301391][ T95] [ 90.301391][ T95] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.301391][ T95] [ 90.344849][ T4338] [ 90.344849][ T4338] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.344849][ T4338] [ 90.347028][ T4338] [ 90.347028][ T4338] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.347028][ T4338] [ 90.395864][T11027] loop4: detected capacity change from 0 to 32768 [ 90.400377][T11054] netlink: 'syz.2.3011': attribute type 1 has an invalid length. [ 90.411862][T11027] (syz.4.2996,11027,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 90.414574][T11027] (syz.4.2996,11027,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 90.452862][T11027] JBD2: Ignoring recovery information on journal [ 90.479769][T11027] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 90.505860][T11065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3016'. [ 90.545882][ T4334] ocfs2: Unmounting device (7,4) on (node local) [ 90.647897][T11082] netlink: 'syz.1.3021': attribute type 1 has an invalid length. [ 90.673047][T11086] EXT4-fs: Ignoring removed bh option [ 90.674246][T11086] EXT4-fs: inline encryption not supported [ 90.675683][T11086] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.702998][T11086] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 90.707873][T11086] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3027: bg 0: block 248: padding at end of block bitmap is not set [ 90.727748][T11086] Quota error (device loop1): write_blk: dquota write failed [ 90.731978][T11086] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 90.741848][T11086] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.3027: Failed to acquire dquot type 1 [ 90.744206][T11092] xt_CT: No such helper "snmp_trap" [ 90.772574][T11086] EXT4-fs (loop1): 1 truncate cleaned up [ 90.784339][T11086] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 90.865110][T11086] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 90.867095][T11086] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 131074 [ 90.869663][T11086] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.3027: Failed to acquire dquot type 1 [ 90.923913][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 90.998573][T11118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3039'. [ 91.000115][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3039'. [ 91.001552][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3039'. [ 91.115631][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3048'. [ 91.151285][T11138] netlink: 'syz.1.3049': attribute type 1 has an invalid length. [ 91.153157][T11138] netlink: 'syz.1.3049': attribute type 2 has an invalid length. [ 91.154808][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3049'. [ 91.157855][T11133] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.250416][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 91.270567][T11148] misc userio: No port type given on /dev/userio [ 91.440568][T11124] XFS (loop4): Mounting V5 Filesystem [ 91.472468][T11124] XFS (loop4): Ending clean mount [ 91.499697][T11179] openvswitch: netlink: Flow actions attr not present in new flow. [ 91.592773][ T4334] XFS (loop4): Unmounting Filesystem [ 91.845185][T11220] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 91.846684][T11220] UDF-fs: Scanning with blocksize 512 failed [ 91.854482][T11220] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.980101][T11234] set_capacity_and_notify: 4 callbacks suppressed [ 91.980111][T11234] loop3: detected capacity change from 0 to 4096 [ 91.994824][T11234] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 92.025802][T11234] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 92.089505][T11252] netlink: 'syz.1.3102': attribute type 2 has an invalid length. [ 92.186633][T11268] loop3: detected capacity change from 0 to 256 [ 92.497756][T11320] netlink: 'syz.0.3135': attribute type 3 has an invalid length. [ 92.507028][T11320] netlink: 'syz.0.3135': attribute type 3 has an invalid length. [ 92.552469][T11322] loop4: detected capacity change from 0 to 4096 [ 92.600784][T11332] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.662113][T11341] loop3: detected capacity change from 0 to 164 [ 92.856957][T11371] Error parsing options; rc = [-22] [ 93.037011][T11401] binder: BC_ACQUIRE_RESULT not supported [ 93.043821][T11401] binder: 11400:11401 ioctl c0306201 20000100 returned -22 [ 93.075639][T11405] loop2: detected capacity change from 0 to 1024 [ 93.092426][T11405] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 93.094322][T11405] EXT4-fs (loop2): orphan cleanup on readonly fs [ 93.101156][T11405] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 93.103610][T11405] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 93.111657][T11405] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.3179: Freeing blocks not in datazone - block = 0, count = 4096 [ 93.133230][T11405] EXT4-fs (loop2): 1 orphan inode deleted [ 93.134257][T11405] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 93.143342][T11405] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 93.218839][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 93.222848][T11402] loop0: detected capacity change from 0 to 32768 [ 93.295509][T11402] XFS (loop0): Mounting V5 Filesystem [ 93.326345][T11402] XFS (loop0): Ending clean mount [ 93.428028][ T4335] XFS (loop0): Unmounting Filesystem [ 93.456466][T11451] loop3: detected capacity change from 0 to 1024 [ 93.560272][ T11] hfsplus: b-tree write err: -5, ino 25 [ 93.561443][ T11] hfsplus: b-tree write err: -5, ino 4 [ 93.562389][ T11] hfsplus: b-tree write err: -5, ino 2 [ 93.565285][ T11] hfsplus: b-tree write err: -5, ino 17 [ 93.963693][T11494] loop1: detected capacity change from 0 to 64 [ 93.984216][T11494] hfs: keylen 40 too large [ 94.034521][T11476] loop2: detected capacity change from 0 to 32768 [ 94.110008][T11420] loop4: detected capacity change from 0 to 131072 [ 94.110230][T11476] XFS (loop2): Mounting V5 Filesystem [ 94.144850][T11476] XFS (loop2): Ending clean mount [ 94.191180][T11420] F2FS-fs (loop4): Found nat_bits in checkpoint [ 94.217115][T11420] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 94.222725][ T4388] hfsplus: b-tree write err: -5, ino 25 [ 94.224073][ T4388] hfsplus: b-tree write err: -5, ino 4 [ 94.225168][ T4388] hfsplus: b-tree write err: -5, ino 2 [ 94.226763][ T4388] hfsplus: b-tree write err: -5, ino 17 [ 94.261545][ T4338] XFS (loop2): Unmounting Filesystem [ 94.311546][T11538] (unnamed net_device) (uninitialized): up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 94.317605][T11536] overlayfs: unrecognized mount option "\" or missing value [ 94.329150][T11534] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 94.348762][T11539] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.815606][T11587] FAT-fs (loop4): Directory bread(block 64) failed [ 94.816737][T11587] FAT-fs (loop4): Directory bread(block 65) failed [ 94.817972][T11587] FAT-fs (loop4): Directory bread(block 66) failed [ 94.822012][T11587] FAT-fs (loop4): Directory bread(block 67) failed [ 94.823141][T11587] FAT-fs (loop4): Directory bread(block 68) failed [ 94.824216][T11587] FAT-fs (loop4): Directory bread(block 69) failed [ 94.825314][T11587] FAT-fs (loop4): Directory bread(block 70) failed [ 94.826791][T11587] FAT-fs (loop4): Directory bread(block 71) failed [ 94.828029][T11587] FAT-fs (loop4): Directory bread(block 72) failed [ 94.829883][T11587] FAT-fs (loop4): Directory bread(block 73) failed [ 94.841806][T11592] sctp: [Deprecated]: syz.0.3258 (pid 11592) Use of int in max_burst socket option. [ 94.841806][T11592] Use struct sctp_assoc_value instead [ 94.927711][T11553] XFS (loop3): Mounting V5 Filesystem [ 94.981383][T11553] XFS (loop3): Ending clean mount [ 95.064176][T11619] ubi8: attaching mtd0 [ 95.065781][T11619] ubi8: scanning is finished [ 95.066632][T11619] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 95.110603][ T4329] XFS (loop3): Unmounting Filesystem [ 95.120677][T11625] __nla_validate_parse: 15 callbacks suppressed [ 95.120689][T11625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3269'. [ 95.173019][T11619] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 95.313093][T11640] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 95.344413][T11621] XFS (loop4): Mounting V5 Filesystem [ 95.409482][T11621] XFS (loop4): Ending clean mount [ 95.416654][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 95.417862][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'. [ 95.516456][ T4334] XFS (loop4): Unmounting Filesystem [ 95.587359][T11671] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.664380][T11681] EXT4-fs: Ignoring removed bh option [ 95.665479][T11681] EXT4-fs: inline encryption not supported [ 95.685348][T11681] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.715146][T11681] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 95.717944][T11681] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3295: bg 0: block 248: padding at end of block bitmap is not set [ 95.742992][T11690] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.745047][T11681] Quota error (device loop0): write_blk: dquota write failed [ 95.746355][T11681] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 95.770703][T11681] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.3295: Failed to acquire dquot type 1 [ 95.773333][T11681] EXT4-fs (loop0): 1 truncate cleaned up [ 95.774405][T11681] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 95.852294][T11692] XFS (loop1): Mounting V5 Filesystem [ 95.879137][T11692] XFS (loop1): Ending clean mount [ 95.902131][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 95.904537][ T60] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 95.906097][ T60] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 1 [ 96.058666][T11679] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 96.060311][T11679] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 96.069685][T11679] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 96.071630][ T4317] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 96.072757][ T4317] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 96.083069][ T4317] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 10ms [ 96.084546][ T4317] gfs2: fsid=syz:syz.0: jid=0: Done [ 96.085547][T11679] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 96.093170][ T4328] XFS (loop1): Unmounting Filesystem [ 96.182595][T11679] gfs2: fsid=syz:syz.0: found 1 quota changes [ 96.223431][T11734] CIFS mount error: No usable UNC path provided in device string! [ 96.223431][T11734] [ 96.225228][T11734] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 96.246409][ T4329] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 96.246409][ T4329] inode = 11 2339 [ 96.246409][ T4329] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 96.258272][ T4329] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 96.260080][ T4329] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4329 [syz-executor] gfs2_quota_sync+0x2cc/0x4e8 [ 96.261951][ T4329] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000200 s:0 p:0 [ 96.263376][ T4329] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 96.274592][ T4329] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 96.276076][ T4329] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 96.277252][ T4329] gfs2: fsid=syz:syz.0: File system withdrawn [ 96.286075][ T4329] CPU: 0 PID: 4329 Comm: syz-executor Not tainted syzkaller #0 [ 96.287511][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 96.289558][ T4329] Call trace: [ 96.290255][ T4329] dump_backtrace+0x1c4/0x1f0 [ 96.291200][ T4329] show_stack+0x2c/0x3c [ 96.292053][ T4329] __dump_stack+0x30/0x40 [ 96.292924][ T4329] dump_stack_lvl+0xf4/0x15c [ 96.293823][ T4329] dump_stack+0x1c/0x5c [ 96.294553][ T4329] gfs2_withdraw+0x9f8/0x1244 [ 96.295385][ T4329] gfs2_consist_inode_i+0xf8/0x114 [ 96.296326][ T4329] gfs2_inode_refresh+0x9a0/0xe64 [ 96.297214][ T4329] inode_go_instantiate+0x4c/0x68 [ 96.298091][ T4329] gfs2_instantiate+0x178/0x2b4 [ 96.299029][ T4329] gfs2_glock_wait+0x1b0/0x290 [ 96.299951][ T4329] gfs2_glock_nq+0x8bc/0x11c4 [ 96.300797][ T4329] do_sync+0x414/0xa68 [ 96.301528][ T4329] gfs2_quota_sync+0x2cc/0x4e8 [ 96.302392][ T4329] gfs2_sync_fs+0x50/0xc8 [ 96.303097][ T4329] sync_filesystem+0xe8/0x218 [ 96.303947][ T4329] generic_shutdown_super+0x74/0x32c [ 96.304869][ T4329] kill_block_super+0x78/0xe0 [ 96.305648][ T4329] gfs2_kill_sb+0xc4/0xd8 [ 96.306387][ T4329] deactivate_locked_super+0xb4/0x128 [ 96.307304][ T4329] deactivate_super+0xe4/0x104 [ 96.308134][ T4329] cleanup_mnt+0x3a8/0x430 [ 96.309034][ T4329] __cleanup_mnt+0x20/0x30 [ 96.309891][ T4329] task_work_run+0x1f4/0x280 [ 96.310779][ T4329] do_notify_resume+0x20f8/0x2c84 [ 96.311685][ T4329] el0_svc+0x98/0x128 [ 96.312381][ T4329] el0t_64_sync_handler+0x84/0xf0 [ 96.313293][ T4329] el0t_64_sync+0x18c/0x190 [ 96.377826][ T4329] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 96.380386][ T4329] CPU: 0 PID: 4329 Comm: syz-executor Not tainted syzkaller #0 [ 96.381593][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 96.383333][ T4329] Call trace: [ 96.383944][ T4329] dump_backtrace+0x1c4/0x1f0 [ 96.384701][ T4329] show_stack+0x2c/0x3c [ 96.385424][ T4329] __dump_stack+0x30/0x40 [ 96.386111][ T4329] dump_stack_lvl+0xf4/0x15c [ 96.386860][ T4329] dump_stack+0x1c/0x5c [ 96.387518][ T4329] gfs2_assert_warn_i+0x16c/0x26c [ 96.388360][ T4329] gfs2_quota_cleanup+0x444/0x640 [ 96.389292][ T4329] gfs2_put_super+0x1ec/0x744 [ 96.390112][ T4329] generic_shutdown_super+0x138/0x32c [ 96.391066][ T4329] kill_block_super+0x78/0xe0 [ 96.391878][ T4329] gfs2_kill_sb+0xc4/0xd8 [ 96.392638][ T4329] deactivate_locked_super+0xb4/0x128 [ 96.393608][ T4329] deactivate_super+0xe4/0x104 [ 96.394489][ T4329] cleanup_mnt+0x3a8/0x430 [ 96.395277][ T4329] __cleanup_mnt+0x20/0x30 [ 96.396047][ T4329] task_work_run+0x1f4/0x280 [ 96.396918][ T4329] do_notify_resume+0x20f8/0x2c84 [ 96.397843][ T4329] el0_svc+0x98/0x128 [ 96.398523][ T4329] el0t_64_sync_handler+0x84/0xf0 [ 96.399429][ T4329] el0t_64_sync+0x18c/0x190 [ 96.419980][T11752] netlink: 'syz.2.3325': attribute type 1 has an invalid length. [ 96.421457][T11752] netlink: 'syz.2.3325': attribute type 2 has an invalid length. [ 96.496695][T11763] netlink: 'syz.0.3329': attribute type 2 has an invalid length. [ 96.514623][T11764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3328'. [ 96.662303][T11790] Non-string source [ 97.035838][T11776] XFS (loop2): Mounting V5 Filesystem [ 97.079250][T11776] XFS (loop2): Ending clean mount [ 97.081951][T11776] XFS (loop2): Quotacheck needed: Please wait. [ 97.103584][T11837] set_capacity_and_notify: 13 callbacks suppressed [ 97.103595][T11837] loop3: detected capacity change from 0 to 32768 [ 97.113626][T11842] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 97.137347][T11776] XFS (loop2): Quotacheck: Done. [ 97.219874][ T4338] XFS (loop2): Unmounting Filesystem [ 97.444630][T11870] loop1: detected capacity change from 0 to 256 [ 97.513279][T11874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3381'. [ 97.785323][T11912] loop1: detected capacity change from 0 to 16 [ 97.793414][T11912] erofs: (device loop1): mounted with root inode @ nid 36. [ 97.811652][T11912] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 97.813432][T11912] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 97.815202][T11912] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 97.816802][T11912] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 97.853302][T11912] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 97.873441][T11920] delete_channel: no stack [ 97.917960][T11926] loop3: detected capacity change from 0 to 256 [ 97.935178][T11924] loop2: detected capacity change from 0 to 4096 [ 97.944223][T11924] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 97.946275][T11924] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 97.953586][T11926] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 97.963542][T11924] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 97.965541][T11924] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 97.979144][T11924] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 97.988968][T11924] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 97.991413][T11811] loop4: detected capacity change from 0 to 131072 [ 97.995252][T11811] F2FS-fs (loop4): invalid crc value [ 97.997451][T11924] ntfs: volume version 3.1. [ 98.014783][T11924] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 98.021959][T11935] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 98.043460][T11811] F2FS-fs (loop4): Found nat_bits in checkpoint [ 98.076220][T11811] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 98.533251][T11967] loop3: detected capacity change from 0 to 32768 [ 98.536735][T11967] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3425 (11967) [ 98.550822][T11967] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.552592][T11967] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 98.554018][T11967] BTRFS info (device loop3): using free space tree [ 98.725782][T12011] loop2: detected capacity change from 0 to 8 [ 98.738317][T11967] BTRFS info (device loop3): enabling ssd optimizations [ 98.793976][T11957] loop0: detected capacity change from 0 to 131072 [ 98.795792][T11957] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 98.797461][T11957] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 98.799859][T11957] F2FS-fs (loop0): invalid crc value [ 98.802287][T11957] F2FS-fs (loop0): Found nat_bits in checkpoint [ 98.856401][ T4329] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.869341][T11957] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 98.870637][T11957] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 98.974898][T12019] loop1: detected capacity change from 0 to 32768 [ 98.990447][T12019] (syz.1.3440,12019,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 98.994266][T12019] (syz.1.3440,12019,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 99.031187][ T4321] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4321) [ 99.042333][T12019] JBD2: Ignoring recovery information on journal [ 99.160528][T12019] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 99.181307][T12045] xt_hashlimit: max too large, truncated to 1048576 [ 99.303736][ T4328] ocfs2: Unmounting device (7,1) on (node local) [ 99.320750][T12063] vhci_hcd: invalid port number 255 [ 99.322359][T12063] vhci_hcd: invalid port number 255 [ 99.650645][T12098] binder: 12096:12098 ioctl 400c620e 0 returned -14 [ 99.719948][T12111] netlink: 'syz.0.3483': attribute type 29 has an invalid length. [ 99.721544][T12111] netlink: 'syz.0.3483': attribute type 29 has an invalid length. [ 99.957061][T12144] kernel profiling enabled (shift: 63) [ 99.963233][T12144] profiling shift: 63 too large [ 100.077716][T12147] ntfs: volume version 3.1. [ 100.082442][T12157] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3507'. [ 100.090263][T12158] EXT2-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 100.091961][T12158] EXT2-fs (loop3): DAX unsupported by block device. Turning off DAX. [ 100.107335][T12158] EXT2-fs (loop3): error: revision level too high, forcing read-only mode [ 100.112612][T12158] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=800a8] [ 100.233409][T12166] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 100.251444][T12166] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 100.253585][T12170] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 100.272858][T12170] EXT4-fs error (device loop0): ext4_xattr_block_list:713: inode #12: comm syz.0.3511: corrupted xattr block 6 [ 100.278427][T12170] EXT4-fs (loop0): Remounting filesystem read-only [ 100.325449][T12166] ntfs3: loop3: ino=0, attr_set_size [ 100.332042][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 100.395240][T12181] xt_ecn: cannot match TCP bits for non-tcp packets [ 100.485356][T12189] xt_CT: No such helper "pptp" [ 100.589153][T12199] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 100.641975][T12208] random: crng reseeded on system resumption [ 100.743796][T12217] device bridge2 entered promiscuous mode [ 100.830180][T12229] sctp: [Deprecated]: syz.0.3540 (pid 12229) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.830180][T12229] Use struct sctp_sack_info instead [ 100.877089][T12235] openvswitch: netlink: Missing key (keys=48, expected=2000) [ 100.890540][T12238] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 100.917485][T12237] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.034905][T12257] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3553'. [ 101.075312][T12265] CIFS: iocharset name too long [ 101.101112][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3559'. [ 101.103046][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3559'. [ 101.261749][T12291] delete_channel: no stack [ 101.283313][T12296] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.289835][T12298] netlink: 'syz.3.3574': attribute type 21 has an invalid length. [ 101.294948][T12298] netlink: 'syz.3.3574': attribute type 20 has an invalid length. [ 101.332198][T12304] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3577'. [ 101.382979][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3582'. [ 101.549697][T12337] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3595'. [ 101.551455][T12337] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3595'. [ 101.553030][T12337] netlink: 78 bytes leftover after parsing attributes in process `syz.4.3595'. [ 101.905308][T12334] XFS (loop0): Mounting V5 Filesystem [ 101.926466][T12377] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 101.973452][T12334] XFS (loop0): Ending clean mount [ 102.021392][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 102.093352][T12404] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 102.094985][T12404] FAT-fs (loop3): Filesystem has been set read-only [ 102.112283][ T4335] XFS (loop0): Unmounting Filesystem [ 102.196947][T12420] set_capacity_and_notify: 12 callbacks suppressed [ 102.196958][T12420] loop1: detected capacity change from 0 to 2048 [ 102.207139][T12420] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.385551][ T22] kernel write not supported for file /input/mice (pid: 22 comm: kworker/1:0) [ 102.435313][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3645'. [ 102.439435][T12450] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 102.459776][T12454] netlink: 'syz.3.3646': attribute type 71 has an invalid length. [ 102.571385][T12468] loop1: detected capacity change from 0 to 256 [ 102.577034][T12466] loop2: detected capacity change from 0 to 2048 [ 102.585855][T12468] FAT-fs (loop1): Directory bread(block 64) failed [ 102.591055][T12468] FAT-fs (loop1): Directory bread(block 65) failed [ 102.592505][T12466] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 102.595339][T12468] FAT-fs (loop1): Directory bread(block 66) failed [ 102.596657][T12468] FAT-fs (loop1): Directory bread(block 67) failed [ 102.604646][T12468] FAT-fs (loop1): Directory bread(block 68) failed [ 102.606119][T12472] loop3: detected capacity change from 0 to 512 [ 102.606348][T12468] FAT-fs (loop1): Directory bread(block 69) failed [ 102.611054][T12468] FAT-fs (loop1): Directory bread(block 70) failed [ 102.612706][T12468] FAT-fs (loop1): Directory bread(block 71) failed [ 102.615388][T12468] FAT-fs (loop1): Directory bread(block 72) failed [ 102.617826][T12468] FAT-fs (loop1): Directory bread(block 73) failed [ 102.619853][T12473] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.628055][T12472] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 102.692356][T12472] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz.3.3656: Directory block failed checksum [ 102.703657][T12466] NILFS (loop2): unrecognized mount option "»É »ÞØyF̳¥óoô#bQØc4ñuEÌ®ˆ" [ 102.769924][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 103.071154][T12520] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 103.255510][T12553] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3695'. [ 103.425813][T12574] loop2: detected capacity change from 0 to 4096 [ 103.430528][T12574] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 103.473056][T12576] loop4: detected capacity change from 0 to 8192 [ 103.488196][T12576] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.725190][T12601] netlink: 'syz.3.3720': attribute type 32 has an invalid length. [ 103.871385][T12607] loop4: detected capacity change from 0 to 256 [ 103.934725][T12599] loop1: detected capacity change from 0 to 32768 [ 103.983598][T12599] jfs_strtoUCS: char2uni returned -22. [ 103.984996][T12599] charset = cp950, char = 0xd4 [ 104.082783][T12625] loop4: detected capacity change from 0 to 256 [ 104.103404][T12625] FAT-fs (loop4): Directory bread(block 64) failed [ 104.104624][T12625] FAT-fs (loop4): Directory bread(block 65) failed [ 104.105867][T12625] FAT-fs (loop4): Directory bread(block 66) failed [ 104.107040][T12625] FAT-fs (loop4): Directory bread(block 67) failed [ 104.118436][T12625] FAT-fs (loop4): Directory bread(block 68) failed [ 104.119670][T12625] FAT-fs (loop4): Directory bread(block 69) failed [ 104.131049][T12625] FAT-fs (loop4): Directory bread(block 70) failed [ 104.132201][T12625] FAT-fs (loop4): Directory bread(block 71) failed [ 104.133277][T12625] FAT-fs (loop4): Directory bread(block 72) failed [ 104.134311][T12625] FAT-fs (loop4): Directory bread(block 73) failed [ 104.191141][T12633] loop3: detected capacity change from 0 to 1024 [ 104.272596][T12641] netlink: 'syz.1.3740': attribute type 1 has an invalid length. [ 104.322258][T12645] netlink: 'syz.2.3742': attribute type 5 has an invalid length. [ 104.367672][T12651] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 104.442509][T12580] F2FS-fs (loop0): Invalid log sectors per block(570425347) log sectorsize(9) [ 104.444032][T12580] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 104.447411][T12580] F2FS-fs (loop0): invalid crc value [ 104.472825][T12580] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 104.490973][T12580] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 104.498861][T12580] F2FS-fs (loop0): Bad quota inode 2:50331648 [ 104.499982][T12580] F2FS-fs (loop0): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 104.501687][T12580] F2FS-fs (loop0): Cannot turn on quotas: error -22 [ 104.522031][T12580] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 104.523649][T12580] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 104.544481][T12580] F2FS-fs (loop0): quota sysfile already exists [ 104.752263][T12693] netlink: 'syz.1.3763': attribute type 21 has an invalid length. [ 104.894941][T12706] bpf: Bad value for 'mode' [ 104.997851][T12723] xt_TCPMSS: Only works on TCP SYN packets [ 105.264731][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 105.264745][ T27] audit: type=1326 audit(105.244:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.4.3794" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa37a168 code=0x7ffc0000 [ 105.277630][ T27] audit: type=1326 audit(105.254:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.4.3794" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffaa37a168 code=0x7ffc0000 [ 105.290964][ T27] audit: type=1326 audit(105.264:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.4.3794" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa37a168 code=0x7ffc0000 [ 105.411294][T12726] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 105.412839][T12726] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 105.432060][T12726] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 105.450707][T12726] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 105.509835][T12762] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.3796 (12762) [ 105.516106][T12762] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 105.517903][T12762] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 105.531004][T12778] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 38197 - 0 [ 105.532481][T12778] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 38197 - 0 [ 105.535576][T12762] BTRFS info (device loop3): enabling ssd optimizations [ 105.536689][T12762] BTRFS info (device loop3): not using ssd optimizations [ 105.538008][T12762] BTRFS info (device loop3): turning off barriers [ 105.547985][T12762] BTRFS info (device loop3): use no compression [ 105.549828][T12778] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 38197 - 0 [ 105.551399][T12778] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 38197 - 0 [ 105.553027][T12778] device geneve3 entered promiscuous mode [ 105.554315][T12762] BTRFS info (device loop3): using free space tree [ 105.747128][T12806] xt_l2tp: v2 doesn't support IP mode [ 105.799700][ T4329] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 106.035643][ T4318] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop3 scanned by udevd (4318) [ 106.048889][T12837] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 106.220706][T12861] netlink: 'syz.4.3836': attribute type 10 has an invalid length. [ 106.222177][T12861] __nla_validate_parse: 7 callbacks suppressed [ 106.222187][T12861] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3836'. [ 106.231251][T12860] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 106.245083][T12860] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.673856][T12915] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 106.689294][T12879] (syz.0.3844,12879,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 106.691766][T12879] (syz.0.3844,12879,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 106.704259][T12879] JBD2: Ignoring recovery information on journal [ 106.762778][T12879] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 106.892140][T12931] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3867'. [ 106.945497][ T4335] ocfs2: Unmounting device (7,0) on (node local) [ 107.075793][T12943] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 107.077432][T12943] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 107.079951][T12943] EXT4-fs (loop3): orphan cleanup on readonly fs [ 107.087275][T12943] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #13: comm syz.3.3874: iget: bad i_size value: 12154761577498 [ 107.091524][T12943] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.3874: couldn't read orphan inode 13 (err -117) [ 107.096158][T12943] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 107.150458][T12943] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.3874: dx entry: limit 65535 != root limit 120 [ 107.170331][T12943] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3874: Corrupt directory, running e2fsck is recommended [ 107.228856][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 107.270240][T12965] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 107.345557][T12936] set_capacity_and_notify: 8 callbacks suppressed [ 107.345566][T12936] loop4: detected capacity change from 0 to 32768 [ 107.565609][T12994] kAFS: unable to lookup cell '(,c¾Ì' [ 107.644505][T12997] loop0: detected capacity change from 0 to 8192 [ 107.712213][T13014] loop3: detected capacity change from 0 to 1024 [ 107.817470][T13027] loop2: detected capacity change from 0 to 1024 [ 107.847665][T13033] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3916'. [ 107.914415][T13027] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 107.943783][T13027] EXT4-fs error (device loop2): ext4_lookup:1858: comm syz.2.3915: inode #12: comm syz.2.3915: iget: illegal inode # [ 107.955278][T13046] ip6t_rpfilter: unknown options [ 107.967414][T13048] loop3: detected capacity change from 0 to 512 [ 107.972001][T13048] EXT4-fs: Ignoring removed oldalloc option [ 107.973254][T13048] EXT4-fs: inline encryption not supported [ 107.974935][T13027] EXT4-fs (loop2): Remounting filesystem read-only [ 107.979097][T13048] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.027488][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 108.052098][T13048] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3923: bg 0: block 64: padding at end of block bitmap is not set [ 108.068460][T13048] Quota error (device loop3): write_blk: dquota write failed [ 108.069891][T13048] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 108.078794][T13048] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.3923: Failed to acquire dquot type 0 [ 108.084426][T13048] EXT4-fs (loop3): 1 truncate cleaned up [ 108.085520][T13048] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 108.144221][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 108.194880][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3936'. [ 108.196625][T13075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3936'. [ 108.271498][T13083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3939'. [ 108.273293][T13083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3939'. [ 108.366406][T13102] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3949'. [ 108.393783][T13106] loop0: detected capacity change from 0 to 512 [ 108.426874][T13106] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 108.482562][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 108.487640][T13121] loop2: detected capacity change from 0 to 1024 [ 108.545878][T13121] hfsplus: can't free extent [ 108.607518][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3965'. [ 108.669998][T13148] loop4: detected capacity change from 0 to 512 [ 108.673700][T13147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3971'. [ 108.675945][T13148] EXT2-fs (loop4): nobh option not supported [ 108.684966][T13148] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 108.753820][T13159] loop1: detected capacity change from 0 to 256 [ 108.777673][T13164] device gtp1 entered promiscuous mode [ 108.785666][T13159] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 109.052107][T13207] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 109.137037][T13218] netlink: 'syz.0.4004': attribute type 10 has an invalid length. [ 109.150366][T13218] team0: Device vxcan1 is of different type [ 109.322431][T13248] loop3: detected capacity change from 0 to 512 [ 109.360161][T13248] EXT4-fs (loop3): 1 truncate cleaned up [ 109.361204][T13248] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 109.635008][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 109.706011][T13282] device ip6tnl4 entered promiscuous mode [ 109.826182][T13294] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.183012][T13325] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 110.197560][T13325] Quota error (device loop2): do_check_range: Getting block 4128768 out of range 0-5 [ 110.206252][T13333] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.267945][T13336] device vlan0 entered promiscuous mode [ 110.268676][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 110.508825][T13367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.523793][T13328] XFS (loop4): Mounting V5 Filesystem [ 110.566875][T13328] XFS (loop4): Ending clean mount [ 110.624983][ T4334] XFS (loop4): Unmounting Filesystem [ 110.649190][T13386] binder: 13385:13386 ioctl c018620c 20000300 returned -1 [ 110.695619][T13388] netlink: 'syz.0.4086': attribute type 1 has an invalid length. [ 110.696975][T13388] netlink: 'syz.0.4086': attribute type 2 has an invalid length. [ 110.724681][T13392] Cannot find del_set index 4 as target [ 110.732516][T13390] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.734262][T13390] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.736320][T13369] F2FS-fs (loop3): invalid crc value [ 110.748010][T13369] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.766185][T13390] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 110.780999][T13369] F2FS-fs (loop3): Start checkpoint disabled! [ 110.829327][T13369] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 110.854216][T13369] syz.3.4075: attempt to access beyond end of device [ 110.854216][T13369] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 110.864685][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 111.117571][T13427] netlink: 'syz.4.4103': attribute type 1 has an invalid length. [ 111.121027][T13427] NCSI netlink: No device for ifindex 0 [ 111.157825][T13429] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 111.222282][T13407] JBD2: Ignoring recovery information on journal [ 111.249870][T13442] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.256855][T13407] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 111.314303][T13450] __nla_validate_parse: 7 callbacks suppressed [ 111.314314][T13450] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4112'. [ 111.342079][T13449] device batadv1 entered promiscuous mode [ 111.343435][ T4338] ocfs2: Unmounting device (7,2) on (node local) [ 111.424471][T13455] netlink: 'syz.2.4113': attribute type 1 has an invalid length. [ 111.429672][T13455] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4113'. [ 111.741737][T13469] (syz.1.4119,13469,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 111.744260][T13469] (syz.1.4119,13469,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 111.789607][T13469] JBD2: Ignoring recovery information on journal [ 111.846257][T13500] netlink: 'syz.0.4136': attribute type 1 has an invalid length. [ 111.866845][T13469] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 111.902771][T13469] (syz.1.4119,13469,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "heartbeat=nonecommit" or missing value [ 111.944908][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4141'. [ 111.954449][ T4328] ocfs2: Unmounting device (7,1) on (node local) [ 112.006980][T13519] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4145'. [ 112.060800][T13525] netlink: 'syz.4.4147': attribute type 21 has an invalid length. [ 112.236221][T13511] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 112.237960][T13511] XFS (loop2): Mounting V5 Filesystem [ 112.308793][T13511] XFS (loop2): Ending clean mount [ 112.365914][T13565] bridge0: port 3(netdevsim0) entered disabled state [ 112.383139][T13565] device netdevsim0 left promiscuous mode [ 112.384346][T13565] bridge0: port 3(netdevsim0) entered disabled state [ 112.391530][ T4338] XFS (loop2): Unmounting Filesystem [ 112.423658][T13565] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.453698][T13575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4168'. [ 112.455376][T13575] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 112.458484][T13575] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 112.551254][T13589] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4177'. [ 112.816851][T13622] set_capacity_and_notify: 10 callbacks suppressed [ 112.816861][T13622] loop1: detected capacity change from 0 to 128 [ 112.835780][T13623] loop3: detected capacity change from 0 to 512 [ 112.839419][T13622] FAT-fs (loop1): Directory bread(block 524322) failed [ 112.840798][T13622] FAT-fs (loop1): Directory bread(block 524323) failed [ 112.841998][T13622] FAT-fs (loop1): Directory bread(block 524324) failed [ 112.843108][T13622] FAT-fs (loop1): Directory bread(block 524325) failed [ 112.844161][T13622] FAT-fs (loop1): Directory bread(block 524326) failed [ 112.845313][T13622] FAT-fs (loop1): Directory bread(block 524327) failed [ 112.846416][T13622] FAT-fs (loop1): Directory bread(block 524328) failed [ 112.857603][T13622] FAT-fs (loop1): Directory bread(block 524329) failed [ 112.875954][T13623] EXT4-fs (loop3): 1 truncate cleaned up [ 112.876090][T13622] FAT-fs (loop1): Directory bread(block 524322) failed [ 112.877144][T13623] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 112.878611][T13622] FAT-fs (loop1): Directory bread(block 524323) failed [ 112.945259][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 112.945752][T13597] loop0: detected capacity change from 0 to 32768 [ 113.039062][T13597] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 113.040813][T13597] XFS (loop0): Mounting V5 Filesystem [ 113.072859][T13597] XFS (loop0): Ending clean mount [ 113.137555][T13660] loop4: detected capacity change from 0 to 1024 [ 113.142872][ T4335] XFS (loop0): Unmounting Filesystem [ 113.177925][T13660] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 113.202256][T13660] hfsplus: failed to load catalog file [ 113.216347][T13663] loop2: detected capacity change from 0 to 256 [ 113.217986][T13663] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.314977][T13676] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4215'. [ 113.482105][T13704] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 113.483599][T13704] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 113.484992][T13704] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 113.511003][T13708] trusted_key: encrypted_key: master key parameter '' is invalid [ 113.542793][T13711] loop3: detected capacity change from 0 to 512 [ 113.551336][T13711] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.579379][T13711] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.4232: bad orphan inode 13 [ 113.581232][T13711] ext4_test_bit(bit=12, block=18) = 1 [ 113.582246][T13711] is_bad_inode(inode)=0 [ 113.582987][T13711] NEXT_ORPHAN(inode)=0 [ 113.583792][T13711] max_ino=32 [ 113.584317][T13711] i_nlink=1 [ 113.584915][T13711] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 113.613667][T13723] loop1: detected capacity change from 0 to 256 [ 113.624472][T13724] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 113.626872][T13711] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 2 [ 113.632872][T13711] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 113.634970][T13711] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.4232: Failed to acquire dquot type 1 [ 113.713272][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 113.734821][T13728] loop2: detected capacity change from 0 to 512 [ 113.760874][T13728] EXT4-fs (loop2): 1 truncate cleaned up [ 113.762195][T13728] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 113.797991][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 113.869147][T13741] loop2: detected capacity change from 0 to 2048 [ 113.880194][T13741] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.976426][T13749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4249'. [ 113.981377][T13749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4249'. [ 114.005506][T13735] loop4: detected capacity change from 0 to 32768 [ 114.134629][T13765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4258'. [ 114.186059][T13769] EXT4-fs: inline encryption not supported [ 114.196541][T13745] JBD2: Ignoring recovery information on journal [ 114.224535][T13769] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 114.227186][T13769] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 114.231729][T13769] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.4259: Failed to acquire dquot type 0 [ 114.237204][T13745] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 114.251996][T13769] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 114.257521][T13769] EXT4-fs (loop2): 1 truncate cleaned up [ 114.258933][T13769] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 114.314913][T13769] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 114.316760][T13769] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 114.327126][T13769] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.4259: Failed to acquire dquot type 0 [ 114.384510][T13785] device wlan0 entered promiscuous mode [ 114.392012][ T4329] ocfs2: Unmounting device (7,3) on (node local) [ 114.403496][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 114.414022][ T4388] hfsplus: b-tree write err: -5, ino 25 [ 114.415224][ T4388] hfsplus: b-tree write err: -5, ino 4 [ 114.416343][ T4388] hfsplus: b-tree write err: -5, ino 2 [ 114.623854][T13817] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 114.946381][T13858] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.008517][T13869] netlink: 'syz.4.4306': attribute type 1 has an invalid length. [ 115.064284][T13873] device wlan0 left promiscuous mode [ 115.191997][T13881] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 115.250882][T13861] XFS (loop3): Mounting V5 Filesystem [ 115.286157][T13861] XFS (loop3): Ending clean mount [ 115.300813][T13861] XFS (loop3): Quotacheck needed: Please wait. [ 115.335177][T13861] XFS (loop3): Quotacheck: Done. [ 115.435532][T13899] kernel read not supported for file /!selinuxw (pid: 13899 comm: syz.0.4318) [ 115.655649][ T4329] XFS (loop3): Unmounting Filesystem [ 116.013634][T13945] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 116.062446][T13951] netlink: 'syz.2.4344': attribute type 16 has an invalid length. [ 116.068804][T13951] netlink: 'syz.2.4344': attribute type 3 has an invalid length. [ 116.141598][T13962] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.166961][T13957] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 116.192427][T13957] Remounting filesystem read-only [ 116.252246][T13974] netlink: 'syz.1.4355': attribute type 5 has an invalid length. [ 116.396265][T13994] __nla_validate_parse: 5 callbacks suppressed [ 116.396278][T13994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4364'. [ 116.498024][T14010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4373'. [ 116.542167][T14012] FAT-fs (loop0): error, clusters badly computed (1 != 0) [ 116.550009][T14012] FAT-fs (loop0): Filesystem has been set read-only [ 116.622090][T14024] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 116.623903][T14024] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 116.625565][T14024] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 116.641227][T14024] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 116.642899][T14024] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 116.644582][T14024] EXT4-fs (loop2): orphan cleanup on readonly fs [ 116.649819][T14024] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4379: bg 0: block 34: padding at end of block bitmap is not set [ 116.653744][T14024] Quota error (device loop2): write_blk: dquota write failed [ 116.655043][T14024] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 116.656762][T14024] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.4379: Failed to acquire dquot type 1 [ 116.665157][T14022] hfsplus: invalid file type 0177755 for inode 17 [ 116.746903][T14024] EXT4-fs (loop2): 1 truncate cleaned up [ 116.758028][T14024] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 116.770015][T14024] EXT4-fs (loop2): unmounting filesystem. [ 116.816812][T14041] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.881678][T14051] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4393'. [ 116.901022][T14053] dlm: plock device version mismatch: kernel (1.2.0), user (1.1792.0) [ 116.919605][T14055] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4395'. [ 117.025790][T14070] netlink: 'syz.2.4402': attribute type 32 has an invalid length. [ 117.027228][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4402'. [ 117.029416][T14060] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 117.032403][T14060] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 117.034087][T14060] REISERFS (device loop4): using ordered data mode [ 117.044472][T14070] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 117.047256][T14060] reiserfs: using flush barriers [ 117.047830][ T27] audit: type=1400 audit(129.138:5): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.060718][T14074] netlink: 'syz.0.4403': attribute type 5 has an invalid length. [ 117.158319][T14060] REISERFS (device loop4): checking transaction log (loop4) [ 117.164160][T14060] REISERFS (device loop4): Using r5 hash to sort names [ 117.166054][T14060] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 117.180486][T14079] netlink: 'syz.0.4406': attribute type 1 has an invalid length. [ 117.186316][T14079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4406'. [ 117.241643][T14060] REISERFS warning (device loop4): reiserfs-15100 reiserfs_get_unused_objectid: no more object ids [ 117.247648][T14081] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 117.255342][T14081] ntfs3: loop1: Failed to load $Extend. [ 117.264270][T14091] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 117.276420][T14091] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.357546][T14099] xt_HMARK: spi-set and port-set can't be combined [ 117.366521][T14097] erofs: (device loop2): mounted with root inode @ nid 36. [ 117.376878][T14097] syz.2.4416: attempt to access beyond end of device [ 117.376878][T14097] loop2: rw=0, sector=48, nr_sectors = 16 limit=16 [ 117.582732][T14134] x_tables: duplicate entry at hook 2 [ 117.596738][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4432'. [ 117.661796][T14142] device sit0 entered promiscuous mode [ 117.683364][T14142] netlink: 'syz.2.4436': attribute type 1 has an invalid length. [ 117.688233][T14142] netlink: 'syz.2.4436': attribute type 3 has an invalid length. [ 117.962201][T14185] netlink: 'syz.0.4456': attribute type 3 has an invalid length. [ 118.040143][T14198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4463'. [ 118.041865][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4463'. [ 118.193598][T14212] set_capacity_and_notify: 16 callbacks suppressed [ 118.193614][T14212] loop2: detected capacity change from 0 to 4096 [ 118.196852][T14212] EXT4-fs: Ignoring removed orlov option [ 118.201538][T14212] EXT4-fs (loop2): Test dummy encryption mode enabled [ 118.231228][T14212] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 118.321438][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 118.370763][T14236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4478'. [ 118.420791][T14238] device ipip0 entered promiscuous mode [ 118.488577][T14250] loop4: detected capacity change from 0 to 8 [ 118.506111][T14250] SQUASHFS error: Unable to read directory block [629:26] [ 118.513638][T14248] team0: Port device syz_tun added [ 118.595444][T14260] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 118.597228][T14260] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 118.823689][T14286] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 118.874473][T14202] loop1: detected capacity change from 0 to 131072 [ 118.878800][T14202] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 118.880584][T14202] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 118.882243][T14297] x_tables: unsorted entry at hook 1 [ 118.885285][T14295] dlm: no locking on control device [ 118.893137][T14202] F2FS-fs (loop1): invalid crc value [ 118.920401][T14202] F2FS-fs (loop1): Found nat_bits in checkpoint [ 118.945882][T14202] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 118.947087][T14202] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 119.147532][T14329] loop3: detected capacity change from 0 to 1024 [ 119.282210][T14346] xt_TCPMSS: Only works on TCP SYN packets [ 119.346439][T14355] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 119.415125][T14326] loop4: detected capacity change from 0 to 32768 [ 119.417760][T14326] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4525 (14326) [ 119.429665][T14326] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.431755][T14326] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 119.433235][T14326] BTRFS info (device loop4): force clearing of disk cache [ 119.434592][T14326] BTRFS info (device loop4): force zlib compression, level 3 [ 119.447545][T14326] BTRFS info (device loop4): disabling free space tree [ 119.449361][T14326] BTRFS info (device loop4): max_inline at 0 [ 119.450449][T14326] BTRFS info (device loop4): enabling free space tree [ 119.451631][T14326] BTRFS info (device loop4): using free space tree [ 119.537764][T14326] BTRFS info (device loop4): enabling ssd optimizations [ 119.626771][ T4334] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.806888][ T4322] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4322) [ 120.066706][T14456] loop0: detected capacity change from 0 to 64 [ 120.077128][T14457] validate_nla: 10 callbacks suppressed [ 120.077138][T14457] netlink: 'syz.3.4580': attribute type 1 has an invalid length. [ 120.296147][T14444] loop1: detected capacity change from 0 to 32768 [ 120.301887][T14444] (syz.1.4575,14444,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 120.310645][T14444] (syz.1.4575,14444,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 120.321958][T14444] JBD2: Ignoring recovery information on journal [ 120.349360][T14482] loop0: detected capacity change from 0 to 4096 [ 120.362235][T14444] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 120.382705][T14482] ntfs3: loop0: Failed to load $Extend. [ 120.410419][T14444] (syz.1.4575,14444,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 120.413147][T14444] (syz.1.4575,14444,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 120.419931][T14444] (syz.1.4575,14444,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 120.421735][T14444] (syz.1.4575,14444,0):ocfs2_quota_read:201 ERROR: status = -5 [ 120.422858][T14444] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 4 [ 120.424632][T14444] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 120.426227][T14444] (syz.1.4575,14444,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 120.429368][T14444] (syz.1.4575,14444,0):ocfs2_mknod:314 ERROR: status = -5 [ 120.430919][T14444] (syz.1.4575,14444,0):ocfs2_mknod:502 ERROR: status = -5 [ 120.433113][T14444] (syz.1.4575,14444,0):ocfs2_create:676 ERROR: status = -5 [ 120.460819][T14482] ntfs3: loop0: ino=5, "/" directory corrupted [ 120.462503][T14482] ntfs3: loop0: ino=5, "/" directory corrupted [ 120.474283][ T4328] ocfs2: Unmounting device (7,1) on (node local) [ 120.871356][T14518] loop2: detected capacity change from 0 to 32768 [ 120.895550][T14518] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.897200][T14518] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 120.899225][T14518] BTRFS info (device loop2): force clearing of disk cache [ 120.900497][T14518] BTRFS info (device loop2): force zlib compression, level 3 [ 120.901723][T14518] BTRFS info (device loop2): disabling free space tree [ 120.902840][T14518] BTRFS info (device loop2): max_inline at 0 [ 120.903824][T14518] BTRFS info (device loop2): enabling free space tree [ 120.904889][T14518] BTRFS info (device loop2): using free space tree [ 120.951736][T14557] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 120.992958][T14551] loop1: detected capacity change from 0 to 4096 [ 121.030718][T14570] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.099881][T14518] BTRFS info (device loop2): enabling ssd optimizations [ 121.125283][T14551] syz.1.4624: attempt to access beyond end of device [ 121.125283][T14551] loop1: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096 [ 121.140499][T14551] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 121.198246][ T4338] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.336370][T14599] netlink: 'syz.4.4642': attribute type 11 has an invalid length. [ 121.782405][T14661] FAT-fs (loop2): Directory bread(block 64) failed [ 121.783622][T14661] FAT-fs (loop2): Directory bread(block 65) failed [ 121.784808][T14661] FAT-fs (loop2): Directory bread(block 66) failed [ 121.808004][T14661] FAT-fs (loop2): Directory bread(block 67) failed [ 121.817201][T14661] FAT-fs (loop2): Directory bread(block 68) failed [ 121.818707][T14661] FAT-fs (loop2): Directory bread(block 69) failed [ 121.819910][T14661] FAT-fs (loop2): Directory bread(block 70) failed [ 121.828524][T14661] FAT-fs (loop2): Directory bread(block 71) failed [ 121.830046][T14661] FAT-fs (loop2): Directory bread(block 72) failed [ 121.831201][T14661] FAT-fs (loop2): Directory bread(block 73) failed [ 121.856271][T14667] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 122.006902][T14663] jfs_lookup: iget failed on inum 32 [ 122.160801][T14693] __nla_validate_parse: 14 callbacks suppressed [ 122.160814][T14693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4684'. [ 122.258050][T14703] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 122.279421][T14671] __jfs_setxattr: xattr_size = 2175, new_size = 15199 [ 122.292207][T14710] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 122.294410][T14710] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 122.315674][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 122.575084][T14745] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 122.763338][T14770] netlink: 'syz.3.4722': attribute type 2 has an invalid length. [ 122.790105][T14774] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.901585][T14784] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 122.923781][T14784] ntfs: volume version 3.1. [ 122.970946][T14784] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 122.974365][T14784] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 122.977669][T14784] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to map page. [ 122.991482][T14784] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 122.993436][T14784] ntfs: (device loop0): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 123.021098][ T4335] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 123.070658][T14776] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 123.129790][T14808] UBIFS error (pid: 14808): cannot open "(null)", error -22 [ 123.153227][T14810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4740'. [ 123.229974][T14818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4745'. [ 123.275963][ T4328] ocfs2: Unmounting device (7,1) on (node local) [ 123.374040][T14833] set_capacity_and_notify: 10 callbacks suppressed [ 123.374051][T14833] loop4: detected capacity change from 0 to 4096 [ 123.422368][T14833] ntfs3: loop4: no free space to extend mft [ 123.427591][T14837] loop1: detected capacity change from 0 to 4096 [ 123.475267][T14837] ntfs: volume version 3.1. [ 123.544768][T14853] mmap: syz.3.4762 (14853): VmData 49250304 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 123.571188][T14858] kAFS: unparsable volume name [ 123.623165][T14868] SET target dimension over the limit! [ 123.627432][T14866] comedi comedi0: bad chanlist[0]=0x00000008 chan=8 range length=2 [ 123.872451][T14899] loop3: detected capacity change from 0 to 4096 [ 123.874110][T14899] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 123.881317][T14906] loop0: detected capacity change from 0 to 764 [ 123.891263][T14906] Symlink component flag not implemented [ 123.892391][T14906] Symlink component flag not implemented (128) [ 123.895206][T14899] ntfs: volume version 3.1. [ 123.959405][T14917] netlink: 'syz.1.4794': attribute type 2 has an invalid length. [ 124.013383][T14925] netlink: 652 bytes leftover after parsing attributes in process `syz.1.4798'. [ 124.145055][T14938] loop4: detected capacity change from 0 to 4096 [ 124.165392][ T4335] cgroup: fork rejected by pids controller in /syz0 [ 124.169314][T14938] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 124.224986][T14945] loop1: detected capacity change from 0 to 764 [ 124.227867][T14938] ntfs3: loop4: failed to convert "c46c" to cp437 [ 124.237979][T14912] loop2: detected capacity change from 0 to 32768 [ 124.239037][T14945] rock: directory entry would overflow storage [ 124.241264][T14945] rock: sig=0x4654, size=5, remaining=4 [ 124.263843][T14912] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.4791 (14912) [ 124.300612][T14912] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.302672][T14912] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 124.303956][T14912] BTRFS info (device loop2): force clearing of disk cache [ 124.305222][T14912] BTRFS info (device loop2): enabling auto defrag [ 124.306229][T14912] BTRFS info (device loop2): max_inline at 0 [ 124.307306][T14912] BTRFS info (device loop2): enabling disk space caching [ 124.322858][T14912] BTRFS info (device loop2): disk space caching is enabled [ 124.369891][T14940] loop3: detected capacity change from 0 to 32768 [ 124.396374][T14940] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 124.513634][ T4329] ocfs2: Unmounting device (7,3) on (node local) [ 124.531618][ T4335] team0: Port device syz_tun removed [ 124.533836][T14912] BTRFS info (device loop2): enabling ssd optimizations [ 124.536427][T14912] BTRFS info (device loop2): rebuilding free space tree [ 124.545675][T14912] BTRFS info (device loop2): disabling free space tree [ 124.546993][T14912] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.548997][T14912] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 124.622464][ T4338] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.695268][T14986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4820'. [ 124.727884][T14988] usb usb2: check_ctrlrecip: process 14988 (syz.1.4821) requesting ep 01 but needs 81 [ 124.729920][T14988] usb usb2: usbfs: process 14988 (syz.1.4821) did not claim interface 0 before use [ 124.839062][ T4340] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.842673][ T4340] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.845040][ T4340] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.846700][ T4340] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.848511][ T4340] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 124.849897][ T4340] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.877853][ T4321] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop2 scanned by udevd (4321) [ 125.011417][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.134635][T15032] raw_sendmsg: syz.1.4840 forgot to set AF_INET. Fix it! [ 125.140387][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.239298][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.251443][T14999] chnl_net:caif_netlink_parms(): no params data found [ 125.341875][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.352262][T14999] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.353633][T14999] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.355333][T14999] device bridge_slave_0 entered promiscuous mode [ 125.357259][T14999] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.358852][T14999] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.360402][T14999] device bridge_slave_1 entered promiscuous mode [ 125.368730][T14999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.371482][T14999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.386314][T14999] team0: Port device team_slave_0 added [ 125.391389][T14999] team0: Port device team_slave_1 added [ 125.397209][T14999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.399621][T14999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.403899][T14999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.408391][T14999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.409707][T14999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.414093][T14999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.436497][T15056] loop3: detected capacity change from 0 to 4096 [ 125.445378][T15056] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 125.450336][T14999] device hsr_slave_0 entered promiscuous mode [ 125.495015][T15038] loop4: detected capacity change from 0 to 32768 [ 125.498806][T14999] device hsr_slave_1 entered promiscuous mode [ 125.517969][T15056] ntfs3: loop3: ino=1b, "file0" attr_set_size [ 125.520021][T15056] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 125.531437][T15038] XFS (loop4): Mounting V5 Filesystem [ 125.548323][T14999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.549902][T14999] Cannot create hsr debugfs directory [ 125.598252][T15038] XFS (loop4): Ending clean mount [ 125.670706][ T4334] XFS (loop4): Unmounting Filesystem [ 125.674046][T15082] netlink: 'syz.1.4859': attribute type 21 has an invalid length. [ 125.675468][T15082] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4859'. [ 125.677026][T15082] netlink: 'syz.1.4859': attribute type 4 has an invalid length. [ 125.679104][T15082] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4859'. [ 125.747013][T15090] x_tables: unsorted entry at hook 2 [ 125.921309][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.922396][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.959855][T15115] Cannot find del_set index 4 as target [ 126.470329][T15169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4894'. [ 126.636554][T15154] XFS (loop3): Mounting V5 Filesystem [ 126.675784][T15154] XFS (loop3): Ending clean mount [ 126.686252][T15154] XFS (loop3): Quotacheck needed: Please wait. [ 126.722066][T15154] XFS (loop3): Quotacheck: Done. [ 126.741823][T15190] team0: Port device team_slave_0 removed [ 126.743114][T15190] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 126.746027][T15199] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4905'. [ 126.747862][T15199] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 126.752385][T15201] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4906'. [ 126.831541][ T4329] XFS (loop3): Unmounting Filesystem [ 126.878211][ T4345] Bluetooth: hci3: command 0x0409 tx timeout [ 127.007875][T15233] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 127.115096][T15241] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.123363][T14999] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 127.137123][T15241] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 232 with incorrect tag 520 [ 127.189503][T15251] netlink: 'syz.1.4924': attribute type 10 has an invalid length. [ 127.191074][T15251] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4924'. [ 127.297313][T14999] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 127.345349][T15251] netlink: 'syz.1.4924': attribute type 10 has an invalid length. [ 127.346881][T15251] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4924'. [ 127.349523][T15266] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4929'. [ 127.435435][T14999] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 127.496963][T15291] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 127.526213][T14999] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.724394][ T27] audit: type=1107 audit(139.818:6): pid=15316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 127.756973][T14999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.805172][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.806955][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.867871][T14999] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.876781][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.879144][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.880697][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.881846][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.883381][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.884989][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.886599][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.888005][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.916695][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.919264][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.923804][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.935013][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.941028][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.944981][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.952411][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.956263][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.965238][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.970935][T14999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.972869][T14999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.996313][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.998435][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.000144][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.217567][T15336] XFS (loop1): Mounting V5 Filesystem [ 128.259022][T15336] XFS (loop1): Ending clean mount [ 128.260720][T15336] XFS (loop1): Quotacheck needed: Please wait. [ 128.307979][T15336] XFS (loop1): Quotacheck: Done. [ 128.372174][ T4328] XFS (loop1): Unmounting Filesystem [ 128.397503][T14999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.412403][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.414108][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.437842][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.471044][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.536935][T14999] device veth0_vlan entered promiscuous mode [ 128.552503][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.554256][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.556643][T15374] nvme_fabrics: no handler found for transport hoop. [ 128.560633][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.562370][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.591461][T15330] set_capacity_and_notify: 5 callbacks suppressed [ 128.591471][T15330] loop4: detected capacity change from 0 to 131072 [ 128.594475][T15330] F2FS-fs (loop4): Corrupted extension count (65573 + 1 > 64) [ 128.595698][T15330] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 128.597341][T15330] F2FS-fs (loop4): invalid crc value [ 128.623700][T15330] F2FS-fs (loop4): Found nat_bits in checkpoint [ 128.664147][T15330] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 128.665495][T15330] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 128.670341][T15391] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 128.696596][T15330] F2FS-fs (loop4): access invalid blkaddr:0 [ 128.697622][T15330] CPU: 0 PID: 15330 Comm: syz.4.4956 Not tainted syzkaller #0 [ 128.698888][T15330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 128.700470][T15330] Call trace: [ 128.700955][T15330] dump_backtrace+0x1c4/0x1f0 [ 128.701743][T15330] show_stack+0x2c/0x3c [ 128.702437][T15330] __dump_stack+0x30/0x40 [ 128.703216][T15330] dump_stack_lvl+0xf4/0x15c [ 128.703997][T15330] dump_stack+0x1c/0x5c [ 128.704698][T15330] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 128.705580][T15330] sanity_check_extent_cache+0xcc/0x2e4 [ 128.706478][T15330] f2fs_iget+0x2d28/0x4768 [ 128.707194][T15330] f2fs_lookup+0x3f0/0x900 [ 128.707869][T15330] path_openat+0xc74/0x27a0 [ 128.708583][T15330] do_filp_open+0x198/0x38c [ 128.709341][T15330] do_sys_openat2+0x134/0x3fc [ 128.710118][T15330] __arm64_sys_openat+0x11c/0x150 [ 128.710936][T15330] invoke_syscall+0x98/0x290 [ 128.711674][T15330] el0_svc_common+0x13c/0x258 [ 128.712496][T15330] do_el0_svc+0x5c/0x134 [ 128.713189][T15330] el0_svc+0x58/0x128 [ 128.713873][T15330] el0t_64_sync_handler+0x84/0xf0 [ 128.714706][T15330] el0t_64_sync+0x18c/0x190 [ 128.747350][T15330] F2FS-fs (loop4): sanity_check_extent_cache: inode (ino=7) extent info [0, 0, 131072] is incorrect, run fsck to fix [ 128.753183][T15400] syz.1.4982 (15400): /proc/15398/oom_adj is deprecated, please use /proc/15398/oom_score_adj instead. [ 128.811670][T15407] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4986'. [ 128.813389][T15407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4986'. [ 128.826745][T15407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4986'. [ 128.833801][T14999] device veth1_vlan entered promiscuous mode [ 128.841645][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 128.843377][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 128.854567][T15411] netlink: 'syz.2.4989': attribute type 1 has an invalid length. [ 128.856740][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.874863][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.958743][ T4345] Bluetooth: hci3: command 0x041b tx timeout [ 129.030685][ T60] device hsr_slave_0 left promiscuous mode [ 129.059816][ T60] device hsr_slave_1 left promiscuous mode [ 129.116449][T15436] loop3: detected capacity change from 0 to 4096 [ 129.118469][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.119886][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.125949][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.127554][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.129764][ T60] device bridge_slave_1 left promiscuous mode [ 129.134070][T15436] ntfs3: loop3: ino=3, Correct links count -> 2. [ 129.137508][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.210365][ T60] device bridge_slave_0 left promiscuous mode [ 129.211572][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.312085][ T60] device veth1_macvtap left promiscuous mode [ 129.313460][ T60] device veth0_macvtap left promiscuous mode [ 129.410114][T15464] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5013'. [ 129.581400][ T60] bond2 (unregistering): Released all slaves [ 129.601608][ T60] bond1 (unregistering): Released all slaves [ 129.633977][T15458] loop4: detected capacity change from 0 to 32768 [ 129.645168][T15458] JBD2: Ignoring recovery information on journal [ 129.670565][T15458] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 129.753712][ T4334] ocfs2: Unmounting device (7,4) on (node local) [ 129.828706][T15504] loop3: detected capacity change from 0 to 64 [ 129.845912][T15504] overlayfs: failed to resolve './bus': -2 [ 130.023770][T15526] loop2: detected capacity change from 0 to 512 [ 130.030016][T15526] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 130.056789][T15526] UDF-fs: error (device loop2): udf_read_inode: (ino 19) failed ident=264 [ 130.115588][T15518] loop3: detected capacity change from 0 to 32768 [ 130.126688][T15518] JBD2: Ignoring recovery information on journal [ 130.139707][T15518] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 130.185050][ T4329] ocfs2: Unmounting device (7,3) on (node local) [ 130.480504][T15557] loop2: detected capacity change from 0 to 32768 [ 130.511012][T15557] JBD2: Ignoring recovery information on journal [ 130.536282][T15557] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 130.572359][ T4338] ocfs2: Unmounting device (7,2) on (node local) [ 130.734803][T15571] tmpfs: Bad value for 'nr_blocks' [ 131.038296][ T4340] Bluetooth: hci3: command 0x040f tx timeout [ 131.431265][ T60] team0 (unregistering): Port device team_slave_1 removed [ 131.611364][ T60] team0 (unregistering): Port device team_slave_0 removed [ 131.949599][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.118207][ T4345] Bluetooth: hci3: command 0x0419 tx timeout [ 133.399650][ T60] bond0 (unregistering): Released all slaves [ 133.694127][T14999] device veth0_macvtap entered promiscuous mode [ 133.697012][T14999] device veth1_macvtap entered promiscuous mode [ 133.700794][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.702565][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.704312][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5044'. [ 133.705890][T15558] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5057'. [ 133.784810][T14999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.787926][T14999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.793335][T14999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.802780][T14999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.804501][T14999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.806203][T14999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.817100][T14999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.819515][T14999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.826591][T14999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.832076][T15584] device veth5 entered promiscuous mode [ 133.833856][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.835623][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.844584][T14999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.846687][T14999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.856500][T14999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.858400][T14999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.860007][T14999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.881396][T14999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.883141][T14999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.884777][T14999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.887131][T14999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.906196][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.910131][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.915488][T14999] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.917089][T14999] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.933607][T14999] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.935239][T14999] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.985392][T15603] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5079'. [ 134.112029][T15614] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5084'. [ 134.220680][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.222131][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.224624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.246503][ T4388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.247979][ T4388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.252460][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.279701][T15633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5093'. [ 134.472441][T15664] loop4: detected capacity change from 0 to 512 [ 134.511979][T15664] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 134.537307][T15664] UDF-fs: error (device loop4): udf_read_inode: (ino 19) failed ident=264 [ 134.786546][T15706] loop0: detected capacity change from 0 to 512 [ 134.803774][T15706] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 134.838704][T15706] UDF-fs: error (device loop0): udf_read_inode: (ino 19) failed ident=264 [ 135.215929][T15742] loop3: detected capacity change from 0 to 32768 [ 135.232066][T15742] [ 135.232066][T15742] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.232066][T15742] [ 135.272760][ T4329] [ 135.272760][ T4329] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.272760][ T4329] [ 135.275488][ T4329] [ 135.275488][ T4329] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.275488][ T4329] [ 135.313832][T15777] loop1: detected capacity change from 0 to 512 [ 135.326267][T15780] CacheFiles: Empty directory specified [ 135.533540][T15808] netlink: 'syz.3.5172': attribute type 10 has an invalid length. [ 135.542870][T15808] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 135.547968][T15808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.783115][T15802] loop1: detected capacity change from 0 to 32768 [ 135.798989][T15802] (syz.1.5169,15802,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.801765][T15802] (syz.1.5169,15802,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.806789][T15837] netlink: 'syz.0.5186': attribute type 1 has an invalid length. [ 135.817859][T15837] netlink: 'syz.0.5186': attribute type 12 has an invalid length. [ 135.822817][T15802] JBD2: Ignoring recovery information on journal [ 135.824616][T15837] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5186'. [ 135.889287][T15802] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 135.925439][T15802] [ 135.925886][T15802] ====================================================== [ 135.927130][T15802] WARNING: possible circular locking dependency detected [ 135.928242][T15802] syzkaller #0 Not tainted [ 135.928983][T15802] ------------------------------------------------------ [ 135.930251][T15802] syz.1.5169/15802 is trying to acquire lock: [ 135.931365][T15802] ffff0000f4e65f48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 135.933613][T15802] [ 135.933613][T15802] but task is already holding lock: [ 135.934830][T15802] ffff0000fbce9538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x348/0xf0c [ 135.936478][T15802] [ 135.936478][T15802] which lock already depends on the new lock. [ 135.936478][T15802] [ 135.938202][T15802] [ 135.938202][T15802] the existing dependency chain (in reverse order) is: [ 135.939650][T15802] [ 135.939650][T15802] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 135.940981][T15802] down_read+0x64/0x300 [ 135.941849][T15802] ocfs2_init_acl+0x264/0x61c [ 135.942759][T15802] ocfs2_mknod+0x12b0/0x218c [ 135.943612][T15802] ocfs2_mkdir+0x19c/0x51c [ 135.944453][T15802] vfs_mkdir+0x314/0x4d8 [ 135.945277][T15802] do_mkdirat+0x1b8/0x3ec [ 135.946073][T15802] __arm64_sys_mkdirat+0x90/0xa8 [ 135.946970][T15802] invoke_syscall+0x98/0x290 [ 135.947868][T15802] el0_svc_common+0x13c/0x258 [ 135.948788][T15802] do_el0_svc+0x5c/0x134 [ 135.949588][T15802] el0_svc+0x58/0x128 [ 135.950344][T15802] el0t_64_sync_handler+0x84/0xf0 [ 135.951225][T15802] el0t_64_sync+0x18c/0x190 [ 135.952051][T15802] [ 135.952051][T15802] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 135.953494][T15802] down_read+0x64/0x300 [ 135.954305][T15802] ocfs2_start_trans+0x38c/0x6f4 [ 135.955304][T15802] ocfs2_modify_bh+0xd8/0x44c [ 135.956136][T15802] ocfs2_local_read_info+0x1054/0x13c4 [ 135.957155][T15802] dquot_load_quota_sb+0x68c/0x998 [ 135.958101][T15802] dquot_load_quota_inode+0x274/0x4dc [ 135.959092][T15802] ocfs2_enable_quotas+0x17c/0x3c4 [ 135.960038][T15802] ocfs2_fill_super+0x32f8/0x417c [ 135.961058][T15802] mount_bdev+0x264/0x35c [ 135.961889][T15802] ocfs2_mount+0x44/0x58 [ 135.962658][T15802] legacy_get_tree+0xd8/0x174 [ 135.963607][T15802] vfs_get_tree+0x90/0x278 [ 135.964434][T15802] do_new_mount+0x228/0x804 [ 135.965290][T15802] path_mount+0x5ac/0xe6c [ 135.966082][T15802] __arm64_sys_mount+0x4a0/0x5a0 [ 135.967046][T15802] invoke_syscall+0x98/0x290 [ 135.967895][T15802] el0_svc_common+0x13c/0x258 [ 135.968750][T15802] do_el0_svc+0x5c/0x134 [ 135.969532][T15802] el0_svc+0x58/0x128 [ 135.970360][T15802] el0t_64_sync_handler+0x84/0xf0 [ 135.971310][T15802] el0t_64_sync+0x18c/0x190 [ 135.972130][T15802] [ 135.972130][T15802] -> #2 (sb_internal#5){.+.+}-{0:0}: [ 135.973391][T15802] ocfs2_start_trans+0x20c/0x6f4 [ 135.974303][T15802] ocfs2_shutdown_local_alloc+0x1a0/0x858 [ 135.975355][T15802] ocfs2_dismount_volume+0x1f4/0x95c [ 135.976373][T15802] ocfs2_put_super+0x108/0x390 [ 135.977269][T15802] generic_shutdown_super+0x138/0x32c [ 135.978247][T15802] kill_block_super+0x78/0xe0 [ 135.979109][T15802] deactivate_locked_super+0xb4/0x128 [ 135.980094][T15802] deactivate_super+0xe4/0x104 [ 135.981022][T15802] cleanup_mnt+0x3a8/0x430 [ 135.981853][T15802] __cleanup_mnt+0x20/0x30 [ 135.982708][T15802] task_work_run+0x1f4/0x280 [ 135.983533][T15802] do_notify_resume+0x20f8/0x2c84 [ 135.984434][T15802] el0_svc+0x98/0x128 [ 135.985211][T15802] el0t_64_sync_handler+0x84/0xf0 [ 135.986119][T15802] el0t_64_sync+0x18c/0x190 [ 135.987004][T15802] [ 135.987004][T15802] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 135.988765][T15802] down_write+0x5c/0x88 [ 135.989577][T15802] ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 135.990688][T15802] ocfs2_reserve_clusters_with_limit+0x290/0xa3c [ 135.991879][T15802] ocfs2_reserve_suballoc_bits+0x688/0x3d40 [ 135.992900][T15802] ocfs2_reserve_new_metadata_blocks+0x340/0x7e4 [ 135.994056][T15802] ocfs2_extend_dir+0x9e8/0x3c48 [ 135.995004][T15802] ocfs2_prepare_dir_for_insert+0x2aa8/0x4a80 [ 135.996082][T15802] ocfs2_mknod+0x794/0x218c [ 135.996937][T15802] ocfs2_mkdir+0x19c/0x51c [ 135.997768][T15802] vfs_mkdir+0x314/0x4d8 [ 135.998544][T15802] do_mkdirat+0x1b8/0x3ec [ 135.999374][T15802] __arm64_sys_mkdirat+0x90/0xa8 [ 136.000259][T15802] invoke_syscall+0x98/0x290 [ 136.001105][T15802] el0_svc_common+0x13c/0x258 [ 136.001953][T15802] do_el0_svc+0x5c/0x134 [ 136.002763][T15802] el0_svc+0x58/0x128 [ 136.003469][T15802] el0t_64_sync_handler+0x84/0xf0 [ 136.004329][T15802] el0t_64_sync+0x18c/0x190 [ 136.005141][T15802] [ 136.005141][T15802] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 136.006925][T15802] __lock_acquire+0x2808/0x6634 [ 136.007811][T15802] lock_acquire+0x20c/0x638 [ 136.008670][T15802] down_write+0x5c/0x88 [ 136.009453][T15802] ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 136.010516][T15802] ocfs2_reserve_new_metadata_blocks+0x340/0x7e4 [ 136.011696][T15802] ocfs2_init_xattr_set_ctxt+0x310/0x7dc [ 136.012734][T15802] ocfs2_xattr_set+0x978/0xf0c [ 136.013661][T15802] ocfs2_set_acl+0x410/0x4cc [ 136.014532][T15802] ocfs2_iop_set_acl+0x178/0x258 [ 136.015482][T15802] posix_acl_xattr_set+0x2f8/0x394 [ 136.016406][T15802] __vfs_setxattr+0x374/0x390 [ 136.017315][T15802] __vfs_setxattr_noperm+0x120/0x56c [ 136.018386][T15802] __vfs_setxattr_locked+0x1e8/0x214 [ 136.019414][T15802] vfs_setxattr+0x158/0x2a8 [ 136.020301][T15802] setxattr+0x258/0x2d8 [ 136.021147][T15802] path_setxattr+0x130/0x260 [ 136.022026][T15802] __arm64_sys_setxattr+0xc4/0xe0 [ 136.022963][T15802] invoke_syscall+0x98/0x290 [ 136.023773][T15802] el0_svc_common+0x13c/0x258 [ 136.024635][T15802] do_el0_svc+0x5c/0x134 [ 136.025489][T15802] el0_svc+0x58/0x128 [ 136.026235][T15802] el0t_64_sync_handler+0x84/0xf0 [ 136.027215][T15802] el0t_64_sync+0x18c/0x190 [ 136.028062][T15802] [ 136.028062][T15802] other info that might help us debug this: [ 136.028062][T15802] [ 136.029736][T15802] Chain exists of: [ 136.029736][T15802] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 136.029736][T15802] [ 136.032663][T15802] Possible unsafe locking scenario: [ 136.032663][T15802] [ 136.033983][T15802] CPU0 CPU1 [ 136.034932][T15802] ---- ---- [ 136.035849][T15802] lock(&oi->ip_xattr_sem); [ 136.036628][T15802] lock(&journal->j_trans_barrier); [ 136.038027][T15802] lock(&oi->ip_xattr_sem); [ 136.039218][T15802] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4); [ 136.040478][T15802] [ 136.040478][T15802] *** DEADLOCK *** [ 136.040478][T15802] [ 136.041841][T15802] 3 locks held by syz.1.5169/15802: [ 136.042730][T15802] #0: ffff0000d9490460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 136.044280][T15802] #1: ffff0000fbce9808 (&type->i_mutex_dir_key#13){+.+.}-{3:3}, at: vfs_setxattr+0x138/0x2a8 [ 136.046037][T15802] #2: ffff0000fbce9538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x348/0xf0c [ 136.047698][T15802] [ 136.047698][T15802] stack backtrace: [ 136.048677][T15802] CPU: 0 PID: 15802 Comm: syz.1.5169 Not tainted syzkaller #0 [ 136.049939][T15802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 136.051569][T15802] Call trace: [ 136.052129][T15802] dump_backtrace+0x1c4/0x1f0 [ 136.052911][T15802] show_stack+0x2c/0x3c [ 136.053620][T15802] __dump_stack+0x30/0x40 [ 136.054343][T15802] dump_stack_lvl+0xf4/0x15c [ 136.055119][T15802] dump_stack+0x1c/0x5c [ 136.055860][T15802] print_circular_bug+0x148/0x1b0 [ 136.056723][T15802] check_noncircular+0x264/0x2f8 [ 136.057587][T15802] __lock_acquire+0x2808/0x6634 [ 136.058407][T15802] lock_acquire+0x20c/0x638 [ 136.059162][T15802] down_write+0x5c/0x88 [ 136.059834][T15802] ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 136.060801][T15802] ocfs2_reserve_new_metadata_blocks+0x340/0x7e4 [ 136.061857][T15802] ocfs2_init_xattr_set_ctxt+0x310/0x7dc [ 136.062772][T15802] ocfs2_xattr_set+0x978/0xf0c [ 136.063551][T15802] ocfs2_set_acl+0x410/0x4cc [ 136.064371][T15802] ocfs2_iop_set_acl+0x178/0x258 [ 136.065208][T15802] posix_acl_xattr_set+0x2f8/0x394 [ 136.066066][T15802] __vfs_setxattr+0x374/0x390 [ 136.066877][T15802] __vfs_setxattr_noperm+0x120/0x56c [ 136.067779][T15802] __vfs_setxattr_locked+0x1e8/0x214 [ 136.068629][T15802] vfs_setxattr+0x158/0x2a8 [ 136.069427][T15802] setxattr+0x258/0x2d8 [ 136.070154][T15802] path_setxattr+0x130/0x260 [ 136.070950][T15802] __arm64_sys_setxattr+0xc4/0xe0 [ 136.071808][T15802] invoke_syscall+0x98/0x290 [ 136.072583][T15802] el0_svc_common+0x13c/0x258 [ 136.073362][T15802] do_el0_svc+0x5c/0x134 [ 136.074068][T15802] el0_svc+0x58/0x128 [ 136.074702][T15802] el0t_64_sync_handler+0x84/0xf0 [ 136.075526][T15802] el0t_64_sync+0x18c/0x190 [ 136.097499][ T4328] ocfs2: Unmounting device (7,1) on (node local)